P
plc
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
add/remove programs in control panel? OS WinXP.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
J
Jim Byrd
Hi PLC - There is no direct Repair function for IE6 in XP. Here are some
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow" (without the
quotes and notice the space between the c and the /.) Have your XP CD handy
and be prepared to go get a cup of coffee - it takes a while. This will do
the same thing as Repair IE6 for XP but a lot more, that is find any corrupt
system files and replace them. It does not, however, re-register the
various software components (except possibly the ones it replaces?) AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see mskb
814510, http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files from
certain "hotfixes" which will then need to be re-installed. To check for
this, after running sfc, open a Cmd window and enter "qfecheck /v /l:c:\"
(without the quotes). If you don't have qfecheck installed, it can be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not work on XP
(but probably does - I've heard both stories), for just IE6 repair if you
don't have IE6 listed in Add-Remove Programs, then in Start|Run then enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate entry.
3. If you find that you need to do a re-install of IE6 then you can
consider the following, I can't verify this for XP (I'm Win2k - it works
there, and I've had good reports from XP users), but you might want to give
it a try at your own risk. Again, enter this at Start|Run without the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow" (without the
quotes and notice the space between the c and the /.) Have your XP CD handy
and be prepared to go get a cup of coffee - it takes a while. This will do
the same thing as Repair IE6 for XP but a lot more, that is find any corrupt
system files and replace them. It does not, however, re-register the
various software components (except possibly the ones it replaces?) AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see mskb
814510, http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files from
certain "hotfixes" which will then need to be re-installed. To check for
this, after running sfc, open a Cmd window and enter "qfecheck /v /l:c:\"
(without the quotes). If you don't have qfecheck installed, it can be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not work on XP
(but probably does - I've heard both stories), for just IE6 repair if you
don't have IE6 listed in Add-Remove Programs, then in Start|Run then enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate entry.
3. If you find that you need to do a re-install of IE6 then you can
consider the following, I can't verify this for XP (I'm Win2k - it works
there, and I've had good reports from XP users), but you might want to give
it a try at your own risk. Again, enter this at Start|Run without the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
G
Guest
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that "should be reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and others. How do I get them and apply them? When I check the MS Download Site, my search yields no results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my original IE problem, I reinstalled XP from the 2 year old System Disk and applied all MS updates that I was notified about. IE 6.0 continues to fail. I've run spybot. I have maintained Norton AV for over 2 years, MS Automatic Updates. I connect to 2 VPN's without problems. Is it possible the "explorer" program is not corrupt, that I just have some settings wrong? When I use Netscape Navigator, everything seems to work fine. The articles I referred to prompting me to reinstall XP are MSKN 318378, 315341. The one thing that was good about the reinstall is it fixed my corrupted WMI. I threw all this in, just in case you know of users with similar problems. Is it reasonable for me to try to install stall XP from an OEM system disk that comes with a laptop I just purchased for my son?
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my original IE problem, I reinstalled XP from the 2 year old System Disk and applied all MS updates that I was notified about. IE 6.0 continues to fail. I've run spybot. I have maintained Norton AV for over 2 years, MS Automatic Updates. I connect to 2 VPN's without problems. Is it possible the "explorer" program is not corrupt, that I just have some settings wrong? When I use Netscape Navigator, everything seems to work fine. The articles I referred to prompting me to reinstall XP are MSKN 318378, 315341. The one thing that was good about the reinstall is it fixed my corrupted WMI. I threw all this in, just in case you know of users with similar problems. Is it reasonable for me to try to install stall XP from an OEM system disk that comes with a laptop I just purchased for my son?
J
Jim Byrd
Hi Moe - I'm more than a little confused about what you have installed and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL current
updates from Windows Update? A number of the Q's you cite are installed as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6 click on
Help|About Internet Explorer and note what it says next to Update Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
what you've done. Do you have Win XP HE, SP1 installed w/ ALL current
updates from Windows Update? A number of the Q's you cite are installed as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6 click on
Help|About Internet Explorer and note what it says next to Update Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
G
Guest
About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version Q37009, Q32894. I've nerver specifically installed XP SP1. I've been assuming I'm at SP1 level just because of all the Hot fixes in the Add/Remove Programs list that refer to SP1.
All updates I've installed are from the Auto Update functionality of XP. I belive I installed all that have been sent.
All updates I've installed are from the Auto Update functionality of XP. I belive I installed all that have been sent.
J
Jim Byrd
Hi Moe - You need to download and install SP1 for IE6, then add any rollup
"hotfixes" identified by Windows Update.
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx
You can check as to your OS version by running Start|Run enter msinfo32
System Summary, Version will show you whether you have XPHE SP1 installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that order).
Do the following:
Before you try to remove spyware using any of the programs below, download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K or
XP)
The process of removing certain malware may kill your internet connection.
If this should occur, this program, LSPFIX, will enable you to regain your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various functions:
HOW TO Restart in Safe Mode
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406>
HOW TO Enable Hidden Files
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339>
HOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039>
(WinXP)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239>
(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
"hotfixes" identified by Windows Update.
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx
You can check as to your OS version by running Start|Run enter msinfo32
System Summary, Version will show you whether you have XPHE SP1 installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that order).
Do the following:
Before you try to remove spyware using any of the programs below, download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K or
XP)
The process of removing certain malware may kill your internet connection.
If this should occur, this program, LSPFIX, will enable you to regain your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various functions:
HOW TO Restart in Safe Mode
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406>
HOW TO Enable Hidden Files
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339>
HOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039>
(WinXP)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239>
(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
G
Guest
Jim, Thank you so much for the info you have provided. I'm starting to go to work now. Unfortunately, after I downloaded IE 6 SP1, I tried to install and got an error message as follows: "A previous installation has pending work requiring a reboot. You need to restart your computer to complete that installation before running Internet Explorer Setup. Setup will now close." I click OK; it closes. Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember downloading and trying to install IE6 SP1 and getting a messagfe about "not passing Logo Testing..." IE6 SP1 did not fully install. But, since then, I have reinstalled XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that you suggested. Do you agree. Or do you have another suggestion?
Thanks.
--
old.moe
In looking back at my notes from May 8, 2004, I see and I remember downloading and trying to install IE6 SP1 and getting a messagfe about "not passing Logo Testing..." IE6 SP1 did not fully install. But, since then, I have reinstalled XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that you suggested. Do you agree. Or do you have another suggestion?
Thanks.
--
old.moe
Jim Byrd said:Hi Moe - You need to download and install SP1 for IE6, then add any rollup
"hotfixes" identified by Windows Update.
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx
You can check as to your OS version by running Start|Run enter msinfo32
System Summary, Version will show you whether you have XPHE SP1 installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that order).
Do the following:
Before you try to remove spyware using any of the programs below, download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K or
XP)
The process of removing certain malware may kill your internet connection.
If this should occur, this program, LSPFIX, will enable you to regain your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various functions:
HOW TO Restart in Safe Mode
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406>
HOW TO Enable Hidden Files
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339>
HOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039>
(WinXP)
<http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239>
(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
Inxumoe said:About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been assuming I'm at
SP1 level just because of all the Hot fixes in the Add/Remove Programs list that
refer to SP1. All updates I've installed are from the Auto Update functionality
of XP. I belive I installed all that have been sent.
J
Jim Byrd
No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
xumoe said:Jim, Thank you so much for the info you have provided. I'm starting to go to
work now. Unfortunately, after I downloaded IE 6 SP1, I tried to install and got
an error message as follows: "A previous installation has pending work requiring
a reboot. You need to restart your computer to complete that installation before
running Internet Explorer Setup. Setup will now close." I click OK; it closes.
Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember downloading
and trying to install IE6 SP1 and getting a messagfe about "not passing Logo
Testing..." IE6 SP1 did not fully install. But, since then, I have reinstalled
XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that you
suggested. Do you agree. Or do you have another suggestion?
Thanks.
Hi Moe - You need to download and install SP1 for IE6, then add any rollup
"hotfixes" identified by Windows Update.
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx
You can check as to your OS version by running Start|Run enter msinfo32
System Summary, Version will show you whether you have XPHE SP1 installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that order).
Do the following:
Before you try to remove spyware using any of the programs below, download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K or
XP)
The process of removing certain malware may kill your internet connection.
If this should occur, this program, LSPFIX, will enable you to regain your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various functions:
HOW TO Restart in Safe ModeHOW TO Enable Hidden FilesHOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
Ininstalledxumoe said:About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been assuming I'm at
SP1 level just because of all the Hot fixes in the Add/Remove Programs list that
refer to SP1. All updates I've installed are from the Auto Update functionality
of XP. I belive I installed all that have been sent.
Hi Moe - I'm more than a little confused about what you have installed and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL current
updates from Windows Update? A number of the Q's you cite are
asoriginalpart of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6 click on
Help|About Internet Explorer and note what it says next to Update Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that
"should be
reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and others.
How do I
get them and apply them? When I check the MS Download Site, my search
yields no
results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my
IEonproblem, I reinstalled XP from the 2 year old System Disk and applied all MS
updates that I was notified about. IE 6.0 continues to fail. I've run
spybot.
I have maintained Norton AV for over 2 years, MS Automatic Updates. I
connect to
2 VPN's without problems. Is it possible the "explorer" program is not
corrupt,
that I just have some settings wrong? When I use Netscape Navigator,
everything
seems to work fine. The articles I referred to prompting me to reinstall XP
are
MSKN 318378, 315341. The one thing that was good about the reinstall is
it fixed
my corrupted WMI. I threw all this in, just in case you know of users
with
similar problems. Is it reasonable for me to try to install stall XP from an
OEM
system disk that comes with a laptop I just purchased for my son?
Hi PLC - There is no direct Repair function for IE6 in XP. Here are some
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow" (without the
quotes and notice the space between the c and the /.) Have your XP CD
handy
and be prepared to go get a cup of coffee - it takes a while. This will do
the same thing as Repair IE6 for XP but a lot more, that is find any
corrupt
system files and replace them. It does not, however, re-register the
various software components (except possibly the ones it replaces?)
AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see mskb
814510, http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files from
certain "hotfixes" which will then need to be re-installed. To check for
this, after running sfc, open a Cmd window and enter "qfecheck /v /l:c:\"
(without the quotes). If you don't have qfecheck installed, it can be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not work
XP(but probably does - I've heard both stories), for just IE6 repair if you
don't have IE6 listed in Add-Remove Programs, then in Start|Run then
enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate entry.
3. If you find that you need to do a re-install of IE6 then you can
consider the following, I can't verify this for XP (I'm Win2k - it
works
there, and I've had good reports from XP users), but you might want to
give
it a try at your own risk. Again, enter this at Start|Run without the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in
Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In plc <[email protected]> typed:
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
G
Guest
No luck...the article is for "ME", XP has no "Load Static VxDs" check box.
I tried "Diagnostic" setting, Applied, Restarted. Kept getting mesaage for Sysconfig when restarting. I tried IE Setup, it failed with same old mesg. I then reran msconfig selecting "Normal", Applied, Restarted OK. I tried IE Setup, it started...but then I got the infamous message, "The software you are installing has not passed Windows Logo testing to verify its compatibility with Windows XP. The software will not be installed." Sure enough it wasn't.
What do you think?
--
old.moe
I tried "Diagnostic" setting, Applied, Restarted. Kept getting mesaage for Sysconfig when restarting. I tried IE Setup, it failed with same old mesg. I then reran msconfig selecting "Normal", Applied, Restarted OK. I tried IE Setup, it started...but then I got the infamous message, "The software you are installing has not passed Windows Logo testing to verify its compatibility with Windows XP. The software will not be installed." Sure enough it wasn't.
What do you think?
--
old.moe
Jim Byrd said:No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
Inxumoe said:Jim, Thank you so much for the info you have provided. I'm starting to go to
work now. Unfortunately, after I downloaded IE 6 SP1, I tried to install and got
an error message as follows: "A previous installation has pending work requiring
a reboot. You need to restart your computer to complete that installation before
running Internet Explorer Setup. Setup will now close." I click OK; it closes.
Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember downloading
and trying to install IE6 SP1 and getting a messagfe about "not passing Logo
Testing..." IE6 SP1 did not fully install. But, since then, I have reinstalled
XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that you
suggested. Do you agree. Or do you have another suggestion?
Thanks.
Hi Moe - You need to download and install SP1 for IE6, then add any rollup
"hotfixes" identified by Windows Update.
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx
You can check as to your OS version by running Start|Run enter msinfo32
System Summary, Version will show you whether you have XPHE SP1 installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that order).
Do the following:
Before you try to remove spyware using any of the programs below, download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K or
XP)
The process of removing certain malware may kill your internet connection.
If this should occur, this program, LSPFIX, will enable you to regain your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various functions:
HOW TO Restart in Safe ModeHOW TO Enable Hidden FilesHOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been assuming
I'm at
SP1 level just because of all the Hot fixes in the Add/Remove Programs
list that
refer to SP1. All updates I've installed are from the Auto Update
functionality
of XP. I belive I installed all that have been sent.
Hi Moe - I'm more than a little confused about what you have installed
and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL current
updates from Windows Update? A number of the Q's you cite are installed
as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6 click on
Help|About Internet Explorer and note what it says next to Update
Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if
SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that
"should be
reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and others.
How do I
get them and apply them? When I check the MS Download Site, my search
yields no
results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my original
IE
problem, I reinstalled XP from the 2 year old System Disk and applied all MS
updates that I was notified about. IE 6.0 continues to fail. I've run
spybot.
I have maintained Norton AV for over 2 years, MS Automatic Updates. I
connect to
2 VPN's without problems. Is it possible the "explorer" program is not
corrupt,
that I just have some settings wrong? When I use Netscape Navigator,
everything
seems to work fine. The articles I referred to prompting me to reinstall XP
are
MSKN 318378, 315341. The one thing that was good about the reinstall is
it fixed
my corrupted WMI. I threw all this in, just in case you know of users
with
similar problems. Is it reasonable for me to try to install stall XP from an
OEM
system disk that comes with a laptop I just purchased for my son?
Hi PLC - There is no direct Repair function for IE6 in XP. Here are
some
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow" (without the
quotes and notice the space between the c and the /.) Have your XP CD
handy
and be prepared to go get a cup of coffee - it takes a while. This will do
the same thing as Repair IE6 for XP but a lot more, that is find any
corrupt
system files and replace them. It does not, however, re-register the
various software components (except possibly the ones it replaces?)
AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see mskb
814510, http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files
from
certain "hotfixes" which will then need to be re-installed. To check
for
this, after running sfc, open a Cmd window and enter "qfecheck /v
/l:c:\"
(without the quotes). If you don't have qfecheck installed, it can be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not work on
XP
(but probably does - I've heard both stories), for just IE6 repair if
you
don't have IE6 listed in Add-Remove Programs, then in Start|Run then
enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate entry.
3. If you find that you need to do a re-install of IE6 then you can
consider the following, I can't verify this for XP (I'm Win2k - it
works
there, and I've had good reports from XP users), but you might want to
give
it a try at your own risk. Again, enter this at Start|Run without the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing
IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in
Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In plc <[email protected]> typed:
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
J
Jim Byrd
Hi Moe - Sorry, I picked up the wrong URL. Try the fix here first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312444&Product=ie
Then, if that didn't work, there are three additional things you might want
to check:
Fix # 1: Try running ie6setup in Safe Mode. This was suggested by
Microsoft Support to one correspondent and worked for him after he had tried
the fixes described below. If it doesn't for you then try the following.
Fix # 2: First, make sure in Windows Explorer/Tools/FolderOptions/View
that you show hidden and system files and show extensions.
Look in your c:\windows\inf folder and see if you find any files named
oemxx.inf which have a length of 0 (zero), where the xx can be any number.
There could be potentially many thousands. If you do, you need to erase
these. To do this, first select the c:\windows\inf folder, then hit Search.
In the Search pane on the left, enter oem*.inf and down at the bottom click
Size and At Most and 1 (one). Then do Search. When it finishes, you should
have all of the zero length oemxx.inf files listed in the right pane along
with possibly some of size 1K. Do CNTL A to select all of them. Now hold
down CNTL while you click on (de-select) all of those at the top that are
1K, so the only the 0K size files are left selected. Now hold down SHIFT
and click DELETE to delete the zero length oemxx.inf files without sending
them to the Recycle Bin. It will take some time if you've a lot of these
files, so be patient. You'll know when it's done. Symantec's System
Doctor is the usual culprit, but other programs can also cause this if
they're running when you do an install, particularly an install of system
software, so be sure to disable any such whenever you do an install.
Now for both Fix#2 and Fix#3, if your file system is FAT32 then re-start
your computer into DOS using a boot floppy if necessary and run Scandisk C:,
fixing any errors. If you're NTFS, then schedule chkdsk and re-boot. If
you're not NT or Win2k, also run Scanreg /fix. Re-boot to Windows Safe mode
and defrag your computer (which will also probably take a little time), and
try your install again from Safe mode.. If it works, fine.
Fix # 3: If not, or if you didn't have such zero length oemxx.inf type
files to start with, try the following. Find the c:\program files\internet
explorer\uninstall information folder (It may be named something slightly
different depending on your operating system, for example, just Uninstall in
WinME.) It probably will be hidden, and you will have to un-hid it. Right
click on the folder, select properties, then un-tick the Hidden attribute.
(If you don't have this folder, then create an empty one named: c:\program
files\internet explorer\uninstall information - now try your install again
in Safe mode, re-selecting all components, even those already bolded. See
below.)
Now create a new empty folder and call it something like "IE Delete Backup".
Move the contents of the \uninstall information folder to the new folder you
created. (Just the contents - leave the old folder there.) Now try the
install again from the start in Safe mode, re-selecting all components, even
those already bolded, that you want using the Advanced option, and see if
this works. It has in many, many cases, but not all. If it doesn't, you
can just restore the files you saved in "IE Delete Backup". Let us know how
you make out, so that if this doesn't help, perhaps someone else can suggest
something else for you.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
http://support.microsoft.com/default.aspx?scid=kb;en-us;312444&Product=ie
Then, if that didn't work, there are three additional things you might want
to check:
Fix # 1: Try running ie6setup in Safe Mode. This was suggested by
Microsoft Support to one correspondent and worked for him after he had tried
the fixes described below. If it doesn't for you then try the following.
Fix # 2: First, make sure in Windows Explorer/Tools/FolderOptions/View
that you show hidden and system files and show extensions.
Look in your c:\windows\inf folder and see if you find any files named
oemxx.inf which have a length of 0 (zero), where the xx can be any number.
There could be potentially many thousands. If you do, you need to erase
these. To do this, first select the c:\windows\inf folder, then hit Search.
In the Search pane on the left, enter oem*.inf and down at the bottom click
Size and At Most and 1 (one). Then do Search. When it finishes, you should
have all of the zero length oemxx.inf files listed in the right pane along
with possibly some of size 1K. Do CNTL A to select all of them. Now hold
down CNTL while you click on (de-select) all of those at the top that are
1K, so the only the 0K size files are left selected. Now hold down SHIFT
and click DELETE to delete the zero length oemxx.inf files without sending
them to the Recycle Bin. It will take some time if you've a lot of these
files, so be patient. You'll know when it's done. Symantec's System
Doctor is the usual culprit, but other programs can also cause this if
they're running when you do an install, particularly an install of system
software, so be sure to disable any such whenever you do an install.
Now for both Fix#2 and Fix#3, if your file system is FAT32 then re-start
your computer into DOS using a boot floppy if necessary and run Scandisk C:,
fixing any errors. If you're NTFS, then schedule chkdsk and re-boot. If
you're not NT or Win2k, also run Scanreg /fix. Re-boot to Windows Safe mode
and defrag your computer (which will also probably take a little time), and
try your install again from Safe mode.. If it works, fine.
Fix # 3: If not, or if you didn't have such zero length oemxx.inf type
files to start with, try the following. Find the c:\program files\internet
explorer\uninstall information folder (It may be named something slightly
different depending on your operating system, for example, just Uninstall in
WinME.) It probably will be hidden, and you will have to un-hid it. Right
click on the folder, select properties, then un-tick the Hidden attribute.
(If you don't have this folder, then create an empty one named: c:\program
files\internet explorer\uninstall information - now try your install again
in Safe mode, re-selecting all components, even those already bolded. See
below.)
Now create a new empty folder and call it something like "IE Delete Backup".
Move the contents of the \uninstall information folder to the new folder you
created. (Just the contents - leave the old folder there.) Now try the
install again from the start in Safe mode, re-selecting all components, even
those already bolded, that you want using the Advanced option, and see if
this works. It has in many, many cases, but not all. If it doesn't, you
can just restore the files you saved in "IE Delete Backup". Let us know how
you make out, so that if this doesn't help, perhaps someone else can suggest
something else for you.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
xumoe said:No luck...the article is for "ME", XP has no "Load Static VxDs" check box.
I tried "Diagnostic" setting, Applied, Restarted. Kept getting mesaage for
Sysconfig when restarting. I tried IE Setup, it failed with same old mesg. I
then reran msconfig selecting "Normal", Applied, Restarted OK. I tried IE
Setup, it started...but then I got the infamous message, "The software you are
installing has not passed Windows Logo testing to verify its compatibility with
Windows XP. The software will not be installed." Sure enough it wasn't. What
do you think?
No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
Ingoxumoe said:Jim, Thank you so much for the info you have provided. I'm starting to
toinstallwork now. Unfortunately, after I downloaded IE 6 SP1, I tried to
and gotinstallationan error message as follows: "A previous installation has pending work requiring
a reboot. You need to restart your computer to complete that
beforehttp://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspxrunning Internet Explorer Setup. Setup will now close." I click OK; it closes.
Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember downloading
and trying to install IE6 SP1 and getting a messagfe about "not passing Logo
Testing..." IE6 SP1 did not fully install. But, since then, I have reinstalled
XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that you
suggested. Do you agree. Or do you have another suggestion?
Thanks.
Hi Moe - You need to download and install SP1 for IE6, then add any rollup
"hotfixes" identified by Windows Update.Win2KYou can check as to your OS version by running Start|Run enter msinfo32
System Summary, Version will show you whether you have XPHE SP1 installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that order).
Do the following:
Before you try to remove spyware using any of the programs below, download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is
orXP)
The process of removing certain malware may kill your internet connection.
