[yorobbie]

A while back I was trying some Kazaa alternatives,Resurection and I dont know what. My bad I don't remember which one it was, but one of them was bundled with a pop-up blocker. I made the wrong choice and allowed it to turn on. It worked too well. On my Excite homepage it blocked all thumbnails and even my custom background. Even weirder, when I go to my Excite mail, the background is still working. I got WMP10 yesterday, and whatever it is, it's even blocking something there. In the upper right corner is one of those white boxes with the red X. All security settings are at default. I even tried Mozilla and the same thing, Excite is all srewed up. Another funny thing is on my SBC/Yahoo homepage, the thumbnails on news stories still work. I tried unistalling IE, and reinstalling, no difference. The FAQ's at MS about missing thumbnails were no help, everything they suggest is already done. I'm at my wits end, can anyone help? Thanks

[PangingJr]

did you remove the popup blocker? what's the name of the program?

what have you tried to fix it so far?

and try this... R-click on one of the missing thumbnail, select properties and copy the image location,
then paste it onto your browser address-bar, and see if the browser shows the image.

[Nacht]

see if you can find the process running in task manager..that way you can restrict it from running, or find out where it's running from and delete it.

[yorobbie]

Net, I cant remember what it was called. I've removed everything suspicious, even the goggle toolbar. I've ran Ad-Aware, Spybot, and Spy Sweeper. I've followed MS FAQ's, set all security to default, reloaded IE, tried Mozilla and Opera, and it affects my wife's side of XP too.

Nacht, Would it be a SYSTEM process. I assume, since its affecting both user accounts, or possibly a LOCAL SERVICE? These are some of the 29 process running I dont really reconize(sp).

wdfmgr.exe-Local Service
alg.exe-Local Service
csrss.exe-System
lsass.exe-System
CCEVTMGR.EXE-System
smss.exe-System

I run NAV, Spywareblaster, Sygate Personnel Firewall.
I feel were getting close, how due you find out were a process is running from?

[PangingJr]

"and try this... R-click on one of the missing thumbnail, select properties and copy the image location, then paste it onto your browser address-bar, and see if the browser shows the image."

if your browser still cannot load the image...

if you've already uninstalled the popup blocker... check for its left over config file and remove it.
also check your "hosts" file.. maybe some entry in there that blocks the images... .

[PangingJr]

Originally Posted by yorobbie

wdfmgr.exe-Local Service
alg.exe-Local Service
csrss.exe-System
lsass.exe-System
CCEVTMGR.EXE-System
smss.exe-System

search you C: drive for the file "wdfmgr.exe", locate the file, then R-click on it to see its properties,
is this file belong to the WMP10 ?
if so, all the processes are okay.

[yorobbie]

I don't know what "It" is, so where would I find "It's" config file. And I need more info about HOSTS file?

[yorobbie]

It says wdfmger is Windows User Mode Driver Manager.

[PangingJr]

have you tried as i mentioned ? did the missing image loads in browser ?

[PangingJr]

Originally Posted by yorobbie

It says wdfmger is Windows User Mode Driver Manager.

okay,

i don't think this has to do with adwares/ spywares..

[yorobbie]

No luck pasteing picture properties into address bar, remember it even affects my Excite theme, but not on my Excite mail page. This SUCKS!!!!!!!!

[PangingJr]

pls post the link/ url address of the missing pic.

[yorobbie]

http://ak.imgfarm.com/images/ap/gall...0903144928.jpg

[PangingJr]

i believe you won't see this pic...


hmm.. we never know how that program works...
to get some idea i have to be at your computer lol..

anyway, check your hosts file..

the file is located in "C:\WINDOWS\system32\drivers\etc" you can open or edit it with notepad.
open the file and see if you have any entry below this... if so pls post the info...

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1       localhost

[yorobbie]

BRB on that, also One thing I just noticed in Add/Remove Programs, OpenMG Secure Module.What's that, I'm afraid to remove it lest I FUBAR something else.

[PangingJr]

there're alot of programs out there.. i never have that program so can't tell what's it... you should be able to find info of it... it's in your system.

btw, what is BRB?

[yorobbie]

Yes I did NOT see the picture. BRB is Be Right Back, check your Private Messages

[PangingJr]

i prefer that you post info of your host file here pls... or your could PM me if you want...

all you have to do is open it with notepad (when windows asks what program to use, select notepad),

then highlight all the info in there and copy, then post and i'll check and edit it for you..

[Nacht]

the best way to figure out what programs and processes are is to type there exact file/image name into google or another search engine...a la "svchost.exe" or whatever you need to look up. you can rid yourself of many unnecessary services that way, and find out if something is malicious.

[PangingJr]

okay i read your PMs...

remove every infos below this...

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1       localhost

then save the file.

but before you do that... close every browser windows... close every spywares protection programs...
you may have to remove the "Read-only" before you can edit it... some program protect this file by set read-only to it.

[PangingJr]

but before you do that... close every browser windows... close every spywares protection programs...
you may have to remove the "Read-only" before you can edit it... some program protect this file by set read-only to it.
"and backup the file 1st... just copy and save it somewhere..."

[PangingJr]

how's it going? .. will check back with you later...

[yorobbie]

That brought it all back. Pictures, advertising, everything. Thanks, I could have lived without the advertisements, but no worries. One new curiousity, in the status bar in IE, when I'm in these forms it says WYSIWYG Editor initialized for Internet Explorer in 0.078 seconds. Seconds has change thoughout the day. Any idea what that is?

[PangingJr]

You're welcome.
that shows the status of loading your Message Editor Interface.
the Full WYSIWYG Editor is one of 3 options that can be changed within your DH's Profile -> edit options.