IE32 Help, please!

VegaSpydr · 18 Sep 2011

DOn't know where to post this, so forgive me...

Okay, here is the deal. I was just surfing the web and I got a pop up saying "taskeng.exe is trying to access the internet" I have seen this program before so I hit allow. Immediately after that my IE9 stopped working (though IE9 - 64b works) My firefox works, and I can no longer stream media to my Xbox 360. I have been looking around all night and i have tried every suggestion in this thread to no avail... can anyone for the love of god help me?!?!

A Guy · 18 Sep 2011

Welcome to Seven Forums VegaSpydr. Go to this page, try the fixit solution first. If no help, scroll down to the section to reset, and if necessary the section for how to download and reinstall Internet Explorer 9.

How to reinstall or repair Internet Explorer in Windows 7, Windows Vista, and Windows XP

A Guy

VegaSpydr · 18 Sep 2011

None of that worked. I can only get online through firefox, and when I go to google and search for help I can click on the link but it redirects me to another website, so I have to go back and re-enter the url manually.

I ran malwarebytes and a free virus program (avast) and havent gotten anything from them. I did the fix it solutions and they dont work. I can run IE in 64, but it crashes after a few minutes. The only thing that happened before this was the "taskeng.exe has requested to access the internet" I actually hit "don't allow" first, but it popped up again, so I thought that it had to get through, after that, my xbox disconnected, my IE 32 wouldnt work anymore, (it opens but I just get a blank page that says "connecting" in a tab then crashes after about a minute)

Could this taskeng.exe be the issue? I read about how there are virus' disguised as this but nothing about how to erase it and that if I just delete the taskeng file it could screw up my computer... please help! I have too many things on this computer to just to a whole new install with windows 7, or a recovery... thank you.

A Guy · 18 Sep 2011

It does sound like you may have been infected. I am no security expert, but suggest since you have Avast, run a boot scan. This will scan outside of windows, see if it comes up with anything.

taskeng.exe is the task scheduler. If it was a legit windows process, then it would be no issue. Download and run SuperAntispyware. If you have trouble downloading it, try the portable version which uses a generic name and a .com extension to fool malware.

SUPERAntiSpyware.com - SUPERAntiSpyware Portable Scanner

I will point some security experts at your thread. Give it some time as there are different time zones.

A Guy

VegaSpydr · 18 Sep 2011

thanks alot, I will try both avast and super antispyware

karlsnooks · 18 Sep 2011

VegaSpyder,

Let's pull out the big guns.

PUT SYSTEM SWEEPER ON A USB STICK
System Sweeper, https://connect.microsoft.com/systemsweeper, allows you to start an infected PC and perform an offline scan to identify and remove viruses, rootkits and other advanced malware. System Sweeper is a free standalone, bootable malware and virus remover from Microsoft.

NOTE: A fine tutorial on the System Sweeper is:
How to use the Microsoft Standalone System Sweeper

Download System Sweeper (about 576 kB):
https://connect.microsoft.com/systemsweeper

Insert 256 MB or larger USB stick into a usb port.
Run the downloaded program--mssstool64.exe or mssstool32.exe
Choose the option to install to USB.
Caution: The install program will format the usb stick.

The install program will download about 200 mB more.
After the install is finished, leave the stick in the usb slot.

Run the program you downloaded once again.
This 2nd run, and any subsequent runs, will download the very latest anti-virus definitions (about 60 mB).

To keep System Sweeper up-to-date, simply reinsert the usb stick and run the installation program, mssstool64.exe or mssstool32.exe, again.

The initial, full scan by System Sweeper can easily take several hours, but subsequent quick scans will be shorter.
Remember, your computer is being very thoroughly checked for all types of malware.

The results of System Sweeper will be in:
\Windows\Standalone System Sweeper\Support as one or more files with a LOG extension which can be viewed with Notepad.

===============================================
===============================================
Attach those log files to your next post.
Files and Screenshots - Upload and Post in Seven Forums
How to Upload and Post a Screenshot and File in Seven Forums

VegaSpydr · 18 Sep 2011

Okay, well, I ran Avast and it worked, I can use internet explorer again... but now alot of different things on the computer are not working properly... I try to stream my media to my xbox, but my xbox wont see the PC, I thought it could be the firewall maybe being reset, so I went to the firewall and I get this message "windows firewall error code 0x8007042c" and "Windows Firewall with Advanced Security Snap-in failed to load error code 0x6D9"

Long story short I cant even use the firewall or try and change any settings. I tried running what microsoft suggested with a "repair.bat" file, but it made my internet connection stop working, so I had to restart my computer and the wifi connection worked this time.

So here is my list of problems....

Can't modify Windows firewall.
Windows firewall error code 0x8007042C
Advanced Security Snap-In error code 0x6D9
Xbox wont connect to my PC

VegaSpydr · 18 Sep 2011

I am going to be running system scanner. If it is anything like the bootscan from Avast, it will take a while, 3 1/2 hours for Avast boot scan which fixed the internet explored problem. be back after that is done.

VegaSpydr · 18 Sep 2011

Okay, new issue.... I shut down my laptop to get into the setup so I can run the system scanner from a cd, but I can't get into my bios. I hit F2 and F12 at start up, and it doesnt do anything, windows just boots normally...

VegaSpydr · 18 Sep 2011

Good News, it worked.

Took about 5 hours, if I knew what log to post I would. I think it is this one:

--------------------------------------------------------------------------------
Standalone System Sweeper Log, (c) 2006
Started On Sun Sep 18 2011 10:01:32
************************************************************
Product Version: 2.0.213.0
Engine Version: 1.1.2803.0
AS Signature Version: 1.0.0.0
AV Signature Version: 1.0.0.0
************************************************************
Signature updated on Sun Sep 18 2011 10:01:48
Product Version: 2.0.213.0
Engine Version: 1.1.7604.0
AS Signature Version: 1.111.2497.0
AV Signature Version: 1.111.2497.0
************************************************************
!WARNING
Expensive file
File Name

:\Program Files (x86)\ImgBurn\ImgBurn.exe->(UPX)
File Size:10632704
Time:7456
Container:No
Metric:CPU
CRC4:1817531953
CRC8:157778223
CRC16:56050204
CRCHeader:2092827085
CRCFooter:3095443763
!WARNING
Expensive file
File Name:C:\dell\Image\FACTORY.WIM
File Size:6761680913
Time:1644000
Container:Yes
Metric:CPU
CRC4:600113741
CRC8:393119255
CRC16:1784157772
CRCHeader:527287767
CRCFooter:1594471374
!WARNING
Expensive file
File Name:C:\preload\BASE.WIM
File Size:6761680913
Time:840860
Container:Yes
Metric:CPU
CRC4:600113741
CRC8:393119255
CRC16:1784157772
CRCHeader:527287767
CRCFooter:1594471374
!WARNING
Expensive file
File Name

:\Program Files (x86)\Steam\steamapps\common\champions online\Champions Online.exe->[RSRCEmb]#1
File Size:3245056
Time:18408
Container:No
Metric:CPU
CRC4:2813297023
CRC8:2687760638
CRC16:2876155061
CRCHeader:717794974
CRCFooter:954466286
!WARNING
Expensive file
File Name

:\Program Files (x86)\Steam\steamapps\common\champions online\CrypticError.exe
File Size:3215360
Time:18595
Container:No
Metric:CPU
CRC4:2813297023
CRC8:2687760638
CRC16:2876155061
CRCHeader:4210750453
CRCFooter:954466286
!WARNING
Expensive file
File Name

:\Program Files (x86)\Steam\steamapps\common\champions online\Champions Online\Live\GameClient.exe
File Size:31218080
Time:22869
Container:No
Metric:CPU
CRC4:2813297023
CRC8:2687760638
CRC16:2876155061
CRCHeader:2527419416
CRCFooter:1634731437
Begin Full Scan
Scan ID:{3CE8D4E1-EE7B-4E95-BEBB-60CB66119240}
Scan Source:1
Start Time:Sun Sep 18 2011 10:02:11
End Time:Sun Sep 18 2011 14:28:44
Result Count:5
Threat Name:Trojan:Win64/Sirefef.B
ID:2147646729
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path

:\Windows\system32\consrv.dll
Extended Info:99475524108757
Threat Name:HackTool:Win32/Keygen
ID:2147593794
Severity:2
Number of Resources:1
Resource Schema:file
Resource Path

:\$Recycle.Bin\S-1-5-21-1097013204-3003327878-2757715953-1000\$RJZBPZZ\Nero Multimedia Suite 10 - Keygen.exe
Extended Info:24634467479279
Threat Name:Exploit:Java/CVE-2010-0840.JI
ID:2147649248
Severity:5
Number of Resources:4
Resource Schema:file
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache7526267014175821511.tmp->sic.class
Extended Info:18144377402757
Resource Schema:file
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache2798463620457293574.tmp->sic.class
Extended Info:18144377402757
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache7526267014175821511.tmp
Extended Info:0
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache2798463620457293574.tmp
Extended Info:0
Threat Name:Exploit:Java/CVE-2010-0840.KJ
ID:2147649275
Severity:5
Number of Resources:2
Resource Schema:file
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache3710251800873239536.tmp->sit.class
Extended Info:18142939799743
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache3710251800873239536.tmp
Extended Info:0
Threat Name:TrojanDownloader:Java/OpenConnection.OU
ID:2147649594
Severity:5
Number of Resources:8
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\2b0ab1b5-509031d1->datas/wall$1.class
Extended Info:18144109131890
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/Zom2.class
Extended Info:18142363924789
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/Zom.class
Extended Info:18144255534979
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/Zo666.class
Extended Info:18145772123681
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/zalux$1.class
Extended Info:18144109131890
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/Glocker.class
Extended Info:18143587116110
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\2b0ab1b5-509031d1
Extended Info:0
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87
Extended Info:0
End Scan
************************************************************
Begin Resource Scan
Scan ID:{06F98FAC-350D-43D7-BAA5-83BF79F96461}
Scan Source:1
Start Time:Sun Sep 18 2011 15:15:17
End Time:Sun Sep 18 2011 15:15:24
Explicit resource to scan
Resource Schema:file
Resource Path

:\$Recycle.Bin\S-1-5-21-1097013204-3003327878-2757715953-1000\$RJZBPZZ\Nero Multimedia Suite 10 - Keygen.exe
Explicit resource to scan
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache2798463620457293574.tmp
Explicit resource to scan
Resource Schema:file
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache2798463620457293574.tmp->sic.class
Explicit resource to scan
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache3710251800873239536.tmp
Explicit resource to scan
Resource Schema:file
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache3710251800873239536.tmp->sit.class
Explicit resource to scan
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache7526267014175821511.tmp
Explicit resource to scan
Resource Schema:file
Resource Path

:\Users\aarons\AppData\Local\Temp\jar_cache7526267014175821511.tmp->sic.class
Explicit resource to scan
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87
Explicit resource to scan
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/Glocker.class
Explicit resource to scan
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/zalux$1.class
Explicit resource to scan
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/Zo666.class
Explicit resource to scan
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/Zom.class
Explicit resource to scan
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\afaa154-29a11e87->rotor/Zom2.class
Explicit resource to scan
Resource Schema:containerfile
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\2b0ab1b5-509031d1
Explicit resource to scan
Resource Schema:file
Resource Path

:\Users\aarons\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\2b0ab1b5-509031d1->datas/wall$1.class
Explicit resource to scan
Resource Schema:file
Resource Path

:\Windows\system32\consrv.dll
Result Count:5
Threat Name:HackTool:Win32/Keygen
ID:2147593794
Severity:2
Number of Resources:1
Resource Schema:file
Resource Path