If this should occur, this program, LSPFIX, will enable you to regain your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked: http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various functions:
HOW TO Restart in Safe ModeHOW TO Enable Hidden FilesHOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)(WinXP)http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED frequently.)
You may also get it here if that link is blocked:http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:Foror Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff:
XPattemptsyou can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for
toclickinstall malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been assuming
I'm at
SP1 level just because of all the Hot fixes in the Add/Remove Programs
list that
refer to SP1. All updates I've installed are from the Auto Update
functionality
of XP. I belive I installed all that have been sent.
Hi Moe - I'm more than a little confused about what you have installed
and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL current
updates from Windows Update? A number of the Q's you cite are installed as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6
onappliedHelp|About Internet Explorer and note what it says next to Update
Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if
SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that
"should be
reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and others.
How do I
get them and apply them? When I check the MS Download Site, my search
yields no
results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my original IE
problem, I reinstalled XP from the 2 year old System Disk and
all MSXPupdates that I was notified about. IE 6.0 continues to fail. I've run
spybot.
I have maintained Norton AV for over 2 years, MS Automatic Updates. I
connect to
2 VPN's without problems. Is it possible the "explorer" program is not
corrupt,
that I just have some settings wrong? When I use Netscape Navigator,
everything
seems to work fine. The articles I referred to prompting me to reinstall XP
are
MSKN 318378, 315341. The one thing that was good about the reinstall is it
fixed
my corrupted WMI. I threw all this in, just in case you know of users
with
similar problems. Is it reasonable for me to try to install stall
from anhttp://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfcOEM
system disk that comes with a laptop I just purchased for my son?
Hi PLC - There is no direct Repair function for IE6 in XP. Here are
some
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow" (without the
quotes and notice the space between the c and the /.) Have your XP CD
handy
and be prepared to go get a cup of coffee - it takes a while. This will do
the same thing as Repair IE6 for XP but a lot more, that is find any
corrupt
system files and replace them. It does not, however, re-register the
various software components (except possibly the ones it replaces?)
AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see mskb
814510,can erroneously overwrite (restore over) previously installed files
from
certain "hotfixes" which will then need to be re-installed. To check
for
this, after running sfc, open a Cmd window and enter "qfecheck /v
/l:c:\"
(without the quotes). If you don't have qfecheck installed, it can be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not work on XP
(but probably does - I've heard both stories), for just IE6 repair if
you
don't have IE6 listed in Add-Remove Programs, then in Start|Run then
enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate entry.
3. If you find that you need to do a re-install of IE6 then you can
consider the following, I can't verify this for XP (I'm Win2k - it
works
there, and I've had good reports from XP users), but you might want to give
it a try at your own risk. Again, enter this at Start|Run without the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing
IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in
Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In plc <[email protected]> typed:
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
G
Guest
Jim,
What about the message about IE 6 not Logo Tested?
Also, when in SAFE mode, what services are requuired? It appears I need to be connected to the internet for setup to get "needed" files.
--
old.moe
What about the message about IE 6 not Logo Tested?
Also, when in SAFE mode, what services are requuired? It appears I need to be connected to the internet for setup to get "needed" files.
--
old.moe
Jim Byrd said:Hi Moe - Sorry, I picked up the wrong URL. Try the fix here first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312444&Product=ie
Then, if that didn't work, there are three additional things you might want
to check:
Fix # 1: Try running ie6setup in Safe Mode. This was suggested by
Microsoft Support to one correspondent and worked for him after he had tried
the fixes described below. If it doesn't for you then try the following.
Fix # 2: First, make sure in Windows Explorer/Tools/FolderOptions/View
that you show hidden and system files and show extensions.
Look in your c:\windows\inf folder and see if you find any files named
oemxx.inf which have a length of 0 (zero), where the xx can be any number.
There could be potentially many thousands. If you do, you need to erase
these. To do this, first select the c:\windows\inf folder, then hit Search.
In the Search pane on the left, enter oem*.inf and down at the bottom click
Size and At Most and 1 (one). Then do Search. When it finishes, you should
have all of the zero length oemxx.inf files listed in the right pane along
with possibly some of size 1K. Do CNTL A to select all of them. Now hold
down CNTL while you click on (de-select) all of those at the top that are
1K, so the only the 0K size files are left selected. Now hold down SHIFT
and click DELETE to delete the zero length oemxx.inf files without sending
them to the Recycle Bin. It will take some time if you've a lot of these
files, so be patient. You'll know when it's done. Symantec's System
Doctor is the usual culprit, but other programs can also cause this if
they're running when you do an install, particularly an install of system
software, so be sure to disable any such whenever you do an install.
Now for both Fix#2 and Fix#3, if your file system is FAT32 then re-start
your computer into DOS using a boot floppy if necessary and run Scandisk C:,
fixing any errors. If you're NTFS, then schedule chkdsk and re-boot. If
you're not NT or Win2k, also run Scanreg /fix. Re-boot to Windows Safe mode
and defrag your computer (which will also probably take a little time), and
try your install again from Safe mode.. If it works, fine.
Fix # 3: If not, or if you didn't have such zero length oemxx.inf type
files to start with, try the following. Find the c:\program files\internet
explorer\uninstall information folder (It may be named something slightly
different depending on your operating system, for example, just Uninstall in
WinME.) It probably will be hidden, and you will have to un-hid it. Right
click on the folder, select properties, then un-tick the Hidden attribute.
(If you don't have this folder, then create an empty one named: c:\program
files\internet explorer\uninstall information - now try your install again
in Safe mode, re-selecting all components, even those already bolded. See
below.)
Now create a new empty folder and call it something like "IE Delete Backup".
Move the contents of the \uninstall information folder to the new folder you
created. (Just the contents - leave the old folder there.) Now try the
install again from the start in Safe mode, re-selecting all components, even
those already bolded, that you want using the Advanced option, and see if
this works. It has in many, many cases, but not all. If it doesn't, you
can just restore the files you saved in "IE Delete Backup". Let us know how
you make out, so that if this doesn't help, perhaps someone else can suggest
something else for you.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
Inxumoe said:No luck...the article is for "ME", XP has no "Load Static VxDs" check box.
I tried "Diagnostic" setting, Applied, Restarted. Kept getting mesaage for
Sysconfig when restarting. I tried IE Setup, it failed with same old mesg. I
then reran msconfig selecting "Normal", Applied, Restarted OK. I tried IE
Setup, it started...but then I got the infamous message, "The software you are
installing has not passed Windows Logo testing to verify its compatibility with
Windows XP. The software will not be installed." Sure enough it wasn't. What
do you think?
No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, Thank you so much for the info you have provided. I'm starting to go
to
work now. Unfortunately, after I downloaded IE 6 SP1, I tried to install
and got
an error message as follows: "A previous installation has pending work
requiring
a reboot. You need to restart your computer to complete that installation
before
running Internet Explorer Setup. Setup will now close." I click OK; it
closes.
Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember
downloading
and trying to install IE6 SP1 and getting a messagfe about "not passing
Logo
Testing..." IE6 SP1 did not fully install. But, since then, I have
reinstalled
XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that you
suggested. Do you agree. Or do you have another suggestion?
Thanks.
Hi Moe - You need to download and install SP1 for IE6, then add any
rollup
"hotfixes" identified by Windows Update.
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx
You can check as to your OS version by running Start|Run enter
msinfo32
System Summary, Version will show you whether you have XPHE SP1
installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this
page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You
will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that
order).
Do the following:
Before you try to remove spyware using any of the programs below,
download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K
or
XP)
The process of removing certain malware may kill your internet
connection.
If this should occur, this program, LSPFIX, will enable you to regain
your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the
parasite.
Be sure to close all instances of IE and OE. You may also get it here
if
that link is blocked:
http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various
functions:
HOW TO Restart in Safe ModeHOW TO Enable Hidden FilesHOW TO Disable/Flush System Restore (do this at the end AFTER cleaning
or
use the suggested procedure for XP at the ******'s)(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will
have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other
malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an
analysis
of a number of possible parasites on your machine will be made to help
you
identify and remove them. NOTE: You will need to disable Ad Blocking in
Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message
between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this
regularly
to get rid of most "spyware/hijackware" on your machine. If it has to
fix
things, be sure to re-boot and rerun AdAware again and repeat this cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I
recommend
using both normally. After UPDATING and fixing things with SpyBot S&D,
be
sure to re-boot and rerun SpyBot again and repeat this cycle until you
get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a
new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED
frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the
removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a
new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For
XP
you can run a Disk Cleanup cycle and then look in the More Options tab.
The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually
create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing
from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware
Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a
variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts
to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version
Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been assuming
I'm at
SP1 level just because of all the Hot fixes in the Add/Remove Programs
list that
refer to SP1. All updates I've installed are from the Auto Update
functionality
of XP. I belive I installed all that have been sent.
Hi Moe - I'm more than a little confused about what you have installed
and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL current
updates from Windows Update? A number of the Q's you cite are installed as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6 click
on
Help|About Internet Explorer and note what it says next to Update
Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if
SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that
"should be
reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and others.
How do I
get them and apply them? When I check the MS Download Site, my search
yields no
results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my original IE
problem, I reinstalled XP from the 2 year old System Disk and applied
all MS
updates that I was notified about. IE 6.0 continues to fail. I've run
spybot.
I have maintained Norton AV for over 2 years, MS Automatic Updates. I
connect to
2 VPN's without problems. Is it possible the "explorer" program is not
corrupt,
that I just have some settings wrong? When I use Netscape Navigator,
everything
seems to work fine. The articles I referred to prompting me to
reinstall XP
are
MSKN 318378, 315341. The one thing that was good about the reinstall is it
fixed
my corrupted WMI. I threw all this in, just in case you know of users
with
similar problems. Is it reasonable for me to try to install stall XP
from an
OEM
system disk that comes with a laptop I just purchased for my son?
Hi PLC - There is no direct Repair function for IE6 in XP. Here are
some
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow"
(without the
quotes and notice the space between the c and the /.) Have your XP CD
handy
and be prepared to go get a cup of coffee - it takes a while. This
will do
the same thing as Repair IE6 for XP but a lot more, that is find any
corrupt
system files and replace them. It does not, however, re-register the
various software components (except possibly the ones it replaces?)
AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see
mskb
814510,
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files
from
certain "hotfixes" which will then need to be re-installed. To check
for
this, after running sfc, open a Cmd window and enter "qfecheck /v
/l:c:\"
(without the quotes). If you don't have qfecheck installed, it can
be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and
for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not work on XP
(but probably does - I've heard both stories), for just IE6 repair if
you
don't have IE6 listed in Add-Remove Programs, then in Start|Run then
enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate
entry.
