Html& text onscreen appears

[avagut]

Of late when I load certain pages, google.com and hjt.iamnotageek.com included, all that appears on screen is giberish just lots of @!$ i've attached what comes on when I load google.com and my hijackthis log. Can anybody out there perhaps help me and tell me wsup, is it a hijack,virus, system error?! Would appreciate the help.

Avagut

 

[howard_hopkinso]

Hello and welcome to Techspot.

There`s definitely a few things there that I wouldn`t want on my puter.

Go HERE and follow the instructions very carefully. Print them out if you can.

Once you have done that then post another Hijackthis log.

Regards Howard :wave: :wave:

 

[RealBlackStuff]

You need to make up your mind between Norton and Trend Micro.
I would suggest to completely rid your PC of anything Norton/Symantec, and stick with Trend Micro, if that is a complete AV and firewall package.
Norton also slows down your system considerably with all its bloatware.

Boot in Safe Mode.
Press Ctrl/Alt/Del simultaneously, select Taskmanager/Processes, select the process (if there), click "End Process" for:
navapp.exe
fdm.exe
kazaa.exe

Next, UNinstall anything to do with this lot:
C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Kazaa\kazaa.exe

Next, Run Hijackthis on its own and let it 'fix' if still there:
C:\Program Files\NavExcel\NavHelper\v2.0.4d\navapp.exe
C:\Program Files\Free Download Manager\fdm.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=10.10.1.1:84
O2 - BHO: NavHelper Class - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - C:\Program Files\NavExcel\NavHelper\v2.0.4d\NHelper.dll
O2 - BHO: Helper Class - {D80C4E21-C346-4E21-8E64-20746AA20AEB} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: NavExcel Toolbar - {5AA06644-BC46-4220-A460-47A6EB47C96D} - C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
O4 - HKLM\..\Run: [KAZAA] C:\Program Files\Kazaa\kazaa.exe /SYSTRAY
O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://10.10.1.1:4343/officescan/console/ClientInstall/WinNTChk.cab
O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupINICtrl Class) - https://10.10.1.1:4343/officescan/console/ClientInstall/setupini.cab
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://10.10.1.1:4343/officescan/console/ClientInstall/setup.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {35C3D91E-401A-4E45-88A5-F3B32CD72DF4} (Encrypt Class) - https://10.10.1.1:4343/officescan/console/html/AtxEnc.cab
O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) - https://10.10.1.1:4343/officescan/console/ClientInstall/RemoveCtrl.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = abconkenya.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = abconkenya.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = abconkenya.com

Now hit the Fix checked button and let HijackThis do what it is good at...

When done, delete the highlighted bold files. When a directory-name is bold, delete everything in it, including that directory itself.
Boot normal.

Stop using IE, except for Windows-updates.
Install Firefox instead! from http://www.getfirefox.com

For a free & adfree, excellent downloader go to www.stardownloader.com

 

[avagut]

It works! Surf Mode Ahead!!

Hi Howard, RealBlackStuff, thanx for the help, system is running like brand nu, took me a bit of time to get cleaned up but I think I'm ok, had to put back in the domain as abconkenya.com and the proxy settings. I'm working on setting up mozilla firefox asap.

Strange thing is i couldn't download adaware, error at download.com?
I've posted my hijackthis log fo inspection, just in case the critters weren't flushed out.
Many thanx fo de help.
Avagut.

 

[RealBlackStuff]

Just take care of this one:
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)

and your system is CLEAN.