Forum Home
Press F1
Thread ID: 47836	2004-08-07 02:38:00	Internet Explorer cumulative patch	cassnz (5984)	Press F1

Post ID	Timestamp	Content	User
259046	2004-08-07 02:38:00	I recently downloaded a Microsoft Internet Explorer 6 cumulative patch. Since then, every time I turn my computer on, the first thing I get when the desktop loads is a Dialup Networking request. I have always associated these with adware intrusions, but after I run Adaware 6 and delete the accumulated stuff, I still have the Dial up request when I reboot. As soon as I click the cancel button, my Zone Alarm tells me that "Process 2260" is trying to access the internet (I deny it). The file it refers to is cjzduh.exe. I've run a search for this file, but can find nothing. Does anyone know what this file is for, and does anyone know how I can stop the Dial up request happening after each computer turn on or reboot?	cassnz (5984)
259047	2004-08-07 07:04:00	Hello cassnz and welcome to Press F1. This may be some sort of auto-dialer trying to get out but you may first want to check your IE settings. Assuming you are using IE version 6 and are using a dial-up modem, go to Tools, Internet Options, Connections, check what dial-up accounts are present (you should recognise your ISP), make sure your ISP is tagged as default and make sure the box "dial whenever a network connection is not present" is ticked, Click Apply. If there are any other dial-up accounts you don't recognise then delete them. While the dialogue box is open, click on the General Tab, and do some basic housekeeping by deleting all of the cookies and files under the "temporary internet files" section and you may want to clear the history too. In addition to Ad-Aware, another good free piece of software to detect and remove nasties is Spybot Search and Destroy. It is compatible with all Windows, IE6, ZA and Ad-Aware. You can download Spybot Search and Destroy from this website (www.safer-networking.org). Make usre you get a genuine version by using the link I provided - beware of imitations. Sorry I can't help with process 2260 nor cjzdud.exe. What anti-virus software are you using and is it up to date? Have you done a virus scan recently? You may also want to see what is happening at startup - if there is nothing obvious under the startup folder (check under Start, Programs, Start Up for any funnies such as a printer or scanner trying to dial home) then you can look at all of the programmes starting with Windows using Spybot - start Spybot, (make sure system is immunized too), Mode, Advanced, Tools (on the LHS of the screen), System Startup, look for cjzduh.exe and if it is there delete it. Lastly, at the top of this webpage is a FAQ link - if you click on that have a read of FAQ's numbers 8b and 1b - but be aware that they take a while to come up. Hope this helps.	andrew93 (249)
259048	2004-08-07 07:43:00	Hello Cassnz. A standard thing to check for your problem is:- From earlier posts: "TO STOP DIAL UP ON START-UP: In Internet Explorer select TOOLS- INTERNET OPTIONS-ADVANCED-Scroll to SECURITY-UNCHECK “ check for publisher’s revocation certificate” Cheers T	TonyF (246)
259049	2004-08-08 00:44:00	Thank you andrew93. I already had Spybot installed and I use it frequently in association with Ad-Aware; but I hadn't used Spybot in advanced mode. When I went there and went to System Startup, cjzduh.exe was mentioned, so I unchecked it (didn't delete in case it was important). Now I don't have that annoying dial-up request happening, and no Process 2260 request when I cancel the dial-up request. Brilliant! Pity I can't find out what this cjzduh.exe program is, or where it came from. (I had let a young chap use my computer, but he claims he knows nothing about it, even though the problem started at the exact time he was using my computer! - Guess who won't be using my computer again!). Thanks again for your help! Regards, Steve Castle in Hastings	cassnz (5984)
259050	2004-08-08 00:47:00	> Hello Cassnz. A standard thing to check for your > problem is:- > From earlier posts: "TO STOP DIAL UP ON START-UP: In > Internet Explorer select TOOLS- INTERNET > OPTIONS-ADVANCED-Scroll to SECURITY-UNCHECK “ > check for publisher’s revocation > certificate” thats assuming you have nortons antivirus/firewall installed. otherwise just the usuall scan with uptodate antivirus and adaware/spybot. if that dosn't help theres a few other tools but rquire a bit more knowlege to use.	tweak'e (174)
259051	2004-08-08 00:49:00	Thanks for your suggestion, T. I did what you suggested, but the problem was still there. In the end I followed another suggestion from andrew93 (using Spybot S & D in advanced mode: startup) and the problem was solved. Thanks again for your suggestion. Regards, Steve Castle in Hastings	cassnz (5984)
259052	2004-08-08 00:54:00	>Pity I can't find out what this cjzduh . exe program is most likly a hijacker/trojen that gives it self a random name with random letters, hence the werid name . odds are you will find it back in startup later on . you may need to try cwshredder or hijackthis . however i usually find the antivirus will pick these types of malware up .	tweak'e (174)
259053	2004-08-08 00:55:00	Thanks, tweak'e. The problem is now solved thanks to andrew93's suggestion to use Spybot S & D in advanced mode. In answer to you, I have Norton 2004 Antivirus, but not their firewall (that part didn't have very good reviews!). I use Zone Alarm free as my firewall, and it is very useful. Regards, Steve Castle in the cold Hawkes Bay (except in summer, when it is the hot Hawkes Bay).	cassnz (5984)
259054	2004-08-08 06:23:00	tip to find out the purpose etc of a process/file: run a search for it in google-will bring up helpful sites that list all processes and what they are. usually end up on one particular site that I can't remember the name of right now, but do that search and you'll see what I mean cheers icy(equally cold in HBN:D)	icyred (5795)
1