[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 21868
  • Last Modified:

Internet Explorer random freezing

Hi everyone,

Every time I visit certain web sites, my internet freezes and after a while it quits and If I click "see what will be sent in the report", I get;

szAppName : iexplore.exe     szAppVer : 6.0.2900.2180     szModName : hungapp
szModVer : 0.0.0.0     offset : 00000000    

I know for sure that one site that definetley freezes when I visit it is; http://www.swagshop.com/

I am not sure what is going on, but, I have cleared cookies etc..

Below, just incase is my HijackThis log;

Logfile of HijackThis v1.97.7
Scan saved at 01:00:16, on 28/11/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
*** log can be viewed at http://www.hijackthis.de/logfiles/90ed860e29a60b582ced95b71d8af035.html turn123, Page Editor -- Applications. ***

Please help :)
0
madhatterdesign
Asked:
madhatterdesign
  • 16
  • 14
  • 10
  • +3
1 Solution
 
rubiconxCommented:
Visit here to have your log analysed:
http://www.hijackthis.de/index.php?langselect=english

You will be told if you have any potential problems.
0
 
rubiconxCommented:
Your version of HiJackThis needs updating.

  C:\WINDOWS\system32\service.exe
  C:\WINDOWS\system32\lssas.exe

Are recognised as nasty!
0
 
rubiconxCommented:
The following instructions should help you to remove 99%+ of the adware/malware/spyware likely to be on your PC.  The instructions are given in a sensible order, and it is recommended that each item is completed before progressing to the next.  A number of operations can be skipped, and this is mentioned in the text below.  Some spyware will stop certain programs loading.  If this happens just move on to the next instruction.

Firstly you need to disable the system restore facility within Windows.  If you don't do this, then any fixed files could be automatically replaced with the previously infected ones!
Follow these instructions:- http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Next step is to tidy the PC a little.  This step is not essential but will make the later scanning much quicker.  Presuming the Windows is XP:
 Hold the WinKey and press E
 Right click on the C: drive (C:)
 Select Properties at the bottom of the menu
 Click Disk Cleanup

There are a number of options available on the Disk Cleanup screen.  The following two should definitely be chosen with others optional:
 Temporary Internet Files
 Temporary Files

If you do not have a Disk Cleanup option, or if you are not comfortable doing it for whatever reason, I do recommended you at least delete all the temporary Internet files:
 Hold the WinKey and press E
 Double-click Control Panel
 Double-click Internet Options
 Select General Tab
 Delete Files (in the center)

While still in Internet Options reset your browser defaults.  For IE users this will reset the home page and search defaults.
 Select Programs Tab
 Click Reset Web Settings

Next we need to download and run some spyware cleaning software.  There are many different programs in this category, and below are listed the three that I feel are the most user-friendly.

Spyware software is never perfect, and it is not unusual for one package to find items that another package missed.  Because of this I recommend running at least two different programs; preferably all three.

Explanations and instructions for each package can be found on their relevant sites.  Just make sure that, before you run the software, you have the latest library/definition file.

Ad-Aware SE Personal Edition
http://www.lavasoftusa.com/support/download/#free

Spybot-S&D
http://www.safer-networking.org/en/download/index.html

Spyware Doctor
http://www.pctools.com/spyware-doctor/

Once you have completed all of the above, you need to re-enable the System Restore facility.  Follow this link for a reminder on how to do it:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Reboot your machine.
0
Restore individual SQL databases with ease

Veeam Explorer for Microsoft SQL Server delivers an easy-to-use, wizard-driven interface for restoring your databases from a backup. No expert SQL background required. Web interface provides a complete view of all available SQL databases to simplify the recovery of lost database

 
madhatterdesignAuthor Commented:
Hi,

I did EVERYTHING you just said, but still nothing!

I have no Idea what it is..

Is the

szAppName : iexplore.exe     szAppVer : 6.0.2900.2180     szModName : hungapp
szModVer : 0.0.0.0     offset : 00000000    

of any use??
0
 
rubiconxCommented:
No - the report doesn't tell us anything.  Just that Internet Explorer is hanging the system.

