Member Avatar for Micometer

Whichever browser I have installed (set as my preferred browser) will open a browser window without user input (and one is not open), will reset to the home page if a browser is open, and open another tab or window at random. There are no pop ups, no specific sites searched for, just going straight to the home page.

This seems to happen randomly; directly after startup, after hours of use, after opening the browser, during program use, when no program is in use. Its maddening.

The results of the hijackthis scan I ran are captured in the two screenshots below, the active processes in the two below that. Before asking for the logfile from Hijackthis, trust me I tried. For some reason the only logfile that got compiled by hijackthis was empty each time (a fix for that would be good, too). However, I will try to give all relevant data and if I leave something out please ask; I will update as needed. Also, I know the quality of these links kinda sucks; I can provide better quality images either through direcy message or if there is a [ img] function on the page.

Platform: Windows 7 64-bit Home Premium Edition

Result of Hijackthis scans:

http://i20.photobucket.com/albums/b204/Latus/Hijackthis2_zps8e671d5b.jpg

Running Processes:
http://i20.photobucket.com/albums/b204/Latus/Hijackthis3_zps17d25b84.jpg
http://i20.photobucket.com/albums/b204/Latus/Hijackthis4_zps907fc5bb.jpg

I am at my wits end. I hope that you folks will be able to help me out and maybe squash this bug (if it is) and help clear up this problem.

Edited by Micometer
  • 2 Contributors
  • 4 Replies
  • 316 Views
  • 3 Days Discussion Span
  • Latest Post Latest Post by Micometer

Dani AI

Generated

A short expert note tied to the thread so far: has the classic symptom of a background process or scheduled action launching the default browser. After the anti-malware step suggested by (scan completed), the next useful artifact for volunteers is a complete list of installed programs (including 32-bit and per-user installs) rather than screenshots. Below are reliable, non-manual ways to produce that list and a few immediate follow-ups to look for.

Quick (easy) method — from an elevated Command Prompt:

wmic product get name,version > "%USERPROFILE%\Desktop\installed_programs.txt"

Note: WMIC lists MSI-installed products only. Many apps (portable, non-MSI installers) will be missing.

More complete method — PowerShell (captures 64-bit, 32-bit and per-user registry uninstall entries). Run PowerShell as Administrator and paste this:

$keys = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*',
        'HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*',
        'HKCU:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*'
Get-ItemProperty -Path $keys |
  Where-Object { $_.DisplayName } |
  Select-Object DisplayName,DisplayVersion,Publisher |
  Sort-Object DisplayName |
  Export-Csv -Path "$env:USERPROFILE\Desktop\installed_programs.csv" -NoTypeInformation

CSV is easy to open in Excel; a plain text file can be produced with Out-File or Format-Table if required.

Useful next checks (common causes): scheduled tasks that launch a browser, startup/update/monitoring utilities (auto-updaters), browser extensions or helper objects, remote-control software, and third-party shell/context handlers. Tools to inspect these: Task Scheduler, Autoruns (Sysinternals), browser safe-mode/extensions-disabled testing, and a clean-boot (selective startup) to isolate third-party services. If HijackThis produced empty logs, try running it elevated and saving to Desktop, or use an alternate diagnostic collector (for example FRST) to produce analyzable logs. Exported program lists and Autoruns/Task Scheduler snapshots are the most helpful artifacts for troubleshooting this symptom.

Recommended Answers

All 4 Replies

Member Avatar for Micometer

The log, as requested.

--------------------------

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Database version: v2013.03.20.12

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16521
Latus :: DATAPAD [administrator]

3/21/2013 12:02:52 AM
mbam-log-2013-03-21 (00-02-52).txt

Scan type: Full scan (C:\|D:\|F:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 331605
Time elapsed: 43 minute(s), 43 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Member Avatar for Rik_

No nasties showing up there. Could you provide a list of your installed programs? I have a feeling there might be something there that is responsible for your problems.

Member Avatar for Micometer

How can I populate a text file list without manually copying every one, version and all?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.