TechSpot

IE & Firefox cannot load Gmail

By hnclark
Apr 20, 2009
  1. Hello, I am new to this website.

    After searching online for many days, i still cannot find a solution to why my internet explorer will not load my gmail. i've tried everything from resetting my browser completely, flushing my system, adding it to my safe websites...etc.

    last week i got a vicious little virus called the Extra Antivirus and since then its been bad. i got rid of it by downloading this malware stuff but since then i have not been able to load my gmail.

    also, something random happened this morning. when i was searching using my google toolbar and sometimes google search engine it would redirect me to either a porn site or expedia.ca.

    please help me. i desperately need my gmail and my husband is tired of sharing his mac. :)

    heather

    ALSO - the web address that my google goes to when it goes wonky is "relevantwebsearches"

    i've been continually researching it this morning and have downloaded malwarebytes anti-malware and ad-aware...and only malwarebytes found 4 weird things. after putting those in quarantine my google/gmail still does not work :(

    now i'm onto superspyware...please someone HELP ME!
     
  2. Spyder_1386

    Spyder_1386 TS Rookie Posts: 563

    hi hnclark

    Please follow the 8-step virus removal tool completely and post your logs on this thread :) ....

    Spyder_1386 :)
     
  3. hnclark

    hnclark TS Rookie Topic Starter

    sorry to be a pain - where do i find this 8-step virus removal tool? i've been reading other threads but its just people saying they've done it, not how.

    thanks so much for replying! can't wait to get this virus outta here!

    hnclark
     
  4. Spyder_1386

    Spyder_1386 TS Rookie Posts: 563

  5. hnclark

    hnclark TS Rookie Topic Starter

    Did the 8-step process (let's try this again!)

    I think I uploaded the txt. files correctly. I look forward to hearing from someone as to where to go next.

    thanks so much for everything,
    hnclark
     
  6. jobeard

    jobeard TS Ambassador Posts: 13,446   +324

    you have a ton of
    O1 - Hosts: 206.53.61.77 google.ae
    O1 - Hosts: 206.53.61.77 google.as
    O1 - Hosts: 206.53.61.77 google.at
    O1 - Hosts: 206.53.61.77 google.az
    O1 - Hosts: 206.53.61.77 google.ba
    O1 - Hosts: 206.53.61.77 google.be
    O1 - Hosts: 206.53.61.77 google.bg
    O1 - Hosts: 206.53.61.77 google.bs
    O1 - Hosts: 206.53.61.77 google.ca
    O1 - Hosts: 206.53.61.77 google.cd
    O1 - Hosts: 206.53.61.77 google.com.gh
    ...
    ...​
    entries in your host file
    whois reports 206.53.61.77
    Code:
    $ whois -H 206.53.61.77
    
    OrgName:    Rcp.net
    OrgID:      RCPNE
    Address:    Unit 13, 1 Delta Park
    City:       Brampton
    StateProv:  ON
    PostalCode: L6T-5G1
    Country:    CA
    
    NetRange:   206.53.48.0 - 206.53.63.255
    CIDR:       206.53.48.0/20
    NetName:    VELCOM
    NetHandle:  NET-206-53-48-0-1
    Parent:     NET-206-0-0-0-0
    NetType:    Direct Allocation
    NameServer: NS1.VELCOM.COM
    NameServer: NS2.VELCOM.COM
    I would fetch and install the Hostfile from http://www.mvps.org/winhelp2002/hosts.htm
    scroll down to find the Download
    once installed MARK IT READ ONLY.
     
  7. hnclark

    hnclark TS Rookie Topic Starter

    after i download Hostfile, do i post the results on here again? and what are 01's?

    thanks for everything, i'm working on the hostfile now.
    hnclark
     
  8. jobeard

    jobeard TS Ambassador Posts: 13,446   +324

    Installing the host file will negate those O1 entries -- the O1s is just a representation
    of the host file contents.

    after installing the host file (using an Admin login), get a command prompt (run->cmd) and enter
    • ipconfig /flushdns
    • net stop "DNS Client"
    • net start "DNS Client"
    this link should the work nicely
    http://www.google.com/
     
  9. hnclark

    hnclark TS Rookie Topic Starter

    does the hostfile download take like 2 seconds?

    i clicked the DnsManual.bat and clicked "run" and it popped up a little black screen then that was it...i feel like i'm not doing this right :(

    help me
     
  10. hnclark

    hnclark TS Rookie Topic Starter

    when i do the run->cmd it says

    Windows IP configuration
    could not flush the DNS Resolver Cache: Function failed during execution

    do i type ipconfig/flushdns then hit enter? then type the other two?
     
  11. jobeard

    jobeard TS Ambassador Posts: 13,446   +324

    Yes it is small.

    use the To view the HOSTS file in plain text form. (596 kb) (opens in browser)to see the file;
    then Save Page As
    chose File Type Text
    then navigate to
    \windows\system32\drivers\etc
    and save it by clicking on the existing file name HOSTS
    and allow the replacement

    then set READ-ONLY

    you should be able to run each of these FROM AN ADMIN LOGIN

    if in doubt, use the Control Panel->User Accounts and verify that your login has ADMIN Privilges
     
     
  12. hnclark

    hnclark TS Rookie Topic Starter

    YAY!!!!!!!!!!

