Do you have pop-ups or your computer infected with trojan or spyware ? Learn how to ask us for help, click here!

Internet Explorer cannot display the webpage – How to fix it

Internet Explorer cannot display the webpage is a fake warning, which displays your browser when your computer is infected with a rogue antispyware program (Antivirus Suite, Antivirus Soft, Antivirus Live, etc).

All of these programs are promoted and installed onto your computer through the use of trojans. During installation, this malware configures your browser (Internet Explorer, Firefox, etc) by changing the proxy settings so, that it will redirect you from sites that you want to visit on a page that shows “Internet Explorer cannot display the webpage” warning. The page stats:

Internet Explorer Warning – visiting this web site may harm your computer!

Most likely causes:
* The website contains exploits that can launch a malicious code on your computer
* Suspicious network activity detected
* There might be an active spyware running on your computer

What you can try:
Purchase for secure Internet surfing (Recommended).
Check your computer for viruses and malware.
More information

Of course, the warning is a fake and should be ignored! Do not believe everything what it says. This message is only a small part of the deceptive tactics used by Antivirus Suite, Antivirus Soft, Antivirus Live, etc in order to create the appearance of infecting your computer and thus force you to buy its full version. Important to know, these programs only looks like a real antispyware applications, but in reality are unable to detect or remove any viruses and trojans nor will be protect your computer from legitimate future infections.

Do not waste your time and money and in any case do not buy anything from “Internet Explorer cannot display the webpage” malicious site! Use the following removal instructions to remove the browser hijacker and its related rogue antispyware program.

Symptoms in a HijackThis Log

R1 – HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O4 – HKLM\..\Run: [{random}] %UserProfile%\Local Settings\Application Data\{random}\{random}sysguard.exe
O4 – HKCU\..\Run: [{random}] %UserProfile%\Local Settings\Application Data\{random}\{random}sysguard.exe
O4 – HKLM\..\Run: [{random}] %UserProfile%\Local Settings\Application Data\{random}\{random}ftav.exe
O4 – HKCU\..\Run: [{random}] %UserProfile%\Local Settings\Application Data\{random}\{random}ftav.exe
O4 – HKLM\..\Run: [{random}] %UserProfile%\Local Settings\Application Data\{random}\{random}tssd.exe
O4 – HKCU\..\Run: [{random}] %UserProfile%\Local Settings\Application Data\{random}\{random}tssd.exe

Use the following instructions to remove “Internet Explorer cannot display the webpage” browser hijacker

Step 1.

Download HijackThis from here. Once Save dialog opens, please rename HijackThis.exe to iexplore.exe as shown below.


Save Dialog – HijackThis.exe


Save Dialog – iexplore.exe

Click Save button to save it.

Note: if you can`t download the program, then you should repair the proxy settings of Internet Explorer. Run Internet Explorer, Click Tools -> Internet Options. Select Connections Tab and click to Lan Settings button. Uncheck “Use a proxy server” box. Click OK. Click Apply. Click OK.

Doubleclick on the iexplore.exe on your desktop for run HijackThis. HijackThis main menu opens. Click “Do a system scan only” button. Look for lines that looks like:

R1 – HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O4 – HKLM\..\Run: [arlsknkw] C:\Documents and Settings\user\Local Settings\Application Data\lqtwnu\wqcmsysguard.exe
O4 – HKCU\..\Run: [arlsknkw] C:\Documents and Settings\user\Local Settings\Application Data\lqtwnu\wqcmsysguard.exe
O4 – HKCU\..\Run: [vcspymsv] “C:\Users\Owner\AppData\Local\bbenmt\badwsftav.exe
O4 – HKCU\..\Run: [udcqinjy] “C:\Users\Owner\AppData\Local\rhjimj\bogjsftav.exe
O4 – HKLM\..\Run: [sjwerkje] C:\Documents and Settings\user\Local Settings\Application Data\esdasd\pweqwetssd.exe
O4 – HKCU\..\Run: [blweklqw] C:\Documents and Settings\user\Local Settings\Application Data\rweqwe\bdasdastssd.exe

Note: list of infected items may be different, but all of them have “sysguard.exe” or “ftav.exe” or “tssd.exe”string in a right side and “O4″ in a left side.

Place a checkmark against each of them. Once you have selected all entries, close all running programs then click once on the “fix checked” button. Close HijackThis.

Step 2.

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for “Internet Explorer cannot display the webpage” browser hijacker infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.

Malwarebytes Anti-malware, list of infected items
Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected for start “Internet Explorer cannot display the webpage” browser hijacker removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.

Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.

“Internet Explorer cannot display the webpage” browser hijacker creates the following files and folders

%UserProfile%\Local Settings\Application Data\{random}
%UserProfile%\Local Settings\Application Data\{random}\{random}sysguard.exe
%UserProfile%\Local Settings\Application Data\{random}\{random}ftav.exe
%UserProfile%\Local Settings\Application Data\{random}\{random}tssd.exe

“Internet Explorer cannot display the webpage” browser hijacker creates the following registry keys and values

HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\{random}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{random}

April 13, 2010 on 12:34 am | In Browser Hijacking, Malware removal | 6 Comments |


6 Comments »

RSS feed for comments on this post.

  1. I ran the MBAM Setup and cleaned out the mess from the security center pop-ups. However, my internet is non-functional now. When I start up the system has “limited or no connectivity”. The windows diagnostic showed that the authentication process failed and the system will not connect anymore. Anything to help with this?

    Comment by JT — April 27, 2010 #

  2. JT, try the following:
    * Go to Start -> Control Panel ->Network Connections.
    * Right click your default connection, usually Local Area Connection or Dial-up Connection, if you are using Dial-up, and left click on Properties.
    * Double-click on the Internet Protocol (TCP/IP) item and select the radio button that says Obtain DNS servers automatically. Click OK twice.
    * Go to Start -> Run, enter CMD and click OK.
    * At the Dos Prompt Screen, type in cd\ and then press ENTER.
    * Now type in ipconfig /flushdns and then press ENTER. (notice the space after ipconfig)
    * Close the command prompt window.
    * Reboot your PC and try to open any website.

    Comment by Patrik — April 28, 2010 #

  3. When I go to Internet options and untick, it won’t let me apply, and when i just click ok when I look back it’s ticked again. This is really frustrating as I can’t get access to the Internet to download the hijack thing. And the bloody virus popping up every two seconds telling me im infected is making me want to scream!! Please help me! Or I think I might throw my laptop out of the window! It’s bloody annoying!! :(

    Comment by Emma — December 18, 2010 #

  4. Emma, use Safe mode with networking.

    Comment by Patrik — December 22, 2010 #

  5. stupidly, i let someone talk me into having 2 log-ins – one for admin, and the other limited. I had all access but I thought I needed less chances of opening something I didn’t need. So, it’s like I have 2 different computers in one – my limited access account for everyday no long opens to the internet. And, yes, I did have trojan warnings prior to its shut down to the internet (was using only int expl). I cannot follow you advice because I can’t download anything. Also, nothing I saved in the limited site cannot be transferred to admin so I can use it such as docs and pix and favorites. can’t get favorites websites to get the address to open it again. Please help
    thank you

    Comment by anne — December 22, 2010 #

  6. anne, you have tried to download the suggested programs above in the Safe mode with networking ?

    Comment by Patrik — January 1, 2011 #

Leave a comment

XHTML: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>


My Anti Spyware - Free antispyware programs and Spyware Removal Instructions.