Member Panel

Tim M

I am experiencing a nuisance ipconfig popup window while performing routine tasks on my Laptop. The window pops up for about 0.1 seconds and then goes away (just enough time to miss a few letters in a word when typing either an email or a document).
Can someone tell me why this ipconfig popup occurs and if possible How I can make it stop?
Windows XP Pro
Norton Internet Security 2006
NAV
MSIE 6.0 sp2
Outlook Express for mail
Comcast Cable Modem
Wireless Home Network

When I purposefully run ipconfig, same thing happens. Window pops up and goes away quickly...

Help or at least at understanding of what is going on is appreciated.

Cheers
Tim

MadGamer

Hi Tim welcome to PCHF, could you follow the instructions in the "Pre Work" Link in my sig.

Tim M

Ewido and hijackthis log files are attached

joe5

Hya Tim.

First have a look for MyWay Search Assistant in add/remove programs , and uninstall it if present.

Please download Shoot The Messenger

Download and run the small (22 kbyte) "ShootTheMessenger.exe" utility. It will display the current status of your system's Messenger Service. The button near the bottom of its window will allow you to set the service to whichever state ? running or disabled ? that you desire.

If, for any reason, you should ever choose to re-enable the Windows Messenger Service, simply re-run ShootTheMessenger to do so.

Boot youre pc in safemode (hit f8 when booting up) and fix these entrys with hjt:

O2 - BHO: MyWay Search Assistant BHO - {04079851-5845-4dea-848C-3ECD647AA554} - C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com
O15 - Trusted Zone: http://download.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.com

Delete the folder in bold , reboot , and post a new hjt log please.

Tim M

MyWay Search Assistant did not exist, but there was a file named Search Assistant - My Search that I did not remove.

Otherwise, I followed your directions and I am attaching the new log file.

joe5

I forgot to add that the different variants names , you can uninstall that one instead.

And did the trustedzone entrys came back , or did you leave them on purpose?

If you didn't leave them on purpose then copy the data from the code box below to a notepad file.
Save to the DESKTOP (so you can find it) as ALL FILES, with the name of KILLTRUSTED.REG
Then double click the file - when it asks say yes to merging with the registry.

Code:

REGEDIT4 
 
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains] 
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains] 
 
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges] 
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges] 
 
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains] 
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains] 
 
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges] 
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges]

If you have IE-SPYAD installed it will need to be reinstalled as this will wipe all the trusted and restricted zones from the system.

Tim M

A slight problem when I try to remove Search Assistant - My Search
See attachment.
Performed the Regedit as requested and also attached the latest hijackthis log file.