    My gmail and google is back to working!! THANK YOU so much!

    is there something else i need to do now? what should i do with the malwarebyes, superantispyware, hijackthis stuff?

    thanks so much,
    hnclark :) :)
     
  13. jobeard

    jobeard TS Ambassador Posts: 13,446   +324

    mbam-log is clean :)

    super AntiSpyware is clean too :)


    You asked so this is my opinion -- other folks will respond differently :)

    hijack log ----

    I would rerun Hijack and then
    delete
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)


    personally I would uninstall and/or delete

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

    O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Heather Clark\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c


    I would never use
    O16 - DPF: {02FE7E8D-9DBD-4F77-8824-26C45D56CA9A} (CHZERO MAP CTRL) - http://www.chzero.com/zeromap/IMAPOCX_WEB.CAB
    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {49233226-72EC-11D6-918E-0050DA8B1AD6} (AnyGuide Control) - http://cyber3.jeju.go.kr/sds/web/sdsgis/ocx/anyGuide.ocx

    or ANY of these O16 entries
    (These are ActiveX components and you can disable them directly in the IE Browser)
     
  14. hnclark

    hnclark TS Rookie Topic Starter

    if i deleted the 016 facebook photo uploader would that mean that i cannot upload photos to my facebook account?

    also, are all activeX components bad? i know i need one for my gmail chat...

    thoughts?
     
  15. jobeard

    jobeard TS Ambassador Posts: 13,446   +324

    Risky at least -- your choice. Personally I unload/deactivate
    every ActiveX possible -- meaning I allow IE to run MS Update and that's it.

    It's up to you to define 'NEED' :)
     
  16. hnclark

    hnclark TS Rookie Topic Starter

    Hijackthis Log - clean!?

    here is my Hijackthis log after i deleted the files mentioned above (minus the facebook photo uploader - i love my pictures! let me know what else i need to do. thanks for everything,

    hnclark
     
  17. jobeard

    jobeard TS Ambassador Posts: 13,446   +324

    looks good to me :grinthumb
     
  18. hnclark

    hnclark TS Rookie Topic Starter

    YAY!!

    thanks so much. i am so glad i stumbled upon this website. very helpful and knowledgeable!
    i will definitely recommend it to my friends if they have any problems with their PC.
    hnclark
     
  19. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Now it's "clean"

    I'd like to suggest (as an IMO) and only as a suggestion!

    That you uninstall AVG8 (I personally find it quite poor of an Antivirus)

    Uninstall your AVG Antivirus
    Then run the removal tool
    Here is the 32Bit version (most users): http://www.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe
    Here is the 64Bit version: http://www.avg.com/filedir/util/avg_arv_sup_____.dir/avgremoverx64.exe

    Restart

    Install Avira free AntiVirus

    Update it

    Run a full scan, and supply the resulting log (just for kicks ;))
     
  20. hnclark

    hnclark TS Rookie Topic Starter

    what's an IMO (i'm such a beginner at this computer stuff)?

    also, should i keep malwarebytes, superspyware, and hijackthis on my computer? i'm already hurting for some room but...i'll do what i can to keep "clean" :)
     
  21. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Well IMO is "In My Opinion"
    Or IMHO is "In My Honest Opinion" (which is what I should have said ;) :D)

    Anyway no you don't need all these extra programs, but before you decide to remove them, if you are doing the Avira install (and AVG uninstall ;)) Then we might wait a moment first :)

    Your choice.
     
  22. hnclark

    hnclark TS Rookie Topic Starter

    ahh i get it, sorry :p

    i am about to uninstall AVG, then avira and then post the log for y'all.

    thanks,
    hnclark
     
  23. hnclark

    hnclark TS Rookie Topic Starter

    Avira Scan Log

    here is the scan log of my Avira scan. let me know if you see anything. i know it found 1 virus thingy...

    thanks,
    hnclark :)
     
  24. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Yes you had "SETUP_BUILD6_55[n].EXE" (yours was an alias name)

    Best to do this:

    Download and run ATF Cleaner to clean out all temp files

    Clear & Reset System Restore's Cache
    Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 and then press Enter
    * Tick on the checkbox - Turn off System Restore on all drives
    * Click Apply
    Turn it back 'On' by unticking the same checkbox & click Apply, and then OK



    Run IE Reset: http://www.techspot.com/vb/post682762-2.html



    If you are good at Registry Editor (Regedit) you can search SETUP_BUILD6_55 and remove all instances of it


    Otherwise, just startup Malwarebytes again (Update it) then run another scan, keeping Avira protecting you in the background ;)



    Restart



    Combofix Instructions
    • Download [​IMG]Combofix to your desktop.
    • Double click Combofix & follow the prompts.
    • A window will open with a warning.
    • When the scan completes it will open a text window. Please attach that log back here together with a fresh HJT log.
    Caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Combofix is a very powerful tool so please do NOT do anything without instruction

    Combofix will automatically save the log file to C:\combofix.txt
    Also attach a fresh HiJackThis scan ran afterwards
     
  25. jobeard

    jobeard TS Ambassador Posts: 13,446   +324

    HINT: Antivirus(av) software is NOT your primary defense!

    AV is reactive: like going to the Doctor after you've gotten sick.

    Ever hear "An ounce of prevention is worth a pound of cure"?
    Prevention is proactive: avoid the problem before it occurs!

    How?

    1) Use a router
    2) Use a good firewall
    3) Never go online with an Admin account; use the XP LUA or Vista UAC accounts.
    4) Prune your ActiveX add-ons to a minimum and use ANY other browser than IE
    5) Install Spywareblaster to avoid bad ActiveX
    6) Control website access using MVPS host file

    What is AVs role? Scanning your email which is the only proactive part of AV.

    Sure I have AV software (btw it's AVG8 :) ) but I don't need to run it every day, week or even every month.

    [oh boy! watch the feather fly on this one! ]
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.