Help - Search - Members - Calendar
Full Version: I have an issue where Internet Explorer won't open
Lavasoft Support Forums > Archived Topics > Archives: Resolved/Inactive Topics > Resolved/Inactive General Support Issues
gk_sabre
I have Windows XP Service Pack 2. My CPU has Pentium 4 with 1.70 GHz and 256 MB of RAM.

I had gone to the windows site http://windowsxp.mvps.org/IEFAQ.htm and looked at the Frequently Asked Questions. They suggested going to Internet Options and clearing the 'Enable third-party browser extensions (requires restart)' check box as a workaround, which I did. I was then able to open Internet Explorer. They stated that this shows that the problem is likely caused by a malware BHO and suggested posting here with my Hijackthis log.

Note: my issue is that I try opening Internet Explorer thru both an icon on the task bar and thru the Start menu. The hourglass appears for a couple seconds and I see nothing else.

My Hijackthis log is as follows:


Logfile of HijackThis v1.99.1
Scan saved at 11:05:45 AM, on 4/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\MERCUR~1\QUALIT~1\jboss\bin\QCJavaService.exe
C:\Program Files\Mercury Interactive\Quality Center Starter Edition\msdeBinn\MSSQL\Binn\sqlservr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Creative\SBLive\Creative Diagnostics 2.0\DIAGENT.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\AOL\1127772478\ee\AOLSoftware.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\America Online 9.0a\aoltray.exe
C:\Program Files\AOL Companion\companion.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Mercury Interactive\Mercury LoadRunner\launch_service\bin\magentproc.exe
C:\Program Files\Mercury Interactive\Quality Center Starter Edition\bin\Jboss\QCTrayIcon.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
c:\program files\common files\aol\1127772478\ee\services\antiSpywareApp\ver2_0_25_1\AOLSP Scheduler.exe
c:\program files\common files\aol\1127772478\ee\aolsoftware.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\America Online 9.0a\waol.exe
C:\Program Files\America Online 9.0a\shellmon.exe
C:\Program Files\Common Files\Aol\aoltpspd.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Documents and Settings\Nancy Kozlowski\My Documents\Hijack This\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn0\ycomp5_3_12_0.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BHOManager Class - {474264BC-9571-47C1-85B9-780F756DC9CE} - C:\WINDOWS\system32\BHOManager.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn0\ycomp5_3_12_0.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [DIAGENT] C:\Program Files\Creative\SBLive\Creative Diagnostics 2.0\DIAGENT.EXE startup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [AHQInit] C:\Program Files\Creative\SBLive\Program\AHQInit.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Pure Networks Port Magic] "C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe" -Run
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1127772478\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [MyWebSearch Email Plugin]
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - Startup: Camio Viewer 3.2.lnk = C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0a\aoltray.exe
O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe
O4 - Global Startup: Forget Me Not.lnk = C:\Program Files\Broderbund\AG CreataCard\AGRemind.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LoadRunner Agent Process.lnk = C:\Program Files\Mercury Interactive\Mercury LoadRunner\launch_service\bin\magentproc.exe
O4 - Global Startup: Mercury Quality Center Service Control.lnk = C:\Program Files\Mercury Interactive\Quality Center Starter Edition\bin\Jboss\QCTrayIcon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/f...tup1.0.0.15.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {205E7068-6D03-4566-AD06-A146B592FBA5} (Loader Class v2) - http://nancy-ezkgpymd5:8080/qcbin/Spider80.ocx
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish.com/SnapfishActivia.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {90051A81-3018-4826-8B38-DD60B6B53F9C} (Snapfish File Upload ActiveX Control) - http://www.snapfish.com/SnapfishUpload.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - http://a248.e.akamai.net/f/248/5462/2h/www...ol/SymDlBrg.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/...utocomplete.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_...aploader_v6.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://mercuryinteractive.webex.com/client...bex/ieatgpc.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D9909967-52BF-4C21-A038-6171B870E051}: NameServer = 205.188.146.145
O18 - Protocol: HTLFP - {03B7A5D4-96B0-4316-95F8-072D326A58F1} - ielpview.dll (file missing)
O18 - Protocol: vfsp - {E4CB5121-E242-11D4-8ED6-00010219EB22} - VFSProtocol.dll (file missing)
O20 - AppInit_DLLs: MicIPCU.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\\aolserv.exe (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: Mercury Quality Center - Alexandria Software Consulting - C:\PROGRA~1\MERCUR~1\QUALIT~1\jboss\bin\QCJavaService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

I hope somebody can help.
winchester73
Did you intentionally install the MyWebSearch Email Plugin and My Web Search Bar?

