"Error on page"

[Steve]

I removed all programs from task tray. I uninstalled IE8 and rebooted twice.

When I ran the IE8 installation from the saved file on desk top I ran into a

problem. After about 5 mins of running I got the following:

SVCHOST.EXE Application Error

The instruction at "0x500f00ed" referenced memory at "0x00000138". The

memory could not be "read".

Click OK to terminate the program

Click CANCEL to debug program



When I clicked OK to terminate the program I then clicked OK to send error

report to MSN. "Preparing error report" started but did not proceed to the

next steps. I then canceled the error reporting and the system went back to

the downloading of IE8 but the systems did not seem to be doing anything. I

tried to end this process from Windows Task Manager but the program would not

end. Therefore, I had to turn the PC at the switch. I tried the downloading

of IE8 a few times and got the same results. Right now I am running with IE7.

Any other suggestions?



Thanks

Steve



"PA Bear [MS MVP]" wrote:



> @Steve: If you see this reply, post a reply to it.

>

> A1. Uninstall "Windows Internet Explorer 8" via Add/Remove Programs &

> reboot. Then download/install the non-customized version. My personal

> recommendations include:

>

> => Install IE8 manually, not via Windows Update/Automatic Updates!! =>

> http://www.microsoft.com/windows/internet-explorer/worldwide-sites.aspx

>

> NB WinXP users: Save the installer to your desktop, do not Run it. When

> you're prepared to install IE8, double-click on the saved file.

>

> NB Vista users: Save the installer to your desktop, do not Run it. When

> you're prepared to install IE8, right-click on the saved file and select Run

> as Administator.

>

> => Uninstall all third-party toolbars (e.g., Google; Yahoo; Windows Live)

> and third-party Windows Themes before installing IE8.

>

> => Close all open applications (i.e., anything with a taskbar icon) before

> installing or uninstalling IE8.

>

> => I would strongly recommend disabling your anti-virus application and any

> anti-spyware application's "system protections" (other than Defender's)

> before installing (or uninstalling) an IE upgrade. If you're running a

> third-party firewall, I would recommend disabling it and then enabling the

> Windows Firewall before installing (or uninstalling) an IE upgrade.

>

> NB WinXP users=> Reboot twice after installing or uninstalling IE8, then go

> to http://windowsupdate.microsoft.com | Select CUSTOM and scan | Install any

> Critical Security Updates offered (i.e., KB976325). If a Root Certificates

> update is listed in the Optional Updates category, install it to take full

> advantage of IE's enhanced security.

>

> NB Vista users=> Reboot twice after installing or uninstalling IE8, then

> check-in at Windows Update and install any critical security updates

> offered.

>

> => For best chance of success with IE8, make certain that your anti-virus

> application version, any anti-spyware applications (other than Defender),

> and your third-party firewall (if any) are supported in IE8 before you

> decide install it.

>

> A2. Towards the very bottom of http://www.enhanceie.com/ie/troubleshoot.asp

> is a section entitled "Overlong headers...". At the end of that section is

> a script you can download & run to remove .NET1.0, 1.1, 2.0, and 3.0

> versions from your UA string.

>

>

> Steve wrote:

> > I not specifically request the customized version. How can I uninstall

> > what

> > I have and install the correct version. I did look at

> > http://www.enhanceie.com/ie/troubleshoot.asp but did not find what the

> > document was looking for. However, I found the following when I searched

> > the

> > registry forâ€ÂMOZILLA/4.0â€Â:

> > 1. HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> > SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 8.0;WIN32)

> > 2. HKEY_USERS\.DEFAULT\ SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> > SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

> > 3. HKEY_USERS\S-1-5-18\ SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> > SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

> > 4. HKEY_USERS\S-1-5-19\ SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> > SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

> > 5. HKEY_USERS\S-1-5-20\ SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> > SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

> > 6. HKEY_USERS\S-1-5-21-282476226-493277847-3694134414-1008\ MOZILLA/4.0

> > (COMPATIBLE; MSIE 8.0;WIN32)

> >

> >

> > ANOTHER ERROR: when I went to MS INTERNET home page I got the following

> > error:

> >

> > Webpage error details

> >

> > User Agent: Empty (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET

> > CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR

> > 3.5.30729; msn OptimizedIE8;ENUS)

> > Timestamp: Fri, 29 Jan 2010 14:35:20 UTC

> >

> >

> > Message: Invalid character

> > Line: 1

> > Char: 7

> > Code: 0

> > URI:

> > http://amch.questionmarket.com/adsc/d696181/76/698055/adscout.php?ord=2032746655

>

> .

