1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

IE cannot get to MS, Google, and others after removing viruses

Discussion in 'Internet Explorer' started by Jason, Apr 29, 2010.

  1. Jason

    Jason Flightless Bird

    XP Pro running IE 6 still. The computer was infected with got knows what
    viruses and my new AV protection cleaned them all. However now whenever I
    try to go to microsoft.com, google, yahoo or all the big sites I get the DNS
    error saying it can't find the site.

    1. IPconfig shows the correct DNS servers (not hijacked)
    2. TRACERT to Microsoft.com works
    3. Using IE to go to FTP://FTP.microsoft.com works
    4. Many other non-bigname sites all work (like coleman.com, sears.com,
    lowes.com)
    5. Telnet works fine.

    Basically it looks like something is still hooked into IE and when the AV
    protection cleaned out whatever it was IE is still trying to route me
    through the infected files that are not there, so I get a DNS error.

    I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
    services.
     
  2. Rob

    Rob Flightless Bird

    Jason <none@here.com> wrote:
    > XP Pro running IE 6 still. The computer was infected with got knows what
    > viruses and my new AV protection cleaned them all. However now whenever I
    > try to go to microsoft.com, google, yahoo or all the big sites I get the DNS
    > error saying it can't find the site.
    >
    > 1. IPconfig shows the correct DNS servers (not hijacked)
    > 2. TRACERT to Microsoft.com works
    > 3. Using IE to go to FTP://FTP.microsoft.com works
    > 4. Many other non-bigname sites all work (like coleman.com, sears.com,
    > lowes.com)
    > 5. Telnet works fine.
    >
    > Basically it looks like something is still hooked into IE and when the AV
    > protection cleaned out whatever it was IE is still trying to route me
    > through the infected files that are not there, so I get a DNS error.
    >
    > I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
    > services.


    Maybe the hosts file (in \Windows\system32\drivers\etc) is loaded with
    wrong hostname/address lines?

    Or some other undetected change has been made, you never know.

    I would format and reinstall the system. And install uptodate software
    this time.
     
  3. PA Bear [MS MVP]

    PA Bear [MS MVP] Flightless Bird

    You've got much more work to do!

    NB: If you had no anti-virus application installed or the subscription had
    expired *when the machine first got infected* and/or your subscription has
    since expired and/or the machine's not been kept fully-patched at Windows
    Update, don't waste your time with any of the below: Format & reinstall
    Windows. A Repair Install will NOT help!

    Microsoft PCSafety provides home users (only) with no-charge support in
    dealing with malware infections such as viruses, spyware (including unwanted
    software), and adware.
    https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

    Also available via the Consumer Security Support home page:
    https://consumersecuritysupport.microsoft.com/

    Otherwise...

    1. See if you can download/run the MSRT manually:
    http://www.microsoft.com/security/malwareremove/default.mspx

    NB: Run the FULL scan, not the QUICK scan! You may need to download the
    MSRT on a non-infected machine, then transfer MRT.EXE to the infected
    machine and rename it to SCAN.EXE before running it.

    2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
    in Safe Mode with Networking, if need be:
    http://onecare.live.com/site/en-us/center/howsafe.htm

    2b. Vista or Win7=> Run this scan instead:
    http://onecare.live.com/site/en-us/center/whatsnew.htm

    3. Now run a thorough check for hijackware, including posting requested logs
    in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

    Checking for/Help with Hijackware:
    http://mvps.org/winhelp2002/unwanted.htm
    http://inetexplorer.mvps.org/tshoot.html
    http://www.mvps.org/sramesh2k/Malware_Defence.htm
    http://www.elephantboycomputers.com/page2.html#Removing_Malware

    **Chances are you will need to seek expert assistance in
    http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
    http://www.spywarewarrior.com/viewforum.php?f=5,
    http://www.dslreports.com/forum/cleanup,
    http://www.bluetack.co.uk/forums/index.php,
    http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

    If these procedures look too complex - and there is no shame in admitting
    this isn't your cup of tea - take the machine to a local, reputable and
    independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

    Jason wrote:
    > XP Pro running IE 6 still. The computer was infected with got knows what
    > viruses and my new AV protection cleaned them all. However now whenever I
    > try to go to microsoft.com, google, yahoo or all the big sites I get the
    > DNS
    > error saying it can't find the site.
    >
    > 1. IPconfig shows the correct DNS servers (not hijacked)
    > 2. TRACERT to Microsoft.com works
    > 3. Using IE to go to FTP://FTP.microsoft.com works
    > 4. Many other non-bigname sites all work (like coleman.com, sears.com,
    > lowes.com)
    > 5. Telnet works fine.
    >
    > Basically it looks like something is still hooked into IE and when the AV
    > protection cleaned out whatever it was IE is still trying to route me
    > through the infected files that are not there, so I get a DNS error.
    >
    > I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
    > services.
     
  4. Mike

    Mike Flightless Bird

    "Jason" <none@here.com> wrote in message
    news:e2L0oR85KHA.1932@TK2MSFTNGP05.phx.gbl...
    > XP Pro running IE 6 still. The computer was infected with got knows what
    > viruses and my new AV protection cleaned them all. However now whenever I
    > try to go to microsoft.com, google, yahoo or all the big sites I get the
    > DNS error saying it can't find the site.
    >
    > 1. IPconfig shows the correct DNS servers (not hijacked)
    > 2. TRACERT to Microsoft.com works
    > 3. Using IE to go to FTP://FTP.microsoft.com works
    > 4. Many other non-bigname sites all work (like coleman.com, sears.com,
    > lowes.com)
    > 5. Telnet works fine.
    >
    > Basically it looks like something is still hooked into IE and when the AV
    > protection cleaned out whatever it was IE is still trying to route me
    > through the infected files that are not there, so I get a DNS error.
    >
    > I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
    > services.



    Hi, I just had some wicked malware/ virus crap also. After finally getting
    it's files cleaned out I reset my TCP/IP connection defaults and then in
    'internet options' under the 'connections tab', 'Lan Settings', it had set
    my connection to 'use proxy server'(probably theirs). I changed that back to
    'auto detect' and things are working fine.
    Good luck to ya!!
     
  5. Federico

    Federico Flightless Bird

    hi

    i got this same problem....

    i tried to reinstall the IE8, the installation process is fine. but still
    the IE8 doesnt work anymore.

    my platform is in Windows XP pro 64bit edition.

    i also tried the suggestion of PA Bear [MS MVP]

    still doesnt work. i just really notice that the IE8 program doesnt really
    work anymore eventhough i installed it properly. my internet connection is
    fine.

    the IE of other PC in my home network they work fine.

    please help guys... i appreciate it.

    thanks,
    Federico

    "PA Bear [MS MVP]" wrote:

    > You've got much more work to do!
    >
    > NB: If you had no anti-virus application installed or the subscription had
    > expired *when the machine first got infected* and/or your subscription has
    > since expired and/or the machine's not been kept fully-patched at Windows
    > Update, don't waste your time with any of the below: Format & reinstall
    > Windows. A Repair Install will NOT help!
    >
    > Microsoft PCSafety provides home users (only) with no-charge support in
    > dealing with malware infections such as viruses, spyware (including unwanted
    > software), and adware.
    > https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
    >
    > Also available via the Consumer Security Support home page:
    > https://consumersecuritysupport.microsoft.com/
    >
    > Otherwise...
    >
    > 1. See if you can download/run the MSRT manually:
    > http://www.microsoft.com/security/malwareremove/default.mspx
    >
    > NB: Run the FULL scan, not the QUICK scan! You may need to download the
    > MSRT on a non-infected machine, then transfer MRT.EXE to the infected
    > machine and rename it to SCAN.EXE before running it.
    >
    > 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
    > in Safe Mode with Networking, if need be:
    > http://onecare.live.com/site/en-us/center/howsafe.htm
    >
    > 2b. Vista or Win7=> Run this scan instead:
    > http://onecare.live.com/site/en-us/center/whatsnew.htm
    >
    > 3. Now run a thorough check for hijackware, including posting requested logs
    > in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
    >
    > Checking for/Help with Hijackware:
    > • http://mvps.org/winhelp2002/unwanted.htm
    > • http://inetexplorer.mvps.org/tshoot.html
    > • http://www.mvps.org/sramesh2k/Malware_Defence.htm
    > • http://www.elephantboycomputers.com/page2.html#Removing_Malware
    >
    > **Chances are you will need to seek expert assistance in
    > http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
    > http://www.spywarewarrior.com/viewforum.php?f=5,
    > http://www.dslreports.com/forum/cleanup,
    > http://www.bluetack.co.uk/forums/index.php,
    > http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
    >
    > If these procedures look too complex - and there is no shame in admitting
    > this isn't your cup of tea - take the machine to a local, reputable and
    > independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
    >
    > Jason wrote:
    > > XP Pro running IE 6 still. The computer was infected with got knows what
    > > viruses and my new AV protection cleaned them all. However now whenever I
    > > try to go to microsoft.com, google, yahoo or all the big sites I get the
    > > DNS
    > > error saying it can't find the site.
    > >
    > > 1. IPconfig shows the correct DNS servers (not hijacked)
    > > 2. TRACERT to Microsoft.com works
    > > 3. Using IE to go to FTP://FTP.microsoft.com works
    > > 4. Many other non-bigname sites all work (like coleman.com, sears.com,
    > > lowes.com)
    > > 5. Telnet works fine.
    > >
    > > Basically it looks like something is still hooked into IE and when the AV
    > > protection cleaned out whatever it was IE is still trying to route me
    > > through the infected files that are not there, so I get a DNS error.
    > >
    > > I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
    > > services.

