Spyware has left IE6 disabled, while Firefox works fine!

P

Philip Herlihy

A friend running Windows ME asked me to look at her machine because IE6
(SP1) wasn't working, although Outlook Express was. I found I could ping
public servers, and when I loaded Firefox on the machine that worked
perfectly.

I used HijackThis, Process Explorer and AutoRuns (latter two from
Sysinternals.com) to remove all traces of the various "search assistants"
she'd picked up, but even when they were all gone, IE still couldn't connect
to a page.

I tried pinging a public website to get the IP address, and then tried the
address http://212.58.224.85/ (BBC website) to rule out a DNS problem.
Still nothing.

I uninstalled all IE patches, then IE6 to get back to IE5.5 (I think - I
neglected to check the version but it was certainly an earlier one!). Still
nothing. I then reinstalled IE6 from CD. Still nothing. Firefox is
working all this time. I've been through all the settings in IE I thought
remotely relevant - she connects to cable via a USB modem which appears as a
Network Adapter in Device Manager (rather than a modem) so Internet Options
/ Connections has the browser attempting to connect via LAN.

It's not a firewall issue - I disabled it completely at one point (Zone
Alarm Free edition).

I'm now stumped. Without a better idea my next move would be to attempt a
repair installation of ME, but that seems a bit drastic.

Any ideas?

--
####################
## PH, London
####################
Cross-posted to:
microsoft.public.windows.inetexplorer.ie6.browser,
microsoft.public.windows.inetexplorer.ie6.setup,
microsoft.public.windowsme.general, microsoft.public.windowsme.internet,
microsoft.public.windowsme.networking
 
C

cquirke (MVP Win9x)

On Fri, 21 Jan 2005 11:18:09 -0000, "Philip Herlihy"
A friend running Windows ME asked me to look at her machine because IE6
(SP1) wasn't working, although Outlook Express was. I found I could ping
public servers, and when I loaded Firefox on the machine that worked
Click to expand...
I used HijackThis, Process Explorer and AutoRuns (latter two from
Sysinternals.com) to remove all traces of the various "search assistants"
she'd picked up, but even when they were all gone, IE still couldn't connect
Click to expand...

You could try suppressing BHOs in IE via Tools, Options, Advanced,
UNcheck Enable 3rd-party extensions, but it's more likely a rogue
"Content Adviser" setup, or possibly other active malware.
I tried pinging a public website to get the IP address, and then tried the
address http://212.58.224.85/ (BBC website) to rule out a DNS problem.
Still nothing.
Click to expand...

Yep. Because Firefox works, you know it isn't a Winsock problem or an
http:// problem, so that leaves things that spazz out IE.
It's not a firewall issue - I disabled it completely at one point
Click to expand...

OK, but ZA has bits running as services. If its rules are not set to
block iexplore.exe, then that should not be a factor.


--------------- ----- ---- --- -- - - -
Click to expand...
Tech Support: The guys who follow the
'Parade of New Products' with a shovel.
 
P

Philip Herlihy

Philip Herlihy said:
A friend running Windows ME asked me to look at her machine because IE6
(SP1) wasn't working, although Outlook Express was. I found I could ping
public servers, and when I loaded Firefox on the machine that worked
perfectly.

I used HijackThis, Process Explorer and AutoRuns (latter two from
Sysinternals.com) to remove all traces of the various "search assistants"
she'd picked up, but even when they were all gone, IE still couldn't
connect to a page.

I tried pinging a public website to get the IP address, and then tried the
address http://212.58.224.85/ (BBC website) to rule out a DNS problem.
Still nothing.

I uninstalled all IE patches, then IE6 to get back to IE5.5 (I think - I
neglected to check the version but it was certainly an earlier one!).
Still nothing. I then reinstalled IE6 from CD. Still nothing. Firefox
is working all this time. I've been through all the settings in IE I
thought remotely relevant - she connects to cable via a USB modem which
appears as a Network Adapter in Device Manager (rather than a modem) so
Internet Options / Connections has the browser attempting to connect via
LAN.

It's not a firewall issue - I disabled it completely at one point (Zone
Alarm Free edition).

I'm now stumped. Without a better idea my next move would be to attempt a
repair installation of ME, but that seems a bit drastic.

