Malware·2,749 discussions

Internet access

Locked

I click on ie7 and get a white page with no address bars and then it knocks me off. I get incoming traffic from the internet but can’t connect for outgoing. Also blocked from microsoft activation online. The real hair scratcher is in c:\my user name\local settings\history\history.ie5. I click on history.ie5 and the cursor jumps to my documents. I can’t get rid of history. I go to safe mode and it appears I have deleted history
but all is the same when I go back to normal mode in xp home. I have scanned with malware bytes and avg. Malwarebytes removed C:\windows\system32\wextract.exe c:\windows\$Ntuninstall$ and C:\windows\system32\servicepackfiles\i386 virus. However, it did not fix my problem of internet access. Network diagnostics is not able to run either. It appears the virus turns off my ethernet nic for outgoing. I sense a host file activity but can’t pinpoint one. I did a repair install and everything is the same. No internet access, but I get updates from microsoft. I have tried removing the disk to another computer and scanning for viruses, but none is found. Another strange thing is when I click on the history square (the little blue square), it spreads a blue rectangular spot out beside it and I don’t get an history.ie5. I cannot delete it either. Are there any suggestions other than wipe hard drive and reinstall windows with all the pain of updating drivers,etc.

Topic

Clarifications

In reply to Internet access

Clarifications

Well your already pretty far along

In reply to Internet access

Have you tried reinstalling the NIC drivers?

Have you tried alternate browsers? Give Opera or Chrome a try.

Have you tried other malware scanners and virus scanners?
Spybot S&D and Avira AntiVir are my favorites ATM, give em a try, both are free :).

Try uninstalling IE7, if it doesn’t let you, try Uninstalling Servicepack 3, or Servicepack 2 if thats the level you are on. Uninstalling those will make windows do a a sort of system restore to back before you installed them.

Also check this

In reply to Internet access

How to check the Host file

Step 1: Click the Start button and select Run. Now type the following text in that Run box and press Enter:

notepad c:\WINDOWS\system32\drivers\etc\hosts

Step 2: You will see a new notepad window on your screen containing some information. You should have a single entry of 127.0.0.1 localhost. If there are any other entries in there it means that those sites are being blocked and it is probably due to an infection. Unless you made the extra entries delete them all but 127.0.0.1 localhost.

If it is the DNS changer fixwareout will remove this.

Fixwareout

[Author]

Replies