IE8,FIREFOX & SAFARI closes suddenly when clicked.

Status
Not open for further replies.
D

dasher1234582

Broken In
Hai,

Whenever i try to open any browser(be it ie8,firefox & safari), it opens and then closes suddenly.
Earlier, i had internet explorer 6 and encountered the same problem.

Suspecting an earlier incomplete installation of ie8, i installed ie8 but

encountered the same

problem again.I reset all settings but of no use . i had my autoupdate feature

turned on.
Current System config:- Win XP SP2 , ie8,firefox, safari no anti virus.
 
krishnandu.sarkar

krishnandu.sarkar

Simply a DIGITian
Staff member
What do you mean by closing automatically?? Are they crashing??? In that case test your RAM's with Memtest86+. As you are saying that you use internet with no antivirus, I would suspect a infection in this case. Scan your full PC with any good updated AV. I recommend AVG and Avast for free versions and KIS for paid ones.
 
OP
D

dasher1234582

Broken In
Yes . They are crashing . just 3 seconds after opening. Sometimes , firefox don't even open at all . I tried MBAM (latest ver. ) but of no good use . MBAM found only 1 malware---''rogue.netcom3'' and quarantined it and later removed from system . So, i don't think it is malware of any type . It is a problem with browsers , i suppose.
 
sude

sude

Tech'ing life seriously!!
hmmm ... seems to be a viral infection.
can you post a HijackThis report here.. It may be helpful.

//SUDE
 
OP
D

dasher1234582

Broken In
The following is the TM Hijack this logfile:-

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:04:12 AM, on 3/11/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
c:\progra~1\escan\EconSer.exe
c:\progra~1\escan\eConceal.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROW~1\eScanBD\avpmapp.exe
C:\PROGRA~1\eScan\TRAYSSER.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Common Files\MicroWorld\Agent\MWASER.EXE
C:\PROGRA~1\eScan\consctl.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\MicroWorld\Agent\MWAgent.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\PROGRA~1\eScan\TRAYICOS.EXE
C:\PROGRA~1\eScan\LAUNCH.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TypingMaster\KBOOST.EXE
C:\Program Files\SRS Labs\WOW HD for ViewSonic\SRSViewSonic_Win32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\eScan\Vista\eScanMon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [eScan Updater] C:\PROGRA~1\eScan\TRAYICOS.EXE /App
O4 - HKLM\..\Run: [MailScan Dispatcher] "C:\PROGRA~1\eScan\LAUNCH.EXE" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RRT-Auto] C:\Documents and Settings\san123\Desktop\RRT\RRT.exe auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TypingSatellite] "C:\Program Files\TypingMaster\KBOOST.EXE"
O4 - HKCU\..\Run: [SRS WOW HD for ViewSonic] "C:\Program Files\SRS Labs\WOW HD for ViewSonic\SRSViewSonic_Win32.exe" /hideme
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PersSecurity] C:\Program Files\PersSecurity\psecurity.exe
O4 - HKCU\..\Run: [TOY5KNQ8OC] C:\DOCUME~1\san123\LOCALS~1\Temp\Omd.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "D:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - *download.bitdefender.com/resources/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{11805620-A7C6-44ED-9D40-6E34D64DC8BC}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS1\Services\Tcpip\..\{11805620-A7C6-44ED-9D40-6E34D64DC8BC}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS2\Services\Tcpip\..\{11805620-A7C6-44ED-9D40-6E34D64DC8BC}: NameServer = 208.67.222.222,208.67.220.220
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: eSLogOn - C:\WINDOWS\SYSTEM32\eSLogOn.dll
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: eConServ (EconService) - MicroWorld Technologies Inc. - c:\progra~1\escan\EconSer.exe
O23 - Service: eScan Monitor Service - MicroWorld Technologies Inc. - C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROW~1\eScanBD\avpmapp.exe
O23 - Service: eScan Server-Updater (eScan-trayicos) - MicroWorld Technologies Inc. - C:\PROGRA~1\eScan\TRAYSSER.EXE
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\Program Files\Common Files\MicroWorld\Agent\MWASER.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 6679 bytes
 
skeletor

skeletor

Chosen of the Omnissiah
O4 - HKCU\..\Run: [PersSecurity] C:\Program Files\PersSecurity\psecurity.exe
O4 - HKCU\..\Run: [TOY5KNQ8OC] C:\DOCUME~1\san123\LOCALS~1\Temp\Omd.exe

These might be the problem causers. Just simply install Avira and have a scan. :| *www.free-av.de/en/trialpay_download/1/avira_antivir_personal__free_antivirus.html
 
S

sakumar79

Technomancer
In addition to what Ico pointed out, I think the following also need to be checked...

O4 - HKLM\..\Run: [RRT-Auto] C:\Documents and Settings\san123\Desktop\RRT\RRT.exe auto
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: eSLogOn - C:\WINDOWS\SYSTEM32\eSLogOn.dll

Arun
 
CA50

CA50

Cyborg Agent
Your system is surely infected with virus. just download a good AV and give a through scan. I personally suggest Avast.
 
OP
D

dasher1234582

Broken In
I tried to repair it by using windows recovery console.(by iserting a winXP SP2 cd during boot up) but it asks for administrative password. I haven't set it yet. how can i find out my administrative password?
And why is thinkdigit.com loading so slow?
 
Last edited:
skeletor

skeletor

Chosen of the Omnissiah
If you haven't set any password for the Administrator account, then simply press Enter.

But seriously, a clean Format + Reinstall is the best solution for a Windows based PC.
 
OP
D

dasher1234582

Broken In
I can't enter bcuse when i try, it says password is incorrect;while i haven't typed any.what can i do?I tried using XP sp2 serial key but of no use.
 
sude

sude

Tech'ing life seriously!!
No antivirus in this wild and greedy-for-info world would cost you a lot!
Hope you do not perform online banking operations on ur sys.

Nevertheless I can clearly see entries from "escan" in the log. Now escan is an antivirus. Are you sure there's no antivirus on your system??
 
OP
D

dasher1234582

Broken In
:smile::smile::smile::smile::smile::smile::smile::smile::smile:
sude said:
No antivirus in this wild and greedy-for-info world would cost you a lot!
Hope you do not perform online banking operations on ur sys.

Nevertheless I can clearly see entries from "escan" in the log. Now escan is an antivirus. Are you sure there's no antivirus on your system??
Click to expand...

dear SUDE,
it was only a shareware version of escan .i had n't uninstaLLED IT though it wont work , in the hope of getting a password but of no avail .I put winXP cd and did"sfc / scannow", (with theCD page in the background---w/o which it won't work) and the problem got solved somehow.Thanx for ur help. i installed ie 8 later and am going to load NOD 32 antivirus.:smile::smile::smile::smile::smile::smile::smile::smile:
 
Status
Not open for further replies.
Top Bottom