Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

waitforclick.com HELP!!!!


  • This topic is locked This topic is locked
2 replies to this topic

#1 slparri

slparri

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:52 PM

Posted 26 February 2010 - 11:55 PM

Hello,
I am having the same problem as this person (yenpam) and have followed your directions to post the information back to you for your review.


"Every so often my firefox browser gets jacked (..... about overy 10 or clicks? not all the time and usually when I search on google).

I see it sends me to something like waitforclick.com, then to another weird site.

It might do that a few times, then it would go away and I could browse normal again. Tricky little bugger!

I ran HiJackThis, but can you please analyze it for me? Doesn't know what this all mean? is there a problem in there somewhere?

Your advice is greatly appreciated!" posted by yenpham



THIS IS THE MESSAGE I AM GETTING:

Server not found
Firefox can't find the server at waitforclick.com.


* Check the address for typing errors such as
ww.example.com instead of
www.example.com

* If you are unable to load any pages, check your computer's network
connection.

* If your computer or network is protected by a firewall or proxy, make sure
that Firefox is permitted to access the Web.

HERE IS MY LOG POST AND THE OTHER IS ZIPPED AND ATTACHED.
THANK YOU SO MUCH FOR ANY HELP YOU CAN PROVIDE!

The only way I was able to get to your forum site for help was to copy and past the website address listed with the Google result. I have the problem when I select the google result message in the normal way (as a link).

THANK YOU SO MUCH FOR ANY HELP YOU CAN PROVIDE!
SLPARRI


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. (per sherry: the message that popped up after the scan said to post the first and zip and attach the second).

IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 2/10/2010 3:46:55 PM
System Uptime: 2/26/2010 7:18:58 PM (2 hours ago)

Motherboard: Acer | | Aspire 5517
Processor: AMD Athlon™ X2 Dual Core Processor L310 | Socket S1G1 | 1200/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 286 GiB total, 226.152 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP20: 2/24/2010 3:00:13 AM - Windows Update
RP21: 2/24/2010 3:37:53 PM - Removed Microsoft Office Home and Student 2007
RP22: 2/24/2010 3:55:05 PM - Removed Microsoft Office PowerPoint Viewer 2007 (English)
RP23: 2/24/2010 3:58:06 PM - Removed Microsoft Office Suite Activation Assistant.
RP24: 2/24/2010 4:16:58 PM - Windows Update
RP25: 2/24/2010 9:37:25 PM - Installed AVG 9.0
RP26: 2/25/2010 8:53:22 AM - Avg8 Update
RP27: 2/26/2010 5:15:16 PM - Windows Update
RP28: 2/26/2010 7:35:11 PM - Windows Update
RP29: 2/26/2010 8:26:57 PM - Removed AVG 9.0
RP30: 2/26/2010 8:28:49 PM - Installed AVG 9.0

