Internet Browser Problem! Please HELP!

U

Untitled

New Member
For a while now i've been having a problem opening websites such as the ones that are displayed under Google's Sponsored Results as well as the download section of any software from download.com.
I get a page that looks like this and nothing happens afterwards:
http://img158.imageshack.us/img158/58/screen2xs4.jpg
I've been unable to solve the problem even when i try using IE and i think that some Ab-blocking application may be causing this, i'm not 100% sure though.
How can i make the sites work again and how can i get rid of this error permanently?
:confused:
 
Last edited:
It sounds more like a browser hijacker. One article is good to review if you just happen to be seeing "about blank" in the address bar when this happens. http://www.free-web-browsers.com/remove-about-blank.shtml

If you have Google or other tool bars added to the IE browser that can let adwares and spywares come in at times. HiJack This is one tool used for locating and removing things found in the system registry itself. Once you have this tool installed you can post a log for examination. You can download the free utility at http://www.spychecker.com/program/hijackthis.html

Some other freeware programs for removing unwanted items are found at the following links.
AdAware SE Personal adware remover and occasional browser hijacker tool is found at http://www.lavasoft.com
AVG 7.1 Free edition located spywares as well as pc viruses can be found at http://free.grisoft.com/doc/2/lng/us/tpl/v5
Grisoft recently bought out Ewido which works well as a compliment to AdAware and AVG. That is also a free program found at http://free.grisoft.com/doc/ewido-anti-spyware-free/lng/us/tpl/v5
 
Still no luck for me!
I've cleaned out my system using Ad-Aware, Spybot S&D as well as Spyware Doctor. No Luck:mad: . I've also found out that i'm unable to use the search feature on download.com because of this.
I'm just finding it strange that IE as well as Firefox have the same problem...
Any more ideas???
:confused:
 
What other programs do you have running besides the one you name here? On a few occasions complaints are heard on Norton Security Suite and a few others due to being intrusive. If you are using the Google toolbar I could advise removing that to see if that is the problem. If your security settings are up too high that can hamper things on IE. You could also be seeing an unrelated Windows problem.

In a way I would have recommended creating this thread in the security section due to advising HiJack This a free utility for removing new startups created by adwares/spywares as well as browser changes in IE. But that alone shouldn't be preventing FireFox from connecting. For HiJack This go to http://www.hijack-this.org/ Once you have this running copy and paste the saved log here or start a new thread in the security section.
 
I'm running Kaspersky Internet Security 6.0 and i'm not really bothered about this happening in IE, only Firefox.
Sorry about posting it in the wrong section though, i didn't realise that this may be a security issue.
 
Well only now you can suspect a security issue as far as a trojan or some other malware causing this. Since this thread is already active I can look over a log if someone else doesn't in the meantime. As far as starting one in the other section that would only be done when you already know that something is a problem like that.

The log posted here would help with IDing any familiar items for removal like Google and other toolbars that seem to open doors up for adawares and spywares alike. The blank page that opens up could very well be a browser hijacker or problem with IE itself.
 
Logfile of HijackThis v1.99.1
Scan saved at 1:27:54 PM, on 19/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\Documents and Settings\Desktop\HijackThis.exe

O1 - Hosts: Here is an "Updaed" or "Additional" suppliment that is current as of 6/13/05
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{24559558-D941-498E-8DFA-E934ADAD6129}: NameServer = 203.194.56.150 203.194.27.57
O17 - HKLM\System\CS2\Services\Tcpip\..\{24559558-D941-498E-8DFA-E934ADAD6129}: NameServer = 203.194.56.150 203.194.27.57
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: AutorunsDisabled - (no CLSID) - (no file)
O20 - AppInit_DLLs: ,,c:\progra~1\kasper~1\kasper~1.0\adialhk.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Tenebril antispyware satellite (TNBRLDS) - Tenebril Inc. - C:\Program Files\GhostSurf 2005\DeleteSvc.exe
O23 - Service: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:\WINDOWS\system32\wdfmgr.exe (file missing)
 
I see a few items that have that look. The first pair seen are here belong to the download manager that may be the main problem there. Those can often tie things up if they are set to load along with Windows. Adwares and a few other things may remain active.

O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm

O17 - HKLM\System\CCS\Services\Tcpip\..\{24559558-D941-498E-8DFA-E934ADAD6129}: NameServer = 203.194.56.150 203.194.27.57
O17 - HKLM\System\CS2\Services\Tcpip\..\{24559558-D941-498E-8DFA-E934ADAD6129}: NameServer = 203.194.56.150 203.194.27.57

This pair is an unknown there. But someone who works more with this utility should take a look here. Webroot's Spy Sweeper, AVG, Ewido, and a few others can often catch stuff missed by others if you have some type of malware hidden on the drive. It does sound like a browser hijacker.
 
I've tried to clean it with every security piece of software i have. What do you think i should do now, to resolve this problem?
:confused: :confused: :confused:
 
When you open either are you reaching your home page? It sounds like you are not connecting at all since both browsers are out of commssion by your description. The jpeg you posted earlier was for FireFox. What do you see when opening IE? Generally if you are unable to connect online you will see an MS message stating that IE was unable to coonect. It sounds like you may have to reinstall drivers for the model, dsl, or cable depending how you are connected to the internet.
 
You must log in or register to reply here.
Back
Top