TechSpot

Web Browser Malware/Virus

By Josho495
Apr 30, 2009
Topic Status:
Not open for further replies.
  1. Hello,

    When I open Firefox it closes immediately even before I see the homepage.

    IE will load the homepage (google) and you can search but will freeze soon after.

    I have installed Opera to access the internet but this browser crashes too but not often.

    I have attached the logs as required and completed the 8 step guide.


    Any help appreciated.

    Cheers
  2. touch

    touch TS Rookie Posts: 978

    Hello Josho495

    Do you know and recognize this ISP ?
    192.168.0.0 - 192.168.255.255
    Internet Assigned Numbers Authority
    4676 Admiralty Way, Suite 330
    Marina del Rey, CA

    BTW. The log files looks clean.

    Download: http://www.mvps.org/winhelp2002/DelDomains.inf

    To use: RIGHT-CLICK DelDomains.inf on your desktop and select: Install (no need to restart)
    Note: This will remove all entries in the "Trusted Zone" and "Ranges" also.

    Please tell how your browsers are working now ?
  3. Josho495

    Josho495 TS Rookie Topic Starter Posts: 39

    I do not recognise the ISP.

    Marina del Rey is US and I am in Aus.


    Does this have something to do with the consistent browser restarts?
  4. touch

    touch TS Rookie Posts: 978

    I´m not sure.

    Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):
    O17 - HKLM\System\CCS\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1
    O17 - HKLM\System\CS2\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1
    O17 - HKLM\System\CS3\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1
    O17 - HKLM\System\CS4\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1
    O17 - HKLM\System\CS5\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1


    Reboot, attach new hijackthis log.

    I still suggest you should run ->

    Download: http://www.mvps.org/winhelp2002/DelDomains.inf

    To use: RIGHT-CLICK DelDomains.inf on your desktop and select: Install (no need to restart)
    Note: This will remove all entries in the "Trusted Zone" and "Ranges" also.
  5. Josho495

    Josho495 TS Rookie Topic Starter Posts: 39

    Ok. I've installed the DelDomains.inf.

    Here is the new HJ log.


    Thanks again.
  6. touch

    touch TS Rookie Posts: 978

    And how are things running now ?
  7. Josho495

    Josho495 TS Rookie Topic Starter Posts: 39

    Still the same.

    I think my Comp is screwed.

    I'm getting stop messages now.

    0x24 and 0x50 errors.

    I performed a chkdsk /r.

    Didn't help.

    Not sure what else I can do???
  8. touch

    touch TS Rookie Posts: 978

    Sound like the errors can be caused by a dying hard drive.

    You can move the HD to another computer, rig it as slave and backup the files that you want to keep in the other computer's HD or another storage device. After that you you can reformat.
  9. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.