• Welcome to Tux Reports: Where Penguins Fly. We hope you find the topics varied, interesting, and worthy of your time. Please become a member and join in the discussions.

IE 8 won't connect to the internet

H

help

Flightless Bird
I had a couple of trojan virus that I removed with my AV software yesterday
and IE won't connect to the internet anymore. I've tried reinstalling the
software but it didn't fix the error.

I'm running IE 8 on XP SP2.

The viruses were: trojan.win32.FraudPack.aunu
Found in: c:/documents and settings\user\local settings\application
data\gcglamgto\wtxaeustssd.exe
c:/documents and settings\user\local settings\temp\xhctgo.exe
c:/system volume
information\_restore{1368902D-6A36-4B35-812D-DDC763090AC0rp16A0019233.exe
 
R

Rich

Flightless Bird
IE8 with XP SP2?

That combo sounds extremely dangerous.



"help" <help@discussions.microsoft.com> wrote in message
news:E9CE17DE-79DC-4621-B3C4-82E678F59C93@microsoft.com...
>I had a couple of trojan virus that I removed with my AV software yesterday
> and IE won't connect to the internet anymore. I've tried reinstalling the
> software but it didn't fix the error.
>
> I'm running IE 8 on XP SP2.
>
> The viruses were: trojan.win32.FraudPack.aunu
> Found in: c:/documents and settings\user\local settings\application
> data\gcglamgto\wtxaeustssd.exe
> c:/documents and settings\user\local settings\temp\xhctgo.exe
> c:/system volume
> information\_restore{1368902D-6A36-4B35-812D-DDC763090AC0rp16A0019233.exe
 
P

PA Bear [MS MVP]

Flightless Bird
WinXP SP2? See...

Help: I Got Hacked. Now What Do I Do?
http://technet.microsoft.com/en-us/library/cc700813.aspx

Back-up any personal data (none of which should be considered 100%
trustworthy at this point) then format the HDD & do a clean install of
Windows. Please note that a Repair Install (AKA in-place upgrade) will NOT
fix this!

HOW TO do a clean install of WinXP: See
http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 in
http://support.microsoft.com/kb/978307

After the clean install, you will have the equivalent of a "new computer" so
take care of everything on the following page before otherwise connecting
the machine to the internet or a local network (i.e., other computers) and
before using a flash drive or SDCard that isn't brand-new or hasn't been
freshly formatted:

4 steps to help protect your new computer before you go online
http://www.microsoft.com/security/pypc.aspx

Other helpful references include:

HOW TO get a computer running WinXP Gold (no Service Packs) fully patched
(after a clean install)
http://groups.google.com/group/microsoft.public.windowsupdate/msg/3f5afa8ed33e121c

HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a
clean install)
http://groups.google.com/group/microsoft.public.windowsxp.general/msg/a066ae41add7dd2b

Tip: After getting the computer fully-patched, download/install KB971029
manually: http://support.microsoft.com/kb/971029

NB: Any Norton or McAfee free-trial that came preinstalled on the computer
when you bought it will be reinstalled (but invalid) when Windows is
reinstalled. You MUST uninstall the free-trial and download/run the
appropriate removal tool before installing any updates, Windows Service
Packs or IE upgrades and before installing your new anti-virus application
(which will require WinXP SP3 to be installed).

Norton Removal Tool
ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe

McAfee Consumer Products Removal Tool
http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

Also see:

Risks & Benefits of P2P file sharing
http://www.microsoft.com/protect/data/downloadfileshare/filesharing.aspx
http://blogs.technet.com/mmpc/archive/2008/10/06/the-cost-of-free-software.aspx

Steps To Help Prevent Spyware
http://www.microsoft.com/security/spyware/prevent.aspx

Steps to Help Prevent Computer Worms
http://www.microsoft.com/security/worms/prevent.aspx

Avoid Rogue Security Software!
http://www.microsoft.com/security/antivirus/rogue.aspx

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002


help wrote:
> I had a couple of trojan virus that I removed with my AV software
> yesterday
> and IE won't connect to the internet anymore. I've tried reinstalling the
> software but it didn't fix the error.
>
> I'm running IE 8 on XP SP2.
>
> The viruses were: trojan.win32.FraudPack.aunu
> Found in: c:/documents and settings\user\local settings\application
> data\gcglamgto\wtxaeustssd.exe
> c:/documents and settings\user\local settings\temp\xhctgo.exe
> c:/system volume
> information\_restore{1368902D-6A36-4B35-812D-DDC763090AC0rp16A0019233.exe
 
D

Dan

Flightless Bird
"help" <help@discussions.microsoft.com> wrote in message
news:E9CE17DE-79DC-4621-B3C4-82E678F59C93@microsoft.com...
> I had a couple of trojan virus that I removed with my AV software
> yesterday
> and IE won't connect to the internet anymore. I've tried reinstalling the
> software but it didn't fix the error.
>
> I'm running IE 8 on XP SP2.
>
> The viruses were: trojan.win32.FraudPack.aunu
> Found in: c:/documents and settings\user\local settings\application
> data\gcglamgto\wtxaeustssd.exe
> c:/documents and settings\user\local settings\temp\xhctgo.exe
> c:/system volume
> information\_restore{1368902D-6A36-4B35-812D-DDC763090AC0rp16A0019233.exe


