some websites think i'm not using firefox, acting strange

[allen]

i've tried to find help on this on firefox forums, but no solution, usually this forum helps me most anyhow.

this is potentially related to a virus that took a few days and a virus remover for it, and malwarebytes anti-malware to remove.

about since then, facebook chat thinks i'm using IE6, so that i can only and so does another forum i visit doesn't really function due to confused browser recognition.
i thought it was maybe a facebook error, but the forum administrator told me what i'm getting is what it looks like when someone visits with IE6. but then i'm having the same issue with IE7 as well... pretty confusing.

however, other sites seem to know what browser i'm using, and gmail and the labs, and greasemonkey script, still function.

this is what facebook chat tells me:
You're using Internet Explorer 6 to browse Facebook right now. To use the full version of Chat from within a regular Facebook window, please upgrade your browser.

i tried uninstalling ff, clearing as much personal data as i could, moving the profile folder w/ all my settings and attachments so they werent recognized, and i still had the same issues.

what i am using is firefox 3.0.5, and w/ 3.0.6 i still have the problem,
i tried firefox safe mode as well,
and i've tried resetting useragent in firefox about:config

any ideas?
thanks in advance.

[Marin85]

It´s probably a registry problem. Download CCleaner, but don´t use the reg cleaner feature right away. Let it scan the registry, then search through the results manually for keys pointing to FF or you think might be related to this problem. Then clean the suspects Also, I would do that after uninstalling FF.

Hope this helps

Marin

[killer]

That seems sound advice.

[allen]

i guess i forgot to mention i have already uninstalled ff, done ccleaner, and even manually deleted mozilla firefox files, and reinstalled ff,
thanks though,
any more ideas?

[Marin85]

Maybe done too much of CCleaner

Run a scan with TrendMicro HijackThis.

[allen]

Code: Select all

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:23:47 PM, on 2/22/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\System32\TPHDEXLG.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\TpShocks.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\WINDOWS\StartupMonitor.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\TPFanControl\TPFanControl.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\WINDOWS\system32\cidaemon.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\PWMUIAux.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Taskbar Shuffle\taskbarshuffle.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: ThinkVantage Password Manager - {F040E541-A427-4CF7-85D8-75E3E0F476C5} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - Global Startup: ColorVisionStartup.lnk = C:\Program Files\ColorVision\Utility\ColorVisionStartup.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: TPFanControl.lnk = C:\Program Files\TPFanControl\TPFanControl.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra 'Tools' menuitem: ThinkVantage Password Manager... - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O9 - Extra 'Tools' menuitem: &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com/welcome/thinkpad
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1234664086937
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: AwayNotify - C:\Program Files\Lenovo\AwayTask\AwayNotify.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c981dcebdd7b1e) (gupdate1c981dcebdd7b1e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pml Driver - HP - C:\WINDOWS\system32\HPHipm09.exe
O23 - Service: Power Manager DBC Service - Unknown owner - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - C:\WINDOWS\system32\PsaSrv.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\program files\lenovo\system update\suservice.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 10553 bytes

[Marin85]

The log looks to me clean. A side note: you have 2 spyware tools running simultaneously...

[allen]

i wouldn't imagine the hijack this would have something relating to my firefox program when i have all programs closed, do you want to see one with firefox open?

which 2 spywares? as far as i know i have eset active only.
the pc tools services i have set on manual, and do not show as started.

there must be another way to fix firefox?
i would try the uninstall process again if i knew for sure it'd work, it was a pain enought to lose and have to redownload my offline gmail and have the problem not fixed.

[Marin85]

i wouldn't imagine the hijack this would have something relating to my firefox program when i have all programs closed, do you want to see one with firefox open?

That´s a good idea worth a try (though I don´t really think it will show something). Actually I was looking for some residuals from the virus.

which 2 spywares? as far as i know i have eset active only.
the pc tools services i have set on manual, and do not show as started.

