can't access some web sites

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by whiteaw, Jul 20, 2005.

  1. whiteaw

    whiteaw Private E-2

    I can't access certain web sites.
    These sites are ones used to update software, or a store checkout web page used to make a purchase (see attached for more examples).

    My computer is a Dell, pentium 4 processor, Windows XP SP1 (I wanted to get this fixed before I installed SP2), Internet Explorer 6.0.

    I have read and followed instructions in the message "DO NOT POST UNTIL YOU HAVE READ THIS: How to: Spyware, Trojan And Virus Removal "

    Since I can't get the software to automatically update, I manually updated the ones listed that I could find, and ran others as with the data that was downloaded for installation.

    Thanks for your assistance.

    Tony
     

    Attached Files:

    Last edited: Jul 20, 2005
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please download HOSTER and then follow the below steps.
    • Unzip Hoster to a convenient folder such as C:\Hoster
    • Run Hoster.exe, click Restore Original Hosts and then click OK.
    • Click the X to exit the program

    After doing the above, if you still have a problem make sure are in normal boot mode and run the steps below exactly as written:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  3. whiteaw

    whiteaw Private E-2

    I ran HOSTER.

    It helped, but still have problems.
    I can now update software, like the anti Spyware software.

    But I still can not update McAfee firewall or McAfee virus scan.
    Also, I can not use the automated update for Windows, and can not access business checkout pages (see attached spreadsheet for examples).

    I downloaded, installed, and ran HijackThis as instructed.
    The HJT log file is attached.

    Tony
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You appear to be running both a Symantec and McAfee Firewall. Uninstall the Symantec Firewall. You must run only one software firewall (same goes for antivirus applications).

    Now run the steps below:

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c282.cab
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/183e20dad3f971be6f03/netzip/RdxIE601.cab

    After clicking Fix, exit HJT.

    Now reboot in normal mode and post a new HJT log. And tell us how things are working.
     
  5. whiteaw

    whiteaw Private E-2

    >> Uninstall the Symantec Firewall.

    I have tried this in the past, and couldn't uninstall it.
    I just tired to uninstall it again (using Add or Remove Programs in the Control Pannel), and got the error message:

    "Symantec Client Firewall
    You do not have the appropriate privaledges to perform this operation."

    There is no Symantec or Norton listed in the "All Programs" menu.

    These folders are on the C: Drive:
    C:\Program Files\Symantec\
    C:\Program Files\Symantec_Client_Security\

    The attached file shows what is in these directories.

    Any suggestions on how to remove the Symantec software?

    Tony
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  7. whiteaw

    whiteaw Private E-2

    >>Who is the owner and Administrator of this PC?

    I am.

    I followed the instructions in the link to remove all of the Symantec programs.

    This seemed to take care of the problem.
    I have been able to access every web site I have gone to since removing the Symantec software.

    I really appreciate the help.

    You seemed to imply that there are still other problems on my computer "(same goes for antivirus applications)"

    Are there other things I should do to clean up this computer?

    Again, thanks for your help!

    Tony
     
  8. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    whiteaw,

    Chaslang is on vacation for a few days so I will be assisting you from here. Please attach a current HJT log from normal mode.
     
  9. whiteaw

    whiteaw Private E-2

    HJT run in normal mode.
    HJT log attached.
     

    Attached Files:

  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Scan with HijackThis and Check the Boxes for the following:

    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c282.cab

    Make sure All Browser Windows are Closed when you Click FIX.

    NEXT:
    Run CCleaner to clean up cookies and temp files.


    After you complete the above your HJT log will be clean, are you having any further problems?
     
  11. whiteaw

    whiteaw Private E-2

    I ran HJT, checked the boxes you indicated, and clicked FIX. (No Browsers windows were open.)

    Then I opened CCleaner, checked for updates, and ran it.

    >>are you having any further problems?
    No problems. I can now access any web site I desire.

    I have been trying to fix this myself for many weeks.
    Thanks so much for the help.

    The only thing that isn't quite right is an error message that pops up the first time I read an email in Outlook. (The error message is attached) It doesn't inhibit anything, it's just anoying. I expect it is related to removing the Symantec software. Outlook is looking for something that is no longer available.

    The error message says to use "Detect and Repair on the Help menu". I did that, but still get the error message the first time I read an email.
     

    Attached Files:

  12. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    First, I would recommend following the steps in this thread on How to Protect yourself from malware!

    About your Outlook error, I would recommend posting this in the Software Forum.

    Surf Safely!:)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds