Dell complaints

Rocke_T_Sinetist · Posted: Thu Sep 15, 2005 12:47 pm Post subject:

OK here's the scenario-- The 'last thing you did' with IE hangs it up. Change the last thing you did and see if the problem still occurs. In other words, change your 'home page', then after IE is all cleared, not hung up, go to a different website (cnn.com, anything), close the window, then try to open another one. Follow? We're trying to determine if the website itself (yahoo) is what's causing IE to hang up. If it is, there's not going to be anything either of us can do about it, besides stop going there, or go through the Task Manager shutdown thing you've already discovered.

Oh wait, do you have SBC/Yahoo? There was a MAJOR issue with the SBC/Yahoo access package, that caused WXP/servicepack2 to lock up/blue screen of death. It's supposed to have been corrected. You don't say Windows locks up, so it's not that issue affecting you at this time. But I mention it if only to illustrate that supposedly-credible software from supposedly-credible vendors can interact in unpredictable ways. It's hard to separate that fact from the fact that you bought a new computer from Dell and you're having trouble with it.

More than just about any computer vendor, Dell tests what they sell for compatibility. That's probably the only reason left to "buy Dell", since all vendors offer roughly the same packages at their respective price levels. Including selling obsolete hardware as "new", which I'm sorry to have to tell you is the case with Dimension 3000. That's why it's so much cheaper than the 5100 that just came out. It's just an artifact of Intel introducing a new chipset every year. That leaves the 'old' chipset to be sold at 'bargain' prices. There's nothing wrong with 'old'. I'm writing this on a system that was made in 1999, for which I paid a PREMIUM price at the time. Nonetheless, it was 'obsolete' 5 years ago. I haven't had a minute's trouble with it, even with Texas thunderstorms shutting it off unexpectedly while it was running. Personally, I believe vendors should be forthcoming about selling hardware 'new' that is actually two generations behind what's currently available. But like any salesman, they will only tell you what you ask and what you want to hear to get you to buy. I'd never make it in sales.
_________________
Rocke T Sinetist
as in, 'it doesn't take a...'

paul_dellcc · Posted: Thu Sep 15, 2005 2:45 pm Post subject:

MrsB73: Download Hijack This, analize and then save the log and paste it here. Do not check anything, just copy and paste the log you saved.

You can download it from here

PS: the entire copyright of this post belongs to Badger.
_________________
I see DELL people!!

If we don't remember our past, we can't understand our present and we can put in danger our future...

Rocke_T_Sinetist · Posted: Thu Sep 15, 2005 5:34 pm Post subject:

Paul may be completely right. I have no firsthand exposure to browser hijacking, but it does happen.
_________________
Rocke T Sinetist
as in, 'it doesn't take a...'

Nebuchadnezzar · Posted: Thu Sep 15, 2005 5:42 pm Post subject:

If it is a hijacker then probably something like lavasoft ad-aware will sort it - apparently. You should probably run some anti spyware/adware anyway, as computers can get really bogged down by the number of these programs - particularly with kids going on them. When i used windows i used to run ad-aware at least once a month.

paul_dellcc · Posted: Thu Sep 15, 2005 6:18 pm Post subject:

Nebuchadnezzar · Posted: Thu Sep 15, 2005 6:34 pm Post subject:

lol - surely there must be a gap in the internet market for some up-market crack site, where instead of advertising porn you're presented with neat little banners for cousin covers and the like Wink

. I would advise using adaware over any of the other spyware and adware removal software - particularly if messing around with the stuff in your computer isn't your strong point - its very simple, basically click to search for files, click to delete them.

Unless there's a bug in IE there's not much that it could be other than malware or some compatibility issue with other programs. And if its malware, a combination of a good anti virus program and a good anti adware program should keep you safe.

