TechSpot

Html& text onscreen appears

By avagut
Apr 1, 2005
  1. Of late when I load certain pages, google.com and hjt.iamnotageek.com included, all that appears on screen is giberish just lots of @!$ i've attached what comes on when I load google.com and my hijackthis log. Can anybody out there perhaps help me and tell me wsup, is it a hijack,virus, system error?! Would appreciate the help.

    Avagut
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    There`s definitely a few things there that I wouldn`t want on my puter.

    Go HERE and follow the instructions very carefully. Print them out if you can.

    Once you have done that then post another Hijackthis log.

    Regards Howard :wave: :wave:
     
  3. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    You need to make up your mind between Norton and Trend Micro.
    I would suggest to completely rid your PC of anything Norton/Symantec, and stick with Trend Micro, if that is a complete AV and firewall package.
    Norton also slows down your system considerably with all its bloatware.

    Boot in Safe Mode.
    Press Ctrl/Alt/Del simultaneously, select Taskmanager/Processes, select the process (if there), click "End Process" for:

    navapp.exe
    fdm.exe
    kazaa.exe

    Next, UNinstall anything to do with this lot:
    C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
    C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
    C:\Program Files\Free Download Manager\fdm.exe
    C:\Program Files\Kazaa\kazaa.exe

    Next, Run Hijackthis on its own and let it 'fix' if still there:
    C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
    C:\Program Files\Free Download Manager\fdm.exe
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=10.10.1.1:84
    O2 - BHO: NavHelper Class - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - C:\Program Files\NavExcel\NavHelper\v2.0.4d\NHelper.dll
    O2 - BHO: Helper Class - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O3 - Toolbar: NavExcel Toolbar - {5AA06644-BC46-4220-A460-47A6EB47C96D} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
    O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY
    O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://10.10.1.1:4343/officescan/console/ClientInstall/WinNTChk.cab
    O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupINICtrl Class) - https://10.10.1.1:4343/officescan/console/ClientInstall/setupini.cab
    O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://10.10.1.1:4343/officescan/console/ClientInstall/setup.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
    O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/LSSupCtl.cab
    O16 - DPF: {35C3D91E-401A-4E45-88A5-F3B32CD72DF4} (Encrypt Class) - https://10.10.1.1:4343/officescan/console/html/AtxEnc.cab
    O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) - https://10.10.1.1:4343/officescan/console/ClientInstall/RemoveCtrl.cab
    O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cab
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = abconkenya.com
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = abconkenya.com
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = abconkenya.com

    When done, delete the highlighted bold files. When a directory-name is bold, delete everything in it, including that directory itself.
    Boot normal.

    Stop using IE, except for Windows-updates.
    Install Firefox instead! from http://www.getfirefox.com

    For a free & adfree, excellent downloader go to www.stardownloader.com
     
  4. avagut

    avagut TS Rookie Topic Starter

    It works! Surf Mode Ahead!!

    Hi Howard, RealBlackStuff, thanx for the help, system is running like brand nu, took me a bit of time to get cleaned up but I think I'm ok, had to put back in the domain as abconkenya.com and the proxy settings. I'm working on setting up mozilla firefox asap.

    Strange thing is i couldn't download adaware, error at download.com?
    I've posted my hijackthis log fo inspection, just in case the critters weren't flushed out.
    Many thanx fo de help.
    Avagut.
     
  5. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    Just take care of this one:
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)

    and your system is CLEAN.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...