Web Browser Issues

Ferral_Imp · July 30th, 2004

Let Me First Appologize If This Message Appears In All Caps To Anyone Else But I Can"t Help That

My Web Browsers Are Acting All Funny And I Can"t Get Them To Act Normal Whenever I Try To Type Anything It"s All In Caps And I Can"t Get It Not To Do That Everytime I Click On A Link To Go To A New Webpage It Opens A New Window Like When I Navigated Here From My Bookmarks It Opened A Separate Window From My Homepage Then Opened Another Window When I Clicked To Go Into The Forums Then Another When I Clicked To Enter This Forum Area I Also Can"t Get Any Secure Website To Show Up For Me In Ie They Come Up As Page Not Available And In Firefox They Come Up As Connection Refused To Site>

I"ve Run Adaware Spybot Pest Patrol Bazooka Norton And Spysweeper With No Luck Of Fixing This I"m Bout Ready To Scream Cuz It"s Not Even Been A Month Since I Had To Reformat And This Happens

Thnx In Advance For Any Help

cpugeniusmv · July 30th, 2004

i think there's probably just something holding your shift key down...get a screwdriver and wiggle each shift key a bit.

**SPeedY_B** · July 30th, 2004

Either your shift key is physically stuck (or broken), or you may have activated sticky keys. Try tapping shift 5 times, you should hear a beep once it's deactivated (or activated if this isn't the problem, press shift another 5 times to turn it back off again)

Ferral_Imp · July 30th, 2004

Well ok seems like this thing is/was possessed again. I re-ran everything, restarted the computer, and then re-ran all the spy/adware scanners. Spybot keeps coming up with an entry for dso exploit even after I removed it and cleared it out of the recovery area. Other than that, everything is normal scanwise.

After the restart the all caps letters have stopped and both my browsers seem to have stopped opening a new window everytime I click to go to a different webpage. The only issue I still have is that I cann't go to any secure sites (hotmail, paypal, etc.). Whenever I try to go to a secure site, I either get "page not available" in IE, or I get "connection refused" in Firefox. And this isn't just one or two sites it's all secure sites that generate this response.

If it helps, my comp is a HP Pavilion ze4200. It's running win xp pro, it's current with it's updates, my browsers are internet explorer 6, and mozilla firefox.

**dreamliner77** · July 30th, 2004

1) run hijackthis and post the log
2) run spybot in safe mode.

Ferral_Imp · July 31st, 2004

1) my highjack this log

Logfile of HijackThis v1.97.7
Scan saved at 11:53:17 PM, on 7/30/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\carpserv.exe
C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Inverse IP InSight\PenTele\ARMon32a.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet\icc\icc32.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\Program Files\Inverse IP InSight\PenTele\ARUpld32.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Documents and Settings\owner\Desktop\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4nb.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.usefulware.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.usefulware.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://D:\content\include\XPPatchInstaller.CAB
O16 - DPF: {8B1BC605-C593-4865-8F5B-05517F0CD0BB} (MSSecurityAdvisorCD Class) - file://D:\Content\include\msSecUcd.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38175.7067592593
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{04ABDB90-3367-42C6-B065-8B258F2765E8}: NameServer = 207.44.96.129 204.186.0.202
O17 - HKLM\System\CS1\Services\Tcpip\..\{04ABDB90-3367-42C6-B065-8B258F2765E8}: NameServer = 207.44.96.129 204.186.0.202

2) I already run spybot in safe mode when I scan.

thnx again to everyone who's tried to help.

napalmnthemorning · August 1st, 2004

Give this spyware XoftSpy a scan on your system and see if it catches anything!

**rushm001** · August 1st, 2004

Originally Posted by Ferral_Imp

The only issue I still have is that I cann't go to any secure sites (hotmail, paypal, etc.). Whenever I try to go to a secure site, I either get "page not available" in IE, or I get "connection refused" in Firefox. And this isn't just one or two sites it's all secure sites that generate this response.

You don't happen to be running Norton Internet Security? I think sometimes one of the settings can block secure websites.

**Lee** · August 1st, 2004

I don't see your thread in uppercase :?

**rushm001** · August 1st, 2004

Originally Posted by Lee

I don't see your thread in uppercase :?

