No http access from XP Home, all other internet is fine(?)

J

jkj2000

All of a sudden I can no longer browse the web with either IE or
Firefox on my laptop. I haven't changed any firewall settings on my
router, and even at school I cannot use either browser-- this used to
not be the case.

I can use ftp, smtp and any other internet access protocols on this
machine; just not http. Maybe I contracted some malware, and I'm
checking that, but is there any XP utility that will let me see if
something's blocking http on the machine?
 
P

PA Bear [MS MVP]

What anti-virus application or security suite is installed? What
anti-spyware applications (other than Defender)? What third-party firewall
(if any)? Were any of these applications running in the background when you
installed ?

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
 
P

PA Bear [MS MVP]

Don't download anything from this MVP Imposter's website!

@Chris: Take another van ride.
 
J

jkj2000

Ok, it turns out it was malware. Nasty variety too, it put a fake
wallpaper on my screen and even changed the screensaver to look like
the bsod!

I couldn't browse anywhere unless I (for some reason) killed my
instance of ccProxy.exe that Symantec has running in my background.
Even then, every time I went to google and pulled up a search this
thing would redirect me upon clicking any links to "analitics-
searches.google.com" (intentional misspelling of "analytics" there)
which would then send me to some banner ads.

I finally got rid of this thing by downloading the latest version of
Malwarebytes' Anti-Malware and downloading the latest update...which I
had to do using one of their mirrors, as the main malwarebytes.com
server was blocked by this thing. (You can use a mirror by opening
the malwarebytes program, then clicking the update tab and choosing a
mirror).

Once I did all that I was good again. Files that tip you off as to
whether you have this problem include:

C:\WINDOWS\SYSTEM32\tdssadw.dll
C:\WINDOWS\SYSTEM32\tdssl.dll
C:\WINDOWS\SYSTEM32\tdssserf.dll
C:\WINDOWS\SYSTEM32\tdssmain.dll
C:\WINDOWS\SYSTEM32\tdssinit.dll
C:\WINDOWS\SYSTEM32\tdsslog.dll

These are all bogus files installed by the malware. Anti-Malware will
get rid of them, and good riddance.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top