Anti-Virus installed ?
latest definitions ?
Run a full scan lately ?
It could be one of many network aware virii ...best to be safe and check
Main Topics
Browse All TopicsHello Guys,
I have successfully networked my friend's medical practice office having 3 computers (two on Windows '98 and one with XP Home). I have used a belkin router though she still don't have a DSL modem. She is just waiting for her DSL account to get activated in 2 days.
Here is the problem, one PC running on Windows '98 when connected to the router------ INTERNET EXPLORER are popping up ... I mean, IE windows opens like continually opening up to at least 20 IE windows with no page shown or its just a blank page (since it doesnt have an internet connection).
Before I networked the office, she was dialing up to the internet.
When I encountered these problems on IE windows, here are the things I did:
1) run Adware 6.0 (twice --- with plugged or unplugged network cable).
2) run Spybot Search & Destroy (twice --- with plugged or unplugged network cable).
3) higher the security level, remove internet connections e.g. aol and netzero.
But it these did not resolve the problem. One thing I noticed though is that, if this computer is not connected to the router or to the network, it does NOT do this thing.
What should be the reason behind this?
Please help.
Thank you.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Download it from here:
HijackThis --> http://www.spychecker.com/
Click Scan and then Save Log
Hello Guys:
Here is the log after running HiJackThis. Please if you can help me figure out the problem.
Again, the problem was.... as soon as this PC is connected to the network multiple browsers are coming out. I click a lot of Alt-F4 to close each browser.
This PC is connecting to the internet by dial-up. But I am installing the DSL modem connection tomorrow. Another thing, if this PC is disconnected from the router or from the network, this problem does not appear. Ad-ware, Spy A&D, Virus Scan has been run, but the same problem.
Please HELP. Thank you.
R1 - HKCU\Software\Microsoft\In
R1 - HKCU\Software\Microsoft\In
R0 - HKCU\Software\Microsoft\In
R1 - HKLM\Software\Microsoft\In
R1 - HKLM\Software\Microsoft\In
R0 - HKLM\Software\Microsoft\In
R1 - HKCU\Software\Microsoft\In
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-B
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-7
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-F
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-2
O3 - Toolbar: ZeroBar - {F5735C15-1FB2-41FE-BA12-2
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-0
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPw
O4 - HKLM\..\Run: [Multi-function Keyboard] GWHotKey.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.E
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [projselector] "c:\Program Files\Common Files\Roxio Shared\Project Selector\projselector.exe"
O4 - HKLM\..\Run: [RoxioEngineUtility] "c:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "c:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "c:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.ex
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [HP SchedIndexer] C:\Program Files\Hewlett-Packard\Lase
O4 - HKLM\..\Run: [HP AutoIndexer] C:\Program Files\Hewlett-Packard\Lase
O4 - HKLM\..\Run: [NPROTECT] c:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\Real
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPw
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [winmodem] WINMODEM.101\wmexe.exe
O4 - HKLM\..\RunServices: [GoBack Polling Service] C:\Program Files\Wild File\GoBack\GBPoll.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [CSINJECT.EXE] c:\Program Files\Norton SystemWorks\Norton CleanSweep\CSINJECT.EXE
O4 - HKLM\..\RunServices: [NPROTECT] c:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks] c:\Program Files\Common Files\Symantec Shared\SymTray.exe "Norton SystemWorks"
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUND
O4 - HKCU\..\Run: [uoltray] C:\PROGRAM FILES\NETZERO\EXEC.EXE regrun
O4 - HKCU\..\Run: [spc_w] "C:\Program Files\NZSearch\hcm.exe" -w
O4 - Startup: Refresh.lnk = C:\Program Files\Iomega\Tools\REFRESH
O4 - Startup: Gateway.net 5.0 Tray Icon.lnk = C:\Gateway.net 5.0\gwtray.exe
O4 - Startup: Data Runner.lnk = C:\Program Files\MediSoft\Bin\DataRun
O4 - Startup: GoBack.lnk = C:\Program Files\Wild File\GoBack\GBMenu.exe
O4 - Startup: Iomega Watch.lnk = C:\Program Files\Iomega\Tools\IOWATCH
O4 - Startup: Iomega Startup Options.lnk = C:\Program Files\Iomega\Tools\IMGSTAR
O4 - Startup: Iomega Disk Icons.lnk = C:\Program Files\Iomega\Tools\IMGICON
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Startup: HP LaserJet Director.lnk = C:\Program Files\Hewlett-Packard\Lase
O4 - Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsm32.exe
O4 - Startup: America Online 7.0 Tray Icon.lnk = C:\Program Files\America Online 7.0a\aoltray.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-4
O16 - DPF: {DED22F57-FEE2-11D0-953B-0
O16 - DPF: {9F1C11AA-197B-4942-BA54-4
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-5
O16 - DPF: {30528230-99F7-4BB4-88D8-F
O16 - DPF: {B9191F79-5613-4C76-AA2A-3
Don't really see much in your log here...but since you're leaving Netzero, these can be removed:
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-B
O3 - Toolbar: ZeroBar - {F5735C15-1FB2-41FE-BA12-2
You 'do' have an awful lot loading in your startup - several run & run services entries that 'could' be removed, unless you just have a lot of memory to spare...(about 39 entries total).
A lot of programs place themselves in your startup environment, when it's not really necessary, so most of this can probably be removed. For instance, AOL's tray icon is not necessary to use AOL. It's just supposed to make it more convenient for you to use AOL. I believe on dial-up it gives you the ability to 'ask' you if you want to connect to the internet when it 'senses' a connection has been made - but that means it's running there polling for internet connectivity endlessly...
Other apps place themselves in your tray, so that you can 'see' them, and hopefully use them (they need to feel loved ;)
Something else you might try here though is - check your hosts file - Start->Run->%systemroot%\s
127.0.0.1 localhost
if so - this might be causing your pop ups...
I see you also have goback installed? Can you just use that to go back to a time where this wasn't occuring? In my experience with goback, it's extremely powerful (even frightening...), so it should be able to provide a restore feature for you...
Failing that - might I make a suggestion? There's an overlay for Internet Explorer (if you even use it - or is this all coming from AOL's browser?) - called MyIE (www.myie2.com) which has a great pop up blocker. If AOL's browser is causing you this grief though - what version are you on? Their 9.0 version is supposed to eliminate pop-ups. When you go with the DSL - are you keeping AOL? If you don't mind my asking...
Are you sure Netzero is not the cause of the popups as it appears to affer a popup free service (for a price):
http://www.joink.com/homes
http://es.geocities.com/fa
" NetZero also offers an ad-supported Free ISP "
Does your friend have the free netzero ISP package which is free (if you dont object to the popup ads)?
Business Accounts
Answer for Membership
by: sirbountyPosted on 2004-07-02 at 19:44:07ID: 11461445
Several experts have put together a lot of tools for resolving problems such as this.
See: http:Q_20975384.html
Post the hijackthis log from that system if the problem persists...