Sent to this forum from Malware Forum

k4maz · Jan 8, 2011

Hi,
I thought I had malware, so I posted in that forum, but was told that I didn't have any malware and I should post here.

The problem is that my internet pages will not load completely. Pages such as Yahoo mail will load so I can see the email headings but when I click on the emails, they come up blank. Also sites like Facebook will only load the top heading of the webpage and the rest is blank.

Another symptom is that the internet connection icon in my tray is no longer there. This has happened several times over the past few months and would get fixed if I ran the READ ME for malware, but this time my internet did not get fixed.

the last person to help me in the malware forum found this and doesn't know what it is...

"I am also wondering what this is in your network setup:
DHCPv6 IAID . . . . . . . . . . . : 285220666"

Here are my specs: Windows Vista, 32 bit, using internet explorer, have a wireless vonage router.

thanks so much for your help on this!!

hrlow2 · Jan 8, 2011

Check for yellow markers in Device Manager.
Sounds like a driver not installed or incorrect one for it.

DavidGP · Jan 8, 2011

Hi

Use as you will have it from the malware guide, CCleaner to clean your temps etc out then...

What Browser are you using? if IE then try Firefox or Opera, if not IE then do try IE, also try the browser in its No-Addons/Safe Mode, for IE this is in Acessories > Sysyem Tools folder from the Start > Programs menu, for Firefox its in the Firefox/Mozilla folder.

If you can surf in the No-Addons/Safe Mode then you likely have an addon thats causing this, need to then remove all addons to troubleshoot andsteps for IE are HERE

k4maz · Jan 8, 2011

there are no yellow markers in Device manager

currently use internet explorer, and got on it minus add ons as suggested, and pages still will not load completely.

Also I forgot to mention, that my internet resolution changed when I started having problems...the font is a lot bigger and the resolution says it's too low for yahoo, but I never changed it, and when I try to change it back, it's already on the highest resolution. I am still convinced that I have some sort of virus or something because other parts of computer, like search feature in Computer are running very very slow, and when I ran Ccleaner, it said 100% complete, but the status bar was only 1/2 way green. What to do??

k4maz · Jan 8, 2011

fonts and resolution is back to normal, but am still having problems with the internet pages loading completely and the internet connection icon still not being in my tray.

Also having problems trying to install superantispyware as it will install ok, but when I run scans,the time and files scanned are all set at 0 even though it shows it's scanning. When it's done, the Luke Filewalker window comes up but it is blank , and I can only get it off the screen by restarting the computer. I have tried uninstalling it and reinstalling it, but nothing is working.

hrlow2 · Jan 8, 2011

Luke FileWalker is Avira AntiVir, not SuperAntiSpyware.

handygal · Jan 8, 2011

can you copy/paste your ipconfig /all.

The page loading portion sounds like it could be an IPv6 bug and if you aren't using IPv6 it should be disabled/uninstalled as a protocol for your network card.

TimW · Jan 8, 2011

From his malware thread:

Code:

Windows IP Configuration

   Host Name . . . . . . . . . . . . : garrett-PC
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Wireless LAN adapter Wireless Network Connection:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Atheros AR5007 802.11b/g WiFi Adapter
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::a938:f8be:1335:440e%10(Preferred) 
   IPv4 Address. . . . . . . . . . . : 192.168.15.3(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Thursday, January 06, 2011 6:42:22 PM
   Lease Expires . . . . . . . . . . : Thursday, January 06, 2011 7:42:22 PM
   Default Gateway . . . . . . . . . : 192.168.15.1
   DHCP Server . . . . . . . . . . . : 192.168.15.1
   DHCPv6 IAID . . . . . . . . . . . : 285220666
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-0F-32-61-39-00-1E-68-0D-83-14
   DNS Servers . . . . . . . . . . . : 192.168.15.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : NVIDIA nForce Networking Controller
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 6:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : isatap.{FB19346C-E7E6-4590-943D-DDDDF85D2914}
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : 6TO4 Adapter
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 7:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : isatap.{00DE0E89-EE40-4799-B4A8-4EC48DFA0DE9}
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 14:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

k4maz · Jan 8, 2011

sorry, I meant avira not superantispyware.