3. If you find that you need to do a re-install of IE6 then you can
consider the following, I can't verify this for XP (I'm Win2k - it
works
there, and I've had good reports from XP users), but you might want to give
it a try at your own risk. Again, enter this at Start|Run without
the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing
IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in
Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In plc <[email protected]> typed:
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
J
Jim Byrd
Hi Moe - See these two approaches first and see if one of them fixes it:
The Software You Are Installing Has Not Passed Windows Logo Testing...
http://support.microsoft.com/?kbid=828031
You Cannot Install Some Updates or Programs
http://support.microsoft.com/?id=822798
Then re: Safe mode install - do the re-install in Safe mode using the
IE6Setup.exe in %SystemRoot%\Windows Update Setup Files if that folder
exists, since it will contain all of the necessary files, and you won't need
to go to the net. If not, you won't be able to use the Safe mode approach,
and you'll need to go to Fix #3.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
The Software You Are Installing Has Not Passed Windows Logo Testing...
http://support.microsoft.com/?kbid=828031
You Cannot Install Some Updates or Programs
http://support.microsoft.com/?id=822798
Then re: Safe mode install - do the re-install in Safe mode using the
IE6Setup.exe in %SystemRoot%\Windows Update Setup Files if that folder
exists, since it will contain all of the necessary files, and you won't need
to go to the net. If not, you won't be able to use the Safe mode approach,
and you'll need to go to Fix #3.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
xumoe said:Jim,
What about the message about IE 6 not Logo Tested?
Also, when in SAFE mode, what services are requuired? It appears I need to be
connected to the internet for setup to get "needed" files.
Hi Moe - Sorry, I picked up the wrong URL. Try the fix here first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312444&Product=ie
Then, if that didn't work, there are three additional things you might want
to check:
Fix # 1: Try running ie6setup in Safe Mode. This was suggested by
Microsoft Support to one correspondent and worked for him after he had tried
the fixes described below. If it doesn't for you then try the following.
Fix # 2: First, make sure in Windows Explorer/Tools/FolderOptions/View
that you show hidden and system files and show extensions.
Look in your c:\windows\inf folder and see if you find any files named
oemxx.inf which have a length of 0 (zero), where the xx can be any number.
There could be potentially many thousands. If you do, you need to erase
these. To do this, first select the c:\windows\inf folder, then hit Search.
In the Search pane on the left, enter oem*.inf and down at the bottom click
Size and At Most and 1 (one). Then do Search. When it finishes, you should
have all of the zero length oemxx.inf files listed in the right pane along
with possibly some of size 1K. Do CNTL A to select all of them. Now hold
down CNTL while you click on (de-select) all of those at the top that are
1K, so the only the 0K size files are left selected. Now hold down SHIFT
and click DELETE to delete the zero length oemxx.inf files without sending
them to the Recycle Bin. It will take some time if you've a lot of these
files, so be patient. You'll know when it's done. Symantec's System
Doctor is the usual culprit, but other programs can also cause this if
they're running when you do an install, particularly an install of system
software, so be sure to disable any such whenever you do an install.
Now for both Fix#2 and Fix#3, if your file system is FAT32 then re-start
your computer into DOS using a boot floppy if necessary and run Scandisk C:,
fixing any errors. If you're NTFS, then schedule chkdsk and re-boot. If
you're not NT or Win2k, also run Scanreg /fix. Re-boot to Windows Safe mode
and defrag your computer (which will also probably take a little time), and
try your install again from Safe mode.. If it works, fine.
Fix # 3: If not, or if you didn't have such zero length oemxx.inf type
files to start with, try the following. Find the c:\program files\internet
explorer\uninstall information folder (It may be named something slightly
different depending on your operating system, for example, just Uninstall in
WinME.) It probably will be hidden, and you will have to un-hid it. Right
click on the folder, select properties, then un-tick the Hidden attribute.
(If you don't have this folder, then create an empty one named: c:\program
files\internet explorer\uninstall information - now try your install again
in Safe mode, re-selecting all components, even those already bolded. See
below.)
Now create a new empty folder and call it something like "IE Delete Backup".
Move the contents of the \uninstall information folder to the new folder you
created. (Just the contents - leave the old folder there.) Now try the
install again from the start in Safe mode, re-selecting all components, even
those already bolded, that you want using the Advanced option, and see if
this works. It has in many, many cases, but not all. If it doesn't, you
can just restore the files you saved in "IE Delete Backup". Let us know how
you make out, so that if this doesn't help, perhaps someone else can suggest
something else for you.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
Inyouxumoe said:No luck...the article is for "ME", XP has no "Load Static VxDs" check box.
I tried "Diagnostic" setting, Applied, Restarted. Kept getting mesaage for
Sysconfig when restarting. I tried IE Setup, it failed with same old mesg. I
then reran msconfig selecting "Normal", Applied, Restarted OK. I tried IE
Setup, it started...but then I got the infamous message, "The software
arehttp://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspxinstalling has not passed Windows Logo testing to verify its compatibility with
Windows XP. The software will not be installed." Sure enough it wasn't. What
do you think?
No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, Thank you so much for the info you have provided. I'm starting to go to
work now. Unfortunately, after I downloaded IE 6 SP1, I tried to install and
got
an error message as follows: "A previous installation has pending work
requiring
a reboot. You need to restart your computer to complete that installation
before
running Internet Explorer Setup. Setup will now close." I click OK; it
closes.
Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember
downloading
and trying to install IE6 SP1 and getting a messagfe about "not passing
Logo
Testing..." IE6 SP1 did not fully install. But, since then, I have
reinstalled
XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that you
suggested. Do you agree. Or do you have another suggestion?
Thanks.
Hi Moe - You need to download and install SP1 for IE6, then add any
rollup
"hotfixes" identified by Windows Update.otherYou can check as to your OS version by running Start|Run enter
msinfo32
System Summary, Version will show you whether you have XPHE SP1
installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this
page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You
will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any
AdBlocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that
order).
Do the following:
Before you try to remove spyware using any of the programs below,
download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K or
XP)
The process of removing certain malware may kill your internet
connection.
If this should occur, this program, LSPFIX, will enable you to regain
your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the
parasite.
Be sure to close all instances of IE and OE. You may also get it here
if
that link is blocked:
http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too) from
Safe mode and then reboot. AFTER cleaning things up, then you can disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various
functions:
HOW TO Restart in Safe ModeHOW TO Enable Hidden FilesHOW TO Disable/Flush System Restore (do this at the end AFTER cleaning
or
use the suggested procedure for XP at the ******'s)(WinXP)once(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to restore
your search functions if they've been affected (as they probably will
have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other
malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an
analysis
of a number of possible parasites on your machine will be made to help
you
identify and remove them. NOTE: You will need to disable Ad Blocking in
Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message
between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this
regularly
to get rid of most "spyware/hijackware" on your machine. If it has to
fix
things, be sure to re-boot and rerun AdAware again and repeat this cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I
recommend
using both normally. After UPDATING and fixing things with SpyBot S&D,
be
sure to re-boot and rerun SpyBot again and repeat this cycle until you
get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing any
other fix such as CWShredder and, as a minimum, normally at least
ahttp://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a
new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED
frequently.)
You may also get it here if that link is blocked:clickIn Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and
onhttp://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:I'veor Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the
removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a
new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab.
The
System Restore option removes all but the latest Restore Point. If there
hasn't been one made since the system was cleaned you should manually
create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing
from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware
Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a
variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version
Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been assuming I'm
at
SP1 level just because of all the Hot fixes in the Add/Remove Programs
list that
refer to SP1. All updates I've installed are from the Auto Update
functionality
of XP. I belive I installed all that have been sent.
Hi Moe - I'm more than a little confused about what you have installed and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL current
updates from Windows Update? A number of the Q's you cite are installed as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6 click on
Help|About Internet Explorer and note what it says next to Update
Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that
"should be
reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and others.
How do I
get them and apply them? When I check the MS Download Site, my search
yields no
results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my original IE
problem, I reinstalled XP from the 2 year old System Disk and applied
all MS
updates that I was notified about. IE 6.0 continues to fail.
runXPspybot.
I have maintained Norton AV for over 2 years, MS Automatic Updates. I
connect to 2 VPN's without problems. Is it possible the "explorer"
program is not
corrupt,
that I just have some settings wrong? When I use Netscape Navigator,
everything
seems to work fine. The articles I referred to prompting me to
reinstall XP
are
MSKN 318378, 315341. The one thing that was good about the reinstall is it
fixed
my corrupted WMI. I threw all this in, just in case you know of users
with
similar problems. Is it reasonable for me to try to install stall XP
from an
OEM
system disk that comes with a laptop I just purchased for my son?
Hi PLC - There is no direct Repair function for IE6 in XP. Here are some
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow"
(without the
quotes and notice the space between the c and the /.) Have your
CDworkhandy
and be prepared to go get a cup of coffee - it takes a while. This
will do
the same thing as Repair IE6 for XP but a lot more, that is find any
corrupt
system files and replace them. It does not, however, re-register the
various software components (except possibly the ones it replaces?)
AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see
mskb
814510,
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files
from
certain "hotfixes" which will then need to be re-installed. To check for
this, after running sfc, open a Cmd window and enter "qfecheck /v
/l:c:\"
(without the quotes). If you don't have qfecheck installed, it can
be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and
for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not
on XPwant(but probably does - I've heard both stories), for just IE6 repair if you
don't have IE6 listed in Add-Remove Programs, then in Start|Run then
enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate
entry.
3. If you find that you need to do a re-install of IE6 then you can
consider the following, I can't verify this for XP (I'm Win2k - it
works
there, and I've had good reports from XP users), but you might
to giveit a try at your own risk. Again, enter this at Start|Run without
the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing
IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in
Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In plc <[email protected]> typed:
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
G
Guest
Jim, thanks for all your efforts to guide me, but nothing solved my problem. I have ordered the IE 6 SP-1 CD from Microsoft ($5) and should have it in a day or 2. Thanks, again.
--
old.moe
--
old.moe
Jim Byrd said:Hi Moe - See these two approaches first and see if one of them fixes it:
The Software You Are Installing Has Not Passed Windows Logo Testing...
http://support.microsoft.com/?kbid=828031
You Cannot Install Some Updates or Programs
http://support.microsoft.com/?id=822798
Then re: Safe mode install - do the re-install in Safe mode using the
IE6Setup.exe in %SystemRoot%\Windows Update Setup Files if that folder
exists, since it will contain all of the necessary files, and you won't need
to go to the net. If not, you won't be able to use the Safe mode approach,
and you'll need to go to Fix #3.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
Inxumoe said:Jim,
What about the message about IE 6 not Logo Tested?
Also, when in SAFE mode, what services are requuired? It appears I need to be
connected to the internet for setup to get "needed" files.
Hi Moe - Sorry, I picked up the wrong URL. Try the fix here first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312444&Product=ie
Then, if that didn't work, there are three additional things you might want
to check:
Fix # 1: Try running ie6setup in Safe Mode. This was suggested by
Microsoft Support to one correspondent and worked for him after he had tried
the fixes described below. If it doesn't for you then try the following.
Fix # 2: First, make sure in Windows Explorer/Tools/FolderOptions/View
that you show hidden and system files and show extensions.
Look in your c:\windows\inf folder and see if you find any files named
oemxx.inf which have a length of 0 (zero), where the xx can be any number.
There could be potentially many thousands. If you do, you need to erase
these. To do this, first select the c:\windows\inf folder, then hit Search.
In the Search pane on the left, enter oem*.inf and down at the bottom click
Size and At Most and 1 (one). Then do Search. When it finishes, you should
have all of the zero length oemxx.inf files listed in the right pane along
with possibly some of size 1K. Do CNTL A to select all of them. Now hold
down CNTL while you click on (de-select) all of those at the top that are
1K, so the only the 0K size files are left selected. Now hold down SHIFT
and click DELETE to delete the zero length oemxx.inf files without sending
them to the Recycle Bin. It will take some time if you've a lot of these
files, so be patient. You'll know when it's done. Symantec's System
Doctor is the usual culprit, but other programs can also cause this if
they're running when you do an install, particularly an install of system
software, so be sure to disable any such whenever you do an install.
