Computer Woes Unrelated to D&D

[CombatWombat51]

I have a random, evil, problem, and I hope a kind soul might help me out I'm also searching Google and the like, but I figure any help I can get is worth having. (Currently I'm on my girlfriend's computer, BTW.)

The Problem:
My computer won't load any webpages. It will dial up, and I can use things like AIM. I have two different browsers (IE and IE2), and they both give me the same problem. I'm completely baffled. Scandisk turned up nothing wrong. Spybot turned up nothing wrong.

I'm clueless, and I know some smarty fellers with fancy-pants book-lernin' live 'round these parts. Anyone wanna be my personal custserv rep?

 

[EricNoah]

Do you use an ad-blocker? What message are you getting when you try to bring up a web page? More info please.

 

[Viking Bastard]

IE2?

I take that doesn't just mean IE version 2.0, right?

 

[CombatWombat51]

Do you use an ad-blocker? What message are you getting when you try to bring up a web page? More info please.

Ad-blocker: MyIE2 (my browser of choice) has a built in ad-blocker. MyIE2 is v.0.7.1355.

Errors for IE2: When I first open a page it says:

Action Cancelled

"Internet Explorer was unable to link to the Web page you requested. The page may be temporarily unavailable."

If I try to refresh the page, or type in a different one, it says:

The page cannot be displayed

The page you requested is currently unavailable. The Web site may be experiencing technical difficulties, or you may need to adjust your browser settings.

Errors for IE6: When I first try to open a page, as in, when I start IE6 and it goes to my home page, it gives me the same The page cannot be displayed as IE2 does.

If I try to refresh or type in a new URL, I can see that it's searching for my webpage in the status bar at the bottom (I think that's the name) because it would go through www.google.com, then www.google.net, google.edu, and finally it gives me a pop-up window. The title of the pop-up window is Microsoft Internet Explorer, and it has that little white "X" on a red circle in part of the message window. The message is:

"Internet Explorer could not open the search page."

From there, I only have the option of hitting the "Okay" button. Once I hit the button, no actual message (like a 404 or whatever) appears in the IE6 browser, and it just stays blank (white).

 

[Grazzt]

go out to a command prompt (usually START | RUN | then type "cmd" or "command" in the box and hit enter)

At the command prompt, type the following without quotes:

"ping www.novell.com" and see if it returns something like "unknown host" or "request timed out"

If "unknown host" is the result, DNS is the problem (ISP will have to fix it as I'm guessing you dont have your own DNS server in your house).

EDIT: Quick question though...I noticed you said you were on your girlfriend's PC. Does she use the same ISP/provider that you do? If she does and she can browse, then scratch DNS, that's not what it is (at least at the ISP level).

 

[herald]

Here is what I recommend. Get Hijack this.

Hijack this

This tool is not for the faint of heart, so here is what I recommend. It's small and will fit on a floppy disk. The file doesn't need to install, just copy it to a folder on your desktop and run it from there.

Once you have run the program click on "scan" to run the program. Once you have done that click on "save log". Copy the contents of that log into a post and I can give you some suggestions on what you should or shouldn't have in that list and what you can do about it.

It sound like that you have a Browser Helper Object (More than likely some bad spyware) that is screwing up your browser.

 

[drothgery]

It's probably worth noting that MyIE2 is just a thin wrapper around the IE rendering engine (like Firefox, Mozilla, and Netscape are wrappers around the Gecko rendering engine), so most things that affect IE will affect MyIE2 as well.

 

[CombatWombat51]

@Grazzt
Yeah, we use the same ISP, so no go on that.

@drothgery
What's gas costing back home? It's $2/gallon in my new home of Hicksville, so I bet it's about $2.40 out there

@herald
Here's the log. I don't know exactly what I'm looking for, but I don't know anything about easy-search.biz. Whatever that is, it's new, so likely the problem. But I shall await your expert advice?

