:: Your Computer Technical Resource Headquarters! :: Your Computer Technical Resource Headquarters!
Computer Support Forums arrow Internet & Network Support arrow Security & Viruses arrow Topic: IE Errors!
May 26, 2020, 06:05:13 AM

Home Forum Rules Help Search Mobile Version Login Register

Welcome, Guest. Please login or register.
Did you miss your activation email?
May 26, 2020, 06:05:13 AM

Login with username, password and session length
 Featured Sites:
12th Anniversary Celebrating 12 Years! (1997 - 2009) 12th Anniversary
Thanks to ALL that make this site what it is!
  0 Members and 1 Guest are viewing this topic.
Pages: [1] Go Down Print
Author Topic: IE Errors!  (Read 1282 times)
Sr. Member

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 130

Bookmark and Share

View Profile
« on: October 04, 2004, 11:18:57 AM »

Operating System Version: XPpro SP2
Problem Application Name & Version: Various
Problem Hardware Make & Model:
Error Messages: See post

This is my new problems, these have occured occasionaly most notably #1 & #2 which apear more frequently.

1: Is there any way I can prevent the flash.ocx error in IEsp2.
I can run flash programs before suddenly i get that error, its an active x control I think. I have tried uninstalling and reinstalling from a fresh download, so when i get the error it asks me do I wish to continue, i click yes but then I get a window saying IE has caused an error and must close. How can I FIX THIS?

2: Each time I run spybot it always finds 5 entries of a piece of spyware called 'DSO exploits'. I remove it each time but it returns. Can I get rid of it permanently?
[Is there any software that prevents spyware from getting onto my machine in the first place?]

3: Occasionaly I have noticed that my antivirus(AVG free. uptodate) has noticed a trojan/virus called IRC backdoor.spybot or something like that. The appearance of this warning is rare but immediately when I see it I run AVG and it doesnt detect any viruses.. so do I have this virus or not?
« Last Edit: October 04, 2004, 11:20:23 AM by Zoobee » Logged

Global Moderator
Hero Member

Karma: +78/-0
Offline Offline

Gender: Male
Posts: 3915

Bookmark and Share

View Profile
« Reply #1 on: October 05, 2004, 01:08:44 AM »

Post a "HijackThis" log so we can see whats running.The DSO exploits is a fault with Spybot which they have yet to fix so dont worry about it.

An Australian Member of

Sr. Member

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 130

Bookmark and Share

View Profile
« Reply #2 on: October 05, 2004, 05:43:21 PM »

Umm.. I installed spywareblaster, spyware guard(t said to download that over hijackblaster), CWSshredder, PeperFix and LSPfix. I had no CWW files, no Peperfiles, so I'm assuming the LSPfix did the damage. I cdnt connect browse after using it 3 files were fixed with it, also in another post they told me to delete rxhost in the registry i did that and restored it so that was not the problem... i then had to do a system restore so i am not installing any of the above programs, as they seem to have caused the problem. Should I get rid of rxhost again and then boot into safe and remove it?

here is my new log:

Logfile of HijackThis v1.98.2
Scan saved at 6:39:06 PM, on 10/5/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Documents and Settings\Colin\My Documents\Hijack this\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =*
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =*
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =*
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =*
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =*
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =*
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [AVG_CC] C:\Program Files\Grisoft\AVG6\avgcc32.exe /startup
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\RunServices: [Microsoft Update Machine] rxhost.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: BT Yahoo! Sidebar - {51085E3D-A958-42A2-A6BE-A6A9B0BAF276} - C:\Program Files\Yahoo!\browser\ysidebarIE.dll
O9 - Extra 'Tools' menuitem: BT &Yahoo! Sidebar - {51085E3D-A958-42A2-A6BE-A6A9B0BAF276} - C:\Program Files\Yahoo!\browser\ysidebarIE.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {231B1C6E-F934-42A2-92B6-C2FEFEC24276} (yucsetreg Class) - C:\Program Files\Yahoo!\common\yucconfig.dll
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -

I also have some details of the two viruses i mentioned in my first post.

Trojan horse IRC/BackDoor.sdbot.47.BO
found in system volume information\_restore{there was a bunch of numbvers here sorry i didnt get them}(there was also something outside the brackets i got it for the other one but not for this one)

found in system volume information\_restore{bunch of number}RP4\AD0001126.exe

Now each time they have appeared I have run AVG(updated today) and it doesn't detect them. They must be there in some form somewhere, as I get the warnings but they aren't detected... that strikes me as odd.

EDIT: I have since fixed the rxhost entry with Hijack this.

« Last Edit: October 06, 2004, 02:11:27 PM by Zoobee » Logged

Pages: [1] Go Up Print 
Jump to:  

Powered by MySQL Powered by PHP

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines

Valid XHTML 1.0! Valid CSS!

This site is NOT responsible for any damage that the information on this site may cause to your system. Everything you try, whether inspired by the response given from this site or not, is entirely at your own risk. All product names and company names used herein are for identification purpose only and may be trademarks or registered trademarks of their respective owners. We are in no way affiliated or representing any of the companies on this site unless specified.
Back to Top
Stop Spam Harvesters, Join Project Honey Pot Fight Back Against Spammers! Get Firefox! Get Thunderbird! View Sylvain Amyots profile on LinkedIn
Back to Top
Google visited last this page June 29, 2018, 01:45:55 PM