>

 

[PA Bear [MS MVP]]

As I suspected from the start, you are seeing the effects of a hijackware

infection.



NB: If you had no anti-virus application installed or the subscription had

expired when the machine first got infected and/or your subscription has

since expired and/or the machine's not been kept fully-patched at Windows

Update, don't waste your time with any of the below: Format & reinstall

Windows. A Repair Install will NOT help!



Microsoft PCSafety provides home users (only) with no-charge support in

dealing with malware infections such as viruses, spyware (including unwanted

software), and adware.

https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1



Also available via...



Consumer Security Support home page

https://consumersecuritysupport.microsoft.com/



Otherwise...



1. See if you can download/run the MSRT manually:

http://www.microsoft.com/security/malwareremove/default.mspx



NB: Run the FULL scan, not the QUICK scan! You may need to download the

MSRT on a non-infected machine, then transfer MRT.EXE to the infected

machine and rename it to SCAN.EXE before running it.



2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)

in Safe Mode with Networking, if need be:

http://onecare.live.com/site/en-us/center/howsafe.htm



2b. Vista or Win7=> Run this scan instead:

http://onecare.live.com/site/en-us/center/whatsnew.htm



3. Now run a thorough check for hijackware, including posting requested logs

in an appropriate forum, not here.



Checking for/Help with Hijackware:

• http://mvps.org/winhelp2002/unwanted.htm

• http://inetexplorer.mvps.org/tshoot.html

• http://www.mvps.org/sramesh2k/Malware_Defence.htm

• http://www.elephantboycomputers.com/page2.html#Removing_Malware



Chances are you will need to seek expert assistance in

http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,

http://www.spywarewarrior.com/viewforum.php?f=5,

http://www.dslreports.com/forum/cleanup,

http://www.bluetack.co.uk/forums/index.php,

http://aumha.net/viewforum.php?f=30 or other appropriate forums.



If these procedures look too complex - and there is no shame in admitting

this isn't your cup of tea - take the machine to a local, reputable and

independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

--

~PA Bear





Steve wrote:

> I removed all programs from task tray. I uninstalled IE8 and rebooted

> twice.

> When I ran the IE8 installation from the saved file on desk top I ran into

> a

> problem. After about 5 mins of running I got the following:

> SVCHOST.EXE Application Error

> The instruction at "0x500f00ed" referenced memory at "0x00000138". The

> memory could not be "read".

> Click OK to terminate the program

> Click CANCEL to debug program

>

> When I clicked OK to terminate the program I then clicked OK to send error

> report to MSN. "Preparing error report" started but did not proceed to the

> next steps. I then canceled the error reporting and the system went back

> to

> the downloading of IE8 but the systems did not seem to be doing anything.

> I

> tried to end this process from Windows Task Manager but the program would

> not end. Therefore, I had to turn the PC at the switch. I tried the

> downloading of IE8 a few times and got the same results. Right now I am

> running with IE7. Any other suggestions?

>

> Thanks

> Steve

>

> "PA Bear [MS MVP]" wrote:

>

>> @Steve: If you see this reply, post a reply to it.

>>

>> A1. Uninstall "Windows Internet Explorer 8" via Add/Remove Programs &

>> reboot. Then download/install the non-customized version. My personal

>> recommendations include:

>>

>> => Install IE8 manually, not via Windows Update/Automatic Updates!! =>

>> http://www.microsoft.com/windows/internet-explorer/worldwide-sites.aspx

>>

>> NB WinXP users: Save the installer to your desktop, do not Run it. When

>> you're prepared to install IE8, double-click on the saved file.

>>

>> NB Vista users: Save the installer to your desktop, do not Run it. When

>> you're prepared to install IE8, right-click on the saved file and select

>> Run as Administator.

>>

>> => Uninstall all third-party toolbars (e.g., Google; Yahoo; Windows Live)

>> and third-party Windows Themes before installing IE8.

>>

>> => Close all open applications (i.e., anything with a taskbar icon)

>> before

>> installing or uninstalling IE8.

>>

>> => I would strongly recommend disabling your anti-virus application and

>> any

>> anti-spyware application's "system protections" (other than Defender's)

>> before installing (or uninstalling) an IE upgrade. If you're running a

>> third-party firewall, I would recommend disabling it and then enabling

>> the

>> Windows Firewall before installing (or uninstalling) an IE upgrade.

>>

>> NB WinXP users=> Reboot twice after installing or uninstalling IE8, then

>> go

>> to http://windowsupdate.microsoft.com | Select CUSTOM and scan | Install

>> any Critical Security Updates offered (i.e., KB976325). If a Root

>> Certificates update is listed in the Optional Updates category, install

>> it

>> to take full advantage of IE's enhanced security.

>>

>> NB Vista users=> Reboot twice after installing or uninstalling IE8, then

>> check-in at Windows Update and install any critical security updates

>> offered.

>>

>> => For best chance of success with IE8, make certain that your anti-virus

>> application version, any anti-spyware applications (other than Defender),

>> and your third-party firewall (if any) are supported in IE8 before you

>> decide install it.

>>

>> A2. Towards the very bottom of

>> http://www.enhanceie.com/ie/troubleshoot.asp

>> is a section entitled "Overlong headers...". At the end of that section

>> is

>> a script you can download & run to remove .NET1.0, 1.1, 2.0, and 3.0

>> versions from your UA string.

>>

>>

>> Steve wrote:

>>> I not specifically request the customized version. How can I uninstall

>>> what

>>> I have and install the correct version. I did look at

>>> http://www.enhanceie.com/ie/troubleshoot.asp but did not find what the

>>> document was looking for. However, I found the following when I searched

>>> the

>>> registry forâ€ÂMOZILLA/4.0â€Â:

>>> 1. HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 8.0;WIN32)

>>> 2. HKEY_USERS\.DEFAULT\

>>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

>>> 3. HKEY_USERS\S-1-5-18\

>>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

>>> 4. HKEY_USERS\S-1-5-19\

>>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

>>> 5. HKEY_USERS\S-1-5-20\

>>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

>>> 6. HKEY_USERS\S-1-5-21-282476226-493277847-3694134414-1008\ MOZILLA/4.0

>>> (COMPATIBLE; MSIE 8.0;WIN32)

>>>

>>>

>>> ANOTHER ERROR: when I went to MS INTERNET home page I got the following

>>> error:

>>>

>>> Webpage error details

>>>

>>> User Agent: Empty (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0;

>>> .NET

>>> CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR

>>> 3.5.30729; msn OptimizedIE8;ENUS)

>>> Timestamp: Fri, 29 Jan 2010 14:35:20 UTC

>>>

>>>

>>> Message: Invalid character

>>> Line: 1

>>> Char: 7

>>> Code: 0

>>> URI:

>>> http://amch.questionmarket.com/adsc/d696181/76/698055/adscout.php?ord=2032746655

>>

>> .

 

[Steve]

I have talked with Dell (the PC I have) and they said they will help me

reformat my C: and reload Windows after I have copied appropriate files to a

USB drive that I purchased. One question: Since you believe I have some

hijackware infection are there any precautions I should take when copying

files to the USB drive or files that I should NOT copy? How can I insure the

files I copy to the USB drive do not contain the hijackware infection(s)?

Just to let you know I have been running with Norton since I purchased my PC

back in 2005 and it never has never expired nor do I recall any time that the

PC ran without Norton running. However, considering the capabilities of the

hijackers I could not imagine when or how my PC got infected.



"PA Bear [MS MVP]" wrote:



> As I suspected from the start, you are seeing the effects of a hijackware

> infection.

>

> NB: If you had no anti-virus application installed or the subscription had

> expired when the machine first got infected and/or your subscription has

> since expired and/or the machine's not been kept fully-patched at Windows

> Update, don't waste your time with any of the below: Format & reinstall

> Windows. A Repair Install will NOT help!

>

> Microsoft PCSafety provides home users (only) with no-charge support in

> dealing with malware infections such as viruses, spyware (including unwanted

> software), and adware.

> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

>

> Also available via...

>

> Consumer Security Support home page

> https://consumersecuritysupport.microsoft.com/

>

> Otherwise...

>

> 1. See if you can download/run the MSRT manually:

> http://www.microsoft.com/security/malwareremove/default.mspx

>

> NB: Run the FULL scan, not the QUICK scan! You may need to download the

> MSRT on a non-infected machine, then transfer MRT.EXE to the infected

> machine and rename it to SCAN.EXE before running it.

>

> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)

> in Safe Mode with Networking, if need be:

> http://onecare.live.com/site/en-us/center/howsafe.htm

>

> 2b. Vista or Win7=> Run this scan instead:

> http://onecare.live.com/site/en-us/center/whatsnew.htm

>

> 3. Now run a thorough check for hijackware, including posting requested logs

> in an appropriate forum, not here.

