Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Norton IE and C; Drive problems


  • Please log in to reply
6 replies to this topic

#1 pdunny

pdunny

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 01 June 2005 - 04:54 PM

Windows XP on a Compaq Laptop..

Norton:
When i try and open up norton it gives me an error that says internal program error. I dont have a disk for it or anything so what do i do.

IE (Internet Explorer)
When I open up IE it immediatly comes up with a page that looks like the one when it cant find the web site, but the URL for it is something wierd. It has the web address of a site and then a random mix of # and letters and then the site i typed in to visit. Some times when i disconnect and then reconnect the wireless adapter i can get on any site for like 5 minutes or so. After that every thing shows up like before.

C: Drive
When i look in the main C: drive there are these wierd .exe things at the bottom. It says they have been created today and a few days in the past week. I also see things with wierd names in my running processes list. the names look to be just a random mix. they are only about 5-8 letters long.

any help would be appreciated

EDIT: I am using another computer in my house

Edited by pdunny, 01 June 2005 - 04:54 PM.


BC AdBot (Login to Remove)

 


#2 Uraiser

Uraiser

  • Members
  • 254 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:San Antonio, TX
  • Local time:01:42 PM

Posted 01 June 2005 - 05:27 PM

ok, sorry if my skills arent as good as the other guys on here. Im just starting out. From the description you've given, it seems as if your browser has been hijacked. This is caused by adware,spyware, malware, etc. Your computer may be loaded with it. What i want you to do is download adaware from lavasoft.com, then spybot from http://www.safer-networking.org/ Place these programs on a disk and then install them on your laptop. Run them, do not worry about updating them as of yet. Post back and tell me the status.

#3 pdunny

pdunny
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 01 June 2005 - 06:51 PM

i did that but its still the same

#4 Uraiser

Uraiser

  • Members
  • 254 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:San Antonio, TX
  • Local time:01:42 PM

Posted 01 June 2005 - 07:17 PM

No problem, i'll get you some more software.. www.intermute.com, download spysubtract, this tool comes bundled with the Coolwebsearch browser hijacker remover.
Next, try this if the above doesnt help http://www.sunbelt-software.com/CounterSpy.cfm. Download counterspy and run it, it is a very good program. If this doesnt work, you may need to run and post a hijackthis log in the hijackthis forums.

Edited by Uraiser, 01 June 2005 - 07:26 PM.


#5 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:01:42 PM

Posted 01 June 2005 - 08:39 PM

The first thing to do is download, install, update and run any of the following which you do not already have. It is important to update these before each time they are run so that you are sure they have the latest definitions:

Anti-malware freeware (You can run as many of these as you wish. Generally there is no conflict between these and you should always run several)

AdAware: http://www.lavasoftusa.com/software/adaware/
Microsoft Antispyware Beta: http://www.microsoft.com/athome/security/s...re/default.mspx
SpywareBlaster: http://www.javacoolsoftware.com/spywareblaster.html
Spybot S&D: http://www.safer-networking.org/en/index.html
Microsoft Malicious Software Removal Tool (Win XP and Win 2000):
http://www.microsoft.com/security/malwareremove/default.mspx


CWShredder from InterMute
CW Shredder removes some variants of spyware known as the Coolwebsearch Trojan. The Trojan takes advantage of a flaw in a key component of Windows -- Microsoft's version of the Java Virtual Machine -- to install itself via popups often found on porn and illegal software (a.k.a. "warez") sites. Run CWShredder after installing, and have it look for updates. Then click the "Fix" button, and the program will both scan and fix any problems it finds. If your system does not have this kind of spyware, it will give you the good news.
Cost: Free
http://www.intermute.com/spysubtract/cwshr...r_download.html


Set these to fix whatever they find and run each one, rebooting in between each.

The next step would be to do two or three web based anti-malware scans:

Web based online Antivirus and anti-malware scans: (these can be run regardless of whatever else you are using. You must use Internet Explorer to run these.)

Panda Activescan (IE only)
http://www.pandasoftware.com/activescan/co...n_principal.htm

Trend Micro antivirus and malware scan:
http://housecall-beta.trendmicro.com/en/st...orp.asp?id=scan

Etrust Anti-virus web scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Kaspersky Anti-Virus Web Scanner
http://www.kaspersky.com/service?chapter=161739400#betatest


Let us know if that above does not cure your problem.

#6 Rimmer

Rimmer

  • Members
  • 2,159 posts
  • OFFLINE
  •  
  • Location:near Sydney, Australia
  • Local time:04:42 AM

Posted 01 June 2005 - 09:50 PM

pdunny - You've already been given enough links so I'll spare you my list. If you can concentrate on the anti-spyware programs for now and get as many of them as you can download (3 or 4 is good), transferred to your PC. Then boot in Safe Mode and run the scans.
If you are not sure how to boot in Safe Mode there is a tutorial here:
Safe Mode

Let the anti-spyware delete anything it finds, then reboot but this time to Safe Mode with Networking and attempt to access the internet. If you are able to access the internet then update all the anti-spyware programs and run them again. With luck this will deal with whatever problem you have. Reboot and check the situation.

If you still have problems I would suggest you post an HJT log to the HJT Forum where there are trained malware experts who are available to help. Please read the pinned posts 'How to use this Forum' and 'How to post a HighJack This log' at the top of the forum:
http://www.bleepingcomputer.com/forums/Hij...alysis-f22.html

good luck, :thumbsup:

Edited by Rimmer, 01 June 2005 - 09:52 PM.


Soltek QBIC, Pentium 4 3.0GHz, 512MB RAM, 200GB SATA HDD, ATI Radeon 9600XT 256MB, Netgear 54Mb/s WAP, ridiculously expensive Satellite Broadband
Windows XP Home SP2, Trend Micro Internet Security, Firefox, Thunderbird, AdAwareSE, Spybot S&D, SpywareBlaster, A-squared Free, Ewido Security Suite.

#7 pdunny

pdunny
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:02:42 PM

Posted 02 June 2005 - 03:15 PM

well ill try the safemode reboot and then ill do the hijackthis log.. had to do this on my other computer too so im familiar with the procedures.. and thaks to all for the help




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users