This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

unintended and spontaneous opening of I.E.

101 min read

This thread's last reply is from December 21, 2010, 12:07 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

SystemLook 04.09.10 by jpshortstuff
Log created at 08:01 on 18/12/2010 by Valued Customer
Administrator - Elevation successful

========== reg ==========

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Control Panel\Extended Properties\{305CA226-D286-468e-B848-2B2E8E697B74} 2]
"%SystemRoot%\system32\Firewall.cpl"="3,10"
"%SystemRoot%\system32\wscui.cpl"= 0x00ffffffff (-1)
"%SystemRoot%\system32\NetSetup.cpl"= 0x0000000003 (3)
"C:\Program Files\Common Files\Microsoft Shared\Speech\sapi.cpl"= 0x0000000004 (4)
"%SystemRoot%\System32\wuaucpl.cpl"= 0x000000000a (10)
"%SystemRoot%\system32\appwiz.cpl"= 0x0000000008 (8)
"%SystemRoot%\system32\access.cpl"= 0x0000000007 (7)
"%SystemRoot%\system32\bthprops.cpl"="2,3"
"%SystemRoot%\system32\desk.cpl"= 0x0000000001 (1)
"%SystemRoot%\system32\hdwwiz.cpl"= 0x00ffffffff (-1)
"%SystemRoot%\system32\inetcpl.cpl"="3,10"
"%SystemRoot%\system32\intl.cpl"= 0x0000000006 (6)
"%SystemRoot%\system32\irprops.cpl"= 0x0000000002 (2)
"%SystemRoot%\system32\joy.cpl"= 0x0000000002 (2)
"%SystemRoot%\system32\main.cpl"= 0x0000000002 (2)
"%SystemRoot%\system32\mmsys.cpl"= 0x0000000004 (4)
"%SystemRoot%\system32\ncpa.cpl"= 0x0000000003 (3)
"%SystemRoot%\system32\nwc.cpl"= 0x0000000000 (0)
"%SystemRoot%\system32\nusrmgr.cpl"= 0x0000000009 (9)
"%SystemRoot%\system32\odbccp32.cpl"= 0x0000000000 (0)
"%SystemRoot%\system32\powercfg.cpl"= 0x0000000005 (5)
"%SystemRoot%\system32\sticpl.cpl"= 0x0000000002 (2)
"%SystemRoot%\system32\sysdm.cpl"="5"
"%SystemRoot%\system32\telephon.cpl"= 0x0000000002 (2)
"%SystemRoot%\system32\timedate.cpl"= 0x0000000006 (6)
"C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl"= 0x000000000a (10)


