Jump to content


Photo

Google, Gmail and Orkut grounded!!!


  • This topic is locked This topic is locked
4 replies to this topic

#1 damien_assisi

damien_assisi

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 01 June 2007 - 08:48 AM

**********************************************************
*********CHECK BELOW FOR FixWareout LOG*******************
**********************************************************


Hello

One fine day, I switched on my laptop and went right to Google. I wanted to search for some stuff. After clicking on the search button, I discovered, to my horror, that none of the search results were relevant. There were results from auto insurances, credit card companies and the likes but not a trace of what i had originally wanted to search for. I tried performing a search for various things and all returned the same results...more advertising results!

I then tried to check my gmail account. when I entered my email id and password, it prompted me again to enter my user id as "it cannot be left blank" and under the password field it read " cannot log you on at this time". I tried tried and tried again but to no avail.

I then tried searching on yahoo search....the same results as google...just more insurance and credit card ads. and sometimes it displayed an error 999 (yahoo could not display ...blah blah blah....) I also tried getting into Orkut (google's net community)....the result " page cannot be displayed"

Has anyone had a similar problem before. Is there a fix for it? I was using 8.0i when the problem started (it was disabled...dumb me!). I now have McAffe 8.5i with the spyware module installed. It has managed to locate and delete a lot of stuff but google, gmail and orkut are still not working for me on my machine. I even installed Ad-Aware and ran a scan. It detected some stuff and deleted it....but this seems like a deep rooted problem...

I would be very thankful to anyone who could help me find a fix for this problem. Thanks guys!

Damien

Please read our Forum FAQ in order to find out what info we need (HijackThislog) so we can help you.





Fixwareout Last edited 5/15/2007
Post this report in the forums please
...
»»»»»Prerun check

»»»»»

»»»»» Postrun check
HKLM\SOFTWARE\~\Winlogon\ "System"=""
....
....
»»»»» Misc files.
....
»»»»» Checking for older varients.
....

Search five digit cs, dm, kd, jb, other, files.
The following files NEED TO BE SUBMITTED to one of the following URL'S for further inspection.


Click browse, find the file then click submit.
http://www.virustota...h/index_en.html
Or http://virusscan.jotti.org/

»»»»» Other

»»»»» Current runs
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"AOL Spyware Protection"="\"C:\\PROGRA~1\\COMMON~1\\AOL\\AOLSPY~1\\AOLSP Scheduler.exe\""
"SynTPLpr"="C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"IgfxTray"="C:\\WINDOWS\\system32\\igfxtray.exe"
"HotKeysCmds"="C:\\WINDOWS\\system32\\hkcmd.exe"
"Persistence"="C:\\WINDOWS\\system32\\igfxpers.exe"
"Recguard"=hex(2):25,57,49,4e,44,49,52,25,5c,53,4d,49,4e,53,54,5c,52,45,43,47,\
55,41,52,44,2e,45,58,45,00
"RemoteControl"="\"C:\\Program Files\\CyberLink\\PowerDVD\\PDVDServ.exe\""
"IntelWireless"="C:\\Program Files\\Intel\\Wireless\\Bin\\ifrmewrk.exe /tf Intel PROSet/Wireless"
"Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe /Consumer"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"Pure Networks Port Magic"="\"C:\\PROGRA~1\\PURENE~1\\PORTMA~1\\PortAOL.exe\" -Run"
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe"
"wosa"="C:\\DOCUME~1\\Owner\\LOCALS~1\\Temp\\woso.exe"
"Install.exe"="C:\\WINDOWS\\svchost.exe"
"ShStatEXE"="\"C:\\Program Files\\McAfee\\VirusScan Enterprise\\SHSTAT.EXE\" /STANDALONE"
"McAfeeUpdaterUI"="\"C:\\Program Files\\McAfee\\Common Framework\\UdaterUI.exe\" /StartedFromRunKey"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"Yahoo! Pager"="\"C:\\PROGRA~1\\Yahoo!\\MESSEN~1\\ypager.exe\" -quiet"
"9"="C:\\DOCUME~1\\Owner\\LOCALS~1\\Temp\\crasos.exe"
....
Hosts file was reset, If you use a custom hosts file please replace it
»»»»» End report »»»»»


I was able to resolve the problem by running FixWareout!!! Great piece of software for greater peace of mind. I was at my wits end trying to figure out what went wrong and what could be done to fix it. I scanned through the forum for posts with similar problems and each time I found FixWareout being suggested as a potential fix for the problem. However, no one seemed to get back with their results and hence, I did not know if it really worked at all.