XP's 'Add-on Manager' allows you to see all the add-ons for IE.

Open Internet Explorer, and on the Tools menu, click 'Manage Add-ons'.

Let us know what is "enabled'.
gk_sabre
QUOTE(winchester73 @ Apr 25 2006, 07:27 AM) *
Did you intentionally install the MyWebSearch Email Plugin and My Web Search Bar?

XP's 'Add-on Manager' allows you to see all the add-ons for IE.

Open Internet Explorer, and on the Tools menu, click 'Manage Add-ons'.

Let us know what is "enabled'.



No, I didn't intentionally add the My Web Search Bar. I am also getting an error message that "The MSBAR.dll is missing" every time I restart.

I also forgot to mentionthat I tried to use Windows XP Restore utility yesterday to restore prior to this past Saturday, when I first started to have this Internet Explorer problem. Attempts to restore back to Friday and Thurday's configurations failed.
gk_sabre
QUOTE(winchester73 @ Apr 25 2006, 07:27 AM) *
Did you intentionally install the MyWebSearch Email Plugin and My Web Search Bar?

XP's 'Add-on Manager' allows you to see all the add-ons for IE.

Open Internet Explorer, and on the Tools menu, click 'Manage Add-ons'.

Let us know what is "enabled'.



Here's what is enabled:

Name Publisher Type File

Adobe PDF Reader Link Helper Adobe Systems Browser Helper Object AcroIEHelper.dll
AOL Toolbar Toolbar toolbar.dll
AOL Toolbar Browser Extension toolbar.dll
BHO Manager Class (Not Verified) Mercury Inter Browser Helper Object BHOManager.dll
CNavExtBho Class Symantec Corp Browser Helper Object NavShExt.dll
CNisExtBho Class Symantec Corp Browser Helper Object NISShExt.dll
Google (Not Verified) Google Inc Toolbar googletoolbar2.dll
Google Toolbar Helper (Not Verified) Google Inc Browser Helper Object googletoolbar2.dll
Norton AntiVirus Symantec Corp Toolbar NavShExt.dll
Norton Internet Security 2006 Symantec Corp Toolbar NISShExt.dll
Real.com Browser Extension
Windows Messenger Browser Extension
Yahoo! Companion (Not Verified) Yahoo! Inc Toolbar ycomp5_3_12_0.dll
Yahoo! Companion BHO (Not Verified) Yahoo! Inc Browser Helper Object ycomp5_3_12_0.dll
Yahoo! Messenger Yahoo! Inc Browser Extension yhexbmes0521.dll

By the way, my machine is now really slow.
LS SteveJ (former LS employee)
I would start by removing the references to MyWebSearch bar, as the installation of it appears to be corrupted (with the DLL file missing)

remove

O4 - HKLM\..\Run: [MyWebSearch Email Plugin]

and

O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S

try this first, and if this does not work, we could try disabling BHO's one by one, until iexplore loads again..... I will give you instructions on that if it is necessary...
gk_sabre
QUOTE(LS SteveJ @ Apr 25 2006, 02:40 PM) *
I would start by removing the references to MyWebSearch bar, as the installation of it appears to be corrupted (with the DLL file missing)

remove

O4 - HKLM\..\Run: [MyWebSearch Email Plugin]

and

O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S

try this first, and if this does not work, we could try disabling BHO's one by one, until iexplore loads again..... I will give you instructions on that if it is necessary...



I remove these by using Hijackthis and running Fix??
gk_sabre
QUOTE(gk_sabre @ Apr 25 2006, 02:46 PM) *
I remove these by using Hijackthis and running Fix??



