MICROSOFT SUPPORT STAFF READ THIS

  • Thread starter Thread starter jk
  • Start date Start date
J

jk

It has been days now...
my browser still freezes and crashes whenever I try to
loadMicrosoft.com. If i click anywhere on the page I get
an hourglass cursor then a non responsive error.
Help!
 
AdAware & Spybot S&D both say my computer is ok.
- is there some spyware that specifically targets only www.microsoft.com?
-- and not any sub-sites?
-- and loads the page, then locks up IE?
 
Hanging application iexplore.exe, version 6.0.2900.2180, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Fault bucket 126637809.

Some things fixed it only ONCE
ONCE I was OK in safe mode, but not a 2nd time in safe mode
ONCE it was OK after running sfc /scannow, but no longer
 
see my previous unrequitted posts. this aint no spyware
problem. four anti-spyware progs have said so.

reinstall ie_sp1 after editing the registry. then patch
with Q818506 followed by roll-up Q871260. if this still
doesnt cure the hourglass syndrome, you have two choices
left. install xp_service pack 2 OR install mozilla 0.93.
take your pick.
 
What kind of answer is this???
By the way...SP2 does not fix the problem.
-----Original Message-----
see my previous unrequitted posts. this aint no spyware
problem. four anti-spyware progs have said so.

reinstall ie_sp1 after editing the registry. then patch
with Q818506 followed by roll-up Q871260. if this still
doesnt cure the hourglass syndrome, you have two choices
left. install xp_service pack 2 OR install mozilla 0.93.
take your pick.
6.0.2900.2180,
hang module only
www.microsoft.com?
Click to expand...
I
 
Your previous posts did not involve WinXP SP2, Peter.

You can only rule out hijackers or Trojans as a cause if, and only if, you
can complete all of the following, as described and in order, *and* get an
All Clear for your HijackThis logs from one or more of the pros in a
HT-specific forum. If you can do so, *then* you can start throwin' stuff at
MS.

Dealing with Trojans & Hijackware

A. Trojans

1. Check in at Windows Update and install all critical updates & reboot.

2. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

3. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow *all* Removal steps, including editing the Registry if directed.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then:

Disk Cleanup > More options > Delete all but the most recent Restore
Point.

B. Hijackware

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder v1.59.1 (no updates available currently; fix all found)

2. Ad-Aware SE (reconfigure per Post #2 in
http://aumha.org/forum/viewtopic.php?t=5877; fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You must seek updates for Ad-Aware, Spybot, etc., before each and
every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://forum.aumha.org/downloads/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any hijackware/spyware.
**Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

PS: Have you any idea how many people have posted to the newsgroups with the
generic subject "Internet Explorer Not Responding"? See
http://snipurl.com/8y2s.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Are You Ready for WinXP SP2?
http://www.microsoft.com/athome/security/protect/default.aspx

WinXP SP2 Release Notes
http://support.microsoft.com/default.aspx?scid=kb;en-us;835935

AumHa Forums
http://forum.aumha.org
 
thanks for responding PA Bear. I just noticed something
that might give you a clue as to what was causing the
hourglass syndrome. The 'freezing' is NOT one that is
absolutely fatal. After about three minutes, IE resurrects
itself and starts responding normally. (I had previously
been too quick to end the process by way of task manager,
thinking it was an irrecoverable error.) Now, I always
keep task manager in the foreground. Whenever the
hourglass syndrome appears and IE freezes momentarily,
task manager shows TWO identical processes that are 'not
responding'. For example, if one instance of IE is not
responding whilst attempting to connect to www.google.com,
task manager will show TWO identical connections to
www.google.com that are both 'not responding'.
Subsequently, when IE comes back alive, task manager will
automatically show ONE instance of www.google.com that
is 'running'. Any clues PA Bear. thanks.
-----Original Message-----
Your previous posts did not involve WinXP SP2, Peter.

You can only rule out hijackers or Trojans as a cause if, and only if, you
can complete all of the following, as described and in order, *and* get an
All Clear for your HijackThis logs from one or more of the pros in a
HT-specific forum. If you can do so, *then* you can start throwin' stuff at
MS.

Dealing with Trojans & Hijackware

A. Trojans

1. Check in at Windows Update and install all critical updates & reboot.

2. Download and run Stinger
Click to expand...
(http://vil.nai.com/vil/stinger/); then...
3. Update your virus definitions, enable Show Hidden Files
Click to expand...
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2
002092715262339)
and then run a full system scan in Safe Mode
Click to expand...
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2
001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/ad ware.winfavorites.html)
and follow *all* Removal steps, including editing the Registry if directed.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then:

Disk Cleanup > More options > Delete all but the most recent Restore
Point.

B. Hijackware

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder v1.59.1 (no updates available currently; fix all found)

2. Ad-Aware SE (reconfigure per Post #2 in
http://aumha.org/forum/viewtopic.php?t=5877; fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You must seek updates for Ad-Aware, Spybot, etc., before each and
every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://forum.aumha.org/downloads/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any hijackware/spyware.
**Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

PS: Have you any idea how many people have posted to the newsgroups with the
generic subject "Internet Explorer Not Responding"? See
http://snipurl.com/8y2s.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Are You Ready for WinXP SP2?
http://www.microsoft.com/athome/security/protect/default.a spx

WinXP SP2 Release Notes
http://support.microsoft.com/default.aspx?scid=kb;en- us;835935

AumHa Forums
http://forum.aumha.org

peter said:
see my previous unrequitted posts. this aint no spyware
problem. four anti-spyware progs have said so.

reinstall ie_sp1 after editing the registry. then patch
with Q818506 followed by roll-up Q871260. if this still
doesnt cure the hourglass syndrome, you have two choices
left. install xp_service pack 2 OR install mozilla 0.93.
take your pick.

http://www.microsoft.com/windowsxp/using/security/expert/ho
neycutt_spyware.mspx
Click to expand...

.
Click to expand...
 
thanks for responding PA Bear. I just noticed something
that might give you a clue as to what was causing the
hourglass syndrome. The 'freezing' is NOT one that is
absolutely fatal. After about three minutes, IE resurrects
itself and starts responding normally. (I had previously
been too quick to end the process by way of task manager,
thinking it was an irrecoverable error.) Now, I always
keep task manager in the foreground. Whenever the
hourglass syndrome appears and IE freezes momentarily,
task manager shows TWO identical application tasks that
are 'not responding'. For example, if one instance of IE
is frozen whilst attempting to connect to www.google.com,
task manager will show TWO identical application tasks
connecting to www.google.com that are both 'not
responding'. Subsequently, when IE comes to itself and
does successfully connect to google, task manager will
automatically show ONE application task for www.google.com
that is 'running'. Any clues PA Bear. thanks.
 
i am sorry, john, for the mozilla answer that you found
offensive. it was uttered in utter frustation emanating
from hours and hours of fruitless troublshooting. i still
dont have the answers. i do, however, hv a clue which i
posted to PA Bear. can u shed some light on this?
 
peter gant said:
see my previous unrequitted posts. this aint no spyware
problem. four anti-spyware progs have said so.
Click to expand...

Do any of them warn you of potential undesirable effects from
common toolbars such as the ones from Google and Yahoo!?

Malware isn't due just to maliciousness; sometimes it's just
otherwise benign ideas which take sometimes bizarre turns
due to bad programming. For example, I think that many of
the undesirable effects caused by searchbar hijackers are
very much not deliberate.


IMO

Robert Aldwinckle
---
 
<QP>
thanks for responding PA Bear. I just noticed something
that might give you a clue as to what was causing the
hourglass syndrome. The 'freezing' is NOT one that is
absolutely fatal. After about three minutes, IE resurrects
itself and starts responding normally. (I had previously
been too quick to end the process by way of task manager,
thinking it was an irrecoverable error.) Now, I always
keep task manager in the foreground. Whenever the
hourglass syndrome appears and IE freezes momentarily,
task manager shows TWO identical processes that are 'not
responding'.
</QP>

That sounds like adware. E.g. a popup. In XPsp2 you can get
a beep when they are allowed or you can suppress them.
If the site it is trying to find is down or too busy it could be slow
finding that out.

BTW which tab are you looking at to know it is two processes?
If you're seeing "Not responding" you would be looking at the
Applications tab where you would only be aware of tasks.
The Processes tab would show you whether or not there were
really more than one iexplore.exe PID.

What you might do is find out where the request is going.
One rough possibility would be to keep netstat running in a loop

netstat -anosp tcp 5

(Press Ctrl-c to end the loop.)

A more reliable monitor would require more effort on your part
both setting it up and analysing the captured data.

If nothing better you could try the NTx Port Reporter tool

<title>KB837243 - Availability and description of the Port Reporter tool</title>


Good luck

Robert Aldwinckle
---


<QP>
responding whilst attempting to connect to www.google.com,
task manager will show TWO identical connections to
www.google.com that are both 'not responding'.
Subsequently, when IE comes back alive, task manager will
automatically show ONE instance of www.google.com that
is 'running'. Any clues PA Bear. thanks.
</QP>

....
 
thanks robert for the reply, i was looking at the
applications tab. i should not have used the
term 'process'.
 
Back
Top