Solved when i open internet explorer 10 multiple windows open

August 23, 2014 at 19:39:49
Specs: Windows 7, Intel i73.4GHz/12GB DDR3
Hi,

I am using Windows 7 Pro 64 bit. When i open internet explorer 10 multiple windows open. This happened soon after I downloaded FireFox, uninstalled it and then I tried Google Chrome but uninstalled it too. I tried both because IE10 was giving me issues when I uninstalled iTunes; I went to download it again from IE10 but there was no response, the page just sat there. I tried FireFox and after it downloaded, I didn't see where the iTunes was, got frustrated and then uninstalled FireFox and downloaded Google Chrome. iTunes downloaded fine on it and the following day, when I clicked on IE, multiple pages opened. As that started to occur, MacAfee popped up a message that it prevented a Trojan. I ran full scan but it didn't find anything. I downloaded AVG and it found 12 threats that say, Found MalSign.Generic.E07 all had Severity Medium State Secured. One was found Severity High Virus Found VBS/Downloader.Agent

I don't know if what is causing IE to open multiple times is a virus or not, AVG says it caught and secured it. Just curious if anyone is having this issue with IE opening up at multiple times and if this might be a virus that though AVG caught, can still be on the system?

Thanks!


See More: when i open internet explorer 10 multiple windows open

Report •

#1
August 24, 2014 at 01:31:45
✔ Best Answer
Run all of these, in this order.

Step 1: Run AdwCleaner
http://www.softpedia.com/get/Antivi...
http://www.softpedia.com/progScreen...
How to download from Softpedia
http://i.imgur.com/BWELEfV.gif
http://i.imgur.com/4luY3rU.gif
http://www.raymond.cc/blog/adwclean...
http://www.bleepingcomputer.com/dow...
Author's site
http://general-changelog-team.fr/en...
Tutorial
http://general-changelog-team.fr/en...
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Clean.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.
AdwCleaner is a program that searches for and deletes Adware, Toolbars, Potentially Unwanted Programs (PUP), and browser Hijackers from your computer. By using AdwCleaner you can easily remove many of these types of programs for a better user experience on your computer and while browsing the web.
The types of programs that AdwCleaner targets are typically bundled with free programs that you download from the web. In many cases when you download and install a program, the install will state that these programs will be installed along with the program you downloaded. Unless you perform a Custom install, these unwanted programs will automatically be installed on your computer leaving you with extra browser toolbars, adware, and other unwanted programs. AdwCleaner is designed to search for and remove these types of programs.
AdwCleaner Usage Instructions:
Using AdwCleaner is very simple. Simply download the program and run it. You will then be presented with a screen that contains a Search and Delete button. The Search button will cause AdwCleaner to search your computer for unwanted programs and then display a log showing the various files, folders, and registry entries used by these programs.
To delete these unwanted programs simply click on the Delete button, which will cause AdwCleaner to reboot your computer and remove the files and registry entries associated with the various adware that you are removing. On reboot, AdwCleaner will display a log showing the files, folders, and registry entries that were removed.
Please note that Antivir Webguard uses ASK Toolbar as part of its web security. If you remove ASK by using Adwcleaner, Antivir Webguard will no longer work properly. Therefore, if you use this program please use the instructions below to access the options screen where you should enable /DisableAskDetections before using AdwCleaner.
AdwCleaner also contains some advanced options that disable certain detections. To access these options, you can click on the question mark (?) in the upper left corner of the program and then click on Options. You will then be presented with a dialog where you can disable various detections. These options are described below:
/DisableAskDetection - This option disables Ask Toolbar detection.
/DisableIEDetection - This option disables Internet Explorer specific detections.
/DisableFFDetection - This option disables Firefox specific detections.
/DisableChromeDetection - This option disables detections for Chrome & Chromium based browsers.
/DisableOperaDetection - This option disables Opera specific detections.
/DisableProxyDetection - This option disables Internet Proxy detections. Windows XP/Vista/7/8 32-bit program. May not work on 64-bit operating systems.

Step 2: Run Junkware Removal Tool
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
How to download from Softpedia
http://i.imgur.com/qO92huz.gif
http://i.imgur.com/qzTUYkX.gif
http://www.bleepingcomputer.com/dow...
http://thisisudax.blogspot.com.au/2...
Download Junkware Removal Tool onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
Warning! Once the scan is complete JRT will shut down your browser with NO warning.
Shut down your protection software now to avoid potential conflicts.
Temporarily disable your antivirus and any antispyware real time protection before performing a scan.
Click this link to see a list of security programs that should be disabled and how to disable them.
http://www.bleepingcomputer.com/for...
http://www.techsupportforum.com/for...
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved onto your Desktop and will automatically open.
Copy and Paste the contents of the JRT.txt log please.