Try running a Virus Scanner:

http://housecall.trendmicro.com/

Once this has completed, run HijackThis again and post it.  I'll take another look at it to see if anything has been missed.  Make sure you get the newest version of HijackThis.  The one you used before was old:

http://www.tomcoyote.org/hjt/

Post the result here:

http://www.hijackthis.de/index.php?langselect=english

Regards,

Dave
0
 
madhatterdesignAuthor Commented:
Hi,

My log was;

Logfile of HijackThis v1.98.2
Scan saved at 11:06:42, on 28/11/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\web\mysql\bin\mysqld-nt.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\altsvc.exe
C:\WINDOWS\system32\lssas.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\PeerGuardian pr14\PeerGuardian_1.99b_pr14.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\Max\Local Settings\Temp\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.madhatter.cc/cgiproxy/nph-proxy.pl/000110A/http/www.google.co.uk/webhp?hl=en&tab=nw&ned=uk&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 172.16.100.126:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian pr14\PeerGuardian_1.99b_pr14.exe
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-9.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} - http://fdl.msn.com/public/chat/msnchat45.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A8913E30-B2EB-4646-8F45-5784B0E65B57}: NameServer = 192.168.1.1

And i already have norton 2005 which didnt find anything......
0
 
rubiconxCommented:
0
 
rubiconxCommented:
C:\WINDOWS\system32\lssas.exe - needs removing.

The easiest is to do the following:
1. start --> run --> msconfig
2. Click on the "startup" tab (furthest right)\
3. Unclick any items you don't want to load when windows starts.

reboot into safe mode
navigate to c:\windows\system32
delete lssas.exe

reboot
0
 
rubiconxCommented:
If the above still fails try stinger

http://vil.nai.com/vil/stinger
0
 
blue_zeeCommented:

Also:

Download Ad-Aware from here:
http://lavasoft.element5.com/support/download/
Install, UPDATE and run.
You may need to reboot and run again to clean all the nasties that cannot be deleted at once (“in use”).

Also excellent is SpyBot Search & Destroy available here:
http://www.spychecker.com/download/download_spybot.html
Install, UPDATE and run.
You may need to reboot and run again to clean all the nasties that cannot be deleted at once (“in use”).
You should also apply the "immunize" function, since it blocks roughly 1900 known 'bad' runs/apis/apps.

Even if Ad-Aware and SpyBot S&D are similar, they do clean different things. You should have both of them and use REGULARLY.

You can also install “preventive” software that will help you control these nasties:

SpywareBlaster:
http://www.javacoolsoftware.com/spywareblaster.html
Avoids malicious Active X installs.
Advantage: no system resources used!!!
Just download, install and UPDATE.

All of them extremely useful but you must keep them UPDATED.

Suggestion: Make sure you can see all files and folders and run Ad-aware and Spybot S&D in Safe Mode.

Zee
0
 
madhatterdesignAuthor Commented:
Hi,

I really don't think its a spyware/adware/virus problem....

what could it be on the swagshop.com site thats doing it?
0
 
rubiconxCommented:
Zee - no offence but did you actually read the thead before posting?

I do think it's a virus or spyware problem.  The last HijackThis report shows that you have a copy of lssas.exe running.  This file is associated with the sasser virus.  The sasser virus, which comes in many guises, causes program crashes, website errors and system reboots.

Get rid of the lssas.exe file and then decide if it's something else!

Do you recognise 'Sothink SWF Catcher'
Do you recognise 'http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cab'
Did you create the file 'C:\WINDOWS\about.htm'

There are still too many questions related to spyware and viruses to give up and start looking elsewhere.

All in my humble opinion of course!

Dave
0
 
madhatterdesignAuthor Commented:
Hi,

I got rid of;

Do you recognise 'http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cab'
Did you create the file 'C:\WINDOWS\about.htm'

I knew what the top one was, but still didnt want it..

So where else could we look?
0
 
rubiconxCommented:
OK, how ever you may feel we've actually clean an awful lot now!

