Unable to view any web pages - HJT log attached

[MAKUK]

As title, HJT log attached, can anyone assist, whenever I go to a web page all I get is a blank page.

Thanks for your help.

 

[howard_hopkinso]

Hello and welcome to Techspot.

You are running a completely unpatched version of Windows XP.

Once your system has been cleaned up. please install at least sp1, and preferably sp2.

Boot into safe mode see how HERE

Turn off system restore.(XP/ME only) See how HERE

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE

Run HJT with no other programmes open, and let HJT fix the following by placing a tick in the little box next to(if there)

Fix all R1 and R0 entries.

Fix all 01 entries.

O2 - BHO: (no name) - {32E9E0E2-02C7-4418-8E3B-137A21088799} - (no file)
O2 - BHO: (no name) - {3BA765C2-08DB-4fe2-9279-311CA10D582A} - (no file)

O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)

Fix all 016 DPF entries.

O20 - Winlogon Notify: DateTime - C:\WINDOWS\
O20 - Winlogon Notify: sndu32 - C:\WINDOWS\SYSTEM32\sndu32.dll

Now click on the fix checked button.

Close HJT.

Reboot into normal mode. Hopefully you will now be able to access the net.

Go and read both these threads by RBS. Follow all the instructions exactly.

How to remove Trojans and its ilk! and How to remove Begin2search / coolwebsearch and other nasties.

Once you`ve done that. Please install one of the service packs I mentioned above.

Then, post a fresh HJT log.

Regards Howard :wave: :wave:

 

[MAKUK]

Wow thanks for the super fast reply, I will do that now and followup.

Thanks again

 

[loupegarou]

just in case

I didnt see it in howards post.
If you browse to
c:\windows\system32\drivers\etc
there is a hosts file there
it should be no bigger than 1-2k
if it is open it with notepad

if you see anything below this "127.0.0.1 localhost"
delete it.
save file it will save as a txt file.
delete the original and rename the new one to hosts
If you cannot see the file extention open explorer and go to tools
folder options/view
and uncheck the box to hide file extensions

 

[howard_hopkinso]

I didnt see it in howards post.
If you browse to
c:\windows\system32\drivers\etc
there is a hosts file there
it should be no bigger than 1-2k
if it is open it with notepad

if you see anything below this "127.0.0.1 localhost"
delete it.
save file it will save as a txt file.
delete the original and rename the new one to hosts
If you cannot see the file extention open explorer and go to tools
folder options/view
and uncheck the box to hide file extensions

You didn`t see it in my post, because I didn`t mention it doh.

Thanks for the input, it`s appreciated.

Regards Howard

 

[MAKUK]

Hi Again

OK, firstly nothing in that file that was mentioned, attached is the latest log, still can't surf and some of the files re-appeared.

Thanks for your help everyone

 

[howard_hopkinso]

Still no service pack installed!!!

Boot into safe mode.

Turn off system restore.(XP/ME only).

In Windows Explorer, turn on "Show all files and folders, including hidden and system".


Run HJT with no other programmes open, and let HJT fix the following.

F2 - REG:system.ini: Shell=

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O20 - Winlogon Notify: sndu32 - C:\WINDOWS\SYSTEM32\sndu32.dll
O21 - SSODL: SysTray.Exgl - {636821FC-6F5C-2f1b-B164-E67214F678E2} - C:\WINDOWS\System32\mppmcpme.dll

Click on the fix checked button.

Reboot into normal mode, and turn system restore back on.

Go to windows updates, and install sp1, or preferably sp2.

Regards Howard

 

[howard_hopkinso]

I have another suggestion for you.

Download the free AVG antivirus programme, and the free Zonealarm firewall.

You can get them from HERE and HERE

Disconnect from the net, and uninstall your NTL Netguard programme, and any other firewall.

Once you have fully uninstalled them, reboot your computer.

Install Zonealarm, followed by AVG, and reboot your system.

Reconnect to the net and run the avg updates.

Do a full scan of your system with AVG.

Regards Howard