SP1a Kills IE 6.0

[mblatz]

Hi all,

I have two problems.

First I've run into a machine that didn't have SP1 intalled on it yet. So i installed SP1a. Now IE will just come up with "this page cannot be found".
I uninstalled Sp1 and it works fine again. So i reinstalled it and then installed Sp2 in hopes that SP2 had a fix for it. It didn't so now i'm asking you, is there a patch or a step that i missed. Also IE will work in safe mode with SP1 and SP2 installed.

Second does any body know why after installing SP2 start up would take 5 minutes longer than it should. I've heard this complant from several people.

Thanks For any Help in advance.

[rond36]

Try running the Internet connection wizard. SP1a also contains a SP for IE6 and may have messed up your Internet settings.

If IE6 runs and you get "this page cannot be found" IE6 is working fine but doesn't know how to connect to the Internet. If you connect to the Internet via broadband (cable or DSL) you may need to run the Home network wizard to tell your computer how to connect to the network.

When I install SP1a on my daughters computer it tries to connect to the network via the IEEE 1394 port (Firewire) that is on the video card or the one on the sound card and I need to tell it to connect via the on-board SiS 900 PCI fast ethernet adapter.

If you are talking about the long delay after installing SP2 and only on the initial reboot. It is because SP2 needs to replace hundreds maybe thousands of files that were in use before the reboot and have to be replaced before Windows is running and they become in use again. The delay is a necessary part of installing SP2 and should not be interrupted, if it is interrupted you may end up with Windows XP that will not boot.

[Paul Komski]

Also IE will work in safe mode with SP1 and SP2 installed.

A bit bizarre - so how are you connecting to the internet?

For something to work in safe mode but not normal mode implies that something running in normal windows is blocking or affecting your access.

Double check any firewall settings, check for malware and consider posting back a HijackThis Log.

[mblatz]

Thanks For replying,

I'm connecting through a 4 port router to a cable modem. I've ran the Internet connection wizard and home network wizard to no avail. IPconfig apears with the correct settings compaired to my other computers that are connected to my router.
my Hijackthis listing is.

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Katheryne\My Documents\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ShopNBC.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1;http://localhost;
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7B55BB05-0B4D-44fd-81A6-B136188F5DEB} - C:\WINDOWS\questmod-1.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [3DMouse] C:\PROGRA~1\3DMouse\3DMouse.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Zip Up The Web Tray Icon.lnk = C:\Program Files\Insight Development\Zip Up The Web Pro\ZUTWTray.exe
O4 - Global Startup: Scroll-In-Mouse V2.0.lnk = C:\Program Files\A.C\Scroll-In-Mouse V2.1\Scroll.exe
O4 - Global Startup: Microtek Scanner Finder.lnk = C:\WINDOWS\twain_32\ScanWiz5\SDII.exe
O9 - Extra button: HotWebTools! - {F35C1960-D358-11d3-985B-0000C0679070} - C:\PROGRA~1\INSIGH~1\HOTOFF~1\Hot Off The Web.exe
O9 - Extra 'Tools' menuitem: HotWebTools! - {F35C1960-D358-11d3-985B-0000C0679070} - C:\PROGRA~1\INSIGH~1\HOTOFF~1\Hot Off The Web.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: Yahoo! Blackjack - http://download.games.yahoo.com/games/clients/y/jt0_x.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cab
O16 - DPF: {FA13A9FA-CA9B-11D2-9780-00104B242EA3} (WildTangent Control) - http://www.wildtangent.com/install/wdriver/racing/dodgespeedway/microsoft/wtinst.cab

Thanks For any more help

[Paul Komski]

This isn't really my area of interest but you are, none-the-less infected:

http://computercops.biz/bho-q.html indicates to fix:-
O2 - BHO: (no name) - {7B55BB05-0B4D-44fd-81A6-B136188F5DEB} - C:\WINDOWS\questmod-1.dll

http://www.experts-exchange.com/Applications/Q_21031133.html indicates to fix:-
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1;http://localhost;

The latter link also has a link for repairing your winsock if necessary.
Others who specialise in this area may see other stuff there.

[mblatz]

Hi guys

I've cleaned up my Hijack this log, and still can't connect. The broken machine can ping to other machines but other machine can not ping it. The broken machine can not ping itself either.

I didn't see the winsock fix on the link in the previous post. If any body has a link to good winsock info i would greatly appriciat it.

Thanks again for your help

[Paul Komski]

http://www.tek-tips.com/faqs.cfm?pid=779&fid=4625

[Donn]

I wonder if it would help to fix that 016 Wild Tangent, Wild Tangent specifically, since there seems to be some considerable opinion that it drags spyware in with it if it isn't itself. . .? It's my understanding that you can fix all 016 items and pick them up the next time you visit that site.

May I suggest you download Adaware, update it, and run it and SpyBot (it is updated, right?) in Safe Mode. . .?

Also, I notice a Symantec product. . .I don't suppose you're running Norton Utilities? Oy, if so, may I suggest *uninstalling them* until this is cleared up, not disabling them, uninstalling them, the Utilities. If you downloaded the Sp fixes with the AV engaged, or if the Utilities were engaged, I would recommend trying it again with the AV disabled and the Utilities uninstalled.

Did I mention uninstalling those rascally, download wrecking, resource sucking Norton Utilities ? If you have them, I mean. . .

Edit--it will probably help the expert HJT readers if you re-post a new HJT log with the header on it complete from top to bottom after you have done Paul's fixes.

If necessary one of the moderators may want to move this over to Applications and Security.