Unable to browse in IE6 since XP SP2 update

[Guest]

I am having a problem browsing in IE6 where I am bounced out of IE completely
when trying to link to a site. This happens on most sites since update to XP
SP2. I have an eMachine 733i with XP Home Edition Upgrade over 98. I have
had to do repair twice in the past 2 weeks and had Norton, SpyBot, AVG on my
computer. Lost all and am unable to reinstall Norton so went with AdAware
SE. Have a Linksys PCI G Wireless Adapter with cable modem. Am able to get
into some websites but when I try to change pages I get bounced. Other pages
work okay. One example is kellys-korner. Can go to pages with XP info but
if I try to link to Tweaks I get bounced out. This has been going on for at
least 2 weeks and I have tried everything. Ran ipconfig /all and came up
with the following information:
Windows IP Configuration
Host Name ....Home
Primary DNS Suffix ....
Node Type ....Unknown
IP Routing Enable ....No
WINS Proxy Enable ....No

Ethernet Adapter Wireless Network Connection 3:
Connection-specific DNS Suffix ....
Description ....Wireless G PCI Adapter
Physical Address ...00-0C-41-62-91-14
Dhcp Enabled ....No
IP Address ....192.168.1.101
Subnet Mask ....255.255.255.0
IP Address ....fe80::20c:41ff:fe62:9114%4
Default Gateway ....192.168.1.1
DNS Servers ...65.32.2.136
...65.32.2.147
...fec0:0:0:ffff::1%1
...fec0:0:0:ffff::2%1
...fec0:0:0:ffff:3%1

Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix ....
Description ....Teredo Tunneling Pseudo-Interface
Physical Address ....FF-FF-FF-FF-FF-FF-FF-FF
Dhcp Enabled ....No
IP Address ....fe80::5445:5245:444f%5
Default Gateway ....
NetBIOS over Tcpip ....Disabled

Tunnel Adapter Automatic Tunneling Pseudo-Interface:
Connection-specific DNS Suffix ....
Description ....Automatic Tunneling Pseudo-Interface
Physical Address ....C0-A8-01-65
Dhcp Enabled ....No
IP Address ....fe80::5efe:192.168.1.101%2
Default Gateway ....
DNS Server ....fec0:0:0:ffff:1%1
...fec0:0:0:ffff:2%1
...fec0:0:0:ffff:3%1
NetBIOS over Tcpip ....Disabled

Sorry this is so long, but I wanted to give as much information as possible.
I am relatively new at some of this and would like to correct the problem if
I can. I have researched everywhere I can think of for the answers and hope
you can help me out. Thank you for any suggestions you can offer.

 

[Robert Aldwinckle]

IP Address ....fe80::20c:41ff:fe62:9114%4

DNS Servers ...65.32.2.136
...65.32.2.147
...fec0:0:0:ffff::1%1
...fec0:0:0:ffff::2%1
...fec0:0:0:ffff:3%1

It looks as if you have IPv6 addresses.
I don't think you are likely to find anybody here (in ie6.browser)
who knows enough about that protocol to be able to help you much.

I'm cross-posting to windowsxp.network_web in case someone
there will comment right away.

FWIW what I would do is use nslookup to verify that that the
main DNS (IPv4) is working properly. I don't even know if
nslookup is IPv6 aware.

To start with just enter nslookup without operands and see what
it shows you.


Good luck

Robert Aldwinckle

 

[Guest]

Thank you for your suggestion. I ran the nslookup as you suggested and this
is what it says:

Default Server: tampfldns04-amp.tampabay.rr.com
Address: 65.32.2.136

I am having difficulties getting to other pages in this site, but I will try
to find the cross-posting and put this information in there as well.
Clicking on the link doesn't change my pages (smiles).

 

[Guest]

Thank you for your suggestion. I ran the nslookup and this is what it says:
Default Server: tampfldns04-amp.tampabay.rr.com
Address: 65.32.2.136

 

[Guest]

Have uninstalled ipv6 on my computer, but still not working properly.
Ipconfig /all now reads:
Windows IP Configuration
Host Name ...home
Primary Dns Suffix ...
Node Type ...Unknown
IP Routing Enabled ...No
WINS Proxy Enabled ...No

Ethernet adapter Wireless Network Connection 3:
Connection-specific DNS Suffix ...
Description ...Wireless-G PCI Adapter
Physical Address ...00-0C-41-62-91-14
Dhcp Enabled ...No
IP Address ...192.168.1.101
Subnet Mask ...255.255.255.0
Default Gateway ///192.168.1.1
DNS Servers ...65.32.2.136
...65.32.2.147

Do not know where to go next. Any more suggestions would be really
appreciated.

 

[Chuck]

Have uninstalled ipv6 on my computer, but still not working properly.
Ipconfig /all now reads:
Windows IP Configuration
Host Name ...home
Primary Dns Suffix ...
Node Type ...Unknown
IP Routing Enabled ...No
WINS Proxy Enabled ...No

Ethernet adapter Wireless Network Connection 3:
Connection-specific DNS Suffix ...
Description ...Wireless-G PCI Adapter
Physical Address ...00-0C-41-62-91-14
Dhcp Enabled ...No
IP Address ...192.168.1.101
Subnet Mask ...255.255.255.0
Default Gateway ///192.168.1.1
DNS Servers ...65.32.2.136
...65.32.2.147

Do not know where to go next. Any more suggestions would be really
appreciated.

Can you please post your ipconfig unedited? Start - Run - "cmd". Type
"ipconfig /all >c:\ipconfig.txt" into the command window. Open c:\ipconfig.txt
in Notepad, make sure that Format - Word Wrap is NOT checked!, copy and paste
entire contents into your next post.

Are all websites affected? By name and by ip address? Do you use any web
products besides Internet Explorer?

Define the scope of the problem objectively.
From a command window (Start - Run - "cmd"):
1) Ping www.yahoo.com.
2) Ping 66.94.230.33.
Report success / exact text of error messages.
From your browser:
3) Browse www.yahoo.com.
4) Browse 66.94.230.33.
Report success / exact text of error messages.

 

[Robert Aldwinckle]

Thank you for your suggestion. I ran the nslookup as you suggested and this
is what it says:

Default Server: tampfldns04-amp.tampabay.rr.com
Address: 65.32.2.136

That's interesting. Usually I can test other's DNS.
With yours I am being rejected--probably due to IP address.

server 65.32.2.136

Default Server: [65.32.2.136]
Address: 65.32.2.136

microsoft.com

Server: [65.32.2.136]
Address: 65.32.2.136

*** [65.32.2.136] can't find microsoft.com: Query refused
</example>

I notice that you are using a local address for your IP address.
Does that mean you are using a router (e.g.) and it is managing your
real IP address? Usually such a product contains its own control
panel which often features its own diagnostics. See if you can get
any more clues from it?

I am having difficulties getting to other pages in this site, but I will try
to find the cross-posting and put this information in there as well.
Clicking on the link doesn't change my pages (smiles).

I'm not sure which link you are referring to. You appear to be using
the Microsoft Communities web interface but I can't tell which portal
you are using. Try this one:

http://www.microsoft.com/windowsxp/...ft.public.windowsxp.network_web&lang=en&cr=US

 

[Guest]

Have run ipconfig and am posting results:
Windows IP Configuration Host Name . . . . . . . . . . . . : home
Primary Dns Suffix . . . . . . . : Node Type . . . . . . . .
.. . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS
Proxy Enabled. . . . . . . . : No Ethernet adapter Wireless Network
Connection 3: Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Wireless-G PCI Adapter Physical
Address. . . . . . . . . : 00-0C-41-62-91-14 Dhcp Enabled. . . . . .
.. . . . . : No IP Address. . . . . . . . . . . . : 192.168.1.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway
.. . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . :
65.32.2.136 65.32.2.147

