Problem with IE6 - probably a relic of LOP Spyware

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Steve (steve.withnell_at_btinternet.com)
Date: 08/03/04 

Date: Tue, 3 Aug 2004 23:03:35 +0100

I'm running XP Home edition on a 2.6G Pentium, 160G Hard drive.

I use upto date version of ad-aware and NIS 2004, which seem pretty good at
keeping the machine clean.

However, I had an IE toolbar appear which seemed to be associated with LOP.
After some effort I got rid of the toolbar, but now there is a "relic" left
over. If I enter a URL which is "not found" I still get a screen
advertising loads of links.

This is driving me nuts!

Using Filemon I've found these references which appear pertintent:

22:42:02 IEXPLORE.EXE:2164 OPEN C:\DOCUME~1\STEPHE~1\LOCALS~1\Temp\PartMeal
Global.htm FILE NOT FOUND Options: Open Access: All

and this:

22:42:02 IEXPLORE.EXE:2164 CREATE C:\DOCUME~1\STEPHE~1\LOCALS~1\Temp\Warn
fast.exe SUCCESS Options: OverwriteIf Access: All

If I rename the \temp\ folder to an alternative IE6 works properly.

However, I cannot find the two files referenced above in the folder.

This thing is also sneaky.

Here is the URL that pops up in IE when I enter a bad URL (www.warco.co.uk
is not available just now so returns an error):

C:\Documents and Settings\my name\Local Settings\temp\PartMeal
Global.htm#http://www.warco.co.uk/

But if I have an explorer window open pointing at this \temp\ folder IE6
shuts down!

NIS 2004 isn't reporting a problem on a full system scan in safe mode and
neither does ad-aware.

ANy help appreciated

Best Regards

Steve

Relevant Pages

  • IE6 problem - appears to be associated with LOP toolbar
    ... I use an upto date version of ad-aware and NIS 2004, ... If I rename the \temp\ folder to an alternative IE6 works properly. ... I cannot find the two files referenced above in the folder. ...
    (microsoft.public.security.virus)
  • Re: Websites Cant Save To Content.IE5 Folder
    ... Try undoing all changes you made and disabling all protection settings you'd enabled using Ad-aware SE Pro. ... (Most anti-malware experts recommend uninstalling/not using Webshots, Bill, and I suspect Ad-aware SE Pro is in agreement here, hence the problems.) ... >> Content.IE5 folder. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Websites Cant Save To Content.IE5 Folder
    ... Did you scan with Ad-aware SE v1.06 and Spybot v1.4 and check for/install updates for each before doing so? ... Every time an IE site tries to download to that folder now, I receive an error similiar to this one that came ... While it did find 5 tracking cookies, removal of them did not resolve the issue. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Hijack Problem Sol;ved?
    ... Spybot Search and Destroy. ... Close ALL windows except Spybot S&D ... I note that you already have Ad-Aware installed. ... Please move HiJackThis.exe to a permanent folder. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: [hlp] C:WINDOWSsystem32 at startup, nothing working so far
    ... running IE after you close the folder, ... so maybe it's the entry for Ad-Aware. ... I also would like for you to get and install the following ... But it may *NOT* need the quote marks. ...
    (alt.os.windows-xp)