Nurmi said:
On opening Win XP 2SP IE6 I frequently get 40 and more empty pages of IE on
my screen.
It could have been an odd-ball anomaly... anything from an MS 'run-once' to
auto-updates from software, to mal- or spy-ware.... and less likely but not
impossible, an infection.
A msg. informs me:
"Navigation to the webpage was cancelled. What you can try: Retype your
address
I would think this was a result of Malware or Spyware, however there are
some known issues with Photobase. Let's have a look at both possibilities.
Make sure you have deleted any temporary internet files folders, deleted
cookies, and erased your History cache of sites visited... all done by a right-
click on thr IE program ICON (not a shortcut to the program) and selecting
"properties".... the first tab contains everything necessary to do this. (When
prompted with a check box window, also check this and delete 'local files').
Using Windows Explorer, navigate to: My Computer | local drive C: | Windows |
TEMP. Open the TEMP folder, select all, and delete the entire contents - reboot
as a precaution.
Photo Base Update Could not perform this operation because the
default mail client is not properly installed."
Do you have ArcSoft PhotoBase installed? It comes with some Canon
printers and scanners, and it has some known vulnerabilities. The mobile
version can attempt to open a browser window (looking for an IP) and other
software (such as Zone Alarm) can deny access causing repetitive attempts;
and the 'automatic update' could potentially do the same thing. You would be
surprised how much legitimate software is actually a type of spyware if you
allow automatic updates to run. If you have PhotoBase and don't use it (it
was installed as part of the default installation of your printer/scanner) you
can always remove it or shut down the auto-updating.
To me it makes no sense? I would like to stop this nuisance. Advise is
very much appreciated. Nurmi
I suggest downloading a very non-invasive malware removal tool called
LavaSoft "Ad Aware SE Personal." Don't get the newest version (2007)
from the Lavasoft site... find a copy of the previous version...
http://www.download.com/Ad-Aware-SE-Personal-Edition/3405-8022-5153545.html
Install and run a full system scan after updating the definitions. Quarantine
and remove all items found, then navigate to the quarantine tab, highlight and
delete the quarantined file.
When you've done that (regardless of on board anti-virus) open a browser
window (making sure everything looks normal) and visit the Symantec On
Line Security Check. Let Symantec put a small script in your PC, load
the virus definitions, and run a localized remote virus scan.
http://security.symantec.com/ssc/home.asp?langid=ie&venid=sym&plfid=20&pkj=FJQQLZVVFEQGQMYGCND
You may have to allow the script (information bar approval), and disable
on-board A/V to allow the scan to load and run.
I suspect that Ad Aware will find some registry entries to be auto-deleted.
Let me know how it goes.
