Browser problems after IE11 windows update

simon99 · 14 Dec 2013

Thanks Thrash and Andrew for your replies.

1. I went into safe mode+networking (via the msconfig route). I reset IE twice - via the IE gearbox route and also via Control Panel as Andrew suggested. I also uninstalled Java.

No change in symptoms: IE won't load parts of pages, 'waiting for ...' message. Chrome is not as bad (better heuristics I think) but still won't load some pages at all.

Here is the scan results from Adwcleaner:

AdwCleaner[R3]_safe mode.txt

I don't know what it means - clearly some registry keys it doesn't like. Any comments on what it has found ? I have not actually run the clean option yet, lacking a bit of nerve for it I'm afraid! Is there a tutorial on what precautions to take before letting a cleaner loose on the registry ?

2. Here are the scan results from ccleaner (two pics so you can see the windows and application switches I used). It seems pretty harmless, but I haven't used the clean option again yet. I would rather not disturb Chrome at the moment.

page 1:

Browser problems after IE11 windows update-ccleaner_p1b.jpg

page 2:

Browser problems after IE11 windows update-ccleaner_p2b.jpg

3. Here is also the malware bytes log - it found nothing:
mbam-log-2013-12-09 (09-06-12).txt

Thanks for keeping up with this - is there a next step to try (go for the clean option in adwcleaner ?)

Simon

ThrashZone · 14 Dec 2013

The Cleanup in Adwcleaner should be used,
If you want more input on the actual files it found we would have to request a security specialist to look at the file,
Which isn't a big deal there but no idea when they might be able to give feedback ?
Open Chrome and see what is listed as Extensions,

andrew129260 · 14 Dec 2013

@simon99

There is not a whole lot listed there that needs to be cleaned in ccleaner. You can safely run it. It won't hurt anything, and you can uncheck items you do not want it to clean.

As for adwcleaner,

Its a safe utility. I would run a scan and clean it up. Then restart the pc. We might have to look into more things to see if your machine is more infected then originally thought. It could also be a issue with your hosts file.

See here:

How can I reset the Hosts file back to the default?

You can run the fix it for me on the website.

I also suggest following ThrashZones advice.

ShamrockRig · 14 Dec 2013

Another useful program you can run.

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

ICIT2LOL · 14 Dec 2013

My 2cents I as a general rule back up the reg to where it is now (if I am not sure) and just run ADW clean up - end of story and I have never had a problem with it or have had to resort to the backup reg.

I am wondering if a quick go over with this would help Free Malware Removal Tools scroll down to the TDSS Killer and run it and there are these if you get nowhere.

5 Bootable AntiVirus Rescue CD for Windows: Free Download

Britton30 · 14 Dec 2013

I had the DivX player and associated BS once and it played havoc with several sites. I suspect Quicktime can do the same thing but I've not used it. I would uninstall both and run the CCleaner registry cleaner and the Adwcleaner once more on Delete. It appears the FLEXnet is some sort of licensing program which pays developers and may be a PUP, Potentially Unwanted Program.

The free open source VLC player will play nearly any type of media file. http://www.videolan.org/vlc/index.html

simon99 · 17 Dec 2013

Hi -

Thanks for all the advice. I created a restore point and went ahead with Adwcleaner cleanup. After the restart I scanned again. No change in IE or Chrome website loading issues - here is the Adwcleanerlog:

AdwCleaner[S1]_after clean.txt

The FLEX keys seem to have reinstalled themselves. I'm sure they were deleted but have come back. Googling them seems to show they are probably legit, but I have no idea what software they came with.

Here is the Chrome extensions page:

Browser problems after IE11 windows update-chrome-extensions_131217.jpg

The Divx player is disabled but present. Otherwise Chrome is pretty much clear. I think Divx came in with Roxio Creator, a video editing package.

I will see if I can get some instructions on unloading the Divx extension just to settle this point.

I had a look at the hosts file - here is the text:

hosts_131214.txt

From what I've read, the hosts file looks as it should.

I will try the removal tools others have mentioned and uninstall the Divx player - any other ideas ? Could this be a network fault or configuration issue rather than a bit of malware ?

I have a windows virtual machine running with windows XP mode. I just use it to run excel2003 models and most of the time it is hibernated. Could there be some sort of interplay between W7 and the virtual machine that effects a browser in W7 - seems unlikely.

Simon

Britton30 · 17 Dec 2013

See if this helps removing DivX. http://rovicorp.force.com/apex/Show_...-DivX-software

The hosts file is fine.

FLEXnet is a legit program, but I wouldn't want it. It seems to be for developers who want to sell their software to deploy it. If it can't be removed it's not a good thing. Did you also run the JRT tool? The Adwcleaner log seems to be only the scan part.

I don't think the VM with XP should cause problems. Did you install the XP Mode from MS with their VM?
http://www.microsoft.com/en-us/downl...s.aspx?id=3702

Solarstarshines · 17 Dec 2013

I have had major issues with IE11 i read somewhere that the Add-ons are the cause

I happen to Disable mine and got a memory error hasn't happened since i enabled certain one's again

There is one Gawd awful that attaches itself to bing and it's a trojan Spigot.com M$ Has some explaining to do

Britton30 · 18 Dec 2013

I always hide anything Bing related even though MS offers it back all the time. You likely got a Trojan elsewhere and it's configured to attach to Bing as a stealth feature.