>

> Checking for/Help with Hijackware:

> • http://mvps.org/winhelp2002/unwanted.htm

> • http://inetexplorer.mvps.org/tshoot.html

> • http://www.mvps.org/sramesh2k/Malware_Defence.htm

> • http://www.elephantboycomputers.com/page2.html#Removing_Malware

>

> Chances are you will need to seek expert assistance in

> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,

> http://www.spywarewarrior.com/viewforum.php?f=5,

> http://www.dslreports.com/forum/cleanup,

> http://www.bluetack.co.uk/forums/index.php,

> http://aumha.net/viewforum.php?f=30 or other appropriate forums.

>

> If these procedures look too complex - and there is no shame in admitting

> this isn't your cup of tea - take the machine to a local, reputable and

> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

> --

> ~PA Bear

>

>

> Steve wrote:

> > I removed all programs from task tray. I uninstalled IE8 and rebooted

> > twice.

> > When I ran the IE8 installation from the saved file on desk top I ran into

> > a

> > problem. After about 5 mins of running I got the following:

> > SVCHOST.EXE Application Error

> > The instruction at "0x500f00ed" referenced memory at "0x00000138". The

> > memory could not be "read".

> > Click OK to terminate the program

> > Click CANCEL to debug program

> >

> > When I clicked OK to terminate the program I then clicked OK to send error

> > report to MSN. "Preparing error report" started but did not proceed to the

> > next steps. I then canceled the error reporting and the system went back

> > to

> > the downloading of IE8 but the systems did not seem to be doing anything.

> > I

> > tried to end this process from Windows Task Manager but the program would

> > not end. Therefore, I had to turn the PC at the switch. I tried the

> > downloading of IE8 a few times and got the same results. Right now I am

> > running with IE7. Any other suggestions?

> >

> > Thanks

> > Steve

> >

> > "PA Bear [MS MVP]" wrote:

> >

> >> @Steve: If you see this reply, post a reply to it.

> >>

> >> A1. Uninstall "Windows Internet Explorer 8" via Add/Remove Programs &

> >> reboot. Then download/install the non-customized version. My personal

> >> recommendations include:

> >>

> >> => Install IE8 manually, not via Windows Update/Automatic Updates!! =>

> >> http://www.microsoft.com/windows/internet-explorer/worldwide-sites.aspx

> >>

> >> NB WinXP users: Save the installer to your desktop, do not Run it. When

> >> you're prepared to install IE8, double-click on the saved file.

> >>

> >> NB Vista users: Save the installer to your desktop, do not Run it. When

> >> you're prepared to install IE8, right-click on the saved file and select

> >> Run as Administator.

> >>

> >> => Uninstall all third-party toolbars (e.g., Google; Yahoo; Windows Live)

> >> and third-party Windows Themes before installing IE8.

> >>

> >> => Close all open applications (i.e., anything with a taskbar icon)

> >> before

> >> installing or uninstalling IE8.

> >>

> >> => I would strongly recommend disabling your anti-virus application and

> >> any

> >> anti-spyware application's "system protections" (other than Defender's)

> >> before installing (or uninstalling) an IE upgrade. If you're running a

> >> third-party firewall, I would recommend disabling it and then enabling

> >> the

> >> Windows Firewall before installing (or uninstalling) an IE upgrade.

> >>

> >> NB WinXP users=> Reboot twice after installing or uninstalling IE8, then

> >> go

> >> to http://windowsupdate.microsoft.com | Select CUSTOM and scan | Install

> >> any Critical Security Updates offered (i.e., KB976325). If a Root

> >> Certificates update is listed in the Optional Updates category, install

> >> it

> >> to take full advantage of IE's enhanced security.

> >>

> >> NB Vista users=> Reboot twice after installing or uninstalling IE8, then

> >> check-in at Windows Update and install any critical security updates

> >> offered.

> >>

> >> => For best chance of success with IE8, make certain that your anti-virus

> >> application version, any anti-spyware applications (other than Defender),

> >> and your third-party firewall (if any) are supported in IE8 before you

> >> decide install it.

> >>

> >> A2. Towards the very bottom of

> >> http://www.enhanceie.com/ie/troubleshoot.asp

> >> is a section entitled "Overlong headers...". At the end of that section

> >> is

> >> a script you can download & run to remove .NET1.0, 1.1, 2.0, and 3.0

> >> versions from your UA string.

