IE & Firefox cannot load Gmail

Status
Not open for further replies.
H

hnclark

Posts: 13   +0
Hello, I am new to this website.

After searching online for many days, i still cannot find a solution to why my internet explorer will not load my gmail. i've tried everything from resetting my browser completely, flushing my system, adding it to my safe websites...etc.

last week i got a vicious little virus called the Extra Antivirus and since then its been bad. i got rid of it by downloading this malware stuff but since then i have not been able to load my gmail.

also, something random happened this morning. when i was searching using my google toolbar and sometimes google search engine it would redirect me to either a porn site or expedia.ca.

please help me. i desperately need my gmail and my husband is tired of sharing his mac. :)

heather

ALSO - the web address that my google goes to when it goes wonky is "relevantwebsearches"

i've been continually researching it this morning and have downloaded malwarebytes anti-malware and ad-aware...and only malwarebytes found 4 weird things. after putting those in quarantine my google/gmail still does not work :(

now i'm onto superspyware...please someone HELP ME!
 
hi hnclark

Please follow the 8-step virus removal tool completely and post your logs on this thread :) ....

Spyder_1386 :)
 
sorry to be a pain - where do i find this 8-step virus removal tool? i've been reading other threads but its just people saying they've done it, not how.

thanks so much for replying! can't wait to get this virus outta here!

hnclark
 
Did the 8-step process (let's try this again!)

I think I uploaded the txt. files correctly. I look forward to hearing from someone as to where to go next.

thanks so much for everything,
hnclark
 
you have a ton of
O1 - Hosts: 206.53.61.77 google.ae
O1 - Hosts: 206.53.61.77 google.as
O1 - Hosts: 206.53.61.77 google.at
O1 - Hosts: 206.53.61.77 google.az
O1 - Hosts: 206.53.61.77 google.ba
O1 - Hosts: 206.53.61.77 google.be
O1 - Hosts: 206.53.61.77 google.bg
O1 - Hosts: 206.53.61.77 google.bs
O1 - Hosts: 206.53.61.77 google.ca
O1 - Hosts: 206.53.61.77 google.cd
O1 - Hosts: 206.53.61.77 google.com.gh
...
...​
entries in your host file
whois reports 206.53.61.77
Code: 
$ whois -H 206.53.61.77

OrgName:    Rcp.net
OrgID:      RCPNE
Address:    Unit 13, 1 Delta Park
City:       Brampton
StateProv:  ON
PostalCode: L6T-5G1
Country:    CA

NetRange:   206.53.48.0 - 206.53.63.255
CIDR:       206.53.48.0/20
NetName:    VELCOM
NetHandle:  NET-206-53-48-0-1
Parent:     NET-206-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.VELCOM.COM
NameServer: NS2.VELCOM.COM

I would fetch and install the Hostfile from http://www.mvps.org/winhelp2002/hosts.htm
scroll down to find the Download
once installed MARK IT READ ONLY.
 
after i download Hostfile, do i post the results on here again? and what are 01's?

thanks for everything, i'm working on the hostfile now.
hnclark
 
Installing the host file will negate those O1 entries -- the O1s is just a representation
of the host file contents.

after installing the host file (using an Admin login), get a command prompt (run->cmd) and enter
  • ipconfig /flushdns
  • net stop "DNS Client"
  • net start "DNS Client"
this link should the work nicely
http://www.google.com/
 
does the hostfile download take like 2 seconds?

i clicked the DnsManual.bat and clicked "run" and it popped up a little black screen then that was it...i feel like i'm not doing this right :(

help me
 
when i do the run->cmd it says

Windows IP configuration
could not flush the DNS Resolver Cache: Function failed during execution

do i type ipconfig/flushdns then hit enter? then type the other two?
 
does the hostfile download take like 2 seconds?

i clicked the DnsManual.bat and clicked "run" and it popped up a little black screen then that was it...i feel like i'm not doing this right
Click to expand...
Yes it is small.

use the To view the HOSTS file in plain text form. (596 kb) (opens in browser)to see the file;
then Save Page As
chose File Type Text
then navigate to
\windows\system32\drivers\etc
and save it by clicking on the existing file name HOSTS
and allow the replacement

then set READ-ONLY

when i do the run->cmd it says

Windows IP configuration
could not flush the DNS Resolver Cache: Function failed during execution

do i type ipconfig/flushdns then hit enter? then type the other two?
Click to expand...
you should be able to run each of these FROM AN ADMIN LOGIN

if in doubt, use the Control Panel->User Accounts and verify that your login has ADMIN Privilges
 
YAY!!!!!!!!!!