The forum automatically removes any multiple capital letters.

**Lee** · August 1st, 2004

Really? Ok Did Not Know That, Call 'd' For Dunce.

Ferral_Imp · August 1st, 2004

Originally Posted by napalmnthemorning

Give this spyware XoftSpy a scan on your system and see if it catches anything!

Downloading the file now. I'll post the results after I get done a scan in a lil while.

Originally Posted by rushm001

You don't happen to be running Norton Internet Security? I think sometimes one of the settings can block secure websites.

Yeah. I'm using NIS 2004. How would I find out if norton is the reason why I can't get to secure sites? Is there a way to fix it if it is causing the problem or am I up the proverbial creek?

Originally Posted by rushm001

The forum automatically removes any multiple capital letters.

well that's a useful bit of info to know for future hauntings.

Ferral_Imp · August 1st, 2004

Xsoftspy found a bunch of stuff.

Internet Alert{2 entries}
Bonzi Buddy {7 entries}
CoolwebSearch{1 entries}
CWS.0slogo {1 entries}
Winpup32 {2 enrties}
Marketscore(Netsetter) {1 entry}

**rushm001** · August 1st, 2004

Originally Posted by Ferral_Imp

Yeah. I'm using NIS 2004. How would I find out if norton is the reason why I can't get to secure sites? Is there a way to fix it if it is causing the problem or am I up the proverbial creek?

You should be able to see if it has by viewing the logs that NIS generates. In NIS 2003 you click on the statistics tab at the side, and then click on the view logs button. I'm sure 2004 should be similar.

Ferral_Imp · August 2nd, 2004

Yay. I can finally check my email!!!!

mucho thnx again to everyone for the help.

**j79zlr** · August 2nd, 2004

I would not recommend XoftSpy, they use false positives in order to get you to buy it.

Salinske · August 10th, 2004

I'm sorry to bring back an old thread but I'm trying to research a problem that is similar to this one. Thanks in advance for any assistance!

Ferral_Imp, did disabling a function in NIS fix the "connection refused" error or was it the XoftSpy scan that fixed it?

My father in law is getting the same error when trying to get to his secure sites. I did some work on his computer about a week ago and got rid of some spyware he had on there and now when he tries to get to any secure site he gets the message "connection refused"

Thanks again for any help anyone can provide.

July 30th, 2004	Top \| #1
Ferral_Imp OSNN Senior Addict Joined: January 2004 Location: PA Posts: 685 Reputation: 90 Power: 108	Web Browser Issues Let Me First Appologize If This Message Appears In All Caps To Anyone Else But I Can"t Help That My Web Browsers Are Acting All Funny And I Can"t Get Them To Act Normal Whenever I Try To Type Anything It"s All In Caps And I Can"t Get It Not To Do That Everytime I Click On A Link To Go To A New Webpage It Opens A New Window Like When I Navigated Here From My Bookmarks It Opened A Separate Window From My Homepage Then Opened Another Window When I Clicked To Go Into The Forums Then Another When I Clicked To Enter This Forum Area I Also Can"t Get Any Secure Website To Show Up For Me In Ie They Come Up As Page Not Available And In Firefox They Come Up As Connection Refused To Site> I"ve Run Adaware Spybot Pest Patrol Bazooka Norton And Spysweeper With No Luck Of Fixing This I"m Bout Ready To Scream Cuz It"s Not Even Been A Month Since I Had To Reformat And This Happens Thnx In Advance For Any Help

July 30th, 2004	Top \| #3
SPeedY_B I may actually be insane. Joined: March 2002 Location: Midlands, England Posts: 15,800 Reputation: 2877 Power: 310	Either your shift key is physically stuck (or broken), or you may have activated sticky keys. Try tapping shift 5 times, you should hear a beep once it's deactivated (or activated if this isn't the problem, press shift another 5 times to turn it back off again) 1. SPeedYB.co.uk 2. CamPortal.co.uk 3. MacIRC.co.uk

July 30th, 2004	Top \| #5
dreamliner77 The Analog Kid Joined: March 2002 Location: Red Sox Nation Posts: 4,653 Reputation: 1111 Power: 182	1) run hijackthis and post the log 2) run spybot in safe mode. "You can fight without ever winning, but never win without a fight." -Neil Peart of RUSH

