[yoyofan]

When I click internet explorer, it says that it is loading a site followed by a number: EX. 164.109.145.90.

It loads a long while, and then, gives me the This Page Cannot Be Displayed error

Plz, help me with this problem!

 

[Pancake]

Get "Hijack This" and post the log here.Looks like you have been hijacked. http://www.majorgeeks.com/download3155.html

 

[yoyofan]

This is what the hacker thing said

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\NoAds\NoAds.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\wmconnecta\wmtray.exe
C:\Program Files\wmconnecta\wwm.exe
C:\WINDOWS\System32\PackethSvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\JT\Local Settings\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emachines.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.emachines.com
N2 - Netscape 6: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%206%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\JT\Application Data\Mozilla\Profiles\default\61s14z5s.slt\prefs.js)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\System32\LXSUPMON.EXE RUN
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [NoAds] "C:\Program Files\NoAds\NoAds.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: Wal-Mart Connect Tray Icon.lnk = C:\Program Files\wmconnecta\wmtray.exe
O9 - Extra button: ICQ (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: MoneySide (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{313E640C-925D-4099-9932-126F6F02AA11}: NameServer = 205.188.146.146

 

[Pancake]

Run it again and delete these items and see if that improves things.

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emachines.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.emachines.com

O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

O9 - Extra button: Real.com (HKLM)

O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com

O17 - HKLM\System\CCS\Services\Tcpip\..\{313E640C-925D-4099-9932-126F6F02AA11}: NameServer = 205.188.146.146

 

[yoyofan]

Well, the good news is that is doesn't do that problem anymore.

But now it just goes blank when i click on it. When I typed in a web adress is loaded different things but still remained blank. Then an error message came up saying that Internet Explorer couldn't open that web page.

I tried another web page, but that didn't even start to load. It just said done and remained blank.

 

[Pancake]

Ok we need to repair IE. You will need your disc handy,
Click [Start] [Run] and type sfc /scannow in the [Open] box.
(Note that there is a space between sfc and /scannow

 

[yoyofan]

which disc are you talking about?

 

[Pancake]

Your installation disc

 

[yoyofan]

I don't have an internet explorer installation disc. It came with my computer. Or are you talking about the restore disc?

 

[Pancake]

If the scan fails to fix it.....
Do you have IE listed in Add Remove.If you do, remove it.It will then ask you if you want to remove or repair it.Choose repair

 

[Pancake]

It will be on your restore disc

 

[yoyofan]

The scan failed. I have windows xp and It places IE under add/delete components. I am a little nervous about messing with this thing. Is there another way, like to reinstall it that will accomplish the same thing, or do you have windows xp and know how to work the add/delete components thing.

 

[Pancake]

There is one option that I have saved to last and that is to choose option 2 on this site http://www.theeldergeek.com/repair_reinstall_ie_and_oe_6.htm and do the repair but it will means getting IE6,which you can do from this same site.
The other option,which can be done, is to run HJT again and reinstall the deleted option one at a time to find out which one was causing the prob.

 

[Pancake]

Go ahead with the add remove option.It should ask to if you want to repair it when you go to remove it.I do have XP

 

[yoyofan]

I downloaded the sevice pack. I am starting to think IE was never installed properly. Is there a certain thing, that IE needs to run? like a certain ISPs, or a certain conection paths like LAN, Modem, etc.

The ISP that i use is walmart connect. would that mess it up?

 

[Pancake]

No,that wont upset it.The service pack does change some security things on IE. You could allways do a system restore back to a few days ago to check.

 

[yoyofan]

Then do you have any idea why It still won't work even after I did all that stuff?

Ill tell you what i remember happening right before it messed up.

I remember going to my history and my cookies and deleting everything in there. Then things started to mess up with java and games that use java. Then when i wanted to go on internet explorer It started the number thing. Then i tried to fix it all the time but with no luck. I even restored my computer alot.

Can you get anything from that?

 

[Pancake]

Removing the cookies would not have done it.

 

[yoyofan]

Could it be java then? Do i need a java applet to use Internet Explorer? If so how do i get it b/c i don't have java applets anymore.