Internet Explorer Problem

• lazy2

  11 Jul 06, 19:51

  Hi theres something really wrong with my IE. When i open it, the homepage is www.topsecurity.net and a popup will appear warning me theres some virus and stuff. I tried to get rid of it by changing my homepage but it doesnt work.
  Btw, i am using firefox but i just wanna get rid of that bug cos its rather annoying ...
  
  Any advise?
  
• mhcampboy

  11 Jul 06, 19:51

  die liao.... virus has infected!!
• rathcycle

  11 Jul 06, 19:51

  Just stop using internet explorer, or reinstall it if you realy need it..
• SexY Le0

  11 Jul 06, 19:54

  well, scan ur computer ....
• casshern

  11 Jul 06, 19:56

  there's some good help here which u can follow
  
  http://www.sgforums.com/?action=thread_display&thread_id=198627
• lazy2

  11 Jul 06, 19:56

  Oh ya, i forgot to add. I scanned my pc many times... no use. I do need my internet explorer at times...
• alexkusu

  11 Jul 06, 19:57

  adware infected
  
  use webroot spysweeper
• StarPuppy

  11 Jul 06, 19:58

  Originally posted by lazy2:

  Hi theres something really wrong with my IE. When i open it, the homepage is www.topsecurity.net and a popup will appear warning me theres some virus and stuff. I tried to get rid of it by changing my homepage but it doesnt work.
  Btw, i am using firefox but i just wanna get rid of that bug cos its rather annoying ...
  
  Any advise?
  

  your browser page got hijacked
  ----------------------
  
  use this program: hijackthis
  
  extract it and put it in your C://
  
  let the program scan and save a log file
  
  paste the content in here
  ---------------------------------------
  
  have to see before anything can be done
• lazy2

  11 Jul 06, 20:02

  I will reinstall it... Whats the latest IE for windows 2000?
• StarPuppy

  11 Jul 06, 20:04

  Originally posted by lazy2:

  I will reinstall it... Whats the latest IE for windows 2000?

  i dun think will have use as ur registry for IE have been hijacked
• lazy2

  11 Jul 06, 20:22

  Logfile of HijackThis v1.99.1
  Scan saved at 8:32:47 PM, on 7/11/2006
  Platform: Windows 2000 SP4 (WinNT 5.00.2195)
  MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
  
  Running processes:
  C:\WINNT\System32\smss.exe
  C:\WINNT\system32\winlogon.exe
  C:\WINNT\system32\services.exe
  C:\WINNT\system32\lsass.exe
  C:\WINNT\system32\svchost.exe
  C:\WINNT\system32\spoolsv.exe
  C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
  C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
  C:\WINNT\system32\svchost.exe
  C:\Program Files\AMD\PowerNow!\GemServ.exe
  C:\WINNT\system32\regsvc.exe
  C:\WINNT\system32\MSTask.exe
  C:\WINNT\System32\WBEM\WinMgmt.exe
  C:\WINNT\system32\mspmspsv.exe
  C:\WINNT\system32\svchost.exe
  C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
  C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv42.exe
  C:\WINNT\Explorer.EXE
  C:\WINNT\system32\VTTimer.exe
  C:\WINNT\system32\VTtrayp.exe
  C:\WINNT\SOUNDMAN.EXE
  C:\Program Files\Common Files\Real\Update_OB\realsched.exe
  C:\Program Files\DAP\DAP.EXE
  C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
  C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
  C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\QuickTime\qttask.exe
  C:\Program Files\MSN Messenger\MsnMsgr.Exe
  C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Program Files\Mozilla Firefox\firefox.exe
  C:\WINNT\system32\wuauclt.exe
  C:\WINNT\system32\svchost.exe
  C:\PROGRA~1\WINZIP\winzip32.exe
  C:\HijackThis.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.co.uk/
  R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" //mail
  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O2 - BHO: Nothing - {686a161d-5bd1-4999-8832-6393f41e564c} - C:\WINNT\system32\hp100.tmp
  O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
  O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
  O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
  O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
  O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
  O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
  O4 - HKLM\..\Run: [BDSwitchAgent] C:\Program Files\Softwin\BitDefender9\bdswitch.exe
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
  O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
  O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
  O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
  O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm344YYSG
  O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
  O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
  O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
  O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
  O16 - DPF: {5BDBA960-6534-11D3-97C7-00500422B550} (LotusDRSControl Class) - https://www.sqnet.com.sg/download/dolcontrol.cab,DanaInfo=sinccblmsxp05.sq.com.sg,CT=java+
  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1139921783984
  O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
  O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.auctiva.com/hostedimages/activex/xupload/XUpload.ocx
  O20 - Winlogon Notify: winbjv32 - winbjv32.dll (file missing)
  O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
  O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
  O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
  O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
  O23 - Service: AMD PowerNow! (tm) Technology Service (GemServ) - Advanced Micro Devices - C:\Program Files\AMD\PowerNow!\GemServ.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: WUSB54Gv42SVC - Unknown owner - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv42.exe (file missing)
  
  
• lazy2

  11 Jul 06, 20:39

  Which shld i get rid?
  
• ndmmxiaomayi

  11 Jul 06, 21:31

  Your log is clean, just that there are some errors to be fixed.
  
  O2 - BHO: Nothing - {686a161d-5bd1-4999-8832-6393f41e564c} - C:\WINNT\system32\hp100.tmp
  
  O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm344YYSG
  
  O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
  
  O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
  
  O16 - DPF: {5BDBA960-6534-11D3-97C7-00500422B550} (LotusDRSControl Class) - https://www.sqnet.com.sg/download/dolcontrol.cab,DanaInfo=sinccblmsxp05.sq.com.sg,CT=java+
  
  Start HijackThis, do a scan. Tick the boxes beside these entries and click Fix checked boxes.
  
  For this entry, O4 - HKLM\..\Run: [BDSwitchAgent] C:\Program Files\Softwin\BitDefender9\bdswitch.exe, uninstall it. Don't install too many antivirus on one computer.
  
  Try using more anti-spywares, like Ewido, Webroot Spysweeper and Spyware Doctor to determine the problem. I can't figure out anything from this log.
• Gordonator

  11 Jul 06, 21:55

  if u are usuing firefox, why do u still put internet explorer in the title?
• lazy2

  12 Jul 06, 11:18

  Hey thanks for everything. I will try to sort those stuff out now. I still need my internet explorer for other reasons thats y...
  Anyway, thanks again!
• SilverPal

  12 Jul 06, 12:00

  Is topsecurity.net a spyware site? I can't seem to find anything that says that it is via google.
• lazy2

  12 Jul 06, 12:03

  Any free anti-spyware to recommend?
• SilverPal

  12 Jul 06, 14:10

  Originally posted by lazy2:

  Any free anti-spyware to recommend?

  I think there is a sticky in this forum that recommends anti-spyware programs already. You might want to go take a look.
  
  Personally, I like spybot search and destroy for its registry locking. Webroot has very good realtime defences, although I stopped using since I found it too difficult to "adapt" for free use. Adaware has very good scanning and I use it regularly to scan all my computers. I also find kerio personal firewall to have very strong and comprehensive application level protection.
  
  For anti pop-ups and website protection, I took a step back to low tech and use proxomitron's filter.
  
  Of course there are more such as microsoft's defender (or whatever its called), blackice defender, zonealarms etc. You might want to look around for one that suits you.
• ndmmxiaomayi

  12 Jul 06, 14:45

  Originally posted by SilverPal:

  Is topsecurity.net a spyware site? I can't seem to find anything that says that it is via google.

  topsecurity.net isn't a spyware site. But some of the softwares they recommend are.
• lazy2

  12 Jul 06, 14:45

  Thanks for the info mate.
• ndmmxiaomayi

  12 Jul 06, 15:12

  Originally posted by lazy2:

  Any free anti-spyware to recommend?

  Free ones include Windows Defender Beta 2, Lavasoft Ad-aware and Spybot Search and Destroy.
  
  There are others which offer free scanning, but no removal. These are Webroot Spysweeper and Spyware Doctor from PC Tools.
  
  There are some which offer full features for a limited time. One of them is a-squared anti-malware. You can use it for 30 days.
  
  There are some which offers full features for 30 days, after that, it will offer basic features. Ewido is one of them.