Also have tried to do ping test. I was able to ping both sites with no
errors. I was able to access the www.yahoo.com site by putting it in my
address box, but when I put the 66.94.230.33 in the address box nothing
happens. I tried with http:\\ and without, still nothing. I have www.rr.com
set up as my home page. I can browse to some pages, but am unable to browse
to others. When I click on the link, I am bounced out of ie completely.
Page shuts down, no message, no error. I have kellys-korner set up in my
favorites and I can go to my favorites, click on the link and get to home
page. I can also link to some of the sites within, but others I am bounced
out of ie. We have cable modem through road runner with a linksys wireless
router connected to the cable modem. I have a linksys pci g wireless adapter
on my computer. I have had to do recovery of xp on my computer twice within
the last two weeks. I now have 2 administrator accounts on my computer and
I'm not sure if this may be causing a problem as well. Prior to the recovery
I had a number of spyware and anti virus programs due to trojans that I was
trying to get off my computer. I lost them and am not sure if that is
causing a problem as well. I hope I am providing you with enough
information, but not overdoing. I appreciate all of your help with this.

 

[Chuck]

Have run ipconfig and am posting results:
Windows IP Configuration Host Name . . . . . . . . . . . . : home
Primary Dns Suffix . . . . . . . : Node Type . . . . . . . .
. . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS
Proxy Enabled. . . . . . . . : No Ethernet adapter Wireless Network
Connection 3: Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Wireless-G PCI Adapter Physical
Address. . . . . . . . . : 00-0C-41-62-91-14 Dhcp Enabled. . . . . .
. . . . . : No IP Address. . . . . . . . . . . . : 192.168.1.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway
. . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . :
65.32.2.136 65.32.2.147

Also have tried to do ping test. I was able to ping both sites with no
errors. I was able to access the www.yahoo.com site by putting it in my
address box, but when I put the 66.94.230.33 in the address box nothing
happens. I tried with http:\\ and without, still nothing. I have www.rr.com
set up as my home page. I can browse to some pages, but am unable to browse
to others. When I click on the link, I am bounced out of ie completely.
Page shuts down, no message, no error. I have kellys-korner set up in my
favorites and I can go to my favorites, click on the link and get to home
page. I can also link to some of the sites within, but others I am bounced
out of ie. We have cable modem through road runner with a linksys wireless
router connected to the cable modem. I have a linksys pci g wireless adapter
on my computer. I have had to do recovery of xp on my computer twice within
the last two weeks. I now have 2 administrator accounts on my computer and
I'm not sure if this may be causing a problem as well. Prior to the recovery
I had a number of spyware and anti virus programs due to trojans that I was
trying to get off my computer. I lost them and am not sure if that is
causing a problem as well. I hope I am providing you with enough
information, but not overdoing. I appreciate all of your help with this.

From your previous report, I considered three alternatives:
1) MTU configuration (unique to DSL PPPoE, but you have RR cable broadband)
http://adsl.cutw.net/mtu.html
http://www.annoyances.org/exec/show/article04-107
http://www.netheaven.com/pmtulist.html
2) LSP / Winsock corruption (you say ping works so this is unlikely)
http://support.microsoft.com/?id=318584
http://support.microsoft.com/?id=811259
3) Spyware: A browser hijack making IE unstable.

Your report above sort of eliminates 1 and 2. So now, I have to suggest spyware
analysis. You mentioned AdAware and Spybot, so now I suggest HijackThis and
expert advice.

Start by downloading each of the following additional free tools:
HijackThis <http://www.majorgeeks.com/download.php?det=3155>
LSP-Fix <http://www.cexx.org/lspfix.htm>
WinsockXPFix <http://www.spychecker.com/program/winsockxpfix.html>

Create a separate folder for HijackThis, such as C:\HijackThis - copy the
downloaded file there.

Run HijackThis ("Scan"). Do NOT make any changes immediately. Save the HJT
Log.
<http://forums.spywareinfo.com/index.php?showtopic=227>
<http://forums.spywareinfo.com/index.php?showtopic=11150>

Finally, have your HJT log interpreted by experts at one or more of the
following security forums (and please post a link to your forum posts, here):
Aumha: <http://forum.aumha.org/index.php>
Net-Integration: <http://forums.net-integration.net/>
Spyware Info: <http://forums.spywareinfo.com/>
Spyware Warrior: <http://spywarewarrior.com/index.php>
Tom Coyote: <http://forums.tomcoyote.org/>

If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.

