Can't log on to web sites that require cookie use or Javascript

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by essence, Jan 1, 2006.

  1. essence

    essence Private E-2

    jujet84 I hope I understood correctly that you wanted me to repost here.

    I ran all the scans Microsoft antispy found nothing, spybot found nothing, ad aware freezes up on full system scan and found nothing on smart scan. On bit defender It said problems with web page might prevent it from being displayed properly or functioning properly, but it ran and found some suff in a very old file that it could not clean so I manually deleted all the files I could. (they were very old emails from 2003) then re ran CCleaner. There is one file I can not locate, says it is in recyceler but those were all emptied. I ran the scan again and the one file is the only one left and a file search turned up nothing.Scan log is attached. I Could not scan with panda scan, I click scan it goes to the scan started screen and then nothing, it does say done down in the bottom left bar. I tried several times and even left the computer sit for a while incase it was background scaning. That leaves Hijack this the file is attached as a text file.
    Prior to this when I was having the problem I went to the micosoft page you linked and determined that my identiy was bad so I had to make another. so far that is all I have done to try to fix. Again this all started when sp2 was installed. it seems that I can not attach logs, I will try with a replay post. Thanks for all your help
     
  2. essence

    essence Private E-2

    attached logs
     

    Attached Files:

  3. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

  4. essence

    essence Private E-2

    ok, followed directions downloaded security suite, turned off teatimer, ran crap cleaner, ran security suite, ran hijack this. Scans attached.
    tried to access one of the websites I am having trouble with and get a bunch of error messages. if you would like me to post them please advise. I will have to type them out as I was unable to highlite and copy.
    the messages include line char error code and URL.
    Thanks for all the help.
     
  5. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    You didnt attach anything?
     
  6. essence

    essence Private E-2

    For some reason I am having trouble attaching and then I have to go and delete them to re-attach, sorry.
     

    Attached Files:

  7. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Please look in Add or Remove Programs for the following and Uninstall them if found:

    Ewido

    Now scan with HijackThis and Check the Boxes for the following:

    Make sure All Browser Windows are Closed when you Click FIX.

    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [kbdsl] C:\WINDOWS\System32\kbdsl.exe

    O16 - DPF: {33564D57-9980-0010-8000-00AA00389B71} -
    O16 - DPF: {6632A7E9-FE1F-43D2-A04A-A15951ED63E0} -

    Again, make sure All Browser Windows are Closed when you Click FIX.

    NOW:
    Please boot into Safe Mode with the Viewing of Hidden Files & Folders Enabled and navigate to and DELETE the following if they should remain:

    C:\WINDOWS\System32\kbdsl.exe

    NEXT:
    Run CCleaner to clean up cookies and temp files.

    Run full scans with Ad-Aware SE & Spybot S&D and have both programs fix what they find.
    Note: Remember to get all updates before doing the scans.

    Then, as an added precaution, Go to Start > Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
    Temporary Files
    Temporary Internet Files
    Recycle Bin


    And Click OK.

    After you complete the above, reboot and procede with the below.

    Finally, I would like you to Flush your System Restore Points. Please follow the instructions in this link --->Disable and Re-enable System Restore
    • First, turn OFF System Restore to flush any bad Restore Points.
    • Then, follow the instructions at the bottom of the linked page to Re-enable the Restore Utility which will create a fresh restore point.

    After you complete the above, reboot and attach a fresh HJT log.
     
  8. essence

    essence Private E-2

    Ok, done, ewido removed, hijack this scan and 4 items removed. Kbdsl not found in windows system 32, ran ccleaner. adaware freeze's still in deep scan. smart scan found nothing. spybot found windows security override which may be because I had it turned off because I use ezarmor but when I turnd on windows firewall I still get the same message. System restore was monitoring was already off. I turned it back on. When I rebot I get a security message asking if I want to block PDP RPC Server Publisher: Device guys I check ask me later. also ez armor firewall true vector is slow to load now. this started after I went back to normal start up from selective start up. attached is the recent HJT scan and the adaware scan.
     

    Attached Files:

  9. essence

    essence Private E-2

    Oh and I did the clean mgr and it said 0 space. I still can not access this web site, I am getting error messages. http://www.co.manatee.fl.us/ I can get to this web site from other computers so the web site seems to be ok.
     
  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    I wouldnt worry about the Ad-Aware problem too much.

    Your HJT log looks good, follow the below...

    Reset Web Settings & Default Security Settings:


    To Reset Web Settings:
    Right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

    If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK


    To Default Security Settings:
    Right click on your desktop Internet Explorer icon and select Properties. Then click the Security Tab and click Default Level for Internet, Local Intranet, Trusted Sites, and Restricted Sites.

    After you complete the above, reboot and see if the problem remains. If it does let me know the exact error.
     
  11. essence

    essence Private E-2

    Ok done, reset IEweb settings and security to default. Rebooted.
    Went to the following web page http://www.co.manatee.fl.us/

    I can get to the home web page but I get 2 error messages.

    Line:12
    Char:1
    Error: object expected
    code:0
    URL:http://www.co.manatee.fl.us/internet/homemanatee_site.nsf/showmenu?openagent&name=home

    second message same page

    Line:12
    Char:14
    Error: unterminated string constant
    code:0
    URL URL:http://www.co.manatee.fl.us/internet/homemanatee_site.nsf/loginstatusrefresh/loginstatusrefresh


    when I try to click on the permits link on the left I get the following error message, and the new page does not load.

    Line: 1
    Char:1
    Error Object expected
    Code:0
    URL: URL:http://www.co.manatee.fl.us/internet/homemanatee_site.nsf/showmenu?openagent&name=home

    I checked all the links on the left and get the same results
    This is the most important web page for me to access, I need it for work, Oh and when your in construction weather.com is a useful home page to have LOL.

    also what do I do with the windows security window that pops up when I reboot the asks if I want to allow program: PDP RPC Server Publisher= device guys to access the web. I am not sure what this program is. Does it have anything to do with what your helping me with?

    By the way Thanks again for all your help :)

    Gurr also if I spent any significant length of time writing a post the web page bumps me back to the login screen and I have to rewrite or reattach everything don't know if this is some how related.
     
  12. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    This is most likely going to be something software related to IE, jump over to the Software Forum and those guys will get you fixed up.

    You should see this article on How to Protect yourself from malware!

    Surf Safely!:)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds