Re: Repair IE 6.0 in XP?

From: Jim Byrd (jrbyrd_at_spamlessadelphia.net)
Date: 06/15/04 

Date: Mon, 14 Jun 2004 20:25:04 -0700

No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie 

-- 
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
 In news:F775DBDF-3734-426F-A892-9826E56FD687@microsoft.com,
xumoe <xumoe@discussions.microsoft.com> typed:
> Jim, Thank you so much for the info you have provided.  I'm starting to go
to
> work now.  Unfortunately, after I downloaded IE 6 SP1, I tried to install
and got
> an error  message as follows: "A previous installation has pending work
requiring
> a reboot.  You need to restart your computer to complete that installation
before
> running Internet Explorer Setup.  Setup will now close."  I click OK; it
closes.
> Then I reboot and try again. It fails with the same message....
>
> In looking back at my notes from May 8, 2004, I see and I remember
downloading
> and trying to install IE6 SP1 and getting a messagfe about "not passing
Logo
> Testing..."  IE6 SP1 did not fully install.  But, since then, I have
reinstalled
> XP, and applied all the Automatic Updates.
>
> I'm thiniking that I should reinstall XP again, and then do all that you
> suggested.  Do you agree.  Or  do you have another suggestion?
>
> Thanks.
>
>> Hi Moe - You need to download and install SP1 for IE6, then add any
rollup
>> "hotfixes" identified by Windows Update.
>>
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx
>>
>> You can check as to your OS version by running    Start|Run  enter
msinfo32
>> System Summary, Version will show you whether you have XPHE  SP1
installed.
>>
>>
>> Then I would suggest that you do the following:
>>
>> There is substantial possibility of malware.  You might want go to this
page
>> at Jim Eshelman's site, here:  http://aumha.org/a/noads.htm or here:
>> http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
>> patient), while an analysis of a number of possible parasites on your
>> machine will be made to help you identify and remove them.  NOTE:  You
will
>> need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
>> Blocking software which interferes with Java Scripting for this scan to
>> work.  You should get a message between the two lines of **** giving the
>> results of the scan.
>>
>> Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that
order).
>> Do the following:
>>
>>
>>
>> Before you try to remove spyware using any of the programs below,
download a
>> copy of LSPFIX from any of the following sites:
>>
>> http://www.cexx.org/lspfix.htm
>> http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K
or
>> XP)
>>
>>
>> The process of removing certain malware may kill your internet
connection.
>> If this should occur, this program, LSPFIX, will enable you to regain
your
>> connection.
>>
>>
>>
>> Download, UPDATE before running, and run:
>> http://209.133.47.200/~merijn/files/CWShredder.exe to remove the
parasite.
>> Be sure to close all instances of IE and OE.   You may also get it here
if
>> that link is blocked:
http://www.zerosrealm.com/downloads/CWShredder.zip
>>
>> BE SURE that you get v.158 or later!
>>
>> You will need to show Hidden files first and then at the end clear the
>> malware garbage from your System Restore backups after you've cleaned up.
>> It's best to perform CWShredder (and most other malware fixers too) from
>> Safe mode and then reboot. AFTER cleaning things up, then you can disable
>> and then re-enable System Restore.  See ******** below.
>>
>> The following links give instructions on how to do these various
functions:
>>
>>
>> HOW TO Restart in Safe Mode
>>
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406>
>>
>> HOW TO Enable Hidden Files
>>
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339>
>>
>> HOW TO Disable/Flush System Restore  (do this at the end AFTER cleaning
or
>> use the suggested procedure for XP at the ******'s)
>>
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039>
>> (WinXP)
>>
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239>
>> (WinME)
>>
>>
>>
>> Then download and run:
>> http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
>> tabs and remove any restrictions that the parasite has put in place.
>>
>> Now download and run:
>> http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
>> your search functions if they've been affected (as they probably will
have
>> been).
>>
>>
>> Be sure that you also download and install hotfix Q816093, here:
>>
>> http://support.microsoft.com/?kbid=816093
>>
>> which blocks the exploit upon which this parasite family depends.
>>
>>
>>
>> However, this also indicates that you may have acquired some other
malware
>> along the way. If you go to this page at Jim Eshelman's site, here:
>> http://aumha.org/a/noads.htm and wait a little bit (be patient), an
analysis
>> of a number of possible parasites on your machine will be made to help
you
>> identify and remove them. NOTE: You will need to disable Ad Blocking in
Zone
>> Alarm 3.x, if present or any other Ad Blocking software which interferes
>> with Java Scripting for this scan to work. You should get a message
between
>> the two lines of **** giving the results of the scan.
>>
>> Get Ad-Aware 6.0, Build 181 or later, here:
>> http://www.lavasoftusa.com/support/download/.  UPDATE and run this
regularly
>> to get rid of most "spyware/hijackware" on your machine.   If it has to
fix
>> things, be sure to re-boot and rerun AdAware again and repeat this cycle
>> until you get a clean  scan.  The reason is that it may have to remove
>> things which are currently "in use" before it can then clean up others.