========== filefind ==========

Searching for "inetcpl.cpl"
C:\c2d559c6ee7096b5c33171\inetcpl.cpl --a--c- 1469440 bytes [11:34 08/03/2009] [11:34 08/03/2009] D9D2AB8103E404A86DF0656F3577D615
C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\inetcpl.cpl --a--c- 1469440 bytes [18:11 11/08/2010] [12:24 24/06/2010] 67B58DE32A707454C4E9AEAFE78A0C28
C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\inetcpl.cpl --a---- 1469440 bytes [18:11 14/10/2010] [05:57 10/09/2010] 3BCA924B522F102AFC8FF3A65A1B8D80
C:\WINDOWS\$hf_mig$\KB931768-IE7\SP2QFE\inetcpl.cpl --a--c- 1823744 bytes [00:54 10/05/2007] [17:40 07/03/2007] 63DD1D477EC086BDEDA78BDE368D2F6C
C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\inetcpl.cpl --a--c- 1824256 bytes [09:08 25/04/2007] [09:08 25/04/2007] FE01943B1F1629791B1010D43CA05742
C:\WINDOWS\$hf_mig$\KB937143-IE7\SP2QFE\inetcpl.cpl --a--c- 1824256 bytes [14:39 27/06/2007] [14:39 27/06/2007] F5B7D990150BC4A8DC5B27337EE27E09
C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\inetcpl.cpl --a--c- 1830912 bytes [10:02 20/08/2007] [10:02 20/08/2007] 9062DA62DC4245B9494BDF7AD7932DFD
C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\inetcpl.cpl --a--c- 1832960 bytes [23:47 10/10/2007] [23:47 10/10/2007] 5D4121C693BC4AFB2C46475B84C52A84
C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\inetcpl.cpl --a--c- 1831424 bytes [02:01 07/12/2007] [02:01 07/12/2007] 0FCBDEFDDD9BE6D2D8CD3582CC61810E
C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\inetcpl.cpl --a--c- 1831424 bytes [23:51 08/04/2008] [13:03 01/03/2008] 095A8D6EED3505FE9741378302FC2F3D
C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\inetcpl.cpl --a--c- 1831424 bytes [03:31 11/06/2008] [03:35 23/04/2008] 664306E677AFB1AB1464003E51037575
C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\inetcpl.cpl --a--c- 1831424 bytes [13:59 13/08/2008] [16:01 23/06/2008] 6A5EB3ECFC40DF208FAFA3F17E82B850
C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\inetcpl.cpl --a--c- 1831424 bytes [09:08 26/08/2008] [09:08 26/08/2008] 07A85E0CB486596B53B00C3A8D5F2600
C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\inetcpl.cpl --a--c- 1831424 bytes [16:18 13/12/2008] [20:24 16/10/2008] 0E9900B3C789F3D1C7D8C8E5BF527E15
C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\inetcpl.cpl --a--c- 1831424 bytes [06:19 11/02/2009] [23:55 20/12/2008] 7B54F94F8992C77EB66A2C214A3B17E3
C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\inetcpl.cpl --a--c- 1831424 bytes [18:09 20/02/2009] [18:09 20/02/2009] 5B0945D65A631DB36773A649826A9842
C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\inetcpl.cpl --a--c- 1830912 bytes [04:49 29/04/2009] [04:49 29/04/2009] AE99461601D34248810A82279B3B505E
C:\WINDOWS\$hf_mig$\KB972260-IE7\SP3QFE\inetcpl.cpl --a--c- 1830912 bytes [16:23 29/06/2009] [16:23 29/06/2009] ACD912846674477DF51FF5358956AD1F
C:\WINDOWS\$hf_mig$\KB974455-IE7\SP3QFE\inetcpl.cpl --a--c- 1830912 bytes [07:31 29/08/2009] [07:31 29/08/2009] EE892D3C4790E294B6447E608BE33AC9
C:\WINDOWS\$hf_mig$\KB976325-IE7\SP3QFE\inetcpl.cpl --a--c- 1830912 bytes [07:45 29/10/2009] [07:45 29/10/2009] 64DE2EF05973890A0C7C376CB89B0950
C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\inetcpl.cpl --a--c- 1469440 bytes [21:13 24/12/2009] [07:45 29/10/2009] EBE42CFF9D4FC378AE6E743A224EA77B
C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\inetcpl.cpl --a--c- 1469440 bytes [03:20 22/01/2010] [19:09 21/12/2009] 8C0F261F9FD9576B22160F707A096C05
C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\inetcpl.cpl --a--c- 1469440 bytes [19:16 15/04/2010] [06:19 25/02/2010] 1510DBA889D2DB15B98D1E55CF0C4F22
C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\inetcpl.cpl --a--c- 1469440 bytes [01:56 10/06/2010] [10:36 06/05/2010] 2B682DC9A4E19A2BC8DEEB67AC7753B2
C:\WINDOWS\ie7updates\KB933566-IE7\inetcpl.cpl -----c- 1823744 bytes [04:22 13/06/2007] [17:45 07/03/2007] B4C3EE6ACA2FDBB334442919CA709AF4
C:\WINDOWS\ie7updates\KB944533-IE7\inetcpl.cpl -----c- 1831424 bytes [07:00 13/02/2008] [23:55 10/10/2007] CB43139D9583655AC66C0D02B882FB81
C:\WINDOWS\ie7updates\KB950759-IE7\inetcpl.cpl -----c- 1831424 bytes [07:31 11/06/2008] [13:06 01/03/2008] 3B3011413259B817D4FDFEA7DD607766
C:\WINDOWS\ie7updates\KB956390-IE7\inetcpl.cpl -----c- 1831424 bytes [07:09 16/10/2008] [16:57 23/06/2008] 553D18F35EAFC6A07C6CC982E92B462B
C:\WINDOWS\ie7updates\KB963027-IE7\inetcpl.cpl -----c- 1831424 bytes [06:44 16/04/2009] [23:15 20/12/2008] AD9280508A514A212DCFE478345EF150
C:\WINDOWS\ie7updates\KB972260-IE7\inetcpl.cpl -----c- 1830912 bytes [03:06 30/07/2009] [04:55 29/04/2009] 3D3743DED929B009E0768F439C37567D
C:\WINDOWS\ie7updates\KB976325-IE7\inetcpl.cpl -----c- 1830912 bytes [06:44 09/12/2009] [07:36 29/08/2009] 4E415C1BE0558716B2F8D27305AEE75B
C:\WINDOWS\ie8\inetcpl.cpl --a--c- 358400 bytes [17:47 15/04/2010] [12:00 04/08/2004] 731B489C78840B4CA9955B2AB19C5911
C:\WINDOWS\ie8updates\KB2183461-IE8\inetcpl.cpl -----c- 1469440 bytes [10:05 12/08/2010] [10:41 06/05/2010] 8F7CD6B3C2FD067F04A54DF30E80A655
C:\WINDOWS\ie8updates\KB2360131-IE8\inetcpl.cpl -----c- 1469440 bytes [22:23 14/10/2010] [12:21 24/06/2010] D669023DE366BB3B38726BF36E3043B6
C:\WINDOWS\ie8updates\KB980182-IE8\inetcpl.cpl -----c- 1469440 bytes [06:50 16/04/2010] [11:34 08/03/2009] D9D2AB8103E404A86DF0656F3577D615
C:\WINDOWS\ie8updates\KB982381-IE8\inetcpl.cpl -----c- 1469440 bytes [08:29 10/06/2010] [06:24 25/02/2010] 39C8BFB4EF85C138FF39C7E6E5CD0C19
C:\WINDOWS\ServicePackFiles\i386\inetcpl.cpl -----c- 360960 bytes [21:52 18/08/2008] [00:12 14/04/2008] F85403775D931BE05ABB7BD82F6656FA
C:\WINDOWS\system32\inetcpl.cpl --a---- 1469440 bytes [12:00 04/08/2004] [05:58 10/09/2010] 1844E8FFCE64FCD30A69F5E2FB99E68A
C:\WINDOWS\system32\dllcache\inetcpl.cpl --a--c- 1469440 bytes [12:00 04/08/2004] [05:58 10/09/2010] 1844E8FFCE64FCD30A69F5E2FB99E68A