How do I copy ipconfig /all? When I run that it closes so quickly that I can't even see it.

lbmest · Jan 8, 2011

START > Run > cmd > Enter
Type ipconfig /all in the black text box
Taking screenshots - http://forums.majorgeeks.com/showthread.php?t=26019

k4maz · Jan 8, 2011

I can get ipconfig /all up, but it just will not take a screen shot. I've pushed prt sc and alt prt scr, but it seems to do nothing and when I go to paint, the paste option is not available.

handygal · Jan 9, 2011

TimW posted your ipconfig from another thread, don't worry about trying to copy it here. But FYI, you can usually highlight and Ctrl-C to copy it.

You aren't using the newer IPv6 protocol but i'm not sure what the v6 DHCP settings are doing to your connection. Disable them and see if it helps clear up the page load problems. You can always activate them again very easily.

Follow step 1 & 2 here http://windows.microsoft.com/en-US/windows7/Change-TCP-IP-settings
For step 3, instead of following the instructions, go to the line Internet Protocol Version 6 (TCP/IPv6), uncheck the box and click ok.

I uninstalled the protocol but unchecking it should have the same effect.

k4maz · Jan 9, 2011

followed your instructions, and still having the same problem with the web pages and my internet connection icon still isn't there.

k4maz · Jan 9, 2011

are we sure this isn't a virus? let me just go through all the issues I'm having...

When webpages load, they may look fully loaded, but the green status bar will only be 1% to 10% green, and does not increase. Some websites, the status bar is 99% green. Some websites can be read, but others are white screens or when you click on something like an email subject line, it's a white screen.

Homepage (google) is a larger font than it normally is, and the resolution is lower than usual. I tried changing the resolution, but it stays the same.

When I run virus scans like avira or superantispyware, it says that they are running scans, but elapsed time will say at 00:00, and number of files scanned will say 0. When it's finished, I will try to quarantine what it finds (which is usually not more than a few tracking cookies or 1 hidden object), and the program will freeze to the point that I will have to shut down the computer to get it off the screen.

When I click start, and type in "start search", it will only bring up some items that start with the first letter I typed, but will not finish searching.

In the times that this internet issue has happened before, I would run the READ ME and it would be fixed. This time, it seemed to be fixed after getting mostly through READ ME, (I think before I ran the combofix), but after I continued through the instructions and rebooted, the problems came back.

any ideas? I'm about ready to just go buy a new computer and put a bullet through this one!

TimW · Jan 9, 2011

I have checked your malware logs numerous times just to be certain that they don't contain any malware.

Have you tried uninstalling Outpost?

satrow · Jan 9, 2011

For your page loading issue, have you rebooted your router? Do you have the latest drivers for your wireless adapter? Have you looked to see if there is a Firmware update available for your router?

k4maz · Jan 9, 2011

Wow! Outpost Firewall uninstalled and problem solved! My computer rebooted and is acting normal again! Thankyouthankyouthankyou! I can't believe that it was just as simple as removing that. Suggestions on a new firewall that will be better would be greatly appreciated.

hrlow2 · Jan 9, 2011

Think about Comodo Personal.

Log in or Sign up

Sent to this forum from Malware Forum

k4maz Private E-2

hrlow2 MajorGeek

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

k4maz Private E-2

k4maz Private E-2

hrlow2 MajorGeek

handygal First Sergeant

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

k4maz Private E-2

lbmest MajorGeek

k4maz Private E-2

handygal First Sergeant

k4maz Private E-2

k4maz Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

satrow Major Geek Extraordinaire

k4maz Private E-2

hrlow2 MajorGeek