Solved Problem - one issue left

[Vic1967]

For two days now, I have had NO problems from the hijack
program and feel confindent it is gone. However, for some
reason, no matter how I try to configure the connection in
IE, the browswer will not finda page. Says page cannot be
found. Server or DNS error. HOWEVER... (ahem, ahem) I have
installed and used the Firefox browser since all this IE
problem and indeed even now I am using FF brower to bring
this message, because IE won't find any page I give it. I
used control panel install/delete to use windows elements
and removed IE and rebooted and then re-installed. Reworked
the LAN setup and reset the network wizard. Still no luck
browsing with IE. As noted Fire Fox is doing just fine.
Must have broken something when I killed off that browswer
hijacker? What do you think? Any ideas what to do to fix
IE? Thanks. I am very happy to have killed that nasty bad
hijacker CoolWWW. Anybody who follows the last sequence of
instructions in this string should have excellent results!

 

[JohnF.]

Have you tried the LSPFIX solution?

JohnF.

 

[Vic1967]

WHAT's and LSPFIX solution?
I have a feeling you are making a joke?
hope not.
Vic

 

[plun]

WHAT's and LSPFIX solution?
I have a feeling you are making a joke?
hope not.
Vic

Hi

Read this:

http://www.tacktech.com/display.cfm?ttid=257

You can also see all LSPs within MSAS, Advanced tools,
System Explorer
and Winsock LSPs

 

[Vic1967]

Thanks: I did find LSPFIX via google. Downloaded and ran
it. It seemed to find no problem. But will follow through
on the advice below. Note: Firefox browswer and Outlook are
working fine with the intenet. It is only IE that cannot
find its way out of my box at this point.
vic

 

[plun]

Thanks: I did find LSPFIX via google. Downloaded and ran
it. It seemed to find no problem. But will follow through
on the advice below. Note: Firefox browswer and Outlook are
working fine with the intenet. It is only IE that cannot
find its way out of my box at this point.

Hi

I think you maybe must go through the whole arsenal to get
rid of
this.

Follow this:

http://www.aumha.org/a/quickfix.htm

Step 2 is important and you can use CCleaner instead of
manual removal.
http://www.ccleaner.com/

- Do all scannings and cleanings in *safe mode*, also
include a MSAS scan.

 

[Vic1967]

You may be right, BUT.. consider it may be something less
complex at this point? Having run all the antispy and
fixprograms, the big issue of the hijacked IE loading on
startup was killed. This also cleared up a background
program (probably the same one) that locked up all the file
folders on my desktop. So the computer is acting very clean
at this point and spyware shows no remnant of the CoolWWW
bad guys. HOWEVER:- IE seems to be disabled ... and I
suspect from some file removal that should not have been? I
have removed IE and re-installed and reset setings, but no
luck. At the risk of sounding repetetive... the other
programs using the net have no problems (firefox, outlook).
But... I'll check a little more and if I have to RE-DO all
the steps from the past (pretty much as noted in your post)
then that is what I will do.

 

[JohnF.]

Every program that accesses the internet must do so through the LSP so if IE
cannot but everyone else can, then maybe it's lsp layer was deleted or
supplanted.

More simply, have you run the Network Setup Wizard from START | PROGRAM
FILES | ACCESSORIES | COMMUNICATIONS ?

Is IE in WORK OFFLINE mode?

You may still have a trojan running in stealth mode and botching IE as well.
RUn Process Explorer from www.sysinternals.com and have a look at what is
really running on your machine.

JohnF.

 

[plun]

You may be right, BUT.. consider it may be something less
complex at this point? Having run all the antispy and
fixprograms, the big issue of the hijacked IE loading on
startup was killed. This also cleared up a background
program (probably the same one) that locked up all the file
folders on my desktop. So the computer is acting very clean
at this point and spyware shows no remnant of the CoolWWW
bad guys. HOWEVER:- IE seems to be disabled ... and I
suspect from some file removal that should not have been? I
have removed IE and re-installed and reset setings, but no
luck. At the risk of sounding repetetive... the other
programs using the net have no problems (firefox, outlook).
But... I'll check a little more and if I have to RE-DO all
the steps from the past (pretty much as noted in your post)
then that is what I will do.

Well, you have HijackThis in step 7 which is important for
solving
complicated spys. All spyattacks/hijacks are against IE.

You can send a mail to Private detective R Kinner or
take your log to Aumha.org. I think its much better to
go to a open community.

Or try some of these forums.

http://www.merijn.org/forums.html

Log files within this NG are a total mess........