Start a Conversation

Unsolved

This post is more than 5 years old

5148

December 18th, 2004 17:00

Internet Explorer has taken over my computer

The following problem came up all of a sudden. Running XP SP1 on Dell
4550 2.8 gig with 1024 ram, DSL thru WAP.
During boot and/or open any program. Hourglass cursor blinks
constantly, about once per second, lasting perhaps 5 minutes before program opens. Then all ok. Open another, same thing. Opened Task Manager during a wait. IExplorer shows
up in 2, sometimes 3 places in Processes listing. List changes with
each blink of cursor. Cannot pick and end a task. DSL activity light
blinks constantly. CPU usage is 60-80% until program loads then drops
back to normal. When normal, cursor stops blinking. Ran spyware
programs (2) and McAfee Virus Scan (I do both regularly) and nothing.
Same thing happens in Safe Mode when trying to run a program in cmd
window.
System Restored to earlier time. Starts ok. Open a program, back to
same problem.
Turned off modem. Tried again. There were more IExplorers in the
Processes list than I could count and growing. Had to unplug to stop.
Seems like something has gotten hold of my IE, doing something on the
internet, and releasing to me when done. It didn't like my turning off the
modem.
Appreciate any help.
Here is a HiJackThis log.
 
Logfile of HijackThis v1.99.0
Scan saved at 10:03:30 PM, on 12/15/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\cisvc.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\ATI Multimedia\main\LaunchPd.exe
C:\Program Files\EarthLink TotalAccess\TaskPanl.exe
C:\Program Files\PC-TV\WinManager\WinManager.exe
C:\Program Files\Sprint Virtual Assistant\bin\mpbtn.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\Joe\My Documents\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://start.earthlink.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL
= http://www.earthlink.net/partner/more/msie/button/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://start.earthlink.net/AL/Search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://start.earthlink.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.dellnet.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.dellnet.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://start.earthlink.net/AL/Search
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak =
http://start.earthlink.net
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = 127.0.0.1;http://localhost;
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497}
- (no file)
R3 - URLSearchHook: (no name) - _{44F9B173-041C-4825-A9B9-D914BD9DCBB3}
- (no file)
R3 - URLSearchHook: SrchHook Class -
{44F9B173-041C-4825-A9B9-D914BD9DCBB3} - C:\Program Files\EarthLink
TotalAccess\ElnIE.dll
O2 - BHO: EarthLink Popup Blocker -
{4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - C:\Program Files\EarthLink
TotalAccess\PnEL.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: EarthLink Toolbar -
{D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink
TotalAccess\PnEL.dll
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH
Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [MCAgentExe] C:\Program
Files\McAfee.com\Agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe]
C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
O4 - HKLM\..\Run: [VirusScan Online]
c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common
Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI
Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program
Files\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [OzgfSrv32] C:\WINDOWS\ozgfsrv.exe
O4 - HKLM\..\Run: [MrcrSrv32] C:\WINDOWS\mrcrsrv.exe
O4 - HKLM\..\RunServices: [Norton Auto Protect] nava.exe
O4 - HKLM\..\RunServices: [Microsoft media] winmplayers.exe
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI
Multimedia\main\LaunchPd.exe"
O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink
TotalAccess\TaskPanl.exe" -winstart
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program
Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O4 - Global Startup: Sprint FastConnect virtual assistant.lnk =
C:\Program Files\Sprint Virtual Assistant\bin\matcli.exe
O4 - Global Startup: WinManager.lnk = C:\Program
Files\PC-TV\WinManager\WinManager.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
present
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} -
C:\Program Files\ATI Multimedia\TV\EXPLBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} -
C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
C:\WINDOWS\System32\Shdocvw.dll
O12 - Plugin for .mid: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .qt: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin.dll
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) -
file://C:\Program Files\AutoCAD LT 2002\AcDcToday.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
file://C:\Program Files\AutoCAD LT 2002\AcPreview.ocx
O23 - Service: Ati HotKey Poller - Unknown -
C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown - C:\WINDOWS\SYSTEM32\ati2sgag.exe
O23 - Service: McAfee.com McShield - Unknown -
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine - Mcafee.com
Corporation - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: Intel(R) NMS - Intel Corporation -
C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: X10 Device Network Service - Unknown -
C:\PROGRA~1\ATIMUL~1\RemCtrl\x10nets.exe (file missing)
 

4.8K Posts

December 29th, 2004 18:00

Joe,

Your welcome! Sorry we couldn't get you back without a re-install.

Hindsight is always 20/20 ... :) and all users don't really have that option. Me, I can re-image my harddrive in just minutes, but still take the time (sometimes hours) to work with those that can't.

Glad to hear everthing is working ok.

Happy surfing,

Mike.

 

9 Posts

December 29th, 2004 18:00

Mike,

Tried everything. Would not go away, even in safe mode. Always went to the dsl modem  trying to do something, I know not what. As written in previous posts, Task Manager showed numerous entries for iexplore, sometimes 60 or more, and changing every second making it impossible to do anything. Tried a Restore early on, but it always came back. Tried a XP repair. No dice. Gave me a fit trying to do that, locking up numerous times part way through. Finally did a complete reinstall of XP, including a reformat of c:, which fixed the problem. I tried unsuccessfully to keep from losing some data and having to do all of the reinstalls. Time would have been better spent doing early on what I had to do finally to fix the problem. Oh, well. Once again, I thank you for all of your help. I learned a lot going through the HJT routines.

Joe

No Events found!

Top