Logfile of HijackThis v1.97.7
Scan saved at 12:19:18 AM, on 5/20/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\WIRELESS DUAL WHEEL MOUSE\4DMAIN.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\AIM95\AIM.EXE
C:\PROGRAM FILES\RINGCENTRAL\BUZME\RCUI.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\DESKTOP\HIJACK\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://easy-search.biz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://easy-search.biz
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://easy-search.biz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://desktop.presario.net/scripts/redirectors/presario/deskredir.dll?s=consumer&LC=0409&c=1c00
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://easy-search.biz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://easy-search.biz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://easy-search.biz
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://easy-search.biz
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://easy-search.biz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://easy-search.biz
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.altavista.com/av/avie5/support/runonce.htm
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [WheelMouse] 4dmain.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM95\aim.exe -cnetwait.odl
O4 - Startup: BuzMe.lnk = C:\Program Files\RingCentral\BuzMe\RCUI.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Translate (HKLM)
O9 - Extra 'Tools' menuitem: AV &Translate (HKLM)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL (HKLM)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: MoneySide (HKLM)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37946.6621643519
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E9AE575A-FA4A-11D3-90F7-00C0CA1618FF} (BuzMeSetup Class) - http://www.buzme.com/ActiveX/BMAXSetup.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52...pple.com/abarth/us/win/QuickTimeInstaller.exe
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab

 

[XCorvis]

You've got adware, I think. easy-search.biz sounds like adware to me.

In spybot, go to the "update" button and see if you can update the scanner. Then scan again.

 

[herald]

@Grazzt
Yeah, we use the same ISP, so no go on that.

@drothgery
What's gas costing back home? It's $2/gallon in my new home of Hicksville, so I bet it's about $2.40 out there

@herald
Here's the log. I don't know exactly what I'm looking for, but I don't know anything about easy-search.biz. Whatever that is, it's new, so likely the problem. But I shall await your expert advice?

Logfile of HijackThis v1.97.7
Scan saved at 12:19:18 AM, on 5/20/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\WIRELESS DUAL WHEEL MOUSE\4DMAIN.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\AIM95\AIM.EXE
C:\PROGRAM FILES\RINGCENTRAL\BUZME\RCUI.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\DESKTOP\HIJACK\HIJACKTHIS.EXE

This stuff looks fine.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://easy-search.biz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://easy-search.biz
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://easy-search.biz

This doesn't look good, It looks like your search functions have been Hijacked. This can be fixed.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://desktop.presario.net/scripts/redirectors/presario/deskredir.dll?s=consumer&LC=0409&c=1c00

That's fine.

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://easy-search.biz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://easy-search.biz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://easy-search.biz
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://easy-search.biz
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://easy-search.biz

This stuff is bad like the stuff before.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer

Fine

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://easy-search.biz

Bad.

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.altavista.com/av/avie5/support/runonce.htm

Haven't seen this before. I'd get rid of them. Then reset IE to default settings.

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX

All of that looks fine.

O4 - HKLM\..\Run: [WheelMouse] 4dmain.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM95\aim.exe -cnetwait.odl
O4 - Startup: BuzMe.lnk = C:\Program Files\RingCentral\BuzMe\RCUI.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Translate (HKLM)
O9 - Extra 'Tools' menuitem: AV &Translate (HKLM)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL (HKLM)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: MoneySide (HKLM)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37946.6621643519
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E9AE575A-FA4A-11D3-90F7-00C0CA1618FF} (BuzMeSetup Class) - http://www.buzme.com/ActiveX/BMAXSetup.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52...pple.com/abarth/us/win/QuickTimeInstaller.exe
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab

The rest of this is good.

OK, now we take care of the issue.

Close all IE windows. Make sure that Hijack this is in it's own folder because it's going to make backup files from what it strips from your pc and you want them collected in one place.

Launch the program and put checks in the boxes for the stuff that should be removed or fixed. Then click Fixed Checked. It will pop up a window that will ask you if you want to fix the checked entries. The program makes backups by default so don't worry about the backup warning. Click OK.

Once done close the program and test the results.

Good Luck!