PRELIMINARY QUESTION: Have you ever had occasion to do a Repair Install of
WinXP for any reason?
OPTION #1:
1. Download the installer for IE8, saving it to your desktop:
http://www.microsoft.com/downloads/...FamilyID=341c2ad5-8c3d-4347-8c03-08cdecd8852b
2. Close all open applications (i.e., anything with an icon on the taskbar).
3. Disable all NIS components (i.e., anti-virus; anti-spyware; firewall),
enable the Windows Firewall then uninstall IE8 via Add/Remove Programs and
reboot twice.
4. Disable all NIS components (i.e., anti-virus; anti-spyware; firewall),
enable the Windows Firewall then double-click on the file you saved in #1
above to reinstall IE8 & reboot twice.
5. Open Internet Explorer (only) to
http://windowsupdate.microsoft.com OR
http://update.microsoft.com/microsoftupdate | Select CUSTOM and scan |
Install any Critical Security Updates offered (e.g., KB980182). If a Root
Certificates update is listed in the Optional Software updates category on
the left-hand side of the scan results window, install it to take full
advantage of IE's enhanced security.
6. Test.
OPTION #2: Contact Norton/Symantec Support for assistance.
OPTION #3: There is a very good chance that you are seeing the effects of a
hijackware infection!
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!
Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/
Otherwise...
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.
2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm
3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
Checking for/Help with Hijackware:
•
http://mvps.org/winhelp2002/unwanted.htm
•
http://inetexplorer.mvps.org/tshoot.html
•
http://www.mvps.org/sramesh2k/Malware_Defence.htm
•
http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~PA Bear
Joergen Bondesen wrote:
> Uninstalled Window Washer.
> Rebooted PC.
> Used ATF-Cleaner with Select All.
>
> PopUp works ok but after a while on www popup do NOT work.
> Then I must use ATF-Cleaner with Select All again.
>
>> I'm sorry, Joergen, but your inline replies have me very confused.
>> (Please try to avoid inline replies; i.e., do not place your replies
>> within the quote of my posts.)
>>
>> Have you (1) uninstalled Window Washer and (2) closed IE & run
>> ATF-Cleaner
>> and (3) now find that everything is working as expected? [yes/no/other
>> (describe, please)]
>>
>> Joergen Bondesen wrote:
>>>>> Does the behavior persist if you uninstall Window Washer & reboot?
>>>> *** I have yet uninstalled Window Washer. Lets [see] what happen.
>>> Popup do not work.
>>>
>>> Used ATF-Cleaner.exe (closed IE) and PopUp works again.
>>>
>>> "Joergen Bondesen" wrote:
>>>> Hi Robear.
>>>>
>>>> Read below, please. ["PA Bear [MS MVP]" wrote
>>>>> Did you do all of the Steps in my last post, including #8b (resetting
>>>>> IE8
>>>>> Advanced settings), and were you able to reinstall NIS & update it
>>>>> manually?
>>>> *** Yes
>>>>
>>>>> Does the behavior persist if you uninstall Window Washer & reboot?
>>>> *** I have yet uninstalled Window Washer. Lets se what happen.
>>>>
>>>>> Do you use "Registry cleaners"? [Just a question, not a
>>>>> recommendation!]
>>>>> *** Yes, Norton.
>>>>
>>>>> Was NIS running in the background when you installed IE8 and/or SP3?
>>>> *** IE8, Yes. SP3 I do not recale.
>>>>
>>>>> Has your Norton subscription ever expired?
>>>> *** No.
>>>>
>>>>> Joergen Bondesen wrote:
>>>>>> Hi Robear.
>>>>>>
>>>>>> Bad news.
>>>>>>
>>>>>> I have used you excellent guide, but still problem with popup.
>>>>>>
>>>>>> Running ATF-Cleaner. Still Problem with popup.
>>>>>>
>>>>>> Running "Window Washer". Popup OK.
>>>>>>
>>>>>> I do think you have done very much to try help me, so if you decide
>>>>>> to
>>>>>> stop
>>>>>> here, it is ok with me, but I'm ready to continue.
>>>>>> "PA Bear [MS MVP]" wrote:
>>>>>>> To start with, I'd strongly recommend uninstalling Window Washer.
