Re: IE opens automatically

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: JG (JG_at_discussions.microsoft.com)
Date: 10/11/04


Date: Mon, 11 Oct 2004 12:37:06 -0700

Jan,
Thanks. I reran Ad-aware and Spybot and also ran CWShredder and Sysclean.
Seems to be working because no more automatic opening of browser and just a
few regular popups not caught by Google popup blocker. If problem recurs,
I'll go the next step and post a HijackThis log for expert analysis.
JG

"Jan Il" wrote:

> Hi JG :-)
>
> You may have a hijacker, malware, spyware or parasites on your system
> causing this problem. Thus, in addition to running your updated anti-virus
> program, you should do the following to be sure none of these are present on
> your system. Although you may have already run one or more of the programs,
> please do so again according to the instructions below. Some variants of
> malware can replicate themselves over and over if not removed properly.
> Please follow all instructions carefully to be sure your system is
> thoroughly cleaned:
>
> Dealing with Unwanted Spyware and Parasites:
> http://mvps.org/winhelp2002/unwanted.htm
> Be sure to run CWShredder, Ad-aware and Spybot.
> Also be sure to use the HijackThis. Please do not post your log to this
> newsgroup, but to the SpywareInfo or the Aumha HiJackThis forums
> http://forum.aumha.org/viewforum.php?f=30, to allow the experts there to
> evaluate your log and advise you of the necessary steps to clean your
> system.
>
> CAUTION!!!!! Before you try to remove spyware using any of the programs
> below, download a copy of LSPFIX from any of the following sites:
> http://www.cexx.org/lspfix.htm
> http://www.spychecker.com/program/winsockxpfix.html
> (if your OS is Win2k or XP) The process of removing certain malware may kill
> your internet connection. If this should occur, this program, LSPFIX, will
> enable you to regain your connection.
>
> Also, get a copy of WINSOCKXPFIX available at:
> http://www.spychecker.com/program/winsockxpfix.html
> and
> WinsockXP Fix- WinXP
> http://www.spychecker.com/program/winsockxpfix.html
> Also, with instructions, at
> http://www.iup.edu/house/resnet/winfix.shtm
> also
> From LavaSoft- all versions of Windows-
> http://digital-solutions.co.uk/lavasoft/whndnfix.zip
> also ....
> (NOTE: It is reported that in XP SP2, the command netsh winsock reset
> will fix this problem without the need for these programs.)
>
> or ........
>
> Winsock Fix Utility
> http://www.dfwonline.net/files/WinsockFix.zip
>
> Also.........
>
> Courtesy of Jim Byrd -
>
> Download Sysclean.com, from Trend Micro, here:
> http://www.trendmicro.com/download/dcs.asp along with the latest pattern
> file, here:
> http://www.trendmicro.com/download/pattern.asp
> Be sure to read the "How-to" info here:
> http://www.trendmicro.com/ftp/products/tsc/readme.txt
> You might also want to get Art's updater, SYS-UP.Zip, here for future
> updating of these: http://home.epix.net/~artnpeg/.
> (If you download and use the updater from the beginning, it will
> automatically handle downloading the other files. Place them in a dedicated
> folder after appropriate unzipping, and then run. This scan may take a long
> time, as Sysclean is VERY extensive and thorough
>
> and......
>
> NOTE: If you can not download these programs from the Internet, if your PC
> has CD read capabilities, go to another computer with CD-ROM burning
> capabilities. Create a folder on the hard drive of the other computer called
> HOLD, download the programs to that folder, then burn that folder to a CD.
> Copy the HOLD folder to your HD and then install the programs from there
> and run them. After you have IE access again, update all programs where
> possible to get the latest definitions and run them again in Safe Mode to be
> sure there are no lingering items on the system.
>
> also...........
>
> Additional information on how to protect your PC:
> The Parasite Fight http://www.aumha.org/a/quickfix.htm
> More security tips at http://www.aumha.org/a/parasite.htm
> Bugs, Glitches & Stuffups: http://www.mvps.org/inetexplorer/Darnit.htm
>
> So how did I get infected in the first place?
> http://boards.cexx.org/viewtopic.php?t=957&start=0&postdays=0&postorder=asc&highlight=&sid=53751d8ff5915261af727df08e66ce0d
> or
> http://snipurl.com/980t
>
>
> If these steps do not resolve your problem, please post back to this thread
> with the details and any error messages.
>
> Hope this helps
>
> Jan :)
> Smiles are meant to be shared,
> that's why they're so contagious.
>
> Please reply to the newsgroup so others may benefit.
> Replies are posted only to the newsgroup for the benefit or other readers.
>
> How to make a good newsgroup post:
> http://www.dts-l.org/goodpost.htm
>
>
> <anonymous@discussions.microsoft.com> wrote in message
> news:2b4701c4ad47$60297730$a601280a@phx.gbl...
> > IE opens automatically every few minutes with an add.
> > These seem to be coming from adserver.com. Sometimes it
> > shows an ads1.revenue, ads2.revenue, etc. address. I've
> > cleaned with Lavasoft Ad-Aware and Spybot-S&D, and its
> > still happening. What should I do next?
>
>
>



Relevant Pages

  • Re: mshtml.dll, shlwapi.dll, shdocvw.dll errors
    ... > You may have a hijacker, malware, spyware or parasites on your system ... download a copy of LSPFIX from any of the following sites: ... Create a folder on the hard drive of the other computer called ... > Please reply to the newsgroup so others may benefit. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: IE6 Crashing Unexpectadely
    ... > Dealing with Unwanted Spyware and Parasites: ... download a copy of LSPFIX from any of the following sites: ... Create a folder on the hard drive of the other computer called ... > Please reply to the newsgroup so others may benefit. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: OE6 newsgroup reader problem...
    ... OE6 newsgroup is 90 days. ... to a user created local folder? ... at a time", that is, to download all the headers again. ... being monitored by the .dbx itself. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Application Error
    ... After spyware or malware is removed from your system, ... download a copy of ... >that you can have a clear HiJackThis Log for the experts ... Create a folder on the hard drive of the ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: internet explorer browser problem
    ... > select all of my hotmail. ... Dealing with Unwanted Spyware and Parasites: ... Download Sysclean.com, from Trend Micro, here: ... Please reply to the newsgroup so others may benefit. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)