    >
    > .
    >
     
  6. Rob

    Rob Flightless Bird

    Federico <Federico@discussions.microsoft.com> wrote:
    > please help guys... i appreciate it.


    But did you read the article you were quoting?
    It was full of help...
     
  7. PA Bear [MS MVP]

    PA Bear [MS MVP] Flightless Bird

    To avoid confusion, please begin a new thread about your specific problem
    and computer. State your IE version and full Windows version (e.g., WinXP
    SP3; WinXP 64-bit SP2; Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) in
    your first post. Thank you.

    PS: IE8 isn't infected, Windows is!


    Federico wrote:
    > hi
    >
    > i got this same problem....
    >
    > i tried to reinstall the IE8, the installation process is fine. but still
    > the IE8 doesnt work anymore.
    >
    > my platform is in Windows XP pro 64bit edition.
    >
    > i also tried the suggestion of PA Bear [MS MVP]
    >
    > still doesnt work. i just really notice that the IE8 program doesnt
    > really
    > work anymore eventhough i installed it properly. my internet connection is
    > fine.
    >
    > the IE of other PC in my home network they work fine.
    >
    > please help guys... i appreciate it.
    >
    > thanks,
    > Federico
    >
    > "PA Bear [MS MVP]" wrote:
    >
    >> You've got much more work to do!
    >>
    >> NB: If you had no anti-virus application installed or the subscription
    >> had
    >> expired *when the machine first got infected* and/or your subscription
    >> has
    >> since expired and/or the machine's not been kept fully-patched at Windows
    >> Update, don't waste your time with any of the below: Format & reinstall
    >> Windows. A Repair Install will NOT help!
    >>
    >> Microsoft PCSafety provides home users (only) with no-charge support in
    >> dealing with malware infections such as viruses, spyware (including
    >> unwanted software), and adware.
    >> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
    >>
    >> Also available via the Consumer Security Support home page:
    >> https://consumersecuritysupport.microsoft.com/
    >>
    >> Otherwise...
    >>
    >> 1. See if you can download/run the MSRT manually:
    >> http://www.microsoft.com/security/malwareremove/default.mspx
    >>
    >> NB: Run the FULL scan, not the QUICK scan! You may need to download the
    >> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
    >> machine and rename it to SCAN.EXE before running it.
    >>
    >> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan
    >> (only!)
    >> in Safe Mode with Networking, if need be:
    >> http://onecare.live.com/site/en-us/center/howsafe.htm
    >>
    >> 2b. Vista or Win7=> Run this scan instead:
    >> http://onecare.live.com/site/en-us/center/whatsnew.htm
    >>
    >> 3. Now run a thorough check for hijackware, including posting requested
    >> logs in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
    >>
    >> Checking for/Help with Hijackware:
    >> • http://mvps.org/winhelp2002/unwanted.htm
    >> • http://inetexplorer.mvps.org/tshoot.html
    >> • http://www.mvps.org/sramesh2k/Malware_Defence.htm
    >> • http://www.elephantboycomputers.com/page2.html#Removing_Malware
    >>
    >> **Chances are you will need to seek expert assistance in
    >> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
    >> http://www.spywarewarrior.com/viewforum.php?f=5,
    >> http://www.dslreports.com/forum/cleanup,
    >> http://www.bluetack.co.uk/forums/index.php,
    >> http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
    >>
    >> If these procedures look too complex - and there is no shame in admitting
    >> this isn't your cup of tea - take the machine to a local, reputable and
    >> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
    >> shop.
    >>
    >> Jason wrote:
    >>> XP Pro running IE 6 still. The computer was infected with got knows
    >>> what
    >>> viruses and my new AV protection cleaned them all. However now whenever
    >>> I
    >>> try to go to microsoft.com, google, yahoo or all the big sites I get the
    >>> DNS
    >>> error saying it can't find the site.
    >>>
    >>> 1. IPconfig shows the correct DNS servers (not hijacked)
    >>> 2. TRACERT to Microsoft.com works
    >>> 3. Using IE to go to FTP://FTP.microsoft.com works
    >>> 4. Many other non-bigname sites all work (like coleman.com, sears.com,
    >>> lowes.com)
    >>> 5. Telnet works fine.
    >>>
    >>> Basically it looks like something is still hooked into IE and when the
    >>> AV
    >>> protection cleaned out whatever it was IE is still trying to route me
    >>> through the infected files that are not there, so I get a DNS error.
    >>>
    >>> I ran Hijack this and it comes up clean. No BHOs, no unusual startups
    >>> or
    >>> services.

    >>
    >> .
     

Share This Page