Web Browser Issues

Ferral_Imp

OSNN Senior Addict
Joined
19 Jan 2004
Messages
685
Let Me First Appologize If This Message Appears In All Caps To Anyone Else But I Can"t Help That

My Web Browsers Are Acting All Funny And I Can"t Get Them To Act Normal Whenever I Try To Type Anything It"s All In Caps And I Can"t Get It Not To Do That Everytime I Click On A Link To Go To A New Webpage It Opens A New Window Like When I Navigated Here From My Bookmarks It Opened A Separate Window From My Homepage Then Opened Another Window When I Clicked To Go Into The Forums Then Another When I Clicked To Enter This Forum Area I Also Can"t Get Any Secure Website To Show Up For Me In Ie They Come Up As Page Not Available And In Firefox They Come Up As Connection Refused To Site>

I"ve Run Adaware Spybot Pest Patrol Bazooka Norton And Spysweeper With No Luck Of Fixing This I"m Bout Ready To Scream Cuz It"s Not Even Been A Month Since I Had To Reformat And This Happens

Thnx In Advance For Any Help
 
i think there's probably just something holding your shift key down...get a screwdriver and wiggle each shift key a bit.
 
Either your shift key is physically stuck (or broken), or you may have activated sticky keys. Try tapping shift 5 times, you should hear a beep once it's deactivated (or activated if this isn't the problem, press shift another 5 times to turn it back off again)
 
Well ok seems like this thing is/was possessed again. I re-ran everything, restarted the computer, and then re-ran all the spy/adware scanners. Spybot keeps coming up with an entry for dso exploit even after I removed it and cleared it out of the recovery area. Other than that, everything is normal scanwise.

After the restart the all caps letters have stopped and both my browsers seem to have stopped opening a new window everytime I click to go to a different webpage. The only issue I still have is that I cann't go to any secure sites (hotmail, paypal, etc.). Whenever I try to go to a secure site, I either get "page not available" in IE, or I get "connection refused" in Firefox. And this isn't just one or two sites it's all secure sites that generate this response. :(

If it helps, my comp is a HP Pavilion ze4200. It's running win xp pro, it's current with it's updates, my browsers are internet explorer 6, and mozilla firefox.
 
1) my highjack this log

Logfile of HijackThis v1.97.7
Scan saved at 11:53:17 PM, on 7/30/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\carpserv.exe
C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Inverse IP InSight\PenTele\ARMon32a.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet\icc\icc32.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\Program Files\Inverse IP InSight\PenTele\ARUpld32.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Documents and Settings\owner\Desktop\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../*http://www.yahoo.com/ext/search/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr6/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr6/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4nb.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr6/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr6/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr6/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.usefulware.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.usefulware.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://D:\content\include\XPPatchInstaller.CAB
O16 - DPF: {8B1BC605-C593-4865-8F5B-05517F0CD0BB} (MSSecurityAdvisorCD Class) - file://D:\Content\include\msSecUcd.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38175.7067592593
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{04ABDB90-3367-42C6-B065-8B258F2765E8}: NameServer = 207.44.96.129 204.186.0.202
O17 - HKLM\System\CS1\Services\Tcpip\..\{04ABDB90-3367-42C6-B065-8B258F2765E8}: NameServer = 207.44.96.129 204.186.0.202

2) I already run spybot in safe mode when I scan.

thnx again to everyone who's tried to help.
 
Ferral_Imp said:
The only issue I still have is that I cann't go to any secure sites (hotmail, paypal, etc.). Whenever I try to go to a secure site, I either get "page not available" in IE, or I get "connection refused" in Firefox. And this isn't just one or two sites it's all secure sites that generate this response. :(
You don't happen to be running Norton Internet Security? I think sometimes one of the settings can block secure websites.
 
Lee said:
I don't see your thread in uppercase :?
The forum automatically removes any multiple capital letters.
 
napalmnthemorning said:
Give this spyware XoftSpy a scan on your system and see if it catches anything!
Downloading the file now. I'll post the results after I get done a scan in a lil while.


rushm001 said:
You don't happen to be running Norton Internet Security? I think sometimes one of the settings can block secure websites.

Yeah. I'm using NIS 2004. How would I find out if norton is the reason why I can't get to secure sites? Is there a way to fix it if it is causing the problem or am I up the proverbial creek?


rushm001 said:
The forum automatically removes any multiple capital letters.

well that's a useful bit of info to know for future hauntings.
 
Xsoftspy found a bunch of stuff.

Internet Alert{2 entries}
Bonzi Buddy {7 entries}
CoolwebSearch{1 entries}
CWS.0slogo {1 entries}
Winpup32 {2 enrties}
Marketscore(Netsetter) {1 entry}
 
Ferral_Imp said:
Yeah. I'm using NIS 2004. How would I find out if norton is the reason why I can't get to secure sites? Is there a way to fix it if it is causing the problem or am I up the proverbial creek?
You should be able to see if it has by viewing the logs that NIS generates. In NIS 2003 you click on the statistics tab at the side, and then click on the view logs button. I'm sure 2004 should be similar.
 
Yay. I can finally check my email!!!! :) mucho thnx again to everyone for the help.
 
I would not recommend XoftSpy, they use false positives in order to get you to buy it.
 
I'm sorry to bring back an old thread but I'm trying to research a problem that is similar to this one. Thanks in advance for any assistance!

Ferral_Imp, did disabling a function in NIS fix the "connection refused" error or was it the XoftSpy scan that fixed it?

My father in law is getting the same error when trying to get to his secure sites. I did some work on his computer about a week ago and got rid of some spyware he had on there and now when he tries to get to any secure site he gets the message "connection refused"

Thanks again for any help anyone can provide.
 

Members online

No members online now.

Latest profile posts

Also Hi EP and people. I found this place again while looking through a oooollllllldddd backup. I have filled over 10TB and was looking at my collection of antiques. Any bids on the 500Mhz Win 95 fix?
Any of the SP crew still out there?
Xie wrote on Electronic Punk's profile.
Impressed you have kept this alive this long EP! So many sites have come and gone. :(

Just did some crude math and I apparently joined almost 18yrs ago, how is that possible???
hello peeps... is been some time since i last came here.
Electronic Punk wrote on Sazar's profile.
Rest in peace my friend, been trying to find you and finally did in the worst way imaginable.

Forum statistics

Threads
62,015
Messages
673,494
Members
5,621
Latest member
naeemsafi
Back