But now that it has worked splendidly for me, I would like to say a big THANK YOU to all the people working their ass off trying to fix others problems for free.

For others who might find it helpful, here is a statement of my initial problem in brief:

each time I entered a search in Google, I would get irrelevant results, the tope ones being "Top Ten Insurance", some e-bay links, monster links, mortgage, porn etc. So i decided to try Yahoo instead. When I tried searching Yahoo, it either returned the same results as google or would display a Yahoo 999 error...search cannot be completed ...etc.

I was even unable to get into Orkut (Google's web community) and Gmail. But now everything is working fine.

On a personal note: I would advise anyone who has found help, either by skimming through the forum posts or steps provided by the admins of Spywareinfo, to atleast make the results of their implementation known.

Thanks once again.

Regards

Damien

Edited by damien_assisi, 05 June 2007 - 06:08 PM.


#2 SWI Support Robot

SWI Support Robot

    Helper robot

  • SWI Bot
  • PipPipPipPipPip
  • 23,523 posts

Posted 04 June 2007 - 06:30 AM

Welcome to SWI. We apologize for the delay; our helpers have been very busy.
If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the date it was originally posted.

Thank you for your patience.

[this is an automated reply]
This is an automated message. It does not count as help.

#3 TheJoker

TheJoker

    Forum Deity

  • Boot Camp Mod
  • PipPipPipPipPip
  • 14,352 posts

Posted 09 June 2007 - 09:36 AM

Hi damien_assisi, and Welcome to SWI

Sorry it has taken so long to get to you, but the board has been very busy lately, and all the Helpers here are volunteers.

You apparently didn't see the notice that one of the moderators left in your post that you needed to read the forum FAQ in order to find out what info we need (HijackThislog) so we can help you.

You still do need to do that, as it appears from what you did post that you may still be infected, even though you removed the most obvious problem. Once you post a HijackThis log I can help you.

Free Tools for Fighting Malware
Anti-Virus: avast! Free Antivirus / Avira Free AntiVirus
OnLine Anti-Virus: ESET / BitDefender / F-Secure
Anti-Malware: Malwarebytes' Anti-Malware / Dr.Web CureIt
Spyware/Adware Tools: MVPS HOSTS File / SpywareBlaster
Firewall: Comodo Firewall Free / Privatefirewall
Tutorials: How did I get Infected? / Internet Explorer Privacy & Security Settings
If we have helped, please help us continue the fight by using the Donate button, or see this topic for other ways to donate.

MS MVP 2009-20010 and ASAP Member since 2005


#4 damien_assisi

damien_assisi

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 12 June 2007 - 07:30 AM

Hi damien_assisi, and Welcome to SWI

Sorry it has taken so long to get to you, but the board has been very busy lately, and all the Helpers here are volunteers.

You apparently didn't see the notice that one of the moderators left in your post that you needed to read the forum FAQ in order to find out what info we need (HijackThislog) so we can help you.

You still do need to do that, as it appears from what you did post that you may still be infected, even though you removed the most obvious problem. Once you post a HijackThis log I can help you.



Thanks! Will do so soon.

#5 TheJoker

TheJoker

    Forum Deity

  • Boot Camp Mod
  • PipPipPipPipPip
  • 14,352 posts

Posted 08 July 2007 - 12:54 AM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please tell the moderating team by replying here with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.

Free Tools for Fighting Malware
Anti-Virus: avast! Free Antivirus / Avira Free AntiVirus
OnLine Anti-Virus: ESET / BitDefender / F-Secure
Anti-Malware: Malwarebytes' Anti-Malware / Dr.Web CureIt
Spyware/Adware Tools: MVPS HOSTS File / SpywareBlaster
Firewall: Comodo Firewall Free / Privatefirewall
Tutorials: How did I get Infected? / Internet Explorer Privacy & Security Settings
If we have helped, please help us continue the fight by using the Donate button, or see this topic for other ways to donate.

MS MVP 2009-20010 and ASAP Member since 2005





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button