Any ideas?
Click to expand...

Thanks for the comments and suggestions. I haven't been able to get access
to the machine as expected since my original post. I'll try the Winsock fix
tool anyway - can't do any harm, although the fact that Firefox is working
does suggest something above that layer. What I don't understand is how the
problem can persist when I've uninstalled and reinstalled IE. Is my only
option now a repair install of Windows ME? I don't want to leave the
machine as it is as there is now no way to obtain Windows Updates.
 
C

Carey Holzman

Run the winsock fix first... it may be the answer to all of these questions.

Carey
 
P

Philip Herlihy

Carey Holzman said:
Run the winsock fix first... it may be the answer to all of these
questions.

Carey
Click to expand...

Will do, and will report back. Having trouble finding a time when we're
both available at the same time though!
 
J

Jack E Martinelli

Where is the page associated with the ftp link,
http://downloads.subratam.org/WinsockFix.zip,
which describes which OS's are supported?

The lack of documentation here is disturbing (to me).

Where are any other winsock fixes?
--
Jack E. Martinelli 2002-05 MS MVP for Shell/User / DTS
Help us help you: http://www.dts-L.org/goodpost.htm

http://www.microsoft.com/athome/security/protect/default.aspx
Your cooperation is very appreciated.
------
Carey Holzman said:
Run the winsock fix first... it may be the answer to all of these questions.

Carey
Click to expand...

<SNIP>
 
R

Robert Aldwinckle

N. Miller said:
Just curious; should Firefox work with a broken Winsock?
Click to expand...

I think it depends on how it is "broken". If it is malware deliberately
targeting IE or particular sites trying to be used by IE then Firefox
might be "allowed" through whatever interference is being created.

As a test for that case I'd be curious to know what happens if you use
Firefox's User-Agent override so its requests appear to come from IE?
<eg>


---
 
O

oops!!

Clicking the "Info" button on that little program shows:

WinsockFix (Freeware)
By Option^Explicit Software Solutions
Currently Compatible with Windows 95, 98, Me, 2000, XP

But, of course, who the hell is Option^Explicit, hmm.... Jack?
;-))

Zee
 
T

tonyc411

There has been a change to one or more of you system files that
interacts with Internet Explorer. Thus, the reason uninstalling it
doesn't correct the problem. To correct this you need to reinstall
your operating system. I have not determined exactly what files are
affected, but I have come across this issue several time while working
on computers. It usually affects the Windows ME, 2000, and XP
operating systems when I have come across it. In all cases the problem
was solved by reinstalling the operating system. A pain I know, but
effective. You do not have to re-format just over write the operating
system files you have and all should be well. Also, at first chance you
get destroy ME and use either 98 or xp. ME has the worst problems every
time, to me... Hope this helps...

Tony...
 
P

Philip Herlihy

Thanks everyone who replied. I tried the Winsock fix, suggested by "oops!!"
and it worked instantly. I'm very surprised that Firefox was immune to this
problem. Everything is working well now, and I'm advising my friend to use
Firefox rather than IE for safety's sake.
 
O

oops!!

Philip,

That is great!

The negative comments on my suggestion were probably caused by some lack of
experience of the posters with some spyware/malware, and the FACT that
Firefox is much less targeted than IE.

I must say that Robert Aldwinckle already pointed to that possibility in
this thread.

And, yes, I never stopped using Firefox from the first moment I tried it,
but remember you must keep IE for Windows Update.

Anyway, you're out of trouble and that is what really counts!

Cheers,

Zee
 
P

Philip Herlihy

Thanks, Zee, I'm grateful for your help!

It's intriguing that Firefox could continue while IE couldn't. I'd be
interested to understand what the Winsock repair tool is doing, and why the
problem doesn't affect Firefox.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

IE6 is calling Firefox 2
Page cannot be Displayed in IE. Firefox works fine. 13
IE6 Fails to run; but, Mozilla Firefox works OK 6
Installing Firefox with IE6 7
Why am I getting 'essential' prompts to upgrade to IE 8? 5
Netscape 8.0 installation kills IE6 XSL transformations 6
can IE6 pretend it is a Firefox? 4
Java works in Firefox but not in IE6 2

Top