Now for both Fix#2 and Fix#3, if your file system is FAT32 then re-start
your computer into DOS using a boot floppy if necessary and run Scandisk C:,
fixing any errors. If you're NTFS, then schedule chkdsk and re-boot. If
you're not NT or Win2k, also run Scanreg /fix. Re-boot to Windows Safe mode
and defrag your computer (which will also probably take a little time), and
try your install again from Safe mode.. If it works, fine.
Fix # 3: If not, or if you didn't have such zero length oemxx.inf type
files to start with, try the following. Find the c:\program files\internet
explorer\uninstall information folder (It may be named something slightly
different depending on your operating system, for example, just Uninstall in
WinME.) It probably will be hidden, and you will have to un-hid it. Right
click on the folder, select properties, then un-tick the Hidden attribute.
(If you don't have this folder, then create an empty one named: c:\program
files\internet explorer\uninstall information - now try your install again
in Safe mode, re-selecting all components, even those already bolded. See
below.)
Now create a new empty folder and call it something like "IE Delete Backup".
Move the contents of the \uninstall information folder to the new folder you
created. (Just the contents - leave the old folder there.) Now try the
install again from the start in Safe mode, re-selecting all components, even
those already bolded, that you want using the Advanced option, and see if
this works. It has in many, many cases, but not all. If it doesn't, you
can just restore the files you saved in "IE Delete Backup". Let us know how
you make out, so that if this doesn't help, perhaps someone else can suggest
something else for you.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
No luck...the article is for "ME", XP has no "Load Static VxDs" check box.
I tried "Diagnostic" setting, Applied, Restarted. Kept getting mesaage
for
Sysconfig when restarting. I tried IE Setup, it failed with same old
mesg. I
then reran msconfig selecting "Normal", Applied, Restarted OK. I tried
IE
Setup, it started...but then I got the infamous message, "The software you
are
installing has not passed Windows Logo testing to verify its
compatibility with
Windows XP. The software will not be installed." Sure enough it
wasn't. What
do you think?
No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, Thank you so much for the info you have provided. I'm starting to go to
work now. Unfortunately, after I downloaded IE 6 SP1, I tried to install and
got
an error message as follows: "A previous installation has pending work
requiring
a reboot. You need to restart your computer to complete that installation
before
running Internet Explorer Setup. Setup will now close." I click OK; it
closes.
Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember
downloading
and trying to install IE6 SP1 and getting a messagfe about "not passing
Logo
Testing..." IE6 SP1 did not fully install. But, since then, I have
reinstalled
XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that you
suggested. Do you agree. Or do you have another suggestion?
Thanks.
Hi Moe - You need to download and install SP1 for IE6, then add any
rollup
"hotfixes" identified by Windows Update.
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx
You can check as to your OS version by running Start|Run enter
msinfo32
System Summary, Version will show you whether you have XPHE SP1
installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this
page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You
will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other
Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving
the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that
order).
Do the following:
Before you try to remove spyware using any of the programs below,
download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K or
XP)
The process of removing certain malware may kill your internet
connection.
If this should occur, this program, LSPFIX, will enable you to regain
your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the
parasite.
Be sure to close all instances of IE and OE. You may also get it here
if
that link is blocked:
http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned
up.
It's best to perform CWShredder (and most other malware fixers too)
from
Safe mode and then reboot. AFTER cleaning things up, then you can
disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various
functions:
HOW TO Restart in Safe ModeHOW TO Enable Hidden FilesHOW TO Disable/Flush System Restore (do this at the end AFTER cleaning
or
use the suggested procedure for XP at the ******'s)(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore
your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to
restore
your search functions if they've been affected (as they probably will
have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other
malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an
analysis
of a number of possible parasites on your machine will be made to help
you
identify and remove them. NOTE: You will need to disable Ad Blocking in
Zone
Alarm 3.x, if present or any other Ad Blocking software which
interferes
with Java Scripting for this scan to work. You should get a message
between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this
regularly
to get rid of most "spyware/hijackware" on your machine. If it has to
fix
things, be sure to re-boot and rerun AdAware again and repeat this
cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I
recommend
using both normally. After UPDATING and fixing things with SpyBot S&D,
be
sure to re-boot and rerun SpyBot again and repeat this cycle until you
get a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing
any
other fix such as CWShredder and, as a minimum, normally at least once
a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a
new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED
frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating
system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click
on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the
removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a
new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For XP
you can run a Disk Cleanup cycle and then look in the More Options tab.
The
System Restore option removes all but the latest Restore Point. If
there
hasn't been one made since the system was cleaned you should manually
create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing
from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware
Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this
writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a
variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version
Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been assuming I'm
at
SP1 level just because of all the Hot fixes in the Add/Remove Programs
list that
refer to SP1. All updates I've installed are from the Auto Update
functionality
of XP. I belive I installed all that have been sent.
Hi Moe - I'm more than a little confused about what you have installed and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL
current
updates from Windows Update? A number of the Q's you cite are
installed as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6 click on
Help|About Internet Explorer and note what it says next to Update
Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that
"should be
reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and others.
How do I
get them and apply them? When I check the MS Download Site, my search
yields no
results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my
original IE
problem, I reinstalled XP from the 2 year old System Disk and applied
all MS
updates that I was notified about. IE 6.0 continues to fail. I've
run
spybot.
I have maintained Norton AV for over 2 years, MS Automatic Updates. I
connect to 2 VPN's without problems. Is it possible the "explorer"
program is
not
corrupt,
that I just have some settings wrong? When I use Netscape Navigator,
everything
seems to work fine. The articles I referred to prompting me to
reinstall XP
are
MSKN 318378, 315341. The one thing that was good about the
reinstall is it
fixed
my corrupted WMI. I threw all this in, just in case you know of users
with
similar problems. Is it reasonable for me to try to install stall XP
from an
OEM
system disk that comes with a laptop I just purchased for my son?
Hi PLC - There is no direct Repair function for IE6 in XP. Here are some
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow"
(without the
quotes and notice the space between the c and the /.) Have your XP
CD
handy
and be prepared to go get a cup of coffee - it takes a while. This
will do
the same thing as Repair IE6 for XP but a lot more, that is find any
corrupt
system files and replace them. It does not, however, re-register
the
various software components (except possibly the ones it replaces?)
AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see
mskb
814510,
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files
from
certain "hotfixes" which will then need to be re-installed. To check for
this, after running sfc, open a Cmd window and enter "qfecheck /v
/l:c:\"
(without the quotes). If you don't have qfecheck installed, it can
be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and
for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not work
on XP
(but probably does - I've heard both stories), for just IE6 repair if you
don't have IE6 listed in Add-Remove Programs, then in Start|Run then
enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate
entry.
3. If you find that you need to do a re-install of IE6 then you
can
consider the following, I can't verify this for XP (I'm Win2k - it
works
there, and I've had good reports from XP users), but you might want
to give
it a try at your own risk. Again, enter this at Start|Run without
the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing
IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in
Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In plc <[email protected]> typed:
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
J
Jim Byrd
YW, Moe - Sorry we couldn't get it fixed. Let me know how you make out,
please.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
please.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
xumoe said:Jim, thanks for all your efforts to guide me, but nothing solved my problem. I
have ordered the IE 6 SP-1 CD from Microsoft ($5) and should have it in a day or
2. Thanks, again.
Hi Moe - See these two approaches first and see if one of them fixes it:
The Software You Are Installing Has Not Passed Windows Logo Testing...
http://support.microsoft.com/?kbid=828031
You Cannot Install Some Updates or Programs
http://support.microsoft.com/?id=822798
Then re: Safe mode install - do the re-install in Safe mode using the
IE6Setup.exe in %SystemRoot%\Windows Update Setup Files if that folder
exists, since it will contain all of the necessary files, and you won't need
to go to the net. If not, you won't be able to use the Safe mode approach,
and you'll need to go to Fix #3.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
InScandiskxumoe said:Jim,
What about the message about IE 6 not Logo Tested?
Also, when in SAFE mode, what services are requuired? It appears I need to be
connected to the internet for setup to get "needed" files.
Hi Moe - Sorry, I picked up the wrong URL. Try the fix here first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312444&Product=ie
Then, if that didn't work, there are three additional things you might want
to check:
Fix # 1: Try running ie6setup in Safe Mode. This was suggested by
Microsoft Support to one correspondent and worked for him after he had tried
the fixes described below. If it doesn't for you then try the following.
Fix # 2: First, make sure in Windows Explorer/Tools/FolderOptions/View
that you show hidden and system files and show extensions.
Look in your c:\windows\inf folder and see if you find any files named
oemxx.inf which have a length of 0 (zero), where the xx can be any number.
There could be potentially many thousands. If you do, you need to erase
these. To do this, first select the c:\windows\inf folder, then hit Search.
In the Search pane on the left, enter oem*.inf and down at the bottom click
Size and At Most and 1 (one). Then do Search. When it finishes, you should
have all of the zero length oemxx.inf files listed in the right pane along
with possibly some of size 1K. Do CNTL A to select all of them. Now hold
down CNTL while you click on (de-select) all of those at the top that are
1K, so the only the 0K size files are left selected. Now hold down SHIFT
and click DELETE to delete the zero length oemxx.inf files without sending
them to the Recycle Bin. It will take some time if you've a lot of these
files, so be patient. You'll know when it's done. Symantec's System
Doctor is the usual culprit, but other programs can also cause this if
they're running when you do an install, particularly an install of system
software, so be sure to disable any such whenever you do an install.
Now for both Fix#2 and Fix#3, if your file system is FAT32 then re-start
your computer into DOS using a boot floppy if necessary and run
C:,Uninstallfixing any errors. If you're NTFS, then schedule chkdsk and re-boot. If
you're not NT or Win2k, also run Scanreg /fix. Re-boot to Windows Safe mode
and defrag your computer (which will also probably take a little time), and
try your install again from Safe mode.. If it works, fine.
Fix # 3: If not, or if you didn't have such zero length oemxx.inf type
files to start with, try the following. Find the c:\program files\internet
explorer\uninstall information folder (It may be named something slightly
different depending on your operating system, for example, just
infolderWinME.) It probably will be hidden, and you will have to un-hid it. Right
click on the folder, select properties, then un-tick the Hidden attribute.
(If you don't have this folder, then create an empty one named: c:\program
files\internet explorer\uninstall information - now try your install again
in Safe mode, re-selecting all components, even those already bolded. See
below.)
Now create a new empty folder and call it something like "IE Delete Backup".
Move the contents of the \uninstall information folder to the new
youknowcreated. (Just the contents - leave the old folder there.) Now try the
install again from the start in Safe mode, re-selecting all components, even
those already bolded, that you want using the Advanced option, and see if
this works. It has in many, many cases, but not all. If it doesn't, you
can just restore the files you saved in "IE Delete Backup". Let us
howhttp://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspxyou make out, so that if this doesn't help, perhaps someone else can suggest
something else for you.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
No luck...the article is for "ME", XP has no "Load Static VxDs" check box.
I tried "Diagnostic" setting, Applied, Restarted. Kept getting mesaage
for
Sysconfig when restarting. I tried IE Setup, it failed with same old
mesg. I
then reran msconfig selecting "Normal", Applied, Restarted OK. I tried
IE
Setup, it started...but then I got the infamous message, "The software you are
installing has not passed Windows Logo testing to verify its
compatibility with
Windows XP. The software will not be installed." Sure enough it
wasn't. What
do you think?
No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, Thank you so much for the info you have provided. I'm starting to go to
work now. Unfortunately, after I downloaded IE 6 SP1, I tried to install and
got
an error message as follows: "A previous installation has pending work
requiring
a reboot. You need to restart your computer to complete that installation
before
running Internet Explorer Setup. Setup will now close." I click OK; it
closes.
Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember
downloading
and trying to install IE6 SP1 and getting a messagfe about "not passing Logo
Testing..." IE6 SP1 did not fully install. But, since then, I have
reinstalled
XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that you
suggested. Do you agree. Or do you have another suggestion?
Thanks.
Hi Moe - You need to download and install SP1 for IE6, then add any
rollup
"hotfixes" identified by Windows Update.scanYou can check as to your OS version by running Start|Run enter
msinfo32
System Summary, Version will show you whether you have XPHE SP1
installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this
page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this
towork. You should get a message between the two lines of **** giving
the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that
order).
Do the following:
Before you try to remove spyware using any of the programs below,
download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2K or
XP)
The process of removing certain malware may kill your internet
connection.
If this should occur, this program, LSPFIX, will enable you to regain
your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the
parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked:
http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear the
malware garbage from your System Restore backups after you've cleaned
up.
It's best to perform CWShredder (and most other malware fixers too)
from
Safe mode and then reboot. AFTER cleaning things up, then you can
disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various
functions:
HOW TO Restart in Safe ModeHOW TO Enable Hidden FilesHOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)(WinXP)http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore
your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to
restore
your search functions if they've been affected (as they probably will
have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other
malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an
analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in
Zone
Alarm 3.x, if present or any other Ad Blocking software which
interferes
with Java Scripting for this scan to work. You should get a message
between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this
regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this
cycle
until you get a clean scan. The reason is that it may have to remove
things which are currently "in use" before it can then clean up others.
Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I
recommend
using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get
a
clean "no red" scan. The reason is that SpyBot sometimes has to remove
things which are currently "in use" before it can then clean up others.
Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing
any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED
frequently.)
You may also get it here if that link is blocked:http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949In Windows Explorer, click on Tools|Folder Options|View and check "Show
hidden files and folders" and uncheck "Hide protected operating
system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:Woodruff:or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the
removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly infected)
ones. The following suggested approach is courtesy of Gary
For XPifyou can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If
there
hasn't been one made since the system was cleaned you should manually
create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing
from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware
Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it UPDATED) The latest version as of this
writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a
variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version
Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been assuming I'm
at
SP1 level just because of all the Hot fixes in the Add/Remove Programs
list that
refer to SP1. All updates I've installed are from the Auto Update
functionality
of XP. I belive I installed all that have been sent.
Hi Moe - I'm more than a little confused about what you have installed and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL
current
updates from Windows Update? A number of the Q's you cite are
installed as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6 click on
Help|About Internet Explorer and note what it says next to Update
Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167
SP1stalland the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that
"should be
reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and others.
How do I
get them and apply them? When I check the MS Download Site, my search
yields no
results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my
original IE
problem, I reinstalled XP from the 2 year old System Disk and applied
all MS
updates that I was notified about. IE 6.0 continues to fail. I've run
spybot.
I have maintained Norton AV for over 2 years, MS Automatic Updates. I
connect to 2 VPN's without problems. Is it possible the "explorer"
program is
not
corrupt,
that I just have some settings wrong? When I use Netscape Navigator,
everything
seems to work fine. The articles I referred to prompting me to
reinstall XP
are
MSKN 318378, 315341. The one thing that was good about the
reinstall is it
fixed
my corrupted WMI. I threw all this in, just in case you know of users
with
similar problems. Is it reasonable for me to try to install
XPHerefrom an
OEM
system disk that comes with a laptop I just purchased for my son?
Hi PLC - There is no direct Repair function for IE6 in XP.
are somefindalternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow"
(without the
quotes and notice the space between the c and the /.) Have your XP CD
handy
and be prepared to go get a cup of coffee - it takes a while. This
will do
the same thing as Repair IE6 for XP but a lot more, that is
anycorrupt
system files and replace them. It does not, however, re-register
the
various software components (except possibly the ones it replaces?)
AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see
mskb
814510,
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files
from
certain "hotfixes" which will then need to be re-installed. To check for
this, after running sfc, open a Cmd window and enter "qfecheck /v
/l:c:\"
(without the quotes). If you don't have qfecheck installed, it can be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not work on
XP (but probably does - I've heard both stories), for just IE6 repair if you
don't have IE6 listed in Add-Remove Programs, then in Start|Run then
enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate
entry.
3. If you find that you need to do a re-install of IE6 then you
can
consider the following, I can't verify this for XP (I'm Win2k - it
works
there, and I've had good reports from XP users), but you might want to
give
it a try at your own risk. Again, enter this at Start|Run without the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing
IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in
Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In plc <[email protected]> typed:
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
G
Guest
Hi, Jim,
I tried installing IE 6 SP-1 from the CD. First curious thing, I had to be on the Net for it to go. I don't understand why it needs to use the Net.
Second, it failed with the same "not Logo tested" message."
Since then I've gone to MS Support. I sent a clean Dr Watson dump after the next crash. I was advised that MYSRCHAS.DLL was causing the problem. The problem being in EXPLORE.EXE, not in IE Explorer. I downloaded Spy Hunter v 1.5.81 from 2-spyware.com. I scanned (about 30 minutes). I had to buy the full version in order to "remove parasites." ($30.) I downloaded the full version. I scanned (60 minutes (113003 items). I removed the 66 parasites it identified (mysrchas was not among them). I went to add/remove and removed "My Search Bar" (don't even know where it came from). I restarted my machine. I decided to try getting on the Net and using IE to get to the Newsgroup, which is usually a good test to see if everything is working. Guess what, I'm talking to you. I'm excited. I don't know how long I'll be well, but I like it so far. Thanks for your help and interest. I'll try to keep you posted of any developments.
--
old.moe
I tried installing IE 6 SP-1 from the CD. First curious thing, I had to be on the Net for it to go. I don't understand why it needs to use the Net.
Second, it failed with the same "not Logo tested" message."
Since then I've gone to MS Support. I sent a clean Dr Watson dump after the next crash. I was advised that MYSRCHAS.DLL was causing the problem. The problem being in EXPLORE.EXE, not in IE Explorer. I downloaded Spy Hunter v 1.5.81 from 2-spyware.com. I scanned (about 30 minutes). I had to buy the full version in order to "remove parasites." ($30.) I downloaded the full version. I scanned (60 minutes (113003 items). I removed the 66 parasites it identified (mysrchas was not among them). I went to add/remove and removed "My Search Bar" (don't even know where it came from). I restarted my machine. I decided to try getting on the Net and using IE to get to the Newsgroup, which is usually a good test to see if everything is working. Guess what, I'm talking to you. I'm excited. I don't know how long I'll be well, but I like it so far. Thanks for your help and interest. I'll try to keep you posted of any developments.
--
old.moe
Jim Byrd said:YW, Moe - Sorry we couldn't get it fixed. Let me know how you make out,
please.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
Inxumoe said:Jim, thanks for all your efforts to guide me, but nothing solved my problem. I
have ordered the IE 6 SP-1 CD from Microsoft ($5) and should have it in a day or
2. Thanks, again.
Hi Moe - See these two approaches first and see if one of them fixes it:
The Software You Are Installing Has Not Passed Windows Logo Testing...
http://support.microsoft.com/?kbid=828031
You Cannot Install Some Updates or Programs
http://support.microsoft.com/?id=822798
Then re: Safe mode install - do the re-install in Safe mode using the
IE6Setup.exe in %SystemRoot%\Windows Update Setup Files if that folder
exists, since it will contain all of the necessary files, and you won't need
to go to the net. If not, you won't be able to use the Safe mode approach,
and you'll need to go to Fix #3.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim,
What about the message about IE 6 not Logo Tested?
Also, when in SAFE mode, what services are requuired? It appears I need
to be
connected to the internet for setup to get "needed" files.
Hi Moe - Sorry, I picked up the wrong URL. Try the fix here first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312444&Product=ie
Then, if that didn't work, there are three additional things you might
want
to check:
Fix # 1: Try running ie6setup in Safe Mode. This was suggested by
Microsoft Support to one correspondent and worked for him after he had
tried
the fixes described below. If it doesn't for you then try the following.
Fix # 2: First, make sure in Windows Explorer/Tools/FolderOptions/View
that you show hidden and system files and show extensions.
Look in your c:\windows\inf folder and see if you find any files named
oemxx.inf which have a length of 0 (zero), where the xx can be any
number.
There could be potentially many thousands. If you do, you need to erase
these. To do this, first select the c:\windows\inf folder, then hit
Search.
In the Search pane on the left, enter oem*.inf and down at the bottom
click
Size and At Most and 1 (one). Then do Search. When it finishes, you
should
have all of the zero length oemxx.inf files listed in the right pane
along
with possibly some of size 1K. Do CNTL A to select all of them. Now
hold
down CNTL while you click on (de-select) all of those at the top that are
1K, so the only the 0K size files are left selected. Now hold down SHIFT
and click DELETE to delete the zero length oemxx.inf files without
sending
them to the Recycle Bin. It will take some time if you've a lot of these
files, so be patient. You'll know when it's done. Symantec's System
Doctor is the usual culprit, but other programs can also cause this if
they're running when you do an install, particularly an install of system
software, so be sure to disable any such whenever you do an install.
Now for both Fix#2 and Fix#3, if your file system is FAT32 then re-start
your computer into DOS using a boot floppy if necessary and run Scandisk
C:,
fixing any errors. If you're NTFS, then schedule chkdsk and re-boot. If
you're not NT or Win2k, also run Scanreg /fix. Re-boot to Windows Safe
mode
and defrag your computer (which will also probably take a little time),
and
try your install again from Safe mode.. If it works, fine.
Fix # 3: If not, or if you didn't have such zero length oemxx.inf type
files to start with, try the following. Find the c:\program
files\internet
explorer\uninstall information folder (It may be named something
slightly
different depending on your operating system, for example, just Uninstall
in
WinME.) It probably will be hidden, and you will have to un-hid it.
Right
click on the folder, select properties, then un-tick the Hidden
attribute.
(If you don't have this folder, then create an empty one named:
c:\program
files\internet explorer\uninstall information - now try your install
again
in Safe mode, re-selecting all components, even those already bolded.
See
below.)
Now create a new empty folder and call it something like "IE Delete
Backup".
Move the contents of the \uninstall information folder to the new folder
you
created. (Just the contents - leave the old folder there.) Now try the
install again from the start in Safe mode, re-selecting all components,
even
those already bolded, that you want using the Advanced option, and see if
this works. It has in many, many cases, but not all. If it doesn't, you
can just restore the files you saved in "IE Delete Backup". Let us know
how
you make out, so that if this doesn't help, perhaps someone else can
suggest
something else for you.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
No luck...the article is for "ME", XP has no "Load Static VxDs" check
box.
