Annoying Problem (Resolved)

  1. #1
    varygoode is offline Elite Member

    Cool Annoying Problem (Resolved)

    Hey, haven't been around for awhile, but I'm back. IE won't redirect certain things and it's just giving me lotsa problems. Ask me stuff or give me programs to get and I shall respond.
    --------------------------------------
    Logfile of HijackThis v1.98.0
    Scan saved at 6:49:12 PM, on 9/26/2004
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\System32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\brsvc01a.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\brss01a.exe
    D:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    D:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\BRMFRSMG.EXE
    C:\WINDOWS\Explorer.EXE
    D:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    D:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\WINDOWS\system32\ctfmon.exe
    D:\Program Files\AIM\aim.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\System32\winlogon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    D:\Program Files\Hijack This\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://baseball.fantasysports.yahoo.com/b1
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = http://localhost;
    F0 - system.ini: Shell=
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
    O2 - BHO: IE Privacy Keeper - Last IE Window Detector - {1201333E-BAD9-481C-BCF5-6904498CF85B} - D:\Program Files\UnH Solutions\IE Privacy Keeper\IEPKbho.dll
    O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - D:\Program Files\SpywareGuard\dlprotect.dll
    O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [AVG7_EMC] D:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O4 - HKLM\..\Run: [BootSkin Startup Jobs] "D:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BOOTSKIN.E XE" /StartupJobs
    O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [AIM] D:\Program Files\AIM\aim.exe -cnetwait.odl
    O8 - Extra context menu item: Save Flash - res://D:\Program Files\UnH Solutions\Flash Saving Plugin\FlashSButton.dll/210
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\AIM\aim.exe
    O9 - Extra button: (no name) - {D799B0E4-BEDE-41d2-AEE0-1E3A1C4EF918} - D:\Program Files\UnH Solutions\IE Privacy Keeper\IEPrivacyKeeper.exe
    O9 - Extra 'Tools' menuitem: IE Privacy Keeper - {D799B0E4-BEDE-41d2-AEE0-1E3A1C4EF918} - D:\Program Files\UnH Solutions\IE Privacy Keeper\IEPrivacyKeeper.exe
    O9 - Extra button: Flash - {43CF38F3-5AEC-45a3-AD31-04EB06E9C6CA} - (no file) (HKCU)
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...b?1093055846938
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/...all/xscan53.cab
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX27.cab
    O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildtangent.com/bgn/...lim/install.cab
    O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by99fd.bay99.hotmail.msn.com...ex/HMAtchmt.ocx


  2. #2
    owen is offline D-A-L Team Member (UK)
    Thats a clean log Varygoode, nothing wrong there.

  3. #3
    varygoode is offline Elite Member
    Ah, crap. So any ideas what could be causing this? Maybe some setting in SP2? Anything?

  4. #4
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    Did you notice the difference after SP2?

    If so maybe consider removing it for the time being. Or just to see if your issues are resolved.

  5. #5
    varygoode is offline Elite Member
    Actually, I'm pretty sure of what caused it, now that I think of it. Someone I know, who's good for hacking computers, had a link to his BuddyProfile in his info. When I clicked it, everything went nuts, a weird window came up, and from then on I noticed messed up stuff. I did a System Restore to before I clicked it, but it didn't work. SP2 was working fantabulously before this occurred.

  6. #6
    owen is offline D-A-L Team Member (UK)
    BuddyProfile, I can't understand how this would trigger something like the problems you describe.

  7. #7
    varygoode is offline Elite Member
    I don't believe that the link was actually going to a BuddyProfile, but linked to something suspicous instead.

  8. #8
    owen is offline D-A-L Team Member (UK)
    Could you possibly give me a link to this so called BuddyProfile if you don't mind? I'll take a look and see if there is anything bad in there.

  9. #9
    varygoode is offline Elite Member
    Unfortunately, or, actually, fortunately for everyone else, he doesn't have the malicious link in his info anymore, so I cannot tell you the link. All I'm asking is have you ever heard these symptoms before and are there any remedies out there, regardless of the cause?

  10. #10
    owen is offline D-A-L Team Member (UK)
    Save 20% on AVG Internet Security 2012 Suite!
    Quote Originally Posted by varygoode
    IE won't redirect certain things
    Could you explain that a bit more

Closed Thread
Page 1 of 4 1 2 3 4 LastLast