IE won't connect, but FireFox is fine

[Filthy McNasty]

Running XP Pro SP1. Just today this started. Very early, about 03.00 GMT,
was my last successful www connection with IE. Only change to system since
then was installation of TaskPatrol 2.0 Free Version , though I don't see
what that might have done. ZoneAlarm set to allow IE, so not the firewall.
FireFox gets through just fine. News, Mail, Ping, TraceRt all fine. Not
changed Spybot/SpywareBlaster settings since Tuesday, so not them tinkering
with my HOSTS. I'm stumped

I'd like to say I prefer FireFox, but that isn't the point. And many sites
still stubbornly refuse to believe there is any other browser than IE, so I
really would like to return to the status quo

Help, please

Thankyou

 

[joevan]

Running XP Pro SP1. Just today this started. Very early, about 03.00 GMT,
was my last successful www connection with IE. Only change to system since
then was installation of TaskPatrol 2.0 Free Version , though I don't see
what that might have done. ZoneAlarm set to allow IE, so not the firewall.
FireFox gets through just fine. News, Mail, Ping, TraceRt all fine. Not
changed Spybot/SpywareBlaster settings since Tuesday, so not them tinkering
with my HOSTS. I'm stumped

I'd like to say I prefer FireFox, but that isn't the point. And many sites
still stubbornly refuse to believe there is any other browser than IE, so I
really would like to return to the status quo

Help, please

Thankyou

Is there a mention of IExplore in task manager or more than one?

 

[Filthy McNasty]

Using at least one appendage, the entity known in this space-time

Is there a mention of IExplore in task manager or more than one?

Yes. Just the once. I'm using SysInternals Process Explorer as TM
replacement

 

[Guest]

Using at least one appendage, the entity known in this space-time


Yes. Just the once. I'm using SysInternals Process Explorer as TM
replacement



--
Will Cornish of Cardigan, UK
filthy-mcnasty at bigfoot dot com

No nastier than you; No filthier than usual

Go to Firefox Extensions and find IE Tabs. This extension will allow you to
load WEB Pages in an IE Tab within FF. It will even allow a Windows Update.

 

[Filthy McNasty]

Using at least one appendage, the entity known in this space-time
continuum as =?Utf-8?B?U3VuZGFuY2VyMjY4?=

Go to Firefox Extensions and find IE Tabs. This extension will allow
you to load WEB Pages in an IE Tab within FF. It will even allow a
Windows Update.

Will do that but now I'm noticing settings that I don't recall making.
Mail has also started acting up. SysInternals Process Explorer wants to
access 211.84.230.3 On checking MailWasher Pro I see it has proxy set as
the same IP address, and running through the registry I see this Ip as
HTTP proxy

Ping and TraceRt can't reach this address

Who is at that address? How might it have been set up in MailWasher and
the Registry? Is this a new exploit, or have I had a senior moment?

 

[GrahamU]

Using at least one appendage, the entity known in this space-time
continuum as =?Utf-8?B?U3VuZGFuY2VyMjY4?=

Will do that but now I'm noticing settings that I don't recall making.
Mail has also started acting up. SysInternals Process Explorer wants to
access 211.84.230.3 On checking MailWasher Pro I see it has proxy set as
the same IP address, and running through the registry I see this Ip as
HTTP proxy

Ping and TraceRt can't reach this address

Who is at that address? How might it have been set up in MailWasher and
the Registry? Is this a new exploit, or have I had a senior moment?

Resolves to -
inetnum: 211.84.224.0 - 211.84.231.255
netname: ANYANG-CN
descr: ~{02Qt4sQ'~}
descr: Anyang University
descr: Anyang, Henan 455000, China
country: CN
admin-c: XX63-AP
tech-c: XX63-AP
tech-c: CER-AP
remarks: origin AS4538
remarks: renumbered
mnt-by: MAINT-CERNET-AP
status: ASSIGNED NON-PORTABLE
changed: (e-mail address removed) 20011130
changed: (e-mail address removed) 20040927
source: APNIC

 

[Filthy McNasty]

Using at least one appendage, the entity known in this space-time

Resolves to -
inetnum: 211.84.224.0 - 211.84.231.255
netname: ANYANG-CN
descr: ~{02Qt4sQ'~}
descr: Anyang University
descr: Anyang, Henan 455000, China
country: CN
admin-c: XX63-AP
tech-c: XX63-AP
tech-c: CER-AP
remarks: origin AS4538
remarks: renumbered
mnt-by: MAINT-CERNET-AP
status: ASSIGNED NON-PORTABLE
changed: (e-mail address removed) 20011130
changed: (e-mail address removed) 20040927
source: APNIC

Have tried deleting ProxyEnable and ProxyServer keys in IE's registry
settings, but they keep coming back as soon as I fire up IE. What can I
do to get rid of this?

 

[buRford]

Using at least one appendage, the entity known in this space-time

Have tried deleting ProxyEnable and ProxyServer keys in IE's registry
settings, but they keep coming back as soon as I fire up IE. What can I
do to get rid of this?

Sounds like you may have been hijacked?
But before that... have you tried the connections tab, of internet options?
That's usually where a proxy would be added.
Close IE... go to Control Panel - Internet Options - Click the Connections tab.
Double-click the Default connection in the Dial up VPN settings box.
Make sure there's no check in the Proxy Server box.

If that doesn't work, I'd do a scan with Spybot... then go on to:
http://www.spywareinfo.com/ and read, then follow it's instructions.

 

[Filthy McNasty]

Using at least one appendage, the entity known in this space-time

Using at least one appendage, the entity known in this space-time

Have tried deleting ProxyEnable and ProxyServer keys in IE's registry
settings, but they keep coming back as soon as I fire up IE. What can
I do to get rid of this?

Right reset IE Reg settings as follows:

AutoConfigProxy wininet.dll to No entry
ProxyFilterMode 17b (Hex) to No entry, since reset by System to (7b Hex)

IE now works, but I'd dearly like to know what's up here. And I think
I'd feel happier with a new wininet.dll. The current one is dated
2004/01/21 15:16 588,288 bytes

How do I acquire a replacement?

Thanks for any further input

 

[Filthy McNasty]

Using at least one appendage, the entity known in this space-time

Sounds like you may have been hijacked?
But before that... have you tried the connections tab, of internet
options? That's usually where a proxy would be added.
Close IE... go to Control Panel - Internet Options - Click the
Connections tab. Double-click the Default connection in the Dial up
VPN settings box. Make sure there's no check in the Proxy Server box.

If that doesn't work, I'd do a scan with Spybot... then go on to:
http://www.spywareinfo.com/ and read, then follow it's instructions.

Another party nudged my memory re a proxy manager I'd been evaluating
over the past few weeks. My current notion is that a powercu,t during a
session on Wednesday night, may have frozen temp settings in some way.
Either way, am updating all IE related patches, scanning with
AVG/Ewido/A-Squared, and then gradually restoring settings via Control
Panel

I would like to know which version of WinINet.DLL I should have for XP
SP1. Downloaded a slightly earlier version from DLL-Files website, but
am trusting to IE patches to set things square before I do any more
kitchen table surgery