From: CapCity on

"Nil" <rednoise(a)REMOVETHIScomcast.net> wrote in message
news:Xns9DB056E33C97Enilch1(a)188.40.43.230...
> On 09 Jul 2010, "CapCity" <Cap(a)City.com> wrote in
> microsoft.public.windowsxp.general:
>
>> I got that cleaned out fairly easily, but Internet Explorer
>> (version 6, SP3) won't load any pages. It always gives a "server
>> not found/DNS error." If I go to the command line and ping a site,
>> say www.google.com, it works fine. Only have problems when I try
>> to use the browser. Outlook downloads email with no problem.
>
> Check Internet Options | Connections | LAN Settings and make sure it is
> not set up to use a proxy server. That's a common tactic that malware
> uses to intercept your web activity.
>

That was it, thanks!

And thanks to everyone else who respinded. A lot of good advice and tips.


From: PA Bear [MS MVP] on
CapCity wrote:
>>> I got that cleaned out fairly easily, but Internet Explorer
>>> (version 6, SP3) won't load any pages. It always gives a "server
>>> not found/DNS error." If I go to the command line and ping a site,
>>> say www.google.com, it works fine. Only have problems when I try
>>> to use the browser. Outlook downloads email with no problem.
>>
>> Check Internet Options | Connections | LAN Settings and make sure it is
>> not set up to use a proxy server. That's a common tactic that malware
>> uses to intercept your web activity.
>
> That was it, thanks!...

Now, how did that option become enabled and how do you know the computer's
really clean now?

From: CapCity on

"PA Bear [MS MVP]" <PABearMVP(a)gmail.com> wrote in message
news:Oz$RafdILHA.4596(a)TK2MSFTNGP06.phx.gbl...
> CapCity wrote:
>>>> I got that cleaned out fairly easily, but Internet Explorer
>>>> (version 6, SP3) won't load any pages. It always gives a "server
>>>> not found/DNS error." If I go to the command line and ping a site,
>>>> say www.google.com, it works fine. Only have problems when I try
>>>> to use the browser. Outlook downloads email with no problem.
>>>
>>> Check Internet Options | Connections | LAN Settings and make sure it is
>>> not set up to use a proxy server. That's a common tactic that malware
>>> uses to intercept your web activity.
>>
>> That was it, thanks!...
>
> Now, how did that option become enabled and how do you know the computer's
> really clean now?

From what I gather, several different trojans/malware/etc. will enable that
option in order to intercept my internet requests.

I've scanned the computer a couple of times with multiple tools (MS Security
Essentials, AdAware., AVG, MBytes), all updated, and it's come back clean.
And it's been in use for a few days now with no misbehaving.

I guess I don't know that it *really* is clean now, but I do feel reassured
.... for now.

>