July 31st, 2004	Top \| #6
Ferral_Imp OSNN Senior Addict Joined: January 2004 Location: PA Posts: 685 Reputation: 90 Power: 108	1) my highjack this log Logfile of HijackThis v1.97.7 Scan saved at 11:53:17 PM, on 7/30/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\carpserv.exe C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\LEXPPS.EXE C:\windows\system\hpsysdrv.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\PROGRA~1\PESTPA~1\PPControl.exe C:\PROGRA~1\PESTPA~1\PPMemCheck.exe C:\PROGRA~1\PESTPA~1\CookiePatrol.exe C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe C:\Program Files\Lexmark X74-X75\lxbbbmon.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\WINDOWS\system32\HPConfig.exe C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe C:\Program Files\Inverse IP InSight\PenTele\ARMon32a.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Internet\icc\icc32.exe C:\PROGRA~1\MOZILL~1\firefox.exe C:\Program Files\Inverse IP InSight\PenTele\ARUpld32.exe C:\Program Files\Yahoo!\Messenger\ypager.exe C:\Documents and Settings\owner\Desktop\HijackThis.exe C:\WINDOWS\System32\wuauclt.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4nb.hpwis.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.usefulware.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.usefulware.com R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll O4 - HKLM\..\Run: [CARPService] carpserv.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s O4 - HKLM\..\Run: [QT4HPOT] C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe" O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0 O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://D:\content\include\XPPatchInstaller.CAB O16 - DPF: {8B1BC605-C593-4865-8F5B-05517F0CD0BB} (MSSecurityAdvisorCD Class) - file://D:\Content\include\msSecUcd.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38175.7067592593 O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{04ABDB90-3367-42C6-B065-8B258F2765E8}: NameServer = 207.44.96.129 204.186.0.202 O17 - HKLM\System\CS1\Services\Tcpip\..\{04ABDB90-3367-42C6-B065-8B258F2765E8}: NameServer = 207.44.96.129 204.186.0.202 2) I already run spybot in safe mode when I scan. thnx again to everyone who's tried to help.

August 1st, 2004	Top \| #8
rushm001 In the beginning...... Joined: September 2002 Location: Norfolk, UK Posts: 3,480 Reputation: 1370 Power: 165	Originally Posted by Ferral_Imp The only issue I still have is that I cann't go to any secure sites (hotmail, paypal, etc.). Whenever I try to go to a secure site, I either get "page not available" in IE, or I get "connection refused" in Firefox. And this isn't just one or two sites it's all secure sites that generate this response. You don't happen to be running Norton Internet Security? I think sometimes one of the settings can block secure websites.

Latest News Posts

Latest Forum Posts

Latest Member Blogs

July 30th, 2004	Top \| #2
cpugeniusmv Computer Genius Joined: April 2003 Posts: 485 Reputation: 50 Power: 116	i think there's probably just something holding your shift key down...get a screwdriver and wiggle each shift key a bit.

July 30th, 2004	Top \| #4
Ferral_Imp OSNN Senior Addict Joined: January 2004 Location: PA Posts: 685 Reputation: 90 Power: 108	Well ok seems like this thing is/was possessed again. I re-ran everything, restarted the computer, and then re-ran all the spy/adware scanners. Spybot keeps coming up with an entry for dso exploit even after I removed it and cleared it out of the recovery area. Other than that, everything is normal scanwise. After the restart the all caps letters have stopped and both my browsers seem to have stopped opening a new window everytime I click to go to a different webpage. The only issue I still have is that I cann't go to any secure sites (hotmail, paypal, etc.). Whenever I try to go to a secure site, I either get "page not available" in IE, or I get "connection refused" in Firefox. And this isn't just one or two sites it's all secure sites that generate this response. If it helps, my comp is a HP Pavilion ze4200. It's running win xp pro, it's current with it's updates, my browsers are internet explorer 6, and mozilla firefox.

August 1st, 2004	Top \| #7
napalmnthemorning OSNN Senior Addict Joined: June 2002 Location: OREGON Posts: 719 Reputation: 60 Power: 128	Give this spyware XoftSpy a scan on your system and see if it catches anything!

