Curse

MagmaRed · Aug 04, 2009, 07:56 PM // 19:56

Quote:

Originally Posted by Tarun

Log looks clean. Did the scans (Malwarebytes, SUPERAntiSpyware, Spybot) return any results?

I'm doing things piecemeal. May not be the best way, but it will help me figure out where the problem was/is. When I ran the HijackThis, that was all I did. The day after I cleared my cookies/temp files. Still saw no changes in my lock ups. Today I ran the Malwarebytes and it found 4 problems and removed them. I have not locked up since doing that, but this is my first Guru use since I did that. If it continues I'll run the SUPERAntiSpyware next.

Tarun · Aug 04, 2009, 08:00 PM // 20:00

Go ahead and follow the guide to PC Cleanup in the Anti-Malware Toolkit. It will help a lot, also post your logs from the scans.

MagmaRed · Aug 05, 2009, 02:03 PM // 14:03

This is the log for the Malware scan, have not done the other ones yet, but will after I post this. Still get the lock ups, so I know it wasn't anything the Malware scan fixed.

---------------------------------------------------

Malwarebytes' Anti-Malware 1.40
Database version: 2557
Windows 5.1.2600 Service Pack 3

8/4/2009 7:13:00 AM
mbam-log-2009-08-04 (07-13-00).txt

Scan type: Full Scan (C:\|)
Objects scanned: 158319
Time elapsed: 30 minute(s), 8 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{3ba4271e-5c1e-48e2-b432-d8bf420dd31d} (Rogue.DeusCleaner) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Targren · Aug 05, 2009, 07:27 PM // 19:27

Try temporarily disabling mcafee. The newer versions hook into the web browser to catch malware (ostensibly. The range of success is from horrible to terrible) and have been known to get choked up.

As for proving conclusively that it's not IE8, FF portable is probably your best temporary bet. If it doesn't solve your problem, you delete the folder and it's gone from your computer. No registry stragglers, no profiles, nada.

A parable:

Patient: Doctor, something is terribly wrong with me. It hurts no matter where I touch.
Doctor: Anywhere?
Patient: *Pokes Arm, Face, Neck, Chest, Leg* EVERYWHERE. What's wrong with me?
Doctor: Your finger is broken.

MagmaRed · Aug 05, 2009, 08:18 PM // 20:18

Quote:

Originally Posted by Targren

Try temporarily disabling mcafee. The newer versions hook into the web browser to catch malware (ostensibly. The range of success is from horrible to terrible) and have been known to get choked up.

Actually, I was gonna ask about something related to that. It is not new, ever since I started using Guru, I get the same thing. But part of my McAfee includes a 'SiteAdvisor'. This is active at all times and monitors any website I visit. It will notify me of possible problems from the site like email spam, adware, etc. Guru gives me a red (worst - either green, yellow, or red) notice. Says:

"When we browsed this site, it made unathorized changes to our test PC."

When I view the info about it, it doesn't seem too be bad, and probably outdated. Mostly dealing with cookies and popups. Since I have not had any problems from Guru (until the lock ups) I ignored it. But it may be something that Guru will want to look into as not all people will be ignoring the warning provided from McAfee.

Targren · Aug 05, 2009, 09:12 PM // 21:12

Quote:

Originally Posted by MagmaRed

When I view the info about it, it doesn't seem too be bad, and probably outdated. Mostly dealing with cookies and popups. Since I have not had any problems from Guru (until the lock ups) I ignored it. But it may be something that Guru will want to look into as not all people will be ignoring the warning provided from McAfee.

Yeah, probably triggered red during one of the malicious ad incidents and never rescanned. Horrible, horrible software.

Tarun · Aug 05, 2009, 11:09 PM // 23:09

I know many people dislike SiteAdvisor and now use WebOfTrust.

MagmaRed · Aug 07, 2009, 06:09 PM // 18:09

I ran all of the programs in the order suggested in the PC Cleanup guide. I posted the Malware and HiJackThis logs. I don't have any other logs.... unless I need to look closer. Although I saw some things being done by those programs, nothing has stopped the lockups here on Guru. I also tried disabling ALL of my McAfee programs, and it still locked up. I had done a cookie/history clear as well, and run 2 different Disccleanup programs (McAfee and your's Tarun).

Any ideas as to what is causing this yet? I would like to get past it, but still find myself reloading Guru multiple times to be able to read and post here.

Tarun · Aug 07, 2009, 06:31 PM // 18:31

It may be worth trying Firefox temporarily to see if it's limited to IE.

Inde · Aug 07, 2009, 06:34 PM // 18:34

Quote:

Originally Posted by MagmaRed

Actually, I was gonna ask about something related to that. It is not new, ever since I started using Guru, I get the same thing. But part of my McAfee includes a 'SiteAdvisor'. This is active at all times and monitors any website I visit. It will notify me of possible problems from the site like email spam, adware, etc. Guru gives me a red (worst - either green, yellow, or red) notice. Says:

"When we browsed this site, it made unathorized changes to our test PC."

When I view the info about it, it doesn't seem too be bad, and probably outdated. Mostly dealing with cookies and popups. Since I have not had any problems from Guru (until the lock ups) I ignored it. But it may be something that Guru will want to look into as not all people will be ignoring the warning provided from McAfee.

In regards to McAfee, I have contacted them several times now asking for a rescan. Each time I'm told this will be happening and it's in que and nothing has happened yet.

Kattar · Aug 07, 2009, 06:41 PM // 18:41

Quote:

Originally Posted by Tarun

It may be worth trying Firefox temporarily to see if it's limited to IE.

This. I have several browsers on my system purely for diagnostic purposes like website testing. Might be something to look into.

MagmaRed · Aug 08, 2009, 12:53 AM // 00:53

/sigh

Ok, before I do, I have some questions about Firefox.

1) If I download and install it, how much space will I need on my harddrive?
2) How easy will it be to remove it if I find IE is not the problem and want to revert back?
3) How many versions are there, and which should I be using for this?
4) Will I need to do anything to IE before, during, or after getting Firefox?

I don't plan on keeping it, just using it to test. How much trouble will it be for me to get it, test, and then remove it? I am not a tech savvy person, but I'm not a newb either. I know enough to be dangerous to my own computer if that makes any sense to you. lol

Basically, I am asking for a mini walk through of getting and using Firefox to test this lock up problem out.

Faer · Aug 08, 2009, 01:22 AM // 01:22

1) Less than 50MB.
2) As easy as clicking "Uninstall".
3) Lots, just grab the latest.
4) No, you will not.

Just download, install, test, uninstall if you don't want to keep it. The entire process will take you less than fifteen minutes and is quite painless.

Kamatsu · Aug 08, 2009, 07:41 AM // 07:41

1) if it helps, my FF directory is 26.8MB big.
2) As Theocrat said, once installed to uninstall just go to Add/Remove Programs (if XP) or Programs&Features (if Vista) and click "uninstall".
3) Just grab the latest, which is 3.5.2
4) nope

When you cleared IE's cache .. did you also:

- Ensure the Security and Privacy sections were set to default?
- Cleared SSL Cache/State? (on Content tab)
- Restore Advanced settings on the Advanced tab?

You can also try the following, although I'm not sure if they will help at all with this issue:

- Winsock Reset

To do this, open your Command Prompt .. by going Start -> All Programs -> Accessories -> Command Prompt

In the DOS box, type: netsh winsock reset

If your in Vista, do the following as well: netsh int ip reset

- Ipconfig flush

While having DOS box open, type: ipconfig /flushdns
and then : ipconfig /registerdns

(I should probably read over the links Tarun posted .. what I've suggested is likely to be there.. LOL)

-------------------

Regarding installing firefox:

1 - go to the following web site:

http://www.mozilla.com/en-US/firefox...rom=getfirefox

click the link on the right which says "Download Now - Free"

Download it to somewhere on your HD

2. Run the install file, let it install at the default directory.

3. Once installed, open FireFox and then goto Guru and browse without logging in.

4. Log into your Guru account and browse around..

5. Once satisfied that the issue is with IE or not.. you can close out of firefox..

6. Then goto Control Panel and open Add & Remove Programs or Programs & Features (depending on whether XP or Vista).. select Mozilla Firefox and click Uninstall/Remove.. and let the uninstaller remove Firefox for you.

