Accessing Web Problem

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I loaded SP2 3/18/05. Tried to get on the internet this weekend, but it
can't find my provider. I get the can't find page, the address bar keeps
recycling and nothing happens. I've clicked on home. The same thing
happens. I've checked the Tools, Options, and I'm set for my home page. I
have no access to the Web.
 
Thom said:
I loaded SP2 3/18/05. Tried to get on the internet this weekend, but
it
can't find my provider. I get the can't find page, the address bar
keeps
recycling and nothing happens. I've clicked on home. The same thing
happens. I've checked the Tools, Options, and I'm set for my home
page. I have no access to the Web.

Try reinstalling the drivers for your network adapter or modem. Since
you didn't say how you connect, pick the right device for your setup.

Malke
 
Reinstalled my modem driver. I have a dial-up connection. I still have the
same problem. It seems to be recycling. The address line keeps changing and
the can't find site error message appears.
 
Reinstalled my modem driver. I have a dial-up connection. I still have the
same problem. It seems to be recycling. The address line keeps changing and
the can't find site error message appears.
 
Thom said:
Reinstalled my modem driver. I have a dial-up connection. I still
have the
same problem. It seems to be recycling. The address line keeps
changing and
the can't find site error message appears.
Do you know if your computer is 100% spyware and virus-free? If you
think it is, how did you determine that?

Malke
 
Malke said:
Do you know if your computer is 100% spyware and virus-free? If you
think it is, how did you determine that?

Malke
--
MS MVP - Windows Shell/User
www.elephantboycomputers.com
In Memoriam - MVP Alex Nichol
The world is diminished without him.

I'm a bit new to this Newsgroup thing. I did it once a while back. You may
have been the person to help me. Please bear with me.

I have eTrust EZ Armor software. I beleive it scans my computer each time I
open. It found some viruses last week, before this present problem. I did a
scan and believe they were eliminated. Since I'm working from my office
computer now, its hard to remember some specifics, but I did open Task
Manager. I noticed (I believe it was) outlook exe. running, increasingly, to
50,000 K before I shut down. I didn't understand that and think it may have
something to do with my problem.
 
Thom @ Pewaukee wrote:

I'm a bit new to this Newsgroup thing. I did it once a while back.
You may
have been the person to help me. Please bear with me.

I have eTrust EZ Armor software. I beleive it scans my computer each
time I
open. It found some viruses last week, before this present problem.
I did a
scan and believe they were eliminated. Since I'm working from my
office computer now, its hard to remember some specifics, but I did
open Task
Manager. I noticed (I believe it was) outlook exe. running,
increasingly, to
50,000 K before I shut down. I didn't understand that and think it
may have something to do with my problem.

That's OK - you're doing just fine. I'm going to suggest you run through
my usual malware removal routines. Non-viral malware can certainly
negatively impact connectivity. The reason for doing this, aside from
the obvious one of needing your computer to be clean, is because
troubleshooting is a process of elimination. It is important to start
with a system that you know is clean. So, do these steps and then post
back with the results. Of course you will need to get all the tools and
updates from a machine that has a good Internet connection (preferrably
broadband) and a cd burner.

First delete all Temporary and Temporary Internet Files. Then:

1) Scan in Safe Mode with current version (not earlier than 2004)
antivirus using updated definitions.

Before you remove malware, get LSPFix or WinSockFix for XP - see links
below.

2) Remove spyware with Spybot Search & Destroy and Ad-aware. These
programs are free, so use them both since they complement each other.
There is a new version of CWShredder from Intermute. I would not
install the other Intermute programs, however. Alternately, there are
CoolWebSearch malware removal steps at SilentRunners.

Be sure to update these programs before running, and it is a good idea
to do virus/spyware scans in Safe Mode. Make sure you are able to see
all hidden files and extensions (View tab in Folder Options).

If the malware remains even after you used Ad-aware and Spybot, you can
scan with HijackThis. HijackThis is an excellent tool to discover and
disable hijackers, but it requires expert skill. See below for
HijackThis links, including sites where you can post your HJT logs. A
combination of HijackThis and About:Buster works well in removing the
About:Blank homepage hijacker. Again, this is an expert tool and
novices should get help with it.

3) If you are running Windows ME or XP, you should disable/enable System
Restore after the system is clean because malware will be in the
Restore Points. With ME, you must disable System Restore completely.
With XP, you can delete all but the most recent (presumably clean)
System Restore point from the More Options section of Disk Cleanup
(Run>cleanmgr).

4) Make sure you've visited Windows Update and applied all security
patches. Do not install driver updates from Windows Update.

5) Run a firewall.

Links to help with malware:

Software/Methods:
http://www.safer-networking.org - Spybot Search & Destroy
http://www.lavasoftusa.com - Ad-aware
http://www.tomcoyote.com/hjt/ - HijackThis
http://www.intermute.com/spysubtract/cwshredder_download.html
http://www.silentrunners.org/sr_cwsremoval.html. - SilentRunners
http://www.cexx.org/lspfix.htm - Repair Winsock 2 settings after
removing spyware
http://www.spychecker.com/program/winsockxpfix.html - WinsockXPFix.exe

HijackThis:
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
Eshelman
http://aumha.net - forums
http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
forum
http://www.wilderssecurity.com/
http://forums.tomcoyote.org/

General:
http://aumha.net - look under "Security" for various forums
http://rgharper.mvps.org/cleanit.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://www.spywarewarrior.com/rogue_anti-spyware.htm

Malke
 
Malke said:
Thom @ Pewaukee wrote:



That's OK - you're doing just fine. I'm going to suggest you run through
my usual malware removal routines. Non-viral malware can certainly
negatively impact connectivity. The reason for doing this, aside from
the obvious one of needing your computer to be clean, is because
troubleshooting is a process of elimination. It is important to start
with a system that you know is clean. So, do these steps and then post
back with the results. Of course you will need to get all the tools and
updates from a machine that has a good Internet connection (preferrably
broadband) and a cd burner.

First delete all Temporary and Temporary Internet Files. Then:

1) Scan in Safe Mode with current version (not earlier than 2004)
antivirus using updated definitions.

Before you remove malware, get LSPFix or WinSockFix for XP - see links
below.

2) Remove spyware with Spybot Search & Destroy and Ad-aware. These
programs are free, so use them both since they complement each other.
There is a new version of CWShredder from Intermute. I would not
install the other Intermute programs, however. Alternately, there are
CoolWebSearch malware removal steps at SilentRunners.

Be sure to update these programs before running, and it is a good idea
to do virus/spyware scans in Safe Mode. Make sure you are able to see
all hidden files and extensions (View tab in Folder Options).

If the malware remains even after you used Ad-aware and Spybot, you can
scan with HijackThis. HijackThis is an excellent tool to discover and
disable hijackers, but it requires expert skill. See below for
HijackThis links, including sites where you can post your HJT logs. A
combination of HijackThis and About:Buster works well in removing the
About:Blank homepage hijacker. Again, this is an expert tool and
novices should get help with it.

3) If you are running Windows ME or XP, you should disable/enable System
Restore after the system is clean because malware will be in the
Restore Points. With ME, you must disable System Restore completely.
With XP, you can delete all but the most recent (presumably clean)
System Restore point from the More Options section of Disk Cleanup
(Run>cleanmgr).

4) Make sure you've visited Windows Update and applied all security
patches. Do not install driver updates from Windows Update.

5) Run a firewall.