>>
>> Another excellent program for this purpose is SpyBot Search and Destroy
>> available here:  http://security.kolla.de/  SpyBot Support Forum here:
>> http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi.   I
recommend
>> using both normally.  After UPDATING and fixing things with SpyBot S&D,
be
>> sure to re-boot and rerun SpyBot again and repeat this cycle until you
get a
>> clean "no red" scan.  The reason is that SpyBot sometimes has to remove
>> things which are currently "in use" before it can then clean up others.
>>
>> Note that sometimes you need to make a judgement call about what these
>> programs report as spyware. See here, for example:
>> http://www.imilly.com/alexa.htm
>>
>> Both of these programs should normally be UPDATED and run after doing any
>> other fix such as CWShredder and, as a minimum, normally at least once a
>> week.
>>
>>
>>
>> If they don't fix it then start here:
>>
>> Download HijackThis, free, here:
>> http://209.133.47.200/~merijn/files/HijackThis.exe  (Always download a
new
>> fresh copy of HijackThis [and CWShredder also] - It's UPDATED
frequently.)
>> You may also get it here if that link is blocked:
>>
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
>>
>> In Windows Explorer, click on Tools|Folder Options|View and check "Show
>> hidden files and folders"  and uncheck  "Hide protected operating system
>> files".  (You may want to restore these when you're all finished with
>> HijackThis.)
>>
>> Unzip the downloaded HijackThis to any convenient folder, start it then
>> press Scan. Click on SaveLog when it's finished which will create
>> hijackthis.log. Now click the Config button, then Misc Tools and click on
>> Generate StartupList.log which will create Startuplist.txt
>>
>> Then go to one of the following forums:
>>
>> Spyware and Hijackware Removal Support, here:
>> http://216.180.233.162/~swicom/forums/
>>
>> or Net-Integration here:
>>
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi?s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949
>>
>> or Tom Coyote here:  http://forums.tomcoyote.org/index.php?act=idx
>>
>> Sign in, then copy and paste both files into a message asking for
>> assistance, Someone will answer with detailed instructions for the
removal
>> of your parasite(s).
>>
>>
>> *******
>> ONLY IF you've successfully eliminated the malware, you can now make a
new,
>> clean Restore Point and delete any previously saved (possibly infected)
>> ones. The following suggested approach is courtesy of Gary Woodruff:  For
XP
>> you can run a Disk Cleanup cycle and then look in the More Options tab.
The
>> System Restore option removes all but the latest Restore Point. If there
>> hasn't been one made since the system was cleaned you should manually
create
>> one before dumping the old possibly infected ones.
>> *******
>>
>>
>> Once you get this cleaned up, you might want to consider installing the
>> SpywareBlaster and SpywareGuard here to help prevent this kind of thing
from
>> happening in the future:
>>
>> http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware
Active
>> X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
>> memory load - but keep it UPDATED) The latest version as of this writing
>> will prevent installation or prevent the malware from running if it is
>> already installed, and it provides information and fixit-links for a
variety
>> of parasites.
>>
>> http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts
to
>> install malware) Keep it UPDATED.  Both Very Highly Recommended
>>
>>
>> Finally, go to Windows Update and ensure that ALL Critical updates are
>> installed.
>>
>>
>> --
>> Please respond in the same thread.
>> Regards, Jim Byrd, MS-MVP
>>
>>
>>
>>  In news:82A75CF0-9239-48B3-AB82-7FE1413661CC@microsoft.com,
>> xumoe <xumoe@discussions.microsoft.com> typed:
>>> About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107.  Update Version
Q37009,
>>> Q32894.  I've nerver specifically installed XP SP1.  I've been assuming
>> I'm at
>>> SP1 level just because of all the Hot fixes in the Add/Remove Programs
>> list that
>>> refer to SP1. All updates I've installed are from the Auto Update
>> functionality
>>> of XP.  I belive I installed all that have been sent.
>>>
>>>> Hi Moe - I'm more than a little confused about what you have installed
>> and
>>>> what you've done.  Do you have Win XP HE, SP1 installed w/ ALL current
>>>> updates from Windows Update?  A number of the Q's you cite are
installed
>> as
>>>> part of Windows XP SP1.  Do you have IE6 SP1 installed?  (In IE6 click
on
>>>> Help|About Internet Explorer and note what it says next to Update
>> Versions:
>>>> It should be something like     ;SP1; Q832894; Q330994; Q831167     if
>> SP1
>>>> and the latest "rollups" are installed.)
>>>> --
>>>> Please respond in the same thread.
>>>> Regards, Jim Byrd, MS-MVP
>>>>
>>>>
>>>>
>>>>  In news:9E1DF5FE-6248-42AD-8AAF-AA428BCE37DB@microsoft.com,
>>>> xumoe <xumoe@discussions.microsoft.com> typed:
>>>>> Jim, I downloaded and ran qfecheck.  It listed seveal hotfixes that
>>>> "should be
>>>>> reinstalled, such as, Q308677, Q312370, Q312484,  Q314147, and others.
>>>> How do I
>>>>> get them and apply them?  When I check the MS Download Site, my search
>>>> yields no
>>>>> results.
>>>>>
>>>>> FYI.  I'm on XP Home Edition 5.1.2600 from Gateway.  To fix my
original
>> IE
>>>>> problem, I reinstalled XP from the 2 year old  System Disk and applied
all MS
>>>>> updates that I was notified about.  IE 6.0 continues to fail.  I've
run
>>>> spybot.
>>>>> I have maintained Norton AV for over 2 years, MS Automatic Updates.  I
>>>> connect to
>>>>> 2 VPN's without problems.  Is it possible the "explorer" program is
not
>>>> corrupt,
>>>>> that I just have some settings wrong?  When I use Netscape Navigator,
>>>> everything
>>>>> seems to work fine.  The articles I referred to prompting me to
reinstall XP
>>>>> are
>>>>> MSKN 318378, 315341.  The one thing that was good about the reinstall
is
>>>> it fixed
>>>>> my corrupted WMI.  I threw all this in, just in case you know of users
>>>> with
>>>>> similar problems.  Is it reasonable for me to try to install stall XP
from an
>>>>> OEM
>>>>> system disk that comes with a laptop I just purchased for my son?
>>>>>
>>>>>> Hi PLC - There is no direct Repair function for IE6 in XP.  Here are
>> some
>>>>>> alternatives:
>>>>>>
>>>>>>
>>>>>> 1.  With XP you need to go to Start|Run and type "sfc /scannow"
(without the
>>>>>> quotes and notice the space between the c and the /.)  Have your XP
CD
>>>> handy
>>>>>> and be prepared to go get a cup of coffee - it takes a while.  This
will do
>>>>>> the same thing as Repair IE6 for XP but a lot more, that is find any
>>>> corrupt
>>>>>> system files and replace them.  It does not, however, re-register the
>>>>>> various software components (except possibly the ones it replaces?)
>>>> AFAIK.
>>>>>>
>>>>>> Be aware that under certain circumstances (Win2k before SP4 - see
mskb
>>>>>> 814510,
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
>>>>>> can erroneously overwrite (restore over) previously installed files
>> from
>>>>>> certain "hotfixes" which will then need to be re-installed.  To check
>> for
>>>>>> this, after running sfc, open a Cmd window and enter "qfecheck /v
>> /l:c:\"
>>>>>> (without the quotes).  If you don't have qfecheck installed, it can
be
>>>>>> obtained for XP here:
>>>>>> http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and
for
>>>>>> Win2k, obtain qfecheck here:
>>>>>> http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
>>>>>>
>>>>>>
>>>>>>
>>>>>> 2.  Another alternative that works on Win2k and may or may not work
on
>> XP
>>>>>> (but probably does - I've heard both stories), for just IE6 repair if
>> you
>>>>>> don't have IE6 listed in Add-Remove Programs, then in Start|Run then
>>>> enter
>>>>>>
>>>>>> "rundll32 setupwbv.dll,IE6Maintenance"
>>>>>>
>>>>>> without the quotes, exactly as shown, and select the appropriate
entry.
>>>>>>
>>>>>>
>>>>>>
>>>>>> 3.  If you find that you need to do a re-install of IE6 then you can
>>>>>> consider the following,    I can't verify this for XP (I'm Win2k - it
>>>> works
>>>>>> there, and I've had good reports from XP users), but you might want
to
>>>> give
>>>>>> it a try at your own risk.  Again, enter this at Start|Run without
the
>>>>>> quotes and be careful about the spacing:
>>>>>>
>>>>>> "rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
>>>>>> C:\windows\inf\ie.inf"
>>>>>>
>>>>>>
>>>>>>
>>>>>> 4.  Lastly, here is a link to a MSKB article about re-installing
>> IE6/OE6:
>>>>>>
>>>>>> How to Reinstall or Repair Internet Explorer and Outlook Express in
>>>> Windows
>>>>>> XP (Q318378)
>>>>>> http://support.microsoft.com/?id=kb;en-us;Q318378
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Please respond in the same thread.
>>>>>> Regards, Jim Byrd, MS-MVP
>>>>>>
>>>>>>
>>>>>>
>>>>>>  In news:1bdeb01c450f8$f47200c0$a001280a@phx.gbl,
>>>>>> plc <anonymous@discussions.microsoft.com> typed:
>>>>>>> How do I repair IE 6.0 when it's not listed in the
>>>>>>> add/remove programs in control panel?  OS WinXP.