ActiveX not initialized

Hi I am back You didn't think you could get rid of me that easy did you??

Well, I am trying to do a scan on the trendmicro housecalls and an error comes up. Housecall ActiveX is not initialized.
What is that and how do I fix it?

I cannot get Ad-Aware to download either. My sons computer is riddled with pop ups and it is very slow!

Thanks,
Susan
aka Goatgirl

 

Hello Susan,

Try the following:

If this is IE6 (don't remember whether 5X has the same setting) > IE tools > Internet options > Advanced tab > scroll down to Security > check "Allow active content to run in files on my computer ".

Afterwards, I would uncheck that setting.

Regards - Charles

 

goatgirl-- Are you posting about two PC's (your's and your son's) or one?
If two, then put the Housecall site into your Trusted Sites. I think you will then be able to run Housecall. If you do not know how to put a site into Trusted Sites then, please post back.
If one, it sounds like you and your son's PC may have spyware/malware. Suggest you go through the procedure here trying to use SpybotS&D if you cannot not access AdAware
http://www.windowsbbs.com/showthread.php?t=37074

P.S. please tell us the version of Windows and IE you are running.
P.P.S. If two PC's are involved, perhaps you can download AdAware to your PC or external HD and then run it on your son's PC from there.

 

HI guys,

First I am running Windows xp pro and IE version 6.0.2800.and so on. ( on one computer.) Sorry I was not clear on that before.

Next I do not have "Allow active content to run in files on my computer ".
in the place you designated.

I am sure that is my whole problem. Then I can get the scans to run.
Thanks,
Susan

 

Hi Goatgirl,

Next I do not have "Allow active content to run in files on my computer ".
in the place you designated.
Ok, this is a feature of SP2.

Have you tried Jim's suggestioin?
then put the Housecall site into your Trusted Sites.

Copy the website's url in IE's Address bar and paste into Internet Options > Security tab > Trusted sites > sites bar > Add this web page to this zone.

Regards - Charles

 

When you add this site to the Trusted Zone, you may need to uncheck the box for "Require Server verification" for you to be able to enter it.

 

I tried copying it like you said but that does not seem to be working either. It still says "HouseCall ActiveX component is not ready "

Susan

 

I was reading other like problems and I decided I would post a HJT log but I cannot get it to run. I finally got it to download but it won't run. Ideas?? I cannot get any cleaning program to run.
Help!

 

See if this online scanner will run for you. (no ActiveX required)

http://fr.trendmicro-europe.com/consumer/products/housecall_launch.php

 

Hi, I was pondering this problem until 2 am. I remembered once, year or more ago, that you told me to delete the temp files in the local settings. I did that and to my dismay there were 33,000 files. Not a typo 33 thousand files. Even though I have gone to the internet options regularly and deleted files and cookies. Do you have any idea how long it takes to delete 33K files?!

Well, after that long endurance trial, I was miraculously able to run my clean up tools that previously had been unable to run. Including Housecalls.

I am in the process now of running AVG which found 1 trojan horse and housecalls that says so far that 2 have been found. Then I plan to run Ad aware, and spybot.

However I also plan to run the HJT log and post it when I am thinking that I am clean.
K? K!

Thanks,
Susan

 

Hi Susan,

IE tools > Internet options > Advanced tab and scroll down to "Empty Temporary Internet files folder when Browser is closed ". Is that checked? If it is and you're still getting this buildup, there may be something broken.

Regards - Charles

 

Goatgirl--Consider installing this program.
http://www.igorshpak.net/
You can program it (very simple) to delete all sorts of files, including Temp, History, TIF, etc. And it will also clean out the index.dat files associated with the deleted files. (When you use it there is a short delay while it deletes what you have specified--maybe longer for 33,000 files. Don't worry, it is working. Just wait.)

 

Did you say Local Settings\Temp? WOW! Trojans have been busy on that system!

Consider changing all passwords now, and again when you get cleaned up.