Links to help with malware:

Software/Methods:
http://www.safer-networking.org - Spybot Search & Destroy
http://www.lavasoftusa.com - Ad-aware
http://www.tomcoyote.com/hjt/ - HijackThis
http://www.intermute.com/spysubtract/cwshredder_download.html
http://www.silentrunners.org/sr_cwsremoval.html. - SilentRunners
http://www.cexx.org/lspfix.htm - Repair Winsock 2 settings after
removing spyware
http://www.spychecker.com/program/winsockxpfix.html - WinsockXPFix.exe

HijackThis:
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
Eshelman
http://aumha.net - forums
http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
forum
http://www.wilderssecurity.com/
http://forums.tomcoyote.org/

General:
http://aumha.net - look under "Security" for various forums
http://rgharper.mvps.org/cleanit.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://www.spywarewarrior.com/rogue_anti-spyware.htm

Malke
--
MS MVP - Windows Shell/User
www.elephantboycomputers.com
In Memoriam - MVP Alex Nichol
The world is diminished without him.

This reply window is a bit confusing. I'm never sure if I'm responding in
the right place, but this newsgrouip thing is helpful.

1) I just realized that I did not scan in safe mode. I did not do a scan
at all except as follows. I may run through this again tonight.

2) I downloaded the first 6 programs you listed. I ran Spybot Search and
Destroy and Ad-aware. They identified a number of malware files as well as a
few others. I removed everything they identified. I did not run HijackThis,
concerned about your remark "requires expert skill."

3) Since I'm running XP (Home edition), I did the disable/enable System
Restore.

4) I tried to log on, to visit the Windows Update site. I could not get
past the wrong page, can't find site, window. I was connected. The address
line was not regenerating like it was before, but I could not access any site.

I'll try this again tonight. I just wanted to keep you up to date. I
appreciate your help and feel guilty about clicking th NO after "Was this
post helpfule to you?"
 
Thom @ Pewaukee wrote:

I'll try this again tonight. I just wanted to keep you up to date. I
appreciate your help and feel guilty about clicking th NO after "Was
this post helpfule to you?"

Bless your heart, don't even worry about it. I have never used the web
interface to these newsgroups. It is really the worst way to access
this resource. For future reference, here is information on how to
better use the newsgroups:

Since you are using the web interface, you may not realize that this is
really a newsgroup. You will get far more out of this resource if you
learn to use a newsreader. There are many good newsreaders for Windows,
but you can use Outlook Express since you already have it. Here are
some links to information about newsgroups to broaden your posting
pleasure!

http://www.elephantboycomputers.com/page3.html#12-09-02 - a brief
explanation of newsgroups
http://michaelstevenstech.com/outlookexpressnewreader.htm
http://rickrogers.org/setupoe.htm
http://support.microsoft.com/default.aspx?scid=/support/news/howto/default.asp
- Set Up Newsreader

http://www.dts-l.org/goodpost.htm

http://aumha.org/nntp.htm - list of MS newsgroups
microsoft.public.test.here - MS group to test if your newsreader is
working properly
http://www.mailmsg.com/SPAM_munging.htm - how to munge email address
http://www.blakjak.demon.co.uk/mul_crss.htm - multiposting vs.
crossposting

Other newsreaders
http://www.forteinc.com/agent/index.php - for Forte
http://www.mozilla.org
http://gravity.tbates.org/

Malke
 
Malke said:
Thom @ Pewaukee wrote:



Bless your heart, don't even worry about it. I have never used the web
interface to these newsgroups. It is really the worst way to access
this resource. For future reference, here is information on how to
better use the newsgroups:

Since you are using the web interface, you may not realize that this is
really a newsgroup. You will get far more out of this resource if you
learn to use a newsreader. There are many good newsreaders for Windows,
but you can use Outlook Express since you already have it. Here are
some links to information about newsgroups to broaden your posting
pleasure!