You probably don't need me to tell you this, but if you're browsing a website and an install screen pops up, click no.

paul_dellcc · Posted: Thu Sep 15, 2005 7:53 pm Post subject:

Nebuchadnezzar · Posted: Fri Sep 16, 2005 1:16 am Post subject:

Paul, after the short time i've spent on these forums i know you well enough to know that you wouldn't be quite that... trusting... - I was talking to people who may have just got their first computer or something.

Agreed, S&D is good, but it can be intimidating due to the style and number of buttons on the interface, particularly for a new PC user - i'm not sure if MrsB73 is one of these though - but from the way her posts sound, it sounds like she is, so i was reccommending the easier option.

paul_dellcc · Posted: Fri Sep 16, 2005 10:15 am Post subject:

I was just joking about it.

You are right about S&D.

Ad-aware is the perfect option, good interface and friendly to the user.
_________________
I see DELL people!!

If we don't remember our past, we can't understand our present and we can put in danger our future...

MrsB73 · Apprentice Dellhater Joined: 14 Sep 2005 Posts: 6

Hi guys, sorry it took me so long. Here is the logfile:

Logfile of HijackThis v1.99.1
Scan saved at 9:07:14 PM, on 9/16/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\hphmon05.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\Faye\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: McAfee PopupKiller - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O2 - BHO: McAfee Anti-Phishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [mmtask] C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MSKDetct.exe /startup
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra 'Tools' menuitem: McAfee Anti-Phishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,90/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,23/mcgdmgr.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Rocke_T_Sinetist · Posted: Sat Sep 17, 2005 9:45 am Post subject:

I don't see anything suspicious there. Does "HijackThis" say any of these are suspicious?

Is your systray (R end of taskbar) really as full at startup as this makes it look? Open those items one at a time and reset their properties from 'load on startup' to 'load on demand'. Unless you like to use the exaggerated startup and shutdown times to make coffee, flip your mattress, finish 'War and Peace'...

Like the virus 4 years ago that shutdown Norton/Mcafee before it went to work, adware/spyware is getting more devious. Independent testing has shown that various anti-spyware apps find and remove various malware, but no one anti-spyware program finds and removes ALL malware and there are infestations that NO anti-spyware found/removed.

Browser hijack hasn't really been demonstrated, unless you are getting websites you didn't ask for. Spyware might be commanding IE to send out its 'history', that would keep it busy and display nothing, and your firewall wouldn't catch it because IE has permission to access. Malware can send out the history without invoking the browser, but the firewall should catch that.

Try to see what those hungup IEs are doing. Go to Network Connections and see what kind of activity is taking place. If there's data flying around when you're not accessing anything, likelihood you're a malware victim goes way up.
_________________
Rocke T Sinetist
as in, 'it doesn't take a...'

paul_dellcc · Posted: Sat Sep 17, 2005 9:58 am Post subject:

Badger · Posted: Sat Sep 17, 2005 10:39 am Post subject:

MrsB73: Wow, you have a boatload off things on your startup. You may want to turn a few of them off.

There doesn't seem to be anything malicious that I see. What you have then is something corrupted in your system. Rocke is right in that you simply cannot reinstall IE. Try Firefox or Opera and see if they work.

One question: Why do you have MS SQL running?
_________________
I may not agree with what you say, but I will fight for your right to say it.

Midget Tossing funds Terrorism

Sprocket · Chancellor of Dellhateology Joined: 27 Aug 2003 Posts: 224

Badger · Posted: Sat Sep 17, 2005 10:46 am Post subject:

Okay, I've re-read your list, and you can checkmark and remove the following items after you perform your scan:

*note* These will just remove startup entries, and should help with overall system stability

SunJavaUpdateSched
DVDLauncher
mmtask
RealTray
QuickTime Task
dla <- only if you don't use the burner for drag and drop
DMXLauncher
MSMSGS <- I assume you don't use MSN as this is the old messenger and should be updated.
Microsoft Office.lnk
Quickbooks Update Agent.lnk

Make sure you perform a backup before doing this, then remove them, restart, and see what happens.
_________________
I may not agree with what you say, but I will fight for your right to say it.

Midget Tossing funds Terrorism