The service appears as running as well as Spybot S&D IE Protection. Maybe not all components of these both spyware tools run at the same time, but still...

there must be another way to fix firefox?
i would try the uninstall process again if i knew for sure it'd work, it was a pain enought to lose and have to redownload my offline gmail and have the problem not fixed.

Which version of FF do you use? Maybe trying another version (and then possibly updating) could solve the problem

Marin

[yak]

Have you checked firefox's user agent string? The malware could change it.

Enter "about:config" in the address bar and type "useragent" into the filter bar.

See what's the value of "general.useragent.extra.firefox". Mine shows "Firefox/3.0.6".

[rkawakami]

<snip>...
what i am using is firefox 3.0.5, and w/ 3.0.6 i still have the problem,
i tried firefox safe mode as well,
and i've tried resetting useragent in firefox about:config

Looks like the OP has already done this (quoted from the initial post).

edit: For anyone who wants to know what their browser is reporting, try this site: http://mybrowserinfo.com/

[allen]

ok this is strange, facebook chat is now working the way it used to, embedded, i haven't even done anything.

but before i realized that, i have a new problem, upon startup today, i'm getting freezes.
every couple minutes, nearly everything but the mouse freezes, firefox, notepad, whatever i'm using, the cpu drops to zero, sometimes the graph keeps moving, sometimes, not, the cpu then spikes to 100% after a minute of being frozen. ram stays the same throughout

i already did another ccleaner clean, and i keep my drives defragged often enough, this is a completely new problem, and it's taken me at least half hour to even make this post. my machine is just over 2 yrs old, i don't want to have to reformat the system.

please help!?!

Code: Select all

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:50:30 PM, on 2/24/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\System32\TPHDEXLG.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\TpShocks.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\WINDOWS\StartupMonitor.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\PWMUIAux.exe
C:\Program Files\TPFanControl\TPFanControl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: ThinkVantage Password Manager - {F040E541-A427-4CF7-85D8-75E3E0F476C5} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - Global Startup: ColorVisionStartup.lnk = C:\Program Files\ColorVision\Utility\ColorVisionStartup.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: TPFanControl.lnk = C:\Program Files\TPFanControl\TPFanControl.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra 'Tools' menuitem: ThinkVantage Password Manager... - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O9 - Extra 'Tools' menuitem: &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.4.2\gears.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com/welcome/thinkpad
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1234664086937
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: AwayNotify - C:\Program Files\Lenovo\AwayTask\AwayNotify.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c981dcebdd7b1e) (gupdate1c981dcebdd7b1e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pml Driver - HP - C:\WINDOWS\system32\HPHipm09.exe
O23 - Service: Power Manager DBC Service - Unknown owner - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - C:\WINDOWS\system32\PsaSrv.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\program files\lenovo\system update\suservice.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 10471 bytes

[allen]

i'm now running safe mode w/ networking, which seems to be not freezing every minute, although i'm worried because eset won't start in safe mode, so i'm internetting without virus protection...

could i have damaged the gpu with high temperatures? i use tpfancontrol, but when using gpu heavy applications, video or photoshop cs4, the gpu temp gets up to 91C...

EDITS:
now when i sign in normally, eventually everything will just freeze until i hold down the power button to shut down.
signing in guest account doesn't help.
only safe mode seems to be working out...
i've tried using the laptop by the open window, keeping temps very cool, and i've also taken apart the laptop and checked for signs of excess heat build up, as well as loose ram chips, all was fine, there wasn't even that much dust inside.

can anything be done?

i have to make a new post in the T60 forum now, it's been driving me crazy all day.

[Marin85]

Your HijachThis again seems to me pretty clean. A few thoughts:
1. Please stop cleaning the registry. When complex problems with unclear origin are present, cleaning the registry makes it only worse...
2. Try uninstalling Spybot and PC Tools, reboot, reinstall FF but without acquiring the old settings as you did before. My point is that these freezes could be caused by the active anti-spayware working in the background.
3. If this doesn´t help, run PC-Doctor (a few passes) to make sure your problem is not hardware-related.
4. Had you updated the system before this problem appeared?

