Freezes up, IE has to shut down, glitches galore.

Another issue:

When I start IE I get the following window:

The feature you are trying to use is on a CD-ROM or other removable disk that is not available.

Insert the "HP Smart Web Printing" disk and click OK.

The only way to get IE to work is to cancel this message. We don't have the disk for this. What else can be done?

Thanks.

ETA: It's looking for the file SmartWebPrinting.msi

coreyg,
Taking out these two lines should free up IE.
-----------------------------------------------------------
Remove log items with HighjackThis. Start HijackThis.
Click Do System Scan Only. When the Scan is complete, Check the following entries:
(Some of these lines may be missing)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
Make sure Every other window except HJT is closed (No other tabs showing in the bottom tray), and Click Fix Checked
Click the "X" in the upper right corner of the HiJackThis window to close it.
askey127

I turned the whole thing off last night and started it up again this morning. It takes forever to get to a point where I can do ANYthing. Very very slow to boot up completely. The message I posted above still coming up and the only way around it is to click cancel. It comes up several times before it'll go away for good while surfing the net.

coreyg,
--------------------------------------------------
Copy/paste the following quote box into a new notepad (not wordpad) document.

regedit /e look.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects"
notepad look.txt
del /q look.txt

Save it to your Desktop as look.bat. Save it as File Type: All Files (not as a text document or it wont work).

Locate look.bat on your Desktop and double-click it.
When Notepad opens, copy/paste the content in your reply.
When you close Notepad, the CMD window will close automatically and the text file will be deleted.
askey127

I've done everything you suggested. Here's the look.bat thingy:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{089FD14D-132B-48FC-8861-0048AE113215}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
@="AcroIEHelperStub"
"NoExplorer"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-9FA5-A33DE8DBE931}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
@="scriptproxy"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7327C09-B521-4EDB-8509-7D2660C9EC98}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
"NoExplorer"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
@="JQSIEStartDetectorImpl"
"NoExplorer"=dword:00000001

coreyg,
-----------------------------------------------------------
Please download the Registry Search Tool from here (scroll down-there are also other tools on the page):
http://www.billsway.com/vbspage/
Unzip it to a convenient location such as your Desktop.
Make sure that your Antivirus / OS allows the use of the .vbs scripts. If prompted, make sure to allow the script.
Double click regsearch.vbs
Copy / Paste the following line into the Search Box:
SmartWeb
then hit Ok
It may take a while to run.
It will tell you when it's done and offer to have you look at the file.
Say Yes, and when it opens copy/paste the content in your reply.
askey

Here you go:

REGEDIT4
; RegSrch.vbs © Bill James

; Registry search results for string "SmartWeb" 5/27/2009 4:23:19 PM

; NOTE: This file will be deleted when you close WordPad.
; You must manually save this file to a new location if you want to refer to it again later.
; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\HPSmartWebPrintingBasicsBHO.dll]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\35ADC5140019F6747A2B7466191E717C]
"SMARTWEBPRINTING"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\35ADC5140019F6747A2B7466191E717C\SourceList]
"PackageName"="SmartWebPrinting.msi"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F8317BC3-0B5C-4E03-88F4-69EA8EE62D7B}\1.0]
@="HPSmartWebPrintingBasicsBHO 1.0 Type Library"

[HKEY_LOCAL_MACHINE\SOFTWARE\Hewlett-Packard\Install\{2D1F2124-29E6-460A-B140-E9DF3BC594CE}]
"Filename"="E:\\setup\\WebPrinting\\SmartWebPrinting.msi"

"SMARTWEBPRINTING"="PyfdC,=V5?6Tbo9'-EL29HR~[wv*{9)v3dffSvn?m%8cxXNHc@d_1,_pv%j7uf6@oAb5O=!3jcJjse=RtHfYOe[4]As34v.&qHCsm4$b=gV+5?mbHOKcQIH5.tjky5hSw=AIx@nD1*qd,NW_)c+W(?*hk_BG){cCe{fzJe0ur9}sF?nhgd37RFGnTW39l?K$P]KA7Y&0zRscUFRS~=B}LJDTg41Tzx9trk!P+?AR*&QU_uW($0_P5Mo3v9`9HN)MMHuE{22$Yf}AGAry'rX[9*ph}=UzgG?)M9X+84+^&L0c*-j79C0@59~S{.C%.5grE~Fr2Msa5=,V6z=nWd]-gHZ(Zha-s?fzFUs1?DUe()AFwxD7m@AacRsf?sL8Le9R=}s]8A8Gy&Fe(IkuGRGudXv4o?ocMSBQ[_)gy7vQ)DFmU=j^D8H2yD9$9D^M0Hl{n8]LE`cCT_ShP~0Q@0?,.@-[DbCRQ)$EgGKVq?}Vk9TGxrRy+U(3etw%o~w(?@P-[B^lNe*7AcVkV8uue=,],{bLYcGHK1X~m)`TJA5F,HO@Dxrsi6&.JwN9[?t6BLioV,XqD$X^icX+&?$T75j3n%Wk~^D{`JYAi=T,r?mxVPf3mlxVHZ?SZA='ci`M.YSrn$h%KU4'$AGA)dKZn6CrhN^UqxWMSAI@02]%08Z=9CMhkec559[4%(]EXlr[TJgN%Y3BV@KD.D'.odpkU`L=4y.J$=xc&3Z$gz48JQdpd)Gl293dbxHpTcK$aQu4D.bT2A%x.6vChP.,+5f~A2+!Q=+a}z6.MQdR!XU8FY)+0@alD?n0P2HUnn3k8hb2%@W!Mf^R``)gunHJs2,RH@`f=[)[khGp&Sc(ddK%f9.NR!CtGkheO6WheNz%b=3hB*e--8H1aYSX.+~x7A@(?nY,+C$$E?95p&*Km92,7mAUTBYI6B5.e~mU&@^GRV7+?^rAi!TAfG&?'AQ6MwmY5hq[d7Fu6}Z7X9o5ykFk*CDQ3Ut(sC2x$AM^y.LrFB)x[tiKvs'J&=os0*MHzQjVGb]L12ujs=ahJSmP*tIEO[_$)t=d6A1Aep)@SkMW3PLT2wW%_9RmVmnpN9C-q(_3_Ch2K=$d!$7A+Rn$~0@40z6p^@.3fRvMa5BOt$Gg7=GLv8Q`-}cVts%Y3E'+7d?3g(Svy?VXB]2d"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\35ADC5140019F6747A2B7466191E717C\Usage]
"SMARTWEBPRINTING"=dword:3abaffff

coreyg,
------------------------------------------------------------
Backup Your Registry with ERUNT:

• Download erunt.zip to your Desktop from here:
  http://aumha.org/downloads/erunt.zip
• Right-click erunt.zip, select Extract All... and follow the prompts to extract ERUNT to a new folder on your Desktop
• Inside the new folder, double-click ERUNT.exe to start the program
• OK all the prompts to back up your registry to the default location.

Note: If you ever needed to restore your registry later, you would go to the backup folder and start ERDNT.exe
-----------------------------------------------------------
Copy/Paste/Run a Registry Edit
Copy/paste the following quote box into a new notepad document:

REGEDIT4



[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\35ADC5140019F6747A2B7466191E717C\SourceList]

"PackageName"=-



[HKEY_LOCAL_MACHINE\SOFTWARE\Hewlett-Packard\Install\{2D1F2124-29E6-460A-B140-E9DF3BC594CE}]

"Filename"=-

"SMARTWEBPRINTING"=-



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\35ADC5140019F6747A2B7466191E717C\Usage]

"SMARTWEBPRINTING"=-

Make sure there are NO blank lines before REGEDIT4
Make sure there IS one blank line at the end of the file.

Save it as File Type All Files (not as a Text document, or it won't work).
Save it to your Desktop as fixme.reg
Double click fixme.reg on your Desktop, and merge it into the registry when asked.
Reboot Windows.

Let me know if the error message continues.
askey127

That particular error message is gone but now Intellipoint hasn't been working. I had to hook up a wireless laptop mouse to the desktop (which what we're trying to fix).

coreyg

ETA: It's reeeeeaaalllly slow on the net now, too.

I would Uninstall Intellipoint and re-install it.
Then have a look at Task manager and see what file is using most of the CPU time.
Also have a look at the Adobe programs. Do you have a copy of Adobe Acrobat? (not Reader)
If so, start it, click on Help, About and tell me what version it is.
Older versions have a broken updater which can hang up a machine.

Right now, besides IE, Mcshield.exe is using the most.

When I check Adobe in Program Files it seems I have Acrobat v 7.0 but it doesn't seem to be anywhere where I can run it. Maybe I'm just confused? Wouldn't be surprised!

Should I just go ahead and download Acrobat's latest version?

I'll have to locate the disk for Intellipoint before I dump it so I can re-install it. Is there a website where I can download it if I can't find the disk. I'm sure it's here somewhere but just in case.

BTW, I want to take this opportunity to thank you so very much for all your help. It's given me peace of mind already. We plan to donate to this site very soon.

coreyg,
You are most welcome. We sould have you all fixed up shortly.
Your Acrobat is OK for now.
Let's just doublecheck for any remaining malware.
------------------------------------------------------------
Download the latest version of Java SE Runtime Environment(JRE), and install it to your computer.
It is the 2nd item on the page, called JRE 6 Update 14
Select Windows and multi-language, and check to agree to the license.
Download it, choose Save, and save it to your desktop.
Then doubleclick it, and it will install the newest version of Java for you to use.
-----------------------------------------------------

• Please go to Kaspersky website and perform an online antivirus scan.
• Read through the requirements and privacy statement and click on Accept button.
• It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  Spyware, Adware, Dialers, and other potentially dangerous programs
  Archives
  Mail databases
• Click on My Computer under Scan.
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As....
• Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
• Please post this log in your next reply.

askey127

Still working on it. *Someone* in my house messed with the scanning. I'm running it again now.

Here's the Kapersky log:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0 REPORT
Wednesday, June 3, 2009
Operating System: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Program database last update: Wednesday, June 03, 2009 05:52:48
Records in database: 2300033
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
F:\

Scan statistics:
Files scanned: 127754
Threat name: 1
Infected objects: 2
Suspicious objects: 0
Duration of the scan: 04:18:20


File name / Threat name / Threats count
C:\Program Files\MUSICMATCH\Common\ComponentMgr\HoldingArea\WebSys2\WebSys.mmz Infected: not-a-virus:RiskTool.Win32.Deleter.f 1
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\WebSys\offline.mmz Infected: not-a-virus:RiskTool.Win32.Deleter.f 1

The selected area was scanned.

coreyg,
Unless you use MusicMatch jukebox all the time, you should uninstall it.

Can you tell me about MusicMatch?
askey