Web Browser Malware/Virus

[Josho495]

Hello,

When I open Firefox it closes immediately even before I see the homepage.

IE will load the homepage (google) and you can search but will freeze soon after.

I have installed Opera to access the internet but this browser crashes too but not often.

I have attached the logs as required and completed the 8 step guide.


Any help appreciated.

Cheers

 

[touch]

Hello Josho495

Do you know and recognize this ISP ?
192.168.0.0 - 192.168.255.255
Internet Assigned Numbers Authority
4676 Admiralty Way, Suite 330
Marina del Rey, CA

BTW. The log files looks clean.

Download: http://www.mvps.org/winhelp2002/DelDomains.inf

To use: RIGHT-CLICK DelDomains.inf on your desktop and select: Install (no need to restart)
Note: This will remove all entries in the "Trusted Zone" and "Ranges" also.

Please tell how your browsers are working now ?

 

[Josho495]

I do not recognise the ISP.

Marina del Rey is US and I am in Aus.


Does this have something to do with the consistent browser restarts?

 

[touch]

I´m not sure.

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):
O17 - HKLM\System\CCS\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1
O17 - HKLM\System\CS4\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1
O17 - HKLM\System\CS5\Services\Tcpip\..\{032BC685-8953-4834-9136-BC2875070A7F}: NameServer = 192.168.1.1

Reboot, attach new hijackthis log.

I still suggest you should run ->

Download: http://www.mvps.org/winhelp2002/DelDomains.inf

To use: RIGHT-CLICK DelDomains.inf on your desktop and select: Install (no need to restart)
Note: This will remove all entries in the "Trusted Zone" and "Ranges" also.

 

[Josho495]

Ok. I've installed the DelDomains.inf.

Here is the new HJ log.


Thanks again.

 

[touch]

And how are things running now ?

 

[Josho495]

Still the same.

I think my Comp is screwed.

I'm getting stop messages now.

0x24 and 0x50 errors.

I performed a chkdsk /r.

Didn't help.

Not sure what else I can do???

 

[touch]

Sound like the errors can be caused by a dying hard drive.

You can move the HD to another computer, rig it as slave and backup the files that you want to keep in the other computer's HD or another storage device. After that you you can reformat.

 

[kimsland]

Answered here: https://www.techspot.com/vb/showthread.php?p=749414#post749414