WINDOWS xp stops web browsing after 8.5 minutes

G

Guest

WINDOWS xp stops web browsing after 8.5 minutes

From the instant that the XP Desktop is stable I have 8.5 minutes to browse
the web.
Thereafter every web page request gets "The Page Cannot Be Displayed.

I have worked with my TimeWarner ISP tech folks for 5 days and dozens of
phone calls.
One of their tech reps came to my house today and checked everything.
The Cable connection is fine. The WEb Browser is fine. The network settings
are fine.

There is no Anti-Virus program installed. Windows Defender is NOT running.
Windows firewall is NOT active.
After 8.5 minutes no browser ( IE 6 or Firefox ) request to any web page
gets anything except
"The Page Cannot Be Displayed".

Any help or suggestion is most welcome.

Thanks !
 
M

M.I.5¾

Dan McGarigle said:
WINDOWS xp stops web browsing after 8.5 minutes

From the instant that the XP Desktop is stable I have 8.5 minutes to
browse
the web.
Thereafter every web page request gets "The Page Cannot Be Displayed.

I have worked with my TimeWarner ISP tech folks for 5 days and dozens of
phone calls.
One of their tech reps came to my house today and checked everything.
The Cable connection is fine. The WEb Browser is fine. The network
settings
are fine.

There is no Anti-Virus program installed. Windows Defender is NOT running.
Windows firewall is NOT active.
After 8.5 minutes no browser ( IE 6 or Firefox ) request to any web page
gets anything except
"The Page Cannot Be Displayed".

The obvious suggestion is that this is caused by a virus or some malware.
If you really are connected to the internet without a fire wall or virus
protection, then it is a cast iron certainty that you have malware
infection.
 
M

Malke

Dan said:
WINDOWS xp stops web browsing after 8.5 minutes

From the instant that the XP Desktop is stable I have 8.5 minutes to browse
the web.
Thereafter every web page request gets "The Page Cannot Be Displayed.

I have worked with my TimeWarner ISP tech folks for 5 days and dozens of
phone calls.
One of their tech reps came to my house today and checked everything.
The Cable connection is fine. The WEb Browser is fine. The network settings
are fine.

There is no Anti-Virus program installed. Windows Defender is NOT running.
Windows firewall is NOT active.
After 8.5 minutes no browser ( IE 6 or Firefox ) request to any web page
gets anything except
"The Page Cannot Be Displayed".

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Not all tools used will work in Vista and you will need to run them
elevated. Since Vista is so new, it will be a while before removal
techniques and tools are developed. If you are unable to remove the
infection by following the general steps, register at one of the
HijackThis forums as suggested.

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.

The only alternative to going through the malware removal tediously and
systematically, probably with online help from an HJT forum, and taking
the machine to a real professional is to back up your data and do a
clean install of Windows. It's your call. After you get this all sorted,
take some time to learn how to use a computer on the Internet safely.

Safe Hex:
http://www.wilderssecurity.com/showthread.php?t=27971 - So How Did I Get
Infected Anyway?
http://www.getsafeonline.org/
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://www.claymania.com/safe-hex.html
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://msmvps.com/blogs/harrywaldron/archive/2006/02/05/82584.aspx - MVP
Harry Waldron - The Family PC - How to stay safe on the Internet
http://www.spywarewarrior.com/rogue_anti-spyware.htm - Eric Howes on
Rogue Antispyware Programs
http://www.microsoft.com/athome/security/default.mspx - Protect Your PC


Malke
 
G

Guest

September 29, 2007
Dear Sirs:
According to your instructions I have done the following to resolve the fact
that Windows XP, the system itself, is stopping Internet Explorer 6 from
accessing any web page after 8.5 minutes has elapsed since the XP desktop was
stable and available.
That is, I can use Internet Explorer 6 for to access web sites for 8.5
minutes.
After those 8.5 minutes pass, then any IE6 access to any web page get the
error message
“The Page Cannot Be Displayed.â€
Then I have to restart my machine.

Per your instructions I have done the following:

1. Tested the RAM
1. Tested the hard drive
2. The power supply is more than adequate with 400 Watts available.
3. Tested the motherboard
4. Taken the machine into Safe Mode
5. Disconnected from any networks.
6. Have set Folder Options so I can see all hidden files and extensions
7. Deleted all Temporary and Temporary Internet Files.
8. Installed the most current Java from Sun
9. Checked and found no known malware from Add/Remove Programs if there is
an entry for it
10. RAN TrendMicro's Sysclean
11. RAN David Lipman's Multi-AV
12. Smitfraud/Spyaxe/Spyfalcon/SpywareQuake, etc.
13. I RAN the Sophos, Kaspersky, Trend and McAfee scanners. The results of
those scans are shown below.

In my original message I did not include explanations about why I reported
the problem the way I did. Here are those reasons.
I wrote that “The Cable connection is fine.†because a Time-Warner tech rep
verified that here on site.
I wrote that “The WEb Browser is fine†“because I can use it for 8.5
minutes.
I wrote that “The network settings are fine.†because I wanted you to know
that I had checked “Network Connections†and everything beneath it and found
that all Network Settings are correct.
I wrote that “There is no Anti-Virus program installed†because I wanted to
tell you that no antivirus resident program could be interfering with IE6
accesses to the web.
I wrote that “Windows firewall is NOT active†to tell you that no firewall
was running that could interfere with IE6 accesses to web pages.

