> WinXP SP2, we'll presume.
>
[quoted text clipped - 25 lines]
> >
> > I have tried all sorts of 'fixes' incl eg Winsock fix to no avail.
> I'm pretty sure the PC was clean as the Bleeping Computer forum experts
> took
> me through a procedure...
I assume this was your thread, Eamon:
http://www.bleepingcomputer.com/forums/topic126982.html. I also assume that
IE was able to connect prior to installing IE7 and other updates yesterday.
[[You may want to print or copy/paste the following into Notepad for offline
reference.]]
Please follow these instructions, in order:
1a. If your McAfee VirusScan subscription is still current, please uninstall
AVG Anti-Virus via Add/Remove Programs.
1b. If your McAfee VirusScan subscription is NOT current and you do not plan
on renewing it:
=> Please uninstall McAfee VirusScan via Add/Remove Programs; then...
=> Using your other computer, download this removal tool (SAVE it to the
desktop):
http://service.mcafee.com/FAQDocument.aspx?id=107083&lc=4105&partner=McAfee&type
=TS&ia=1
=> Transfer the removal tool (MCPR.EXE) to the desktop of computer you're
having problems with, then double-click on MCPR.EXE to run it.
2. Reboot.
3. Manually update your anti-virus application to the current definitions
(if possible), reboot into Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406),
and run a full system scan.
4. Reboot into normal (Windows) mode.
5. Start | Settings | Control Panel | Security Center: Please confirm that:
=> Your anti-virus application is On; and
=> The Windows Firewall, and Automatic Updates are both enabled.
==============================
Important: If there's a problem with any items in #5 above, STOP HERE and
reply to this thread!!
==============================
6a. Please uninstall each the following via Add/Remove Programs:
=> S*UPERAntiSpyware (unless you've /purchased/ it);
=> Spyware Doctor (unless you've /purchased/ it);
=> Google Toolbar; and
=> Windows Live Toolbar.
6b. Reboot again.
7. Please uninstall "Windows Internet Explorer 7" EXACTLY per these
instructions: http://www.ie-vista.com/kbase2.html (ignore the reference to
Vista in the URL; it's safe to ignore any warnings that "such-and-such may
not work if you uninstall IE7")
8. Leave Automatic Updates disabled; After rebooting twice, confirm that IE6
is working and you can connect OK; if not, STOP HERE!! and reply to this
thread.
9. Now please reinstall IE7 EXACTLY per
http://www.ie-vista.com/known_issues.html#pre-install, and using
http://www.microsoft.com/windows/downloads/default.mspx as the installation
source, *not* Automatic/Windows Update.
10. Assuming IE7's working OK and you can still connect, go /immediately/ to
Windows Update (http://windowsupdate.microsoft.com) | Select CUSTOM and scan
| Install any critical updates offered | If a "Root Certificates" update is
listed in the Optional Updates category, install it, too, to take full
advantage of IE7's additional security.
11. Re-enable Automatic Updates, configuring as desired
(http://support.microsoft.com/kb/306525).

