Can't figure this virus out



I don't know if the computer I am trying to fix just had AntiVirusXP2008 or
something more. I have found the manual removal instructions for AVXP and
that seemed to work except the computer cannot access a whole host of sites.

Mcafee.com
Symantec.com
windowsupdate.microsoft.com
PandaSecurity.com
And so on.

I can ping the sites fine and tracert fine but when I try to go to them in
IE7 a couple of strange things happen. First, when I try Mcafee.com it
brings me to a google search result page as if I did a google search for
mcafee.com. Then if I click on Mcafee.com link in those results IE7 wiill
give me the error page as if I were not connected to the Inernet.

If I try Symantec, Windows Update, Panda Security, or a few other sites I
just get the standard not connected to the Internet page from IE7. Other
sites like going to IBM, Google, MSN, etc appear to be working fine.

I have checked the Hosts file to see if this was altered, but it is OK and I
also checked to make sure my DNS server settings were not hijacked and they
were OK showing my ISP's DNS servers. I wanted to be sure it was not the
site so instead of going to PandaSecurity.com and getting blocked I went to
the IP address and was able to browse the site fine. I also ran LSPFix.exe
and there were not any additional protocols installed and HijackThis did not
show any BHOs or anything

I have tried to reinstall Panda AV, however it will not restart on reboot.
It is obvious that something is blocking it. This is obviously specifically
blocking Anti-virus programs and sites.

Yes, I could just format this computer, but what fun is that.



.



Relevant Pages

  • Re: Subject: IE7, OR?? Is there anyone there that can help? :-/
    ... I don't see anything untoward in your log (other than the fact that you used an outdated version of HijackThis). ... Does this behavior persist if you start IE7 in No Add-ons mode? ... all toolbars and all third-party Windows Themes and do NOT reinstall IE7, ...
    (microsoft.public.windowsxp.general)
  • Re: Homepage Hijack
    ... Since upgrading I have had a Smartbridge problem which I appear to ... programme removed. ... Go to add and remove programs and remove IE7. ... run HijackThis and post your log in one of the ...
    (microsoft.public.windowsxp.basics)
  • Re: Homepage Hijack
    ... I am running XP home and have recently upgraded to IE7 which sadly seems to have brought many problems with it. ... Since upgrading I have had a Smartbridge problem which I appear to have solved with the help of Pattie Mcloud. ... My system is protected by Defender Beta2, Sygate Firewall, Spyware Blaster, Spyware Guard, Blueyonder PC guard, Scotty and Spybot (which has been updated and run with one programme removed. ... I have also run HijackThis and remove a load of 017 stuff. ...
    (microsoft.public.windowsxp.basics)
  • Re: What is a GV.WML ???
    ... I did a google search but found no info. ... See below for HijackThis links. ... the most recent System Restore point from the More ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: spyware or virus?
    ... Do a virus check followed by spyware check using Ad-Aware ... SpyBot S&D You might also ... try HiJackThis (i don't have the web address to hand so do a goole search ... other good one is CWshredder (again do a google search). ...
    (microsoft.public.windowsxp.general)