Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

IExplorer starts normally except when called by another pgm "Blank Page"


  • This topic is locked This topic is locked
24 replies to this topic

#16 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:08:17 PM

Posted 01 March 2013 - 12:10 AM

Hi -

Please download http://www.bleepingcomputer.com/download/adwcleaner/
AdwCleaner is a program that searches for and deletes Adware, Toolbars, Potentially Unwanted Programs (PUPs), and browser Hijackers from your computer. 
NOTE:Close all open programs including your browser while the program runs.
To launch it click on Delete
Your computer will be Rebooted after the scan completes.
A log should be generated after scan ,post it here.
After completion you can reopen the program and click the Uninstall button if you wish.

 

Download ATF Cleaner by Atribune from HEREand save it to your Desktop.
NOTE : The download is in the Middle Top area, Please ignore all other advertising on the page.
Follow the instructions for the browser you use.
Read the instructions about the cookies. Delete what you do not need.
Double click ATF-Cleaner.exe icon to run the program.
Check a minimum of the boxes to the left of:
Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Prefetch (Windows XP) only.
Java Cache
The rest are optional - if you want to remove the lot, check "Select All".
Finally click Empty Selected. When you get the "Done Cleaning" message, click OK.
I use this daily on my XP and I do not need to run CCleaner at all -

 

Thank You -


Edited by noknojon, 01 March 2013 - 05:56 PM.


BC AdBot (Login to Remove)

 


#17 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:08:17 PM

Posted 01 March 2013 - 06:15 PM

Hi - I just finished re reading your latest ("by the way I noticed......".) and found this related to ->

I forgot to report this error: A "program" named CVE-2012-4792 cannot be removed

A report from National Cyber Awareness System
RE: Vulnerability Summary for CVE-2012-4792
Original release date:12/30/2012
Last revised:02/26/2013
Source: US-CERT/NIST
Overview : Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.

There is more techhy info ...... but it all means to get an Expert to fix it -


I am unable to follow the removal steps needed for this ................

 

Please follow the instructions in ==>This Guide<== starting from step 3.

If you cannot complete a step, skip it and continue.
 
Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues, and what you have done to resolve them, and a link to this topic.
 
If you can produce at least some logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.
 
If HelpBot replies to your topic, PLEASE follow His Step One so it will report your topic to the team members.

Note that they do get a bit busy, so there may be a day or 2 wait for an Expert to help you -

 

Thank You, and please follow this up -

 

Edited for spelling only -


Edited by noknojon, 01 March 2013 - 06:22 PM.


#18 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 175 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:06:17 AM

Posted 02 March 2013 - 04:50 PM

Hi and thanks. Here is log from AdwCleaner.

I'll then run the ATF Cleaner per the instructions. That's great info on running it every day.  I'll let you know how it went and if IE8 got fixed per the problem statement.
Thank you so much for your kind help and instructions.  Then I will continue as per your most current post - much appreciated info.

 

 

# AdwCleaner v2.113 - Logfile created 03/02/2013 at 16:33:46
# Updated 23/02/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : HP_Owner - HP-27E1513D96
# Boot Mode : Normal
# Running from : C:\Documents and Settings\HP_Owner.HP-27E1513D96\My Documents\Downloads\AdwCleaner.exe
# Option [Delete]
 
 
***** [Services] *****
 
Stopped & Deleted : DefaultTabUpdate
 
***** [Files / Folders] *****
 
 
***** [Registry] *****
 
Key Deleted : HKCU\Software\AppDataLow\Software\DefaultTab
Key Deleted : HKCU\Software\Default Tab
Key Deleted : HKCU\Software\DefaultTab
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\Software\Default Tab
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DefaultTab
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
 
***** [Internet Browsers] *****
 
-\\ Internet Explorer v8.0.6001.18702
 
[OK] Registry is clean.
 
