Web browser no longer connects to internet

[CodeMonk]

OH, BTW, I had FRST64.exe AND "Fixlog.txt" both in the following directory : "C:\Downloads\System\fix\8".

I hope thats ok. They are both in the same directory as you instructed although not on the Desktop.

[CodeMonk]

Oh, and it didn't ask to restart so I haven't yet.

[AdvancedSetup]

That is fine to have them in any folder as long as they're together.

 

Please go ahead and reboot the computer now and then run this scanner as well as a new FRST scan and post logs.  (delete your current FRST logs)

Also if you're comfortable removing the cpuz135 entries on your own go ahead (though no harm really if you leave them).

 

Please download MiniToolBox save it to your desktop and run it.

Checkmark the following check-boxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Devices
• List Users, Partitions and Memory size.
• List Minidump Files
  

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using Reset FF Proxy Settings option Firefox should be closed.
 

[CodeMonk]

Ok, here is Results.txt from MiniToolBox.

 

I've been working on uninstalling AVG, but I was running VERY VERY slowly, so I halted that.

Been using ZoneAlarm form my AV and Firewall needs.

I'll be running FRST64 again as soon as AVG get uninstalled.

 

Oh, and if you want, I can run MiniToolBox again as well after AVG is gone.

 

And I use Chrome as my browser.

Only keep Firefox for testing purposes.

I think I've only actually ran FireFox maybe 3 times in the last 6 months.

 

Thanks.

Result.txt

Result.txt

[AdvancedSetup]

Please run this tool to help remove AVG - AVG Remover
 
Then when done please run a new DDS scan and post back those logs.
 


Download DDS from one of the locations below and save to your Desktop
dds.scr
dds.com

Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.
Then double click dds.scr or dds.com to run the tool.
Click the Run button if prompted with an Open File - Security Warning dialog box.
A black DOS console should open and run for a moment.

• When done, DDS will open two (2) logs:
  • DDS.txt
  • Attach.txt

• Save both reports to your desktop
• Please include the following logs in your next reply as an attachment: DDS.txt and Attach.txt
• You can ignore the note about zipping the Attach.txt file and just post it or attach it.

[CodeMonk]

DDS.txt and Attach,txt files attached,

 

 

attach.txt

dds.txt

[AdvancedSetup]

Please uninstall ALL versions of Java. Then reboot and run the following.

Please download JavaRa-1.16 and save it to your computer.

• Double click to open the zip file and then select all and choose Copy.
• Create a new folder on your Desktop named RemoveJava and paste the files into this new folder.
• Quit all browsers and other running applications.
• Right-click on JavaRa.exe in RemoveJava folder and choose Run as administrator to start the program.
• From the drop-down menu, choose English and click on Select.
• JavaRa will open; click on Remove Older Versions to remove the older versions of Java installed on your computer.
• Click Yes when prompted. When JavaRa is done, a notice will appear that a logfile has been produced. Click OK.
• A logfile will pop up. Please save it to a convenient location and post it in your next reply.

 

Then run the following

 

 

Please Run TFC by OldTimer to clear temporary files:

• Download TFC from here and save it to your desktop.
• http://oldtimer.geekstogo.com/TFC.exe
• Close any open programs and Internet browsers.
• Double click TFC.exe to run it on XP (for Vista and Windows 7 right click and choose "Run as administrator") and once it opens click on the Start button on the lower left of the program to allow it to begin cleaning.
• Please be patient as clearing out temp files may take a while.
• Once it completes you may be prompted to restart your computer, please do so.
• Once it's finished you may delete TFC.exe from your desktop or save it for later use for the cleaning of temporary files.
  

[CodeMonk]

Java log file attached and TRC RAN

JavaRa.log

[AdvancedSetup]

Great.  Okay, let me have you run Combofix again and post back a new log.

 

Delete your current copy and download a new fresh copy to run from the link provided below.

Make sure you disable your antivirus when you run it.

 

 

Please visit this webpage and read the ComboFix User's Guide:

• Once you've read the article and are ready to use the program you can download it directly from the link below.
• Important! - Please make sure you save combofix to your desktop and do not run it from your browser
• Direct download link for: ComboFix.exe
• Please make sure you disable your security applications before running ComboFix.
• Once Combofix has completed it will produce and open a log file.  Please be patient as it can take some time to load.
• Please attach that log file to your next reply.
• If needed the file can be located here:  C:\combofix.txt
• NOTE: If you receive the message "illegal operation has been attempted on a registry key that has been marked for deletion", just reboot the computer.
  

 

[CodeMonk]

Here ya go.

 

Thanks

ComboFix.txt

[AdvancedSetup]

Please create an mbam-check log:
 

• Download mbam-check.exe from here and save it to your desktop
• Double-click on mbam-check.exe to run it, it should then open a log file
• Please do not copy and paste the entire contents of the log into your next post, instead please attach the log CheckResults.txt file which should now be located on your desktop to your next post

 

 

 

Next, Please download Security Check by screen317 from HERE or HERE.

• Save it to your Desktop.
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• If you get Unsupported operating system. Aborting now, just reboot and try again.
• A Notepad document should open automatically called checkup.txt.
• Please Post the contents of that document.
• Do Not Attach It!!!

 

 

[CodeMonk]

 Results of screen317's Security Check version 0.99.77  

 Windows 7  x64 (UAC is enabled)  

 Out of date service pack!!

