Hi,

I am new to this forum, but I am very happy that I found it! I am experiencing similar difficulties to other posts in this forum, in that Internet Explorer (version 6 SP1) will not open any links. I am running Windows XP Home Edition.

I have read responses to other posts and have run Ad-aware, Spybot S&D and Spy Sweeper, which revealed a huge number of spyware files/folders on my computer, that I have since gotten rid of. However, Internet Explorer still will not open new browsers to follow a link, or check my work email.

As suggested, I have run HijackThis and I have posted my log below. I would really appreciate an expert telling me what to delete, or if anyone could suggest any further steps that I could take to correct this problem.

Thanks in advance!!


Logfile of HijackThis v1.97.7
Scan saved at 9:07:48 PM, on 27/06/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\keyhook.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\SYMPAT~1\SMARTB~1\MotiveSB.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Spyware Software\Spy SweeperWebroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Sophos SWEEP for NT\ICMON.EXE
C:\Program Files\Sympatico\bin\mpbtn.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Sophos SWEEP for NT\SWNETSUP.EXE
C:\Program Files\Sophos SWEEP for NT\SWEEPSRV.SYS
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Spyware Software\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.sympatico.ca
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Sympatico
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://libproxy.mcmaster.ca/libprox.pac
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [OemReset] %systemroot%\OPTIONS\OEMRESET.EXE /AUDIT
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SYMPAT~1\SMARTB~1\MotiveSB.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Spyware Software\Spy SweeperWebroot\Spy Sweeper\SpySweeper.exe /0
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: InterCheck Monitor.LNK = C:\Program Files\Sophos SWEEP for NT\ICMON.EXE
O4 - Global Startup: NetAssistant.lnk = C:\Program Files\Sympatico\bin\matcli.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {05317530-B882-449D-9421-18D94FA3ED34} (OSInfo Control) - http://www.sis.com/support/chipdetect/OSInfo.cab
O16 - DPF: {16095503-786F-4097-AED6-5D567A26D760} (SiS_OCX Control) - http://www.sis.com/support/chipdetec...todetectNT.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeup...ntent/opuc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EB5F43A4-7374-4BF8-8117-BCA90D7E984C}: NameServer = 206.47.244.110 206.47.244.43

reinstall IE download any update (sp2 should be out by now or coming out soon in its beta versions it has A better IE). The usual ad-aware and spybot S&D scan. try zilla connection accelerator. I know some people dont like mozilla but switching is always an option.(LAST RESORT) System restore to a day or 2 before this problem occured then do a spyware scan and post your new hijackthis log.

Sorry i couldnt just read your log and tell you what to do but those things are ridiculous

Restoring back means you can also lose good stuff that you may need too! There is absolutely nothing ridiculous about scanning ones computer for nasties. Adaware & spybot invariably do not remove all that needs to go.
Or do I misunderstand??

i mean that i dont know how to look at someones hijackthis log and remove only things i just dont like looking at the logs but your right about adaware and spybot not getting everything

Cool ........