==== Installed Programs ======================

µTorrent
1912 Titanic Mystery
3 Days - Zoo Mystery
4 Elements
AAC Decoder
Acer Assist
Acer Crystal Eye Webcam
Acer ePower Management
Acer eRecovery Management
Acer Games
Acer GridVista
Acer Registration
Acer Updater
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.3.1 MUI
Adventure Chronicles
Adventures of Robinson Crusoe
Agatha Christie - Peril at End House
Alchemy
Alchemy Deluxe
Amazing Adventures Around the World
Amazing Adventures The Caribbean Secret
Amazing Adventures The Lost Tomb
Amazing Heists - Dillinger
AMD USB Filter Driver
Ancient Secrets
Animal Agents
Annie's Millions
Apple Application Support
Apple Software Update
Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver
AutoUpdate
Between the Worlds
BitComet 1.18
BloodTies
Born Into Darkness
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-static
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Choice Guard
Christmasville
CNET TechTracker
Coupon Printer for Windows
Crazy Chicken Pirates
CyberLink PowerDVD 8
Discovery Seek and Find
DivX Codec
DivX Converter
DivX Player
DivX Plus DirectShow Filters
DivX Plus Media Foundation Components
DivX Plus Web Player
DivX Version Checker
Dream Chronicles
eBay Worldwide
Escape the Museum
eSobi v2
Fishdom H2O - Hidden Odyssey
FrostWire 4.20.1
GOM Player
Google Earth
Google Toolbar for Internet Explorer
Google Update Helper
H.264 Decoder
Hidden Relics
Hidden Secrets - The Nightmare
Hidden World of Art
Hide and Secret
HijackThis 2.0.2
Identity Card
iGetMusic V1.2
IObit Security 360
iWin Games (remove only)
Java™ 6 Update 17
Jewel Quest Mysteries
Junk Mail filter update
Launch Manager
LimeWire 5.4.6
Little Shop - Road Trip
Magic Academy
Malwarebytes' Anti-Malware
MediaMonkey 3.2
Microsoft Office XP Professional
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Mirar
Mishap - An Accidental Haunting
MKV Splitter
Mozilla Firefox (3.6)
MP3 Rocket
MSVCRT
My Medication Tracker
Mystery Masterpiece - The Moonstone
Mystery P.I. - The Lottery Ticket
Mystery P.I. - The New York Fortune
MyWinLocker
Norton Online Backup
Norton Security Scan
NTI Backup Now 5
NTI Backup Now Standard
NTI Media Maker 8
PrimoPDF -- by Nitro PDF Software
Princess Isabella - A Witch's Curse
Private Eye
Pure Hidden
QuantZ
QuickTime
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
Scrabble Blast (remove only)
ShopAtHome SelectRebates
Skype Toolbars
Skype™ 4.1
Slingo Supreme
Smart Defrag
Snapshot Adventures
Super TextTwist
TabQuery 1.0 build 119
The Clumsys 2 - Butterfly Effect
The Hidden Object Game Show
The Hidden Object Show - Season 2
The Lost Cases of Sherlock Holmes
The Scruffs
The Treasures of Mystery Island
TuneUp Companion 1.6.4
VC80CRTRedist - 8.0.50727.4053
Visual C++ 8.0 Runtime Setup Package (x64)
VLC media player 1.0.5
Welcome Center
WhereSphere
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
YouTube Downloader 2.5.3

==== Event Viewer Messages From Past Week ========

2/26/2010 8:55:16 PM, Error: Microsoft-Windows-SharedAccess_NAT [31004] - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
2/26/2010 7:37:32 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80246007: Windows Malicious Software Removal Tool x64 - February 2010 (KB890830).
2/26/2010 7:19:20 PM, Error: atikmdag [52236] - CPLIB :: General - Invalid Parameter
2/26/2010 7:19:20 PM, Error: atikmdag [43029] - Display is not active
2/26/2010 7:19:16 PM, Error: volmgr [46] - Crash dump initialization failed!
2/26/2010 6:48:55 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} and APPID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} to the user Sherry-PC\Sherry SID (S-1-5-21-1388864579-3908957097-3704985053-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
2/21/2010 8:08:21 PM, Error: volsnap [36] - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
2/21/2010 5:10:03 PM, Error: Microsoft-Windows-SharedAccess_NAT [34001] - The ICS_IPV6 failed to configure IPv6 stack.

==== End Of File ===========================
Attached File  DDS2.zip   8.8KB   9 downloads

BC AdBot (Login to Remove)

 


#2 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,766 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:06:52 AM

Posted 02 March 2010 - 09:54 AM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

Please include a clear description of the problems you're having, along with any steps you may have performed so far.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.
We need to create an OTL Report
  1. Please download OTL from one of the following mirrors:
  2. Save it to your desktop.
  3. Double click on the icon on your desktop.
  4. Click the "Scan All Users" checkbox.
  5. In the custom scan box paste the following:
    CODE
    netsvcs
    msconfig
    safebootminimal
    safebootnetwork
    activex
    drivers32
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    /md5start
    eventlog.dll
    scecli.dll
    netlogon.dll
    cngaudit.dll
    sceclt.dll
    ntelogon.dll
    logevent.dll
    iaStor.sys
    nvstor.sys
    atapi.sys
    IdeChnDr.sys
    viasraid.sys
    AGP440.sys
    vaxscsi.sys
    nvatabus.sys
    viamraid.sys
    nvata.sys
    nvgts.sys
    iastorv.sys
    ViPrt.sys
    eNetHook.dll
    ahcix86.sys
    KR10N.sys
    nvstor32.sys
    ahcix86s.sys
    nvrd32.sys
    /md5stop
    %systemroot%\*. /mp /s
  6. Push the button.
  7. Two reports will open, copy and paste them in a reply here:
    • OTL.txt <-- Will be opened
    • Extra.txt<--Will be minimized

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#3 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,766 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:06:52 AM

Posted 07 March 2010 - 08:46 AM

Due to lack of feedback, this topic is now Closed

If you need this topic reopened, please send me a PM.
Please include the address of this thread in your request.
This applies only to the original topic starter.

Everyone else please start a new topic.

With Regards,
myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users