Websites hanging

[Kabuchan]

I am having problems with a few websites not loading for me. I can get onto my Yahoo home page, but not into my email. I cannot get onto one of my art forums, Seventh Complex. And there are other sites don't want to load.

Here's some background:

1. I have a new IP but I was able to load these sites before with the new IP.
2. I reinstalled AVG Free last week.
3. Same time period ... I have been receiving emails a couple of times a week from my husband after he passed away, to my Yahoo email. Early last week I asked Yahoo to close his account and they asked for additional information. Then the end of the week, I could not get into my email.
4. My son (on his PC) cannot log onto his Yahoo email. I have not installed anything on it for months.
5. I cannot get onto these sites even if I piggy-back on the laptop.

Any ideas guys?

[Chewy]

Download SmitfraudFix (by S!Ri) to your Desktop.

http://siri.urz.free.fr/Fix/SmitfraudFix.exe

Double-click SmitfraudFix.exe
Select option #1 - Search by typing 1 and press Enter
This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.

IMPORTANT: Do NOT run any other options until you are asked to do so!

**If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C, and launch from there.

let's get a look at your dns's

does sound like yahoo screwed up tho

[Kabuchan]

Give me a bit Chewy. I am running it now ...

[Chewy]

and a web link that doesn't work? art type not email

avg free leaves a lot to be desired, they are ok with the paid, but avast and avira are better

[Kabuchan]

Here it is. So sorry, I don't know how to make it scroll:

SmitFraudFix v2.333

Scan done at 19:17:28.14, Tue 08/05/2008
Run from C:\Users\Desktop\SmitfraudFix
OS: Microsoft Windows [Version 6.0.6000] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.e xe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe
C:\Windows\system32\STacSV.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
C:\Program Files\Qwest\QuickCare\bin\sprtcmd.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Users\Patty\AppData\Roaming\Google\Google Talk\googletalk.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

hosts file corrupted !

127.0.0.1 www.legal-at-spybot.info
127.0.0.1 legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Patty


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Patty\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Patty\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, following keys are not inevitably infected!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="avgrsstx.dll"
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\Windows\\system32\\userinit.ex e,"


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Intel(R) 82566DC Gigabit Network Connection
DNS Server Search Order: 192.168.0.1
DNS Server Search Order: 205.171.3.65

HKLM\SYSTEM\CCS\Services\Tcpip\..\{BCFC98B6-5434-4E07-8849-2C2C813C51EF}: DhcpNameServer=192.168.0.1 205.171.3.65
HKLM\SYSTEM\CS1\Services\Tcpip\..\{BCFC98B6-5434-4E07-8849-2C2C813C51EF}: DhcpNameServer=192.168.0.1 205.171.3.65
HKLM\SYSTEM\CS2\Services\Tcpip\..\{BCFC98B6-5434-4E07-8849-2C2C813C51EF}: DhcpNameServer=192.168.0.1 205.171.3.65
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 205.171.3.65
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 205.171.3.65
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 205.171.3.65


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

[Chewy]

looks ok, a little bloated even for vista

Is everything fine with your router? new one from quest?

Here's my mentor's guide to installing MBAM and running a check for malware

You should be clean, might get back with yahoo

be sure and update spybot and reimmunize

http://www.bleepingcomputer.com/forums/index.php?showtopic=156573&view=findpost&p=876163

[Kabuchan]

I tend to dl programs and things don't get cleaned out when I uninstall.
I will miss my Yahoo account. I had everything stored there. I can't even get on their site to see if there is a phone number I can call.

I am going to run the Malwarebytes right now. Thanks Chewy!

[Chewy]

Vista should be bulletproof with all it's security features and extra layers of protection for the kernel, but we are seeing a lot of corruption and even hard crashes

way too bloated for my tastes

[Kabuchan]

Ok, here's the Malwarebyte's log:

Malwarebytes' Anti-Malware 1.24
Database version: 1028
Windows 6.0.6000

20:18:35 8/5/2008
mbam-log-8-5-2008 (20-18-35).txt

Scan type: Quick Scan
Objects scanned: 37630
Time elapsed: 3 minute(s), 15 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[Chewy]

I would look at my firewall settings, IE security settings, etc

Have you tried firefox? for the bad links?

If firefox works then investigate the spybot plugin/addon

[Kabuchan]

I can't get on with FF or IE. I have everything enabled like I always do.
My router is an old 2.4 Lynksys.

I haven't changed anything except that reinstall of AVG and possibly ticking off the Yahoo morons. I can see why I would have a problem if Yahoo canceled my account rather than my husband's. But why would the other sites become unavailable?

What do I look for in the security settings?

[Chewy]

well if it's firefox and IE then that points to firewall, defender and avg not a browser security setting

maybe a conflict

how many sites?

[Kabuchan]

You think it's a conflict between the two? I have found 4 or 5 sites that won't load.

[Chewy]

I woould start with avg and then defender, but only if the problem persists and is evident on more sites. Your quest pathways may be bad

There's a lot of security being implemented on web surfing and a lot of people are having problems with web sites, it took me forever to figure out that spybot, IE6 and a certain private forum wouldn't mix. You can use firefox with no script to investigate some web sites that are problematic, people are using a lot of scripting and active x with advertising on web pages

[Kabuchan]

I can't understand why it would be my antivirus or Defender if all my computers are affected. Same with my Internet option settings. It's as if my IP is doing this.

So sorry, it is late ...