IE 6.0 error Dtdp://748|331|1|jgen44.cjt1.net

[Niemand]

I just did a fresh load on my PC with WIN XP PRO SP2. After getting done I occasionaly get the following error message. There seems to be no rime or reason as to when it happens. The error is as follows:

First popup says:

Dtdp://748|331|1|jgen44.cjt1.net/HTM/704/0/JavaSiteRequest.asp?LV=6000&DC=453&NF=0&IW=720&IH=300&ORD=1108584632171?&

Application not found

Then I get:

Internet Explorer cannot open this helper application for
Dtdp://748|331|1|jgen44.cjt1.net/HTM/704/0/JavaSiteRequest.asp?LV=6000&DC=453&NF=0&IW=720&IH=300&ORD=1108584632171?&

The protocol specified in this address is not valid. Make sure the address is correct, and try again.

After closing both messages all is well and I can continue browsing. I looked high and low for what the messages mean. It appears it has something to do with Java.

X-Pider case
Antec Trueblue 480 watt P/S
MSI 875P Neo-FIS2R
Intel P4 3.0Ghz
1 gig Corsair ram
eVGA Geforce 6800 Ultra 256MG
Maxtor 160 Gig HD
Maxtor 80 Gig HD
Sony DRU-710A DVD Burner
Memorex 52X CDROM
Sony 3.5 floppy drive

 

[SunnyD]

Okay - what piece of spyware did you install that is trying to hijack and call home to install more viruses?

 

[Niemand]

Originally posted by: SunnyD
Okay - what piece of spyware did you install that is trying to hijack and call home to install more viruses?

Could you explain further. What makes you think it's spyware?

I use Lavasoft Ad-Aware SE Personal, Spybot S&D, Microsoft AntiSpyware Beta and McAfee VirusScan 7.1.0. They have found nothing.

 

[SunnyD]

dtdp:// <-- What data transport header type could that possibly be? There is no known type listed on google or a typical Windows registry. Also, a URL with "Pipes" in it for the domain name? That sounds specifically like a browser exploit, which means some sort of spyware or virus was installed.

 

[Niemand]

Thanks for that. So how does one find where it originates from? Meaning how is it called up? How I get the message to go away? I've looked at startup via msconfig and don't see anything unusual.

 

[xcript]

Originally posted by: Niemand
So how does one find where it originates from? Meaning how is it called up? How I get the message to go away?

Click Me

 

[Niemand]

I did find the following in my Network Associates OnAccessScanLog:

1:30:44 PM Deleted C:\WINDOWS\system32\sysdebug32.exe Downloader-TP

10:20:22 AM Deleted NT AUTHORITY\SYSTEM C:\System Volume Information\_restore{26A62852-923C-41F1-BF7F-C66D5F3E0517}\RP16\A0003584.exe Downloader-TP

Thanks xcript I will look through all of that for ideas as well.

 

[Niemand]

Well I've scoured high and low looking for why I get the error. Looked at all the stuff provided by xcript. It happens when I first open Internet Explorer. So where might one look for how it does it when I first open IE?

 

[SunnyD]

Check the BHO list - "Tools->Internet Options...->Programs Tab->Manage Add-ons".

Check ALL plugins, including not-loaded.

 

[MrChad]

Can you please edit your thread title so it does not take up such an inordinate amount of horizontal space? I need to use the horizontal scroll at 1280x1024.

 

[xcript]

Originally posted by: MrChad
Can you please edit your thread title so it does not take up such an inordinate amount of horizontal space? I need to use the horizontal scroll at 1280x1024.

Strange - I don't need to scroll horizontally at 1280x960 with the window maximized.

But yes, it would be nice if the OP would change the title. I generally don't browse with the window maximized.

 

[Niemand]

Originally posted by: SunnyD
Check the BHO list - "Tools->Internet Options...->Programs Tab->Manage Add-ons".

Check ALL plugins, including not-loaded.

Well I did find one by name called Proxy Connection Support dll, type is BHO and the file is proxyspd.dll. It's located at C:\windows\system32. It has a file date of 3/31/2001. But I disabled it and so far the error has not come back. It didn't always come up before but so far so good. Time will tell.

Not much info after searching with google on it. I'm going to try finding it in the registry. But thanks SunnyD for the tip. I learned something new today. Never even new that area existed.

Sorry about the thread title.

 

[Niemand]

As of today eveything is fine. So I consider this resolved. Thanks all!