http://www.elephantboycomputers.com/page3.html#12-09-02 - a brief
explanation of newsgroups
http://michaelstevenstech.com/outlookexpressnewreader.htm
http://rickrogers.org/setupoe.htm
http://support.microsoft.com/default.aspx?scid=/support/news/howto/default.asp
- Set Up Newsreader

http://www.dts-l.org/goodpost.htm

http://aumha.org/nntp.htm - list of MS newsgroups
microsoft.public.test.here - MS group to test if your newsreader is
working properly
http://www.mailmsg.com/SPAM_munging.htm - how to munge email address
http://www.blakjak.demon.co.uk/mul_crss.htm - multiposting vs.
crossposting

Other newsreaders
http://www.forteinc.com/agent/index.php - for Forte
http://www.mozilla.org
http://gravity.tbates.org/

Malke
--
MS MVP - Windows Shell/User
www.elephantboycomputers.com
In Memoriam - MVP Alex Nichol
The world is diminished without him.

OK...So I went through this again, sorta.

1) I deleted my temp and Temp internet files. I couldn't get into the Safe
Mode. I pressed all the buttons, F1, F8, delete, etc., but couldn't find the
button. My XP brochure doesn't tell me either. So I ran it in regular mode.
I'm not sure what you mean by the antivirus. I understood this to mean the
Spbybot, etc. programs. I do get a window, a microsoft window, that says my
antivirus program is outdated. I thought my EZ Armor software was suppose to
do that and it's suppose to be up to date, good until August some time.

2) I ran Spybot S&D and Ad-aware. I did notice that there were a number of
malware items listed in the scan. I hadn't used the computer since the
previous scan. So, I presumed they weren't deleted by my previous scan. I
ran HijackThis and three items came up. None listed malware. Because I was
concerned with your note about the expert tool. I exited without deleting
anything.

3) I disabled/enabled System Restore. I have Windows XP, Home edition.

4) Although I could access the internet, I could not access any sites. I
got that error page, can't find site, can't find page, (Something like that.)

5) I couldn't find a firewall program. Although, now that I think about
it, that microsoft window did have a button for firewall. I haven't paid
much attention to the Windows antivirus/firewall/et. al window, because I
never purchased a Microsoft Antivirus program.

I tired the internet again and it is still as I said previously. I get the
can't find site thing. I get the same thing no matter what I try, typing in
a site, or clicking on a favorite. The address line does show my provider's
site, http;//www.att.net

So here I am, hangin in there.
 
Thom @ Pewaukee wrote:

OK, I'm going to respond to these items inline. The first thing I want
you to look at is the last thing I suggest about the firewall. Read
that first and test. If you still can't get on line after changing the
firewall settings, the connectivity problem might be caused by malware.
If that is the case, I'm going to suggest you take the machine to a
good local professional (not a BestBuy or CompUSA type of store). I'm
not saying this to hurt your feelings. It is just that it is apparent
from your post that your skillset may not be up to this. I think the
most efficient thing to do is have someone fix the computer for you.
But I will give you my comments and suggestions anyway so you can
decide what is best for you.
1) I deleted my temp and Temp internet files. I couldn't get into
the Safe Mode. I pressed all the buttons, F1, F8, delete, etc., but
couldn't find the button. My XP brochure doesn't tell me either. So
I ran it in regular mode.

To get into Safe Mode, repeatedly tap the F8 key as the computer is
starting up. This should get you to the correct menu. You absolutely
cannot clean up a machine in Regular Mode. You must be able to get to
Safe Mode. If you still can't get to Safe Mode in this manner, then in
Regular Mode do:

Start>Run msconfig [enter]

On the boot.ini tab check the /SAFEBOOT option. Restart the machine and
it will go into Safe Mode. You will need to run msconfig again and
uncheck /SAFEBOOT to get back to Regular Mode when you are finished
scanning.
I'm not sure what you mean by the antivirus. I understood this to
mean the
Spbybot, etc. programs. I do get a window, a microsoft window, that
says my
antivirus program is outdated. I thought my EZ Armor software was
suppose to do that and it's suppose to be up to date, good until
August some time.