>>>>>>> If
>>>>>>> running Disk Cleanup from time to time does not sufficiently take
>>>>>>> care
>>>>>>> of
>>>>>>> your TEMP & Temporary Internet Files and/or you'd prefer to use a
>>>>>>> standalone utility for such matters, consider installing ATF-Cleaner
>>>>>>> (free):
>>>>>>> http://www.atribune.org/index.php?option=com_content&task=view&id=25&Itemid=25
>>>>>>>
>>>>>>> If you're concerned about your "tracks," see...
>>>>>>>
>>>>>>> http://www.winhelponline.com/blog/open-in-inprivate-window-right-click-menu-ie8/
>>>>>>>
>>>>>>> http://www.winhelponline.com/blog/how-to-start-internet-explorer-8-in-inprivate-mode-by-default/
>>>>>>>
>>>>>>> http://www.winhelponline.com/blog/enable-inprivate-filtering-default-ie8-sessions/
>>>>>>>
>>>>>>> Back to the topic at hand, Norton (and McAfee) applications are
>>>>>>> notorious
>>>>>>> for not upgrading (or uninstalling) cleanly. Try this:
>>>>>>>
>>>>>>> [You may want to print or copy/paste these instructions into Notepad
>>>>>>> for
>>>>>>> offline reference.]
>>>>>>>
>>>>>>> 1. Download the Norton Removal Tool, saving it to your desktop:
>>>>>>> ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe
>>>>>>>
>>>>>>> 2. Close any open applications (i.e., anything with an icon on the
>>>>>>> taskbar).
>>>>>>>
>>>>>>> 3. After making certain you have a copy of your Product Key handy,
>>>>>>> uninstall NIS 2010, LiveUpdate and any Norton Add-ons via Add/Remove
>>>>>>> Programs.
>>>>>>>
>>>>>>> 4. IMPORTANT! => Enable the Windows Firewall immediately after
>>>>>>> rebooting.
>>>>>>>
>>>>>>> NB: You're "working without a net" now: Don't to ANYTHING else
>>>>>>> online
>>>>>>> (e.g., browsing; reading email; chatting) until you've completed
>>>>>>> Step
>>>>>>> #7
>>>>>>> below!
>>>>>>>
>>>>>>> 5. Double-click on the file you saved in Step #1 above to run the
>>>>>>> removal
>>>>>>> tool. Don't TOUCH your keyboard until the run completes, then
>>>>>>> reboot.
>>>>>>>
>>>>>>> 6. Do a clean install of NIS 2010 using Product ID & reboot:
>>>>>>> http://www.symantec.com/norton/support/kb/web_view.jsp?wv_type=public_web&docurl=20080514162318EN
>>>>>>>
>>>>>>> NG: Do not enable or install any Norton Add-ons (e.g., Norton
>>>>>>> Anti-Phishing) just yet.
>>>>>>>
>>>>>>> 7. Manually and repeatedly run (Norton) LiveUpdate until you get a
>>>>>>> "no
>>>>>>> more updates" prompt.
>>>>>>>
>>>>>>> 8a. Reset IE8 now per http://support.microsoft.com/kb/923737
>>>>>>>
>>>>>>> 8b. For good measure, also reset Windows Update:
>>>>>>>
>>>>>>> How do I reset Windows Update components?
>>>>>>> [Access KB971058 via IE8 only; Run the Fix It in Default and
>>>>>>> Aggressive
>>>>>>> modes]
>>>>>>> http://support.microsoft.com/kb/971058
>>>>>>>
>>>>>>> 9. Reboot once more & Test.
>>>>>>> --
>>>>>>> ~PA Bear
>>>>>>>
>>>>>>>
>>>>>>> Joergen Bondesen wrote:
>>>>>>>> Hi Robear.
>>>>>>>>
>>>>>>>> Sorre for the delay.
>>>>>>>> See my answers below with *, please.
>>>>>>>>
>>>>>>>> I have changed my "Window Washer" setup to only: Temporary Internet
>>>>>>>> Files
>>>>>>>> Folder (Cache)
>>>>>>>> When running this, the probleme disappear, for a short time.
>>>>>>>>
>>>>>>>> Setup in IE8 - Internetsetup - General - Delete browserdata when
>>>>>>>> closing
>>>>>>>> EI8.
>>>>>>>> Do not help. ATT.: I have translated the Danish words, so they are
>>>>>>>> probaly incorrect.
>>>>>>>>
>>>>>>>>>> Always state your full Windows version (e.g., WinXP SP3; WinXP
>>>>>>>>>> 64-bit
>>>>>>>>>> SP2) as well as your IE version when posting in an IE-specific
>>>>>>>>>> forum
>>>>>>>>>> or
>>>>>>>>>> newsgroup. Please do so in your next reply.