-\\ Google Chrome v25.0.1364.97
 
*************************
 
AdwCleaner[R10].txt - [2053 octets] - [14/02/2013 22:13:25]
AdwCleaner[R11].txt - [2174 octets] - [14/02/2013 22:13:56]
AdwCleaner[R12].txt - [2296 octets] - [14/02/2013 22:18:00]
AdwCleaner[R13].txt - [2354 octets] - [15/02/2013 05:29:33]
AdwCleaner[R14].txt - [2483 octets] - [17/02/2013 18:59:46]
AdwCleaner[R15].txt - [2605 octets] - [18/02/2013 04:06:19]
AdwCleaner[R16].txt - [2727 octets] - [21/02/2013 14:11:26]
AdwCleaner[R17].txt - [2843 octets] - [21/02/2013 14:39:09]
AdwCleaner[R18].txt - [2911 octets] - [21/02/2013 23:26:10]
AdwCleaner[R1].txt - [744 octets] - [24/11/2012 15:55:43]
AdwCleaner[R2].txt - [2780 octets] - [03/02/2013 22:03:42]
AdwCleaner[R3].txt - [1510 octets] - [08/02/2013 18:50:46]
AdwCleaner[R4].txt - [1574 octets] - [08/02/2013 19:00:22]
AdwCleaner[R5].txt - [1694 octets] - [08/02/2013 19:07:13]
AdwCleaner[R6].txt - [1750 octets] - [14/02/2013 22:07:09]
AdwCleaner[R7].txt - [1810 octets] - [14/02/2013 22:07:36]
AdwCleaner[R8].txt - [1871 octets] - [14/02/2013 22:08:16]
AdwCleaner[R9].txt - [1992 octets] - [14/02/2013 22:12:01]
AdwCleaner[S10].txt - [1327 octets] - [02/12/2012 12:49:39]
AdwCleaner[S11].txt - [2870 octets] - [03/02/2013 22:06:13]
AdwCleaner[S12].txt - [377 octets] - [08/02/2013 19:01:34]
AdwCleaner[S13].txt - [1933 octets] - [14/02/2013 22:08:46]
AdwCleaner[S14].txt - [373 octets] - [14/02/2013 22:13:41]
AdwCleaner[S15].txt - [2236 octets] - [14/02/2013 22:14:13]
AdwCleaner[S16].txt - [2416 octets] - [15/02/2013 05:30:14]
AdwCleaner[S17].txt - [2545 octets] - [17/02/2013 19:00:28]
AdwCleaner[S18].txt - [2667 octets] - [18/02/2013 04:06:40]
AdwCleaner[S19].txt - [2789 octets] - [21/02/2013 14:11:52]
AdwCleaner[S1].txt - [803 octets] - [24/11/2012 16:01:46]
AdwCleaner[S20].txt - [2972 octets] - [21/02/2013 23:26:44]
AdwCleaner[S21].txt - [3511 octets] - [02/03/2013 16:33:46]
AdwCleaner[S2].txt - [903 octets] - [24/11/2012 16:15:50]
AdwCleaner[S3].txt - [906 octets] - [24/11/2012 18:20:09]
AdwCleaner[S4].txt - [965 octets] - [24/11/2012 19:41:40]
AdwCleaner[S5].txt - [1024 octets] - [25/11/2012 10:34:27]
AdwCleaner[S6].txt - [1085 octets] - [25/11/2012 16:05:16]
AdwCleaner[S7].txt - [1146 octets] - [26/11/2012 23:44:55]
AdwCleaner[S8].txt - [1206 octets] - [28/11/2012 03:07:44]
AdwCleaner[S9].txt - [1266 octets] - [30/11/2012 21:55:15]
 
########## EOF - C:\AdwCleaner[S21].txt - [4049 octets] ##########


#19 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:08:17 PM

Posted 02 March 2013 - 05:27 PM

Hi -
Sorry to ask you to post in the Malware Removal area, but when I looked for your last posted item it showed a related infection
I forgot to report this error: A "program" named CVE-2012-4792 cannot be removed. I get an installer error:
"Warning: can't delete value '{a1447a51-d8b1-4e93-bb19-82bd20da6f2}.sdb' under registry key
'Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\iexplore.exe'


You can Google ( Program named CVE-2012-4792 cannot be removed ) for more info,  but there is little help given

A live Google link is in my signature -
 

Thank You -

EDITED to post Information -


Edited by noknojon, 02 March 2013 - 05:32 PM.