 

[Guest]

Thank you for all of your assistance with this problem. I have HiJack This
on my computer and will run it and post to one of the sites you gave me. I
hope that the problem will be solved soon.

It is great to have a site like this to turn to for computer problems.

 

[Chuck]

Thank you for all of your assistance with this problem. I have HiJack This
on my computer and will run it and post to one of the sites you gave me. I
hope that the problem will be solved soon.

It is great to have a site like this to turn to for computer problems.

Thanks for the update. If you can, please post link(s) to your forum post(s).

Yes, Usenet is a wonderful application for getting help. Too bad there are a
lot of jerks out there.

 

[Guest]

Have posted HJT log to spywarriors and am waiting for reply. Once I receive
it, I will post here so as to help anyone else with same problems. Have not
been able to find any spyware on my computer that could be causing this
problem, but I am not well versed in all the spyware out there. I'm trying
to learn and know what to do but it is a lengthy process (haha). It really
is a relief to have sources like this to turn to in times of need.

 

[Chuck]

Have posted HJT log to spywarriors and am waiting for reply. Once I receive
it, I will post here so as to help anyone else with same problems. Have not
been able to find any spyware on my computer that could be causing this
problem, but I am not well versed in all the spyware out there. I'm trying
to learn and know what to do but it is a lengthy process (haha). It really
is a relief to have sources like this to turn to in times of need.

Learning is not a lengthy process - it's an endless process. But you're right,
sources like this are very useful.

I would like very much to examine your HJT log - can you post a link to your SW
Forum entry?

 

[Guest]

Hope I am doing this correctly. Here is the link:
http://spywarewarrior.com/viewtopic.php?t=7616

If that doesn't work let me know and I'll try something else. I tried to
look through the log to see if I saw anything suspicious but to my uninformed
eyes, I didn't see anything. Thanks for your continued efforts.

 

[Guest]

I hope you were able to access my HJT log via the link I gave you. We have
been working on my computer daily and it seems that I may have picked up a
virus of some kind. I have been following directions from spywarriors and am
finally able to browse the network once again. All communications regarding
this problem can be found at the link I provided. There was a file that
began with "bwgo" that was causing problems and kept changing so deleting it
completely was not easy. I hope this will help anyone else who has the same
problem. The best way I found for deleting was in Safe Mode and going into
each individual Temp folder. The files will not delete in regular operation
because they are .exe files. I also made sure I emptied my recycle bin in
Safe Mode so the files didn't follow me when I rebooted. Thank you for your
patience and assistance with this problem. I really appreciate all of the
help you provided. Excellent job from you all.

 

[Chuck]

I hope you were able to access my HJT log via the link I gave you. We have
been working on my computer daily and it seems that I may have picked up a
virus of some kind. I have been following directions from spywarriors and am
finally able to browse the network once again. All communications regarding
this problem can be found at the link I provided. There was a file that
began with "bwgo" that was causing problems and kept changing so deleting it
completely was not easy. I hope this will help anyone else who has the same
problem. The best way I found for deleting was in Safe Mode and going into
each individual Temp folder. The files will not delete in regular operation
because they are .exe files. I also made sure I emptied my recycle bin in
Safe Mode so the files didn't follow me when I rebooted. Thank you for your
patience and assistance with this problem. I really appreciate all of the
help you provided. Excellent job from you all.

I'm following the SWW Forum post, and learning quite a bit in the process.
Thanks for your feedback.

 

[Guest]

Just wanted to let you know how much I appreciate the help and follow up you
have given. A resolution has been found and some new things as well. You
can read the outcome on the link. If I can add anything for clarification,
please let me know. Also, thank you for recommending the site, they were a
tremendous assistance.

 

[Chuck]

Just wanted to let you know how much I appreciate the help and follow up you
have given. A resolution has been found and some new things as well. You
can read the outcome on the link. If I can add anything for clarification,
please let me know. Also, thank you for recommending the site, they were a
tremendous assistance.

Debbie,

You're quite welcome. I learned a bit, too, reading the SWW Forum thread. Any
time I start to suspect that I'm too paranoid, I just read one thread like
yours, and my faith in mankind is restored (or my distrust of mankind who
distributes crap like that is renewed).

Stay safe.