> >>

> >>

> >> Steve wrote:

> >>> I not specifically request the customized version. How can I uninstall

> >>> what

> >>> I have and install the correct version. I did look at

> >>> http://www.enhanceie.com/ie/troubleshoot.asp but did not find what the

> >>> document was looking for. However, I found the following when I searched

> >>> the

> >>> registry forâ€ÂMOZILLA/4.0â€Â:

> >>> 1. HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> >>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 8.0;WIN32)

> >>> 2. HKEY_USERS\.DEFAULT\

> >>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> >>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

> >>> 3. HKEY_USERS\S-1-5-18\

> >>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> >>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

> >>> 4. HKEY_USERS\S-1-5-19\

> >>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> >>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

> >>> 5. HKEY_USERS\S-1-5-20\

> >>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

> >>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

> >>> 6. HKEY_USERS\S-1-5-21-282476226-493277847-3694134414-1008\ MOZILLA/4.0

> >>> (COMPATIBLE; MSIE 8.0;WIN32)

> >>>

> >>>

> >>> ANOTHER ERROR: when I went to MS INTERNET home page I got the following

> >>> error:

> >>>

> >>> Webpage error details

> >>>

> >>> User Agent: Empty (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0;

> >>> .NET

> >>> CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR

> >>> 3.5.30729; msn OptimizedIE8;ENUS)

> >>> Timestamp: Fri, 29 Jan 2010 14:35:20 UTC

> >>>

> >>>

> >>> Message: Invalid character

> >>> Line: 1

> >>> Char: 7

> >>> Code: 0

> >>> URI:

> >>> http://amch.questionmarket.com/adsc/d696181/76/698055/adscout.php?ord=2032746655

> >>

> >> .

>

> .

>

 

[PA Bear [MS MVP]]

Do not place any of your backed up data on any computer until you're run

multiple anti-virus and anti-spyware scans on the data while it resides on

the flash drive. And note that the flash drive could become infected simply

by being connected to the infested computer (which as why I'd recommend

putting the back-up on CD or DVD instead).





Steve wrote:

> I have talked with Dell (the PC I have) and they said they will help me

> reformat my C: and reload Windows after I have copied appropriate files to

> a

> USB drive that I purchased. One question: Since you believe I have some

> hijackware infection are there any precautions I should take when copying

> files to the USB drive or files that I should NOT copy? How can I insure

> the

> files I copy to the USB drive do not contain the hijackware infection(s)?

> Just to let you know I have been running with Norton since I purchased my

> PC

> back in 2005 and it never has never expired nor do I recall any time that

> the PC ran without Norton running. However, considering the capabilities

> of

> the hijackers I could not imagine when or how my PC got infected.

>

> "PA Bear [MS MVP]" wrote:

>

>> As I suspected from the start, you are seeing the effects of a hijackware

>> infection.

>>

>> NB: If you had no anti-virus application installed or the subscription

>> had

>> expired when the machine first got infected and/or your subscription

>> has

>> since expired and/or the machine's not been kept fully-patched at Windows

>> Update, don't waste your time with any of the below: Format & reinstall

>> Windows. A Repair Install will NOT help!

>>

>> Microsoft PCSafety provides home users (only) with no-charge support in

>> dealing with malware infections such as viruses, spyware (including

>> unwanted software), and adware.

>> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

>>

>> Also available via...

>>

>> Consumer Security Support home page

>> https://consumersecuritysupport.microsoft.com/

>>

>> Otherwise...

>>

>> 1. See if you can download/run the MSRT manually:

>> http://www.microsoft.com/security/malwareremove/default.mspx

>>

>> NB: Run the FULL scan, not the QUICK scan! You may need to download the

>> MSRT on a non-infected machine, then transfer MRT.EXE to the infected

>> machine and rename it to SCAN.EXE before running it.

>>

>> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan

>> (only!)

>> in Safe Mode with Networking, if need be:

>> http://onecare.live.com/site/en-us/center/howsafe.htm

>>

>> 2b. Vista or Win7=> Run this scan instead:

>> http://onecare.live.com/site/en-us/center/whatsnew.htm

>>

>> 3. Now run a thorough check for hijackware, including posting requested

>> logs in an appropriate forum, not here.

>>

>> Checking for/Help with Hijackware:

>> • http://mvps.org/winhelp2002/unwanted.htm

>> • http://inetexplorer.mvps.org/tshoot.html

>> • http://www.mvps.org/sramesh2k/Malware_Defence.htm

>> • http://www.elephantboycomputers.com/page2.html#Removing_Malware

>>

>> Chances are you will need to seek expert assistance in

>> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,

>> http://www.spywarewarrior.com/viewforum.php?f=5,

>> http://www.dslreports.com/forum/cleanup,

>> http://www.bluetack.co.uk/forums/index.php,

>> http://aumha.net/viewforum.php?f=30 or other appropriate forums.