Step 3: Update & Run Malwarebytes' Anti-Malware ( MBAM ) Free Version. Use Quick scan ( now called Threat Scan )
Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box to Scan for rootkits.
http://i.imgur.com/dZgt1g2.gif
Copy and Paste the contents of the log, in your reply please.
http://i.imgur.com/U9IqcVj.gif
http://i.imgur.com/zHMG6J9.gif
Or,
http://i.imgur.com/eLcvyZD.gif
Malwarebytes' Anti-Malware
http://www.softpedia.com/get/Antivi...
http://www.softpedia.com/progScreen...
http://www.malwarebytes.org/free/
Make sure you uncheck > Enable free trial < at the END of the install.
http://i.imgur.com/tUFCbYz.gif
Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box to Scan for rootkits.
If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.
If your MBAM log indicates "No action taken". That's usually a result of NOT clicking the Apply Actions button after the scan. In most cases, a restart will be required.
http://i.imgur.com/U9IqcVj.gif
http://i.imgur.com/zHMG6J9.gif
Or,
http://i.imgur.com/eLcvyZD.gif

message edited by Johnw


Report •

#2
August 24, 2014 at 09:51:17
Why are you running multiple anti-virus programs? And why are you still running IE10? When's the last time you ran Windows Update? You should have IE11.

Report •

#3
August 24, 2014 at 11:12:41
Hi,

I actually uninstalled AVG last night but I ran it because I wasn't sure if McAfee actually removed the Trojan. I had an experience with McAfee about a year or two ago where it said it removed a virus but in actuality, the virus was still on the system. I booted up one night and had a USB external hard drive connected and heard clicking noises coming out of it; it sounded like the Associated Press days when they had special reports on tv and you heard the type writers in the background. When I looked at the F drive I literally saw files disappearing, I thought they were deleted but were hidden. When I ran McAfee, the external hd had viruses on it and I lost some backup files. I've always been careful but the only thing I downloaded was FireFox and Google Chrome. McAfee popped up soon after FireFox was being downloaded. The issue was I wasn't able to get IE11 to open iTunes so I downgraded to 10 but it too had an issue and used Chrome to finally download iTunes. I tried AVG to see what it would find and it found one harmful Trojan and the others mild. I don't think AVG is better than McAfee since McAfee did find it too but AVG had FireFox as a mild virus and that's when I knew that it was a false positive. I downloaded FireFox from its site. I uninstalled IE11 because of pages not loading correctly and I kept getting a Blank page. I might just go back to IE11 as it appears that 10 might be the issue and I also uninstalled FireFox and Chrome as I was able to get iTunes to work. I will try 11 again and see what happens.


Report •

Related Solutions

#4
August 24, 2014 at 11:31:27
Hi Riider.

I just updated to IE11 so far so good. An option came up Recommended settings on whether I wanted to have Microsoft look look into malicious websites or choose the setting to not send anything. I chose ask me later. Do you know what that is and what do most choose? I am also looking into Johnw's suggestions as well!!!

Thanks!!!


Report •

#5
August 24, 2014 at 11:36:24
Definitely pursue the programs Johnw suggested. They often find and fix issues that anti-virus programs can miss.

Clicking can be the symptom of a bad drive but continue looking at other options first.

Always pop back and let us know the outcome - thanks


Report •

#6
August 24, 2014 at 19:50:02
Hi,

I ran the 1st two but I didn't read your reply carefully to past the details! I noticed that AdWare Cleaner said pending but I didn't see anything populate the careen and so I clicked Clean. It cleaned out several things and I apologize, I am not as tech as I should be. I tried to see if it saved a file so that I can paste it but I don't see it and I tried to search for it. Do you know if there is a way I can look up a report so that I can copy and paste it, or is it gone?

I will run the malwar tomorrow as it's getting late. Thanks for your help!!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Vito on Sun 08/24/2014 at 22:26:48.39
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 08/24/2014 at 22:32:30.11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Report •

#7
August 24, 2014 at 20:15:26
John,

I actually ran malware bytes as I just wanted it done. It found 23 objects and I quarantined them. I'm not sure what a lot of it means but I hope the system is ok!

Thanks so much! it has been running stable with no issues on multiple pages.


