I posted this earlier and desperately need some help!! please! Original Message Name: Jase Date: August 03, 2003 at 20:07:13 Pacific Homepage: jsr design Subject: Weird IE Problem... OS: Win XP CPU/Ram: Intel Cleron 1.7GHz, 256 DDR Ram Comment: I'm using IE Version 6.0.2600.0000.xpclient.010817-1148 I've been getting this problem lately that whenever I go to http://messenger.msn.com or http://ninemsn.com.au, I either get a "Cannot find server" page, or I get this weird page (source code below) that displays a few files from my computer and their file sizes. Any help would be really great. This is what the page looks like... Thumbs.db586240 Desktop.ini77 Thumbs.db49152 midnight club 2.exe110195985 Report Offensive Message For Removal Response Number 1 Name: Johnw Date: August 03, 2003 at 23:40:11 Pacific Subject: Weird IE Problem... Reply: Repair IE6 http://support.microsoft.com/default.aspx?scid=kb;EN-US;q318378 http://support.microsoft.com/default.aspx?scid=kb;EN-US;q194177 http://www.theeldergeek.com/repair_reinstall_ie_and_oe_6.htm http://www.3dspotlight.com/tweaks/ie6/index.shtml http://www.winguides.com/registry/display.php/442/ http://www.windows-help.net/WindowsXP/howto-03.html Report Offensive Follow Up For Removal Response Number 2 Name: jase Date: August 05, 2003 at 21:43:58 Pacific Homepage: jsr design Subject: Weird IE Problem... Reply: Ok, I did all that, and now whenever i go to messenger.msn.com, i still get that same problem! I can get http://www.msnmessenger-download.com but when i click to download it (http://switch.atdmt.com/action/IM_Download_XP), I get a "page cannot be found", as it is trying to look for it on my hard drive... (because http://switch.atdmt.com displays the files from my computer thing again).. please someone give me a hand!

It sounds like you may have a hijacker.. Download 'Hijack This!'. Unzip, doubleclick HijackThis.exe, and hit "Scan". When the scan is finished, click "Save Log", and copy and paste it in a reply. HijackThis!

Thanks Tom!! Here's the log. Logfile of HijackThis v1.96.0 Scan saved at 3:56:49 PM, on 11/08/2003 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Norton Anti-Virus\defwatch.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Norton Anti-Virus\rtvscan.exe C:\WINDOWS\System32\tcpsvcs.exe C:\WINDOWS\System32\snmp.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\htpatch.exe C:\WINDOWS\System32\qttask.exe C:\Program Files\Norton Anti-Virus\vptray.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\MsgSys.exe C:\Program Files\Microsoft Office\Office10\OUTLOOK.exe C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe C:\Program Files\Internet Explorer\IEXPLORE.exe C:\Program Files\Microsoft Office\Office10\WINWORD.exe C:\Documents and Settings\Jason\My Documents\My Downloads\HijackThis.exe N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Jason\Application Data\Mozilla\Profiles\default\v8zg5pko.slt\prefs.js) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: ICQ Pro (HKLM) O9 - Extra 'Tools' menuitem: ICQ (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37836.8092013889 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://active.macromedia.com/flash2/cabs/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{B6B11BB8-8659-405C-97E6-09E6026A6162}: NameServer = 202.174.32.6 202.174.32.7