Re: Reinstalling IE 6

From: Jan Il (abuse_at_localhost.com)
Date: 10/06/04 

Date: Wed, 6 Oct 2004 14:17:31 -0700

Hi Adrian C :-)

Please see my comments in line.....

> Jan,
> Once again thanks for your excellent information.

You're very welcome! I truly appreciate your patience. :-)

> It seems that the update function has been compromised by some means.
> I am now getting a security warning in my system tray that my Norton
> AV is askew. It states "Norton Antivirus reports that it is installed
> but it's status is unknown. Click recommendations for actions you can
> take. The recommendations are to make sure the AV program is up to
> date and active or get another AV program.
>
> I ran a "LiveUpdate" with Norton and updated it then ran a complete
> scan and it was negative....no virus' found.

I might make a suggestion here that you uninstall the Norton AV and try
installing a less intrusive program such as AVG6 Free, to see if perhaps the
Norton may be causing some interference. AVG6 Free is a very good AV, but,
not as oppressive as Norton. You can reinstall Norton if it's removal does
not resolve the problem. At least we will have one suspect accounted for.
:-)

Manually uninstalling Norton AntiVirus 2002 from Windows NT/2000/XP
http://service1.symantec.com/SUPPORT/nav.nsf/b69c799adfa31ecc85256aa30052f4d0/929150461b8e5cdc88256ab80074194a?OpenDocument
(don't know if this is the right version, but, it will get you close I
think, you can check for your correct version uninstall instructions)

Download and install AVG6 Free:
http://www.grisoft.com/us/us_dwnl_free.php

Let us know back on the results of this test.

>
> Question? Was all this e.g., my automatic update not functioning in
> both IE, the loss of my IE 6 and tools in the add/remove programs
> folder, and my AV automatic update all a result of SP2??? OR do
> believe there was a possible hijack attempt (although I have ad-aware
> and spyware in active monitor mode), I say this only because my eBay
> account was hijcaked last week. Ebay did email me to confirm and the
> issue was corrected within 24 hours.
>
> Thanks once again for all your help!!!! :>)

It is certainly possible that you still have some malware or other types of
scumware on your system. Although you have already run AdAware and SpyBot,
which are very good, there are some variations of scumware out there now
that will replicate itself over and over, and even mutate to an entirely
different name, if they are not detected and cleaned properly. In view of
the failure of the Norton LiveUpdate, and a couple of other failures
mentione, which does appear suspicious and very well could be malware
related, I strongly suggest that you do the following, and carefully follow
the instructions to be sure that your system is totally free of any of these
types of warez. Once we have determined that there are no such
contributors, it will make it easier to find a solution for any remaining
problems.

Although you may have already run one or more of the programs, please do so
again according to the instructions below. Please follow all instructions
very carefully:

Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Be sure to run CWShredder, Ad-aware and Spybot.
Also be sure to use the HijackThis. Please do not post your log to this
newsgroup, but to the SpywareInfo or the Aumha HiJackThis forums
http://forum.aumha.org/viewforum.php?f=30, to allow the experts there to
evaluate your log and advise you of the necessary steps to clean your
system.

CAUTION!!!!! Before you try to remove spyware using any of the programs
below, download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

Also, get a copy of WINSOCKXPFIX available at:
http://www.spychecker.com/program/winsockxpfix.html
and
WinsockXP Fix- WinXP
http://www.spychecker.com/program/winsockxpfix.html
Also, with instructions, at
http://www.iup.edu/house/resnet/winfix.shtm
also
>From LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
also ....
(NOTE: It is reported that in XP SP2, the command netsh winsock reset
will fix this problem without the need for these programs.)

or ........

Winsock Fix Utility
http://www.dfwonline.net/files/WinsockFix.zip

Also.........

Courtesy of Jim Byrd -

Download Sysclean.com, from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest pattern
file, here:
http://www.trendmicro.com/download/pattern.asp
Be sure to read the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
You might also want to get Art's updater, SYS-UP.Zip, here for future
updating of these: http://home.epix.net/~artnpeg/.
(If you download and use the updater from the beginning, it will
automatically handle downloading the other files. Place them in a dedicated
folder after appropriate unzipping, and then run. This scan may take a long
time, as Sysclean is VERY extensive and thorough

also........

Additional information on how to protect your PC:
The Parasite Fight http://www.aumha.org/a/quickfix.htm
More security tips at http://www.aumha.org/a/parasite.htm
Bugs, Glitches & Stuffups: http://www.mvps.org/inetexplorer/Darnit.htm

So how did I get infected in the first place?
http://boards.cexx.org/viewtopic.php?t=957&start=0&postdays=0&postorder=asc&highlight=&sid=53751d8ff5915261af727df08e66ce0d
or
http://snipurl.com/980t

...I say the Butler did it.....in the Library.....with the candlestick.....
;o))

Hope this helps

Jan :)
Smiles are meant to be shared,
that's why they're so contagious.

Please reply to the newsgroup so others may benefit.
Replies are posted only to the newsgroup for the benefit or other readers.

How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

> Adrian
>
> "Jan Il" wrote:Norton Antivirus
>
>> Hi Adrian C :-)
>>
>> You might try installing the updates from your hard drive, as it
>> might be faster than over the internet. Here is how you can obtain
>> and down load them to your hard drive if you wish to try it.
>>
>> How to download Windows updates and drivers from the Windows Update
>> Catalog
>> http://support.microsoft.com/default.aspx?scid=kb;EN-US;323166
>>
>> Hope this helps
>>
>> Jan :)
>> Smiles are meant to be shared,
>> that's why they're so contagious.
>>
>> Please reply to the newsgroup so others may benefit.
>> Replies are posted only to the newsgroup for the benefit or other
>> readers.
>>
>> How to make a good newsgroup post:
>> http://www.dts-l.org/goodpost.htm
>>
>>
>>>
>>
>>
>>> Jan,
>>> first thank you so much for the great info, it was a great help but
>>> only a minimal success.:>)
>>>
>>> My updates are now working (to some degree).
>>>
>>> The update icon is in my system tray and is downloading an
>>> update/updates.
>>>
>>> Problem now is that it is doing it at an excruciating slow pace,
>>> yesterday after applying some of your suggestons it started
>>> dwonloading but took six hours to go from 43% to 53%.
>>>
>>> I am going to try more of the tweaks that you suggested and will
>>> report back to this post.
>>>
>>> Thank you once again.
>>> Adrian
>>>
>>> "Jan Il" wrote:
>>>
>>>> Hi Adrian :-)
>>>>
>>>> First.......check the very interesting information here regarding
>>>> Windows Update problems for XP, and see if it will help:
>>>>
>>>> Microsoft Makes Windows Update Site Nonfunctional
>>>>
>>
http://www.techzonez.com/forums/showthread.php?s=&threadid=972&highlight=microsoft+update
>>>>
>>>> If still no joy....
>>>>
>>>> A possible workaround for the Windows Update not working.
>>>>
>>>> Use Notepad to add the following to your
>>>> "C:\Windows\System32\drivers\etc\hosts" file:
>>>>
>>>> 207.46.106.80 www.download.windowsupdate.com
>>>>
>>>> Save the notepad file.
>>>>
>>>> Close IE and reopen and see if it works.
>>>>
>>>> also.......
>>>>
>>>> Un-Hosing Windows Update
>>>>
>>
http://discuss.fogcreek.com/joelonsoftware/default.asp?cmd=show&ixPost=99021
>>>>
>>>> or........
>>>>
>>>> Windows Update not working -
>>>>
>>>> Go to the Windows Update site as you usually do. When you get
>>>> there, copy the address that appears in the browser's address bar.
>>>> Click the Tools menu, then click Internet Options.
>>>> Click on the Security tab. Click on the Trusted Sites icon and then
>>>> click on the Sites button.
>>>> In the Trusted Sites dialog box, paste the address into the Add
>>>> this Web site to the zone text box. Remove the checkmark from the
>>>> Require server verification (https:) for all sites in this zone
>>>> checkbox. Click the Add button.
>>>> Click OK.
>>>> Click OK again.
>>>>
>>>> If all the above fails..........
>>>>
>>>> IE is a core part of the XP operating system, and cannot be
>>>> uninstalled, only repaired or reinstalled. Try the following and
>>>> see if it helps:
>>>>
>>>> Repair or Reinstall IE/OE (WinXP)
>>>> http://support.microsoft.com/?kbid=318378
>>>>
>>>>
>>>> If these steps do not resolve your problem, please post back to
>>>> this thread with the details and any error messages.
>>>>
>>>> Hope this helps
>>>>
>>>> Jan :)
>>>> Smiles are meant to be shared,
>>>> that's why they're so contagious.
>>>>
>>>> Please reply to the newsgroup so others may benefit.
>>>> Replies are posted only to the newsgroup for the benefit or other
>>>> readers.
>>>>
>>>> How to make a good newsgroup post:
>>>> http://www.dts-l.org/goodpost.htm
>>>>
>>>>
>>>>
>>>>> E-Machines T-1000, 1.0 GHz, 256 MB memory, Windows XP Home
>>>>> Ver:2002, SP1 and Sp2 installed.
>>>>>
>>>>> Problem: My automatic updates has stopped functioning, I went to
>>>>> Microsofts support and found in troubleshooter that I had two
>>>>> choices for repair. (1) To download the newest 6.0 scripting file
>>>>> and (2) to go to Add/Remove programs/Microsoft Internet Explorer
>>>>> and Tools/Repair.
>>>>>
>>>>> Second Problem: For some reason I do not have Microsoft IE and
>>>>> Tools in my programs although IE seems to be functioning fine.
>>>>>
>>>>> Main Question(?)....If I download and reinstall IE 6.0 will it
>>>>> overwrite the files currently in the computer??
>>>>>
>>>>> Thank You for any help available.
>>>>> Adrian C

Loading