Can not connect using windows Explorer Browser

Viruses and worms
1

Hello…Thanks to Avast Evangelists, I have regained control of my computer. I fought of many viruses and am now try to get full control back. The only problem I can find is that I can not connect to internet with Explorer browser, nor start some games that require it. I have ran full scans with: Avast - Malwarebytes - Ewido - Superantispyware -

Running Windows XP 2002 service pack 3 on lenovo t500 thinkpad , everything seems to be running great… except that I can not open windows browser, or any program (game) that requires windows to run launcher client of that game. I can use Mozilla browser fine and browse the internet and watch movies ect. What is your advice? Thank you.

I have decided to try Techs advice to beanj3 :

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use MBAM (or SUPERantispyware or even Spyware Terminator) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Clean your Hosts file (replacing it) with HostsMan tool.
  7. Disable System Restore and then reenable it again.
  8. Immunize your system with SpywareBlaster.
  9. Check if you have insecure applications with Secunia Software Inspector.
2

I am currently on step 6
Here is the HJT log posted on my blog site

http://dijidog.blogspot.com/2010/03/i-can-not-connect-to-internet-using.html

3

I have posted the log on my blog site for easier viewing

http://dijidog.blogspot.com/2010/03/i-can-not-connect-to-internet-using.html

4

Still can not get explorer browser to work

5

Quite a large HJT log that shows the following problems :

We couldn’t detect any active process of a firewall on your system. Possible reasons:
(1.) You are using the windows firewall or a hardware firewall.
(2.) You are using a firewall of an unknown vendor.
(3.) You are using a firewall, but for unknown reasons it is disabled
(4.) You don’t use any firewall at all.
We recommend you to use a firewall. Download and install one or activate windows xp´s own firewall.

MSIE: Internet Explorer v7.00 (7.00.6000.16876)
IE8 has been out for more than a year and it is more secure.

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
Unless you recognize this IP address, this one must be fixed.

O4 - HKCU..\Run: [pibxkohi] C:\Documents and Settings\Leo\Local Settings\Application Data\hpcagu\qdumsftav.exe
No information found. This is a very suspicious entry.

O10 - Unknown file in Winsock LSP: c:\program files\national instruments\shared\mdns responder\nimdnsnsp.dll
This entry should not be fixed! Your best bet to repair it is to try the LSPFix from Cexx.org.
http://www.cexx.org/lspfix.htm
While National Instruments Corporation checks out as good, this entry might be causing your IE problem.

O20 - Winlogon Notify: ACNotify - ACNotify.dll (file missing)
Unnecessary (deactivated) entry that can be fixed.

You have a lot of start-up items as is shown below.

Overview of running tasks :

smss.exe
System process
Session Manager Subsystem

winlogon.exe
System process
Microsoft Windows Logon Process

services.exe
System process
Windows Service Controller

lsass.exe
System process
Local Security Authority Service

ibmpmsvc.exe
Backgroundtask
Ibmpmsvc

svchost.exe
System process
Microsoft Service Host Process

svchost.exe
System process
Microsoft Service Host Process

btwdins.exe
System process
Microsoft Bluetooth Service

S24EvMon.exe
Driver
Event Monitor

AAWService.exe
Anti Add/Spyware software
Ad-Aware 2007 Service

AvastSvc.exe
Virusscan
avast! Antivirus

spoolsv.exe
System process
Microsoft Printer Spooler Service

AcPrfMgrSvc.exe
Backgroundtask
Ac Profile Manager Service

BcmSqlStartupSvc.exe
Application
BcmSqlStartupSvc

TrackerPodSvcSvr.exe
Unknown task
Unknown task

EvtEng.exe
Backgroundtask
Intel EvtEng Module

ewidoctrl.exe
Anti Add/Spyware software
Ewido Security Suite

ewidoguard.exe
Unknown task
Unknown task

iviRegMgr.exe
Backgroundtask
RegMgr Module

jqs.exe
Backgroundtask
Java Quick Starter Service

lkcitdl.exe
Backgroundtask
National Instruments Part of Logos

lkads.exe
Backgroundtask
National Instruments Part of Logos

lktsrv.exe
Backgroundtask
National Instruments Part of Logos

LMS.exe
Backgroundtask
Local Manageability Service

nimxs.exe
Backgroundtask
nimxs.exe

nipalsm.exe
Backgroundtask
National Instruments NI-PAL Service Manager for Wi

nidmsrv.exe
Backgroundtask
National Instruments Shared

nipalsm.exe
Backgroundtask
National Instruments NI-PAL Service Manager for Wi

nisvcloc.exe
Backgroundtask
National Instruments Service Locator

tagsrv.exe
Backgroundtask
tagsrv.exe

PnkBstrA.exe
Suspicious process
pnkbstra.exe

RegSrvc.exe
Driver
Intel Communications Service

sqlwriter.exe
Backgroundtask
Microsoft SQL Server

svchost.exe
System process
Microsoft Service Host Process

tvt_reg_monitor_svc.exe
Backgroundtask
ThinkVantage Registry Monitor Service Module