So, after running all your directed steps I still have the problem that I
cannot make any IE6 accesses to any web pages.
I can ping web sites.
I can get and send eMail using Outlook Express.
But I cannot make any IE6 web accesses because after those first 8.5 minutes
I get the error message “The Page Cannot Be Displayedâ€.

The results of the long scans that I ran are shown below.

What other instructions do you have to help me identify why 8.5 minutes
after the desktop is available I get the error message “The Page Cannot Be
Displayedâ€.

The AntiVirus Scans I ran gave the results shown after my signature here.

Dan McGarigle
El Segundo, CA

Trend Micro RESULTS
/--------------------------------------------------------------\
| Trend Micro System Cleaner |
| Copyright 2006, Trend Micro, Inc. |
| http://www.antivirus.com |
\--------------------------------------------------------------/
2007-09-29, 09:45:55, Running scanner "c:\AV-CLS\Trend\TSC.BIN"...
2007-09-29, 09:46:17, Scanner "c:\AV-CLS\Trend\TSC.BIN" has finished
running.
2007-09-29, 09:46:17, TSC Log:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- - - - - - - -
Report Date : 9/29/2007 09:47:08
VSAPI Engine Version : 8.000-1001
VSCANTM Version : 1.1-1001
Virus Pattern Version : 747 (231912 Patterns) (2007/09/28) (474700)
Command Line: c:\AV-CLS\Trend\VSCANTM.BIN /NBPM /S /CLEANALL /DCEGENCLEAN
/LAPPEND /LD /LC /LCF /NM /NB C:\*.* /P=c:\AV-CLS\Trend
106370 files have been read.
106370 files have been checked.
90662 files have been scanned.
206057 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 9/29/2007 10:04:12 17 minutes 4 seconds (1023.95 seconds) has
elapsed.
=====================================================================================
Sophos Anti-Virus RESULTS
Version 4.22.0 [Win32/Intel]
Virus data version 4.22E, October 2007
Includes detection for 291705 viruses, trojans and worms
Copyright (c) 1989-2007 Sophos Plc, www.sophos.com
System time 19:01:43, System date 28 September 2007
Command line qualifiers are: -di -remove -f -all -mime -mbr -noc -archive
-opt=ISCabinet --stop-scan
IDE directory is: c:\AV-CLS\Sophos
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- - - - - - - -

4 master boot records swept.
108514 files swept in 1 hour, 3 minutes and 21 seconds.
48 errors were encountered.
No viruses were discovered.
35 encrypted files were not checked.
Ending Sophos Anti-Virus.
=====================================================================================
McAfee RESULTS
Virus Scan Report File

Virus Scan Information

McAfee VirusScan for Win32 v5.20.0
Copyright (c) 1992-2007 McAfee, Inc. All rights reserved.
(408) 988-3832 LICENSED COPY - Jun 5 2007
Scan engine v5.2.00 for Win32.
Virus data file v5130 created Sep 28 2007
Scanning for 328107 viruses, trojans and variants.

Virus Scan Results

09/28/2007 20:45:27
Options:
"C:\" /UNZIP /WINMEM /SUB /ANALYZE /PANALYZE /STREAMS /ALL /CLEAN /DEL /MIME
/PROGRAM /EXCLUDE C:\AV-CLS\EXCLIST.TXT /HTML
"C:\AV-CLS\MCAFEE\SCANREPORT.HTML"
Scanning C: [HIT80GB-C]
Scanning C:\*.*
Summary report on C:\*.*
File(s)
Total files: ........... 369830
Clean: ................. 369768
Possibly Infected: ..... 0
Cleaned: ............... 0
Non-critical Error(s): 0
Time: 00:53.25
=====================================================================================
C:\AV-CLS\KAV RESULTS
þ AVPDOS32 Start 29-09-2007 02:22:35
Version 3.0 build 135
Last update: 29.09.2007, 425064 records.
Command line: /- /E /* /MD /MP /Y /Z- /W+=ScanReport.txt C:\
Profile defdos32.prf (from 27.06.2001 03:00:00)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - -
Scan process completed.
Result for all objects:
Sector Objects : 0 Known viruses : 0
Files : 447282 Virus bodies : 0
Folders : 15721 Disinfected : 0
Archives : 10356 Deleted : 0
Packed : 677 Warnings : 0
=====================================================================================
McAfee mode of Multi-AV Scanning Tool.
Scanning C: [HIT80GB-C]
Scanning C:\*.*
C:\Documents and Settings\Dan McGarigle\My Documents\HallMark Virus Msg
caused STOP 0x000000C2-s.doc\00000fe5.EML ... Found the W32/Zhelatin.gen!eml
virus !!!
Summary report on C:\*.*
File(s)
Total files: ........... 369830
Clean: ................. 369768
Possibly Infected: ..... 1
Cleaned: ............... 0
Non-critical Error(s): 2


Time: 00:53.25
=====================================================================================
 
M

Malke

Dan said:
September 29, 2007
Dear Sirs:
According to your instructions I have done the following to resolve the fact
that Windows XP, the system itself, is stopping Internet Explorer 6 from
accessing any web page after 8.5 minutes has elapsed since the XP desktop was
stable and available.
That is, I can use Internet Explorer 6 for to access web sites for 8.5
minutes.
After those 8.5 minutes pass, then any IE6 access to any web page get the
error message
“The Page Cannot Be Displayed.â€
Then I have to restart my machine.

Per your instructions I have done the following:

1. Tested the RAM
1. Tested the hard drive
2. The power supply is more than adequate with 400 Watts available.
3. Tested the motherboard
4. Taken the machine into Safe Mode
5. Disconnected from any networks.
6. Have set Folder Options so I can see all hidden files and extensions
7. Deleted all Temporary and Temporary Internet Files.
8. Installed the most current Java from Sun
9. Checked and found no known malware from Add/Remove Programs if there is
an entry for it
10. RAN TrendMicro's Sysclean
11. RAN David Lipman's Multi-AV
12. Smitfraud/Spyaxe/Spyfalcon/SpywareQuake, etc.
13. I RAN the Sophos, Kaspersky, Trend and McAfee scanners. The results of
those scans are shown below.

In my original message I did not include explanations about why I reported
the problem the way I did. Here are those reasons.
I wrote that “The Cable connection is fine.†because a Time-Warner tech rep
verified that here on site.
I wrote that “The WEb Browser is fine†“because I can use it for 8.5
minutes.
I wrote that “The network settings are fine.†because I wanted you to know
that I had checked “Network Connections†and everything beneath it and found
that all Network Settings are correct.
I wrote that “There is no Anti-Virus program installed†because I wanted to
tell you that no antivirus resident program could be interfering with IE6
accesses to the web.
I wrote that “Windows firewall is NOT active†to tell you that no firewall
was running that could interfere with IE6 accesses to web pages.

So, after running all your directed steps I still have the problem that I
cannot make any IE6 accesses to any web pages.
I can ping web sites.
I can get and send eMail using Outlook Express.
But I cannot make any IE6 web accesses because after those first 8.5 minutes
I get the error message “The Page Cannot Be Displayedâ€.

The results of the long scans that I ran are shown below.

What other instructions do you have to help me identify why 8.5 minutes
after the desktop is available I get the error message “The Page Cannot Be
Displayedâ€.

The AntiVirus Scans I ran gave the results shown after my signature here.

(snip scan results showing that the machine is basically clean).

Well, it's very odd that IE stops working after exactly 8.5 minutes.
Since you can still get email, your network card is obviously still
working. Apparently you only have a cable modem and no router, yes? And
you had the cable company come out and your cable modem is fine, yes?
Because if it weren't you wouldn't be able to get email.

Turn on the Windows Firewall before you go on the Internet again. It is
not causing the issue and it will protect you.

Here are a few more things to try:

1. Download and install an alternate browser like Firefox. Use it and
see if you lose the connection. If you don't, then we know the issue is
with IE. If you do, then we know the issue is caused by something else.

2. If you don't experience any problems using Firefox, try running IE in
no add-ons mode. I believe the option is under Tools>Manage Add-ons. If
that works, one of the add-ons you have installed for IE is causing the
problem.

3. If that doesn't help, let's look at IP/DNS. When you have Internet
access from IE, do:

Start>Run>cmd [enter] - This will give you the command prompt. Type:

ipconfig /all [enter]

Make a note of your computer's IP address, the gateway address, and the
DNS servers.

When you lose the Internet connection, do the above again and make a
note of those items. Post back with the information.

4. If you still lose Internet connection, please do the actions from #3
but also start the computer from clean-boot mode:

Clean boot in Windows XP - http://support.microsoft.com/kb/310353
Clean-boot advanced troubleshooting in Windows XP -
http://support.microsoft.com/kb/316434
How to Troubleshoot By Using the Msconfig Utility in Windows XP -
http://support.microsoft.com/?id=310560

See what happens with IE after a clean boot and report back.


Malke
 
U

Unknown

Have you gone to Microsoft and searched for 'The page cannot be displayed'?
Dan McGarigle said:
September 29, 2007
Dear Sirs:
According to your instructions I have done the following to resolve the
fact
that Windows XP, the system itself, is stopping Internet Explorer 6 from
accessing any web page after 8.5 minutes has elapsed since the XP desktop
was
stable and available.
That is, I can use Internet Explorer 6 for to access web sites for 8.5
minutes.
After those 8.5 minutes pass, then any IE6 access to any web page get the
error message
"The Page Cannot Be Displayed."
Then I have to restart my machine.

Per your instructions I have done the following:

1. Tested the RAM
1. Tested the hard drive
2. The power supply is more than adequate with 400 Watts available.
3. Tested the motherboard
4. Taken the machine into Safe Mode
5. Disconnected from any networks.
6. Have set Folder Options so I can see all hidden files and extensions
7. Deleted all Temporary and Temporary Internet Files.
8. Installed the most current Java from Sun
9. Checked and found no known malware from Add/Remove Programs if there is
an entry for it
10. RAN TrendMicro's Sysclean
11. RAN David Lipman's Multi-AV
12. Smitfraud/Spyaxe/Spyfalcon/SpywareQuake, etc.
13. I RAN the Sophos, Kaspersky, Trend and McAfee scanners. The results of
those scans are shown below.

In my original message I did not include explanations about why I reported
the problem the way I did. Here are those reasons.
I wrote that "The Cable connection is fine." because a Time-Warner tech
rep
verified that here on site.
I wrote that "The WEb Browser is fine" "because I can use it for 8.5
minutes.
I wrote that "The network settings are fine." because I wanted you to know
that I had checked "Network Connections" and everything beneath it and
found
that all Network Settings are correct.
I wrote that "There is no Anti-Virus program installed" because I wanted
to
tell you that no antivirus resident program could be interfering with IE6
accesses to the web.
I wrote that "Windows firewall is NOT active" to tell you that no firewall
was running that could interfere with IE6 accesses to web pages.

So, after running all your directed steps I still have the problem that I
cannot make any IE6 accesses to any web pages.
I can ping web sites.
I can get and send eMail using Outlook Express.
But I cannot make any IE6 web accesses because after those first 8.5
minutes
I get the error message "The Page Cannot Be Displayed".

The results of the long scans that I ran are shown below.

What other instructions do you have to help me identify why 8.5 minutes
after the desktop is available I get the error message "The Page Cannot Be
Displayed".

The AntiVirus Scans I ran gave the results shown after my signature here.

Dan McGarigle
El Segundo, CA

Trend Micro RESULTS
/--------------------------------------------------------------\
| Trend Micro System Cleaner |
| Copyright 2006, Trend Micro, Inc. |
| http://www.antivirus.com |
\--------------------------------------------------------------/
2007-09-29, 09:45:55, Running scanner "c:\AV-CLS\Trend\TSC.BIN"...
2007-09-29, 09:46:17, Scanner "c:\AV-CLS\Trend\TSC.BIN" has finished
running.
2007-09-29, 09:46:17, TSC Log:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- - - - - - - -
Report Date : 9/29/2007 09:47:08
VSAPI Engine Version : 8.000-1001
VSCANTM Version : 1.1-1001
Virus Pattern Version : 747 (231912 Patterns) (2007/09/28) (474700)
Command Line: c:\AV-CLS\Trend\VSCANTM.BIN /NBPM /S /CLEANALL /DCEGENCLEAN
/LAPPEND /LD /LC /LCF /NM /NB C:\*.* /P=c:\AV-CLS\Trend
106370 files have been read.
106370 files have been checked.
90662 files have been scanned.
206057 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 9/29/2007 10:04:12 17 minutes 4 seconds (1023.95 seconds) has
elapsed.
=====================================================================================
Sophos Anti-Virus RESULTS
Version 4.22.0 [Win32/Intel]
Virus data version 4.22E, October 2007
Includes detection for 291705 viruses, trojans and worms
Copyright (c) 1989-2007 Sophos Plc, www.sophos.com
System time 19:01:43, System date 28 September 2007
Command line qualifiers are: -di -remove -f -all -mime -mbr -noc -archive
-opt=ISCabinet --stop-scan
IDE directory is: c:\AV-CLS\Sophos
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- - - - - - - -

4 master boot records swept.
108514 files swept in 1 hour, 3 minutes and 21 seconds.
48 errors were encountered.
No viruses were discovered.
35 encrypted files were not checked.
Ending Sophos Anti-Virus.
=====================================================================================
McAfee RESULTS
Virus Scan Report File

Virus Scan Information

McAfee VirusScan for Win32 v5.20.0
Copyright (c) 1992-2007 McAfee, Inc. All rights reserved.
(408) 988-3832 LICENSED COPY - Jun 5 2007
Scan engine v5.2.00 for Win32.
Virus data file v5130 created Sep 28 2007
Scanning for 328107 viruses, trojans and variants.

Virus Scan Results

09/28/2007 20:45:27
Options:
"C:\" /UNZIP /WINMEM /SUB /ANALYZE /PANALYZE /STREAMS /ALL /CLEAN /DEL
/MIME
/PROGRAM /EXCLUDE C:\AV-CLS\EXCLIST.TXT /HTML
"C:\AV-CLS\MCAFEE\SCANREPORT.HTML"
Scanning C: [HIT80GB-C]
Scanning C:\*.*
Summary report on C:\*.*
File(s)
Total files: ........... 369830
Clean: ................. 369768
Possibly Infected: ..... 0
Cleaned: ............... 0
Non-critical Error(s): 0
Time: 00:53.25
=====================================================================================
C:\AV-CLS\KAV RESULTS
þ AVPDOS32 Start 29-09-2007 02:22:35
Version 3.0 build 135
Last update: 29.09.2007, 425064 records.
Command line: /- /E /* /MD /MP /Y /Z- /W+=ScanReport.txt C:\
Profile defdos32.prf (from 27.06.2001 03:00:00)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-
- - - -
Scan process completed.
Result for all objects:
Sector Objects : 0 Known viruses : 0
Files : 447282 Virus bodies : 0
Folders : 15721 Disinfected : 0
Archives : 10356 Deleted : 0
Packed : 677 Warnings : 0
=====================================================================================
McAfee mode of Multi-AV Scanning Tool.
Scanning C: [HIT80GB-C]
Scanning C:\*.*
C:\Documents and Settings\Dan McGarigle\My Documents\HallMark Virus Msg
caused STOP 0x000000C2-s.doc\00000fe5.EML ... Found the
W32/Zhelatin.gen!eml
virus !!!
Summary report on C:\*.*
File(s)
Total files: ........... 369830
Clean: ................. 369768
Possibly Infected: ..... 1
Cleaned: ............... 0
Non-critical Error(s): 2


Time: 00:53.25
=====================================================================================


Malke said:
Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Not all tools used will work in Vista and you will need to run them
elevated. Since Vista is so new, it will be a while before removal
techniques and tools are developed. If you are unable to remove the
infection by following the general steps, register at one of the
HijackThis forums as suggested.

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.

The only alternative to going through the malware removal tediously and
systematically, probably with online help from an HJT forum, and taking
the machine to a real professional is to back up your data and do a
clean install of Windows. It's your call. After you get this all sorted,
take some time to learn how to use a computer on the Internet safely.

Safe Hex:
http://www.wilderssecurity.com/showthread.php?t=27971 - So How Did I Get
Infected Anyway?
http://www.getsafeonline.org/
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://www.claymania.com/safe-hex.html
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://msmvps.com/blogs/harrywaldron/archive/2006/02/05/82584.aspx - MVP
Harry Waldron - The Family PC - How to stay safe on the Internet
http://www.spywarewarrior.com/rogue_anti-spyware.htm - Eric Howes on
Rogue Antispyware Programs
http://www.microsoft.com/athome/security/default.mspx - Protect Your PC


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
 
G

Guest

In response to your your few more things to try I have

1. Downloaded and run the Firefox Browser. It gets the same problem.

2. Noted my IP address from IPCONFIG.

3. Clean booted the system, then ran IPCONFIG /all before and after 8.5
minutes.
Here are those results
HERE is a "clean booted system"

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
Here is the IPCONFIG BEFORE losing IE6 Web Access
===============
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Dan McGarigle>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DAN-XP
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : socal.rr.com

Ethernet adapter Local Area Connection 3:

Connection-specific DNS Suffix . : socal.rr.com
Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
PCI
Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-17-31-2F-C2-2D
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 66.27.212.181
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Default Gateway . . . . . . . . . : 66.27.208.1
DHCP Server . . . . . . . . . . . : 10.48.224.1
DNS Servers . . . . . . . . . . . : 66.75.164.90
66.75.164.89
Lease Obtained. . . . . . . . . . : Saturday, September 29, 2007
11:16:0
1 PM
Lease Expires . . . . . . . . . . : Sunday, September 30, 2007
1:16:01 A
M

C:\Documents and Settings\Dan McGarigle>

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

HERE is the IPCONFIG AFTER losing IE6 Web Access
====================================
C:\Documents and Settings\Dan McGarigle>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DAN-XP
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : socal.rr.com

Ethernet adapter Local Area Connection 3:

Connection-specific DNS Suffix . : socal.rr.com
Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
PCI
Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-17-31-2F-C2-2D
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 66.27.212.181
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Default Gateway . . . . . . . . . : 66.27.208.1
DHCP Server . . . . . . . . . . . : 10.48.224.1
DNS Servers . . . . . . . . . . . : 66.75.164.90
66.75.164.89
Lease Obtained. . . . . . . . . . : Saturday, September 29, 2007
11:16:0
1 PM
Lease Expires . . . . . . . . . . : Sunday, September 30, 2007
1:16:01 A
M

Now I really don't know what to conclude except that something in XP is bad.
How do I debug/trace the activities in the system regarding XP's
communications programs ?

Any help is certainly appreciated.
Thanks !
Dan McGarigle
=====================================================

Malke said:
Dan said:
September 29, 2007
Dear Sirs:
According to your instructions I have done the following to resolve the fact
that Windows XP, the system itself, is stopping Internet Explorer 6 from
accessing any web page after 8.5 minutes has elapsed since the XP desktop was
stable and available.
That is, I can use Internet Explorer 6 for to access web sites for 8.5
minutes.
After those 8.5 minutes pass, then any IE6 access to any web page get the
error message
“The Page Cannot Be Displayed.â€Â
Then I have to restart my machine.

Per your instructions I have done the following:

1. Tested the RAM
1. Tested the hard drive
2. The power supply is more than adequate with 400 Watts available.
3. Tested the motherboard
4. Taken the machine into Safe Mode
5. Disconnected from any networks.
6. Have set Folder Options so I can see all hidden files and extensions
7. Deleted all Temporary and Temporary Internet Files.
8. Installed the most current Java from Sun
9. Checked and found no known malware from Add/Remove Programs if there is
an entry for it
10. RAN TrendMicro's Sysclean
11. RAN David Lipman's Multi-AV
12. Smitfraud/Spyaxe/Spyfalcon/SpywareQuake, etc.
13. I RAN the Sophos, Kaspersky, Trend and McAfee scanners. The results of
those scans are shown below.

In my original message I did not include explanations about why I reported
the problem the way I did. Here are those reasons.
I wrote that “The Cable connection is fine.†because a Time-Warner tech rep
verified that here on site.
I wrote that “The WEb Browser is fine†“because I can use it for 8.5
minutes.
I wrote that “The network settings are fine.†because I wanted you to know
that I had checked “Network Connections†and everything beneath it and found
that all Network Settings are correct.
I wrote that “There is no Anti-Virus program installed†because I wanted to
tell you that no antivirus resident program could be interfering with IE6
accesses to the web.
I wrote that “Windows firewall is NOT active†to tell you that no firewall
was running that could interfere with IE6 accesses to web pages.

So, after running all your directed steps I still have the problem that I
cannot make any IE6 accesses to any web pages.
I can ping web sites.
I can get and send eMail using Outlook Express.
But I cannot make any IE6 web accesses because after those first 8.5 minutes
I get the error message “The Page Cannot Be Displayedâ€Â.

The results of the long scans that I ran are shown below.

What other instructions do you have to help me identify why 8.5 minutes
after the desktop is available I get the error message “The Page Cannot Be
Displayedâ€Â.

The AntiVirus Scans I ran gave the results shown after my signature here.

(snip scan results showing that the machine is basically clean).

Well, it's very odd that IE stops working after exactly 8.5 minutes.
Since you can still get email, your network card is obviously still
working. Apparently you only have a cable modem and no router, yes? And
you had the cable company come out and your cable modem is fine, yes?
Because if it weren't you wouldn't be able to get email.

Turn on the Windows Firewall before you go on the Internet again. It is
not causing the issue and it will protect you.

Here are a few more things to try:

1. Download and install an alternate browser like Firefox. Use it and
see if you lose the connection. If you don't, then we know the issue is
with IE. If you do, then we know the issue is caused by something else.

2. If you don't experience any problems using Firefox, try running IE in
no add-ons mode. I believe the option is under Tools>Manage Add-ons. If
that works, one of the add-ons you have installed for IE is causing the
problem.

3. If that doesn't help, let's look at IP/DNS. When you have Internet
access from IE, do:

Start>Run>cmd [enter] - This will give you the command prompt. Type:

ipconfig /all [enter]

Make a note of your computer's IP address, the gateway address, and the
DNS servers.

When you lose the Internet connection, do the above again and make a
note of those items. Post back with the information.

4. If you still lose Internet connection, please do the actions from #3
but also start the computer from clean-boot mode:

Clean boot in Windows XP - http://support.microsoft.com/kb/310353
Clean-boot advanced troubleshooting in Windows XP -
http://support.microsoft.com/kb/316434
How to Troubleshoot By Using the Msconfig Utility in Windows XP -
http://support.microsoft.com/?id=310560

See what happens with IE after a clean boot and report back.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
 
M

Malke

Dan said:
In response to your your few more things to try I have

1. Downloaded and run the Firefox Browser. It gets the same problem.

2. Noted my IP address from IPCONFIG.

3. Clean booted the system, then ran IPCONFIG /all before and after 8.5
minutes.
Here are those results
HERE is a "clean booted system"

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
Here is the IPCONFIG BEFORE losing IE6 Web Access
===============
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Dan McGarigle>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DAN-XP
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : socal.rr.com

Ethernet adapter Local Area Connection 3:

Connection-specific DNS Suffix . : socal.rr.com
Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
PCI
Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-17-31-2F-C2-2D
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 66.27.212.181
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Default Gateway . . . . . . . . . : 66.27.208.1
DHCP Server . . . . . . . . . . . : 10.48.224.1
DNS Servers . . . . . . . . . . . : 66.75.164.90
66.75.164.89
Lease Obtained. . . . . . . . . . : Saturday, September 29, 2007
11:16:0
1 PM
Lease Expires . . . . . . . . . . : Sunday, September 30, 2007
1:16:01 A
M

C:\Documents and Settings\Dan McGarigle>

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

HERE is the IPCONFIG AFTER losing IE6 Web Access
====================================
C:\Documents and Settings\Dan McGarigle>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DAN-XP
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : socal.rr.com

Ethernet adapter Local Area Connection 3:

Connection-specific DNS Suffix . : socal.rr.com
Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
PCI
Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-17-31-2F-C2-2D
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 66.27.212.181
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Default Gateway . . . . . . . . . : 66.27.208.1
DHCP Server . . . . . . . . . . . : 10.48.224.1
DNS Servers . . . . . . . . . . . : 66.75.164.90
66.75.164.89
Lease Obtained. . . . . . . . . . : Saturday, September 29, 2007
11:16:0
1 PM
Lease Expires . . . . . . . . . . : Sunday, September 30, 2007
1:16:01 A
M

Now I really don't know what to conclude except that something in XP is bad.
How do I debug/trace the activities in the system regarding XP's
communications programs ?

I don't think it's that "something in XP is bad". So what you've
determined is that your settings don't change when you lose
connectivity. However, your settings are odd and perhaps you can explain
them.

From what you've written above, it is apparent that you are connecting
directly to a cable modem and getting a public IP address on Road
Runner's Virginia network. All well and good. But then you've got a DHCP
server in there that has AFAIK nothing to do with Road Runner. If you
only have a cable modem, the DHCP server should be the same as the
Gateway - 66.27.208.1, which is the cable modem - or at least something
belonging to Road Runner. I'm not familiar with Road Runner's service
but I would definitely ask them about that unless you know something
pertinent to this that you've left out of this thread. You haven't
answered my previous question about how exactly you connect to the
Internet and what the details of your network are - or if you did, I've
lost them in this very long thread so please refresh my memory.

Also, I'm not sure if you ever were asked and answered The First
Question Of Troubleshooting: what changed between the time things worked
and the time they didn't? So please do that now.


Malke
 
J

Jim

Glad to see that I am not going crazy and somebody else has this problem.


I don't know the answer but it is not an IE issue since firefox does the
same thing and cannot open a telnet session to port 80 to a web address
after this occurs.

Found that if I connect via the CISCO vpn - it starts working again, even if
I disconnect the vpn connection.


Still looking...

Jim


Malke said:
Dan said:
In response to your your few more things to try I have

1. Downloaded and run the Firefox Browser. It gets the same problem.

2. Noted my IP address from IPCONFIG. 3. Clean booted the system, then
ran IPCONFIG /all before and after 8.5 minutes.
Here are those results
HERE is a "clean booted system" = = = = = = = = = = = = = = = = = = = = =
= = = = = = = = = = =
Here is the IPCONFIG BEFORE losing IE6 Web Access
=============== Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Dan McGarigle>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DAN-XP
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : socal.rr.com

Ethernet adapter Local Area Connection 3:

Connection-specific DNS Suffix . : socal.rr.com
Description . . . . . . . . . . . : Marvell Yukon
88E8001/8003/8010 PCI Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-17-31-2F-C2-2D
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 66.27.212.181
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Default Gateway . . . . . . . . . : 66.27.208.1
DHCP Server . . . . . . . . . . . : 10.48.224.1
DNS Servers . . . . . . . . . . . : 66.75.164.90
66.75.164.89
Lease Obtained. . . . . . . . . . : Saturday, September 29, 2007
11:16:0
1 PM
Lease Expires . . . . . . . . . . : Sunday, September 30, 2007
1:16:01 A
M

C:\Documents and Settings\Dan McGarigle>

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =

HERE is the IPCONFIG AFTER losing IE6 Web Access
==================================== C:\Documents and
Settings\Dan McGarigle>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DAN-XP
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : socal.rr.com

Ethernet adapter Local Area Connection 3:

Connection-specific DNS Suffix . : socal.rr.com
Description . . . . . . . . . . . : Marvell Yukon
88E8001/8003/8010 PCI
Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-17-31-2F-C2-2D
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 66.27.212.181
Subnet Mask . . . . . . . . . . . : 255.255.248.0
Default Gateway . . . . . . . . . : 66.27.208.1
DHCP Server . . . . . . . . . . . : 10.48.224.1
DNS Servers . . . . . . . . . . . : 66.75.164.90
66.75.164.89
Lease Obtained. . . . . . . . . . : Saturday, September 29, 2007
11:16:0
1 PM
Lease Expires . . . . . . . . . . : Sunday, September 30, 2007
1:16:01 A
M
Now I really don't know what to conclude except that something in XP
is bad.
How do I debug/trace the activities in the system regarding XP's
communications programs ?

I don't think it's that "something in XP is bad". So what you've
determined is that your settings don't change when you lose connectivity.
However, your settings are odd and perhaps you can explain them.

From what you've written above, it is apparent that you are connecting
directly to a cable modem and getting a public IP address on Road Runner's
Virginia network. All well and good. But then you've got a DHCP server in
there that has AFAIK nothing to do with Road Runner. If you only have a
cable modem, the DHCP server should be the same as the Gateway -
66.27.208.1, which is the cable modem - or at least something belonging to
Road Runner. I'm not familiar with Road Runner's service but I would
definitely ask them about that unless you know something pertinent to this
that you've left out of this thread. You haven't answered my previous
question about how exactly you connect to the Internet and what the
details of your network are - or if you did, I've lost them in this very
long thread so please refresh my memory.

Also, I'm not sure if you ever were asked and answered The First Question
Of Troubleshooting: what changed between the time things worked and the
time they didn't? So please do that now.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
 
W

windmap

September 29, 2007
Dear Sirs:
According to your instructions I have done the following to resolve the fact
that Windows XP, the system itself, is stopping Internet Explorer 6 from
accessing any web page after 8.5 minutes has elapsed since the XP desktopwas
stable and available.
That is, I can use Internet Explorer 6 for to access web sites for 8.5
minutes.
After those 8.5 minutes pass, then any IE6 access to any web page get the
error message
"The Page Cannot Be Displayed."
Then I have to restart my machine.

Per your instructions I have done the following:

1. Tested the RAM
1. Tested the hard drive
2. The power supply is more than adequate with 400 Watts available.
3. Tested the motherboard
4. Taken the machine into Safe Mode
5. Disconnected from any networks.
6. Have set Folder Options so I can see all hidden files and extensions
7. Deleted all Temporary and Temporary Internet Files.
8. Installed the most current Java from Sun
9. Checked and found no known malware from Add/Remove Programs if there is
an entry for it
10. RAN TrendMicro's Sysclean
11. RAN David Lipman's Multi-AV
12. Smitfraud/Spyaxe/Spyfalcon/SpywareQuake, etc.
13. I RAN the Sophos, Kaspersky, Trend and McAfee scanners. The results of
those scans are shown below.

In my original message I did not include explanations about why I reported
the problem the way I did. Here are those reasons.
I wrote that "The Cable connection is fine." because a Time-Warner tech rep
verified that here on site.
I wrote that "The WEb Browser is fine" "because I can use it for 8.5
minutes.
I wrote that "The network settings are fine." because I wanted you to know
that I had checked "Network Connections" and everything beneath it and found
that all Network Settings are correct.
I wrote that "There is no Anti-Virus program installed" because I wanted to
tell you that no antivirus resident program could be interfering with IE6
accesses to the web.
I wrote that "Windows firewall is NOT active" to tell you that no firewall
was running that could interfere with IE6 accesses to web pages.

So, after running all your directed steps I still have the problem that I
cannot make any IE6 accesses to any web pages.
I can ping web sites.
I can get and send eMail using Outlook Express.
But I cannot make any IE6 web accesses because after those first 8.5 minutes
I get the error message "The Page Cannot Be Displayed".

The results of the long scans that I ran are shown below.

What other instructions do you have to help me identify why 8.5 minutes
after the desktop is available I get the error message "The Page Cannot Be
Displayed".

The AntiVirus Scans I ran gave the results shown after my signature here.

Dan McGarigle
El Segundo, CA

Trend Micro RESULTS
/--------------------------------------------------------------\
| Trend Micro System Cleaner |
| Copyright 2006, Trend Micro, Inc. |
| http://www.antivirus.com |
\--------------------------------------------------------------/
2007-09-29, 09:45:55, Running scanner "c:\AV-CLS\Trend\TSC.BIN"...
2007-09-29, 09:46:17, Scanner "c:\AV-CLS\Trend\TSC.BIN" has finished
running.
2007-09-29, 09:46:17, TSC Log:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- - - - - - - -
Report Date : 9/29/2007 09:47:08
VSAPI Engine Version : 8.000-1001
VSCANTM Version : 1.1-1001
Virus Pattern Version : 747 (231912 Patterns) (2007/09/28) (474700)
Command Line: c:\AV-CLS\Trend\VSCANTM.BIN /NBPM /S /CLEANALL /DCEGENCLEAN
/LAPPEND /LD /LC /LCF /NM /NB C:\*.* /P=c:\AV-CLS\Trend
106370 files have been read.
106370 files have been checked.
90662 files have been scanned.
206057 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 9/29/2007 10:04:12 17 minutes 4 seconds (1023.95 seconds) has
elapsed.
=====================================================================================
Sophos Anti-Virus RESULTS
Version 4.22.0 [Win32/Intel]
Virus data version 4.22E, October 2007
Includes detection for 291705 viruses, trojans and worms
Copyright (c) 1989-2007 Sophos Plc,www.sophos.com
System time 19:01:43, System date 28 September 2007
Command line qualifiers are: -di -remove -f -all -mime -mbr -noc -archive
-opt=ISCabinet --stop-scan
IDE directory is: c:\AV-CLS\Sophos
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- - - - - - - -

4 master boot records swept.
108514 files swept in 1 hour, 3 minutes and 21 seconds.
48 errors were encountered.
No viruses were discovered.
35 encrypted files were not checked.
Ending Sophos Anti-Virus.
=====================================================================================
McAfee RESULTS
Virus Scan Report File

Virus Scan Information

McAfee VirusScan for Win32 v5.20.0
Copyright (c) 1992-2007 McAfee, Inc. All rights reserved.
(408) 988-3832 LICENSED COPY - Jun 5 2007
Scan engine v5.2.00 for Win32.
Virus data file v5130 created Sep 28 2007
Scanning for 328107 viruses, trojans and variants.

Virus Scan Results

09/28/2007 20:45:27
Options:
"C:\" /UNZIP /WINMEM /SUB /ANALYZE /PANALYZE /STREAMS /ALL /CLEAN /DEL /MIME
/PROGRAM /EXCLUDE C:\AV-CLS\EXCLIST.TXT /HTML
"C:\AV-CLS\MCAFEE\SCANREPORT.HTML"
Scanning C: [HIT80GB-C]
Scanning C:\*.*
Summary report on C:\*.*
File(s)
Total files: ........... 369830
Clean: ................. 369768
Possibly Infected: ..... 0
Cleaned: ............... 0
Non-critical Error(s): 0
Time: 00:53.25
=====================================================================================
C:\AV-CLS\KAV RESULTS
þ AVPDOS32 Start 29-09-2007 02:22:35
Version 3.0 build 135
Last update: 29.09.2007, 425064 records.
Command line: /- /E /* /MD /MP /Y /Z- /W+=ScanReport.txt C:\
Profile defdos32.prf (from 27.06.2001 03:00:00)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - --
- - - -
Scan process completed.
Result for all objects:
Sector Objects : 0 Known viruses : 0
Files : 447282 Virus bodies : 0
Folders : 15721 Disinfected : 0
Archives : 10356 Deleted : 0
Packed : 677 Warnings : 0
=====================================================================================
McAfee mode of Multi-AV Scanning Tool.
Scanning C: [HIT80GB-C]
Scanning C:\*.*
C:\Documents and Settings\Dan McGarigle\My Documents\HallMark Virus Msg
caused STOP 0x000000C2-s.doc\00000fe5.EML ... Found the W32/Zhelatin.gen!eml
virus !!!
Summary report on C:\*.*
File(s)
Total files: ........... 369830
Clean: ................. 369768
Possibly Infected: ..... 1
Cleaned: ............... 0
Non-critical Error(s): 2

Time: 00:53.25
=====================================================================================

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware
Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.
You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html
When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).
Not all tools used will work in Vista and you will need to run them
elevated. Since Vista is so new, it will be a while before removal
techniques and tools are developed. If you are unable to remove the
infection by following the general steps, register at one of the
HijackThis forums as suggested.
Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.
The only alternative to going through the malware removal tediously and
systematically, probably with online help from an HJT forum, and taking
the machine to a real professional is to back up your data and do a
clean install of Windows. It's your call. After you get this all sorted,
take some time to learn how to use a computer on the Internet safely.

...

read more »

Remove all newly installed program.If you use external NIC card Reseat
the card then try again.If its Integreted NIC Clear winsock.To clear
winsock for service pack 2 do the following go to command prompt then
type NETSH WINSOCK RESET.Reboot the comp.Delete the current user
account and create a new user account and try again.Also try system
restore.Enable windows updates.Upgrade the IE6 to IE 7 .Disable all
addons ,Startup items.Download StartupCPL Microsoft powertoy and
perform advanced startup configuration.Remove unused rregistry entries
using the tools like CCleaner and glary utilities.If everything fails
backup all data.Perform repair reinstall..Update antivirus,Install
spyware protection.Setup hardware firewall.Remove free toolbars,Demo
applications,File sharing clients,Trial programs,Games ,videos and
everything that u suspect .
 
D

dobey

read more »

Remove all newly installed program.If you use external NIC card Reseat
the card then try again.If its Integreted NIC Clear winsock.To clear
winsock for service pack 2 do the following go to command prompt then
type NETSH WINSOCK RESET.Reboot the comp.Delete the current user
account and create a new user account and try again.Also try system
restore.Enable windows updates.Upgrade the IE6 to IE 7 .Disable all
addons ,Startup items.Download StartupCPL Microsoft powertoy and
perform advanced startup configuration.Remove unused rregistry entries
using the tools like CCleaner and glary utilities.If everything fails
backup all data.Perform repair reinstall..Update antivirus,Install
spyware protection.Setup hardware firewall.Remove free toolbars,Demo
applications,File sharing clients,Trial programs,Games ,videos and
everything that u suspect .


FFS he may as well just reinstall.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top