 

noahdfear--I had not realized that trojans use the Local Setting\Temp folder.
Once you delete these files in that folder, are you still at risk?
Should you be advising Goatgirl along the lines of
http://www.windowsecurity.com/trojanscan/trojanscan.asp
followed by
http://www.windowsbbs.com/showthread.php?t=37074 ?

 

Hi Jim,

Many malware, which use primarily trojans, often unpack files to the temp folder. I checked one out the other day that dropped near 50 files in my temp folder in one shot. The temp folder in the windows directory is often used as well. From there, they drop files (create/copy) into system folders, create Program Files folders, etc., although sometimes they will continue running from the temp folder. Clearing the temp folders is only one step in the cleanup process.

I'd say she's on the right track, but your suggestion to run A² is good as well.

 

Speaking of brain cramps, I mis read Windows\Temp for the Temporary Internet Files.

I've used a PC Mag utility for years called DisPie to monitor folder sizes. It helps to control junk and this problem would have stuck out like a sore thumb.

I've tried various free utilitys but this IMO is still the best for ease of use - the grahics are easy to interpert.

This is a shareware program, but well worth it.

http://www.pcmag.com/article2/0,1759,1556425,00.asp

Regards - Charles

 

Hjt Log

HI,
Boy is this ever eat up my time with the goats!!!

So in the midst of all this we have gotten rid of Direcway and have a new satalite provider that has isolated the one computer we are working on as the reason for the new internet to be crashing all the time and after shutting off the ethernet I can see that it is. They used the command window to see that the problem computer is sending around a 1000 packets in just a few seconds overwhelming the modem, therefore, making it crash. So now I am reduced to using the thumb drive to take the scan tools to the computer. I have run AVG and only found 1 virus. Ad Aware, and Spybot both came back with little. I am now rebooting after dumping the recycle bin again.

Oh yeah. Some of the temp files won't delete because they are being used by a program. So I am thinking that I should go through again after fixing what you say to do on the HJT log. I am learning a lot doing this though. One of these days I may be almost as smart as you guys.

So.... here is my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 1:47:16 PM, on 9/27/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\X3watch\x3watch.exe
C:\WINDOWS\System32\cmprops3.exe
C:\WINDOWS\System32\cnbjmon9.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Dilberttest3\Screen Saver\FWLink.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\ahad\ubae.exe
C:\Program Files\StarOffice6.0\program\soffice.exe
C:\WINDOWS\system32\??chost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgwb.dat
C:\Documents and Settings\admin\My Documents\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\WINDOWS\System32\Searchx.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=192.168.0.1:83
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {149FED42-03DE-5E25-D58F-5A404FECFD93} - C:\WINDOWS\System32\gvcvpkim.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [pyW] C:\documents and settings\admin\local settings\temp\pyW.exe
O4 - HKLM\..\Run: [jpWAVBwjN] C:\windows\system32\jpWAVBwjN.exe
O4 - HKLM\..\Run: [TizzleTalk] C:\Program Files\TizzleTalk\TizzleTalk.exe

Right away I see 3-4 of them that you will say to wax.

Can't wait to see if I am right.
Thanks,
Susan

PS Does that a squared need internet access or can I download it on the good computer and copy it to my thumb drive?

 

Hi Susan,

Some of the temp files won't delete because they are being used by a program.

The first response to that situation is to boot into safe mode by tapping the F8 or F5 key and then delete the Files in safe mode.

If the file still won't delete - Use Move On Boot, download from here: http://www.snapfiles.com/get/moveonboot.html to delete it. It will add a new item to your right click Context Menu, target that file with Move on Boot, and then reboot.

Regards - Charles

 

Hi, I think I was writing a reply when Charles was posting too. So it shows that He replied last but no one has replied to my HJT Log. So could someone do that?

Thanks,
Susan

 

Hi Susan,

I'm looking into your log, but I'm a bit short on time at the moment. I'll try to get something posted later tonight, if not tomorrow.

Hang in there!