I'm connected, but can't access web sites...

Hi...

My mother is running Windows ME. She can connect to the net thru AT&T, but she can't access any websites using IE.

The reason I believe it is an IE problem, is because she can connect thru AOL, also, and web pages show up fine. But, I think AOL uses the Netscape browser.

Any tips or advice would be appreciated. Thanks

 

Have you tried the IE repair tool? Control Panel\Add Remove Programs, double click the IE entry, and choose the Option to Repair, reboot when prompted.

It may not be a bad idea to go to the Quicklinks page below and get Spybot Search & Destroy. After installing, update it first, and then have it check for problems. Let it remove whatever is already checked off.
If it finds something other than the DSO exploits, it would be a good idea to get HijackThis also, and post it's log on here.

 

Will do...I'll do that tomorrow and post back the results. Thanks for the suggestions.

 

Okay...ran the IE repair tool and that fixed it. We ran Adaware and she had 280 baddies. lol

Haven't run the Hijack program, or the others yet, but will post the results as soon as possible.

Thanks for your help.

 

Sure, you're welcome. What Ad-Aware [good program] may have missed, Spybot may find. HJT is just a tool, it doesn't know bad from good, just shows what it finds, and can 'fix' things if you know which ones are bad.

 

Okay, here's the HJT results.

HJT part 1

HJT part 2

 

It would have been better if when HJT finished it's Scan, and when it is finished, the Scan button changes the Save Log, and it then opens in Notepad, so all you needed to do then was Copy and Paste onto here.
I have no idea if you unzipped HJT into it's own folder, and it would have shown running processes which is not visible in the JPG screenshots. Not all executables are started by what most people consider the normal way.
Anyway remove the R3, all 010's, and 017's.
Remove the 04 with Hcm.exe, Rstruh.Exe. Reboot and delete the C:\Program Files\NzSearch folder.
I have no idea what Rstruh.Exe is, and neither does Google, and I do suspect files which are not found by Google. Names created randomly for files is normal for malware, but this one may be a deliberate deception.

 

Okay, I'll delete the ones you said, and try to copy and paste the results from notepad so you can know what's running. Probably be tommorrow...thanks.