My gmail and google is back to working!! THANK YOU so much!

is there something else i need to do now? what should i do with the malwarebyes, superantispyware, hijackthis stuff?

thanks so much,
hnclark :) :)
 
mbam-log is clean :)

super AntiSpyware is clean too :)


You asked so this is my opinion -- other folks will respond differently :)

hijack log ----

I would rerun Hijack and then
delete
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)


personally I would uninstall and/or delete

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Heather Clark\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c


I would never use
O16 - DPF: {02FE7E8D-9DBD-4F77-8824-26C45D56CA9A} (CHZERO MAP CTRL) - http://www.chzero.com/zeromap/IMAPOCX_WEB.CAB
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {49233226-72EC-11D6-918E-0050DA8B1AD6} (AnyGuide Control) - http://cyber3.jeju.go.kr/sds/web/sdsgis/ocx/anyGuide.ocx

or ANY of these O16 entries
(These are ActiveX components and you can disable them directly in the IE Browser)
 
if i deleted the 016 facebook photo uploader would that mean that i cannot upload photos to my facebook account?

also, are all activeX components bad? i know i need one for my gmail chat...

thoughts?
 
hnclark said:
if i deleted the 016 facebook photo uploader would that mean that i cannot upload photos to my facebook account?

also, are all activeX components bad? i know i need one for my gmail chat...

thoughts?
Click to expand...
Risky at least -- your choice. Personally I unload/deactivate
every ActiveX possible -- meaning I allow IE to run MS Update and that's it.

It's up to you to define 'NEED' :)
 
Hijackthis Log - clean!?

here is my Hijackthis log after i deleted the files mentioned above (minus the facebook photo uploader - i love my pictures! let me know what else i need to do. thanks for everything,

hnclark
 
YAY!!

thanks so much. i am so glad i stumbled upon this website. very helpful and knowledgeable!
i will definitely recommend it to my friends if they have any problems with their PC.
hnclark
 
Now it's "clean"

I'd like to suggest (as an IMO) and only as a suggestion!

That you uninstall AVG8 (I personally find it quite poor of an Antivirus)

Uninstall your AVG Antivirus
Then run the removal tool
Here is the 32Bit version (most users): http://www.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe
Here is the 64Bit version: http://www.avg.com/filedir/util/avg_arv_sup_____.dir/avgremoverx64.exe

Restart

Install Avira free AntiVirus

Update it

Run a full scan, and supply the resulting log (just for kicks ;))
 
what's an IMO (i'm such a beginner at this computer stuff)?

also, should i keep malwarebytes, superspyware, and hijackthis on my computer? i'm already hurting for some room but...i'll do what i can to keep "clean" :)
 
Well IMO is "In My Opinion"
Or IMHO is "In My Honest Opinion" (which is what I should have said ;) :D)

Anyway no you don't need all these extra programs, but before you decide to remove them, if you are doing the Avira install (and AVG uninstall ;)) Then we might wait a moment first :)

Your choice.
 
ahh i get it, sorry :p

i am about to uninstall AVG, then avira and then post the log for y'all.

thanks,
hnclark
 
Avira Scan Log

here is the scan log of my Avira scan. let me know if you see anything. i know it found 1 virus thingy...

thanks,
hnclark :)
 
Yes you had "SETUP_BUILD6_55[n].EXE" (yours was an alias name)

Best to do this:

Download and run ATF Cleaner to clean out all temp files

Clear & Reset System Restore's Cache
Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 and then press Enter
* Tick on the checkbox - Turn off System Restore on all drives
* Click Apply
Turn it back 'On' by unticking the same checkbox & click Apply, and then OK



Run IE Reset: https://www.techspot.com/vb/post682762-2.html



If you are good at Registry Editor (Regedit) you can search SETUP_BUILD6_55 and remove all instances of it


Otherwise, just startup Malwarebytes again (Update it) then run another scan, keeping Avira protecting you in the background ;)



Restart



Combofix Instructions
  • Download Combofix to your desktop.
  • Double click Combofix & follow the prompts.
  • A window will open with a warning.
  • When the scan completes it will open a text window. Please attach that log back here together with a fresh HJT log.
Caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Combofix is a very powerful tool so please do NOT do anything without instruction

Combofix will automatically save the log file to C:\combofix.txt
Also attach a fresh HiJackThis scan ran afterwards
 
HINT: Antivirus(av) software is NOT your primary defense!

AV is reactive: like going to the Doctor after you've gotten sick.

Ever hear "An ounce of prevention is worth a pound of cure"?
Prevention is proactive: avoid the problem before it occurs!

How?

1) Use a router
2) Use a good firewall
3) Never go online with an Admin account; use the XP LUA or Vista UAC accounts.
4) Prune your ActiveX add-ons to a minimum and use ANY other browser than IE
5) Install Spywareblaster to avoid bad ActiveX
6) Control website access using MVPS host file

What is AVs role? Scanning your email which is the only proactive part of AV.

Sure I have AV software (btw it's AVG8 :) ) but I don't need to run it every day, week or even every month.

[oh boy! watch the feather fly on this one! ]
 
Status
Not open for further replies.

Similar threads

midian182
Google is increasing the number of ads in Gmail, showing them in the middle of inboxes
Replies
12
Views
725
jelabarre59
J
M
Virus warning popup
Replies
1
Views
541
Mark Fuller
M
J
Inactive Admin rights are revoked
Replies
18
Views
2K
Broni
Broni

Latest posts

Back