Given that you used AV software to remove these, I'd suspect you've still
got a whole lot of malware on there. A combination of Malwarebytes
Anti-Malware and ComboFix (note - the latter is not for the faint-hearted,
but it does a damn good job of rooting out stuff other malware tools can't
get rid of) will probably help, but the only sure way is a wipe and
reinstall - and given that there are quite a few malware applications
kicking around that infect the boot sector, I'd suggest a low level reformat
rather than just wiping a partition prior to reinstall or else you risk
being right back where you started.

--
Dan
 
R

Richard in AZ

Flightless Bird
"Dan" <news@worldofspack.com> wrote in message news:%23OQkvwS7KHA.1424@TK2MSFTNGP04.phx.gbl...
>
> "help" <help@discussions.microsoft.com> wrote in message
> news:E9CE17DE-79DC-4621-B3C4-82E678F59C93@microsoft.com...
>> I had a couple of trojan virus that I removed with my AV software yesterday
>> and IE won't connect to the internet anymore. I've tried reinstalling the
>> software but it didn't fix the error.
>>
>> I'm running IE 8 on XP SP2.
>>
>> The viruses were: trojan.win32.FraudPack.aunu
>> Found in: c:/documents and settings\user\local settings\application
>> data\gcglamgto\wtxaeustssd.exe
>> c:/documents and settings\user\local settings\temp\xhctgo.exe
>> c:/system volume
>> information\_restore{1368902D-6A36-4B35-812D-DDC763090AC0rp16A0019233.exe
>
>
> Given that you used AV software to remove these, I'd suspect you've still got a whole lot of
> malware on there. A combination of Malwarebytes Anti-Malware and ComboFix (note - the latter is
> not for the faint-hearted, but it does a damn good job of rooting out stuff other malware tools
> can't get rid of) will probably help, but the only sure way is a wipe and reinstall - and given
> that there are quite a few malware applications kicking around that infect the boot sector, I'd
> suggest a low level reformat rather than just wiping a partition prior to reinstall or else you
> risk being right back where you started.
>
> --
> Dan
Before you go to the "reformat" route, download and run Malwarebytes from www.malwarebytes.org.
Also go to Internet Options (use control panel) and the connections tab, remove any checkmarks in
the "lan settings" option.
A lot of malware adds proxy servers in the LAN settings to prevent you from getting out on the
Internet.
 
D

Dan

Flightless Bird
"Richard in AZ" <me@mailinator.com> wrote in message
news:uxYg31T7KHA.2220@TK2MSFTNGP04.phx.gbl...
>
> "Dan" <news@worldofspack.com> wrote in message
> news:%23OQkvwS7KHA.1424@TK2MSFTNGP04.phx.gbl...
>>
>> "help" <help@discussions.microsoft.com> wrote in message
>> news:E9CE17DE-79DC-4621-B3C4-82E678F59C93@microsoft.com...
>>> I had a couple of trojan virus that I removed with my AV software
>>> yesterday
>>> and IE won't connect to the internet anymore. I've tried reinstalling
>>> the
>>> software but it didn't fix the error.
>>>
>>> I'm running IE 8 on XP SP2.
>>>
>>> The viruses were: trojan.win32.FraudPack.aunu
>>> Found in: c:/documents and settings\user\local settings\application
>>> data\gcglamgto\wtxaeustssd.exe
>>> c:/documents and settings\user\local settings\temp\xhctgo.exe
>>> c:/system volume
>>> information\_restore{1368902D-6A36-4B35-812D-DDC763090AC0rp16A0019233.exe
>>
>>
>> Given that you used AV software to remove these, I'd suspect you've still
>> got a whole lot of malware on there. A combination of Malwarebytes
>> Anti-Malware and ComboFix (note - the latter is not for the
>> faint-hearted, but it does a damn good job of rooting out stuff other
>> malware tools can't get rid of) will probably help, but the only sure way
>> is a wipe and reinstall - and given that there are quite a few malware
>> applications kicking around that infect the boot sector, I'd suggest a
>> low level reformat rather than just wiping a partition prior to reinstall
>> or else you risk being right back where you started.
>>
>> --
>> Dan
> Before you go to the "reformat" route, download and run Malwarebytes from
> www.malwarebytes.org.
> Also go to Internet Options (use control panel) and the connections tab,
> remove any checkmarks in the "lan settings" option.
> A lot of malware adds proxy servers in the LAN settings to prevent you
> from getting out on the Internet.
>

I had already suggest Malwarebytes in my reply. And as to the latter reply,
they tend to forcibly change the DNS servers in the TCP settings via the
registry overriding any user settings, so changing options in IE doesn't
make a difference.

--
Dan
 
You must log in or register to reply here.
Top