Browser closes unexpectedly

I totally rebuild the machine from bare metal. Symantec corp edition 11.0 is
kept updated daily and the last update was yesterday when I rebuilt the
machine. I ran all the Microaoft updates and only a few of the machines in
the organization have this problem.

"PA Bear [MS MVP]" wrote:

> > ...the other one will have [Internet?] explorer shut down.
>
> Where & how did you obtain Symantec AntiVirus?
>
> There is a very good chance that you are seeing the effects of a hijackware
> infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/malwareremove/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
> (only!) in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 3. Run a /thorough/ check for hijackware, including posting the requested
> logs in an appropriate forum, not here.
>
> Checking for/Help with Hijackware
> http://aumha.net/viewtopic.php?f=30&t=4075
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> **Chances are you will need to seek expert assistance in
> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
> http://www.spywarewarrior.com/viewforum.php?f=5,
> http://www.dslreports.com/forum/cleanup,
> http://www.bluetack.co.uk/forums/index.php,
> http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>
>
> Stu wrote:
> > I have clients who go to different sites and try to open pdf files or
> > click
> > on links to go to other pages, or use the back button to migrate to a
> > previous page. If I have two seemingly exact machines, one of which was
> > recently rebuild, one of them might be able to access the pages and
> > documents without any trouble and the other one will have explorer shut
> > down. I've tried it with IE 6 and IE 7 and the same thing happens. All
> > are running XP with SP3, Office 2003, IE 6 or 7 (tried with both) Symantec
> > antivirus, adobe 8, plenty of RAM.
> >
> > I'm perplexed.
>
>

Only a few machines in the organization might be infected, Stu. <shrug>

Stu wrote:
> I totally rebuild the machine from bare metal. Symantec corp edition 11.0
> is kept updated daily and the last update was yesterday when I rebuilt the
> machine. I ran all the Microaoft updates and only a few of the machines
> in
> the organization have this problem.
>
> "PA Bear [MS MVP]" wrote:
>
>>> ...the other one will have [Internet?] explorer shut down.
>>
>> Where & how did you obtain Symantec AntiVirus?
>>
>> There is a very good chance that you are seeing the effects of a
>> hijackware
>> infection!
>>
>> NB: If you had no anti-virus application installed or the subscription
>> had
>> expired *when the machine first got infected* and/or your subscription
>> has
>> since expired and/or the machine's not been kept fully-patched at Windows
>> Update, don't waste your time with any of the below: Format & reinstall
>> Windows. A Repair Install will NOT help!
>>
>> 1. See if you can download/run the MSRT manually:
>> http://www.microsoft.com/security/malwareremove/default.mspx
>>
>> NB: Run the FULL scan, not the QUICK scan! You may need to download the
>> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
>> machine and rename it to SCAN.EXE before running it.
>>
>> 2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection'
>> scan
>> (only!) in Safe Mode with Networking, if need be:
>> http://onecare.live.com/site/en-us/center/howsafe.htm
>>
>> 3. Run a /thorough/ check for hijackware, including posting the requested
>> logs in an appropriate forum, not here.
>>
>> Checking for/Help with Hijackware
>> http://aumha.net/viewtopic.php?f=30&t=4075
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>>
>> **Chances are you will need to seek expert assistance in
>> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
>> http://www.spywarewarrior.com/viewforum.php?f=5,
>> http://www.dslreports.com/forum/cleanup,
>> http://www.bluetack.co.uk/forums/index.php,
>> http://aumha.net/viewforum.php?f=30 or other appropriate forums as
>> well.**
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>>
>>
>> Stu wrote:
>>> I have clients who go to different sites and try to open pdf files or
>>> click
>>> on links to go to other pages, or use the back button to migrate to a
>>> previous page. If I have two seemingly exact machines, one of which
>>> was
>>> recently rebuild, one of them might be able to access the pages and
>>> documents without any trouble and the other one will have explorer shut
>>> down. I've tried it with IE 6 and IE 7 and the same thing happens. All
>>> are running XP with SP3, Office 2003, IE 6 or 7 (tried with both)
>>> Symantec
>>> antivirus, adobe 8, plenty of RAM.
>>>
>>> I'm perplexed.

