Please help!!!

Welcome to Major Geeks!

You forgot to attach the log from AVG Antispyware.

I assume you meant you cannot connect to www.google.com not log into it?

Are you using wwww.google.com or are you using google.com?
Try putting the following into the address bar: http://64.233.161.99
And then hit return or the Go button.
What happens?


Your logs don't really show anything that could be causing this so it could just be something at your end that is blocking it. I do have a few things that you should do.

First you need install and rename HijackThis as requested in the READ ME since it will not effectively detect some new malware unless you do this. Please do this now.

Then I highly recommend that you uninstall and never use Messenger Plus! Live which is the cause of many thousands of PCs being infected with malware. And this latest version is even causing Virtumonde infections. This was mentioned in the uninstall list given in step 0 of the READ ME.

Is your copy of Spy Sweeper a paid version of a free trial version? If free, you should uninstall it as it will not fix anything for you and will just slow your PC down.

Now download HostsXpert and then follow the below steps.

• Unzip HostsXpert.zip
  [*]It will create a folder named HostsXpert in whatever folder you extract it to.
  [*]Run HostsXpert.exe, click Restore Microsoft's Hosts File and then click OK.
  [*]Click the X to exit the program

Run HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

After clicking Fix, exit HJT.

Now we need to Reset Web Settings:

1. If you have an Internet Explorer icon on your Desktop, goto step 2. If not, skip to step 3.
2. Now right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK. Then skip step 3.
3. If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

Note for IE 7 users: You need to select Internet Options then the Advanced tab and then Reset Internet Explorer Settings!

Boot into safe mode and use Windows Explorer to delete:
C:\WINDOWS\system32\ldr1F.tmp

Also while in safe mode, locate the below file and rename it (
right click on it and select Rename ) to rspsc32.sys.bak
C:\WINDOWS\system32\drivers\rspsc32.sys

Now reboot in normal mode

Please download ATF Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.

• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.

If you use Firefox browser

• Click Firefox at the top and choose: Select All
• Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All
• Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main ATF Cleaner menu to close the program.

Now attach the below new logs and tell me how the above steps went.

1. ShowNew
2. HJT

Make sure you tell me how things are working now!

 

Did you run ATF-Cleaner exactly as requested? It does not look like it. I see files from as far back as June 1st in your
C:\Documents and Settings\Monumental Records\Local Settings\Temp\ folder which should have been emptied if you ran ATF-Cleaner

I still see Messenger Plus! Live installed! Does this mean that you are not going to uninstall this purveyor of malware?

My point was about the wording! You say login. Do you mean login or do you mean connect? You don't need to login at www.google.com. It is just a URL to Google's main page and does not require a login so I'm trying to find out exactly what you are talking about.

If you are talking about logging into email at google then that is something totally different and has nothing to do with being unable to connect to www.google.com.

So just directly answer the below question:

Does your browser allow you to connect to www.google.com?


Certificate problems are more than likely not malware problems. You probably have a corrupted certificate. Perhaps you should read thru the below and see if anything there helps you:

http://www.us-cert.gov/cas/tips/ST05-010.html


You could also try doing the below!

• Check and make sure your clock is correct.
• In Internet Explorer, on the Tools> Internet Options> Content tab
• In the next window titled Certificates notices the left and right little arrow buttons ( < > ) to the right of all the tabs
• Click the right arrow until you see the Untrusted Publishers tab
• You should see something like below:

http://www.askdavetaylor.com/0-blog-pics/internet-explorer-certificates.jpg


You should see the publisher listed that's causing you such problems (i.e. something from Google). I only have the above in my Window. Just delete the entries here from Google by clicking on each one to select it, then clicking "Remove". Quit/Exit ALL browser session. Now restart. How are things now?

 

I'm not sure that your problems are due to malware but let's run the below since this infection has been know to cause problems with Google Searches.

Run this WareOut Removal and attach the log. Let me know if there are any changes.


Have you tried using another browser like Mozilla FireFox