Plug-in errors

[Eggles]

I thought I had resolved the problem I was having with Internet Explorer being unable to access certain sites, but the problem has reappeared even though I am regularly deleting Temp Internet Files and all cookies. Sometimes I will click on one of the links in my Favourites list and end up on a different site. Or a site I visit often simply will not load.

Since the first suggestion on this forum appears to be to run Hijack This, I downloaded and ran it with the following results:

Logfile of HijackThis v1.97.3
Scan saved at 1:54:07, on 23/10/03
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v5.00 SP2 (5.00.3314.2100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\TREND MICRO\PC-CILLIN 2003\PCCIOMON.EXE
C:\PROGRAM FILES\TREND MICRO\PC-CILLIN 2003\TMPROXY.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\STARTER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\HDAEMON.EXE
C:\WINDOWS\SYSTEM\HPSJVXD.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\TELSTRA\TOOLBAR\BPUMTRAY.EXE
C:\PROGRAM FILES\TREND MICRO\PC-CILLIN 2003\PCCGUIDE.EXE
C:\PROGRAM FILES\TREND MICRO\PC-CILLIN 2003\PCCCLIENT.EXE
C:\PROGRAM FILES\TREND MICRO\PC-CILLIN 2003\POP3TRAP.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\MSOFFICE.EXE
C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\DISTILLR\ACROTRAY.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\BIG POND ADVANCE\BIGPOND.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\MY DOWNLOAD FILES\HIJACKTHIS\HIJACKTHIS.EXE

O2 - BHO: (no name) - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINDOWS\SYSTEM\NZDD.DLL
O2 - BHO: (no name) - {4C7B6DE1-99A4-4CF1-8B44-68889900E1D0} - C:\PROGRAM FILES\TELSTRA\TOOLBAR\BPUMTOOLBAND.DLL
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\downloaded program files\googletoolbar_en_2.0.95-deleon.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\ACROBAT\ACTIVEX\ACROIEHELPER.OCX
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: BigPond Toolbar - {7A431EC4-CC21-4DF7-9DB1-A2CF74C4CC98} - C:\PROGRAM FILES\TELSTRA\TOOLBAR\BPUMTOOLBAND.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\downloaded program files\googletoolbar_en_2.0.95-deleon.dll
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Hercules Daemon] hdaemon.exe
O4 - HKLM\..\Run: [HPSCANMonitor] C:\WINDOWS\SYSTEM\hpsjvxd.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [BigPond Toolbar] "C:\Program Files\Telstra\Toolbar\bpumTray.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 2003\pccguide.exe"
O4 - HKLM\..\Run: [PCCIOMON.exe] "C:\Program Files\Trend Micro\PC-cillin 2003\PCCIOMON.exe"
O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 2003\PCCClient.exe"
O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 2003\Pop3trap.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [PCCIOMON.exe] "C:\Program Files\Trend Micro\PC-cillin 2003\PCCIOMON.exe"
O4 - HKLM\..\RunServices: [tmproxy] C:\Program Files\Trend Micro\PC-cillin 2003\tmproxy.exe
O4 - Startup: Microsoft Office Shortcut Bar.lnk = C:\Program Files\Microsoft Office\Office\MSOFFICE.EXE
O4 - Startup: stimon.exe.lnk = C:\WINDOWS\SYSTEM\stimon.exe
O4 - Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmsearch.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmsimilar.html
O8 - Extra context menu item: Backward &Links - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate Page - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLETOOLBAR_EN_2.0.95-DELEON.DLL/cmtrans.html
O12 - Plugin for .png: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin4.dll
O12 - Plugin for .exe: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npaudi o.dll
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {57BBF06E-D997-11D3-8997-00104BD12D94} (PCPDiskHealth Class) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (sys Class) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://www.pcpitstop.com/mhLbl.cab
O16 - DPF: {DF6A0F17-0B1E-11D4-829D-00C04F6843FE} (Microsoft Office Tools on the Web Control) - http://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab
O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/ProductUpdates/content/opuc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-98B8-444553540000} - http://active.macromedia.com/flash3/cabs/swflash.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {72C23FEC-3AF9-48FC-9597-241A8EBDFE0A} (InstallShield International Setup Player) - http://ftp.hp.com/pub/automatic/player/isetupML.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

Telstra/Bigpond is my cable ISP.

