Happens at startup

This problem happened at my work pc. The pc starts up normally but then netscape launches. The location bar reads file:///CI/WINDOWS/TEMP/gdg1235/index.htm
There is nothing in my startup. msconfig is normal. Might this have been caused by iMesh which I recently removed??

 

Adware and Spyware - hiss boo

Hi Bimmer Guy,

It seems that iMesh comes with quite a list of Spyware/Adware: Known third-party applications bundled with this download include eZula, Driverpg, SaveNow, and New.net.
This info from the iMesh download site.

First you might try deleting your .tmp files. Do a "Find" for *.tmp and delete all files found.

You may want to run AdAware, if you have it installed, and if not, you can download it here:
http://www.majorgeek.com/index2.html

Also check the Add/Remove applet for any of the above listed adware/spyware programs. If any are listed, remove them in Add/Remove before running AdAware.

If you're comfortable in the Registry, I would also delete any iMesh entry found at:
HKLM\Software

Back up your Registry before editing.

This may or may not solve your problem. If not, post back.

Ramona

 

Thank you so much for all that helpful info! The temp files are clean. I'm gonna give Ad-aware a try w/ the new signature files. I'm a little leary messing with the registry. Thank you again

 

Registry Edit

Hi Bimmer Guy,

You're quite welcome!

I didn't give you enough info on your Registry Edit. I understand if you prefer not to go there. What I should have recommended:

Start|Run
Type: Regedit
Highlight "My Computer "
Click on Edit and select "Find "
Type: iMesh

Then delete anything that is found.

But if you choose not to do this, I totally understand.

AdAware is your friend!

Keep us posted.

Ramona

 

Hi Ramona
I must thank you again for your friendly and speedy responces to my posts. I did all you mentioned to do. The new Ad-aware reference file found one more spyware ALEXA. But the problem still remains..
file:///C|/WINDOWS/TEMP/gdg51A4/index.htm
That is in the location bar as netscape launches.
As a sidebar.. In windows temp, there is a folder of that name and a netscape icon. I remove it and reboot and it comes back.

 

Hi Bimmer Guy,

You have no reasonable alternative except editing all instances of this line from your registry. Well, actually you could reinstall your system but I don't consider that a reasonable alternative.

This Title Bar script is being created by a command line or lines that are buried at several places in the Registry. There are a couple ways this can happen. One is by a Worm you may have acquired and the other (most likely) is by allowing some VB script to execute when asked while visiting some web site. Never say yes to those things!

Now that you have it, getting rid of it is as simple as finding the Registry entries and deleting them. There is no other way that I'm aware of.

If you are running Win98 you have little to fear from deleting that specific string from the Registry. If you muck it up you can always roll back the registry (even in DOS) so you're well protected. If running Win95 you will need to Export any keys being altered for possible restore. Anyway, the risk is minimal and worth the effort to rid yourself of this little pest.

Finding all instances of it can be challenging and you will need to word the search parameter carefully or you'll waste lots of time. I prefer to Export the entire Registry and do the preliminary searching by opening the Export with Word and using its Search capabilities since it's much faster and more forgiving of inexact phrasing.

Good luck

 

Hi Zyphr! Thank you for your post. I printed it out. I'll study it and try your suggestions. With any luck we can resolve this.

P.S. You guys are great!

 

Adware/Spyware

Hi Bimmer Guy,

The Alexa that AdAware found could be from either IE or Netscape. Bah humbug!

Have you done a virus scan on your system to eliminate the possibility of a virus? If not, I would do it now.

I would also recommend going to this Symantic site and downloading NoScript. This will protect your PC from VBScript viruses. I have scripting disabled at all times on my PC, using this tiny little feature.

Let us know how it goes with the Registry Edit. Post back if you have any more questions.

Ramona

 

Thanks Ramona, I sent that file to my office and I'll execute it tomorrow. As I would reboot, netscape would launch w/ a different line in the location. I do a search in the reg. with that line and it shows up as a bad entry. How many different ones are there in there? Or does it keep regenerating itself like a mutant tomato?

 

Hi Bimmer Guy,

When you run your virus scan, let us know the results. I'm hoping that you don't have a VBS worm.

Ramona

 

Morning, the antivirus update signatures are up to date but as soon as I get to my office I'll run a total hardisk scan. Btw, I'm using AVG from Grisoft.com antivirus(free) Updates come every few days.
Thanks again

 

Hi again, the antivirus update was updated yesterday. The scan of the H/D showed no infected files.

 

Since the only problem to my knowledge is that Netscape launches at startup, why not uninstall Netscape? OR does whatever this glitch is remain in the registry and is not a netscape problem in the first place.

 

An uninstall and install of Netscape did fix the problem. Thanks for the time and effort!!!

 

Woohoo!

Hi Bimmer Guy,

Glad that new install fixed the problem. Now you are a little more protected against the possibility of this happening again.

Ramona