Problem with ie imbedded in desktop background

#1 walkdaddy8

New Member

Group: Members
Posts: 7
Joined: 05-February 10

Posted 05 February 2010 - 11:42 AM

I am working on a friends Dell Inspiron 530 with Windows Vista. When the desktop comes up there is an internet explorer box that pops up imbedded in the desktop background that comes up with the "Cannot display webpage". I can not figure out how to cut that off. I have limited start up items and have used task manager to see what is running and I can't figure out how cut it off. Thanks for any help.

#2 Broni

The Coolest BC Computer

Group: BC Advisor
Posts: 22,157
Joined: 01-February 08
Gender:Male
Location:Daly City, CA

Posted 05 February 2010 - 12:08 PM

Download Autoruns for Windows: http://technet.microsoft.com/en-us/sysinte...s/bb963902.aspx
No installation required.
Simply unzip Autoruns.zip file, and double click on autoruns.exe file to run the program.
Go File>Save, and save it as AutoRuns.txt file to know location.
You must select Text from drop-down menu as a file type:

Posted Image

Attach the file to your next reply.

My Website

Posted Image

My help doesn't cost a penny, but if you'd like to consider a donation, click

#3 walkdaddy8

New Member

Group: Members
Posts: 7
Joined: 05-February 10

Posted 05 February 2010 - 12:16 PM

Thanks for the help. Here is what I come up with in autoruns. I think I attached the txt file correctly.

Attached File(s)

AutoRuns.txt (130.46K)
Number of downloads: 9

#4 Broni

The Coolest BC Computer

Group: BC Advisor
Posts: 22,157
Joined: 01-February 08
Gender:Male
Location:Daly City, CA

Posted 05 February 2010 - 12:20 PM

Re-run Autoruns, go to "Logon" tab and UN-check following entries:

+ "DellComms"
+ "dellsupportcenter"
+ "IgfxTray"
+ "Persistence"

Restart computer. Same issue?

My Website

Posted Image

My help doesn't cost a penny, but if you'd like to consider a donation, click

#5 walkdaddy8

New Member

Group: Members
Posts: 7
Joined: 05-February 10

Posted 05 February 2010 - 12:59 PM

Thanks for the help. I just rebooted and it hasn't popped up yet, but sometimes it takes a little while before it does. I have ran malwarebytes and cleaned a few problems off and then I just ran spybot search and destroy. It found 4 more files, but would only delete 2 because I "didn't have administrator priveleges". There is only one account on the computer and it is an administrator account. I guess something has definitely hijacked parts of the account.

Thanks again.

#6 walkdaddy8

New Member

Group: Members
Posts: 7
Joined: 05-February 10

Posted 05 February 2010 - 01:10 PM

These are the two files it says I do not have administrator priveleges to delete in Spybot Search and Destroy.

Microsoft.WindowsSecurityCenter.AntiVirusOverride: [SBI $3604910C] Settings (Registry change, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride

Microsoft.WindowsSecurityCenter.FirewallOverride: [SBI $0C94D702] Settings (Registry change, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride

User abort!: Scan was not completed successfully. (Status)

#7 Broni

The Coolest BC Computer

Group: BC Advisor
Posts: 22,157
Joined: 01-February 08
Gender:Male
Location:Daly City, CA

Posted 05 February 2010 - 01:18 PM

Quote

I just rebooted and it hasn't popped up yet

Good

Keep me posted.

Regarding Spybot...
It's really a tool of the past and I'd simply uninstall it.
As for those registry keys, let's see what they say...

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

Double-click SystemLook.exe to run it.
Vista users:: Right click on SystemLook.exe, click Run As Administrator

Copy the content of the following box into the main textfield:

:reg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride

Click the Look button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

My Website

Posted Image

My help doesn't cost a penny, but if you'd like to consider a donation, click

#8 walkdaddy8

New Member

Group: Members
Posts: 7
Joined: 05-February 10

Posted 05 February 2010 - 01:37 PM

Gotcha about spybot. Before I read your reply I went and enabled the hidden administrator account at cmd prompt and then ran sypbot from the new admin account and it cleaned them. I will try the the directions in you last reply now. Thanks for the help. Great website. While not as knowledgeable as most here I will try to help out when I can. Thanks again.