#20 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 175 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:06:17 AM

Posted 02 March 2013 - 06:55 PM

Nokojon, please forgive - I'm not sure where the "Malware Removal area" is...  Is it under Forums then Virus, Trojan, Spyware, and Malware Removal Logs ?

About that CVE program, I really think it's related to Java removal or the nasties that rode in on the updates and possibly I cleared it on my other PC (with the smaller screen) that I only use to do printing.

 

I will be away from this until after Feb 5, I have something to prepare for, so if you can tell me where to post - if the above is wrong, would you please provide a link to the "open new topic"? I'll post it and then shut down this machine and unplug it so I can use the other and first thing, I will look to see if CVE is not on the other machine (the e-machine).  This problem is on the HP machine which I try hard to keep separate from the other machine as my modem and this OS is so quick to make a LAN I don't want.

 

Windows update was able to call a real IE window, so I think you have resolved my problem statement on this topic.  You have been so kind and timely and informative and interested  :thumbup2:  Go Bleep'ers!!!



#21 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:08:17 PM

Posted 02 March 2013 - 07:52 PM

Hi JoanneMT

I will be away from this until after Feb 5, ?? March 5 <<< The year flies - :wink:


To answer you - Yes It is - Sorry that we often refer to it by other names -

 

If you just click the links I left above that is where it will take you and show the logs to post there.

 

If you wish, you can reboot the "problem computer" and see if you still get any similar errors.

We ""may"" have cleaned it out, but without other logs I am not sure of your situation.

 

Note that you may wait 2 days for an answer to a post in that area at times -

 

Thanks for following up with us -



#22 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 175 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:06:17 AM

Posted 04 March 2013 - 01:44 PM

Hi Nokojon,

I find myself on the HP (Problem) computer today, and got the same result as the problem statement when I clicked an active link to an internet address.

I downloaded Cobian last night to do a backup but was unsuccessful.  I did succeed, however, in manually copying some important files.

I was in a hurry, and did not notice that MSEssentials was not active in the taskbar! I had left the PC on last night to do a thorough scan by MSE but unplugged from the modem. 

Thank you for kindly pointing out what month this is :-)  How about I open the other case after tomorrow and whatever follow-up is necessary.

 

Thank you so much



#23 noknojon

noknojon

    Almost Retired


  • Members
  • 9,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Victoria Australia
  • Local time:08:17 PM

Posted 04 March 2013 - 03:52 PM

Hi -

I would not worry too much about any backup for now, as the problem can be fixed (I think)

Just post your requested logs from http://www.bleepingcomputer.com/forums/topic34773.html and wait a day or so for the answer from the Experts -

The given idea for backup is Step 1 and you are already over Step 3, so jump to Step 6 and create the logs and post your topic, and click on Follow this Topic, as you have done here, then wait for an answer -

 

Regards -



#24 JoanneMT

JoanneMT
  • Topic Starter

  • Members
  • 175 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Florida
  • Local time:06:17 AM

Posted 04 March 2013 - 06:08 PM

Thank you, Nokojon, for all your help.  I did manage to get it posted - /forums/t/487466/

 

Gosh I am not looking forward to tomorrow. I'll probably be up all night.  You've been so nice to work with.    

 

Thank you so much



#25 hamluis

hamluis

    Moderator


  • Moderator
  • 43,094 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:17 AM

Posted 04 March 2013 - 07:03 PM

Reference:  http://www.bleepingcomputer.com/forums/t/487466/a-program-named-cve-2012-4792-cannot-be-removed-re-forumst486948/#entry2993854 .

 

Now that you have properly posted a malware log topic, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on, the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

To avoid confusion, I am closing this topic.

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users