Outline · Standard · [ Linear+ ] Help with some problems

Hey Mates, i'm having a few problems with my computer i was hoping that you guys would be able to help me.

First problem is my homepage stays blank. no matter how many times i change it, it always goes back to being blank. I've tried to manually change it, i tried looking in the registey, tried running spyware software, and nothing cept of a format and reinstall seems to work.

Second problem it seems that my computer really likes to slow down from time to time. some of the times a simple webpage will take up all my cpu resourses. and if i even dare try to open two websites it crashes internet explorer.

third when i use spybot search and destory it finds some spyware and then deletes it, but it says that some can't not be deleted, try again at windows boot up. so i try again and all the spyware is back again.

thats all i can think of at the moment. its just a real pain. i tried checking for viruses and i deleted all the ones that i had, but nothing i do seems to get rid of these problems. any help would be greatful.

I'd say that the first and the third problem are related. If you can't get rid of it with Spybot, use ad-aware or pestpatrol. If that doesn't help, you might wanna try googling it and remove it manualy.

The 2nd prob might be a memory leak in IE, or a plugin that is being run at the same time. But it might also disappear when the spyware is gone....

Good luck ;)

Try doing a repair on IE6 in the Add/Remove programs area. It's in the Windows Components area. If you click the Change/Remove button it will give you a repair option. And make sure you're system is up to date from Windows Update.

definatly spyware related ... Search and destroy and adaware fied that problem for me ....

If it is spyware related try getting an app call 'registry cleaner'. It will identify all recent changes to the registry and may then you can isolate the problem and delete those entries in the registry.

Personally, I believe that I'd do a reinstall. Sometimes getting rid of spyware that is so imbedded as yours seems to be, is an impossible task... or, you may try booting into Safe mode and running spybot... Good Luck

Boss, you can Spam as much as you want in Chit Chat, but it will not be tolerated in any of the support forums. :angry: :angry:

If you can't post anything helpful in a Support thread, DON'T POST AT ALL!!! :angry:

Tews, welcome to nFm and thanks for your suggestions. :) Could I ask you please to read the rules concerning sig sizes. You will find them here. Your sig at the moment is outside our agreed limits. Will you please either remove it or resize it accordingly. Thanks. :)

~Bear

This post has been edited by Bearsland: Apr 11 2004, 04:49 PM

try this

Click on the link below to download CWshredder
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Run the program and let it do it's thing. Make sure to click on "Fix" and not scan only.

Then run hijack this (http://www.thespykiller.co.uk/)

First thing to do is Make a folder on your hard drive, like c:\hjt and move hijackthis.exe into a folder, don't run it from your temporary internet files.


Run HJT again and check:

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\ljble.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\ljble.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\ljble.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\ljble.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\ljble.dll/sp.html (obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\ljble.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {6EEA0809-1F57-4638-863D-CFEF3545BEEC} - C:\WINDOWS\System32\ljble.dll


Close all applications and browser windows before you click "fix checked".


Include this one if it's not valid.
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://vip-fld-pxy:8080/fieldceproxy.pac

Then:

Restart in safe mode.

Open My Computer. Go to Tools, Folder Options and click on the View tab. Make sure that "Show hidden files and folders" is checked. Also uncheck "Hide protected operating system files". Now click "Apply to all folders"
Click "Apply" then "OK"

Now using Windows Explorer delete the following.

C:\WINDOWS\System32\ljble.dll --> file

Reboot and post another HJT log.

This post has been edited by artzelda: Apr 11 2004, 06:41 PM

thanks mates. i'll get on trying that right away

well i gave it a try mate, but there seems to be one problem.
C:\WINDOWS\System32\ljble.dll --> file
i can not seem to find this file anywhere.

the first program deleted some coolweb things but other then that i still have the same problems. my homepage changing to about:blank.

songi when you home? i fix anything you cant later when you get back

songo, also grab spywareblaster. I use that in conjunction with ad aware 6 pro and nothing is on the computer

i have spywareblaster. i also use ad aware 6 pro spy bot search and destroy, and a few other things. i've cleaned out the registry, i've doe all i can think of. right now i'm updating my windows.

oh and boss i'll be home at the end of the month.

Usually everytime you run CWS it changes the homepage back to about:blank, untill you set it back to whatever you want it to be.

Also from that same site as artzelda posted is a "hijack this" prog that works pretty well too.

This post has been edited by boxcrash: Apr 14 2004, 04:36 PM

i just finished using hijack. still no results. and yea i think it has something to do with cws. though i used the shredder program and it says its all gone.