Quantcast
Channel: Tech Support Forum - Virus/Trojan/Spyware Help
Viewing all articles
Browse latest Browse all 2798

Browser wont connect (Skype Will)

$
0
0
Hello,

I am currently posting from my XP desktop.

The problem is with a windows 7 laptop (SP 1)

I ran a fullscan with Malwarebytes & Spybot -S&D removed (alot) then rebooted to find that neither of the browsers installed on the
laptop (Chrome, I.E) would connect to the internet. But Skype will connect.
I then ran both scanners in safe mode with networking on the built in admin account with no luck.

I transfered the DDS and GMER scanners via USB to the laptop & then the logs back to my desktop so I could post.
I ran DDS & GMER in safemode with networking on admin:

-------------------------------------------------------

DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 10.0.9200.16686 BrowserJavaVersion: 10.9.2
Run by Administrator at 3:48:42 on 2013-09-16
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.3033.2559 [GMT 1:00]
.
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\wbem\WmiPrvSE.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\WmiPrvSE.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k secsvcs
.
============== Pseudo HJT Report ===============
.
mURLSearchHooks: {ba14329e-9550-4989-b3f2-9732e92d17cc} - <orphaned>
BHO: <No Name>: {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - c:\program files\siteranker\SiteRank.dll
BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\program files\norton internet security\engine\20.4.0.40\coieplg.dll
BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\program files\norton internet security\engine\20.4.0.40\ips\ipsbho.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: {ba14329e-9550-4989-b3f2-9732e92d17cc} - <orphaned>
BHO: Ask Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} -
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: Ask Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} -
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\norton internet security\engine\20.4.0.40\coieplg.dll
TB: &Inbox Toolbar: {D7E97865-918F-41E4-9CD0-25AB1C574CE8} -
uRun: [Sidebar] c:\program files\windows sidebar\Sidebar.exe /autoRun
uRunOnce: [mctadmin] c:\windows\system32\mctadmin.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {EC5A4E7B-02EB-451D-B310-D5F2E0A4D8C3} - hxxps://register.btinternet.com/templates/btwebcontrol028.cab
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{09D945A0-57C3-43D5-A64C-EE710BA99BA7} : NameServer = 127.0.0.1
TCP: Interfaces\{09D945A0-57C3-43D5-A64C-EE710BA99BA7} : DHCPNameServer = 192.168.0.1
TCP: Interfaces\{71603EF9-7005-4EF7-A7DA-983EDD87FBBD} : NameServer = 127.0.0.1
TCP: Interfaces\{71603EF9-7005-4EF7-A7DA-983EDD87FBBD} : DHCPNameServer = 192.168.0.1
TCP: Interfaces\{71603EF9-7005-4EF7-A7DA-983EDD87FBBD}\244584572633D293733383 : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{71603EF9-7005-4EF7-A7DA-983EDD87FBBD}\244584F6D65684572623D2E484D464 : NameServer = 127.0.0.1
TCP: Interfaces\{71603EF9-7005-4EF7-A7DA-983EDD87FBBD}\244584F6D65684572623D2E484D464 : DHCPNameServer = 192.168.1.254
Handler: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: igfxcui - igfxdev.dll
Notify: SDWinLogon - SDWinLogon.dll
AppInit_DLLs= c:\progra~1\optimi~1\optpro~1.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\29.0.1547.66\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\nis\1404000.028\SymDS.sys [2013-6-27 367704]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nis\1404000.028\SymEFA.sys [2013-6-27 934488]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-3-1 139776]
S1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_20.4.0.40\definitions\bashdefs\20130903.002\BHDrvx86.sys [2013-9-3 1097816]
S1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\nis\1404000.028\ccSetx86.sys [2013-6-27 134744]
S1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_20.4.0.40\definitions\ipsdefs\20130913.001\IDSvix86.sys [2013-9-15 392792]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\nis\1404000.028\Ironx86.sys [2013-6-27 175264]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\system32\drivers\nis\1404000.028\symnets.sys [2013-6-27 339544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 NIS;Norton Internet Security;c:\program files\norton internet security\engine\20.4.0.40\ccSvcHst.exe [2013-6-27 144368]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-2-28 161384]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-8-7 52224]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2012-8-7 1343400]