 Internet Explorer 11  

``````````````Antivirus/Firewall Check:``````````````

 Windows Firewall Disabled!  

ZoneAlarm Free Firewall Antivirus   

 Antivirus up to date!   

`````````Anti-malware/Other Utilities Check:`````````

 McAfee SiteAdvisor    

 Malwarebytes Anti-Malware version 1.75.0.1300  

 Wise Registry Cleaner 7.17  

 Java 7 Update 25  

 Java version out of Date!

 Adobe Flash Player 11.8.800.94  

 Adobe Reader 10.1.8 Adobe Reader out of Date!

 Mozilla Firefox 12.0 Firefox out of Date!

 Google Chrome 31.0.1650.57  

 Google Chrome 31.0.1650.63  

````````Process Check: objlist.exe by Laurent````````

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbamgui.exe  

 Malwarebytes' Anti-Malware mbamscheduler.exe   

 CheckPoint ZoneAlarm vsmon.exe  

 CheckPoint ZoneAlarm zatray.exe  

`````````````````System Health check`````````````````

 Total Fragmentation on Drive C: 1% 

````````````````````End of Log``````````````````````

CheckResults.txt

[AdvancedSetup]

I would highly suggest you uninstall this program  Wise Registry Cleaner 7.17

 

Do I need a Windows Registry Cleaner?
 

 

Please try running the JavaRA removal tool again.  You still show an entry for an old version of Java there.

 

I would recommend you either uninstall Firefox if you're not going to use it or update it as it is very outdated.

Open your Adobe Reader and check for updates and if found install them.

 

Then you also need to get and install Service Pack 1 and all the Microsoft Critical Updates.    Is the Windows Update Service disabled?

 

 

[CodeMonk]

Ok, Service Pack for Windows 7 installed and its all up to date

Have latest Java version ( 1.7.0_45 )

Firefox is up to date

Opened Adobe Reader, checker for updates, It says I am Up to date.

Wise Registry Cleaner removed.

 

 

Whats next?

[AdvancedSetup]

Well unless you're still experiencing any other issues we should probably be done here then.

How is the computer running now?

Are there still any signs of an infection?

Thanks

[CodeMonk]

Seems ok so far.

Loaded a little slow at last boot, but I there were still a few windows updates configuring.

 

Ad-Aware isn't a problem is it?

I'm not used to these damn ads now

 

 

Thanks for all your help.

[AdvancedSetup]

No Ad-Aware is a legit antivirus. Not sure of their standing or rating compared to others but often that is often a moving target.

At this time there are no more signs of an infection on your system.

However if you are still seeing any signs of an infection please let me know.

Let's go ahead and remove the tools and logs we've used during this process.

Most of the tools used are potentially dangerous to use unsupervised or if ran at the wrong time.

They are often updated daily so if you went to use them again in the future they would be outdated anyways.

The following procedures will implement some cleanup procedures to remove these tools.

It will also reset your System Restore by flushing out previous restore points and create a new restore point.

It will also remove all the backups our tools may have created.

Uninstall ComboFix (if used):

• Turn off all active protection software including your antivirus.
• Push the "Windows key" + "R" (between the "Ctrl" button and "Alt" Button)
• Please copy and past the following into the box ComboFix /Uninstall and click OK.
• Note the space between the X and the /Uninstall, it needs to be there.

Remove the rest of the tools used:

Please download OTCleanIt and save it to your Desktop. This tool will remove all the tools we used to clean your pc.

• Double-click OTCleanIt.exe.
• Click the CleanUp! button.
• Select Yes when the "Begin cleanup Process?" prompt appears.
• If you are prompted to Reboot during the cleanup, select Yes.
• The tool will delete itself once it finishes, if not go ahead and delete it by yourself.
• If asked to restart the computer, please do so

Note: If you receive a warning from your firewall or other security programs regarding OTCleanIt attempting to contact the internet, please allow it to do so.

AdwCleaner Removal:

• Double click on AdwCleaner.exe to run the tool.
• Click on Uninstall
• Confirm with Yes

ESET antivirus Removal:

• This tool can be uninstalled via the Control Panel, Programs, Uninstall

If there are any other left over Folders, Files, Logs then you can delete them on your own.

Please visit the following link to see how to delete old System Restore Points. Please delete all of them and create a new one at this time.

How to Delete System Protection Restore Points in Windows 7 and Windows 8

Remove all but the most recent Restore Point on Windows XP

As Java seems to get exploited on a regular basis I advise not using Java if possible but to at least disable java in your web browsers

How do I disable Java in my web browser? - Disable Java

A lot of reading here but if you take the time to read a bit of it you'll see why/how infections and general damage are so easily inflicted on the computer. There is also advice on how to prevent it and keep the system working well. Don't forget about good, solid backups of your data to an external drive that is not connected except when backing up your data. If you leave a backup drive connected and you do get infected it can easily damage, encrypt, delete, or corrupt your backups as well and then you'd lose all data.

Nothing is 100% bulletproof but with a little bit of education you can certainly swing things in your favor.

• How Malware Spreads - How did I get infected
• Best Practices for Safe Computing - Prevention of Malware Infection
• Avoiding those unwanted free applications
• A close look at how Oracle installs deceptive software with Java updates
• IAC / Ask.com toolbars
• Malwarebytes Unpacked Blog

If you're not currently using Malwarebytes PRO then you may want to consider purchasing the product which can also help greatly reduce the risk of a future infection.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!