Dreaded Freeze

No I am a small fish, we have some really big boys and girls swiming in this pool! Smile!

But did you do the cleanup? If not it is worth it.

mike

 

Lis,

I'm a little fish too (Mike is bigger!) but thanks for the kind words. I try

Hopefully the issue is "resolved" if you are OK with disabling those third-party browser extensions (Laura's Step 4).

I would wait a few days and make sure the problem doesn't come back. Then, if you're up to it, open IE, re-enable third-party browser extensions and run Spybot's Tools, View Report, with IE running and check off running processes and BHO's , and copy/paste the report here. Then leave third-party browser extensions enabled and see if the issue comes back. If it does then you may want to find the culprit... there are programs like BHOcop or something similar for that....I know very little about BHO's and IE toolbars so maybe Mike can help you more on that.

 

From a previous reply,early in the game. "Have accomplished many functions to include Spybot, Ad-aware 6, CM disk cleaner and a selective startup. System resources are currently 88% at start up. Not bad. PC performance is better, however an (Iexplore not responding} occurs once each day? Perhaps I should requistion a "Iexplorer not responding" killer kit?
Appreciate all your replies with the "hot poop ". Answer when time permits.


__________________

 

Hopefully below is what you wanted? With third party enabled the issue returns? What problems will leaving the third party unchecked cause?

Spybot-S&D Browser helper object report, 7/1/03 12:47:54 PM

{004A5840-FF59-11d2-B50D-0090271D3FD4}
Class name: YBIOCtrl Class
CLSID database: legitimate software
Description: YBIOCtrlClass - Yahoo!

{16122F02-9713-11D3-9744-005004116944}
Class file: DPIEHOOK.DLL
Attributes:
Date: 12/8/00 1:10:04 PM
MD5: D08454944195240C8078EA2085B35AD8
Path: C:\WINDOWS\SYSTEM\
Short name:
Size: 143360 bytes
Version: 0.1.0.2
Class name: CIEHooker Class

{C389F2CF-26ED-11D5-A212-004005F6FEB6}

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
Class file: ACROIEHELPER.OCX
Attributes:
Date: 4/16/01 4:39:02 PM
MD5: 8394ABFC1BE196A62C9F532511936DF7
Path: C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\
Short name: ACROIE~1.OCX
Size: 37808 bytes
Version: 0.1.0.0
Class name: AcroIEHlprObj Class
CLSID database: legitimate software
Description: Adobe Acrobat reader
Filename: ACROIEHELPER.OCX

{2E12B523-3D4C-4FAC-9B04-0376A8F5E879}
Class file: WINDOWSIE.DLL
Attributes: archive
Date: 5/21/02 2:21:46 PM
MD5: 9DFB7D61B06D5BCCD2A4A245D177A26E
Path: C:\WINDOWS\
Short name: WINDOW~1.DLL
Size: 57385 bytes
Version: 0.3.0.0
Class name: WindowsIE.clsIS
CLSID database: confirmed malware
Description: InetSpeak
Filename: WindowsIE.dll

{BDF3E430-B101-42AD-A544-FADC6B084872}
Class file: NavShExt.dll
Attributes: archive
Date: 2/27/02 11:07:30 AM
MD5: 3AB9B9A20D4D8B6A1632910AB6C56FD9
Path: c:\Program Files\Norton AntiVirus\
Short name:
Size: 102400 bytes
Version: 0.8.0.0
Class name: CNavExtBho Class
CLSID database: legitimate software
Description: Norton Antivirus
Filename: NavShExt.dll
Name: NAV Helper
Spybot-S&D process list report, 7/1/03 1:40:22 PM

PID: 4278210279 (4294942775) C:\WINDOWS\SYSTEM\mmtask.tsk
PID: 4278212263 (4294942775) C:\WINDOWS\SYSTEM\MPREXE.EXE
PID: 4278216091 (4294942775) C:\WINDOWS\EXPLORER.EXE
PID: 4278272651 (4278216091) C:\WINDOWS\SYSTEM\SYSTRAY.EXE
PID: 4278292611 (4278216091) C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE
PID: 4278305399 (4278216091) C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
PID: 4278306311 (4278216091) C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
PID: 4278313767 (4278264623) C:\WINDOWS\SYSTEM\MSTASK.EXE
PID: 4278355655 (4278272651) C:\WINDOWS\SYSTEM\WMIEXE.EXE
PID: 4278394223 (4278306311) C:\WINDOWS\SYSTEM\PSTORES.EXE
PID: 4278483967 (4278306311) C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
PID: 4278513643 (4278483967) C:\WINDOWS\SYSTEM\DDHELP.EXE
PID: 4278549743 (4278216091) C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SPYBOTSD.EXE
PID: 4279211975 (2122339715) C:\WINDOWS\SYSTEM\KERNEL32.DLL
PID: 4294942775 (4279211975) C:\WINDOWS\SYSTEM\MSGSRV32.EXE

 

You have one BHO that is listed as " confirmed malware" in the list:

{2E12B523-3D4C-4FAC-9B04-0376A8F5E879}
Class file: WINDOWSIE.DLL
(InetSpeak)

See http://www.doxdesk.com/parasite/InetSpeak.html

I'll need to reasearch the rest. Even legitimate BHO's can conflict with each other.

What you want to do is to remove the malware or other BHO's that you don't want or need.

Mike is the expert here!

In the meantime, disable third-party extensions again until we can figure which ones should be removed and how....

By the way, there is NO PROBLEM leaving the 3rd party browser extensions DISABLED... you just won't be able to use the "good" ones.

 

While waiting for Mike to come by (hope he does!) you can look on this page for more information on disabling BHO's:
http://www.spywareinfo.com/articles/bho/

There is a link there for BHODemon from Definitive Solutions
which is a program I've seen mentioned... however I was hoping Mike would give his recommendation.

You could also try removing the InetSpeak windowsie.dll file manually (described on the http://www.doxdesk.com/parasite/InetSpeak.html page) ================copy/paste=================
Before you can delete the file you must deregister it using the 'regsvr32 /u' command. Open up a DOS/command prompt window (Start -> Programs -> Accessories), and enter (snip)....if you have the version that installs into the Windows folder:

cd "%WinDir%\System "
regsvr32 /u "C:\Windows\WindowsIE.dll"
=======end c/p=============

This is what I would do, for a manual removal of the InetSpeak WindowsIE.dll:

Go to Start Run and type:
Command

OR, if you prefer, open the MS-Dos Prompt shortcut in Start Programs Accessories.

A Dos window opens.

Type:
CD C:\Windows\system
and hit the enter key.

That will take you to a windows\system prompt;

Type:
regsvr32 /u "C:\Windows\WindowsIE.dll "
and hit the enter key.

You should get some sort of confirmation that the file was unregistered.

Then type:
EXIT
and hit the enter key to leave the dos window.

Now you can delete the WindowsIE.dll in C:\Windows or rename it if you prefer.

 

Which BHO's should I toggle (disable)in Spybot. Should I toggle

WindowsIE.dll?

 

Yes,WindowsIE.dll.

Glad that Spybot lets you disable it, makes things much simpler!

 

Hi Dutch lady and all

Sorry so late getting back. Worked late yesterday and then out to dinner so late getting in last night.

Liz use HiJackThis to clean these references

Get it here: http://www.spywareinfo.com/~merijn/index.html

Very powerful little program so click scan and remove "only" items containing these items you wish to remove.

The only other lines that you should remove without advice is the bottom line of any "exact" duplicates, or any line that has no description or other info and looks like this one that you have:

{C389F2CF-26ED-11D5-A212-004005F6FEB6}

So get rid of this also.

If you did my cleanup procedure you should have included the refs to taskmon and applog. These will gain you some disk space and get rid of a CPU cycle wasting program.

Additionally, I would totally uninstall C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE. At least until this freeze problem is fixed and this could actually be it. It has been suspected that this program has spyware and it is known to cause problems anyway and additionally there are far better popup stoppers.

And since you have cleaned with SpyBot your popups should be much less as you rid yourself of all on disk spy/adware so now you should only get them from a site.

Same applies to the Yahoo Companion if you really really have to you can put it back after problem is fixed:
{004A5840-FF59-11d2-B50D-0090271D3FD4}
Class name: YBIOCtrl Class
CLSID database: legitimate software
Description: YBIOCtrlClass - Yahoo!

DialPad installed by Shopping type sites and is not good. However if you use VOIP for telephone you may need this, so do you make phone calls thru your computer? If not rid yourself of this.
{16122F02-9713-11D3-9744-005004116944}
Class file: DPIEHOOK.DLL
Attributes:
Date: 12/8/00 1:10:04 PM
MD5: D08454944195240C8078EA2085B35AD8
Path: C:\WINDOWS\SYSTEM\
Short name:
Size: 143360 bytes
Version: 0.1.0.2
Class name: CIEHooker Class

After doing all these steps including the WindowsIE.dll that Alice was guiding you with. Do a disk search for all these files and if any are found delete them.