S4 ogmservice;Online Games Manager;c:\program files\online games manager\ogmservice.exe [2013-8-8 559552]
S4 PenWesController;Penwes.com Service;c:\program files\penwes\PenWesService.exe [2013-8-7 1514496]
S4 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files\spybot - search & destroy 2\SDFSSvc.exe [2013-9-15 1817560]
S4 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files\spybot - search & destroy 2\SDUpdSvc.exe [2013-9-15 1033688]
S4 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files\spybot - search & destroy 2\SDWSCSvc.exe [2013-9-15 171928]
S4 TeamViewer7;TeamViewer 7;c:\program files\teamviewer\version7\TeamViewer_Service.exe [2012-8-10 2673064]
.
=============== Created Last 30 ================
.
2013-09-16 01:39:29 -------- d-----w- c:\windows\system32\catroot2
2013-09-16 01:22:03 -------- d-----w- C:\RegBackup
2013-09-16 01:00:51 -------- d-----w- c:\program files\Tweaking.com
2013-09-15 12:10:41 -------- d-----w- c:\program files\Wallpaper Changer
2013-09-15 10:03:06 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2013-09-15 10:02:35 15224 ----a-w- c:\windows\system32\sdnclean.exe
2013-09-15 10:02:13 -------- d-----w- c:\program files\Spybot - Search & Destroy 2
2013-09-15 09:46:41 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-09-15 09:46:41 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-09-11 19:15:01 -------- d-----w- c:\program files\SiteRanker
2013-09-03 13:53:52 187248 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
2013-09-03 11:50:40 -------- d-----r- c:\program files\Skype
2013-09-03 11:21:12 -------- d-----w- c:\programdata\Penwes
2013-09-03 11:21:08 -------- d-----w- c:\program files\PenWes
2013-09-03 11:17:16 -------- d-----w- C:\8af2777328ce1c17523af1
2013-09-03 11:17:11 -------- d-----w- c:\programdata\Package Cache
2013-09-03 11:14:07 -------- d-----w- c:\windows\system32\searchplugins
2013-09-03 11:14:07 -------- d-----w- c:\windows\system32\Extensions
2013-09-03 11:13:18 -------- d-----w- c:\program files\AnyProtectEx
2013-08-17 13:25:06 -------- d-----w- c:\program files\Murder, She Wrote 2 - Return to Cabot Cove
.
==================== Find3M ====================
.
2013-08-10 03:59:10 1767936 ----a-w- c:\windows\system32\wininet.dll
2013-08-10 03:58:09 2876928 ----a-w- c:\windows\system32\jscript9.dll
2013-08-10 03:58:06 61440 ----a-w- c:\windows\system32\iesetup.dll
2013-08-10 03:58:06 109056 ----a-w- c:\windows\system32\iesysprep.dll
2013-08-10 03:07:50 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-08-10 02:17:19 71680 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-08-08 01:03:07 2348544 ----a-w- c:\windows\system32\win32k.sys
2013-08-05 01:56:47 133056 ----a-w- c:\windows\system32\drivers\ataport.sys
2013-08-02 01:50:36 169984 ----a-w- c:\windows\system32\winsrv.dll
2013-08-02 01:49:19 293376 ----a-w- c:\windows\system32\KernelBase.dll
2013-08-02 00:52:57 271360 ----a-w- c:\windows\system32\conhost.exe
2013-08-02 00:43:05 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-02 00:43:05 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 00:43:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 00:43:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-07-25 08:57:27 1620992 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-19 01:41:01 2048 ----a-w- c:\windows\system32\tzres.dll
2013-07-09 05:03:34 3968960 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-07-09 05:03:34 3913664 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-07-09 04:53:46 1289096 ----a-w- c:\windows\system32\ntdll.dll
2013-07-09 04:52:10 175104 ----a-w- c:\windows\system32\wintrust.dll
2013-07-09 04:50:42 652800 ----a-w- c:\windows\system32\rpcrt4.dll
2013-07-09 04:46:31 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2013-07-09 04:46:31 1166848 ----a-w- c:\windows\system32\crypt32.dll
2013-07-09 04:46:31 103936 ----a-w- c:\windows\system32\cryptnet.dll
2013-07-06 05:05:35 1293760 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-27 11:27:05 142496 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
.
============= FINISH: 3:49:21.95 ===============


I checked to see if I.E was set you use proxies & it isn't.
I don't currently have access to boot CD or install disc.
This isnt my laptop its my Granny's so I don't know what she's dont with it.
I'm not very familiar with windows 7 so sorry for anything I do wrong.

Thanks, Steve

Attached Files
File Type: zip attach.zip (3.8 KB)

Viewing all articles
Browse latest Browse all 2798

Trending Articles