>>>>>>>>>>
>>>>>>>>>>> I'm using danish Win XP and IE8.
>>>>>>>>
>>>>>>>> * Win XP Pro, ver 2002, SP3
>>>>>>>> * IE8, 8.0.6001.18720
>>>>>>>>
>>>>>>>>
>>>>>>>>>> Did you install the Danish-language version of IE8 and is
>>>>>>>>>> "Security
>>>>>>>>>> Update for Windows Internet Explorer 8 (KB980182)" listed in
>>>>>>>>>> Add/Remove
>>>>>>>>>> Programs?
>>>>>>>> * Yes Danish/* No none (KB980182)
>>>>>>>>
>>>>>>>>
>>>>>>>>>> 1. Does the behavior persist if you start IE in No Add-ons mode?
>>>>>>>>>>
>>>>>>>>>> => Start | (All) Programs | Accessories | System Tools |
>>>>>>>>>> Internet
>>>>>>>>>> Explorer (No add-ons).
>>>>>>>>
>>>>>>>> * Yes
>>>>>>>>
>>>>>>>>
>>>>>>>>>> Troubleshooting and Internet Explorer's (No Add-ons) Mode
>>>>>>>>>> [Applies
>>>>>>>>>> to
>>>>>>>>>> IE7
>>>>>>>>>> & IE8 in all OSS]
>>>>>>>>>> http://blogs.msdn.com/ie/archive/2006/07/25/678113.aspx
>>>>>>>>>>
>>>>>>>>>> 2. Does the behavior persist if you Reset IE Advanced settings
>>>>>>>>>> (RIES)?
>>>>>>>>>> http://support.microsoft.com/kb/923737
>>>>>>>>
>>>>>>>> * Yes
>>>>>>>>
>>>>>>>>
>>>>>>>>>> 3. What anti-virus application or security suite is installed and
>>>>>>>>>> is
>>>>>>>>>> your
>>>>>>>>>> subscription current? What anti-spyware applications (other than
>>>>>>>>>> Defender)? What third-party firewall (if any)? Were any of these
>>>>>>>>>> applications running in the background when you installed IE8?
>>>>>>>>>>
>>>>>>>>>> 4. Has a(nother) Norton or McAfee application ever been installed
>>>>>>>>>> on
>>>>>>>>>> this
>>>>>>>>>> machine (e.g., a free-trial version that came preinstalled when
>>>>>>>>>> you
>>>>>>>>>> bought it)?
>>>>>>>>
>>>>>>>> * Norton Internet security 2010 17.6.0.32
>>>>>>>> * Norton Systemsworks, ver 12.0.1
>>>>>>>>
>>>>>>>>>> Joergen Bondesen wrote:
>>>>>>>>>>> Hi PA Bear.
>>>>>>>>>>>
>>>>>>>>>>> Thanks for response.
>>>>>>>>>>>
>>>>>>>>>>> I have just tested, and the pop-ups (java script) do not work
>>>>>>>>>>> with
>>>>>>>>>>> mouse.
>>>>>>>>>>> Neither do Ctrl+clik on link.
>>>>>>>>>>>
>>>>>>>>>>> After "Windows Washer" I can clik on link with mouse, and it
>>>>>>>>>>> works
>>>>>>>>>>> also
>>>>>>>>>>> with
>>>>>>>>>>> Ctrl + clik.
>>>>>>>>>>>
>>>>>>>>>>>> Cannot reproduce here.
>>>>>>>>>>>>
>>>>>>>>>>>> FWIW, the links are pop-ups, not true links. That being said,
>>>>>>>>>>>> does
>>>>>>>>>>>> CTRL+click on link open it in a new tab or window?
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> Joergen Bondesen wrote:
>>>>>>>>>>>>> I'm using danish Win XP and IE8.
>>>>>>>>>>>>>
>>>>>>>>>>>>> When I go to this www:
>>>>>>>>>>>>> http://tvtid.tv2.dk/allekanaler/
>>>>>>>>>>>>> where the bold headlines is links, I experience many time, the
>>>>>>>>>>>>> links do not work.
>>>>>>>>>>>>> I therefor close www and rum my programe "Window Washer"
>>>>>>>>>>>>> Is there a way to configer XP or IE so I can avoid "Window
>>>>>>>>>>>>> Washer"