-= EOF =-
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\584e4ccc-def3-4c04-9ab6-1475f7a01213\ not found.
Registry key HKEY_USERS\S-1-5-21-606747145-776561741-682003330-1004\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
========== FILES ==========
File\Folder C:\DOCUMENTS AND SETTINGS\VALUED CUSTOMER\MY DOCUMENTS\DOWNLOADS\VUZE_4.3.1.4_WINDOWS.EXE not found.
File\Folder C:\Program Files\Vuze_Remote\tbVuze.dll not found.
========== COMMANDS ==========

OTL by OldTimer - Version 3.2.17.3 log created on 12182010_081135
ontrust,
I believe your machine is free of malware.
The file to pop up Internet Options in Control Panel is present and in the right place.

This is not the best forum to troubleshoot an IE problem. It's somewhat out of our field.
I would recommend a System/Hardware forum of which there are some good ones.
---------------------------------------------------------
Good System/Hardware Help Forums
NutNWorks here: http://www.nutnworks.com/forums/forumdisplay.php?f=60
or
GeekstoGo here: http://www.geekstogo.com/forum/Windows-XP-2000-2003-NT-f5.html
or
Computer Trouble here: http://forum.computertrouble.co.uk/index.php
or
TechSupportGuy here : http://forums.techguy.org/21-windows-nt-2000-xp/
or
Security Cadets PC and software help Section at : http://forum.securitycadets.com/

All may require you to register free before posting for help.

Good Luck,
askey127
Askey127:

The IE issue is definitely not a high priority for me. I use Chrome 95% of the time, but as I said, there are some sites that require the use of IE. Thanks for the website recommendations.
Two final questions...I have applied to MWR University and one of the prerequisites was 'being clean'. How does this status get conveyed to the Admissions Officer?
The time and effort that you good people dedicate to battling malware is admirable, and I would consider it an honor to fight alongside you. Can you put in a good word for me?

Thanks again.

LML
Portland OR
ontrust,
What they mean by clean is that our helpers will support a policy of not having any pirated software, and their machines will be free of infections as best they can tell.
The admissions crew makes all the decisions there, but if you have the time and desire, I'm sure you will be successful.

askey127