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 8/24/2014
Scan Time: 10:50:22 PM
Logfile: 08.24.14 Malware Bytes Log.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.08.24.07
Rootkit Database: v2014.08.21.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Vito

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 330354
Time Elapsed: 12 min, 32 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 10
PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{bd7c9b62-a7d9-4405-be51-7fd633f08791}, Quarantined, [b8e1c10890ebaf87a578640d9e64956b],
PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{be7650b2-5936-4ee6-b4f2-ae385db13a90}, Quarantined, [b8e1c10890ebaf87a578640d9e64956b],
PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{98D9C91C-10F5-4B34-BD72-AE981CAA6F54}, Quarantined, [b8e1c10890ebaf87a578640d9e64956b],
PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{98D9C91C-10F5-4B34-BD72-AE981CAA6F54}, Quarantined, [b8e1c10890ebaf87a578640d9e64956b],
PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{be7650b2-5936-4ee6-b4f2-ae385db13a90}, Quarantined, [b8e1c10890ebaf87a578640d9e64956b],
PUP.Optional.SmarterPower.A, HKU\S-1-5-21-1592505340-2602377284-1314361008-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{BD7C9B62-A7D9-4405-BE51-7FD633F08791}, Quarantined, [b8e1c10890ebaf87a578640d9e64956b],
PUP.Optional.SmarterPower.A, HKU\S-1-5-21-1592505340-2602377284-1314361008-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{BD7C9B62-A7D9-4405-BE51-7FD633F08791}, Quarantined, [b8e1c10890ebaf87a578640d9e64956b],
PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SmarterPower, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, HKLM\SOFTWARE\WOW6432NODE\SmarterPower, Quarantined, [f7a20bbe88f39d9908185890fa080ef2],
PUP.Optional.SmarterPower.A, HKU\S-1-5-21-1592505340-2602377284-1314361008-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmarterPower, Quarantined, [5346ac1d83f84aec2df441a7bc4605fb],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 4
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\bin, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\bin\plugins, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\bin\TEMP, Quarantined, [3a5f58715427d363130cfcecf40e49b7],

Files: 9
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\SmarterPower.ico, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\0, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\7za.exe, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\SmarterPowerUninstall.exe, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\updateSmarterPower.InstallState, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\bin\7za.exe, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\bin\BrowserAdapterS.7z, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\bin\SmarterPower.PurBrowseG.zip, Quarantined, [3a5f58715427d363130cfcecf40e49b7],
PUP.Optional.SmarterPower.A, C:\Program Files (x86)\SmarterPower\bin\utilSmarterPower.InstallState, Quarantined, [3a5f58715427d363130cfcecf40e49b7],

Physical Sectors: 0
(No malicious items detected)


(end)


Report •

#8
August 24, 2014 at 20:24:33
No need for the AdwCleaner log Veets, it opened the door for Malwarebytes to do it's work.

RunTFC
http://www.geekstogo.com/forum/file...
http://www.bleepingcomputer.com/dow...
http://oldtimer.geekstogo.com/TFC.exe
http://www.itxassociates.com/OT-Too...
Download it onto your Desktop If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
Double-click TFC.exe to run it. Note: If you are running on Vista/Windows 7/8, right-click on the file and choose Run As Administrator).
It will close all programs when run, so make sure you have saved all your work before you begin.
Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.


Report •

#9
August 24, 2014 at 20:28:29
As you can see from your logs, you had a lot of stuff installed, that you did not know had been installed.
A lot of programs, now give you the choice to install toolbars & other during the install. Either uncheck these items during install, or use Custom install. No more click, click during an install, you have to read after each click.

I use Softpedia, down the bottom of the page, they make you aware what Ad-supported programs the author of the program has included.
Sample pages
http://www.softpedia.com/get/CD-DVD...
http://www.softpedia.com/get/Multim...
Users are advised to pay attention while installing this ad-supported application:
· Offers to change the homepage for web browsers installed in the system
· Offers to change the default search engine for web browsers installed in the system
· Offers to install StartNow Toolbar that the program does not require to fully function
SS ( screenshots ) of above
http://i.imgur.com/CSBplyA.gif
http://i.imgur.com/3eWWoXm.gif

Use Unchecky to help prevent these third party installs. Nothing is perfect, the badies are always ahead of the goodies.
http://www.softpedia.com/get/System...
http://www.softpedia.com/progScreen...
http://unchecky.com/
How to download from Softpedia
http://i.imgur.com/iZ3Fzmc.gif
http://i.imgur.com/NNgm1rF.gif
A reliable application that aims to protect your computer against third-party components often offered during software installations.


Report •

#10
August 24, 2014 at 20:56:30
John,

Thanks! From what I read, it looks like none of the items were malicious, am I correct? I plan on checking everything during an install!!!


Report •

#11
August 24, 2014 at 21:40:57
Nothing malicious Veets, but still very disruptive.


Report •

Ask Question