1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

ie6 - cant find server

Discussion in 'Malware and Virus Removal Archive' started by wbbs, 2005/01/16.

Thread Status:
Not open for further replies.
  1. 2005/01/16
    wbbs

    wbbs Inactive Thread Starter

    Joined:
    2004/11/14
    Messages:
    2
    Likes Received:
    0
    this is a 2-part problem.

    i can access my email and surf the web using my tabbed browser but i cant load a page using IE or download with a download manager. i get page errors after 10 min. of surfing and need to reboot every time or i can just log off without restarting the computer.

    1. i have an ie-based browser that loads pages ok but when i open IE6 it CANT FIND SERVER. whats wrong? my cable modem is fine, the activity lites are on and blinking.

    2. with my ie-based browser i cant stay connected for more than 10 min. after 10 min. i have to reboot to surf again. i used to be able to keep my computer on all nite long but now i can only stay online 10 min. at a time.

    steps i already took:

    removed viruses and spyware
    cleaned out temp files, history, etc.
    disabled start up programs

    (there are no processes or programs running in the background except systray, explorer)

    i have a cable modem, usb network adapter (ethernet), win98
     
    wbbs,
    #1
  2. 2005/01/16
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Hi wbbs and welcome to the forum.

    From quicklinks in my signature, download Hijackthis v1.99. It comes zipped and will need to be upzipped to a normal folder (so not the desktop and not any temp folder).

    Once you have it on your PC, use msconfig (or whatever you used to disable startups) and renable all of them. Reboot, run Hijackthis using the 'scan and create a log' option, then post the log here.

    Hopefully we can figure out what is going on from that log. It will at least give a good starting place.

    Please DO NOT use Hijackthis to fix anything before we can look at the log.
     
    Newt,
    #2

  3. to hide this advert.

  4. 2005/01/16
    wbbs

    wbbs Inactive Thread Starter

    Joined:
    2004/11/14
    Messages:
    2
    Likes Received:
    0
    Logfile of HijackThis v1.98.2
    Scan saved at 12:47:08 PM, on 1/16/05
    Platform: Windows 98 Gold (Win9x 4.10.1998)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\RUNDLL32.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\PROGRAM FILES\VVSN\VVSN.EXE
    C:\PROGRAM FILES\GREENBROWSER 2.3\GREENBROWSER.EXE
    C:\PROGRAM FILES\HIJACK\HIJACKTHIS.EXE

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://trafficg.com/hps.php?member=trafg
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Explorer
    R3 - URLSearchHook: (no name) - _{9368D063-44BE-49B9-BD14-BB9663FD38FC} - (no file)
    O3 - Toolbar: ÌìÃÂËÑË÷ - {56A7DC70-E102-4408-A34A-AE06FEF01586} - (no file)
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [VVSN] C:\PROGRAM FILES\VVSN\VVSN.EXE
    O8 - Extra context menu item: For&msAgent - C:\Download ZIP\agent.html
    O8 - Extra context menu item: Download by Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
    O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O16 - DPF: {FDE6B956-B80A-4578-9A10-4C24609412F1} - http://access.gamezdump.com/output/060116/us/fullgames/fullgames.exe
    O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4399/mcfscan.cab
    O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) -
    O16 - DPF: {771A1334-6B08-4A6B-AEDC-CF994BA2CEBE} -
    O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} -
    O21 - SSODL: grwTv - {1D6115E9-B7CB-BF43-2355-CB2258468DC6} - (no file)
    O21 - SSODL: OLE Automation Module - {3F143C3A-1457-6CCA-03A7-7AA23B61E40F} - (no file)
     
    Last edited: 2005/01/16
    wbbs,
    #3
  5. 2005/01/17
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    As I suspected, your browser has been pretty badly hijacked by malware. Moving this to the security section.

    I'll take a look thru this log but meanwhile, you need to get the latest version 1.99 (you have 1.98.2) and do another log. There are items that can hide from the older version and items it wasn't designed to show so we'll need the extra detail.
     
    Newt,
    #4
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.