Computer Problem?

General discussion about computers and their related items, and open requests/chat about our own gaming server.
User avatar
woodpaneling
Posts: 1567
Joined: Wed Jan 08, 2003 12:02 am

Computer Problem?

Postby woodpaneling » Tue Jul 11, 2006 5:40 pm

I have been having trouble with ads popping up on my computer. Whenever the internet is connected they will pop up on thier own. I downloaded Hijack This... ran it, but don't know exactly what to delete (or if that is even the problem.) I was hoping to get some help here. I also ran SpySubtract and Adaware. Still does it... Any suggestions?
User avatar
woodpaneling
Posts: 1567
Joined: Wed Jan 08, 2003 12:02 am

Postby woodpaneling » Tue Jul 11, 2006 5:41 pm

Here is the output from Hijack this if it helps.



R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.earthlink.net/partner/more/msie/button/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://start.earthlink.net/AL/Search
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.earthlink.net/partner/more/msie/button/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.earthlink.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.earthlink.net/AL/Search
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8080
R3 - URLSearchHook: SrchHook Class - {44F9B173-041C-4825-A9B9-D914BD9DCBB3} - C:\Program Files\EarthLink TotalAccess\ElnIE.dll
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: EarthLink BHO Guard - {00000000-0000-0000-0000-000000000002} - C:\Program Files\EarthLink TotalAccess\Toolbar\EScamBlk.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: EarthLink ScamBlocker V3 - {15F4D456-5BAA-4076-8486-EECB38CD3E57} - C:\Program Files\EarthLink TotalAccess\Toolbar\EScamBlk.dll
O2 - BHO: EarthLink PopUp Blocker V2 - {512ACF1B-64D9-4928-B382-A80556F28DB4} - C:\Program Files\EarthLink TotalAccess\Toolbar\ElnkPuB.dll
O2 - BHO: IE_PopupBlocker Class - {656EC4B7-072B-4698-B504-2A414C1F0037} - C:\Program Files\EarthLink TotalAccess\Accelerator\prpl_IePopupBlocker.dll
O2 - BHO: (no name) - {7b38f10f-08fd-4b69-860b-20ae3a3042de} - C:\WINDOWS\system32\c_4mfd.dll
O2 - BHO: Earthlink Protection BHO - {9579D574-D4D8-4335-9560-FE8641A013BD} - C:\Program Files\EarthLink TotalAccess\Toolbar\ProtctIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Uninstall Legacy Earthlink Toolbar - {E713904C-DF05-4C79-BBAD-02DB923253BE} - C:\Program Files\EarthLink TotalAccess\Toolbar\uninsttb.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: EarthLink Toolbar - {C7768536-96F8-4001-B1A2-90EE21279187} - C:\Program Files\EarthLink TotalAccess\Toolbar\Toolbar.dll
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: EarthLink Google Search - res://C:\Program Files\EarthLink TotalAccess\Toolbar\SearchUI.dll/search.html
O8 - Extra context menu item: Refresh Pa&ge with Full Quality - C:\Program Files\EarthLink TotalAccess\Accelerator\\pac-page.html
O8 - Extra context menu item: Refresh Pi&cture with Full Quality - C:\Program Files\EarthLink TotalAccess\Accelerator\\pac-image.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar3.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O17 - HKLM\System\CCS\Services\Tcpip\..\{C22EFC1C-CCCD-4DFD-B428-E3ACE24EB01B}: NameServer = 207.69.188.185 207.69.188.186
O20 - Winlogon Notify: c_4mfd - C:\WINDOWS\SYSTEM32\c_4mfd.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
User avatar
X-OvrDistortion
New Member
Posts: 10182
Joined: Wed Jul 24, 2002 11:00 am
Location: Blacker then the blackest black times infinity
Contact:

Postby X-OvrDistortion » Tue Jul 11, 2006 5:43 pm

Try running this

http://www.ccleaner.com

It is wither that or .org

I am to lazy to find out. :D

That should be able to clean out the bug that you have.
User avatar
Luda
Posts: 220
Joined: Fri May 20, 2005 3:21 pm
Location: Virginia

Postby Luda » Tue Jul 11, 2006 6:31 pm

google spybot Search and Destroy, update it, run it. it will mostly fix your problem.

i do this for a living, so yea... i know whats up
User avatar
woodpaneling
Posts: 1567
Joined: Wed Jan 08, 2003 12:02 am

Postby woodpaneling » Tue Jul 11, 2006 6:35 pm

Thanks!! I will try these out and hopefully become sain again :)
User avatar
NDGeist
Posts: 2057
Joined: Tue Nov 21, 2000 12:00 am
Location: Iowa
Contact:

Postby NDGeist » Wed Jul 12, 2006 10:41 am

Spybot will help, Adaware will help a little further. Niether will get you everything

If you are comfortable with the registry you should be able to find some stuff in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Run, anything in this folder launches on start. I generally find most spyware can be avoided by cleaning this out.

The real key, is to get a different browser. The tech thing to do right now is to use mozilla (firefox) however with that trend comes risks, people will start to develop to it's flaws and we'll see the same issues that IE has in time (has already started to happen) I personally use Opera, it's the most secure browser on the market, however most people don't like to write to open standards, so some stuff may not work, that's still pretty few and far between.
Mis-spellers of the world, untie!
There are only 10 types of people in the world,
those who understand binary, and those who don't.
User avatar
Jakezor
Posts: 5251
Joined: Fri Jun 13, 2003 12:00 pm
Location: Minnesota
Contact:

Postby Jakezor » Wed Jul 12, 2006 2:25 pm

NDGeist wrote:The real key, is to get a different browser. The tech thing to do right now is to use mozilla (firefox) however with that trend comes risks, people will start to develop to it's flaws and we'll see the same issues that IE has in time (has already started to happen) I personally use Opera, it's the most secure browser on the market, however most people don't like to write to open standards, so some stuff may not work, that's still pretty few and far between.



More secure than Lynx? hehehe :cwm22:
User avatar
NDGeist
Posts: 2057
Joined: Tue Nov 21, 2000 12:00 am
Location: Iowa
Contact:

Postby NDGeist » Wed Jul 12, 2006 2:55 pm

There's a certain level of functionality that's assumed. But, i mean, i guess we could still just surf in a terminal window, if that's ok with you. It's how I started.
Mis-spellers of the world, untie!

There are only 10 types of people in the world,

those who understand binary, and those who don't.
User avatar
Jakezor
Posts: 5251
Joined: Fri Jun 13, 2003 12:00 pm
Location: Minnesota
Contact:

Postby Jakezor » Wed Jul 12, 2006 4:39 pm

NDGeist wrote:There's a certain level of functionality that's assumed. But, i mean, i guess we could still just surf in a terminal window, if that's ok with you. It's how I started.


Lighten up Francis, just a joke.
User avatar
NDGeist
Posts: 2057
Joined: Tue Nov 21, 2000 12:00 am
Location: Iowa
Contact:

Postby NDGeist » Wed Jul 12, 2006 5:23 pm

Srry, forgot my emoticons... my previous comment was in jest as well. Sarcasm doesnt make it through the internets very well.

Yes, internets.
Mis-spellers of the world, untie!

There are only 10 types of people in the world,

those who understand binary, and those who don't.

Return to “Computer / Gaming forum.”

Who is online

Users browsing this forum: No registered users and 1 guest