Solved

Internet Explorer displays white page and stops responding.

Posted on 2008-09-29
6
1,360 Views
Last Modified: 2013-12-08
Hi,

We have a computer running Windows XP SP2 that had a rootkit on it.  Whenever we run IE, it opens with a white page and just sits there with an hourglass.  To close out of it, we have to end the ie process.  

I have removed the virus (what I could find) and run super antispyware, spybot, dial-a-fix, sfc-scan, removed/reinstalled IE, and updated to IE7 with no luck.  Temporarily we've put Firefox on it and that works fine.  

The computer has Symantec on it and is still giving warnings about a virus being on it, but no matter how many tools we scan with we can't find it.  Does anyone have any suggestions on how to repair IE and detect this virus?

Thank you
0
Comment
Question by:DataDudes
6 Comments
 
LVL 7

Assisted Solution

by:tplaya07
tplaya07 earned 100 total points
ID: 22596799
I would first remove Symantec (at least temporarily). You should first use Add remove programs to uninstall it (including Live Update, LiveReg, or any other Norton related software), and then you can use the Norton Removal tool found here;
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039

Afterwards, download and run CCleaner (run both the "Cleaner" and "Registry" buttons on the left-hand side) to remove any registry traces.

Then, run SFC /scannow to repair/replace any missing or corrupt system files. You will probably need an XP disc for this. Finally, you should download and install XP SP3.
0
 
LVL 27

Assisted Solution

by:David-Howard
David-Howard earned 100 total points
ID: 22596815
I do have a couple of suggestions. You'll need your OS CD for both and about fifteen minutes.

1) Try SFC SCANNOW
http://www.updatexp.com/scannow-sfc.html
If that fails, try a Repair.
http://www.michaelstevenstech.com/XPrepairinstall.htm
David
0
 
LVL 3

Accepted Solution

by:
R_Janssen earned 150 total points
ID: 22596860
You might as well run a rootkit revealer (SysInternals (aka Microsoft) has one available @ http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx)
If there is a real rootkit infestation Symantec wouldn't see it, also if you repair using Symantec make sure that you disable system restore functionality before doing so. Otherwise you'll end up with the same stuff if you ever restore a snapshot.
 
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 2

Author Comment

by:DataDudes
ID: 22596942
Thanks, I will try rootkit revealer
0
 
LVL 30

Assisted Solution

by:mtz1of4
mtz1of4 earned 150 total points
ID: 22597752
Datadudes,

Best thing to do is to just back up your important info and format that disc. If you truly have a good rootkit, not much will find it and eliminate it and how would you know if they did or not.  Rootkits are built to not be detected.  And reading the results of the Rootkit Revealer isn't as straight forward as you may think.

Yes, reinstalling the os and multiple programs will take time, but will you truly trust the machine again, if some program tells you it's clean?
0
 
LVL 2

Author Comment

by:DataDudes
ID: 22597928
That looks to be the course we are taking.  The computer does have a rootkit (confirmed with rootkit revealer) and I agree the best thing to do is to reformat/reinstall.  Thanks for the help
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Introduction If you're like most people, you have occasionally made a typographical error when you're entering information into an online form.  And to your consternation, the browser remembers the error, and offers to autocomplete your future entr…
For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now