Start Page Problem with IE...

[Choto Cheeta]

well for past few days i am facing this problem...

when ever i open a new IE window via start menu, the IE autometicaly opens with this

*www.microsoft.com/isapi/redir.dll?Prd=ie&Pver=5.0&Ar=ie5update&O1=b1

address then redirects to the Microsoft update website...

i have made sure that the Start Page or Home page is asigned blank & the advence option "Autometicaly check for IE updates" is checked off... still no efect... KAV 5.0 & Spybot scan found nothing....

Logfile of HijackThis v1.99.1
Scan saved at 3:22:14 PM, on 9/26/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5112.0000)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\WINDOWS\system32\VTTimer.exe
D:\WINDOWS\system32\taskswitch.exe
D:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
D:\Program Files\iTunes\iTunesHelper.exe
D:\Program Files\Media Gateway\MediaGateway.exe
D:\Program Files\DU Meter\DUMeter.exe
D:\Program Files\iPod\bin\iPodService.exe
D:\PROGRA~1\DAP\DAP.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\WINDOWS\system32\NOTEPAD.EXE
D:\Program Files\Google\Google Talk\googletalk.exe
D:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
D:\WINDOWS\msagent\AgentSvr.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\WINDOWS\system32\notepad.exe
D:\Documents and Settings\Saurav\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 172.16.0.1:23
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - D:\PROGRA~1\DAP\dapbho.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [CoolSwitch] D:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [KAVPersonal50] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kav.exe" /minimize
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Media Gateway] D:\Program Files\Media Gateway\MediaGateway.exe
O4 - HKLM\..\Run: [HDInspector.exe] D:\Program Files\Hard Drive Inspector\HDInspector.exe
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "D:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DU Meter] D:\Program Files\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [DownloadAccelerator] D:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [googletalk] "D:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - Startup: Adobe Gamma.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - D:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google AdSense Preview Tool - *pagead2.googlesyndication.com/pagead/preview/en/preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - D:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Active Whois - {BAB9A4F4-C201-4fcf-A5D3-BA77BC9FBEB2} - D:\Program Files\Active Whois\ieshow.exe
O9 - Extra 'Tools' menuitem: Active Whois - {BAB9A4F4-C201-4fcf-A5D3-BA77BC9FBEB2} - D:\Program Files\Active Whois\ieshow.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - *www.anandabazar.com/wfplayer/tdserver.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - *go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - *update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122638175671
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - *update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1122638058171
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - *messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{319067FE-9036-469C-8227-239E3B5586E8}: NameServer = 172.16.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{E0F8B8CD-E8F5-4E32-8B95-6A6CCC810068}: NameServer = 61.0.0.5,61.1.96.69
O17 - HKLM\System\CS1\Services\Tcpip\..\{319067FE-9036-469C-8227-239E3B5586E8}: NameServer = 172.16.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{319067FE-9036-469C-8227-239E3B5586E8}: NameServer = 172.16.0.1
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "D:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: kavsvc - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe

pls help... as visiting the update page eats up lot of bandwidth....

 

[ishaan]

try disabling auto windows updates also

 

[Vishal Gupta]

Did u try to start Internet Explorer by nother shortcut?
try to run it directly by Start -> Run and type iexplore.
And check whether it again opens the same page or default blank page?

 

[mako_123]

I face the problem sometimes . But i dont think it is because of a spyware , it takes you there whenever there is an update available .

 

[ishaan]

does the problem continue even if instead of blank, u set some homepage ?

 

[QwertyManiac]

it appears sometimes but not always for me.
In windows 98 i used to experience this problem

 

[linardni]

hi qwerty...tum bhi paresan....aur koi hai is group mein naam likhane ke liye

 

[QwertyManiac]

me not troubled coz it occurs when a update is available for me

Now who will run away from updates

@saurav - is ur IE totally updated ?

 

[anandk]

set the home page to "about:blank" and LOCK it using spybot.
there is a provision to lock startpage, in it.