>>

>> If these procedures look too complex - and there is no shame in admitting

>> this isn't your cup of tea - take the machine to a local, reputable and

>> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair

>> shop.

>> --

>> ~PA Bear

>>

>>

>> Steve wrote:

>>> I removed all programs from task tray. I uninstalled IE8 and rebooted

>>> twice.

>>> When I ran the IE8 installation from the saved file on desk top I ran

>>> into

>>> a

>>> problem. After about 5 mins of running I got the following:

>>> SVCHOST.EXE Application Error

>>> The instruction at "0x500f00ed" referenced memory at "0x00000138". The

>>> memory could not be "read".

>>> Click OK to terminate the program

>>> Click CANCEL to debug program

>>>

>>> When I clicked OK to terminate the program I then clicked OK to send

>>> error

>>> report to MSN. "Preparing error report" started but did not proceed to

>>> the

>>> next steps. I then canceled the error reporting and the system went back

>>> to

>>> the downloading of IE8 but the systems did not seem to be doing

>>> anything.

>>> I

>>> tried to end this process from Windows Task Manager but the program

>>> would

>>> not end. Therefore, I had to turn the PC at the switch. I tried the

>>> downloading of IE8 a few times and got the same results. Right now I am

>>> running with IE7. Any other suggestions?

>>>

>>> Thanks

>>> Steve

>>>

>>> "PA Bear [MS MVP]" wrote:

>>>

>>>> @Steve: If you see this reply, post a reply to it.

>>>>

>>>> A1. Uninstall "Windows Internet Explorer 8" via Add/Remove Programs &

>>>> reboot. Then download/install the non-customized version. My personal

>>>> recommendations include:

>>>>

>>>> => Install IE8 manually, not via Windows Update/Automatic Updates!! =>

>>>> http://www.microsoft.com/windows/internet-explorer/worldwide-sites.aspx

>>>>

>>>> NB WinXP users: Save the installer to your desktop, do not Run it.

>>>> When

>>>> you're prepared to install IE8, double-click on the saved file.

>>>>

>>>> NB Vista users: Save the installer to your desktop, do not Run it.

>>>> When

>>>> you're prepared to install IE8, right-click on the saved file and

>>>> select

>>>> Run as Administator.

>>>>

>>>> => Uninstall all third-party toolbars (e.g., Google; Yahoo; Windows

>>>> Live)

>>>> and third-party Windows Themes before installing IE8.

>>>>

>>>> => Close all open applications (i.e., anything with a taskbar icon)

>>>> before

>>>> installing or uninstalling IE8.

>>>>

>>>> => I would strongly recommend disabling your anti-virus application and

>>>> any

>>>> anti-spyware application's "system protections" (other than Defender's)

>>>> before installing (or uninstalling) an IE upgrade. If you're running a

>>>> third-party firewall, I would recommend disabling it and then enabling

>>>> the

>>>> Windows Firewall before installing (or uninstalling) an IE upgrade.

>>>>

>>>> NB WinXP users=> Reboot twice after installing or uninstalling IE8,

>>>> then

>>>> go

>>>> to http://windowsupdate.microsoft.com | Select CUSTOM and scan |

>>>> Install

>>>> any Critical Security Updates offered (i.e., KB976325). If a Root

>>>> Certificates update is listed in the Optional Updates category, install

>>>> it

>>>> to take full advantage of IE's enhanced security.

>>>>

>>>> NB Vista users=> Reboot twice after installing or uninstalling IE8,

>>>> then

>>>> check-in at Windows Update and install any critical security updates

>>>> offered.

>>>>

>>>> => For best chance of success with IE8, make certain that your

>>>> anti-virus

>>>> application version, any anti-spyware applications (other than

>>>> Defender),

>>>> and your third-party firewall (if any) are supported in IE8 before you

>>>> decide install it.

>>>>

>>>> A2. Towards the very bottom of

>>>> http://www.enhanceie.com/ie/troubleshoot.asp

>>>> is a section entitled "Overlong headers...". At the end of that

>>>> section

>>>> is

>>>> a script you can download & run to remove .NET1.0, 1.1, 2.0, and 3.0

>>>> versions from your UA string.

