Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Problem loading some website/page


  • This topic is locked This topic is locked
5 replies to this topic

#1 joe_49er

joe_49er

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:05:33 AM

Posted 02 November 2010 - 11:44 AM

I am using Symantec End-point protection on my Home Computer running Windows XP, along with Malwarebytes-Antimalware and Spybot S&D. Recently, from last month, i experience problem in opening some website from my computer i.e. i can't view some images from tinypic.com but can see some of it. And some pages from other website cannot be displayed properly. When i tried this pages and sites from my laptop, its ok. so the problem does not rise with the internet connection.

Then, i setup a fresh copy of windows, and solve the problem for sometime. but this only last for 2/3 days, the same problem occurred again. So, i uninstalled all my protection software and run my computer without any anti-virus/malware/spyware protector. It solves some problem, but not all. So i d/l Combofix and tried it out and stated that the computer have rootkit, and i let the combofix to clean the rootkit. But failed to solve my problem. I am still experiencing problem in opening some website/webpate. I cannot even log-in to this bleeping computer from the home page. I do so, only after i click welcome guide, then the login box appeared. Here is the screenshot.
Posted Image

I have already posted about this problem in another catergory here

Please help. below is the dds log

DDS (Ver_10-10-31.01) - NTFSx86
Run by Rka at 1:12:56.65 on Tue 11/02/2010
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1641 [GMT 5.5:30]


============== Running Processes ===============

C:\WINDOWS.0\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS.0\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS.0\system32\spoolsv.exe
C:\WINDOWS.0\Explorer.EXE
C:\WINDOWS.0\system32\rundll32.exe
C:\WINDOWS.0\RTHDCPL.EXE
C:\WINDOWS.0\system32\RUNDLL32.EXE
C:\Program Files\WordWeb\wweb32.exe
C:\WINDOWS.0\system32\ctfmon.exe
svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS.0\system32\nvsvc32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\Dls\dds.scr

============== Pseudo HJT Report ===============

BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [WordWeb] "c:\program files\wordweb\wweb32.exe" -startup
uRun: [ctfmon.exe] c:\windows.0\system32\ctfmon.exe
mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows.0\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows.0\system32\NvMcTray.dll,NvTaskbarInit
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: Antiwpa - antiwpa.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows.0\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\rka~1.tet\applic~1\mozilla\firefox\profiles\8i6kkcwr.default\
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);

============= SERVICES / DRIVERS ===============

R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-11 67656]

=============== Created Last 30 ================

2010-11-01 13:19:26 -------- d-----w- c:\docume~1\rka~1.tet\locals~1\applic~1\ACDSee
2010-11-01 13:19:25 -------- d-----w- c:\docume~1\rka~1.tet\applic~1\ACD Systems
2010-11-01 13:18:33 5376 ----a-r- c:\windows.0\system32\antiwpa.dll
2010-11-01 13:15:10 -------- d-----w- c:\docume~1\alluse~1.0\applic~1\ACD Systems
2010-11-01 13:14:44 -------- d-----w- c:\windows.0\Downloaded Installations
2010-10-31 06:47:51 -------- d-----w- c:\docume~1\rka~1.tet\applic~1\SUPERAntiSpyware.com
2010-10-31 06:47:51 -------- d-----w- c:\docume~1\alluse~1.0\applic~1\SUPERAntiSpyware.com
2010-10-31 06:47:45 -------- d-----w- c:\program files\SUPERAntiSpyware

==================== Find3M ====================

2010-10-30 19:26:02 73728 ----a-w- c:\windows.0\system32\javacpl.cpl
2010-10-30 19:26:02 411368 ----a-w- c:\windows.0\system32\deployJava1.dll
2010-10-30 12:14:19 85504 ----a-w- c:\windows.0\MBR.exe

============= FINISH: 1:13:16.25 ===============

File attached:

Attached Files



BC AdBot (Login to Remove)

 


#2 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,779 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:02:03 AM

Posted 09 November 2010 - 08:37 AM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

Please include a clear description of the problems you're having, along with any steps you may have performed so far.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.
We need to create an OTL Report
  • Please download OTL from one of the following mirrors:
  • Save it to your desktop.
  • Double click on the Posted Image icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • In the custom scan box paste the following:
    msconfig
    safebootminimal
    activex
    drivers32
    netsvcs
    %SYSTEMDRIVE%\*.exe
    /md5start
    hlp.dat
    winlogon.exe
    wininit.exe
    explorer.exe
    /md5stop
    %systemroot%\*. /mp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\drivers\*.sys /90
  • Push the Posted Image button.
  • Two reports will open, copy and paste them in a reply here:
    • OTL.txt <-- Will be opened
    • Extra.txt<--Will be minimized

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#3 joe_49er

joe_49er
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:05:33 AM

Posted 10 November 2010 - 10:54 AM

I have tried with another modem (borrowed it) and everything works fine now. And test my modem in another computer with another internet connection and the same problem occured. so i guess the problem lies with the modem. Thank you all for your help and concern.

#4 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,779 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:02:03 AM

Posted 11 November 2010 - 05:29 AM

Hi,

thanks for letting us know. Should I close this topic, then?

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#5 joe_49er

joe_49er
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:05:33 AM

Posted 11 November 2010 - 06:36 AM

Ok, may close it

#6 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,779 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:02:03 AM

Posted 11 November 2010 - 07:06 AM

Since this topic appears to be resolved, I will now close it. Thanks for letting us know.

If you need this topic re-opened please send me a PM.

Everyone else, please start a new topic.

With Regards,
myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users