TechSpot

IE 6 sometimes stops working

By Hitman1078
Apr 4, 2006
  1. Sometimes ie6 loses it's mind and will not load any web pages. I have to close it and delete the cookies and temp files for it to start working again. I have tried reinstalling ie 6 but have the same problem. I am running the most up to date versions of adaware and spybot search and destroy. They don't find anything but the cookies. Any help would be greatly appreciated.
    Attached is the file from hijack this
     
  2. Spike

    Spike TS Evangelist Posts: 2,168

    OK, firstly, thankyou for so clearly following the sticky instruction to post your HJT log as a txt attachment.

    However, help with your problem cannot proceed without some manner of explanation and/or resolution for these issues...

    1, Why aren't you running an antivirus?
    2, Why aren't you running a firewall?
    3, Why is the "Remote registry" service enabled and running on your machine?

    Beyond these questions, you have a couple of minor problems in your log, but besides this it's pretty much ok. These could, however, potentially be symptomatic of something more serious (or not as the case may be).

    Once you have resolved the issues mentioned above, please reboot your machine, wait for it to finish loading, and follow the instructions in Howards post HERE if you haven't done so already, before posting a fresh HJT log.
     
  3. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.htmll

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

    Go to your add remove programmes in your control panel and uninstall anything to do with(if there).

    C:\Program Files\Titan Poker
    C:\Program Files\PartyGaming

    Close control panel.

    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    casino.exe
    RunApp.exe

    Close task manager.

    Run HJT with no other programmes open. have HJT fix the following, by placing a tick in the little box next to(if there).

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank

    O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe

    O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe

    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe

    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe

    O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.1.2.76.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by105fd.bay105.hotmail.msn.com/resources/MsnPUpld.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

    Click on the fix checked button.

    Close HJT.

    Locate and dlete the following bold files(if there).

    C:\Program Files\Titan Poker\casino.exe
    C:\Program Files\PartyGaming\PartyPoker\RunApp.exe

    Reboot into normal mode.

    Get some antivirus and firewall protection. AVG free and Zonealarm free are very good. Google for them.

    Regards Howard :wave: :wave:
     
  4. Spike

    Spike TS Evangelist Posts: 2,168

    Three cheers for Howard - a far more generous person than I :)

    Please do follow his advice on the subject of antivirus and firewall, unless you have a valid reason not to have one, or you're going to end up having no end of problems, possibly including the return of the same problems you've had here.
     
  5. Hitman1078

    Hitman1078 TS Rookie Topic Starter

    I play online poker at titan poker and party poker so removing them will not allow me to play. I just purchased Norton Internet Security 2006. So once that's loaded I will repost the hijack this file after scanning with norton.

    Also if I delete the following:
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
    Will I have a problem running internet explorer 6
     
  6. Peddant

    Peddant TS Rookie Posts: 1,446

    YES you can delete those keys safely.about:blank is a BAD thing.

    There are a zillion more interesting and safer things to do on the internet than visit poker sites.

    Also,use - http://www.mozilla.com/firefox/ or http://www.opera.com/ as your main browser.

    How disable remote registry -

    1. Goto your control panel (you can do this by clicking on your start menu)
    2. Select administrative tools - services
    3. On the right panel, find the service called "remote registry"
    4. Right click on it and select properties
    5. In the startup type option box, select disable
    6. Reboot you computer and repeat steps 1-4. You should see it won't be running anymore.
     
  7. Spike

    Spike TS Evangelist Posts: 2,168

    Oops! good luck with that. (we normally advise people running norton home products to do themselves a favour and get rid of them)

    You can delete them, yes, but to my knowledge, about:blank ISN'T a bad thing. It's merely a page of absolutely nothing. I used to set my browser to open to about:blank deliberately once upon a time.
     
  8. Hitman1078

    Hitman1078 TS Rookie Topic Starter

    What's so bad about norton?
     
  9. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    It slows down your system.

    It doesnt keep your computer safe.

    It cause crashes.

    It can be a pain to uninstall. These forums have lots of examples of problems caused by Symantec/Norton crapware.

    You should deffinitely get rid of these.

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank See HERE for more info.

    As for the poker entries. If you really want to keep them, that`s upto you. However, you might want to look at THIS.

    PartyPoker\RunApp.exe is a similar application and therefore maybe just as bad.

    Regards Howard :)
     
  10. Spike

    Spike TS Evangelist Posts: 2,168

    Wow. I can't believe someone wrote a piece of malware to specifically take advantage of the about:blank address. That's just clever. Sickening, but clever.
     
  11. Hitman1078

    Hitman1078 TS Rookie Topic Starter

    Whats good to use besides Norton for both a firewall and anti virus?
     
  12. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    The free AVG antivirus programme is very good and won`t bog down your system. You can get it HERE.

    As for a firewall I personally use the free Zonealarm. You can get it HERE.

    There are other free firewalls such as Sunbelt Kerio that a lot of guys on here like. See HERE.

    Regards Howard :)
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...