I tried "Diagnostic" setting, Applied, Restarted. Kept getting mesaage
for
Sysconfig when restarting. I tried IE Setup, it failed with same old
mesg. I
then reran msconfig selecting "Normal", Applied, Restarted OK. I tried
IE
Setup, it started...but then I got the infamous message, "The software you are
installing has not passed Windows Logo testing to verify its
compatibility with
Windows XP. The software will not be installed." Sure enough it
wasn't. What
do you think?
No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, Thank you so much for the info you have provided. I'm starting
to go to
work now. Unfortunately, after I downloaded IE 6 SP1, I tried to
install and
got
an error message as follows: "A previous installation has pending work
requiring
a reboot. You need to restart your computer to complete that
installation
before
running Internet Explorer Setup. Setup will now close." I click OK; it
closes.
Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember
downloading
and trying to install IE6 SP1 and getting a messagfe about "not passing Logo
Testing..." IE6 SP1 did not fully install. But, since then, I have
reinstalled
XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that
you
suggested. Do you agree. Or do you have another suggestion?
Thanks.
Hi Moe - You need to download and install SP1 for IE6, then add any
rollup
"hotfixes" identified by Windows Update.
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspx
You can check as to your OS version by running Start|Run enter
msinfo32
System Summary, Version will show you whether you have XPHE SP1
installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go to this
page
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan
to
work. You should get a message between the two lines of **** giving
the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that
order).
Do the following:
Before you try to remove spyware using any of the programs below,
download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is
Win2K or
XP)
The process of removing certain malware may kill your internet
connection.
If this should occur, this program, LSPFIX, will enable you to regain
your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the
parasite.
Be sure to close all instances of IE and OE. You may also get it here if
that link is blocked:
http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear
the
malware garbage from your System Restore backups after you've cleaned
up.
It's best to perform CWShredder (and most other malware fixers too)
from
Safe mode and then reboot. AFTER cleaning things up, then you can
disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various
functions:
HOW TO Restart in Safe ModeHOW TO Enable Hidden FilesHOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore
your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to
restore
your search functions if they've been affected (as they probably will
have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other
malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an
analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in
Zone
Alarm 3.x, if present or any other Ad Blocking software which
interferes
with Java Scripting for this scan to work. You should get a message
between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this
regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this
cycle
until you get a clean scan. The reason is that it may have to
remove
things which are currently "in use" before it can then clean up
others.
Another excellent program for this purpose is SpyBot Search and
Destroy
available here: http://security.kolla.de/ SpyBot Support Forum
here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I
recommend
using both normally. After UPDATING and fixing things with SpyBot S&D, be
sure to re-boot and rerun SpyBot again and repeat this cycle until you get
a
clean "no red" scan. The reason is that SpyBot sometimes has to
remove
things which are currently "in use" before it can then clean up
others.
Note that sometimes you need to make a judgement call about what
these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing
any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED
frequently.)
You may also get it here if that link is blocked:
http://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13
In Windows Explorer, click on Tools|Folder Options|View and check
"Show
hidden files and folders" and uncheck "Hide protected operating
system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it
then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:
http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the
removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly
infected)
ones. The following suggested approach is courtesy of Gary Woodruff:
For XP
you can run a Disk Cleanup cycle and then look in the More Options tab. The
System Restore option removes all but the latest Restore Point. If
there
hasn't been one made since the system was cleaned you should manually
create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing
the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing
from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware
Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU
or
memory load - but keep it UPDATED) The latest version as of this
writing
will prevent installation or prevent the malware from running if it
is
already installed, and it provides information and fixit-links for a
variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for
attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates
are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version
Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been
assuming I'm
at
SP1 level just because of all the Hot fixes in the Add/Remove Programs
list that
refer to SP1. All updates I've installed are from the Auto Update
functionality
of XP. I belive I installed all that have been sent.
Hi Moe - I'm more than a little confused about what you have
installed and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL
current
updates from Windows Update? A number of the Q's you cite are
installed as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6
click on
Help|About Internet Explorer and note what it says next to Update
Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if
SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that
"should be
reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and
others.
How do I
get them and apply them? When I check the MS Download Site, my
search
yields no
results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my
original IE
problem, I reinstalled XP from the 2 year old System Disk and
applied
all MS
updates that I was notified about. IE 6.0 continues to fail. I've run
spybot.
I have maintained Norton AV for over 2 years, MS Automatic
Updates. I
connect to 2 VPN's without problems. Is it possible the
"explorer"
program is
not
corrupt,
that I just have some settings wrong? When I use Netscape
Navigator,
everything
seems to work fine. The articles I referred to prompting me to
reinstall XP
are
MSKN 318378, 315341. The one thing that was good about the
reinstall is it
fixed
my corrupted WMI. I threw all this in, just in case you know of
users
with
similar problems. Is it reasonable for me to try to install stall
XP
from an
OEM
system disk that comes with a laptop I just purchased for my son?
Hi PLC - There is no direct Repair function for IE6 in XP. Here
are some
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow"
(without the
quotes and notice the space between the c and the /.) Have your XP CD
handy
and be prepared to go get a cup of coffee - it takes a while. This
will do
the same thing as Repair IE6 for XP but a lot more, that is find
any
corrupt
system files and replace them. It does not, however, re-register
the
various software components (except possibly the ones it replaces?)
AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see
mskb
814510,
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files
from
certain "hotfixes" which will then need to be re-installed. To
check for
this, after running sfc, open a Cmd window and enter "qfecheck /v
/l:c:\"
(without the quotes). If you don't have qfecheck installed, it can be
obtained for XP here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35468 and for
Win2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may not work on
XP (but probably does - I've heard both stories), for just IE6
repair if you
don't have IE6 listed in Add-Remove Programs, then in Start|Run
then
enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate
entry.
3. If you find that you need to do a re-install of IE6 then you
can
consider the following, I can't verify this for XP (I'm
Win2k - it
works
there, and I've had good reports from XP users), but you might want to
give
it a try at your own risk. Again, enter this at Start|Run without the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing
IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in
Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In plc <[email protected]> typed:
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
J
Jim Byrd
Hi Moe - Well good! Sounds like you've made some progress. Let's see if it
holds up, but do go ahead and install some of the protective stuff I
mentioned before such as SpywareBlaster and the Immunize functions in
SpyBotS&D. Good luck!
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
holds up, but do go ahead and install some of the protective stuff I
mentioned before such as SpywareBlaster and the Immunize functions in
SpyBotS&D. Good luck!
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
xumoe said:Hi, Jim,
I tried installing IE 6 SP-1 from the CD. First curious thing, I had to be on
the Net for it to go. I don't understand why it needs to use the Net.
Second, it failed with the same "not Logo tested" message."
Since then I've gone to MS Support. I sent a clean Dr Watson dump after the next
crash. I was advised that MYSRCHAS.DLL was causing the problem. The problem
being in EXPLORE.EXE, not in IE Explorer. I downloaded Spy Hunter v 1.5.81 from
2-spyware.com. I scanned (about 30 minutes). I had to buy the full version in
order to "remove parasites." ($30.) I downloaded the full version. I scanned
(60 minutes (113003 items). I removed the 66 parasites it identified (mysrchas
was not among them). I went to add/remove and removed "My Search Bar" (don't
even know where it came from). I restarted my machine. I decided to try getting
on the Net and using IE to get to the Newsgroup, which is usually a good test to
see if everything is working. Guess what, I'm talking to you. I'm excited. I
don't know how long I'll be well, but I like it so far. Thanks for your help and
interest. I'll try to keep you posted of any developments.
YW, Moe - Sorry we couldn't get it fixed. Let me know how you make out,
please.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
Inaxumoe said:Jim, thanks for all your efforts to guide me, but nothing solved my problem. I
have ordered the IE 6 SP-1 CD from Microsoft ($5) and should have it in
day orsee2. Thanks, again.
Hi Moe - See these two approaches first and see if one of them fixes it:
The Software You Are Installing Has Not Passed Windows Logo Testing...
http://support.microsoft.com/?kbid=828031
You Cannot Install Some Updates or Programs
http://support.microsoft.com/?id=822798
Then re: Safe mode install - do the re-install in Safe mode using the
IE6Setup.exe in %SystemRoot%\Windows Update Setup Files if that folder
exists, since it will contain all of the necessary files, and you won't need
to go to the net. If not, you won't be able to use the Safe mode approach,
and you'll need to go to Fix #3.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim,
What about the message about IE 6 not Logo Tested?
Also, when in SAFE mode, what services are requuired? It appears I need
to be
connected to the internet for setup to get "needed" files.
Hi Moe - Sorry, I picked up the wrong URL. Try the fix here first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312444&Product=ie
Then, if that didn't work, there are three additional things you might
want
to check:
Fix # 1: Try running ie6setup in Safe Mode. This was suggested by
Microsoft Support to one correspondent and worked for him after he had
tried
the fixes described below. If it doesn't for you then try the following.
Fix # 2: First, make sure in Windows Explorer/Tools/FolderOptions/View
that you show hidden and system files and show extensions.
Look in your c:\windows\inf folder and see if you find any files named
oemxx.inf which have a length of 0 (zero), where the xx can be any
number.
There could be potentially many thousands. If you do, you need to erase
these. To do this, first select the c:\windows\inf folder, then hit
Search.
In the Search pane on the left, enter oem*.inf and down at the bottom
click
Size and At Most and 1 (one). Then do Search. When it finishes, you
should
have all of the zero length oemxx.inf files listed in the right pane
along
with possibly some of size 1K. Do CNTL A to select all of them. Now
hold
down CNTL while you click on (de-select) all of those at the top that are
1K, so the only the 0K size files are left selected. Now hold down SHIFT
and click DELETE to delete the zero length oemxx.inf files without
sending
them to the Recycle Bin. It will take some time if you've a lot of these
files, so be patient. You'll know when it's done. Symantec's System
Doctor is the usual culprit, but other programs can also cause this if
they're running when you do an install, particularly an install of system
software, so be sure to disable any such whenever you do an install.
Now for both Fix#2 and Fix#3, if your file system is FAT32 then re-start
your computer into DOS using a boot floppy if necessary and run Scandisk C:,
fixing any errors. If you're NTFS, then schedule chkdsk and re-boot. If
you're not NT or Win2k, also run Scanreg /fix. Re-boot to Windows Safe
mode
and defrag your computer (which will also probably take a little time),
and
try your install again from Safe mode.. If it works, fine.
Fix # 3: If not, or if you didn't have such zero length oemxx.inf type
files to start with, try the following. Find the c:\program
files\internet
explorer\uninstall information folder (It may be named something
slightly
different depending on your operating system, for example, just Uninstall in
WinME.) It probably will be hidden, and you will have to un-hid it.
Right
click on the folder, select properties, then un-tick the Hidden
attribute.
(If you don't have this folder, then create an empty one named:
c:\program
files\internet explorer\uninstall information - now try your install
again
in Safe mode, re-selecting all components, even those already bolded.
See
below.)
