I have clients who go to different sites and try to open pdf files or click
on links to go to other pages, or use the back button to migrate to a
previous page. If I have two seemingly exact machines, one of which was
recently rebuild, one of them might be able to access the pages and documents
without any trouble and the other one will have explorer shut down. I've
tried it with IE 6 and IE 7 and the same thing happens. All are running XP
with SP3, Office 2003, IE 6 or 7 (tried with both) Symantec antivirus, adobe
8, plenty of RAM.

I'm perplexed.

> ...the other one will have [Internet?] explorer shut down.

Where & how did you obtain Symantec AntiVirus?

There is a very good chance that you are seeing the effects of a hijackware
infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/ma...e/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/...moving_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachi...php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002


Stu wrote:
> I have clients who go to different sites and try to open pdf files or
> click
> on links to go to other pages, or use the back button to migrate to a
> previous page. If I have two seemingly exact machines, one of which was
> recently rebuild, one of them might be able to access the pages and
> documents without any trouble and the other one will have explorer shut
> down. I've tried it with IE 6 and IE 7 and the same thing happens. All
> are running XP with SP3, Office 2003, IE 6 or 7 (tried with both) Symantec
> antivirus, adobe 8, plenty of RAM.
>
> I'm perplexed.

I totally rebuild the machine from bare metal. Symantec corp edition 11.0 is
kept updated daily and the last update was yesterday when I rebuilt the
machine. I ran all the Microaoft updates and only a few of the machines in
the organization have this problem.

"PA Bear [MS MVP]" wrote:

> > ...the other one will have [Internet?] explorer shut down.
>
> Where & how did you obtain Symantec AntiVirus?
>
> There is a very good chance that you are seeing the effects of a hijackware
> infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/ma...e/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
> (only!) in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 3. Run a /thorough/ check for hijackware, including posting the requested
> logs in an appropriate forum, not here.
>
> Checking for/Help with Hijackware
> http://aumha.net/viewtopic.php?f=30&t=4075
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://www.elephantboycomputers.com/...moving_Malware
>
> **Chances are you will need to seek expert assistance in
> http://spywarehammer.com/simplemachi...php?board=10.0,
> http://www.spywarewarrior.com/viewforum.php?f=5,
> http://www.dslreports.com/forum/cleanup,
> http://www.bluetack.co.uk/forums/index.php,
> http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>
>
> Stu wrote:
> > I have clients who go to different sites and try to open pdf files or
> > click
> > on links to go to other pages, or use the back button to migrate to a
> > previous page. If I have two seemingly exact machines, one of which was
> > recently rebuild, one of them might be able to access the pages and
> > documents without any trouble and the other one will have explorer shut
> > down. I've tried it with IE 6 and IE 7 and the same thing happens. All
> > are running XP with SP3, Office 2003, IE 6 or 7 (tried with both) Symantec
> > antivirus, adobe 8, plenty of RAM.
> >
> > I'm perplexed.
>
>

Only a few machines in the organization might be infected, Stu. <shrug>

Stu wrote:
> I totally rebuild the machine from bare metal. Symantec corp edition 11.0
> is kept updated daily and the last update was yesterday when I rebuilt the
> machine. I ran all the Microaoft updates and only a few of the machines
> in
> the organization have this problem.
>
> "PA Bear [MS MVP]" wrote:
>
>>> ...the other one will have [Internet?] explorer shut down.
>>
>> Where & how did you obtain Symantec AntiVirus?
>>
>> There is a very good chance that you are seeing the effects of a
>> hijackware
>> infection!
>>
>> NB: If you had no anti-virus application installed or the subscription
>> had
>> expired *when the machine first got infected* and/or your subscription
>> has
>> since expired and/or the machine's not been kept fully-patched at Windows
>> Update, don't waste your time with any of the below: Format & reinstall
>> Windows. A Repair Install will NOT help!
>>
>> 1. See if you can download/run the MSRT manually:
>> http://www.microsoft.com/security/ma...e/default.mspx
>>
>> NB: Run the FULL scan, not the QUICK scan! You may need to download the
>> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
>> machine and rename it to SCAN.EXE before running it.
>>
>> 2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection'
>> scan
>> (only!) in Safe Mode with Networking, if need be:
>> http://onecare.live.com/site/en-us/center/howsafe.htm
>>
>> 3. Run a /thorough/ check for hijackware, including posting the requested
>> logs in an appropriate forum, not here.
>>
>> Checking for/Help with Hijackware
>> http://aumha.net/viewtopic.php?f=30&t=4075
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> **Chances are you will need to seek expert assistance in
>> http://spywarehammer.com/simplemachi...php?board=10.0,
>> http://www.spywarewarrior.com/viewforum.php?f=5,
>> http://www.dslreports.com/forum/cleanup,
>> http://www.bluetack.co.uk/forums/index.php,
>> http://aumha.net/viewforum.php?f=30 or other appropriate forums as
>> well.**
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>>
>>
>> Stu wrote:
>>> I have clients who go to different sites and try to open pdf files or
>>> click
>>> on links to go to other pages, or use the back button to migrate to a
>>> previous page. If I have two seemingly exact machines, one of which
>>> was
>>> recently rebuild, one of them might be able to access the pages and
>>> documents without any trouble and the other one will have explorer shut
>>> down. I've tried it with IE 6 and IE 7 and the same thing happens. All
>>> are running XP with SP3, Office 2003, IE 6 or 7 (tried with both)
>>> Symantec
>>> antivirus, adobe 8, plenty of RAM.
>>>
>>> I'm perplexed.

Hello,

Try running IE with add-ons disabled

*** If you are running IE6: ***
Start > Control Panel > Internet Options > Advanced (tab) > UNCHECK "Enable
third-party browser extensions" > OK

Run IE6 now.

If it works now, one of your add-ons is causing the problem. Start Internet
Explorer as normal, Tools, Manage Add-ons, Enable or Disable Add-ons.

Disable all the add-ons. Enable third-party browser extensions in Internet
Options.

Restart your browser and enable the add-ons one by one till the problem
appears and you get the culprit.

*** If you are running IE7 ***
Go to Start > Programs > Accessories > System Tools >
Internet Explorer 7 (No Add-ons) to start without any add-ons. Try using the
browser and see if the same problem arises.

If the problem does not occur again, start IE7 normally, go to Tools >
Manage Add-ons and disable all the add-ons. Enable each add-on one at each
time and see if the problem occurs again. Once it occurs again after
enabling an add-on, you have nailed the culprit.

(if the menu bar does not appear, hit the Alt key on the keyboard)

You may also want to do a spyware scan by using the following programs
(free)
http://www.superantispyware.com/
http://www.malwarebytes.org/mbam.php


__
http://www.bootstrike.com/ComputerService/
Singapore Computer Home Remote On-Site Repair Service
"Stu" <(E-Mail Removed)> wrote in message
news:6FAA80BE-242F-4C44-B5C7-(E-Mail Removed)...
>I have clients who go to different sites and try to open pdf files or click
> on links to go to other pages, or use the back button to migrate to a
> previous page. If I have two seemingly exact machines, one of which was
> recently rebuild, one of them might be able to access the pages and
> documents
> without any trouble and the other one will have explorer shut down. I've
> tried it with IE 6 and IE 7 and the same thing happens. All are running
> XP
> with SP3, Office 2003, IE 6 or 7 (tried with both) Symantec antivirus,
> adobe
> 8, plenty of RAM.
>
> I'm perplexed.

I'll give it a try and let you know next week. My client is closed for the
weekend.

"Singapore Computer Service" wrote:

> Hello,
>
> Try running IE with add-ons disabled
>
> *** If you are running IE6: ***
> Start > Control Panel > Internet Options > Advanced (tab) > UNCHECK "Enable
> third-party browser extensions" > OK
>
> Run IE6 now.
>
> If it works now, one of your add-ons is causing the problem. Start Internet
> Explorer as normal, Tools, Manage Add-ons, Enable or Disable Add-ons.
>
> Disable all the add-ons. Enable third-party browser extensions in Internet
> Options.
>
> Restart your browser and enable the add-ons one by one till the problem
> appears and you get the culprit.
>
> *** If you are running IE7 ***
> Go to Start > Programs > Accessories > System Tools >
> Internet Explorer 7 (No Add-ons) to start without any add-ons. Try using the
> browser and see if the same problem arises.
>
> If the problem does not occur again, start IE7 normally, go to Tools >
> Manage Add-ons and disable all the add-ons. Enable each add-on one at each
> time and see if the problem occurs again. Once it occurs again after
> enabling an add-on, you have nailed the culprit.
>
> (if the menu bar does not appear, hit the Alt key on the keyboard)
>
> You may also want to do a spyware scan by using the following programs
> (free)
> http://www.superantispyware.com/
> http://www.malwarebytes.org/mbam.php
>
>
> __
> http://www.bootstrike.com/ComputerService/
> Singapore Computer Home Remote On-Site Repair Service
> "Stu" <(E-Mail Removed)> wrote in message
> news:6FAA80BE-242F-4C44-B5C7-(E-Mail Removed)...
> >I have clients who go to different sites and try to open pdf files or click
> > on links to go to other pages, or use the back button to migrate to a
> > previous page. If I have two seemingly exact machines, one of which was
> > recently rebuild, one of them might be able to access the pages and
> > documents
> > without any trouble and the other one will have explorer shut down. I've
> > tried it with IE 6 and IE 7 and the same thing happens. All are running
> > XP
> > with SP3, Office 2003, IE 6 or 7 (tried with both) Symantec antivirus,
> > adobe
> > 8, plenty of RAM.
> >
> > I'm perplexed.
>
>
>