 

[Choto Cheeta]

try disabling auto windows updates also

this isnt a option... as auto updat is a nessesory thing... but still i tried that... but no result... as i think both r not related...

Did u try to start Internet Explorer by nother shortcut?
try to run it directly by Start -> Run and type iexplore.
And check whether it again opens the same page or default blank page?

yup i tried.. same result... the update page...

I face the problem sometimes . But i dont think it is because of a spyware , it takes you there whenever there is an update available .

me not troubled coz it occurs when a update is available for me

Now who will run away from updates

@saurav - is ur IE totally updated ?

but my windows XP or any MS product installed is up to date... also in the update page, there is no new update for me... see the sreenshoot after it took me to the update page....

*img183.imageshack.us/img183/4180/003zd.th.jpg

set the home page to "about:blank" and LOCK it using spybot.
there is a provision to lock startpage, in it.

as i wrote urlier that i did set my home page as blank... locked it with spybot.... but no efect... only to see that every time i lonch the IE window spybot pop up comes to tell me that it has blocked a attempt for changing some Reg entry...

does the problem continue even if instead of blank, u set some homepage ?

good question... i set up *www.yahoo.com/ as my home page... but still when i lonch IE.. it is takeing me to the update page... but now as home page is asigned so hitting Home button takes me to the seted home page... that is Yahoo...

any more suggetion...?? pls help...

& any one found any problem in my hijackthis log??

 

[Vishal Gupta]

Try one thing!

Try to disable Windows Genuine Advantage Validation Tool in plug-ins of ur IE 7.

 

[Choto Cheeta]

Try to disable Windows Genuine Advantage Validation Tool in plug-ins of ur IE 7.

Done.. then a system reboot... but unfortunetly no efect... only spybot is giving this messege...

*img252.imageshack.us/img252/7831/006jn.jpg

also what is the option of "Autometicaly check for Intenet Explorer Updates" does in the Internet Option , Advence TAB??

*img252.imageshack.us/img252/4373/012iv.th.jpg

whether its on or off... i tried both but i cant see any efect for both the options...

 

[Vishal Gupta]

Its for checking whether a newer version is available for IE or not.

Of no use in this context!

 

[ishaan]

dis time when the site loads, dload whatever updates it tell u to.

does it still happen after that?

 

[Choto Cheeta]

dis time when the site loads, dload whatever updates it tell u to.

what update?? check the sreenshot... there is not a single update for my system...

 

[ishaan]

well then i guess the prob is a bug in IE7

since its a beta thing, it probably somehow checks with the microsoft servers and the servers do not recognize it as the latest version so u get redirected to the updates page

contact microsoft and add it to dere list of bugs....must b long heh

 

[linardni]

i am also having teh same problem.....whenever i open the I.Explorer <*searchcentral.cc/index.php?v=4&aff=3142> opens. I have deleted the entry from teh registry key....till then it opens whenever i connect to the internet after restarting the pc. Spybot failed to trap it.

 

[QwertyManiac]

well, it loos like u have hidden some updates

K, ny ways, if IE7 then go to Change Settings in windows update and disable BETA updates there and see if that helps...

Do u have SP2 ?

 

[Choto Cheeta]

Do u have SP2 ?

u havent checked my hijackthis log fiell..

Logfile of HijackThis v1.99.1
Scan saved at 3:22:14 PM, on 9/26/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5112.0000)

yes i have...

 

[sakumar79]

possibility one: download the free xp-antispy software and install it. run it and look under "internet explorer". make sure the disable automatic updates and disable scheduled updates are checked. I think that it is possibly one of those two settings which is causing IE to automatically be redirected at startup...

possibility two: create a shortcut with command [iexplore "about:blank"]. Try using this shortcut and see if it solves the problem.

possibility three: if both above fail and other peoples advice also fails, try Opera 8.5 or Firefox - both are completely free and very good (Opera used to be ad-supported but recently released 8.5 as freeware).

hope this helps,
Arun