Don't see anything major other than that you are running both Symantec/Norton and McAfee at the same time. Best to remove one since they fight among themselves and can slow down your computer or in some cases make the desktop go away.
One remnant you can check/Fix Checked:
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
Are you having a problem or have you just removed winfixer and want a checkup?
Thanks so much I am having 2 problems...... 1. when I try and link to another website, internet explorer opens blank and sometimes I can copy the short cut, but some links have no address bar and I can't open the link at all and I'm in big trouble cuz I need to do the for my work.
2. is when I try to print sometimes I get a error message saying "unknown source do you want to keep running scripts in theis page, res://C:\WINDOWS\system32\shdoclc.dll/preview.dlg"
I have tried to uninstall Mcaffe, but Ill try again with Norton>
The above are all extras invoked by Internet Explorer so might be involved with the problem. If that fixes the problem then you can restore a few at a time until you find the culprit.
To restore them you start Hijackthis, View the list of Backups, then check the ones you want to restore then Restore.
It is also possible that you have a bad wininet.dll file. Start, Run, sigverif, OK then when the new program comes up press START. When it finishes look for wininet.dll in the list. If you don't find it then click on the word modified to sort the items by date and look for files that were added about the time the problem started.
Unpack to your desktop and run it. If you have green print at the top then just press Restore Original Hosts then OK.
IF you have red print then press make Hosts Writeable first.
After you Restore Original Hosts then press Make Hosts Read Only?
These last two programs will clean up any entries in your hosts files or in Internet Explorer's Restricted Zone that might be causing problems and keeping you from going to certain sites.
Make sure you restore the entries that I had you check/Fix Checked on the last post. These were all good entries (or at least benign) and should not be permanently removed. One of them is part of Norton.
To remove McAfee you can:
Shutdown and Restart and Boot into Safe Mode by tapping the F8 key when you see the PC maker's logo. Keep tapping until it tells you it is going to Safe Mode or you see the Safe Mode menu. Select the top option. Log in as your usual login or you won't find the programs you put on the desktop and some of the entries we want to remove will not appear in HijackTHis.
Run HijackThis and just do a Scan only. Check then Fix Checked any of the following that remain:
To make sure they are gone you can Start, Run, services.msc, OK then scroll down in the Services window and find the 3 McAfee services listed above. Doubleclick on the first one and change the StartupType: to Disabled. OK
Repeat for the other two.
I don't get paid for this. We are all volunteers who do this for fun and because we like to help others.
Ron
A few Recommendations.
You can delete any programs we had you install but leave Hijackthis for now. You can also run Hijackthis, View the List of Backups and Delete All. If we used killbox its backup files can be removed now too. Run Killbox and select File, Cleanup, Delete All Backups. If you have an antivirus, check its quarantined files and delete any it had found.
You should also definitely toggle System Restore Off and then back On.
Following site has very clear instructions for turning it off. To turn it back on you just repeat the instructions but uncheck the box where it says to Turn Off System Restore on all Drives.
The reason we do this is to remove any archived copies of the infection from System Restore so that if you have to use SYstem Restore to fix a problem you won't accidentally reinfect your system. The next link explains how to use System Restore to go back in time if you hit a bad site or get infected.
One way to make an infection more obvious is to check everything in your current HijackThis and Add to Ignore List then set up Hijackthis to run at boot and to show you if it finds anything new. You do this by None of the Above Just start the program, Config (Main) and then check the box in front of Run Hiajckthis at startup and show it when items are found. OK. Then if Hijackthis opens after a boot it will show you any new programs that have been added. You can then decide if you want to keep them or not. If in doubt you can google for the .exe or .dll file at the end of the entry and see if what other people think of it.
Make sure you have removed any older versions of Java or JRE with Control Panel, Add/Remove Programs. Updates do not remove the older versions which have exploitable flaws.
If you feel that Internet Explorer is running a bit slower after the latest Java update you can try checking this line and then Fix Checked.
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
It was added by the latest version of Java. We don't know why. Earlier versions did not have it. It has been proven to slow down connections on some systems and removing it doesn't seem to hurt anything.
If you are not running the latest version of Adobe you should consider updating. There are reports of a loophole for hackers in pre 7.03 versions. As an alternative you can dump adobe completely and use fox-it instead: http://www.foxitsoftware.com/pdf/rd_intro.php
Ok I will do all this when I get home tonight, Its great that you do all this to help people like me, because I am clueless...... and I need my computer for work but my kids use it too , so who know where I picked up these problems. I was mad for three days because I had to go all the way to my office when I could have been doing work from home. Thanks again, Marla
RKinner
2 Intern
•
5.9K Posts
0
March 7th, 2006 15:00
Don't see anything major other than that you are running both Symantec/Norton and McAfee at the same time. Best to remove one since they fight among themselves and can slow down your computer or in some cases make the desktop go away.
One remnant you can check/Fix Checked:
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
momslate
13 Posts
0
March 7th, 2006 18:00
Thanks so much I am having 2 problems...... 1. when I try and link to another website, internet explorer opens blank and sometimes I can copy the short cut, but some links have no address bar and I can't open the link at all and I'm in big trouble cuz I need to do the for my work.