>>>>

>>>>

>>>> Steve wrote:

>>>>> I not specifically request the customized version. How can I uninstall

>>>>> what

>>>>> I have and install the correct version. I did look at

>>>>> http://www.enhanceie.com/ie/troubleshoot.asp but did not find what the

>>>>> document was looking for. However, I found the following when I

>>>>> searched

>>>>> the

>>>>> registry forâ€ÂMOZILLA/4.0â€Â:

>>>>> 1.

>>>>> HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 8.0;WIN32)

>>>>> 2. HKEY_USERS\.DEFAULT\

>>>>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

>>>>> 3. HKEY_USERS\S-1-5-18\

>>>>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

>>>>> 4. HKEY_USERS\S-1-5-19\

>>>>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

>>>>> 5. HKEY_USERS\S-1-5-20\

>>>>> SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET

>>>>> SETTINGS MOZILLA/4.0 (COMPATIBLE; MSIE 6.0;WIN32)

>>>>> 6. HKEY_USERS\S-1-5-21-282476226-493277847-3694134414-1008\

>>>>> MOZILLA/4.0

>>>>> (COMPATIBLE; MSIE 8.0;WIN32)

>>>>>

>>>>>

>>>>> ANOTHER ERROR: when I went to MS INTERNET home page I got the

>>>>> following

>>>>> error:

>>>>>

>>>>> Webpage error details

>>>>>

>>>>> User Agent: Empty (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0;

>>>>> .NET

>>>>> CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR

>>>>> 3.5.30729; msn OptimizedIE8;ENUS)

>>>>> Timestamp: Fri, 29 Jan 2010 14:35:20 UTC

>>>>>

>>>>>

>>>>> Message: Invalid character

>>>>> Line: 1

>>>>> Char: 7

>>>>> Code: 0

>>>>> URI:

>>>>> http://amch.questionmarket.com/adsc/d696181/76/698055/adscout.php?ord=2032746655

>>>>

>>>> .

>>

>> .

 

[Steve]

Just to let you know that I worked with Dell and we did:

1. Backed up files to USB disk

2. Ran scans of files on C: and found rogue problems and removed them

3. Re-installed Windows XP Pro but did not reformat the C:

4. Ran scans of the USB files, found rogue problems and removed them

5. The following day I re-ran the scan of C: and found rogue problem again,

called Dell and he stated that the rogue problem existed in the check

point(s). He showed me how to remove existing check points and how to create

new check points. Once this was done ran another scan and did not find any

more rogue problems. Ran additional scans a few days later and did not find

any problems.

6. I now can get to MS Window Update (which the problem started Oct 2008)

from the MS Directory and do not get any problems with "error on page."



HOWEVER----

1. In trying to get to the Community section of Microsoft.com discussions

for “Error on Page†(the discussions we have been having)(

http://www.microsoft.com/communitie...839a15bef262&lang=en&cr=US&sloc=en-us&m=1&p=1)

, I had been getting and still get an error when I try to sign in. I enter

my email address (it does not supply my email address even though I selected

that it be retained from a previous session) and password. What I get back

is:



Internet Explorer cannot display the webpage



What you can try:



It appears you are connected to the Internet, but you might want to try to

reconnect to the Internet.





Retype the address.





Go back to the previous page.





Most likely causes:

• You are not connected to the Internet.

• The website is encountering problems.

• There might be a typing error in the address.



More information







Then I go back to a recent page in history which points to where I first

tried to sign into the Community section of Microsoft.com discussions. The

page presented is the first page of the “Error on Page†discussion we have

been having. The interesting thing is now in the upper right area of the page

it displays “Sign Out†and I can proceed to communicate as normal.

2. I do not get any notification of your posting to my questions even though

I checked "Notify me of replies"



I do not know if you can help here or do I need to go somewhere else in the

Community?



I do thank you for your help.

 

[PA Bear [MS MVP]]

Entire thread history (including the original thread you hijacked on 17

January):

http://groups.google.com/group/micr...er.general/browse_frm/thread/d77ea43c656d2a3d



Click on the following link to access the newsgroup in your default

newsreader instead of the clunky web-interface:



news://msnews.microsoft.com/microsoft.public.internetexplorer.general





Steve wrote:

> Just to let you know that I worked with Dell and we did:

> 1. Backed up files to USB disk

> 2. Ran scans of files on C: and found rogue problems and removed them

> 3. Re-installed Windows XP Pro but did not reformat the C:

> 4. Ran scans of the USB files, found rogue problems and removed them

> 5. The following day I re-ran the scan of C: and found rogue problem

> again,

> called Dell and he stated that the rogue problem existed in the check

> point(s). He showed me how to remove existing check points and how to

> create

> new check points. Once this was done ran another scan and did not find any

> more rogue problems. Ran additional scans a few days later and did not

> find

> any problems.