Marin

[allen]

ok, i removed spybot, pc tools spyware doctor, all ultranav and all power manager, and tpfancontrol, because i recently updated them...
the reason i don't think it's a firefox issue, i have the issue without firefox even being open. also, when i did the clean install of firefox to begin with, i moved my ff settings folder, and cleared settings on the uninstall, i only added the settings back after i realized my initial problem was still there.

i'll try pc-doctor before trying ff...
it would be a serious pain in the [censored] to have to manually re add my firefox plugins, bookmarks, settings, etc.

[Marin85]

Actually, I don´t know why I mentioned FF (I guess I was thinking of your previous problem). My idea was that PC-Tools and Spybot could be causing the freezes of your system. BTW, uninstalling all those apps you mention, did it make things slightly better (or some of the problems gone)?

[allen]

if ff still could be the culprit, maybe i'll do it. But for now i'm trying pcdoctor.
Problem hasn't gotten better at all.
Pcdoctor is going to take forever to download now...

I also wanted to mention. I haven't been able to install the tvt scheduler cpu holds at 99% fix. From system update. I don't use the scheduler, and had it disabled in services, but even with it enabled it wouldn't download. It doesn't seem like my problem but who knows.

[Marin85]

Can you find out which processes make your cpu spike to 100%? Process Explorer might be helpful finding more about it. I should have thought of the cpu earlier when you mentioned it

[allen]

hmmm.... it may be eset nod32 av,
i saw it spike for a second coming out of a freeze, and it also doesnt run in safe mode when i don't have the problem... so far it's at least slightly better...
when i disable it in services, and kill the processes, the freezes... aren't here...

this forum is showing up, seemingly without a css, or whatever it is that gives the site style, fonts, colors, etc...

i have version 3.0.650 of eset nod32 av.
do i try to repair the installation?
or update to a newer version of it?

i've spent about 12 hours troubleshooting the problem, at what point would it have been smarter to just do a clean install?
is there way to "repair" a windows xp installation similarly to repairing other software installations?

thanks a bunch marin... waiting on your opinion for the next move...

and does this now mean i shouldn't keep spyware doctor and spybot s&d installed on my system?
i only installed them to deal with a previous virus...

[Marin85]

waiting no your opinion for the next move...

Yes, you can try repairing XP if you have an XP installation media. However, you are using Lenovo image of XP, so there is some chance that a few Lenovo apps get broken, especially the bigger and more complex ones like Rescue&Recovery and Client Security Solution, which could make things even worse than before depending on to what extent you use those apps... On the other hand, doing an XP repair might turn out to be the easiest way to fix these annoying problems. Also, I don´t remember if XP has the option of "attempting an automatic repair"...

Regarding NOD32, I think you definitely have to update the version (I don´t know if these updates come with the "normal" update process or one has to pay license for the newer versions...) at least to the latest that would be available within your license. Version updates solve compatibility problems and improve the AV engine. Older AV versions can sometimes be circumvented by malware despite having the most recent definitions.

If you think that NOD32 is causing the freezes, than you may try repairing its installation. If the problems persist, you may have to reinstall it or better update the version.

If you like Spyware Doctor and Spybot as a malware protection, certainly you can keep them. Instead of Spyware Doctor I would rather go for Malwarebytes though, it´s free as well. Also, please not that having two spyware programs at the same time is not a good idea. Even antivirus programs like Kaspersky or NOD32 sometimes require uninstalling the anti-malware tools (Spyboot seems to have been affected quite a lot by such "conflicts"). I would always keep one AV and one anti-malware app like Malwarebytes just in case... Doing regular scans is always a good idea IMO.


Cheers,

Marin

[allen]

thanks. I didn't think i was running them, i just liked to have them for when something seemed wrong, like when websites look suspicious.

