IE8,FIREFOX & SAFARI closes suddenly when clicked.

[dasher1234582]

Hai,

Whenever i try to open any browser(be it ie8,firefox & safari), it opens and then closes suddenly.
Earlier, i had internet explorer 6 and encountered the same problem.

Suspecting an earlier incomplete installation of ie8, i installed ie8 but

encountered the same

problem again.I reset all settings but of no use . i had my autoupdate feature

turned on.
Current System config:- Win XP SP2 , ie8,firefox, safari no anti virus.

[krishnandu.sarkar]

What do you mean by closing automatically?? Are they crashing??? In that case test your RAM's with Memtest86+. As you are saying that you use internet with no antivirus, I would suspect a infection in this case. Scan your full PC with any good updated AV. I recommend AVG and Avast for free versions and KIS for paid ones.

[dasher1234582]

Yes . They are crashing . just 3 seconds after opening. Sometimes , firefox don't even open at all . I tried MBAM (latest ver. ) but of no good use . MBAM found only 1 malware---''rogue.netcom3'' and quarantined it and later removed from system . So, i don't think it is malware of any type . It is a problem with browsers , i suppose.

[ico]

Originally Posted by dasher1234582

no anti virus.

Must be a Virus then.

Download Avira AntiVir and scan. http://www.free-av.de/en/trialpay_do...antivirus.html

It is the best free anti-virus. Better than AVG and avast.

[sakumar79]

Best to run the scan in safe mode...

Arun

[sude]

hmmm ... seems to be a viral infection.
can you post a HijackThis report here.. It may be helpful.

//SUDE

[dasher1234582]

The following is the TM Hijack this logfile:-

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:04:12 AM, on 3/11/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
c:\progra~1\escan\EconSer.exe
c:\progra~1\escan\eConceal.exe
C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROW~1\eScanBD\avp mapp.exe
C:\PROGRA~1\eScan\TRAYSSER.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Common Files\MicroWorld\Agent\MWASER.EXE
C:\PROGRA~1\eScan\consctl.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\MicroWorld\Agent\MWAgent.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\PROGRA~1\eScan\TRAYICOS.EXE
C:\PROGRA~1\eScan\LAUNCH.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TypingMaster\KBOOST.EXE
C:\Program Files\SRS Labs\WOW HD for ViewSonic\SRSViewSonic_Win32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\eScan\Vista\eScanMon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [eScan Updater] C:\PROGRA~1\eScan\TRAYICOS.EXE /App
O4 - HKLM\..\Run: [MailScan Dispatcher] "C:\PROGRA~1\eScan\LAUNCH.EXE" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RRT-Auto] C:\Documents and Settings\san123\Desktop\RRT\RRT.exe auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TypingSatellite] "C:\Program Files\TypingMaster\KBOOST.EXE"
O4 - HKCU\..\Run: [SRS WOW HD for ViewSonic] "C:\Program Files\SRS Labs\WOW HD for ViewSonic\SRSViewSonic_Win32.exe" /hideme
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PersSecurity] C:\Program Files\PersSecurity\psecurity.exe
O4 - HKCU\..\Run: [TOY5KNQ8OC] C:\DOCUME~1\san123\LOCALS~1\Temp\Omd.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "D:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{11805620-A7C6-44ED-9D40-6E34D64DC8BC}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS1\Services\Tcpip\..\{11805620-A7C6-44ED-9D40-6E34D64DC8BC}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS2\Services\Tcpip\..\{11805620-A7C6-44ED-9D40-6E34D64DC8BC}: NameServer = 208.67.222.222,208.67.220.220
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: eSLogOn - C:\WINDOWS\SYSTEM32\eSLogOn.dll
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: eConServ (EconService) - MicroWorld Technologies Inc. - c:\progra~1\escan\EconSer.exe
O23 - Service: eScan Monitor Service - MicroWorld Technologies Inc. - C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROW~1\eScanBD\avp mapp.exe
O23 - Service: eScan Server-Updater (eScan-trayicos) - MicroWorld Technologies Inc. - C:\PROGRA~1\eScan\TRAYSSER.EXE
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\Program Files\Common Files\MicroWorld\Agent\MWASER.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 6679 bytes

[ico]

O4 - HKCU\..\Run: [PersSecurity] C:\Program Files\PersSecurity\psecurity.exe
O4 - HKCU\..\Run: [TOY5KNQ8OC] C:\DOCUME~1\san123\LOCALS~1\Temp\Omd.exe

These might be the problem causers. Just simply install Avira and have a scan. http://www.free-av.de/en/trialpay_do...antivirus.html

[Zangetsu]

Originally Posted by dasher1234582

Hai,

Current System config:- Win XP SP2 , ie8,firefox, safari no anti virus.

U r assuming dat internet will spare u from giving virus/worms if u dont use antivirus......its like inviting bull to kick ur ass

[rhitwick]

Originally Posted by dasher1234582

Current System config:- Win XP SP2 , ie8,firefox, safari no anti virus.

U r connecting to net, without any anti virus???!!!!

Whoa dude, u sure have guts.

Install a a/v first, free-Avira or paid Kaspersky Internet Security suite

[ico]

Windows sucks. Use Linux for no-nonsense browsing.

[sakumar79]

In addition to what Ico pointed out, I think the following also need to be checked...

O4 - HKLM\..\Run: [RRT-Auto] C:\Documents and Settings\san123\Desktop\RRT\RRT.exe auto
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: eSLogOn - C:\WINDOWS\SYSTEM32\eSLogOn.dll

Arun

[CA50]

Your system is surely infected with virus. just download a good AV and give a through scan. I personally suggest Avast.

[dasher1234582]

I tried to repair it by using windows recovery console.(by iserting a winXP SP2 cd during boot up) but it asks for administrative password. I haven't set it yet. how can i find out my administrative password?
And why is thinkdigit.com loading so slow?

[ico]

If you haven't set any password for the Administrator account, then simply press Enter.

But seriously, a clean Format + Reinstall is the best solution for a Windows based PC.

[dasher1234582]

I can't enter bcuse when i try, it says password is incorrect;while i haven't typed any.what can i do?I tried using XP sp2 serial key but of no use.

[sude]

No antivirus in this wild and greedy-for-info world would cost you a lot!
Hope you do not perform online banking operations on ur sys.

Nevertheless I can clearly see entries from "escan" in the log. Now escan is an antivirus. Are you sure there's no antivirus on your system??

[dasher1234582]

: smile:

Originally Posted by sude

No antivirus in this wild and greedy-for-info world would cost you a lot!
Hope you do not perform online banking operations on ur sys.

Nevertheless I can clearly see entries from "escan" in the log. Now escan is an antivirus. Are you sure there's no antivirus on your system??

dear SUDE,
it was only a shareware version of escan .i had n't uninstaLLED IT though it wont work , in the hope of getting a password but of no avail .I put winXP cd and did"sfc / scannow", (with theCD page in the background---w/o which it won't work) and the problem got solved somehow.Thanx for ur help. i installed ie 8 later and am going to load NOD 32 antivirus.:smil e: