[john_combel]

When I try to go to hotmail.com, I get the following error:

Server Error in '/' Application.
--------------------------------------------------------------------------------
Runtime Error
Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed remotely (for security reasons). It could, however, be viewed by browsers running on the local server machine.

Details: To enable the details of this specific error message to be viewable on remote machines, please create a <customErrors> tag within a "web.config" configuration file located in the root directory of the current web application. This <customErrors> tag should then have its "mode" attribute set to "Off".

<!-- Web.Config Configuration File -->

<configuration>
<system.web>
<customErrors mode="Off"/>
</system.web>
</configuration>

Notes: The current error page you are seeing can be replaced by a custom error page by modifying the "defaultRedirect" attribute of the application's <customErrors> configuration tag to point to a custom error page URL.

<!-- Web.Config Configuration File -->

<configuration>
<system.web>
<customErrors mode="RemoteOnly" defaultRedirect="mycustompage.htm"/>
</system.web>
</configuration>

I believe this problem started with Spybot Teatimer malfunctioning when I wanted to switch web pages I get onto the internet with. I don't doubt I had malware problems (red sweep and some others) but I believe I have removed them. I can't locate the web.config file the message refers to, running a search from the 'find' box. I have already uninstalled Spybot and the problem still persists. Spybot referred me to you. I also run Adaware SE. My OS is 98SE, 300 mhz 128 MB RAM machine. Everything else seems to run fine; hotmail.com is the only url this happens on. I can access my hotmail account from another machine.

Thanks,
John_Combel

Edited by john_combel, 04 January 2006 - 10:53 PM.

[Advertisements]

Run through this and then we are dealing with a system which has a good registry and file structure

This will rebuild rather than restore the registry and also replace missing or corrupt system files

Boot the PC and keep tapping F8 right after the beep until you get options, select command prompt only, type scanreg.exe /fix then press enter, it will run through a few screens then say registry repaired. Press enter then press ctrl + alt + delete keys together to reboot.

When Windows has loaded, click start, all programmes, accessories, system tools, system information, tools then run system file checker and replace any files it asks for from the 98SE CD then reboot.

When it has loaded to the desktop, click start, programmes accessories, system tools to run disc clean up, then run disc defragmenter from system tools

[Retired Tech]

Run through this and then we are dealing with a system which has a good registry and file structure

This will rebuild rather than restore the registry and also replace missing or corrupt system files

Boot the PC and keep tapping F8 right after the beep until you get options, select command prompt only, type scanreg.exe /fix then press enter, it will run through a few screens then say registry repaired. Press enter then press ctrl + alt + delete keys together to reboot.

When Windows has loaded, click start, all programmes, accessories, system tools, system information, tools then run system file checker and replace any files it asks for from the 98SE CD then reboot.

When it has loaded to the desktop, click start, programmes accessories, system tools to run disc clean up, then run disc defragmenter from system tools

[john_combel]

Keith,

Thanks for the help - I appreciate it. I performed all the tasks that you recommended, and the problem is still there, but only with hotmail.com. However, something else has happened; when I log on to msn.com from the IE icon, for example, I can get on, but the writing in the blue strip at the very top of the screen reads 'http://www.msn.com - http://www.hotmail.com' (no quotations).

I ran Hijack This, attached below.

Logfile of HijackThis v1.99.1
Scan saved at 11:14:16 AM, on 1/6/06
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\WINRAR\WINRAR.EXE
C:\WINDOWS\TEMP\RAR$EX00.524\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = http://www.hotmail.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_06\BIN\SSV.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_06\BIN\SSV.DLL
O16 - DPF: {F2A84794-EE6D-447B-8C21-3BA1DC77C5B4} (SDKInstall Class) - http://activex.micro...ate/sdkinst.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} -
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -

Hope it helps and please don't give up on me.

Thanks,

John_Combel

Edited by john_combel, 06 January 2006 - 10:54 AM.

[Retired Tech]

Doesn't seem to be anything odd with the HJT Log so can you click tools / internet options and see what it shows as the homepage, can you type http://www.msn.com then click apply then close the browser, open it and use the hotmail link from the msn.com page

[john_combel]

Keith,

Sorry to have taken so long to reply - I have been traveling. Tried what you suggested; put in msn.com as my home page, clicked apply, closed the browser, opened it back up and tried to access hotmail from the msn.com homepage, and still came up with the Server Error in '/' Application.

Still have the odd line at the very top of this page, in the blue border, that reads:

Geeks to Go Forums -> Replying in server error in '/' application - http://hotmail.com

Even though msn.com is my home page. Seems to have doubled back on itself ever since I rebuilt the registry; didn't have the http:// hotmail.com at the tail until I did rebuild the registry.

Any other suggestions?

Jim

Edited by john_combel, 14 January 2006 - 12:53 AM.

[Retired Tech]

Click start then settings then control panel, click network and internet then internet options

On the general tab, click delete cookies, click delete files, include offline content, click clear history. If you have broadband / cable (fast) click settings and reduce the drive space used to 30MB, although you can reduce it to 1MB

Click apply after each change. Click the security tab and click default, click privacy and click default, click programmes and click reset web settings, click advanced to tick, do not save encrypted pages to disc and empty the temporary internet files folder when the browser is closed, click apply

Click start then programmes, accessories, system tools, to run disc clean up, reboot

Click start then run windows updates

[john_combel]

Keith,

Tried everything you suggested, still have the server application error, only on hotmail page. I have all the windows updates - I stay up with that.

Still think Spybot's Teatimer had something to do with it when I tried to switch my start page from hotmail to msn.com.

Well, I'm game to try anything you suggest; this certainly has me stumped. What next?

Jim

[Retired Tech]

As it is free and small you could uninstall spybot to see if there is a difference, re-install it without using Tea timer

Then to double check

Please go here:

Malware Removal Guide

Run all the programmes as advised then post a current Hijack This Log in a new topic in the Malware Forum

For the purpose of accurate malware analysis, Hijack This Logs are only dealt with in the Malware Forum. Posting them anywhere else will result in a delayed response

If you are unable to run any of the programmes, ask for advice in the Malware Forum

[john_combel]

Keith,

Replied about a week ago, but post didn't take - maybe I didn't save it properly.

Anyhow, what you suggested seemed to work; I can now access hotmail from this computer. However, I still have the very top of every internet page, where the blue border is, all pages end in http://www.hotmail.com, whether I am in hotmail or somewhere else. I think it is slowing the computer down. Any suggestions?

I also tried posting in the Malware Removal Guide, but the post didn't take there, either. Let's see what happens with this post.

John_Combel

[Retired Tech]

See how you get on with malware, if you let me know if you manage to post an HJT Log or not, I can look at other ways if you cannot post one to the malware forum

[john_combel]

Keith,

I did post a hjt in the malware forum, but the post didn't take. I'll try again to post one there. Thanks for all your help so far; I am making progress due to your suggestions.

John_Combel