Admittedly, I would have expected to have solved the problem considering how many viruses, trojans and spyware occurances have been cleaned!

One thing we haven't done that may help is...

Tidy the PC a little.  
 Hold the WinKey and press E
 Right click on the C: drive (C:)
 Select Properties at the bottom of the menu
 Click Disk Cleanup

There are a number of options available on the Disk Cleanup screen.  The following two should definitely be chosen with others optional:
 Temporary Internet Files
 Temporary Files

While still in Internet Options reset your browser defaults.
 Select Programs Tab
 Click Reset Web Settings

Sorry if you know how to do these things anyway..!

Keep in mind that resetting the Web settings will set your home page back to MSN!

After the above, reboot then run HiJackThis again and post the report to:

http://www.hijackthis.de/index.php?langselect=english

When the results page appears there is a 'save' option at the bottom.  Select this and post the resulting page URL here.

Dave
0
 
blue_zeeCommented:

People,

Wildtangent is spyware/malware not a virus.

Zee
0
 
blue_zeeCommented:

>>And i already have norton 2005 which didnt find anything......<<

And you would be surprised how much is able to slip through...

Zee
0
 
rubiconxCommented:
Zee,

What is your problem mate.  By all means contribute but please read the thread first so that you are actually contributing something worthwhile!

Dave
0
 
blue_zeeCommented:

Dave,

Perhaps you do have problems.

I will post as long as I find my comments may be useful to the questioner, not any of the other posters.

And please note down: NEVER run HijackThis from a Temp folder or from desktop.

Failing to do that may lead to loss of HJT backup data and the impossibity to restore any erroneous "fixes".

Zee
0
 
blue_zeeCommented:

madhatterdesign,

I strongly recommend you to download the adware/spyware tools mentioned above, update and scan your system.

If everything comes up clean, you should try an IE repair:

How to reinstall or repair Internet Explorer and Outlook Express in Windows XP
http://support.microsoft.com/default.aspx?kbid=318378

I am unable to access the site you mentioned (don't know why, seems to be down..??), but could that be a Java issue?

You can test whether Java is working on your machine at the following sites:

http://www.pocoso.de/pocoso052.html
http://www.clan.lib.ri.us/clan/javatest.html  (This one may be down)
http://www.fitwise.com/testjava.asp (both 1.0 and 1.1 and what's installed)
http://coglab.wadsworth.com/support/browsercheck.html
http://www.ces.clemson.edu/webct/browser_detect.html

and you can test Javascript here:
http://www.dancespots.net/browsertest.htm

Post back your findings.

Zee
0
 
madhatterdesignAuthor Commented:
I tried all those java/script tests and passed all of them?

I ran disk cleanup and this is my log page;

http://www.hijackthis.de/logfiles/8ca216369f9f8930aa84361668f796a2.html

It says i need a new version of internet explorer.. where can i get this?
0
 
blue_zeeCommented:

Try this:

How to reinstall or repair Internet Explorer and Outlook Express in Windows XP
http://support.microsoft.com/default.aspx?kbid=318378

Zee
0
 
madhatterdesignAuthor Commented:
hi, i couldnt re install it..

i had already tried though and did the sfc /scannow bit before....


thanks
0
 
blue_zeeCommented:

Can you access that site now?

Have you tried the adware/spyware scanners?

Do you still have the freexze with that error message?

That error message is quite common and there is no "canned" fix for it. It's a trial and error process...

If you're lucky, the solution is just around the corner, if not it could take you a long time.

Also, try disabling the firewall, to test ONLY.

Also, in Internet Options > Advanced, under Browsing UNTICK "Enable third-party browser extensions (requires restart)"

Reboot and check again.

Zee
0
 
madhatterdesignAuthor Commented:
Hi,

>>Can you access that site now?
Yes I can, but it still freezes
>>Have you tried the adware/spyware scanners?
Yes, but they didn't help
>>Do you still have the freexze with that error message?
Yes
>>Also, try disabling the firewall, to test ONLY.
Nothing... :(
>>Also, in Internet Options > Advanced, under Browsing UNTICK "Enable third-party browser extensions (requires restart)" Reboot and check again.
Nothing again :( :(

When I try to re install IE, it just doesnt re install it, it just says it already exists......
0
 
blue_zeeCommented:

Perhaps you would like to try Firefox an alternative browser and confirm if the problem persists:

http://www.mozilla.org/products/firefox/
0
 
blue_zeeCommented:

Or, before the above:

Internet properties > Advanced > Click "Restore defaults", OK, reboot and check.