Hello,

Try running IE with add-ons disabled

*** If you are running IE6: ***
Start > Control Panel > Internet Options > Advanced (tab) > UNCHECK "Enable
third-party browser extensions" > OK

Run IE6 now.

If it works now, one of your add-ons is causing the problem. Start Internet
Explorer as normal, Tools, Manage Add-ons, Enable or Disable Add-ons.

Disable all the add-ons. Enable third-party browser extensions in Internet
Options.

Restart your browser and enable the add-ons one by one till the problem
appears and you get the culprit.

*** If you are running IE7 ***
Go to Start > Programs > Accessories > System Tools >
Internet Explorer 7 (No Add-ons) to start without any add-ons. Try using the
browser and see if the same problem arises.

If the problem does not occur again, start IE7 normally, go to Tools >
Manage Add-ons and disable all the add-ons. Enable each add-on one at each
time and see if the problem occurs again. Once it occurs again after
enabling an add-on, you have nailed the culprit.

(if the menu bar does not appear, hit the Alt key on the keyboard)

You may also want to do a spyware scan by using the following programs
(free)
http://www.superantispyware.com/
http://www.malwarebytes.org/mbam.php


__
http://www.bootstrike.com/ComputerService/
Singapore Computer Home Remote On-Site Repair Service
"Stu" <Stu RemoveThis @discussions.microsoft.com> wrote in message
news:6FAA80BE-242F-4C44-B5C7-80986E03970C@microsoft.com...
>I have clients who go to different sites and try to open pdf files or click
> on links to go to other pages, or use the back button to migrate to a
> previous page. If I have two seemingly exact machines, one of which was
> recently rebuild, one of them might be able to access the pages and
> documents
> without any trouble and the other one will have explorer shut down. I've
> tried it with IE 6 and IE 7 and the same thing happens. All are running
> XP
> with SP3, Office 2003, IE 6 or 7 (tried with both) Symantec antivirus,
> adobe
> 8, plenty of RAM.
>
> I'm perplexed.

I'll give it a try and let you know next week. My client is closed for the
weekend.

"Singapore Computer Service" wrote:

> Hello,
>
> Try running IE with add-ons disabled
>
> *** If you are running IE6: ***
> Start > Control Panel > Internet Options > Advanced (tab) > UNCHECK "Enable
> third-party browser extensions" > OK
>
> Run IE6 now.
>
> If it works now, one of your add-ons is causing the problem. Start Internet
> Explorer as normal, Tools, Manage Add-ons, Enable or Disable Add-ons.
>
> Disable all the add-ons. Enable third-party browser extensions in Internet
> Options.
>
> Restart your browser and enable the add-ons one by one till the problem
> appears and you get the culprit.
>
> *** If you are running IE7 ***
> Go to Start > Programs > Accessories > System Tools >
> Internet Explorer 7 (No Add-ons) to start without any add-ons. Try using the
> browser and see if the same problem arises.
>
> If the problem does not occur again, start IE7 normally, go to Tools >
> Manage Add-ons and disable all the add-ons. Enable each add-on one at each
> time and see if the problem occurs again. Once it occurs again after
> enabling an add-on, you have nailed the culprit.
>
> (if the menu bar does not appear, hit the Alt key on the keyboard)
>
> You may also want to do a spyware scan by using the following programs
> (free)
> http://www.superantispyware.com/
> http://www.malwarebytes.org/mbam.php
>
>
> __
> http://www.bootstrike.com/ComputerService/
> Singapore Computer Home Remote On-Site Repair Service
> "Stu" <Stu.RemoveThis@discussions.microsoft.com> wrote in message
> news:6FAA80BE-242F-4C44-B5C7-80986E03970C@microsoft.com...
> >I have clients who go to different sites and try to open pdf files or click
> > on links to go to other pages, or use the back button to migrate to a
> > previous page. If I have two seemingly exact machines, one of which was
> > recently rebuild, one of them might be able to access the pages and
> > documents
> > without any trouble and the other one will have explorer shut down. I've
> > tried it with IE 6 and IE 7 and the same thing happens. All are running
> > XP
> > with SP3, Office 2003, IE 6 or 7 (tried with both) Symantec antivirus,
> > adobe
> > 8, plenty of RAM.
> >
> > I'm perplexed.
>
>
>