This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Lets play crash my browser

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

WoW.. this is a long story.. but when I use IE6 and then try to post topics on my forum IE crashes.. In fact it crashes on any IPB version 2.2.X forum there is.. No one else seems to have this problem…. but heres the topic I've posted else were trying to get help… Hopefully it will give you a better view on whats going on, but now I'm thinking its my browsers, (IE6 & Firefox);

We currently have a Shopping Cart for our main page Here, The forum off that main page is IPB version 2.1.7, we upgraded to IPB version 2.2.1 and have had nothing but problems ever since, so we re-installed 2.1.7 and set 2.2.1 on our test side.
Heres the problems;
In IE version 6 or 7 when posting a Reply or New Topic IE will crash. End of story, you then have to do a complete reboot. (or at least I do anyway)
In Firefox we can post or create a new topic but then we can no longer access our main page. going back to our Shopping Cart we get the following warning;

Security Warning
Parsed array keys can not contain illegal characters! Script execution has been halted.
It may be possible to fix this error by deleting your browsers cookies and refresh this page.


As a note deleteing just cookies wont work, you have to clear your history also!

Is this just ME?
well find out… What I'm asking anyone whos willing to help is this..
Go to my Off-Line Test Forum Here?
Login useing;
Username: Crasher
Password: Crasher

Make a Reply and/or a New Topic and let me know what browser your useing, Then try to Access our Main Page Here ,, or click the Logo in the RSI Growers header of the skin and let me know if you can access the Cart or if you get the same Security Warning I do.

The real problem I think is the cart not necessarly the forum,(or a combination of both) The cart recently went through a security audit and it reads characters set by cookies in version 2.2.1 as illegal.. I cant isolate the characters because I dont know how to, So since I cant isolate them .. How do I turn OFF any cookies set by version 2.2.1? Yes I've done all that I can in the ACP but it still dosent help.

This is a major problem for us, as most of you know expecting a browsing customer to delete cookies and history after seeing that warning isnt gaining customers at our shop.. In fact,, "They RUN!" We use IPB as support for our customers to build better relationships with them and to help them in any questions they might have.

Were open to suggestions



So I'm grabbing at straws here thinking its my PC,, hopeing someone here can help me because I dont have much of my hair left.. heres the highjack log;

Logfile of HijackThis v1.99.1
Scan saved at 8:19:09 AM, on 1/25/2007
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Me.JJCSB11\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = htp://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rsigrowers.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = htp://www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rsigrowers.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
O2 - BHO: WsftpBrowserHelper Class - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP Pro\wsbho2K0.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SpywareBot] "C:\Program Files\SpywareBot\SpywareBot.exe" -boot
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ZoneAlarm Stub Program for ZAPro] "C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe"
O4 - HKCU\..\Run: [Gadwin PrintScreen 2.6] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Thank You for the help Little Eagle, I ran ActiveScan in IE, (it dosent run on Firefox) and found 6 spywares,, there just cookies so Deleted them and cleared temp internet files, and History to, did the same for Firefox, but I do that almost daily, then tried to run a second scan and get hung up at 31327 Files scanned …cation Data\Microsoft\Outlook\.. the scan just hangs there <_<

Once I can get through the second scan I'll post that if you need me to;

ActiveScan:
Spyware:Cookie/2o7	   C:\Documents and Settings\Me Again\Cookies\Ackkk!@2o7

Spyware:Cookie/Adtech   C:\Documents and Settings\Also Me\Cookies\Me@adtech

Spyware:Cookie/Atlas DMT   C:\Documents and Settings\Me Too\Cookies\rodger@atdmt

Spyware:Cookie/Statcounter   C:\Documents and Settings\Once Again\Cookies\rodger@statcounter

Spyware:Cookie/WebtrendsLive	   C:\Documents and Settings\Silly Huh\Cookies\reid @statse.webtrendslive

Spyware:Cookie/Tradedoubler	   C:\Documents and Settings\Once More\Cookies\reid @tradedoubler

HighJack Log:
Logfile of HijackThis v1.99.1
Scan saved at 7:51:34 PM, on 2/10/2007
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\System32\devldr32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Me\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = htp://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url=http://www.rsigrowers.com/]http://www.rsigrowers.com/[/url]
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WsftpBrowserHelper Class - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP Pro\wsbho2K0.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SpywareBot] "C:\Program Files\SpywareBot\SpywareBot.exe" -boot
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ZoneAlarm Stub Program for ZAPro] "C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe"
O4 - HKCU\..\Run: [Gadwin PrintScreen 2.6] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - [url=http://acs.pandasoftware.com/activescan/as5free/asinst.cab]http://acs.pandasoftware.com/activescan/as5free/asinst.cab[/url]
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
I still see

O4 - HKLM\..\Run: [SpywareBot] "C:\Program Files\SpywareBot\SpywareBot.exe" -boot

But the darn if I can find it anyware in my program files, I even did a search and looked in "run"//search.. its the .exe boot so how do I delete that?

If you say its clean…. then its clean!…. I might have a bad file in my IE

I reinstalled IE version 6

I'm thinking its the security updates between my sites Front End Cart and the security of the Invision Forum (2.2).. I'm thinking they cause the browser to crash…… But at least I dont have any boogie men crawling around……….

I apperciate your Help.

Reid
:thumbup: Cool,,, that suckers gone now too! I'll poke around some more and post back what the heck is going on with my IE between my two databases,, some people have the same problem and others dont, so at least I know its not a problem between my chair and the keyboard <_<
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI