Re: Unable to view certain pages yet connected to web

From: Chuck (none_at_example.net)
Date: 06/01/04


Date: 1 Jun 2004 16:20:06 -0500

On Tue, 1 Jun 2004 12:51:07 -0700, "Luis Santacruz" <*email_address_deleted*>
wrote:

>A week and a few days ago i came opon an error in my computer i was unable to view certain pages i visited frequently.
>I was confused as to why.I checked the sites on other friends computers and they are working fine.I however cant se them.
>
>I changed all my security settings and still it did nothing. I then procceded to deleting IE and then re-installing it, still it did nothing. I then installed other browsers such as Firefox and Netscape, still could not see the sites. I turned off all firewalls and still nothing.
>I opened the cmd promt and i used the NSLOOKUP to find the sites ip adreeses.
>i was able to retrive their adreeses. I then tried to ping the sites yet it returned a timeout error. Since I received a timeout error logic would suggest im not connected to the ent however i tried other sites and it worked jsut fine.
>I added the sites and their IP's to my host file. still i couldnt see the sites.
>
>I keep receiving this error
>""The page cannot be displayed
>The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings. ""
>
>The sites are up and running properly, and all settings have been changed frequently.I have run 3 online virus scans. installed 5 adware, spyware programs and still nothing.
>
>I am at a standstill as to why I cant acces anything.

Luis,

This sounds like either a dns hijack or LSP / Winsock corruption.

Search your entire system drive, including hidden and system folders, for file
"hosts". There is one legit copy, in C:\WINDOWS\system32\drivers\etc\. The
others are possibly bogus, and part (but just part) of the problem. Examine the
contents of each copy found, using Notepad. (HINT: Scroll to the end of each
Hosts file, by hitting Ctrl-End, then back up to the top, page by page, before
deciding that the file is empty. Look out for blank lines at the beginning and
end of the file, after localhost, placed there by an exploit!)

Next, download LSP-Fix and WinsockXPFIx from <http://www.cexx.org/lspfix.htm>,
and try both.

How current is your virus protection? Try these free online virus scans:
<http://www.bitdefender.com/scan/license.php>
<http://www.pandasoftware.com/activescan/com/activescan_principal.htm>
<http://www.ravantivirus.com/scan/>
<http://security.symantec.com/ssc/home.asp>
<http://housecall.trendmicro.com/housecall/start_corp.asp>

Now check for, and learn to defend against, additional carriers of infection.
Have you downloaded these programs before? Download them again, as many are
revised frequently, to keep up with the current level of malware being attempted
constantly - get the absolutely most current version of each product listed.
They're all free - and most pretty small, so they download quickly enough.

First, download CWShredder from <http://www.majorgeeks.com/download4086.html>.

Next, close all Internet Explorer and Outlook windows, then run CWShredder.
Have it fix all variants.

Now check for, and remove, spyware. Get HijackThis
<http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<http://www.safer-networking.org/index.php?page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
HJT Log. <http://forums.spywareinfo.com/index.php?showtopic=227>
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it, or a link to your forum post, here):
<http://forums.net-integration.net/>
<http://forums.spywareinfo.com/>
<http://forums.tomcoyote.org/>
<http://www.wilderssecurity.com/>

If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx again.

And Luis, please don't contribute to the spread and success of email address
mining viruses. Learn to munge your email address properly, to keep yourself a
bit safer when posting to open forums. Protect yourself and the rest of the
internet - never post your address unmunged.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.



Relevant Pages

  • Re: IE Default Home Page HIJACKED. Please Help !!!
    ... They're all free - and most pretty small, so they download quickly enough. ... Now check for, and remove, spyware. ... Install and run Spybot. ... bit safer when posting to open forums. ...
    (microsoft.public.windowsxp.network_web)
  • Re: w32.Myzor.Fk@yf Virus infects all exe. files got trojans - wha
    ... Yes, you may want to include Spybot S&D, it is also free for home use. ... TonyInNeedOfHelp wrote: ... so is this a free & complete download then? ... cant do any internet suff because the antic virus sites automatciall come open. ...
    (microsoft.public.windowsxp.general)
  • Re: I hate pop ups???
    ... They're all free - and most pretty small, so they download quickly ... Now check for, and remove, spyware. ... Install and run Spybot. ... safer when posting to open forums. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: pc takeover
    ... Hmm, If you cant connect to any site, Your pretty much screwed. ... arent 'taken over' You just have bad 'spyware' problems. ... Spybot is free) If you cant get to it on your computer, ... and download them to a disk. ...
    (alt.computer.security)
  • Re: 80072EFD after Download Box shows up and executes. AOL 9 & wi
    ... AOL browser will not download updates from Microsoft Windows update. ... -Open Spybot S&D, if you're not on the SPYBOT S&D tab click on it ... Kurt Says: There was not anything beyond the "127.0.0.1 localhost" entry. ... registry - it would not let me download Stinger, nor Panda nor update Norton. ...
    (microsoft.public.windowsupdate)