> 6. I now can get to MS Window Update (which the problem started Oct 2008)

> from the MS Directory and do not get any problems with "error on page."

>

> HOWEVER----

> 1. In trying to get to the Community section of Microsoft.com discussions

> for “Error on Page†(the discussions we have been having)(

> http://www.microsoft.com/communitie...839a15bef262&lang=en&cr=US&sloc=en-us&m=1&p=1)

> , I had been getting and still get an error when I try to sign in. I enter

> my email address (it does not supply my email address even though I

> selected

> that it be retained from a previous session) and password. What I get back

> is:

>

> Internet Explorer cannot display the webpage

>

> What you can try:

>

> It appears you are connected to the Internet, but you might want to try to

> reconnect to the Internet.

>

>

> Retype the address.

>

>

> Go back to the previous page.

>

>

> Most likely causes:

> • You are not connected to the Internet.

> • The website is encountering problems.

> • There might be a typing error in the address.

>

> More information

>

>

>

> Then I go back to a recent page in history which points to where I first

> tried to sign into the Community section of Microsoft.com discussions. The

> page presented is the first page of the “Error on Page†discussion we have

> been having. The interesting thing is now in the upper right area of the

> page it displays “Sign Out†and I can proceed to communicate as normal.

> 2. I do not get any notification of your posting to my questions even

> though

> I checked "Notify me of replies"

>

> I do not know if you can help here or do I need to go somewhere else in

> the

> Community?

>

> I do thank you for your help.

 

[Steve]

I do not understand your last response. Additional note: I am now using IE8



"PA Bear [MS MVP]" wrote:



> Entire thread history (including the original thread you hijacked on 17

> January):

> http://groups.google.com/group/micr...er.general/browse_frm/thread/d77ea43c656d2a3d

>

> Click on the following link to access the newsgroup in your default

> newsreader instead of the clunky web-interface:

>

> news://msnews.microsoft.com/microsoft.public.internetexplorer.general

>

>

> Steve wrote:

> > Just to let you know that I worked with Dell and we did:

> > 1. Backed up files to USB disk

> > 2. Ran scans of files on C: and found rogue problems and removed them

> > 3. Re-installed Windows XP Pro but did not reformat the C:

> > 4. Ran scans of the USB files, found rogue problems and removed them

> > 5. The following day I re-ran the scan of C: and found rogue problem

> > again,

> > called Dell and he stated that the rogue problem existed in the check

> > point(s). He showed me how to remove existing check points and how to

> > create

> > new check points. Once this was done ran another scan and did not find any

> > more rogue problems. Ran additional scans a few days later and did not

> > find

> > any problems.

> > 6. I now can get to MS Window Update (which the problem started Oct 2008)

> > from the MS Directory and do not get any problems with "error on page."

> >

> > HOWEVER----

> > 1. In trying to get to the Community section of Microsoft.com discussions

> > for “Error on Page†(the discussions we have been having)(

> > http://www.microsoft.com/communitie...839a15bef262&lang=en&cr=US&sloc=en-us&m=1&p=1)

> > , I had been getting and still get an error when I try to sign in. I enter

> > my email address (it does not supply my email address even though I

> > selected

> > that it be retained from a previous session) and password. What I get back

> > is:

> >

> > Internet Explorer cannot display the webpage

> >

> > What you can try:

> >

> > It appears you are connected to the Internet, but you might want to try to

> > reconnect to the Internet.

> >

> >

> > Retype the address.

> >

> >

> > Go back to the previous page.

> >

> >

> > Most likely causes:

> > • You are not connected to the Internet.

> > • The website is encountering problems.

> > • There might be a typing error in the address.

> >

> > More information

> >

> >

> >

> > Then I go back to a recent page in history which points to where I first

> > tried to sign into the Community section of Microsoft.com discussions. The

> > page presented is the first page of the “Error on Page†discussion we have

> > been having. The interesting thing is now in the upper right area of the

> > page it displays “Sign Out†and I can proceed to communicate as normal.

> > 2. I do not get any notification of your posting to my questions even

> > though

> > I checked "Notify me of replies"

> >

> > I do not know if you can help here or do I need to go somewhere else in

> > the

> > Community?

> >

> > I do thank you for your help.

>

> .

>