"PA Bear [MS MVP]" wrote:
> Does the behavior persist if you Reset IE Advanced settings (RIES)?
> http://support.microsoft.com/kb/923737
> http://windows.microsoft.com/en-US/windows7/Reset-Internet-Explorer-settings
>
> Were AVG and/or ZA running in the background when you installed IE8?
>
> Has a Norton or McAfee application ever been installed on this machine
> (e.g., a free-trial version that came preinstalled when you bought it)?
>
> > ...Tried to use System Restore to go back two
> > weeks but it wouldnt accept any of them; even to the SR point I created
> > just
> > before beginning the following sequence.
>
> There is a very good chance that you are seeing the effects of a hijackware
> infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> Microsoft PCSafety provides home users (only) with no-charge support in
> dealing with malware infections such as viruses, spyware (including unwanted
> software), and adware.
> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
>
> Also available via the Consumer Security Support home page:
> https://consumersecuritysupport.microsoft.com/
>
> Otherwise...
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/malwareremove/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
> in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 2b. Vista or Win7=> Run this scan instead:
> http://onecare.live.com/site/en-us/center/whatsnew.htm
>
> 3. Now run a thorough check for hijackware, including posting requested logs
> in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
>
> Checking for/Help with Hijackware:
> • http://mvps.org/winhelp2002/unwanted.htm
> • http://inetexplorer.mvps.org/tshoot.html
> • http://www.mvps.org/sramesh2k/Malware_Defence.htm
> • http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> **Chances are you will need to seek expert assistance in
> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
> http://www.spywarewarrior.com/viewforum.php?f=5,
> http://www.dslreports.com/forum/cleanup,
> http://www.bluetack.co.uk/forums/index.php,
> http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
>
> If these procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
>
>
>
> Chilternphil wrote:
> > Over the last two weeks IE8 has mostly hung when opening a second (or
> > more)
> > tab from a web link. The web address appears then progress bar crawls
> > towards completion but never quite makes it. Esc/F5 will sometimes jog it
> > into life. XP SP3, AVG Free, Zone Alarm free, Spyware Terminator (disabled
> > for real time scan). All MS updates in and ticked green on history page.
> > I have also had the MS choice of browsers update (allegedly succesfully
> > installed) but it has never run. Tried to use System Restore to go back
> > two
> > weeks but it wouldnt accept any of them; even to the SR point I created
> > just
> > before beginning the following sequence.
> > Have tried disabling IE add-ins; starting IE8 as no add-ins from
> > start/progs; uninstalling and running ccleaner before reinstalling IE8
> > from
> > MS website.
> > Firefox works fine on these same sites. I found elsewhere an instruction
> > to
> > try a series of RUN regsvr nnnn.dll. This failed when I got to the third
> > item msjava.dll which couldn't be found.
> > [I posted my original question erroneously in someone elses and I
> > apologise,
> > and hope this is started as a new question.]
>
> .
> PA Bear thanks for everything. Delay reponding due to the sheer time (over 24 hours in total) to do all the scans. And still not quite convinced I'm OK. Please may I bore you with some detail and ask for further advice.
A) ran RIES using the MS download program and then I could open six tabs
from MSN site no problem. Closed and reopened IE and got original slow
response.
Both AVG and ZA running when I installed IE8
C) No Norton or McAfee because I had a disk failure 3 years ago under Dell
warranty and had to reinstall XP from scratch.
D) Always been anti-virus & firewall active. The MS updates automatic and
all priority installed and up to date. (Still no EU browser option screen
though.)
E) Could get to neither of your recommended sites either with IE or Firefox
- both endless wait.
F) I treid MS site which changed suffic to .aspx but would not connect.
G) I downloaded MRT as zip to my wireless netbook; transferred to desktop;
renamed to scan.exe and ran. >4 hours finished with no problems detected.
H) started PC in safe mode with networking. Went to OneCare site with IE and
selected Protection Scan only. I had to repeat 3 times before it loaded 4 of
4 and gave a message "will take 80 minutes". Selected Next and it downloaded
1 of 8 and hung. Cancel closed window and repeted many times before
eventually it loaded 8 of 8 and started a scan. No virus or spyware detected
with18 files couldn't be scanned. No ports open.
I) Went to second of your recommended list sites and followed instructions
to run Trend Hijack this. Ran offline (router off) as recommended but could
not submit results. Restarted Router and could not Submit log to Trend. Tried
many many times with Firefox and eventaully got Trend message saying I was
using W95,98,ME and couldn't submit.
J) So I used MBAM via your link elephantboy. Eventually got through after 15
attempts and downloaded but would not update with error 732(12029,0) [I have
reported this to Malawarebytes.] It found two objects infected which I
removed and did restart. Repeated quick scan and no problems indictated.
K) Ran MBAM full scan and no problems indictated.
L) Ran Trend Hijack but still couldn't get to Trendsecure to submit.
Frustrated I deleted some of the Toolbar items (Google, Yahoo) I could
identify and a couple of program references I really don't care about. Reran
Hijack but couldn't submit results.
M) Tried thinking! Copied Trend text file to memory stick and used Netbook
to get to PCHell and took their advice to submit to a German web site in
prefernce to Trend. Three questionable entries of which two were valid. I
deleted the third 016-DPF....PTVxVectorMap Plugin 3.0...62.225.145.20.....
and I could then run Trend Hijack and immediately submit results using Trend
button option; for the first time ever. Restart.
N) I have started both IE8 and Firefox and browsed some websites. One or two
seemed to require a refresh before displaying but it seems better than
before. I normally access the web with a limited user account for web and
email and this is the only time I have (knowingly) used an admin account to
access the web.
O) So my questions are: Does it sound to you that I have tracked it down? Is
theer anything else I should do to check? I expect I should delete all the
past System Restores and the Registry back ups held by System mechanic and
Ccleaner? If nothing else I am guessing that I reinstall XP.
Whatever; again thanks for the guidance. [NB MY wife suggests a lump hammer
to this one and a new computer, but.... who likes to be beaten.]
very best regards