• Welcome to Tux Reports: Where Penguins Fly. We hope you find the topics varied, interesting, and worthy of your time. Please become a member and join in the discussions.

IE cannot get to MS, Google, and others after removing viruses

J

Jason

Flightless Bird
XP Pro running IE 6 still. The computer was infected with got knows what
viruses and my new AV protection cleaned them all. However now whenever I
try to go to microsoft.com, google, yahoo or all the big sites I get the DNS
error saying it can't find the site.

1. IPconfig shows the correct DNS servers (not hijacked)
2. TRACERT to Microsoft.com works
3. Using IE to go to FTP://FTP.microsoft.com works
4. Many other non-bigname sites all work (like coleman.com, sears.com,
lowes.com)
5. Telnet works fine.

Basically it looks like something is still hooked into IE and when the AV
protection cleaned out whatever it was IE is still trying to route me
through the infected files that are not there, so I get a DNS error.

I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
services.
 
R

Rob

Flightless Bird
Jason <none@here.com> wrote:
> XP Pro running IE 6 still. The computer was infected with got knows what
> viruses and my new AV protection cleaned them all. However now whenever I
> try to go to microsoft.com, google, yahoo or all the big sites I get the DNS
> error saying it can't find the site.
>
> 1. IPconfig shows the correct DNS servers (not hijacked)
> 2. TRACERT to Microsoft.com works
> 3. Using IE to go to FTP://FTP.microsoft.com works
> 4. Many other non-bigname sites all work (like coleman.com, sears.com,
> lowes.com)
> 5. Telnet works fine.
>
> Basically it looks like something is still hooked into IE and when the AV
> protection cleaned out whatever it was IE is still trying to route me
> through the infected files that are not there, so I get a DNS error.
>
> I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
> services.


Maybe the hosts file (in \Windows\system32\drivers\etc) is loaded with
wrong hostname/address lines?

Or some other undetected change has been made, you never know.

I would format and reinstall the system. And install uptodate software
this time.
 
P

PA Bear [MS MVP]

Flightless Bird
You've got much more work to do!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

Checking for/Help with Hijackware:
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

Jason wrote:
> XP Pro running IE 6 still. The computer was infected with got knows what
> viruses and my new AV protection cleaned them all. However now whenever I
> try to go to microsoft.com, google, yahoo or all the big sites I get the
> DNS
> error saying it can't find the site.
>
> 1. IPconfig shows the correct DNS servers (not hijacked)
> 2. TRACERT to Microsoft.com works
> 3. Using IE to go to FTP://FTP.microsoft.com works
> 4. Many other non-bigname sites all work (like coleman.com, sears.com,
> lowes.com)
> 5. Telnet works fine.
>
> Basically it looks like something is still hooked into IE and when the AV
> protection cleaned out whatever it was IE is still trying to route me
> through the infected files that are not there, so I get a DNS error.
>
> I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
> services.
 
M

Mike

Flightless Bird
"Jason" <none@here.com> wrote in message
news:e2L0oR85KHA.1932@TK2MSFTNGP05.phx.gbl...
> XP Pro running IE 6 still. The computer was infected with got knows what
> viruses and my new AV protection cleaned them all. However now whenever I
> try to go to microsoft.com, google, yahoo or all the big sites I get the
> DNS error saying it can't find the site.
>
> 1. IPconfig shows the correct DNS servers (not hijacked)
> 2. TRACERT to Microsoft.com works
> 3. Using IE to go to FTP://FTP.microsoft.com works
> 4. Many other non-bigname sites all work (like coleman.com, sears.com,
> lowes.com)
> 5. Telnet works fine.
>
> Basically it looks like something is still hooked into IE and when the AV
> protection cleaned out whatever it was IE is still trying to route me
> through the infected files that are not there, so I get a DNS error.
>
> I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
> services.



Hi, I just had some wicked malware/ virus crap also. After finally getting
it's files cleaned out I reset my TCP/IP connection defaults and then in
'internet options' under the 'connections tab', 'Lan Settings', it had set
my connection to 'use proxy server'(probably theirs). I changed that back to
'auto detect' and things are working fine.
Good luck to ya!!
 
F

Federico

Flightless Bird
hi

i got this same problem....

i tried to reinstall the IE8, the installation process is fine. but still
the IE8 doesnt work anymore.

my platform is in Windows XP pro 64bit edition.

i also tried the suggestion of PA Bear [MS MVP]

still doesnt work. i just really notice that the IE8 program doesnt really
work anymore eventhough i installed it properly. my internet connection is
fine.

the IE of other PC in my home network they work fine.

please help guys... i appreciate it.

thanks,
Federico

"PA Bear [MS MVP]" wrote:

> You've got much more work to do!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> Microsoft PCSafety provides home users (only) with no-charge support in
> dealing with malware infections such as viruses, spyware (including unwanted
> software), and adware.
> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
>
> Also available via the Consumer Security Support home page:
> https://consumersecuritysupport.microsoft.com/
>
> Otherwise...
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/malwareremove/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
> in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 2b. Vista or Win7=> Run this scan instead:
> http://onecare.live.com/site/en-us/center/whatsnew.htm
>
> 3. Now run a thorough check for hijackware, including posting requested logs
> in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
>
> Checking for/Help with Hijackware:
> • http://mvps.org/winhelp2002/unwanted.htm
> • http://inetexplorer.mvps.org/tshoot.html
> • http://www.mvps.org/sramesh2k/Malware_Defence.htm
> • http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> **Chances are you will need to seek expert assistance in
> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
> http://www.spywarewarrior.com/viewforum.php?f=5,
> http://www.dslreports.com/forum/cleanup,
> http://www.bluetack.co.uk/forums/index.php,
> http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
>
> If these procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
>
> Jason wrote:
> > XP Pro running IE 6 still. The computer was infected with got knows what
> > viruses and my new AV protection cleaned them all. However now whenever I
> > try to go to microsoft.com, google, yahoo or all the big sites I get the
> > DNS
> > error saying it can't find the site.
> >
> > 1. IPconfig shows the correct DNS servers (not hijacked)
> > 2. TRACERT to Microsoft.com works
> > 3. Using IE to go to FTP://FTP.microsoft.com works
> > 4. Many other non-bigname sites all work (like coleman.com, sears.com,
> > lowes.com)
> > 5. Telnet works fine.
> >
> > Basically it looks like something is still hooked into IE and when the AV
> > protection cleaned out whatever it was IE is still trying to route me
> > through the infected files that are not there, so I get a DNS error.
> >
> > I ran Hijack this and it comes up clean. No BHOs, no unusual startups or
> > services.

>
> .
>
 
R

Rob

Flightless Bird
Federico <Federico@discussions.microsoft.com> wrote:
> please help guys... i appreciate it.


But did you read the article you were quoting?
It was full of help...
 
P

PA Bear [MS MVP]

Flightless Bird
To avoid confusion, please begin a new thread about your specific problem
and computer. State your IE version and full Windows version (e.g., WinXP
SP3; WinXP 64-bit SP2; Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) in
your first post. Thank you.

PS: IE8 isn't infected, Windows is!


Federico wrote:
> hi
>
> i got this same problem....
>
> i tried to reinstall the IE8, the installation process is fine. but still
> the IE8 doesnt work anymore.
>
> my platform is in Windows XP pro 64bit edition.
>
> i also tried the suggestion of PA Bear [MS MVP]
>
> still doesnt work. i just really notice that the IE8 program doesnt
> really
> work anymore eventhough i installed it properly. my internet connection is
> fine.
>
> the IE of other PC in my home network they work fine.
>
> please help guys... i appreciate it.
>
> thanks,
> Federico
>
> "PA Bear [MS MVP]" wrote:
>
>> You've got much more work to do!
>>
>> NB: If you had no anti-virus application installed or the subscription
>> had
>> expired *when the machine first got infected* and/or your subscription
>> has
>> since expired and/or the machine's not been kept fully-patched at Windows
>> Update, don't waste your time with any of the below: Format & reinstall
>> Windows. A Repair Install will NOT help!
>>
>> Microsoft PCSafety provides home users (only) with no-charge support in
>> dealing with malware infections such as viruses, spyware (including
>> unwanted software), and adware.
>> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
>>
>> Also available via the Consumer Security Support home page:
>> https://consumersecuritysupport.microsoft.com/
>>
>> Otherwise...
>>
>> 1. See if you can download/run the MSRT manually:
>> http://www.microsoft.com/security/malwareremove/default.mspx
>>
>> NB: Run the FULL scan, not the QUICK scan! You may need to download the
>> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
>> machine and rename it to SCAN.EXE before running it.
>>
>> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan
>> (only!)
>> in Safe Mode with Networking, if need be:
>> http://onecare.live.com/site/en-us/center/howsafe.htm
>>
>> 2b. Vista or Win7=> Run this scan instead:
>> http://onecare.live.com/site/en-us/center/whatsnew.htm
>>
>> 3. Now run a thorough check for hijackware, including posting requested
>> logs in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
>>
>> Checking for/Help with Hijackware:
>> • http://mvps.org/winhelp2002/unwanted.htm
>> • http://inetexplorer.mvps.org/tshoot.html
>> • http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> • http://www.elephantboycomputers.com/page2.html#Removing_Malware
>>
>> **Chances are you will need to seek expert assistance in
>> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
>> http://www.spywarewarrior.com/viewforum.php?f=5,
>> http://www.dslreports.com/forum/cleanup,
>> http://www.bluetack.co.uk/forums/index.php,
>> http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
>>
>> If these procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair
>> shop.
>>
>> Jason wrote:
>>> XP Pro running IE 6 still. The computer was infected with got knows
>>> what
>>> viruses and my new AV protection cleaned them all. However now whenever
>>> I
>>> try to go to microsoft.com, google, yahoo or all the big sites I get the
>>> DNS
>>> error saying it can't find the site.
>>>
>>> 1. IPconfig shows the correct DNS servers (not hijacked)
>>> 2. TRACERT to Microsoft.com works
>>> 3. Using IE to go to FTP://FTP.microsoft.com works
>>> 4. Many other non-bigname sites all work (like coleman.com, sears.com,
>>> lowes.com)
>>> 5. Telnet works fine.
>>>
>>> Basically it looks like something is still hooked into IE and when the
>>> AV
>>> protection cleaned out whatever it was IE is still trying to route me
>>> through the infected files that are not there, so I get a DNS error.
>>>
>>> I ran Hijack this and it comes up clean. No BHOs, no unusual startups
>>> or
>>> services.

>>
>> .
 
Top