TPHDEXLG.exe
Backgroundtask
ThinkVantage Active Protection System

rrpservice.exe
Backgroundtask
Recovery Module

rrservice.exe
Backgroundtask
IBM ThinkVantage Rescue and Recovery

tvtsched.exe
Backgroundtask
IBM ThinkVantage Scheduler

UNS.exe
Backgroundtask
UNS

YahooAUService.exe
Backgroundtask
Yahoo! AutoUpdater

AcSvc.exe
Backgroundtask
Access Connections Main Service

nimdnsResponder.exe
Backgroundtask
NI_ZEROCONF_SERVICE

nipalsm.exe
Backgroundtask
National Instruments NI-PAL Service Manager for Wi

PWMDBSVC.EXE
Backgroundtask
PMVDBSVC.exe

suservice.exe
Virusscan
McAfee Streaming Update Service

niLxiDiscovery.exe
Backgroundtask
LXI_DISCOVERY_SERVICE

SvcGuiHlpr.exe
Backgroundtask
ThinkVantage Access Connections Service GUI Helper

Explorer.EXE
System process
Microsoft Windows Explorer

wscntfy.exe
System process
Microsoft Windows Security Center

SynTPEnh.exe
Driver
Synaptics touchpad tray icon

TPFNF7SP.exe
Backgroundtask
TPFNF7SP.exe

TpShocks.exe
Driver
IBM Hard Drive Active Protection

TPOSDSVC.exe
Backgroundtask
TPOSDSVC.exe

EzEjMnAp.Exe
Driver
EasyEject Utility

scheduler_proxy.exe
Backgroundtask
scheduler_proxy Application

LPMGR.exe
Backgroundtask
ThinkVantage Productivity Center Manager

MOM.exe
Backgroundtask
Catalyst Control Center: Monitoring program

LPMLCHK.exe
Unknown task
Unknown task

TPONSCR.exe
Driver
ThinkPad Hotkey Manager

DrgToDsc.exe
Backgroundtask
Part of Roxio EasyCD Creator 6.0

TpScrex.exe
Driver
ThinkPad UltraZoom

rundll32.exe
System process
Microsoft Rundll32

SynTPLpr.exe
Driver
Synaptics TouchPad Driver Helper

cssauth.exe
Backgroundtask
Client Security Solution

AAWTray.exe
Backgroundtask
AAWTray Application

ACWLIcon.exe
Backgroundtask
acwlicon

BackgroundService.exe
Backgroundtask
NI Update Service

nidevmon.exe
Backgroundtask
NIDEVMON 1.2.0f1

avastUI.exe
Virusscan
avast! Antivirus

ctfmon.exe
System process
Alternative User Input Services

ccc.exe
Driver
Catalyst Control Centre: Host application

SUPERAntiSpyware.exe
Anti Add/Spyware software
SUPERAntiSpyware

DLG.exe
Backgroundtask
Detects whether your are plugged into a digital telephone line and displays the information graphically.

PWMUIAux.exe
Unknown task
Unknown task

firefox.exe
Application
Mozilla Firefox

HijackThis.exe
Application
Merijn Hijackthis

6

hello, long time lurker and user,

I wanted to toss my cents in, I was reading this thread and two thing stood out right away to Me. I double checked and i think im right, if im wrong, please forgive me.

Ive fought Antivirus Soft on a friends computer all day yesterday, it was long distance, over email, I wont go into all of it. But two things in this highjacklog stood out. that proxy setting number

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555

and this

O4 - HKCU..\Run: [pibxkohi] C:\Documents and Settings\Leo\Local Settings\Application Data\hpcagu\qdumsftav.exe

the ending has that same sftav.exe.

Im thinking you have antivirus soft, or had it, and thats why you cant get you internet explorer working. the links to fix this should work, but I found that it was a bit confusing. Im having problems posting so Ill post this, and give how i fixed it in the next post

7

ok, the problem I with my friends computer was malwarebytes would download, but would not update. not in safe mode, or normal. it would run a scan fine but wouldnt find anything.

Im not sure if youve done any of this or not, but you can try this, it worked for Me.

go into safe mode with networking, make sure its internet explorer, even if its not working, if you get at error page thats fine, as in page not found etc etc. dont use firefox in this fix. make sure you have malwarebytes open, with the update page open, ready to click on updates.

next, in your Internet explorer page, go to tools, click internet options, click connections, click lan settings. Proxy will probably be checked, thats whats blocking IE. uncheck and click ok, now as soon as you click ok, click update for malwarebytes, the timeing is critical. it might take you a couple of trys, as the virus is gonna put that proxy back to on so it can block internet explorer. Once the update takes, scan with malwarebytes, select remove, and all should be back to normal, its what finally worked on my friends computer yesterday…

hope this helps, good luck

Saty

8

Yes :smiley: Thank you so much. It worked ! It worked so well I’m going to do it on 3 other computers now! Thank you Saty and thank you Avast forum. I am getting better at defending my, and other peoples computers and the data therein.