Signature
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/
> I'm pretty sure the PC was clean as the Bleeping Computer forum experts
> took
[quoted text clipped - 49 lines]
>>>
>>> I have tried all sorts of 'fixes' incl eg Winsock fix to no avail.
Eamon Hannaway - 10 Feb 2008 16:37 GMT
Hi Robear
Many thanks. That was my Bleeping Computer thread!
I'm following your instructions and am at serial 3. I had previously (just
yesterday) removed McAfee via Add/Remove. I removed AVG as instructed - but
then wasn't sure what prog to run for the scan in safe mode so I am using
Superantispyware for the full scan (just completed after 20 mins - with no
harmful software repported).
Looking ahead to step 5 I'm a bit confused about the Av application being on
as I've removed AVG. Is there a way I can copy AVG onto the laptop from my
desktop (ie using a memory stick)?
Regards
Eamon
> > I'm pretty sure the PC was clean as the Bleeping Computer forum experts
> > took
[quoted text clipped - 131 lines]
> >>>
> >>> I have tried all sorts of 'fixes' incl eg Winsock fix to no avail.
Eamon Hannaway - 10 Feb 2008 16:46 GMT
Sorry - should have also mentioned that I get a message that attempts are
being mad to change (the Registry?) my home page from Google to
http://www.microsoft.com/ isapi/redir.dll?prd=iepver=6ar=msnhome. I have
blocked these attempts.
Thanks
> Hi Robear
>
[quoted text clipped - 149 lines]
> > >>>
> > >>> I have tried all sorts of 'fixes' incl eg Winsock fix to no avail.
Eamon Hannaway - 10 Feb 2008 17:33 GMT
Hi again.
I'm at serial 5 and can only enable the Windows firewall. Can't enable the
Automatic Updates - the whole thing is 'greyed out' (the Automatic is
checked) as though nothing activated. Thanks
Eamon
> Sorry - should have also mentioned that I get a message that attempts are
> being mad to change (the Registry?) my home page from Google to
[quoted text clipped - 156 lines]
> > > >>>
> > > >>> I have tried all sorts of 'fixes' incl eg Winsock fix to no avail.
PA Bear [MS MVP] - 10 Feb 2008 18:53 GMT
I asked you to uninstall /either/ McAfee VirusScan OR AVG Anti-Virus, not
both.
If you've uninstalled VirusScan, I strongly urge you to run the removal tool
ASAP.
Windows Live Toolbar may be reponsible for the attempt to "hijack" the IE
home page. What's giving you the alert, I have no idea (assuming both
S*uperAntiSpyware and Spyware Doctor have been uninstalled as directed).
The fact the Automatic Updates option is greyed out is a fairly strong
indication that the machine's still infected so I'm going to recommend that
you post a reply to your bleepingcomputer.com thread and telling your
handler (RichieUK) that you're still having problems.
Cite the following link to your newsgroup thread in your reply, please, for
reference:
http://groups.google.com/group/microsoft.public.internetexplorer.general/browse_
frm/thread/20efbaca5a69f084?hl=en#531efb257816795e
Good luck.

Signature
~PA Bear
> Hi again.
>
[quoted text clipped - 181 lines]
>>>>>>>
>>>>>>> I have tried all sorts of 'fixes' incl eg Winsock fix to no avail.
Eamon Hannaway - 10 Feb 2008 20:14 GMT
Thanks again my friend.
1. I realise now that I should not have unistalled AVG (doh!) - what I don't
understand from what you have said is
'If you've uninstalled VirusScan, I strongly urge you to run the removal
tool ASAP' - I presume VirusScan is McAfee - which I had also uninstalled.
So not clear what I have to do re the removal tool.
2. Also I have not progressed beyond serial 5 of your instructions - so
haven't uninstalled Windows Live Toolbar etc yet - should I carry on to
complete your instructions (ie to serial 11) before contacting
bleepingcomputer?
Regards
Eamon
> I asked you to uninstall /either/ McAfee VirusScan OR AVG Anti-Virus, not
> both.
[quoted text clipped - 201 lines]
> >>>>>>>
> >>>>>>> I have tried all sorts of 'fixes' incl eg Winsock fix to no avail.
PA Bear [MS MVP] - 11 Feb 2008 00:53 GMT
VirusScan = McAfee VirusScan, yes.
McAfee applications don't always uninstall "cleanly" so it's best to
download/run the removal tool I cited after uninstalling your McAfee
application(s).
I would recommend (but it's certainly not necessary) that you uninstall
Google Toolbar and Windows Live Toolbar before posting a new reply (and
HijackThis log) in your forum thread.

Signature
~PA Bear
> Thanks again my friend.
>
[quoted text clipped - 246 lines]
>>>>>>>>>
>>>>>>>>> I have tried all sorts of 'fixes' incl eg Winsock fix to no avail.
Eamon Hannaway - 11 Feb 2008 17:57 GMT
Many thanks - I'll do that
> VirusScan = McAfee VirusScan, yes.
>
[quoted text clipped - 255 lines]
> >>>>>>>>>
> >>>>>>>>> I have tried all sorts of 'fixes' incl eg Winsock fix to no avail.
PA Bear [MS MVP] - 11 Feb 2008 18:16 GMT
YW. Please keep us posted.
> Many thanks - I'll do that
>
[quoted text clipped - 278 lines]
>>>>>>>>>>> I have tried all sorts of 'fixes' incl eg Winsock fix to no
>>>>>>>>>>> avail.