Zee
0
 
madhatterdesignAuthor Commented:
Hi,

I tried Mozilla before, but I just prefer IE more and would really like this fixed...

And I have done that restore defaults before....

Thanks,

Max
0
 
blue_zeeCommented:

See this:

How do I repair Internet Explorer in Windows XP?
http://www.dougknox.com/xp/tips/xp_ie_reinstall.htm

Some people have problems with the command line above.

A small VB Script that will execute the command for you can be downloaded here at

http://www.dougknox.com/xp/scripts/xp_run_ie_setup.vbs

Save the file to your hard drive and double click it to run IE Setup.

Good luck,

Zee

0
 
lawson2305Commented:
"I tried Mozilla before, but I just prefer IE more and would really like this fixed..."

Did you try Mozilla or Firefox?

http://www.mozilla.org/products/firefox/

Sorry but Firefox is the best browser.  Once you try it you won't go back.  Plus IE is riddled with holes (exactly why you are having these issues).

I know this and what the above poster are replying isn't what you are looking for but we are providing you the BEST answer.

Don't try to fix a bad app, just use a good app.
0
 
madhatterdesignAuthor Commented:
Hi,

I tried Mozilla Firefox and I dont like it really...

There must be a way to fix it? It can't just break? Can it??

Thanks,

Max
0
 
blue_zeeCommented:

Have you checked my links above to repair IE in WinXP?

Zee
0
 
madhatterdesignAuthor Commented:
Hi,

Yes I did and I re installed it, but still nothing! :(

It must be something external messing with it?

Max
0
 
blue_zeeCommented:

Really puzzles me...
:(

Glad I moved to Firefox....

Back as soon as I find something worth a try.

Zee
0
 
turn123Commented:
Hi madhatterdesign :-),
Since we haven't heard from you for a couple of days could you please give us an update on the status of this question?
See:  http://www.experts-exchange.com/help.jsp#hi51 Thank you, turn123's friendly update request script.
Offtopic comments about this script to http://www.experts-exchange.com/Applications/Q_21188389.html please :-).
0
 
madhatterdesignAuthor Commented:
Hi,

I still have the problem..

Here is my HijackThis Log;  http://www.hijackthis.de/logfiles/8ca216369f9f8930aa84361668f796a2.html

Do you reckon it could be anything to do with Sothink SWF Catcher? I know what it is and i mean it to be there, but it could be the reason? I will uninstall it and get back to you.

Thanks,

Max
0
 
madhatterdesignAuthor Commented:
No it didnt work :(
0
 
blue_zeeCommented:

Update your HijackThis and try again:

http://www.majorgeeks.com/download3155.html

Not that I believe in it too much, but worth a try.

Zee
0
 
madhatterdesignAuthor Commented:
0
 
blue_zeeCommented:

Nothing serious there.

Zee
0
 
madhatterdesignAuthor Commented:
Guess I will just use Mozilla then..
0
 
blue_zeeCommented:

Firefox is the BEST browser around and leaves IE miles back.

Thanks and good luck.

Zee
0
 
jbashCommented:
szAppName : IEXPLORE.EXE     szAppVer : 6.0.2900.2180     szModName : hungapp

If you're getting this hungapp message from IE Internet Explorer on certain websites, try the following (reregistering your DLLs) - it worked for me and got rid of the problem!

Run each of the following from Start -> Run:

regsvr32 Shdocvw.dll
regsvr32 Shell32.dll
regsvr32 Oleaut32.dll
regsvr32 Actxprxy.dll
regsvr32 Mshtml.dll
regsvr32 Urlmon.dll
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

  • 16
  • 14
  • 10
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now