Register Log In

Contour Enthusiasts Group Archives Forums General Common Interests IE help please!!!

Print Thread

Page 1 of 2

1

2

IE help please!!! #980026 06/14/04 06:21 PM
Joined: Feb 2002 Posts: 172 Philly, PA M MLK OP CEG\'er
OP MLK CEG\'er M Joined: Feb 2002 Posts: 172 Philly, PA	res://esecl.dll/index.html#37049 that is the nonsense that I just can't seem to get rid of! CWShredder, Spybot, AdAware and Startpage Guard all either running or run HELP PLEASE? Driving me nuts 1998 CSVT Silver Frost #1119 of 6535 dob 5-20-97 custom seating and dash classics: 1968 Lancia Fulvia Rallye 1.3 1971 Audi 100LS 2 door 1983 BMW 320i Other horses in the stable: 2004 Mercury Monterey 1994 Mercedes E320 Wagon

Re: IE help please!!! #980027 06/14/04 06:26 PM
Joined: Jun 2000 Posts: 1,905 Cornfields of Indiana P perry_dup1 Master P
perry_dup1 Master P P Joined: Jun 2000 Posts: 1,905 Cornfields of Indiana	That's something that CWShredder should take care of.. did you make sure to update it before you ran? http://www.spywareinfo.com/~merijn/files/CWShredder.exe Maybe try running in safe mode... Worse comes to worse, try running hijack this and pasting a log from it... I'm about to leave for the rest of the day, but I'll scan through it when I get home. http://tomcoyote.com/hjt/ My car.

Re: IE help please!!! #980028 06/14/04 06:31 PM
Joined: Feb 2002 Posts: 172 Philly, PA M MLK OP CEG\'er
OP MLK CEG\'er M Joined: Feb 2002 Posts: 172 Philly, PA	now it comes up as res://jxanm.dll/index.html#37049 after running CWShredder again !?!?!?!?!?!?! 1998 CSVT Silver Frost #1119 of 6535 dob 5-20-97 custom seating and dash classics: 1968 Lancia Fulvia Rallye 1.3 1971 Audi 100LS 2 door 1983 BMW 320i Other horses in the stable: 2004 Mercury Monterey 1994 Mercedes E320 Wagon

Re: IE help please!!! #980029 06/14/04 06:36 PM
Joined: Feb 2002 Posts: 172 Philly, PA M MLK OP CEG\'er
OP MLK CEG\'er M Joined: Feb 2002 Posts: 172 Philly, PA	now it is this! res://gycao.dll/index.html#37049 HELP!!!!! 1998 CSVT Silver Frost #1119 of 6535 dob 5-20-97 custom seating and dash classics: 1968 Lancia Fulvia Rallye 1.3 1971 Audi 100LS 2 door 1983 BMW 320i Other horses in the stable: 2004 Mercury Monterey 1994 Mercedes E320 Wagon

Re: IE help please!!! #980030 06/14/04 06:37 PM
Joined: Jan 2001 Posts: 1,889 Apple Valley, MN. USA R RT and his SE_dup1 Hard-core CEG\'er
RT and his SE_dup1 Hard-core CEG\'er R Joined: Jan 2001 Posts: 1,889 Apple Valley, MN. USA	What operating system? 99 Contour Sport SE MTX KKM filter, B&M shifter No res, BAT kit Green car silver hood (because silver is faster)

Re: IE help please!!! #980031 06/14/04 06:39 PM
Joined: Feb 2002 Posts: 172 Philly, PA M MLK OP CEG\'er
OP MLK CEG\'er M Joined: Feb 2002 Posts: 172 Philly, PA	XP pro 1998 CSVT Silver Frost #1119 of 6535 dob 5-20-97 custom seating and dash classics: 1968 Lancia Fulvia Rallye 1.3 1971 Audi 100LS 2 door 1983 BMW 320i Other horses in the stable: 2004 Mercury Monterey 1994 Mercedes E320 Wagon

Re: IE help please!!! #980032 06/14/04 06:42 PM
Joined: Jun 2000 Posts: 1,905 Cornfields of Indiana P perry_dup1 Master P
perry_dup1 Master P P Joined: Jun 2000 Posts: 1,905 Cornfields of Indiana	Run Hijack This and post the log. Do not delete anything yet. My car.

Re: IE help please!!! #980033 06/14/04 06:45 PM
Joined: Feb 2002 Posts: 172 Philly, PA M MLK OP CEG\'er
OP MLK CEG\'er M Joined: Feb 2002 Posts: 172 Philly, PA	Logfile of HijackThis v1.97.7 Scan saved at 2:45:10 PM, on 6/14/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\wanmpsvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\hkcmd.exe C:\PROGRA~1\NORTON~1\navapw32.exe C:\Program Files\Microsoft Hardware\Keyboard\type32.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\WINDOWS\BCMSMMSG.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\system32\DfrgNtfs.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\WINDOWS\system32\addav.exe C:\WINDOWS\system32\netri.exe C:\Program Files\Microsoft ActiveSync\WCESMgr.exe C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\software\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\nzpjn.dll/sp.html#37049 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://nzpjn.dll/index.html#37049 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = res://nzpjn.dll/index.html#37049 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\nzpjn.dll/sp.html#37049 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://nzpjn.dll/index.html#37049 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\nzpjn.dll/sp.html#37049 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 10.0.0.2:80 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = , O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {5395C6CC-9119-AA2E-B008-2D31A543B883} - C:\WINDOWS\system32\atljy.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe" O4 - HKLM\..\Run: [POINTER] point32.exe O4 - HKLM\..\Run: [Ad-aware] C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe +c O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe O4 - HKLM\..\Run: [addav.exe] C:\WINDOWS\system32\addav.exe O4 - HKLM\..\Run: [zSPGuard] c:\program files\pjw\spguard\spguard.exe /s /r O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM95\aim.exe -cnetwait.odl O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Create Mobile Favorite (HKLM) O9 - Extra 'Tools' menuitem: Create Mobile Favorite... (HKLM) O9 - Extra button: AIM (HKLM) O16 - DPF: Yahoo! MLB StatTracker - http://aud12.sports.sc5.yahoo.com/java/y/mlbst8408_x.cab O16 - DPF: Yahoo! NBA StatTracker - http://aud4.sports.yahoo.com/java/y/nbast8264_x.cab O16 - DPF: Yahoo! NFL GameChannel StatTracker - http://aud3.sports.yahoo.com/java/y/nflgcst1008_x.cab O16 - DPF: Yahoo! Poker - http://download.games.yahoo.com/games/clients/y/pt1_x.cab O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potc_x.cab O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {1DF36010-E276-11D4-A7C0-00C04F0453DD} (Stamps.com Secure Postal Account Registration) - https://secure.stamps.com/download/us/registration/2_0_0_755/sdcregie.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/19fa79c1ef414d176421/netzip/RdxIE601.cab O16 - DPF: {9059F30F-4EB1-4BD2-9FDC-36F43A218F4A} (Microsoft RDP Client Control (redist)) - http://ilx.centurysecurities.com/tsweb/MsRDP.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37700.5157060185 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{6E4DBD74-4005-4269-B83E-EEABFCD3B117}: NameServer = 64.115.0.9,64.115.0.10 1998 CSVT Silver Frost #1119 of 6535 dob 5-20-97 custom seating and dash classics: 1968 Lancia Fulvia Rallye 1.3 1971 Audi 100LS 2 door 1983 BMW 320i Other horses in the stable: 2004 Mercury Monterey 1994 Mercedes E320 Wagon

Re: IE help please!!! #980034 06/14/04 07:02 PM
Joined: Jun 2000 Posts: 1,905 Cornfields of Indiana P perry_dup1 Master P
perry_dup1 Master P P Joined: Jun 2000 Posts: 1,905 Cornfields of Indiana	Put Hijack This in to its own folder as it will create backups of everything it removes.. leaving tons of little icons everywhere. Let's start by removing this stuff. Make sure all of your browser windows are closed -- you may want to copy and paste this in to notepad so you can view it. Originally posted by MLK: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="res://C:\WINDOWS\system32\nzpjn.dll/sp.html#37049" target="_blank">res://C:\WINDOWS\system32\nzpjn.dll/sp.html#37049</a> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="res://nzpjn.dll/index.html#37049" target="_blank">res://nzpjn.dll/index.html#37049</a> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="res://nzpjn.dll/index.html#37049" target="_blank">res://nzpjn.dll/index.html#37049</a> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="res://C:\WINDOWS\system32\nzpjn.dll/sp.html#37049" target="_blank">res://C:\WINDOWS\system32\nzpjn.dll/sp.html#37049</a> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="res://nzpjn.dll/index.html#37049" target="_blank">res://nzpjn.dll/index.html#37049</a> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="res://C:\WINDOWS\system32\nzpjn.dll/sp.html#37049" target="_blank">res://C:\WINDOWS\system32\nzpjn.dll/sp.html#37049</a> O2 - BHO: (no name) - {5395C6CC-9119-AA2E-B008-2D31A543B883} - C:\WINDOWS\system32\atljy.dll O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/19fa79c1ef414d176421/netzip/RdxIE601.cab Reboot. Make sure you visit windowsupdate and have downloaded all the critical updates. If you still have problems, I'd recommend posting a new hijack this log here and seeing if someone can help. Those folks love killing spyware My car.

Re: IE help please!!! #980035 06/14/04 07:14 PM
Joined: Jan 2001 Posts: 1,889 Apple Valley, MN. USA R RT and his SE_dup1 Hard-core CEG\'er
RT and his SE_dup1 Hard-core CEG\'er R Joined: Jan 2001 Posts: 1,889 Apple Valley, MN. USA	Perry you're going to have to send me a copy of your favorite file cause you know some great web sites! PS one more great spyware program is Spyblaster, also free! 99 Contour Sport SE MTX KKM filter, B&M shifter No res, BAT kit Green car silver hood (because silver is faster)

Page 1 of 2

1

2

Moderated by Lance Kinley_dup1, Shaggy_dup1, Trapps_dup1, unisys12

Link Copied to Clipboard

Powered by UBB.threads™ PHP Forum Software 7.7.5