I've updated to a slightly newer version of nod32, and after having reinstalled power manager, ultranav, and tpfancontrol, the problem seems gone, but i can't seem to get ff or ie to connect to the internet! Aol im will but after a few minutes of iming, it crashes. I'v tried setting up a new connection, rebooted a couple times. I don't know what to do now. I'm browsing on my nokia in the meantime, on the same wifi signal as the t60p.
I already tried downloading ff3 to my phone but no luck

[Marin85]

Do you use wireless or ethernet to connect to internet. If you use wifi, can your ThinkPad connect to the access point? (If yes, then it´s probably a browser problem). Go to Device Manager -> network adapters -> your wifi card -> power options -> uncheck "allow computer to turn off this device to save power" and see if that changes something. If not, then you could try reinstalling/updating the wifi driver.

[yak]

What about my suggestion? If the problem is that your Firefox tells the web-servers it is an IE, my suggestion should help... yet is has been ignored.

[Marin85]

What about my suggestion? If the problem is that your Firefox tells the web-servers it is an IE, my suggestion should help... yet is has been ignored.

No, it wasn´t ignored. I think the OP has already tried this out. BTW, he now seems to be having another problem beyond FF - some general freezes and now internet connectivity. It´s quite a mess...

Marin

[yak]

Oh, then I'm sorry.

Thanks for correcting me.

[allen]

Do you use wireless or ethernet to connect to internet. If you use wifi, can your ThinkPad connect to the access point? (If yes, then it´s probably a browser problem). Go to Device Manager -> network adapters -> your wifi card -> power options -> uncheck "allow computer to turn off this device to save power" and see if that changes something. If not, then you could try reinstalling/updating the wifi driver.

I use both ethernet and wifi. Same issue with both. Computer says the connection is fine, AIM, system update, skype, all connect. but ff, ie, or itunes won't connect, i tried ff safe mode, tried unchecking the device manager power option, did a virus and malwarebytes quick scan. Still trying more stuff...

How do i update a driver without connecting to the internet?

I'm lucky i can browse here with my nokia phone

EDIT:
ok, windows xp safe mode works, maybe it's still the eset nod32? i'll keep trying, now i can download and reinstall ff3.
ok in regular windows xp, ending egui, as well as disabling the service and ending the process, now i can connect...

[Marin85]

How do i update a eriver without connecting to the internet?

I'm lucky i can browse here with my nokia phone

You can´t, you need at least another computer with internet connection. Judging by the time you have been spending on that issue, you might well have been better off backing up your data and reinstalling windows.

While you can´t update the driver without internet, you can at least try reinstalling it. Even when having some bugs due to new release etc, Lenovo drivers work most of the time, so if reinstalling doesn´t solve such a problem like yours, I don´t think updating the drive will do. What is more, since the issue applies to both wifi and ethernet and since you can still connect to networks, I think this issue is not driver-related. One of my last things I can think of right now is resetting the winsock. It might have become somehow corrupted by your latest virus and the constant reg cleaning might well have added something to that...

Marin

EDIT: You can find some more information on how to reset winsock here.

[allen]

hey, thanks, i made some edits to my previous response before realizing you responded again,
but basically, as soon as i disable eset service in services, and kill ekrn. the browser can connect. even if egui is still running...

[Marin85]

It´s some good news that you were able to pin down the reason for the freezes. Maybe, for some reason you are not very lucky with NOD32. If still looking for AV (and even free), check out Avira Antivir, highly recommended by many forum members, very light, reliable, fast and free

Cheers,

Marin

PS: Actually, I´m fan of AVG 7.5 (not available anymore, the new release v8 is definitely not anymore what AVG used to be) and ESET NOD32 , but you seem to have some problems with it...

[allen]

maybe there's a NOD32 setting i can adjust? i was happy with nod32 for a while, and only recently i have 2 problems with it now!?
can we be sure the free AV software Avira Antivir is just as good?

ah, while on the topic, is it generally recommended to have live active spyware protection? i usually just use those softwares for periodic scans, not live protection...