• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Web Browser Issues

#1
Let Me First Appologize If This Message Appears In All Caps To Anyone Else But I Can"t Help That

My Web Browsers Are Acting All Funny And I Can"t Get Them To Act Normal Whenever I Try To Type Anything It"s All In Caps And I Can"t Get It Not To Do That Everytime I Click On A Link To Go To A New Webpage It Opens A New Window Like When I Navigated Here From My Bookmarks It Opened A Separate Window From My Homepage Then Opened Another Window When I Clicked To Go Into The Forums Then Another When I Clicked To Enter This Forum Area I Also Can"t Get Any Secure Website To Show Up For Me In Ie They Come Up As Page Not Available And In Firefox They Come Up As Connection Refused To Site>

I"ve Run Adaware Spybot Pest Patrol Bazooka Norton And Spysweeper With No Luck Of Fixing This I"m Bout Ready To Scream Cuz It"s Not Even Been A Month Since I Had To Reformat And This Happens

Thnx In Advance For Any Help
 

SPeedY_B

I may actually be insane.
#3
Either your shift key is physically stuck (or broken), or you may have activated sticky keys. Try tapping shift 5 times, you should hear a beep once it's deactivated (or activated if this isn't the problem, press shift another 5 times to turn it back off again)
 
#4
Well ok seems like this thing is/was possessed again. I re-ran everything, restarted the computer, and then re-ran all the spy/adware scanners. Spybot keeps coming up with an entry for dso exploit even after I removed it and cleared it out of the recovery area. Other than that, everything is normal scanwise.

After the restart the all caps letters have stopped and both my browsers seem to have stopped opening a new window everytime I click to go to a different webpage. The only issue I still have is that I cann't go to any secure sites (hotmail, paypal, etc.). Whenever I try to go to a secure site, I either get "page not available" in IE, or I get "connection refused" in Firefox. And this isn't just one or two sites it's all secure sites that generate this response. :(

If it helps, my comp is a HP Pavilion ze4200. It's running win xp pro, it's current with it's updates, my browsers are internet explorer 6, and mozilla firefox.
 
#6
1) my highjack this log

Logfile of HijackThis v1.97.7
Scan saved at 11:53:17 PM, on 7/30/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\carpserv.exe
C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Inverse IP InSight\PenTele\ARMon32a.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet\icc\icc32.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\Program Files\Inverse IP InSight\PenTele\ARUpld32.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Documents and Settings\owner\Desktop\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr6/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr6/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4nb.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr6/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr6/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr6/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.usefulware.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.usefulware.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://D:\content\include\XPPatchInstaller.CAB
O16 - DPF: {8B1BC605-C593-4865-8F5B-05517F0CD0BB} (MSSecurityAdvisorCD Class) - file://D:\Content\include\msSecUcd.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38175.7067592593
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{04ABDB90-3367-42C6-B065-8B258F2765E8}: NameServer = 207.44.96.129 204.186.0.202
O17 - HKLM\System\CS1\Services\Tcpip\..\{04ABDB90-3367-42C6-B065-8B258F2765E8}: NameServer = 207.44.96.129 204.186.0.202
2) I already run spybot in safe mode when I scan.

thnx again to everyone who's tried to help.
 

rushm001

In the beginning......
Political User
#8
Ferral_Imp said:
The only issue I still have is that I cann't go to any secure sites (hotmail, paypal, etc.). Whenever I try to go to a secure site, I either get "page not available" in IE, or I get "connection refused" in Firefox. And this isn't just one or two sites it's all secure sites that generate this response. :(
You don't happen to be running Norton Internet Security? I think sometimes one of the settings can block secure websites.
 
#12
napalmnthemorning said:
Give this spyware XoftSpy a scan on your system and see if it catches anything!
Downloading the file now. I'll post the results after I get done a scan in a lil while.


rushm001 said:
You don't happen to be running Norton Internet Security? I think sometimes one of the settings can block secure websites.
Yeah. I'm using NIS 2004. How would I find out if norton is the reason why I can't get to secure sites? Is there a way to fix it if it is causing the problem or am I up the proverbial creek?


rushm001 said:
The forum automatically removes any multiple capital letters.
well that's a useful bit of info to know for future hauntings.
 
#13
Xsoftspy found a bunch of stuff.

Internet Alert{2 entries}
Bonzi Buddy {7 entries}
CoolwebSearch{1 entries}
CWS.0slogo {1 entries}
Winpup32 {2 enrties}
Marketscore(Netsetter) {1 entry}
 

rushm001

In the beginning......
Political User
#14
Ferral_Imp said:
Yeah. I'm using NIS 2004. How would I find out if norton is the reason why I can't get to secure sites? Is there a way to fix it if it is causing the problem or am I up the proverbial creek?
You should be able to see if it has by viewing the logs that NIS generates. In NIS 2003 you click on the statistics tab at the side, and then click on the view logs button. I'm sure 2004 should be similar.
 

Salinske

OSNN One Post Wonder
#17
I'm sorry to bring back an old thread but I'm trying to research a problem that is similar to this one. Thanks in advance for any assistance!

Ferral_Imp, did disabling a function in NIS fix the "connection refused" error or was it the XoftSpy scan that fixed it?

My father in law is getting the same error when trying to get to his secure sites. I did some work on his computer about a week ago and got rid of some spyware he had on there and now when he tries to get to any secure site he gets the message "connection refused"

Thanks again for any help anyone can provide.
 

Members online

No members online now.

Latest posts

Latest profile posts

Electronic Punk wrote on Perris Calderon's profile.
All good still mate?
Hello, is there anybody in there? Just nod if you can hear me ...
Xie
What a long strange trip it's been. =)

Forum statistics

Threads
61,961
Messages
673,239
Members
89,014
Latest member
sanoravies