I am also experiencing another problem as well when I try and download Ad Aware or Zone Alarm. When I click on the download link (and I have tried from numerous sites such as Tucows and PCWorld and even AnalogX, I get the following error message(s), which I can only get out of by Control/Alt/Delete:

Error locating object handler

http://www.boomspeed.com/eggles/adaware_dl.gif

I went to the site suggested but didn't know which I was supposed to download from this list:

http://www.boomspeed.com/eggles/error3.gif

I also get these error messages:

Plug-in error

http://www.boomspeed.com/eggles/error4.gif

Plug-in error 2

http://www.boomspeed.com/eggles/error5.gif

Any suggestions?

[Steven.Bentley]

For the downloads, you need to Save rather than Open when prompted, other than that I'll let someone more experienced with HijackThis comment :)

[Eggles]

Steve

I don't even get to the screen asking to 'save' or 'open', and I would always choose 'save' anyway. That first graphic is what I get when I click on the button to download.

[Steven.Bentley]

In that case I'd have a look at your Security settings in IE Tools>options, looks like the ActiveX settings are too high

[Eggles]

Steve

I have reset the internet security options to default.

http://www.boomspeed.com/eggles/net_options.gif


The ActiveX settings are shown below (in two graphics because I couldn't get them to fit on one).

I have not altered these settings for a long time. Are they set to what you would advise?

http://www.boomspeed.com/eggles/sec_set1.gif

http://www.boomspeed.com/eggles/sec_set2.gif

[AnnMarie]

The problem is probably caused by NetZip Download Demon. Have you uninstalled it Eggles? If not do so. See Error Locating Object Handler (http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/q180/5/53.asp&NoWebContent=1) for the fix.

[Eggles]

AnnMarie

You are amazing. Although I do not understand how the cause of the problem could have occurred

This issue can occur if an add-in program or ActiveX control on your computer has been uninstaled or deleted

I haven't uninstalled anything for a long time. From my interpreation of the article this NetZip possibly caused the problem.

What is this NetZip Download Demon? Is is something that I could have inadvertedly downloaded along with something else? Is there a clue to its existence on my computer in the HiJack This log?

However, I finally managed to download a copy of IE6 and installed it, and I think it may have resolved the issue. I will try redownloading AdAware and see if it works.

[Eggles]

I just googled for info on the NetZip Download Demon http://www.pcworld.com/reviews/article/0,aid,14177,00.asp and I know for certain I have NEVER downloaded it. I have a cable connection and have never needed a Free utility puts an end to maddening download sessions marred by dropped connections.

And I certainly have never purchased Zip Magic Shrink files up to 95%! Use Zip files without unzipping them first; Send large email attachments faster; AutoZip for Outlook; Zip&Mail Wizard for Novices

The final reference is to Cheyenne web browser anti-virus - again, another program I have NEVER purchased. Interestingly, it repeats some of the info from the MSKB article and adds a bit:

CAUSE
This issue can occur if an add-in program or ActiveX control on your computer has been uninstalled or deleted, but entries for the add-in program or ActiveX control remain in the registry or you have more than one Web browser installed on your PC and one has recently been removed or installed. (my italics as this opart was not in the MSKB article. I have both IE and NN on my computer, but they have both been there for years, I haven't removed or installed either of them recently - until last night, when I installed IE6.

So I have no idea why this error message started appearing just recently.

[AnnMarie]

What is this NetZip Download Demon? Is is something that I could have inadvertedly downloaded along with something else? Is there a clue to its existence on my computer in the HiJack This log?


Hi again Eggles - yes, the clue was in your log. The below Browser Helper Object is Netzip. NetZip's "Download Demon" was purchased by Real Networks and renamed "Real Download". Then Netscape/AOL licensed it from Real and called it "Netscape Smart Download." The jury is still out on whether or not this is spyware. So far, there is no proof that it installs without the users knowledge. Does anyone else have access to your PC?

O2 - BHO: (no name) - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINDOWS\SYSTEM\NZDD.DLL

[Eggles]

Does anyone else have access to your PC?

Only my two adult daughters.

O2 - BHO: (no name) - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINDOWS\SYSTEM\NZDD.DLL

Should I delete this DLL? I am still having the same problems downloading an EXE program. I tried last night to DL the latest version of Adaware and could only do it by right clicking on the link and using 'save target as'. Otherwise nothing happened.

[AnnMarie]

Yep, run Hijack This again, select it and then click on Fix Selected. Reboot afterwards and try again.