IE7 and OE issues

Loonatic · Post by **Loonatic** » Mon Jul 16, 2007 4:31 pm

A friends computer has been having issues lately and I cant seem to isolate the issue.

Basically on certain sites it'll act like it wants to load then stops, gives the script error sign at the bottom and if you bring it up it locks up IE. Try to open outlook express and it just opens up into a blank white slate. Uninstalled and reinstalled java, reset all the settings, etc.

Scanned with AVG 7.5, AVG Anti-spyware, etc. No firewall was installed at the time (I removed it).

Heres the hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 3:52:43 PM, on 7/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\HijackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [AVG7_CC] F:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - Global Startup: America Online 8.0 Tray Icon.lnk = F:\Program Files\America Online 8.0\aoltray.exe
O4 - Global Startup: AOL Companion.lnk = F:\Program Files\AOL Companion\companion.exe
O4 - Global Startup: APC UPS Status.lnk = ?
O4 - Global Startup: QuickTV.lnk = F:\Program Files\UltraTV\QuickTV.exe
O11 - Options group: [INTERNATIONAL] International*
O20 - Winlogon Notify: WgaLogon - F:\WINDOWS\
O23 - Service: APC UPS Service - American Power Conversion Corporation - F:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Google Updater Service (gusvc) - Google - F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - F:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service - Unknown owner - F:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - F:\WINDOWS\wanmpsvc.exe

YARDofSTUF · Post by **YARDofSTUF** » Mon Jul 16, 2007 4:47 pm

scan with spybot and super antispyware.

Save his favorites and try reinstalling IE.

Loonatic · Post by **Loonatic** » Mon Jul 16, 2007 5:33 pm

It wouldnt validate with microsoft to download IE7 Sp2 again. Kept saying error validating that it couldnt connect to Microsoft.

mnosteele52 · Post by **mnosteele52** » Mon Jul 16, 2007 5:50 pm

This could very likely be AOL8, AOL is terrible to begin with and can corrupt IE, but AOL8 is old and most likely not compatible with IE7.

Loonatic · Post by **Loonatic** » Mon Jul 16, 2007 5:54 pm

mnosteele52 wrote:This could very likely be AOL8, AOL is terrible to begin with and can corrupt IE, but AOL8 is old and most likely not compatible with IE7.

Its been fine for a while. Dont know if she'd go for me installing a newer version

TonyT · Post by **TonyT** » Mon Jul 16, 2007 6:16 pm

fyi, script errors have nothing whatsoever to do with java. A script error in a browser is from javascript scripting. java is not javascript so reinstalling java won't change anything. Most browser script errors are caused by faulty javascript code by the webmaster. Second most cause is when a comp has malware infections.

Why on earth is the xp op sys installed on the F: drive?

Loonatic · Post by **Loonatic** » Mon Jul 16, 2007 6:25 pm

TonyT wrote:fyi, script errors have nothing whatsoever to do with java. A script error in a browser is from javascript scripting. java is not javascript so reinstalling java won't change anything. Most browser script errors are caused by faulty javascript code by the webmaster. Second most cause is when a comp has malware infections.

Why on earth is the xp op sys installed on the F: drive?

Makes sense.

Ill give it a second look over tomorrow.

Because the C: has Win2k on it, D and E are CDroms and F is the other HD I added.

TonyT · Post by **TonyT** » Mon Jul 16, 2007 8:45 pm

Use HjT to Fix the following:

O20 - Winlogon Notify: WgaLogon - F:\WINDOWS\

if wgalogon loads it should look like this:
Winlogon Notify: WgaLogon - F:\WINDOWS\SYSTEM32\WgaLogon.dll
The 020 above indicates that wgalogon has been removed form the system or the system has a malicious rootkit and current logged on user does not have permissions (even if an admin) to read the file in the "empty path".