2. is when I try to print sometimes I get a error message saying "unknown source do you want to keep running scripts in theis page, res://C:\WINDOWS\system32\shdoclc.dll/preview.dlg"
I have tried to uninstall Mcaffe, but Ill try again with Norton>
Thank You for your help Marla
RKinner
2 Intern
•
5.9K Posts
0
March 7th, 2006 19:00
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://us.mcafee.com/root/campaign.asp?cid=16013&affid=105-57
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
http://www.funkytoad.com/
IF you have red print then press make Hosts Writeable first.
After you Restore Original Hosts then press Make Hosts Read Only?
http://www.mvps.org/winhelp2002/DelDomains.inf and then right click on it and Install. Nothing obvious will happen.
momslate
13 Posts
0
March 7th, 2006 20:00
Thank you again! Im going to try it right now and let you know how it goes,
Marla
momslate
13 Posts
0
March 9th, 2006 03:00
Method 2: Microsoft Internet Explorer 6.x Repair for Windows XP
So Thanks again, If you want you can tell me how to get rid of McAffee because I just got Norton for a year. ? Do you get paid for this? Marla
RKinner
2 Intern
•
5.9K Posts
0
March 9th, 2006 13:00
Make sure you restore the entries that I had you check/Fix Checked on the last post. These were all good entries (or at least benign) and should not be permanently removed. One of them is part of Norton.
To remove McAfee you can:
Shutdown and Restart and Boot into Safe Mode by tapping the F8 key when you see the PC
maker's logo.
Keep tapping until it tells you it is going to Safe Mode or you see the Safe
Mode menu. Select the top option. Log in as your usual login or you won't find the programs you put on the desktop
and some of the entries we want to remove will not appear in HijackTHis.
Run HijackThis and just do a Scan only. Check then Fix Checked any of the following that remain:
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Unknown owner - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (file missing)
To make sure they are gone you can Start, Run, services.msc, OK then scroll down in the Services window and find the 3 McAfee services listed above. Doubleclick on the first one and change the StartupType: to Disabled. OK
Repeat for the other two.
I don't get paid for this. We are all volunteers who do this for fun and because we like to help others.
Ron
A few Recommendations.
You can delete any programs we had you install but leave Hijackthis for now. You can also run Hijackthis, View the List of Backups and Delete All. If we used killbox its backup files can be removed now too. Run Killbox and select File, Cleanup, Delete All Backups. If you have an antivirus, check its quarantined files and delete any it had found.
You should also definitely toggle System Restore Off and then back On.
Following site has very clear instructions for turning it off. To turn it back on you just repeat the instructions but uncheck the box where it says to Turn Off System Restore on all Drives.
http://www.f-secure.com/v-descs/sfc_dis1.shtml
The reason we do this is to remove any archived copies of the infection from System Restore so that if you have to use SYstem Restore to fix a problem you won't accidentally reinfect your system. The next link explains how to use System Restore to go back in time if you hit a bad site or get infected.
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/systemrestore.mspx
One way to make an infection more obvious is to check everything in your current HijackThis and Add to Ignore List then set up Hijackthis to run at boot and to show you if it finds anything new. You do this by None of the Above Just start the program, Config (Main) and then check the box in front of Run Hiajckthis at startup and show it when items are found. OK. Then if Hijackthis opens after a boot it will show you any new programs that have been added. You can then decide if you want to keep them or not. If in doubt you can google for the .exe or .dll file at the end of the entry and see if what other people think of it.
To avoid going to a bad site you might want to install IE-SpyAd and SpywareBlaster and make the other changes recommended at:.
http://www.mvps.org/winhelp2002/restricted.htm
I used to recommend Spybot's Immunize system but have recently learned it is not as good as the one at:
http://www.mvps.org/winhelp2002/hosts.htm
Always run a firewall. The one in XP SP2 is pretty good tho I think the free one from Zone Alarm is better.
http://www.zonelabs.com/store/content/company/products/trial_zaFamily/trial_zaFamily.jsp?lid=home_freedownloads
Turn on Autoupdates so you always get the latest patches from Windows.
Never hurts to do one of the free on line scans from Panda or Trend. They take a while but are pretty good.
www.pandasoftware.com/activescan/activescan.asp?
http://housecall.trendmicro.com/
I like to run Spybot S&D.
http://www.safer-networking.org/en/download/index.html
Also like to run AdAware once in a while.
http://www.lavasoftusa.com/software/adaware/
Get the latest version of
Java:
http://www.java.com/en/download/windows_automatic.jsp
Make sure you have removed any older versions of Java or JRE with Control Panel, Add/Remove Programs. Updates do not remove the older versions which have exploitable flaws.
If you feel that Internet Explorer is running a bit slower after the latest Java update you can try checking this line and then Fix Checked.
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
It was added by the latest version of Java. We don't know why. Earlier versions did not have it. It has been proven to slow down connections on some systems and removing it doesn't seem to hurt anything.
If you are not running the latest version of Adobe you should consider updating. There are reports of a loophole for hackers in pre 7.03 versions.
As an alternative you can dump adobe completely and use fox-it instead:
http://www.foxitsoftware.com/pdf/rd_intro.php
momslate
13 Posts
0
March 9th, 2006 23:00