TechSpot

Problems with loading gmail

By msth
Aug 10, 2009
  1. hello! :wave:
    yesterday my computer was attacked by windows system suite, i cancelled the installation, but it kept appearing. today my friend did system restore and restored it to 3.08., i think, but i have problems with loading my gmail(i tried using opera, mozilla firefox and internet explorer). also, i had some problems with loading other sites(they were redirected to some others full with advertisements and so, but finally i succeeded in opening them). i've googled a lot, so i found one post here and i think that our problems are pretty similar so i decided to follow 8-step viruses/spyware/malware preliminary removal Instructions and i'll attach the requested logs.
    i've had difficulties with step 7, but i hope that my log files are ok. i'm just a girl :blush: with no great knowledge about computers, so every help will be useful. :D
    thanks a lot!
     
  2. msth

    msth TS Rookie Topic Starter

    my requested logs

    that's it! :) i hope someone will read it soon!
     
  3. jobeard

    jobeard TS Ambassador Posts: 9,330   +622

    (1) your hosts file is infected ... all those HiJack entries
    O1 - Hosts: 74.125.45.100 4-open-davinci.com
    O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com
    O1 - Hosts: 74.125.45.100 privatesecuredpayments.com
    O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com
    O1 - Hosts: 74.125.45.100 getantivirusplusnow.com
    O1 - Hosts: 74.125.45.100 secure-plus-payments.com
    O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com
    O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com
    O1 - Hosts: 74.125.45.100 www.getavplusnow.com
    O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com
    O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com
    O1 - Hosts: 64.86.17.32 google.ae
    O1 - Hosts: 64.86.17.32 google.as
    O1 - Hosts: 64.86.17.32 google.at​
    are bogus

    get a GOOD hosts file from MVPS.ORG
    and SAVE AS into this directory
    \Windows\system32\drivers\etc as the file HOSTS (not hosts.txt)

    then navigate to that dir and set the R/O property on the file

    (2) this is useless
    O4 - HKCU\..\Run: [Uniblue RegistryBooster 2009] C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe /S

    (3) recommend uninstalling
    C:\Program Files\Google\Google Talk\googletalk.exe
     
  4. msth

    msth TS Rookie Topic Starter

    Thanks a lot! :wave:
     
  5. jobeard

    jobeard TS Ambassador Posts: 9,330   +622

    so that solved your issue?
    GREAT!
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...