Find and delete these
WindowsIE.*
DPIEHOOK.*

Let us know!

Mike

 

Performed the toggle on the bad guy, enabled third party, restart and thus far the (Iexplore not responding) has not appeared. Wonderbar. I may celebrate with a "Tiger Wood's" lunch today?
Some people are just brilliant. Thanks. MFlynn I'll digest all your info later and run some of the programs to further sweep clean my bit machine. Merijn is becoming educated in the Netherlands. "WOW" My birthplace. I have been attending computer classes,at the local community college, and the instructors are not qualified. My questions are never answered. BBS is my savior.



Happy Birthday USA #227. Have a noisy 4th of July

 

Hi Lis,

I would listen to Mike and seriously consider uninstalling Panicware's Popup Stopper. It could very well be the root cause of your problems.

==========copied from groups.google search=========
From: Jim Byrd (jrbyrd@spamlesscomcast.net)
Subject: Re: pop ups
Newsgroups: microsoft.public.windowsxp.general
Date: 2003-07-01 17:14:05 PST

(snip)
Additionally, some people have recommended Popup Stopper and PopupBuster, but they have also been reported or experienced to cause perceived problems for some people with "normal" links in IE6 such as
Google search results and links from OE.
(snip)
--
Regards, Jim Byrd, MS-MVP
=============end c/p===================

 

Just crawled back online after a couple of fun Day's with TS Bill - no power for a day and half, no phone or DSL for two and still no cable, but real pleased to learn that Lis comes up with a winner. Congratulations.

 

TS Bill?.........OH! Tropical Storm Bill! Where was that. Louisiana? Texas? I haven't been following it.

No power for a day and a half? Hope it's not too hot where you are.

 

Sorry to hear about your ordeal Rockster. Hang in there!

So to make up for all the cable you missed go see Terminator 3 this weekend. Grin. I'll be there for sure!

Glad everything looks good so far Liz. Hope you deleted the WindowsIE and DPIEHOOK after disabling.

Mike

 

Deleted the two bad guys from the hard drive. Kim Komando provided the POP killer software. Should I delete it and install something else? Any advise? Thanks for your time.




Rockster requires "rubbers" for safety in the TS?

Totes are rubbers in West Texas.

 

Hehehe .....Totes? - don't they still give them away when you spend ten bucks or more in the "foundations" department at Bloomingdales? C'mon now Lis ...... Do have some hidden away in the closet, under the bed or in the medicine cabinet? They wouldn't have done much good around here (too wet). Besides, barefoot is in vogue.

What I really needed and finally got was electron flow.

As to your Pop-Ups ..... I use V2.4 of Panicware's Pop-Up Stopper and have been quite pleased with it (sorry Alice) but it only runs when I want it to run.

 

Hey Rockster, drying out I hope? (From all the water I meant)

On Popup Stopper - No need to be sorry....I was just passing along Mike's recommendation and what I found with a groups.google search.

Lis could take a "wait and see" attitude on the Popup Stopper. If it ever was a problem, possibly it was conflicting with one of the BHO's that Lis disabled and will now run ok.

Lis, I don't use a popup stopper but then, my main browser is Mozilla 1.0.1 (similar to Netscape 7.x) and it includes a built-in popup-stopper.

 

I now know the difference between HBO and BHO? Learning. Is there a difference between Mozilla and Godzilla? Just joshing. PC is functioning without any "hiccup" and is considered fully operational. Therefore I will say "case closed ". Thanks Alice, MFlynn and Rockster. Rockster keep your powder dry.

 

Hi Liz

Glad all is well.

Just noticed your request for info on Pop ups.

I have tried many but some had problems that they missed some, or blocked too much or took to much memory and CPU.

So sometime ago I did some deep research and found AntiPop-IE

But I found this guy who did all the work for me. And he is correct AntiPop-IE is the best all around. Not free but at 19.95 worth it.

Here is all you (and anyone else interested) need to know about PopUp stoppers.

About AntiPo-IE
http://www.popup-killer-review.com/intelligent-popup-stop.htm

Review and ratings of many popup stoppers
http://www.popup-killer-review.com/

A tester for popup stoppers test yours
http://www.webknacks.com/aptest.htm

The below are additional info about some baddies and how to combat them
http://www.webknacks.com/underware.htm

http://www.sitepoint.com/article/888

http://www.cexx.org/

Mike