Spybot and Ad-aware are not antivirus programs. Your EZ-AV is the
antivirus, and the August date refers to when your subscription runs
out. The reference to "outdated" means that your virus definitions may
be old. Virus definitions must be current to the minute. Of course, if
you haven't been able to get on line, they won't be to the minute.
Hopefully the definitions will only be a few days old though.
2) I ran Spybot S&D and Ad-aware. I did notice that there were a
number of
malware items listed in the scan. I hadn't used the computer since
the
previous scan. So, I presumed they weren't deleted by my previous
scan. I
ran HijackThis and three items came up. None listed malware. Because
I was
concerned with your note about the expert tool. I exited without
deleting anything.

It does rather sound like you might have something on the system, but I
can't tell from the information here. Run a HijackThis scan and post
the log at the AumHa HJT forum (not here, please). Make sure you read
the posting FAQ first.

http://aumha.net
3) I disabled/enabled System Restore. I have Windows XP, Home
edition.

4) Although I could access the internet, I could not access any
sites. I got that error page, can't find site, can't find page,
(Something like that.)

Doesn't sound like you're on line, then.
5) I couldn't find a firewall program. Although, now that I think
about
it, that microsoft window did have a button for firewall. I haven't
paid much attention to the Windows antivirus/firewall/et. al window,
because I never purchased a Microsoft Antivirus program.

XP SP2 automatically enables the Windows Firewall. Since you mentioned
that you have EZ-Armor you probably have EZ-FW in your system tray
also. This is a firewall and you should disable the Windows Firewall
from its applet in Control Panel. *IMPORTANT*: Only do this if you are
sure you have the EZ Firewall installed!

There is no Microsoft antivirus program. You always need third-party
antivirus software, like EZ-AV.

Malke
 
Malke said:
Thom @ Pewaukee wrote:

OK, I'm going to respond to these items inline. The first thing I want
you to look at is the last thing I suggest about the firewall. Read
that first and test. If you still can't get on line after changing the
firewall settings, the connectivity problem might be caused by malware.
If that is the case, I'm going to suggest you take the machine to a
good local professional (not a BestBuy or CompUSA type of store). I'm
not saying this to hurt your feelings. It is just that it is apparent
from your post that your skillset may not be up to this. I think the
most efficient thing to do is have someone fix the computer for you.
But I will give you my comments and suggestions anyway so you can
decide what is best for you.
1) I deleted my temp and Temp internet files. I couldn't get into
the Safe Mode. I pressed all the buttons, F1, F8, delete, etc., but
couldn't find the button. My XP brochure doesn't tell me either. So
I ran it in regular mode.

To get into Safe Mode, repeatedly tap the F8 key as the computer is
starting up. This should get you to the correct menu. You absolutely
cannot clean up a machine in Regular Mode. You must be able to get to
Safe Mode. If you still can't get to Safe Mode in this manner, then in
Regular Mode do:

Start>Run msconfig [enter]

On the boot.ini tab check the /SAFEBOOT option. Restart the machine and
it will go into Safe Mode. You will need to run msconfig again and
uncheck /SAFEBOOT to get back to Regular Mode when you are finished
scanning.
I'm not sure what you mean by the antivirus. I understood this to
mean the
Spbybot, etc. programs. I do get a window, a microsoft window, that
says my
antivirus program is outdated. I thought my EZ Armor software was
suppose to do that and it's suppose to be up to date, good until
August some time.

Spybot and Ad-aware are not antivirus programs. Your EZ-AV is the
antivirus, and the August date refers to when your subscription runs
out. The reference to "outdated" means that your virus definitions may
be old. Virus definitions must be current to the minute. Of course, if
you haven't been able to get on line, they won't be to the minute.
Hopefully the definitions will only be a few days old though.
2) I ran Spybot S&D and Ad-aware. I did notice that there were a
number of
malware items listed in the scan. I hadn't used the computer since
the
previous scan. So, I presumed they weren't deleted by my previous
scan. I
ran HijackThis and three items came up. None listed malware. Because
I was
concerned with your note about the expert tool. I exited without
deleting anything.