Now create a new empty folder and call it something like "IE Delete
Backup".
Move the contents of the \uninstall information folder to the new folder you
created. (Just the contents - leave the old folder there.) Now try the
install again from the start in Safe mode, re-selecting all components,
even
those already bolded, that you want using the Advanced option, and
ifsoftwarethis works. It has in many, many cases, but not all. If it doesn't, you
can just restore the files you saved in "IE Delete Backup". Let us know how
you make out, so that if this doesn't help, perhaps someone else can
suggest
something else for you.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
No luck...the article is for "ME", XP has no "Load Static VxDs" check
box.
I tried "Diagnostic" setting, Applied, Restarted. Kept getting mesaage for
Sysconfig when restarting. I tried IE Setup, it failed with same old
mesg. I
then reran msconfig selecting "Normal", Applied, Restarted OK. I tried IE
Setup, it started...but then I got the infamous message, "The
you arehttp://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.mspxinstalling has not passed Windows Logo testing to verify its
compatibility with
Windows XP. The software will not be installed." Sure enough it
wasn't. What
do you think?
No Moe - Try this first:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309314&Product=ie
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, Thank you so much for the info you have provided. I'm starting
to go to
work now. Unfortunately, after I downloaded IE 6 SP1, I tried to
install and
got
an error message as follows: "A previous installation has pending work
requiring
a reboot. You need to restart your computer to complete that
installation
before
running Internet Explorer Setup. Setup will now close." I click OK; it
closes.
Then I reboot and try again. It fails with the same message....
In looking back at my notes from May 8, 2004, I see and I remember
downloading
and trying to install IE6 SP1 and getting a messagfe about "not passing Logo
Testing..." IE6 SP1 did not fully install. But, since then, I have
reinstalled
XP, and applied all the Automatic Updates.
I'm thiniking that I should reinstall XP again, and then do all that
you
suggested. Do you agree. Or do you have another suggestion?
Thanks.
Hi Moe - You need to download and install SP1 for IE6, then add any
rollup
"hotfixes" identified by Windows Update.toYou can check as to your OS version by running Start|Run enter
msinfo32
System Summary, Version will show you whether you have XPHE SP1
installed.
Then I would suggest that you do the following:
There is substantial possibility of malware. You might want go
thisitpage
at Jim Eshelman's site, here: http://aumha.org/a/noads.htm or here:
http://inetexplorer.mvps.org/parasite.htm and wait a little bit (be
patient), while an analysis of a number of possible parasites on your
machine will be made to help you identify and remove them. NOTE: You will
need to disable Ad Blocking in Zone Alarm 3.x, if present or any other Ad
Blocking software which interferes with Java Scripting for this scan to
work. You should get a message between the two lines of **** giving the
results of the scan.
Run CWShredder, then AdAware, SpyBot, and HijackThis, below, in that
order).
Do the following:
Before you try to remove spyware using any of the programs below,
download a
copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is
Win2K or
XP)
The process of removing certain malware may kill your internet
connection.
If this should occur, this program, LSPFIX, will enable you to regain
your
connection.
Download, UPDATE before running, and run:
http://209.133.47.200/~merijn/files/CWShredder.exe to remove the
parasite.
Be sure to close all instances of IE and OE. You may also get
here ifthat link is blocked:
http://www.zerosrealm.com/downloads/CWShredder.zip
BE SURE that you get v.158 or later!
You will need to show Hidden files first and then at the end clear
the
malware garbage from your System Restore backups after you've cleaned up.
It's best to perform CWShredder (and most other malware fixers too)
from
Safe mode and then reboot. AFTER cleaning things up, then you can
disable
and then re-enable System Restore. See ******** below.
The following links give instructions on how to do these various
functions:
HOW TO Restart in Safe ModeHOW TO Enable Hidden FilesHOW TO Disable/Flush System Restore (do this at the end AFTER cleaning or
use the suggested procedure for XP at the ******'s)(WinXP)SpyBot(WinME)
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore
your
tabs and remove any restrictions that the parasite has put in place.
Now download and run:
http://www.kellys-korner-xp.com/regs_edits/RestoreSearch2.REG to
restore
your search functions if they've been affected (as they probably will
have
been).
Be sure that you also download and install hotfix Q816093, here:
http://support.microsoft.com/?kbid=816093
which blocks the exploit upon which this parasite family depends.
However, this also indicates that you may have acquired some other
malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an
analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in
Zone
Alarm 3.x, if present or any other Ad Blocking software which
interferes
with Java Scripting for this scan to work. You should get a message
between
the two lines of **** giving the results of the scan.
Get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. UPDATE and run this
regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this
cycle
until you get a clean scan. The reason is that it may have to
remove
things which are currently "in use" before it can then clean up
others.
Another excellent program for this purpose is SpyBot Search and
Destroy
available here: http://security.kolla.de/ SpyBot Support Forum
here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I
recommend
using both normally. After UPDATING and fixing things with
S&D, beuntilsure to re-boot and rerun SpyBot again and repeat this cycle
you gethttp://www.majorgeeks.com/downloadget.php?id=3155&file=3&evp=3304750663b552982a8baee6434cfc13a
clean "no red" scan. The reason is that SpyBot sometimes has to
remove
things which are currently "in use" before it can then clean up
others.
Note that sometimes you need to make a judgement call about what
these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm
Both of these programs should normally be UPDATED and run after doing any
other fix such as CWShredder and, as a minimum, normally at least once a
week.
If they don't fix it then start here:
Download HijackThis, free, here:
http://209.133.47.200/~merijn/files/HijackThis.exe (Always download a new
fresh copy of HijackThis [and CWShredder also] - It's UPDATED
frequently.)
You may also get it here if that link is blocked:http://www.net-integration.net/cgi-...86d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949In Windows Explorer, click on Tools|Folder Options|View and check
"Show
hidden files and folders" and uncheck "Hide protected operating
system
files". (You may want to restore these when you're all finished with
HijackThis.)
Unzip the downloaded HijackThis to any convenient folder, start it
then
press Scan. Click on SaveLog when it's finished which will create
hijackthis.log. Now click the Config button, then Misc Tools and click on
Generate StartupList.log which will create Startuplist.txt
Then go to one of the following forums:
Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/
or Net-Integration here:Optionsor Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the
removal
of your parasite(s).
*******
ONLY IF you've successfully eliminated the malware, you can now make a new,
clean Restore Point and delete any previously saved (possibly
infected)
ones. The following suggested approach is courtesy of Gary Woodruff: For
XP
you can run a Disk Cleanup cycle and then look in the More
tab. Thehttp://www.microsoft.com/downloads/release.asp?ReleaseID=35468System Restore option removes all but the latest Restore Point. If
there
hasn't been one made since the system was cleaned you should manually
create
one before dumping the old possibly infected ones.
*******
Once you get this cleaned up, you might want to consider installing
the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing
from
happening in the future:
http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware
Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU
or
memory load - but keep it UPDATED) The latest version as of this
writing
will prevent installation or prevent the malware from running if it
is
already installed, and it provides information and fixit-links for a
variety
of parasites.
http://www.javacoolsoftware.com/spywareguard.html (Monitors for
attempts to
install malware) Keep it UPDATED. Both Very Highly Recommended
Finally, go to Windows Update and ensure that ALL Critical updates
are
installed.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
About IE says, IE 6.0.2600.xpcInt-qfe.021108-2107. Update Version
Q37009,
Q32894. I've nerver specifically installed XP SP1. I've been
assuming I'm
at
SP1 level just because of all the Hot fixes in the Add/Remove Programs
list that
refer to SP1. All updates I've installed are from the Auto Update
functionality
of XP. I belive I installed all that have been sent.
Hi Moe - I'm more than a little confused about what you have
installed and
what you've done. Do you have Win XP HE, SP1 installed w/ ALL
current
updates from Windows Update? A number of the Q's you cite are
installed as
part of Windows XP SP1. Do you have IE6 SP1 installed? (In IE6
click on
Help|About Internet Explorer and note what it says next to Update
Versions:
It should be something like ;SP1; Q832894; Q330994; Q831167 if SP1
and the latest "rollups" are installed.)
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In xumoe <[email protected]> typed:
Jim, I downloaded and ran qfecheck. It listed seveal hotfixes that
"should be
reinstalled, such as, Q308677, Q312370, Q312484, Q314147, and
others.
How do I
get them and apply them? When I check the MS Download Site, my
search
yields no
results.
FYI. I'm on XP Home Edition 5.1.2600 from Gateway. To fix my
original IE
problem, I reinstalled XP from the 2 year old System Disk and
applied
all MS
updates that I was notified about. IE 6.0 continues to fail. I've run
spybot.
I have maintained Norton AV for over 2 years, MS Automatic
Updates. I
connect to 2 VPN's without problems. Is it possible the
"explorer"
program is
not
corrupt,
that I just have some settings wrong? When I use Netscape
Navigator,
everything
seems to work fine. The articles I referred to prompting me to
reinstall XP
are
MSKN 318378, 315341. The one thing that was good about the
reinstall is it
fixed
my corrupted WMI. I threw all this in, just in case you know of
users
with
similar problems. Is it reasonable for me to try to install stall XP
from an
OEM
system disk that comes with a laptop I just purchased for my son?
Hi PLC - There is no direct Repair function for IE6 in XP. Here are
some
alternatives:
1. With XP you need to go to Start|Run and type "sfc /scannow"
(without the
quotes and notice the space between the c and the /.) Have your XP CD
handy
and be prepared to go get a cup of coffee - it takes a while. This
will do
the same thing as Repair IE6 for XP but a lot more, that is find any
corrupt
system files and replace them. It does not, however, re-register the
various software components (except possibly the ones it replaces?)
AFAIK.
Be aware that under certain circumstances (Win2k before SP4 - see
mskb 814510,
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q814510) sfc
can erroneously overwrite (restore over) previously installed files
from
certain "hotfixes" which will then need to be re-installed. To
check for
this, after running sfc, open a Cmd window and enter "qfecheck /v
/l:c:\" (without the quotes). If you don't have qfecheck installed,
it can be
obtained for XP here:
and fornotWin2k, obtain qfecheck here:
http://www.microsoft.com/downloads/release.asp?ReleaseID=35470
2. Another alternative that works on Win2k and may or may
work onmightXP (but probably does - I've heard both stories), for just IE6
repair if you
don't have IE6 listed in Add-Remove Programs, then in Start|Run
then
enter
"rundll32 setupwbv.dll,IE6Maintenance"
without the quotes, exactly as shown, and select the appropriate
entry.
3. If you find that you need to do a re-install of IE6 then you can
consider the following, I can't verify this for XP (I'm
Win2k - it
works
there, and I've had good reports from XP users), but you
want togive
it a try at your own risk. Again, enter this at Start|Run without the
quotes and be careful about the spacing:
"rundll32.exe setupapi,InstallHinfSection DefaultInstall 132
C:\windows\inf\ie.inf"
4. Lastly, here is a link to a MSKB article about re-installing
IE6/OE6:
How to Reinstall or Repair Internet Explorer and Outlook Express in
Windows
XP (Q318378)
http://support.microsoft.com/?id=kb;en-us;Q318378
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In plc <[email protected]> typed:
How do I repair IE 6.0 when it's not listed in the
add/remove programs in control panel? OS WinXP.
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.