-------------------------------

One thing you can do if you feel it's an IE problem is to uninstall IE8 and then re-install it. This can resolve some issues (IE7 had some known issue's where it would not be able to browse sites or had issue's with sites and had to be re-installed to work).

To do this, open Add & Remove Programs or Programs and Features.. locate "windows Internet Explorer 8", select it and Uninstall/remove it.

Once removed, reboot the computer.. then you'll need to re-install..

to re-install, just go to Windows Update (should have a link to it via Start .. or Start -> All Programs) .. and you should have the install for IE8 there..

The only concern for this.. I'm not sure what happens regarding any security updates that have been installed for IE8 when this is done (I've never had to personally uninstall & re-install either IE7 or IE8.. and people I've advised to re-install.. have never reported problems regarding security patch's afterwards...)

FlareStorm · Aug 11, 2009, 09:50 AM // 09:50

Quote:

Originally Posted by MagmaRed

I don't plan on keeping it, just using it to test. How much trouble will it be for me to get it, test, and then remove it? I am not a tech savvy person, but I'm not a newb either. I know enough to be dangerous to my own computer if that makes any sense to you. lol

FireFox is completely clean, does not interfere with anything on your computer, and is easy to install/uninstall. It is was made by people who care about that stuff, after the IE 6/Netscape wars that mucked up everyone's computer. Installing it and just letting it sit there will do no harm to your computer, other than taking up ~30 mb.

The reason why we all say try it is that its so basic. If your problem persists in Firefox, theres a deeper problem (like a virus or something)

Anyways, I suspect its McAffee (it usually is). You can test this via booting in safe mode and check if the problem persists. If it doesnt, its something thats booting up with you or IE.

I don't know Vista well so I'll let someone else explain Vista safe mode

MagmaRed · Aug 12, 2009, 04:07 AM // 04:07

Well, I have not done anything since my last post. I didn't download Firefox, or any other programs. However, I have not seen any lockups since 2 days ago. I have expected to see some in the time I have been on the site, but nothing has happened. Not sure if I have just been lucky with the length of time allowed, or if something else changed. I have not run any other programs, added any other software, or removed any other software. Yet it SEEMS as though the problem is gone.

Perhaps Inde can say it was/wasn't based on Guru if any changes to the site/advertising were changed. Still don't know what caused it, or why it seems to have stopped. Hoping it is gone for good, but since I don't know the source, can't say it is gone for good.

MagmaRed · Aug 13, 2009, 08:33 PM // 20:33

Well, I don't have a clue what changed, but I have not had any lock-ups for 3 days now. I did not install new software, did not remove any software, and did not change any settings. I guess I am bumping this for the Guru experts to look into what may have changed on the site within the last few days to stop my lock-ups. If you say nothing can be discovered, then lock this up. Otherwise, I'd like to be assured that something is found to prevent future problems like this.

Since I don't know what caused it, and I haven't done anything but run the programs Tarun asked me to run, I don't know that it is gone for good. And since the lock-ups occurred even after running Tarun's stuff, I don't think they fixed the problem for me. Anyone have thoughts?

Elder III · Aug 14, 2009, 01:11 AM // 01:11

My thoughts would be that you had a McAfee update in the last 2-3 days and that took care of your problem.... I don't want to post just to bash McAfee, but take my friendly advice and ditch it when your subscription next runs out. The following 3 are all FREE and are all BETTER:

Avast
Avira
AVG

imo in that order too