Internet Explore seems to be corrupt

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Having picked up the Raze malware (a variant of the SpyAxe) I have spent
hours with tech support getting this monster off the computer. All is well
now after running about a dozen scans but IE6 seems to be crippled. I can go
almost everywhere but cannot connect to a hyperlink? on one site ( a link
that usually opens on the same web page but takes me to a blank page now and
another , a survey site allows me to connect but when I try to take the
survey informs me that I must have IE6 to continue. (I do have IE 6). The
first site works fine with Firebox but the second doesn't open on either
page. Microsoft was due to follow up but has not so I am asking for help
here. I have cleaned history, cache and anything else mentioned in the
articles but still have the problem. Help would be appreciated for sure.
 
Download and run HijackThis;
(http://aumha.org/downloads/hijackthis.zip)
Read this Tutorial *before* first use;
(http://www.bleepingcomputer.com/forums/index.php?showtutorial=42)
Once done > run HijackThis > save a scan log and post it to /any/ of the
following (expert) forums for analysis.
*Note, registration is required prior to posting a log.
- Not listed in any particular order -
(http://aumha.net/viewforum.php?f=30)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://www.dslreports.com/forum/security)
(http://castlecops.com/forum67.html)
(http://www.cybertechhelp.com/forums/forumdisplay.php?f=25)
(http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html)
(http://gladiator-antivirus.com/forum/index.php?showforum=170)
(http://forum.iamnotageek.com/f-130.html)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://www.spywarewarrior.com/viewforum.php?f=5)
(http://forums.spywareinfo.com/index.php?showforum=18)
(http://forums.techguy.org/f54-s.html)
(http://forums.tomcoyote.org/index.php?showforum=27)
(http://forums.subratam.org/index.php?showforum=7)
(http://www.5starsupport.com/ipboard/index.php?showforum=18)

Post back the URL where you have posted your log, *not* the entire log.

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.
 
jprhedd said:
Having picked up the Raze malware (a variant of the SpyAxe) I have spent
hours with tech support getting this monster off the computer. All is well
now after running about a dozen scans but IE6 seems to be crippled. I can go
almost everywhere but cannot connect to a hyperlink? on one site ( a link
that usually opens on the same web page but takes me to a blank page now and
another , a survey site allows me to connect but when I try to take the
survey informs me that I must have IE6 to continue. (I do have IE 6). The
first site works fine with Firebox but the second doesn't open on either
page. Microsoft was due to follow up but has not so I am asking for help
here. I have cleaned history, cache and anything else mentioned in the
articles but still have the problem. Help would be appreciated for sure.

Hello,

I am the author of Super Ad Blocker with SUPERAntiSpyware. It will
detect and remove SpyAxe/Raze in one pass:
http://www.superadblocker.com

Super Ad Blocker offers a fully functional 15-day trial. You can scan
and clean your computer and then remove Super Ad Blocker if you do not
wish to keep it.

You may wish to perform your scan in Safe Mode - we have a free tool
called BootSafe to make that process easier.
http://www.superadblocker.com/bootsafe.html

If this does not solve the problem, I can have you submit a diagnostic
report and will analyze your computer for free.

Nick Skrepetos
SuperAdBlocker.com - SUPERAntiSpyware
http://www.superadblocker.com
 
As requested I have posted the HiJack log on

http://castlecops.com/t145389-Help_with_IE6_nightmare.html

I forgot to mention that I had to uninstall Zone Alarm and thought I was
thorough but I see vsmon is still showing. I tried to reinstall it but
message is that Vector is being used by another program. Nothing appears in
file manager though. It's all a puzzle to me.

Thanks for responding. I believe Raze is gone but messed up some things
along the way. I might be missing some winapi.dll files also. That showed on
a registry program I ran..... Sigh.
 
jprhedd said:

<snip>

Thanks for posting back the URL, please monitor it's progress and post
findings back to this thread.
You are in good hands at Castle Cops, they are Security Pros bar-none.

Regards & good luck.

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.
 
Apart from these entries, I don't see much that may be untoward:
O15 - Trusted Zone: *.elitemediagroup.net
O15 - Trusted Zone: http://click.getmirar.com (HKLM)
O15 - Trusted Zone: http://click.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://awbeta.net-nucleus.com (HKLM)

Its not always malware.

Hyperlinks don't work:
http://inetexplorer.mvps.org/answers/48.html

Blank IE windows:
http://inetexplorer.mvps.org/answers/26.html

--
__________________________________________
Sandi - Microsoft MVP since 1999
http://www.ie-vista.com
http://inetexplorer.mvps.org

Inetexplorer has changed - for instructions on how to
find old URLs, go here:
http://msmvps.com/spywaresucks/archive/2005/05/14/46971.aspx
 
Back
Top