Laptop freezes--"Resolving host..."

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Armitage112, Nov 28, 2014.

  1. Armitage112

    Armitage112 Private E-2

    Hi there! Hope someone here can please help! I've had my Gateway NE56R12u laptop with Windows 7 for a few years now with little to no problems until recently. I only use Google Chrome and Mozilla Firefox for getting online. I'm not sure why, but recently, after I've been online for a while on either one, my laptop will freeze, with "Resolving host..." in the lower left corner. If I just let it go for a few minutes, thinking it will resolve host eventually, it doesn't, and I have to restart. I have CCleaner, Wise Care 365, and Malwarebytes Anti-Malware, but even after repeated scans, the problem remains. I also tried using the restore feature, but it doesn't seem to let me go back past a certain amount of time. Any ideas? Suggestions on a free malware cleaner that might help? Thanks so much in advance!
     
  2. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

  3. Armitage112

    Armitage112 Private E-2

    Got it. Thanks!
     
  4. Armitage112

    Armitage112 Private E-2

    OK, I followed the guide, but the problem remains. Here are the logs. Thanks in advance!
     

    Attached Files:

  5. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Those logs are pretty clean.

    Try flushing your DNS Cache
    • Click Start > Run and type in cmd
    • Click OK.
    • This will open a command prompt.
    • Type or copy and paste the following line in the command window:
      ipconfig /flushdns
    • Hit Enter
    • Exit the command window

    Please download AdwCleaner by Xplode and save to your Desktop.
    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
    • Attach the logfile to your next next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
    [​IMG] Now download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach the JRT.txt to your next message.

    Please download OTL by OldTimer.
    • Save it to your desktop.
    • Double-click on the OTL icon on your desktopto run it. (Note: if using Vista, Win7 or Win8 use right-click and select Run as Administrator)
    • Check the "Scan All Users" checkbox.
    • Set the "Output" to "Standard Output".
    • Change the setting of "Drivers" and "Services" to "Use Safelist"
    • Copy the text in the code box below and paste it into the [​IMG] text-field.
      Code:
      activex
      netsvcs
      msconfig
      drives
      
    • Now click the [​IMG] button.
    • One report will be created:
      • OTL.txt <-- Will be opened
    • Attach OTL.txt to your next message. (How to attach)
     
  6. Armitage112

    Armitage112 Private E-2

    OK, here's the new logs. Thanks again for your help!

    <snip>
     

    Attached Files:

    Last edited by a moderator: Dec 3, 2014
  7. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Any improvements after flushing your DNS Cache?
     
  8. Armitage112

    Armitage112 Private E-2

    No, not really. If anything, my IP's are freezing without the "Resolving host..."--now, after a while, I can't click on anything, and I have to restart. :confused


     
  9. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    *You need to run MSconfig and put this machine in Normal Startup Mode

    Using AdwCleaner.exe previously downloaded:
    • Double click on AdwCleaner.exe to run the tool. (Vista, Win7/8 users should right-click and "Run As Administrator")
    • Click on the Scan button.
    • After the scan has finished..
    • Click on the Clean button.
    • Press OK when asked to close all programs and follow the onscreen prompts.
    • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    • After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
    • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
    • Attach this log to your next reply.

    Now we need to use OTL by Old Timer.
    • Double-click OTL.exe to run (Vista and Win7 right-click and select Run as administrator)
    • When OTL opens, copy the text in the code box below and paste it into the [​IMG] text-field.
      Code:
      :OTL
      IE - HKU\S-1-5-21-2385939255-3931737434-664952510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
      IE - HKU\S-1-5-21-2385939255-3931737434-664952510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 89 A3 B5 0A F3 72 CF 01  [binary data]
      IE - HKU\S-1-5-21-2385939255-3931737434-664952510-1000\..\SearchScopes,DefaultScope = {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
      IE - HKU\S-1-5-21-2385939255-3931737434-664952510-1000\..\SearchScopes\{A603D23F-A144-460B-AE71-CBBF2E4A5F2A}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
      IE - HKU\S-1-5-21-2385939255-3931737434-664952510-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
      [2014/11/29 11:44:43 | 000,000,906 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
      [2014/11/29 11:44:43 | 000,000,902 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
      [2014/11/29 11:38:50 | 000,000,412 | ---- | C] () -- C:\Windows\tasks\Wise Turbo Checker.job
      [2014/11/29 11:38:49 | 000,000,432 | ---- | C] () -- C:\Windows\tasks\Wise Care 365.job
      
      :commands
      [purity]
      [EmptyTemp]
      [start explorer]
      [Reboot]
    • Now click the [​IMG] button.
    • OTL may ask to reboot the machine. Please do so if asked.
    • Click the OK button.
    • When complete, Notepad will open.
    • Close Notepad.
    • A log file will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date of the tool run.
    • Attach this log to your next message. (How to attach items to your post)
    • Now open OTL again and rerun it using my instructions in post#5.
    • Attach OTL.txt to your next message.

    Reset your browsers to their default settings:

    Reset Chrome to Defaults

    Reset Firefox to Defaults

    How are things working now?
     
  10. Armitage112

    Armitage112 Private E-2

    OK, did all that, and here's the requested attachments. I'll let you know if the problem still exists (I have to be online for a while for it to kick in). Thanks!

    <snip>
     

    Attached Files:

    Last edited by a moderator: Dec 7, 2014
  11. Armitage112

    Armitage112 Private E-2

    Nope, didn't work. It just happened again.
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Issues like this are infrequently due to malware. More frequently is is due to things like:
    • Use of registry cleaners and/or performance tweakers ( which you appear to be using )
    • Possibly an interaction or corruption of protection software. I recommend that you actually try uninstalling all of your realtime protections software ( like McAfee ) and then reboot. See how it behaves.
    • Or an actual hardware problem with the network interface card ( maybe heat related ).
    • Something else to try is booting in safe mode with networking to see if it still freezes.
     
  13. Armitage112

    Armitage112 Private E-2

    Thanks for the suggestions.

    1. RE: Use of registry cleaners and/or performance tweakers--so you suggest I stop using these? Are there some that are better than others? Is using more than one a bad thing?

    2. RE: Protection software--McAfee came with my laptop. Are you sure it's OK to uninstall it? Won't I need it in the future? Is there something better I can use (preferably for free)?

    3. RE: an actual hardware problem with the network interface card--how can I tell if this is the problem? Is this something I can diagnose myself (with MG's help, of course), or do I have to take it to a professional?

    4. RE: booting in safe mode with networking--I'll try it, if I can figure out how to do it!

    Thanks again for all the help! I need all I can get! :-o

     
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes! We don't recommend them as they can typically cause more harm than good especially in the long run. There is very little if any improvement to be gained by doing this. Even Microsoft's own experts recommend against doing this and also recommend against defragging the registry. So ever though there are dozens of registry cleaners and defraggers, we don't and almost evey other malware expert won't recommend running registry cleaners except in special circumstances and with special instructions on exactly what to fix.

    - Yes as long as you have to reinstaller so that you can actually reinstall.
    - Yes you will need it in the future because you need protection. But we are testing to see if it is possibly causing your problems because it is not due to malware per your logs.

    Software or Hardware Forum on Major Geeks.

    See the below if you don't know how to do this.

    http://kb.eset.com/esetkb/index?page=content&id=SOLN2268

    http://windows.microsoft.com/en-us/...e-mode#start-computer-safe-mode=windows-vista
     
  15. Armitage112

    Armitage112 Private E-2

    I can't uninstall McAfee 'cause I don't have anything to re-install it with. I uninstalled all my other cleaners, and I tried rebooting in safe mode. No changes. :-(
     
  16. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay then there is probably nothing else for us to do here in this forum because your problems do not appear to be due to malware. I still suspect possibly McAfee but it could also be a hardware issue. Maybe a memory issue. You should post in either the Hardware Forum or Software Forum. Possibly run a memory testing program.
     
  17. Armitage112

    Armitage112 Private E-2

    OK, thanks to all for your help. Is there a way to link this thread into the other forums so I don't have to re-type everything?
     
  18. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. The link information for this thread is what you see in the addres bar of your browser when you are reading this thread. Just copy and paste into your new thread.


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. After doing the above, you should work thru the below link:
     
  19. Armitage112

    Armitage112 Private E-2

    Got it. Thanks again and Happy Holidays!
     
  20. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Happy Holidays to you too and surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds