Avast WEBforum

Other => Viruses and worms => Topic started by: Misuzel on November 22, 2012, 06:47:43 PM

Title: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: Misuzel on November 22, 2012, 06:47:43 PM
Hai Guys,

I hope you can help me.

I am from the netherlands, i hope my english will do fine ;-))

For some time now my laptop becomes slower and slower, internet connections is failing and google chrome is not opening or slow.

One day i got the message i had no firewall, i checked everything firrewall was just on.

Days before that i had some problems with my email, i was blocked because someone tried to get in my mail.

The last thing i noticed that Yontoo was installed in my extenties in chrome.

I removed it but also read it stays in youre register and i keep having problems.

I performerd al the logs you guys asked, i found some things and had some improvement , but if hope someone would check what could be the problem and how i could fix this.

Thanks in advance
Miranda
Title: Re: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: essexboy on November 22, 2012, 07:15:03 PM
On completion of this can you let me know what the problems are

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
Code: [Select]
:OTL
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-1957994488-1844823847-1801674531-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1957994488-1844823847-1801674531-1003\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O33 - MountPoints2\{d1b66f74-8e6f-11df-b9e0-001a6bfa700d}\Shell\AutoRun\command - "" = Help!.exe
O33 - MountPoints2\{d1b66f74-8e6f-11df-b9e0-001a6bfa700d}\Shell\open\command - "" = Help!.exe

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
THEN

Download and Install Combofix
 
Download ComboFix from one of the following locations:
Link 1  (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link 2 (http://www.forospyware.com/sUBs/ComboFix.exe)
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here  (http://forums.whatthetech.com/How_Disable_your_Security_Programs_t96260.html&pid=494216#entry494216)
(http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png)

(http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png)

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3.  If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
Title: Re: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: Misuzel on November 23, 2012, 12:23:55 AM
Hai,

Thanks for youre quick reply and efficient information.

I did run the tests and did get you the logs.

The laptop it self looks the run some faster but google chrome is stil a problem. It keeps running slow, opening pages very slow and often crashes.

I also have a problem in both chrome and IE that some sites which i know for sure are safe give the notice that they are not safe of the SSL certicificate.  Could this have to do something by this problem ?
 I tried to solve that in a earlier stage , moste of the time this is a time problem but that is all ok at my laptop. I tried some other suggestion but no results.
Now i wonder if it have something to do with this.
Although the problems started after i noticed yontoo showing up.

I hope you can look further for me .

Thank you again for your time.

Miranda
Title: Re: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: essexboy on November 23, 2012, 02:08:33 PM
OK for the IE and Chrome certificate problem this may work

1.Click Start, click Run, type Inetcpl.cpl, and then click OK.
2.In the Internet Properties dialog box, click the Advanced tab, and then click Restore advanced settings.

For the Chrome speed problem the best bet would be to uninstall totally (this will lose the extensions) and then re-install afresh

You can remove Google Chrome like any other Windows program. Follow these steps:

Go to Start > All Programs > Google Chrome > Uninstall Google Chrome.
If you want to delete your user profile information, like your browser preferences, bookmarks, and history, select the "Also delete browser data" checkbox.
Select the default browser you'd like to use.
Click OK in the confirmation prompt.
The uninstall process will begin.

Once that has been done could you let me know of any other problems you are experiencing
Title: Re: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: Misuzel on November 23, 2012, 03:23:31 PM
I did try everything you asked and here are the results.

At first this morning i had an error i never had, that the pure network service gave an error. I have no idea what this is ? Maybe you, there is a technical repport when you need it i will place it,


The suggestion  for the SSl error didn't work, i still get the same messages on these sites.

i deleted Chrome in an earlier stage but tried it again after all the changes the last day, but it didnt change much. Unfortunally.

The first time i start chrome is the worst of all, is takes ages. it stands still, seems to crash, opens tabs on his own, disapears and shows again and after a period, could be 15 minutes it becomes some stability. And i a whole lot less ;-))

After that it get better, but still not fast en often seems likes it want to crash but re apears then.

I hope you still have any idea's in youre magic solution box

Miranda
Title: Re: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: essexboy on November 23, 2012, 03:41:59 PM
pure network service is a network file  programme http://www.wi-fiplanet.com/reviews/article.php/3770726/Review-Pure-Networks-Network-Magic-Pro-48.htm are you on a network ?

OK next trick for the certificates
Open Internet Explorer.
Click on "Tools" then scroll down and click on "Internet Options."
Click "Content" tab. Click on icon labeled "Certificates" under the "Certificates" heading (this is the second heading on this tab).
Click on the small right arrow on the right side of this window until you see "Untrusted Publishers." Then click on the certificate that is causing a error message.
Next, click "Remove" to delete that certificate.
Click "Close" and then "OK" once you are done deleting problem security certificates.
Exit Internet Explorer to reset the browser.


Now Chrome :

http://support.google.com/chrome/bin/answer.py?hl=en&answer=95464 Could you set Chrome to Incognito and see if that cures the problem, if it does then we will need to look at the extensions 
Title: Re: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: Misuzel on November 23, 2012, 07:05:12 PM
Ok here am i again, and thank you for youre patiance.

No i am not on a network, but this was once a company laptop, so it could be there are some things on it suitable for a network.

It apears starting the laptop and disapears then.



I tried the solution for the SSL error, but the website i had troubles with were not metioned and it can be random. i have two i use often and can not use on my laptop. One is a site called marktplaats.nl  its simalair like ebay.  and twitter.com is the other one.  And sometimes i have randome other sites.


I used Chrome in the igonito modus, it lookes like it helpes with the chrashes but stil very slow loading of the pages.


I removed Chrome from my laptop as you asked, i installed again and the extensions were gone. The second time i opened cHROME the exentsions where there again.  Is that right ?


Title: Re: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: essexboy on November 23, 2012, 07:36:57 PM
It sounds as though Chrome is auto synchronising.  So you will need to disable that http://support.google.com/chromeos/bin/answer.py?hl=en&answer=1281195  then re-install yet again

For the Pure networks I would recommend that you uninstall that via control panel

I will do so more checking on the certificates
Title: Re: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: Misuzel on November 26, 2012, 01:34:54 PM
Hi again :)

I tried to remove the pure network.  It doesnt show in the control panel.  I searched elsewhere and i found it in C:\Program Files\Common Files\Pure Networks Shared\Platform  but i can't delete it.  So i deleted the files i could there are only four now.

I tell you letter if i still get the error.

the chrome error is still there, there is a little difference. in the beginning it is slow, it takes me 15 minutes to get it right. After that it looks likes it working ok now.

Its an improvment but hell the 15 minutes take something of my patience  :P


The SSl certicficate  is still the same.

I hope you still can do something for me
Title: Re: Laptop and internet slower , google chrome opening bad, and yontoo showing up
Post by: essexboy on November 26, 2012, 03:35:50 PM
Let me know if this stops pure networks

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
Code: [Select]
:OTL
SRV - [2008-12-12 18:06:40 | 000,642,856 | ---- | M] (Cisco Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe -- (nmservice)
DRV - [2008-12-12 18:05:20 | 000,025,264 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\purendis.sys -- (purendis)
DRV - [2008-12-12 18:05:18 | 000,023,984 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\pnarp.sys -- (pnarp)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-1957994488-1844823847-1801674531-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1957994488-1844823847-1801674531-1003\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O4 - HKLM..\Run: [nmctxth] C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)

:Files
C:\Program Files\Common Files\Pure Networks Shared

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]