It does rather sound like you might have something on the system, but I
can't tell from the information here. Run a HijackThis scan and post
the log at the AumHa HJT forum (not here, please). Make sure you read
the posting FAQ first.

http://aumha.net
3) I disabled/enabled System Restore. I have Windows XP, Home
edition.

4) Although I could access the internet, I could not access any
sites. I got that error page, can't find site, can't find page,
(Something like that.)

Doesn't sound like you're on line, then.
5) I couldn't find a firewall program. Although, now that I think
about
it, that microsoft window did have a button for firewall. I haven't
paid much attention to the Windows antivirus/firewall/et. al window,
because I never purchased a Microsoft Antivirus program.

XP SP2 automatically enables the Windows Firewall. Since you mentioned
that you have EZ-Armor you probably have EZ-FW in your system tray
also. This is a firewall and you should disable the Windows Firewall
from its applet in Control Panel. *IMPORTANT*: Only do this if you are
sure you have the EZ Firewall installed!

There is no Microsoft antivirus program. You always need third-party
antivirus software, like EZ-AV.

Malke
--
MS MVP - Windows Shell/User
www.elephantboycomputers.com
In Memoriam - MVP Alex Nichol
The world is diminished without him.

OK...
I got into the Safe Mode, pressing F8, and ran Skybot and Ad-Aware. EZ
Firewall is installed. I didn't get a chance to rum HijackThis. I did
everything with exception of that. I tried to access the internet and got
the "This page Cannot Be Displayed". I was connected at 32Kbps and, after
clicking on an icon in the lower part of my screen, noticed an update being
downloaded. I had clicked on my Microsoft update in favorites. I didn't
have time to complete the process, but will try again tonight, along with the
HijackThis program, noting the log, and forwarding to http://aumha.net.

I'm hesitant to take my machine into a shop. It cost me $125 last time and
I still lost a lot. I can copy everything to a CD and reinstall Windows. I
know this takes time and I will have to upgrade Windows SP1 and SP2. I wish
I could download SP1 and SP2. The only other upgrade I would have is with my
internet provider. I'd rather do this and buy a new motherboard and with a
better processor. Just thinking.
 
Thom said:
I'm hesitant to take my machine into a shop. It cost me $125 last
time and
I still lost a lot. I can copy everything to a CD and reinstall
Windows. I
know this takes time and I will have to upgrade Windows SP1 and SP2.
I wish
I could download SP1 and SP2. The only other upgrade I would have is
with my
internet provider. I'd rather do this and buy a new motherboard and
with a
better processor. Just thinking.

Well, sometimes we techs have to work very hard to clean up an infected
machine. One of the reasons I always suggest not taking a computer to a
"superstore" type of place like BestBuy or CompUSA is because they will
charge you $120 and just format/reinstall. A good tech (like me!) will
always try to save the client's data first or at least give the client
the choice.

If you do decide to reinstall, you don't have to separately install SP1
and then SP2. You can order SP2 from MS for free, and some office
supply stores were carrying free cd's also. For all I know, CompUSA
might have SP2 disks. Here is a link for ordering SP2:

Order XPSP2 cd - http://tinyurl.com/6g675

Looking back over this very long thread, I see that the one thing you
haven't addressed is if your modem is physically working. If you
determine that the computer is indeed malware-free, I would uninstall
the modem, shut down the machine, and physically move the modem to a
different pci slot. Then start the computer and hopefully Windows will
see it. Install the latest drivers from the modem mftr. (or the OEM's
website if you have that sort of machine - like an HP, Sony, etc.).
Then see what happens. If the modem still doesn't work correctly,
consider simply buying another pci modem or swap it out for a
known-working one if you have a spare lying around. Modems cost about
$25 USD.

Malke
 
Back
Top