How to repair IE6

[Reima]

Today when I started IE6 it just tries to bring website and then it can not
be shut down.
The taskbar is the same, frozen. So I must warm or cold boot.
I have run sfc /scannow and rebooted.
Right now it says "Opening Yahoo" I have 5 green dots on the progress bar
and a blank page.
The only program I have added is Kaspersky's new Ver.6 antivirus and IE
worked after it was installed couple of days ago.

So how can I repair it?

 

[May]

It seems to work if I log on with my wife's name.
Will restoring to yesterday work??
Regards,
Reima

 

[boburke]

You probably got jacked. Download and install HiJackThis
http://www.merijn.org/

Or you could always try downloading the IE6 setupfile from MS.

I would advise to avoid restore whenever possible, just my opinion.

 

[Reima]

OK done that, only No.017 that seems old ISP.
It seems that after a reboot, I can get to one website, then I have to
reboot again, that is how I got the HijackThis, then nothing works, can not
open OE even, I then rebooted and went to Windows update site (there were on
critical updates). Then I tried to go to another website and nothing, new
reboot works so I can read my mail, long as I do not click on the IE icon.

Anybody????
Regards,
Reima

Here is the log.
Logfile of HijackThis v1.99.1
Scan saved at 18:04:38, on 11/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
D:\utility\BILLPS~1\WINPAT~1\winpatrol.exe
C:\Program Files\FarStone\VirtualDrive\VDP\vdtask.exe
D:\Utility\LineSpeed\LineSpeedMeter.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ABIT\ABIT vGuru\OCGuru\OCGuru.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
D:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\SAFEPLUS\MONITOR.EXE
D:\Program Files\Ghost\GhostStartService.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\SAFEPLUS\UPSCOMM.EXE
C:\Program Files\SAFEPLUS\SNMPAGNT.EXE
C:\Program Files\SAFEPLUS\SNMPMGR.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\system32\UPSSRV.EXE
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Updates\SPYWARE TOOLS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://www.kaspersky.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = or "The
Great Library"
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
D:\Utility\SPYWAR~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EpsonToolBandKicker Class -
{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON
Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} -
C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone
Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program
Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [WinPatrol] D:\utility\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [VirtualDrive] C:\Program
Files\FarStone\VirtualDrive\VDP\vdtask.exe /AutoRestore
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [Line Speed Meter V3.0]
D:\Utility\LineSpeed\LineSpeedMeter.exe -minimized
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI
Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [VGA OCGuru] "C:\Program Files\ABIT\ABIT
vGuru\OCGuru\OCGuru.exe" -M
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus
6.0\avp.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
/background
O4 - HKCU\..\Run: [Skype] "D:\Program Files\Skype\Phone\Skype.exe" /nosplash
/minimized
O4 - Startup: Shortcut to MONITOR.lnk = C:\Program
Files\SAFEPLUS\MONITOR.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} -
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O16 - DPF: HushEncryptionEngine -
https://mailserver2.hushmail.com/shared/HushEncryptionEngine.cab
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) -
http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) -
http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {54823A9D-6BAE-11D5-B519-0050BA2413EB} (ChkDVDCtl Class) -
http://www.gocyberlink.com/english/cyberstore/audiopack/xp_audio/ChkDVD.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1120912035344
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
(MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C4847596-972C-11D0-9567-00A0C9273C2A} (Crystal Report Viewer
Control) -
https://www.navigator.com.au/viewer/activeXViewer/activexviewer.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services
Client v.3.10) - http://advisor.futuremark.com/global/msc310.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList =
qld.veridas.net
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList =
qld.veridas.net
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList =
qld.veridas.net
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program
Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: GhostStartService - Symantec Corporation - D:\Program
Files\Ghost\GhostStartService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program
Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program
Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program
Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) -
Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: OPTI-SAFE+ (UPS-Pro) - Unknown owner -
C:\WINDOWS\system32\UPSSRV.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. -
C:\WINDOWS\system32\ZONELABS\vsmon.exe

 

[Reima]

OK, this is how it went, I clicked on one of my web shortcuts on my desktop,
after I been on my home page. It should have frozen my machine but it did
not, instead it opened up, then I went to another link from there and it
also opened, so I closed IE6 and opened it from it's own icon and lo and
behold it works. Go figure???
Here I have done just about everything, (even logged in like a new user, but
after a while that did not work,) save reloaded WindowsXP and by using a
shortcut on my desktop to a web site it started to work. Now I am x-sing my
fingers.

Regards,
Reima.