August 1st, 2004	Top \| #9
Lee OSNN Proxy Joined: January 2004 Location: Kings Hill, West Malling, Kent, England. Posts: 3,330 Reputation: 1020 Power: 145	I don't see your thread in uppercase :?

August 1st, 2004	Top \| #10
rushm001 In the beginning...... Joined: September 2002 Location: Norfolk, UK Posts: 3,480 Reputation: 1370 Power: 165	Originally Posted by Lee I don't see your thread in uppercase :? The forum automatically removes any multiple capital letters.

August 1st, 2004	Top \| #11
Lee OSNN Proxy Joined: January 2004 Location: Kings Hill, West Malling, Kent, England. Posts: 3,330 Reputation: 1020 Power: 145	Really? Ok Did Not Know That, Call 'd' For Dunce.

August 1st, 2004	Top \| #12
Ferral_Imp OSNN Senior Addict Joined: January 2004 Location: PA Posts: 685 Reputation: 90 Power: 108	Originally Posted by napalmnthemorning Give this spyware XoftSpy a scan on your system and see if it catches anything! Downloading the file now. I'll post the results after I get done a scan in a lil while. Originally Posted by rushm001 You don't happen to be running Norton Internet Security? I think sometimes one of the settings can block secure websites. Yeah. I'm using NIS 2004. How would I find out if norton is the reason why I can't get to secure sites? Is there a way to fix it if it is causing the problem or am I up the proverbial creek? Originally Posted by rushm001 The forum automatically removes any multiple capital letters. well that's a useful bit of info to know for future hauntings.

August 1st, 2004	Top \| #13
Ferral_Imp OSNN Senior Addict Joined: January 2004 Location: PA Posts: 685 Reputation: 90 Power: 108	Xsoftspy found a bunch of stuff. Internet Alert{2 entries} Bonzi Buddy {7 entries} CoolwebSearch{1 entries} CWS.0slogo {1 entries} Winpup32 {2 enrties} Marketscore(Netsetter) {1 entry}

August 1st, 2004	Top \| #14
rushm001 In the beginning...... Joined: September 2002 Location: Norfolk, UK Posts: 3,480 Reputation: 1370 Power: 165	Originally Posted by Ferral_Imp Yeah. I'm using NIS 2004. How would I find out if norton is the reason why I can't get to secure sites? Is there a way to fix it if it is causing the problem or am I up the proverbial creek? You should be able to see if it has by viewing the logs that NIS generates. In NIS 2003 you click on the statistics tab at the side, and then click on the view logs button. I'm sure 2004 should be similar.

August 2nd, 2004	Top \| #15
Ferral_Imp OSNN Senior Addict Joined: January 2004 Location: PA Posts: 685 Reputation: 90 Power: 108	Yay. I can finally check my email!!!! mucho thnx again to everyone for the help.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
What browser ya using?	AcftMecH	Linux & BSD	15	March 26th, 2006 2:00am
Is there a webpage that acts like a browser within a browser?	lancer	Windows Desktop Systems	14	June 16th, 2005 8:58am
Browser	zeke_mo	Macintosh	15	November 12th, 2004 12:46am
New IE browser	napalmnthemorning	Windows Desktop Systems	18	August 7th, 2002 11:49pm
Best Browser for XP	Chrysalis	Windows Desktop Systems	32	May 23rd, 2002 7:34am

August 2nd, 2004	Top \| #16
j79zlr Glaanies script monkey Joined: February 2003 Location: Chicago Posts: 2,725 Reputation: 1520 Power: 155	I would not recommend XoftSpy, they use false positives in order to get you to buy it. http://www.j79zlr.com

August 10th, 2004	Top \| #17
Salinske OSNN One Post Wonder Joined: August 2004 Posts: 1 Reputation: 0 Power: 0	I'm sorry to bring back an old thread but I'm trying to research a problem that is similar to this one. Thanks in advance for any assistance! Ferral_Imp, did disabling a function in NIS fix the "connection refused" error or was it the XoftSpy scan that fixed it? My father in law is getting the same error when trying to get to his secure sites. I did some work on his computer about a week ago and got rid of some spyware he had on there and now when he tries to get to any secure site he gets the message "connection refused" Thanks again for any help anyone can provide.