Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 91804 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

Mozilla Firefox browser doesnt want to open


  • Please log in to reply
27 replies to this topic

#16 kltsin

kltsin

    Authentic Member

  • Banned
  • PipPip
  • 59 posts

Posted 07 August 2005 - 01:18 AM

Any chance you would be willing to use XP's system restore to a time when it was working...???
Im never in favor of it but if its not working after the above....

The info I last posted should have cleaned all of the old files that may have been damaged.
The only other thing that I can think of that would cause this would be that the registry was modified/damaged or a virus is causing it.

Possibly posting a HiJackThis log may help..and should be done first.
Then we will consider a XP System Restore if we see that you are clean.

Get HJT here
http://tomcoyote.com/hjt/

Besides the HJT log..

Maybe we should have you clean out your temp files first as well as re-download the latest version of FF.

Uninstall FF again
Reboot
Clear temp files
You can do it manually by deleteing everything in..
C:\temp
C:\windows\temp
C:\Windows\Prefetch
C:\Documents and Settings\**Your Windows Account Name**\Local Settings\Temp

Empty Recycle bin

Reboot

Now install the latest version of FF..

    Advertisements

Register to Remove


#17 thetopdog1289

thetopdog1289

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 07 August 2005 - 10:16 AM

Alright, I'll clean out the Temp files first then see what happens. But I think I posted a HJT log in the HJT forum and I never got a reply. I'll link it to here when I find it

#18 thetopdog1289

thetopdog1289

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 07 August 2005 - 10:37 AM

Alright, here's something. When I tried deleting C:\Documents and Settings\**Your Windows Account Name**\Local Settings\Temp and everythign in there, I got a message saying I couldn't delete one thing called IadHide5.dll It says Access is Denied. Make sure disk is not full or write-protected and that file is not currently in use.

#19 thetopdog1289

thetopdog1289

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 07 August 2005 - 10:38 AM

And here is the new Hijack Log

Logfile of HijackThis v1.99.0
Scan saved at 11:33:29 AM, on 8/7/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Creative\ShareDLL\CtNotify.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\rnrorr.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\intell32.exe
C:\Program Files\Creative\RemoteCenter\Rc\Rcman.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Creative\ShareDLL\MEDIADET.EXE
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\MSN\MSNCoreFiles\msn6.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\unzipped\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\BENGAL~1\LOCALS~1\Temp\se.dll/space.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\BENGAL~1\LOCALS~1\Temp\se.dll/space.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O2 - BHO: (no name) - {D45F797B-AAFC-457A-A10C-7ABADF7053B4} - C:\WINDOWS\System32\ddpf.dll (file missing)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [winsync] C:\WINDOWS\System32\rnrorr.exe reg_run
O4 - HKLM\..\Run: [Narrator] C:\WINDOWS\System32\iuikii.exe
O4 - HKLM\..\Run: [sp] rundll32 C:\DOCUME~1\BENGAL~1\LOCALS~1\Temp\se.dll,DllInstall
O4 - HKLM\..\Run: [intell32.exe] C:\WINDOWS\System32\intell32.exe
O4 - HKLM\..\Run: [PSGuard spyware remover] C:\Program Files\PSGuard\PSGuard.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\RemoteCenter\Rc\Rcman.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [Spyware Begone] c:\freescan\freescan.exe -FastScan
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://c:\counter.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} (CR64Loader Object) - http://www.miniclip....pGameLoader.dll
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip....pGameLoader.dll
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://dev-www.filep...DC_1_0_0_41.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.web...otoUploader.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/...ro.cab34246.cab
O16 - DPF: {CE185270-53A5-11D9-9669-0800200C9A66} - http://www.ouchvideo...mviewer_ic2.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/z...s/heartbeat.cab
O18 - Filter: text/html - {6896F69B-9A9C-4114-B8D2-E90D5696BC28} - C:\WINDOWS\System32\ddpf.dll
O18 - Filter: text/plain - {6896F69B-9A9C-4114-B8D2-E90D5696BC28} - C:\WINDOWS\System32\ddpf.dll
O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\System32\HPHipm11.exe
O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

#20 Crow

Crow

    WTT Tech Emeritus

  • Authentic Member
  • PipPipPipPip
  • 970 posts
  • Interests:I play golf, I like to fish tournaments (or donate). I am a Certified Applicator by day, and electronics tech after 5.

Posted 07 August 2005 - 11:55 AM

yes you can copy and paste from there. Are you absolutly positive you dont have another profile running... you need to post that log in the hijack this problems forum.. you have about blank.

Edited by Crow, 07 August 2005 - 11:58 AM.

"I am not sure what these four 9's mean.. but I think this Ace is kinda high"


#21 kltsin

kltsin

    Authentic Member

  • Banned
  • PipPip
  • 59 posts

Posted 07 August 2005 - 10:27 PM

Yes if you have a post already in the HijackThis Logs and Spyware/Malware Removal Forum they will be with you when they get a chance. The volunteers are very busy and about:blank infections are very tricky so only the elite here are allowed to even post to them.. Please be patient and sorry for the wait.

#22 thetopdog1289

thetopdog1289

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 08 August 2005 - 09:16 PM

Thanks for all the help guys. Mozilla just popped up, but it was in an advertisement, so my problem still isnt quite fixed. Did you say I could get my old bookmarks back?

#23 thetopdog1289

thetopdog1289

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 14 August 2005 - 10:00 PM

My problem is still here so I'm just gonna bump this along

#24 thetopdog1289

thetopdog1289

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 18 August 2005 - 04:55 PM

Alright, it's working now. I need my bookmarks that I lost. This will be the last time. Thanks.

#25 fbelzile

fbelzile

    basic

  • Authentic Member
  • PipPip
  • 100 posts
  • Interests:I enjoy playing and learning about computers, bike riding around town with my friends and I am currently playing badminton for my highschool.

Posted 19 August 2005 - 07:43 AM

Copy this into Internet Explorer and hit enter (where **Windows_UserName** is your Login user name: C:\Documents and Settings\**Windows_UserName**\Application Data\Mozilla\Firefox\Profiles\ Double-click your Firefox profile. Do you see a file named bookmarks?

    Advertisements

Register to Remove


#26 thetopdog1289

thetopdog1289

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 19 August 2005 - 03:10 PM

Yes, Yes I do

#27 thetopdog1289

thetopdog1289

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 19 August 2005 - 03:10 PM

It's an HTML File

#28 fbelzile

fbelzile

    basic

  • Authentic Member
  • PipPip
  • 100 posts
  • Interests:I enjoy playing and learning about computers, bike riding around town with my friends and I am currently playing badminton for my highschool.

Posted 20 August 2005 - 10:10 PM

In firefox, go: Bookmarks > Manage Bookmarks Then go: File > Import Then click "From File" now, find your bookmarks.html file and click Open. Hope this works. Let me know

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users