I tried using Hijackthis by selecting checkboxes for those two line items and then hitting 'Fix Checked" It prompts me with "Are you sure you want to delete, they will be deleted permanently" I click 'Yes' and the Hijackthis App closes. I reopen it and re-run scan and they're still there. Two subsequent attempts had same result.

Have these guys become this smart with this stuff that they won't let these things be deleted??
OldRebel
It's better to reboot your PC after clicking "fix" with HijackThis. Sometimes that is required for removal. Also, have you looked in add/remove programs to see if mywebsearch bar can be uninstalled there?
winchester73
HJT won't remove the O4 files from your computer, only prevent them from running when you start your computer.

I'd suggest you do this ...

Click on Start > Settings > Control Panel and double click on Add/Remove Programs

Find "My Web Search" and/or "My Way Speedbar" in the list of installed programs and click on Change/Remove to uninstall it/them.


Reboot your computer. Close all open windows and run HijackThis once again. Use your mouse to put a checkmark next to the following items (if found), and press "Fix Checked":

O4 - HKLM\..\Run: [MyWebSearch Email Plugin]
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe


Reboot your computer.

Let us know if that makes a difference.
gk_sabre
QUOTE(winchester73 @ Apr 26 2006, 07:43 AM) *
HJT won't remove the O4 files from your computer, only prevent them from running when you start your computer.

I'd suggest you do this ...

Click on Start > Settings > Control Panel and double click on Add/Remove Programs

Find "My Web Search" and/or My Web Search in the list of installed programs and click on Change/Remove to uninstall it/them.
Reboot your computer. Close all open windows and run HijackThis once again. Use your mouse to put a checkmark next to the following items (if found), and press "Fix Checked":

O4 - HKLM\..\Run: [MyWebSearch Email Plugin]
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe


Reboot your computer.

Let us know if that makes a difference.



Neither "My Web Search" nor "My Way Speedbar" were in the list of installed programs. I also ran a search on them. "My Web Search" came up as a Cookie so I deleted it. "My Way Speedbar" was not found.

I remembered I had recently downloaded a Google Search bar which I was prompted as to whether I wanted it. I now deleted all references to that.
winchester73
What is the status of your problem?
gk_sabre
QUOTE(winchester73 @ Apr 26 2006, 04:26 PM) *
What is the status of your problem?




I just restarted my computer. Here's the status:

1) Internet Explorer now opens with 'Enable third-party browser extensions" check box checked. That was one of the original issues.

2) After Restart, the 'Error loading C:\PROGRAM~1|MYWEBS~1\bar\1.bin\MWSBAR.dll. The specified module could not be found." message still appears. I looked for a folder called MYWEBS under Program Files and it doesn't exist.

3) Machine appears faster so far.

4) Ran Hijackthis again and the

"O4 - HKLM\..\Run: [MyWebSearch Email Plugin]" ,
"O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S" " AND
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe"
items are still there.
gk_sabre
QUOTE(winchester73 @ Apr 26 2006, 04:26 PM) *
What is the status of your problem?




Now, I just noticed that Hijackthis has an option to "Add checked to ignorelist"

I checked them again, hit "Add checked to ignorelist" and will now restart again.
winchester73
To clarify ...

You ticked those items and then re-booted, and the items still show?

QUOTE
Now, I just noticed that Hijackthis has an option to "Add checked to ignorelist"

I checked them again, hit "Add checked to ignorelist" and will now restart again.


Why?

We don't really want to 'ignore' them.
gk_sabre
QUOTE(winchester73 @ Apr 26 2006, 05:01 PM) *
To clarify ...

You ticked those items and then re-booted, and the items still show?
Why?

We don't really want to 'ignore' them.




Yes, the items still show. When I used Hijackthis and checked them and hit 'Fix checked", the application closes.

Also, since I think and observe more things as we go along: starting about a month or so ago, when PC is restarted, the System 32 folder is opened. Never happened before.
winchester73
LS SteveJ will likely want some submissions for his R&D department. I'll let him carry on here.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.