Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Keeps Trying To Connect To A Web Page Thru Ie


  • Please log in to reply
5 replies to this topic

#1 C-info

C-info

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Ga.
  • Local time:01:49 PM

Posted 24 February 2008 - 06:21 PM

I have been trying all day to get rid of some spyware and a worm virus(win32Netsky).Every time I do a adware scan the IE keeps opening up trying to go a website(safenaweb.com) to connect for something(not sure) but at the same time my spy sweeper comes up with a alert stating it blocked this site and calls it "Internet Communication-77.91.228.183. Everytime this happens my computer freezes or nearly freezes and I have to restart by manual booting down and rebooting back up .Is there any way to stop this from trying to open IE so I can get the computer to scan better?

thanks,

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:49 PM

Posted 24 February 2008 - 09:34 PM

Hello if you're using XP or 2000 please use this tool.
Print out the instructions from the page link.. SmitFraudFix by S!Ri.
Download and save to desktop. open and run step 1,then reboot into safe mode for step 2.
How to start Windows in Safe Mode
The scan report can be found at the root of the system drive, usually at C:\rapport.txt.
Please copy and paste the Scan Log results in your next reply.

NEXT" please use this BC Tutorial How to use SDFix

The scan report can be found at the root of the system drive, usually at C:\rapport.txt.
Please copy and paste the Scan Log results in your next reply.
Remember to Logon to your computer with an account that has Administrator privileges for this tool.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 C-info

C-info
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Ga.
  • Local time:01:49 PM

Posted 29 February 2008 - 06:19 PM

Dear Boopme,
I used your info and it did the job but in the mean time I lost my router/modem and had to reinstall it again so I haven't been online in a week to post my reply... sorry. Below are the results from my scan in safe mode.
thanks again...
C-info

SmitFraudFix v2.296

Scan done at 21:56:42.84, Tue 02/26/2008
Run from C:\Documents and Settings\Karens\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

#4 C-info

C-info
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Ga.
  • Local time:01:49 PM

Posted 01 March 2008 - 10:49 PM

Dear boopme,
Can the program you sent me in the link above be used on Vista? My laptop is now acting funny. I was trying to do something in Foxfire and AOL keeps opening up for me to sign on. I no more get it shut and it opens again. If this program can't be used can you send me something that can be?
Thanks,

#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:49 PM

Posted 01 March 2008 - 11:22 PM

SmitfraudFix Works on Vista,
Run SmitfraudFix.exe (not the .cmd from the .zip archive) by Right Clicking it. Must be Run As Admin.

SDFix cannot,it's only for XP/2000

These will work on all

Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..
DO NOT run yet.
Open SUPER from icon and install and Update it
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining
.
Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.

Now reboot into Safe Mode: How to enter safe mode(XP)
Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode
.

Safe Mode Windows Vista

Windows Vista is similar to Windows XP for starting in Safe Mode.
Turn the computer on or Restart the computer
Start tapping the F8 key. The Windows Advanced Boot Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe mode option is selected (the top option)
Press Enter. The computer then begins to start in Safe mode.
When you are finished with troubleshooting, close all programs and restart the computer as you normally would
.

Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.

If you use Firefox or Opers browser click that browser at the top and choose: Select All
Click the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt
.
Click Exit on the Main menu to close the program.

NOW Scan with SUPER
Open from the desktop icon or the program Files list
On the left, make sure you check C:\Fixed Drive.
Perform a Complete scan. After scan,Verify they are all checked.
Click OK on the summary screen to quarantine all found items.
If asked if you want to reboot, click "Yes" and reboot normally.

To retrieve the removal information after reboot, launch SUPERAntispyware again.
Click Preferences, then click the Statistics/Logs tab.
Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
If there are several logs, click the current dated log and press View log.
A text file will open in your default text editor.
Please copy and paste the Scan Log results in your next reply.
Click Close to exit the program.

Please ask any needed questions,post log and Let us know how the PC is running now.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#6 C-info

C-info
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Ga.
  • Local time:01:49 PM

Posted 02 March 2008 - 11:51 AM

I did the scan and it had 76 times in it but for some reason same as before they all were deleted. I did notice that when ever you tell me to check the 3 things and uncheck the others and when I do then -when in safe mode they are still check -even though I unchecked them in normal mode. Can I uncheck them while in safe mode?

Anyway it did not fix my problem because as soon as I opened Firefox it opened up again. So I have posted a new topic under windows vista since this is a different issue(I think)
Thanks




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users