IE 6 sometimes stops working

[Hitman1078]

Sometimes ie6 loses it's mind and will not load any web pages. I have to close it and delete the cookies and temp files for it to start working again. I have tried reinstalling ie 6 but have the same problem. I am running the most up to date versions of adaware and spybot search and destroy. They don't find anything but the cookies. Any help would be greatly appreciated.
Attached is the file from hijack this

 

[Spike]

OK, firstly, thankyou for so clearly following the sticky instruction to post your HJT log as a txt attachment.

However, help with your problem cannot proceed without some manner of explanation and/or resolution for these issues...

1, Why aren't you running an antivirus?
2, Why aren't you running a firewall?
3, Why is the "Remote registry" service enabled and running on your machine?

Beyond these questions, you have a couple of minor problems in your log, but besides this it's pretty much ok. These could, however, potentially be symptomatic of something more serious (or not as the case may be).

Once you have resolved the issues mentioned above, please reboot your machine, wait for it to finish loading, and follow the instructions in Howards post HERE if you haven't done so already, before posting a fresh HJT log.

 

[howard_hopkinso]

Hello and welcome to Techspot.

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.htmll

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Go to your add remove programmes in your control panel and uninstall anything to do with(if there).

C:\Program Files\Titan Poker
C:\Program Files\PartyGaming

Close control panel.

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

casino.exe
RunApp.exe

Close task manager.

Run HJT with no other programmes open. have HJT fix the following, by placing a tick in the little box next to(if there).

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank

O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe

O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe

O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe

O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.1.2.76.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by105fd.bay105.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

Click on the fix checked button.

Close HJT.

Locate and dlete the following bold files(if there).

C:\Program Files\Titan Poker\casino.exe
C:\Program Files\PartyGaming\PartyPoker\RunApp.exe

Reboot into normal mode.

Get some antivirus and firewall protection. AVG free and Zonealarm free are very good. Google for them.

Regards Howard :wave: :wave:

 

[Spike]

Three cheers for Howard - a far more generous person than I

Please do follow his advice on the subject of antivirus and firewall, unless you have a valid reason not to have one, or you're going to end up having no end of problems, possibly including the return of the same problems you've had here.

 

[Hitman1078]

I play online poker at titan poker and party poker so removing them will not allow me to play. I just purchased Norton Internet Security 2006. So once that's loaded I will repost the hijack this file after scanning with norton.

Also if I delete the following:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
Will I have a problem running internet explorer 6

 

[Peddant]

YES you can delete those keys safely.about:blank is a BAD thing.

There are a zillion more interesting and safer things to do on the internet than visit poker sites.

Also,use - http://www.mozilla.com/firefox/ or http://www.opera.com/ as your main browser.

How disable remote registry -

1. Goto your control panel (you can do this by clicking on your start menu)
2. Select administrative tools - services
3. On the right panel, find the service called "remote registry"
4. Right click on it and select properties
5. In the startup type option box, select disable
6. Reboot you computer and repeat steps 1-4. You should see it won't be running anymore.

 

[Spike]

Norton Internet Security 2006.

Oops! good luck with that. (we normally advise people running norton home products to do themselves a favour and get rid of them)

YES you can delete those keys safely.About:blank is a BAD thing.

You can delete them, yes, but to my knowledge, about:blank ISN'T a bad thing. It's merely a page of absolutely nothing. I used to set my browser to open to about:blank deliberately once upon a time.

 

[Hitman1078]

What's so bad about norton?

 

[howard_hopkinso]

What's so bad about norton?

It slows down your system.

It doesnt keep your computer safe.

It cause crashes.

It can be a pain to uninstall. These forums have lots of examples of problems caused by Symantec/Norton crapware.

You should deffinitely get rid of these.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank See HERE for more info.

As for the poker entries. If you really want to keep them, that`s upto you. However, you might want to look at THIS.

PartyPoker\RunApp.exe is a similar application and therefore maybe just as bad.

Regards Howard

 

[Spike]

Wow. I can't believe someone wrote a piece of malware to specifically take advantage of the about:blank address. That's just clever. Sickening, but clever.

 

[Hitman1078]

Whats good to use besides Norton for both a firewall and anti virus?

 

[howard_hopkinso]

The free AVG antivirus programme is very good and won`t bog down your system. You can get it HERE.

As for a firewall I personally use the free Zonealarm. You can get it HERE.

There are other free firewalls such as Sunbelt Kerio that a lot of guys on here like. See HERE.

Regards Howard