Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google website not opening in browsers


  • This topic is locked This topic is locked
9 replies to this topic

#1 subby6

subby6

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:01:27 PM

Posted 17 December 2013 - 11:46 PM

Hi I've just cleaned this computer of malware and viruses. I used this this guide to do so.

How to easily clean an infected computer (Malware Removal Guide)

It seems clean now, runs much faster, no popups etc. But only have 1 issue. Google.com does not load on any browser i have installed on the pc. I have checked the hosts file, its clean. Disabled windows firewall, uninstalled Norton 360.

 

All other sites work. I can ping google.com fine, just in the browsers it says page cannot be displayed.

I can boot up into 'safe mode with networking' and it works there.

 

What can i check to fix this issue?

 

Computer is running Windows 7 64bit.


Edited by subby6, 17 December 2013 - 11:47 PM.


BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:27 PM

Posted 18 December 2013 - 03:23 PM

Hi -

Did you have any "personal help" or just follow the general main page script ??

 

Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.

  • Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center/Action Center
  • Windows Update
  • Windows Defender
  • Other Services

     

  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.

 

 

Thank You -



#3 subby6

subby6
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:01:27 PM

Posted 18 December 2013 - 06:10 PM

Hi, thanks for your response.

 

I Didn't have any personal help removing the malware from the computer, i just followed the script.

 

Here is the log. 

 

Farbar Service Scanner Version: 05-12-2013
Ran by Crys & Stu (administrator) on 19-12-2013 at 09:09:28
Running from "F:\"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
 
Internet Services:
============
 
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
 
 
Windows Firewall:
=============
 
Firewall Disabled Policy: 
==================
 
 
System Restore:
============
 
System Restore Disabled Policy: 
========================
 
 
Action Center:
============
 
wscsvc Service is not running. Checking service configuration:
The start type of wscsvc service is OK.
The ImagePath of wscsvc service is OK.
The ServiceDll of wscsvc service is OK.
 
 
Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.
 
 
Windows Autoupdate Disabled Policy: 
============================
 
 
Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.
 
 
Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1
 
 
Other Services:
==============
 
 
File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
 
 
**** End of log ****


#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:27 PM

Posted 19 December 2013 - 12:14 AM

Hi -

 

Press Windows Key + R - - Type services.msc and look through the list -

 

"wuauserv Service is not running" = (Windows Update AutoUpdate Service)
Look under Windows Update and it needs to be set to - Started .................. Automatic (Delayed Start)

"wscsvc Service is not running" = (Windows Security Centre Service)
Look under Security Center and it needs to be set to - Started .......... Automatic (Delayed Start)

 

Please ask if you need help to reset these items.

 

Check that your Antivirus is active, and a Firewall is activated (even the Windows Firewall).

 

Download Malwarebytes' Anti-Malware Free (aka MBAM): to your desktop.
- Do not accept the Free Trial Version at this time -

If you have it downloaded just Update it and run a Full Scan ................

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Be sure to restart the computer if requested.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

 

Thank You -



#5 subby6

subby6
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:01:27 PM

Posted 19 December 2013 - 12:38 AM

No changes made to the services, they both already started and on Automatic. Ran malwarebytes quick scan, and deleted the 4 infections.

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
 
Database version: v2013.12.19.03
 
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Crys & Stu :: CRYSTU [administrator]
 
19/12/2013 3:30:18 PM
MBAM-log-2013-12-19 (15-36-02).txt
 
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 231342
Time elapsed: 5 minute(s), 30 second(s)
 
Memory Processes Detected: 0
(No malicious items detected)
 
Memory Modules Detected: 0
(No malicious items detected)
 
Registry Keys Detected: 0
(No malicious items detected)
 
Registry Values Detected: 0
(No malicious items detected)
 
Registry Data Items Detected: 0
(No malicious items detected)
 
Folders Detected: 0
(No malicious items detected)
 
Files Detected: 4
C:\ProgramData\ezsidmv.dat (Trojan.Trace) -> No action taken.
C:\ProgramData\PKP_DLes.DAT (Trojan.Trace) -> No action taken.
C:\ProgramData\PKP_DLet.DAT (Trojan.Trace) -> No action taken.
C:\ProgramData\PKP_DLev.DAT (Trojan.Trace) -> No action taken.
 
(end)


#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:27 PM

Posted 19 December 2013 - 12:51 AM

C:\ProgramData\ezsidmv.dat (Trojan.Trace) -> No action taken.
C:\ProgramData\PKP_DLes.DAT (Trojan.Trace) -> No action taken.
C:\ProgramData\PKP_DLet.DAT (Trojan.Trace) -> No action taken.
C:\ProgramData\PKP_DLev.DAT (Trojan.Trace) -> No action taken.
 
Did you go back and Delete these 4 items ??
The scan shows  No action taken.
 
Please update me with your current situation -
 
Thank You -

Edited by noknojon, 19 December 2013 - 12:52 AM.


#7 subby6

subby6
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:01:27 PM

Posted 19 December 2013 - 12:57 AM

Yes i said i deleted the 4 infections in my previous post. Google.com website still doesn't load. I saved the scan, before i deleted the files.


Edited by subby6, 19 December 2013 - 01:05 AM.


#8 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:27 PM

Posted 19 December 2013 - 01:26 AM

No Problem -

I did need to ask with the results you posted -

You have gone through all of the safe programs that we can post in this area, and still show problems

 

So I think you should post this up to the Experts area -

 

As you need more assistance, please follow the instructions in the Preparation Guide starting at Step #6.

NOTE : If you are unable to complete any step, just post the topic and leave a full description of your problems

 

When you have done that, start a new topic and post the required logs to  Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team Experts.

 

If Help Bot responds to your topic, please follw his Step #1 so the team will be notified.

 

After doing this, please reply back in this thread with a link to the new topic so we can close this one.

 

Thank You -



#9 subby6

subby6
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:01:27 PM

Posted 19 December 2013 - 01:40 AM

Made a topic over on the Virus, Trojan, Spyware, and Malware Removal Logs forum.



#10 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:27 PM

Posted 19 December 2013 - 02:56 PM

Thanks.

I will get this locked to prevent others posting to it and confusing any problems -

 

Good Luck -






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users