Tech Support Forum banner
Status
Not open for further replies.

Internet Browsers Not Working

2K views 3 replies 3 participants last post by  amateur 
#1 · (Edited by Moderator)
I don't really know what did I do but I guess it had something to do with my java updating itself last night.
After that, my internet browser is not working anymore.
I have 4 different browsers on my computer - Firefox, Chrome, Safari and IE.

Firefox, Chrome and Safari totally cannot LOAD any page.
The funny thing is that the only page I can go is Google and that's it.
And I'm sure my internet is up cause I have no problem with my wireless using my iPhone.

However, weirdly, my IE is still normal and I'm using my IE to post this topic.
But my IE crashes very often and this have not happened before this.
What's happening to my internet browsers huh?
I tried reinstall and uninstall but it is still not working.

*Added in DDS attachment and log.
*Can't seems to run gmer.exe cause it keeps hanging on my computer. :(

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by User at 6:24:51.68 on 05/03/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_24
Microsoft Windows XP Professional 5.1.2600.2.949.82.1033.18.3326.2351 [GMT 8:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\System32\svchost.exe -k Akamai
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Vista Drive Icon\DrvIcon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Razer\Abyssus\razerhid.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\PPStream\ppsap.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Razer\Abyssus\razertra.exe
C:\Program Files\Razer\Abyssus\razerofa.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\P06XHS3W\dds[1].scr
C:\WINDOWS\system32\conime.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uWindow Title = Windows Internet Explorer provided by Microsoft
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.forumswatcher.com/search.htm
mSearchAssistant = hxxp://bar.baidu.com/sobar/defaultsearch.html
mCustomizeSearch = hxxp://bar.baidu.com/sobar/defaultsearch.html
uURLSearchHooks: DeviceVM Url Search Hook: {0063bf63-bfff-4b8f-9d26-4267df7f17dd} - c:\windows\system32\dvmurl.dll
mWinlogon: UIHost=sevenui.exe
BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - c:\program files\orbitdownloader\orbitcth.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Grab Pro: {c55bbcd6-41ad-48ad-9953-3609c48eacc7} - c:\program files\orbitdownloader\GrabPro.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [PPS Accelerator] c:\program files\ppstream\ppsap.exe
uRun: [RocketDock] "c:\program files\rocketdock\RocketDock.exe"
uRun: [Google Update] "c:\documents and settings\user\local settings\application data\google\update\GoogleUpdate.exe" /c
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [AlcWzrd] ALCWZRD.EXE
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [WinampAgent] c:\program files\winamp\winampa.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [IMEKRMIG6.1] c:\windows\ime\imkr6_1\IMEKRMIG.EXE
mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [DrvIcon] c:\program files\vista drive icon\DrvIcon.exe
mRun: [vilaunch] c:\windows\system32\vilaunch.exe
mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
mRun: [QuickTime Task] "C:\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Abyssus] c:\program files\razer\abyssus\razerhid.exe
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
IE: &Download by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/204
IE: Do&wnload selected by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/202
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: {BFEFE86A-C69B-46F7-90DF-E8EB8E80CEE3} = 202.188.0.133,202.188.1.5
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
AppInit_DLLs: c:\windows\system32\cmigctj.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\docume~1\user\applic~1\mozilla\firefox\profiles\5vbj4ifk.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - component: c:\program files\mozilla firefox\extensions\browserhighlighter@ebay.com\components\Shim.dll
FF - component: c:\program files\orbitdownloader\addons\oneclickyoutubedownloader\components\GrabXpcom.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - Ext: The Browser Highlighter: browserhighlighter@ebay.com - c:\program files\mozilla firefox\extensions\browserhighlighter@ebay.com
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: avast! WebRep: wrc@avast.com - c:\program files\avast software\avast\webrep\FF
.
============= SERVICES / DRIVERS ===============
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-3-3 371544]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-3-3 301528]
R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2004-8-12 14336]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-3-3 19544]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2011-3-3 42184]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2011-1-13 20328]
R2 GEST Service;GEST Service for program management.;c:\program files\gigabyte\energysaver\GSvr.exe [2008-12-29 80392]
R3 Abyssus03;Razer Abyssus USB Filter Driver;c:\windows\system32\drivers\Abyssus.sys [2010-8-8 9216]
R3 vHidDev;Razer Gaming Device;c:\windows\system32\drivers\vHidDev.sys [2010-8-8 5760]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-3-3 135664]
S2 tnvnk;Time Task;c:\windows\system32\svchost.exe -k netsvcs [2004-8-12 14336]
S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\games\dragon age\bin_ship\daupdatersvc.service.exe [2010-8-24 25832]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\user\locals~1\temp\eig1fd3.tmp --> c:\docume~1\user\locals~1\temp\EIG1FD3.tmp [?]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\garena\safedrv.sys --> c:\program files\garena\safedrv.sys [?]
.
=============== File Associations ===============
.
txtfile=c:\windows\notepad.exe %1
.
=============== Created Last 30 ================
.
2011-03-04 22:22:16 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-03-04 22:22:16 472808 ----a-w- c:\windows\system32\REN88.tmp
2011-03-04 22:03:24 -------- d-----w- c:\docume~1\user\locals~1\applic~1\Deployment
2011-03-04 19:19:57 -------- d-----w- c:\windows\system32\KB905474
2011-03-04 19:14:57 -------- d-----w- c:\program files\MSXML 6.0
2011-03-04 19:05:54 -------- d-----w- c:\windows\ServicePackFiles
2011-03-03 21:02:15 -------- d-----w- c:\windows\system32\CatRoot_bak
2011-03-03 20:40:07 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2011-03-03 20:40:07 272128 ------w- c:\windows\system32\drivers\bthport.sys
2011-03-03 20:36:34 454016 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2011-03-03 20:31:53 2181376 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2011-03-03 20:31:53 2137088 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-03-03 20:31:52 2058368 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2011-03-03 20:31:52 2016768 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-03-03 19:00:18 -------- d-----w- c:\windows\system32\PreInstall
2011-03-03 18:04:25 274288 ----a-w- c:\windows\system32\mucltui.dll
2011-03-03 18:04:25 215920 ----a-w- c:\windows\system32\muweb.dll
2011-03-03 18:04:25 16736 ----a-w- c:\windows\system32\mucltui.dll.mui
2011-03-03 11:13:15 -------- d-----w- c:\program files\Microsoft
2011-03-03 11:12:55 -------- d-----w- c:\program files\Windows Live SkyDrive
2011-03-03 11:10:18 83249512 ----a-w- c:\program files\common files\windows live\.cache\wlc57.tmp
2011-03-03 07:38:29 -------- d-----w- c:\program files\common files\Windows Live
2011-03-03 07:25:46 -------- d-sh--w- c:\documents and settings\user\PrivacIE
2011-03-03 07:24:38 -------- d-sh--w- c:\documents and settings\user\IETldCache
2011-03-03 07:21:21 -------- d-----w- c:\windows\ie8updates
2011-03-03 07:19:17 -------- dc-h--w- c:\windows\ie8
2011-03-03 07:02:54 -------- d--h--w- c:\windows\$hf_mig$
2011-03-03 07:01:21 599040 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2011-03-03 07:01:21 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2011-03-03 07:01:21 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2011-03-03 07:01:20 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2011-03-03 07:01:20 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2011-03-03 07:01:20 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2011-03-03 07:01:19 11076096 -c----w- c:\windows\system32\dllcache\ieframe.dll
2011-03-03 05:15:24 8704 -c----w- c:\windows\system32\dllcache\tsbyuv.dll
2011-03-03 05:15:24 48128 -c----w- c:\windows\system32\dllcache\iyuv_32.dll
2011-03-03 02:02:19 371544 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-03-03 02:02:06 40648 ----a-w- c:\windows\avastSS.scr
2011-03-03 02:02:02 -------- d-----w- c:\program files\AVAST Software
2011-03-03 02:02:02 -------- d-----w- c:\docume~1\alluse~1\applic~1\AVAST Software
2011-03-03 00:23:17 -------- d-----w- c:\windows\system32\SoftwareDistribution
2011-03-02 23:04:26 -------- d-----w- c:\docume~1\user\applic~1\Malwarebytes
2011-03-02 23:04:18 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-03-02 23:04:17 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2011-03-02 23:04:14 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-03-02 23:04:14 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-03-02 22:36:16 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-03-02 22:36:16 -------- d-----w- c:\windows\system32\wbem\Repository
2011-03-02 19:59:13 53248 ----a-w- c:\windows\system32\cmigctj.dll
2011-03-02 19:59:13 0 ----a-w- c:\windows\system32\A95.tmp
.
==================== Find3M ====================
.
2011-03-04 19:41:36 16608 ----a-w- c:\windows\gdrv.sys
.
============= FINISH: 6:26:20.18 ===============
 

Attachments

See less See more
#3 ·
Hello, Welcome to TSF.
I'm nasdaq and will be helping you.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Please do not install or uninstall any programs, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.
===

>>> Run Jotti's malware scan: Please copy this line (in bold):
c:\windows\system32\cmigctj.dll
  • Go to Jotti's malware scan and click the Browse button,
  • A window will open, right-click in the File name field and choose Paste.
  • Click the Submit button and let the scan run uninterrupted.
  • At the end right-click the Permalink button and choose "Copy the link".
  • Open Notepad (Start => All Programs => Accessories) and click "Edition" => "Paste".
Please copy and paste these Permalink in your next reply.
If Jotti is busy, please go to http://www.virustotal.com
===

I need you also to run this tool.

Please download ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page: A guide and tutorial on using ComboFix

Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop

IMPORTANT....

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Do not install any other programs until this if fixed.


How to : Disable Anti-virus and Firewall...
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Double click on ComboFix.exe & follow the prompts.
  • When finished, it will produce a report for you.
  • Please post the C:\ComboFix.txt
Note:
Do not mouse click ComboFix's window while it's running. That may cause it to stall


Note: If you have difficulty properly disabling your protective programs, refer to this link --> How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs


For AVG antivirus and anti-spyware security software users only.
Due to recent changes in AVG and how it interacts with CF, AVG must be uninstalled to run ComboFix. You will get a message from CF stating such.

If AVG will not uninstall, it is first recommended to uninstall it with this AppRemover by Opswat. The AVG uninstaller can be downloaded from here > AppRemover.exe Go to their homepage and you will see they have support for removal of other AV's as well AVG appremover tool.
==============

Please post the logs and let me know what problem persists.
 
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top