Avast WEBforum

Business Products => Archive (Legacy) => Avast Business => Avast Server Protection => Topic started by: Kary on January 08, 2010, 05:21:14 PM

Title: Cannot access AVAST webpage!
Post by: Kary on January 08, 2010, 05:21:14 PM
My computer denies to open any Avast webpage.
Have tried with Firefox (normally in use) and I-explorer.
My PC loads any other page but no avast one (!!!)
Please what can I do?, Have tried to clear any rest of the previous antivirus (AVG) with no positive result.  :'(
Have used and registered Avast 4. After nearly 2 months with my PC off (had to change monitor), an Avast window appears now each time I turn on the PC asking to newly register, but I can do nothing about it: there's no way to the Avast page.
Please HELP!  ???

(Of course am using now my netbook, otherwise I wouldn't be able to reach this Forum   :-[  ) 

Note.- My PC is 'ASUS', Pentium IV, 80GB ROM, 1,5GB RAM
Title: Re: Cannot access AVAST webpage!
Post by: Lisandro on January 08, 2010, 05:51:51 PM
Use your netbook to register the copy of avast for the other computer. Write down the license number that you can add in the troublesome computer.
Do you use any firewall?
Can you open the hosts file with Notepad and search if there is any mention to avast there? http://en.wikipedia.org/wiki/Hosts_file#Location_and_content
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 08, 2010, 07:15:08 PM
First thanks for your prompt answer, Tech.

Have gone to the link you gave, but understood very little ( :-[ ).
The server I use to get in internet cannot have blocked my PC access to the Avast page, because, I am using the same server with this netbook. The only difference is that my PC uses a direct (cable) connection with the modem. And I use Avast with my netbook without problems. Anyway, (on the link) they don't mention Avast being blocked.
Have taken a look at regedit.exe, but I find myself a bit lost there.  :-[
Any other suggestion, please?
And if I reload the OS? (Win XP; 2002)

Thank you in advance  :)  for your help.


PS. Have no firewall at all on.
Title: Re: Cannot access AVAST webpage!
Post by: Lisandro on January 08, 2010, 07:19:17 PM
Kary, better will be discussing this on General forum and not on the Server one.
Anyway, which is your Windows? XP, Vista, 7?
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 08, 2010, 07:22:18 PM
XP 2002, sp2.
The new monitor is for win vista, but I did'nt need to use the driver.

Title: Re: Cannot access AVAST webpage!
Post by: Lisandro on January 08, 2010, 07:23:44 PM
Open Notepad.
Open C:\Windows\system32\drivers\etc\ and then the file Hosts (without any extension).
It should be only:
Code: [Select]
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
::1  localhost
127.0.0.1  localhost
Title: Re: Cannot access AVAST webpage!
Post by: YoKenny on January 08, 2010, 08:01:27 PM
This should be discussed in avast! 4.x Home/Pro:
http://forum.avast.com/index.php?board=2.0

Windows XP Service Pack 3 has been available for over a year and a half plus it provides many Critical Updates and performance improvements.

You need to start Internet Explorer then go to Tools then Windows Update and download all of the available updates.

Go to Control Panel then Automatic Updates then select Automatic (recommended) or at least Notify me but don't automatically download or install them.

Go to Secunia Online Software Inspector then run it to see what applications are vulnerable:
http://secunia.com/vulnerability_scanning/online
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 08, 2010, 09:21:31 PM
Thanks for the help YoKenny.

Seems i have a virus in my PC.
Cannot load Microsoft pages now, nor any other antivirus scanner online.
The link you gave me couldn't scan my PC and said maybe my Java applet was not installed.

Please HELP!!!
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 08, 2010, 09:37:56 PM
To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire (http://www.mediafire.com/) and post the sharing link.  If necessary this file can be renamed to OTS.COM

Download OTS (http://oldtimer.geekstogo.com/OTS.exe)  to your Desktop
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles


Please attach the log in your next post.

To attach a file, do the following:
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 12:47:01 AM
Ok Essexboy, have uploaded the log as you said to Mediafire.

The link is:  http://www.mediafire.com/?gmizdnnhziw

Thanks in advance for what you can do.


PS. Have cleared the file after 1 download.
     Will try to post it here.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 02:09:34 PM
OK I will wait  ;D
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 06:14:47 PM
I have it already in my mail. To attach it here I have to download it to my netbook... :-\
Is there any infection probable when I pass it through my netbook?  :-[

I was afraid to leave the file in Mediafire. I noticed someone (could not see who) had dowloaded it.
Thought it was you...

Anyway will upload it to Mediafire in this moment and put it under a password (have seen it's possible).
Then ill give you the password here, ok? (hope it functions).

Will remain online here.

(Tks for your patience).
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 06:24:09 PM
Nope it is a text only file file which I will need to parse before it makes any sense
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 06:27:50 PM
Ok, am in Mediafire with my PC. Have uploaded it there and the passw. is:

marge3,3
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 06:32:14 PM
Could I have the link as well  ;D
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 06:45:34 PM
Yes, sorry  ::)

There goes:

http://www.mediafire.com/?vlnnnnkyxzm


Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 06:51:23 PM
OK that password does not work for me ?  But looking at the size you should be able to attach it to a post
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 07:01:03 PM
OK, there goes the other way...
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 07:08:46 PM
Got it - it looks like one of the new redirect dll's that is in a locked file.  After this run re-try the Avast site and let me know the result 

Start OTS. Copy/Paste the information in the quotebox below into the pane where it says "Paste fix here" and then click the Run Fix button.

Code: [Select]
[Unregister Dlls]
[Registry - Safe List]
< HOSTS File > (768 bytes and 19 lines) -> C:\WINDOWS\system32\drivers\etc\hosts
YN -> Reset Hosts ->
[Custom Scans]
YY ->  mzvscoqf.dll : Unable to obtain MD5  -> C:\WINDOWS\system32\mzvscoqf.dll
[Empty Temp Folders]


The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here.

I will review the information when it comes back in.

Also let me know of any problems you encountered performing the steps above or any continuing problems you are still having with the computer.
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 07:44:01 PM
Have tried to enter internet and couldn't.
Opened the OTS prog. and did what you said (had to copy manually the code).
Took 2 or 3 minutes . Then appeared a window asking to reboot the system to continue clearing files...
Have done nothing more yet.
Should I click that ok?
Tks
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 07:51:17 PM
Yes a reboot is required
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 08:13:25 PM
OK, there goes the new log...
But can't still open Avast page nor Microsoft's.   :(


PS. Could enter internet indeed.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 08:25:10 PM
OK the file did not want to leave so I will use a bigger hammer

Download ComboFix from one of these locations:


Link 1 (http://www.forospyware.com/sUBs/ComboFix.exe)
Link 2 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)


* IMPORTANT !!! Save ComboFix.exe to your Desktop


**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


(http://img.photobucket.com/albums/v706/ried7/RcAuto1.gif)


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

(http://img.photobucket.com/albums/v706/ried7/whatnext.png)


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you.  Please include the C:\ComboFix.txt in your next reply.
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 08:55:59 PM
Should I cancel Avast momentarily? I cannot suspend it. Or I leave it as it is now?
(Win. Firewall was and is off now.)
Firefox and IE ?
TK u

Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 09:02:44 PM
Suspend Avast by right clicking the icon and selecting pause all shields - then run CF.  If Combofix complains still let it run 
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 09:17:26 PM
When I right click on the Avast icon appears nothing similar to 'pause all shields' (it's in italian).
When I try to open the AV it claims for a new license code. Otherwise it disappears.
Title: Re: Cannot access AVAST webpage!
Post by: DavidR on January 09, 2010, 09:26:31 PM
It is Stop On-Access Protection, the first option (easier on the translation), see image.

Once you have completed the scan don't forget to Start On-Access Protection again.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 09:32:11 PM
Thanks David I am using 5 now  :)
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 09:51:42 PM
Have no icon there where it should be.
Have tried in my netbook and it goes as you  say, but in my PC i don't find that movin' icon on the bar.  All other Avast icons give a different menù.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 09:54:11 PM
OK run with Avast active - combofix may complain but ignore it
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 09, 2010, 11:41:52 PM
I was so happy... :( 'cause I could load Avast page and enter the forum...
But each time the responses were slower and slower...
Tried to load Microsoft page and couldn't do it (always says that it is not to find the server)
I newly reloaded the browser (I always clean all before closing it), but this time couldn't even charge the Avast page... :'(

Am attaching the log as you asked.

Thanks for your help and patience Essexboy.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 09, 2010, 11:48:27 PM
OK next lets clear all the caches and flush your DNS

Download TFC (http://oldtimer.geekstogo.com/TFC.exe) to your desktop
Lets check some settings on your system:
Go to Start->Run->Type CMD and click Ok. The MSDOS Window will be displayed. At the command prompt, type the following and press Enter after each line:

ipconfig /flushdns (The space between g and / is needed)
regsvr32 netshell.dll
regsvr32 netcfgx.dll
regsvr32 netman.dll
Exit

Restart the computer.
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 10, 2010, 12:24:52 AM
Have tried twice to run TFC and PC reboots without letting the TFC run completely.
The first time the reboot was too fast. The second time it let 2 seconds the TFC running and rebooted.
Maybe I continue trying?

About that rebooting, sometimes my PC used to do it, don't know why. Thought it was the antivirus (had AVG). With Avast it happened rarely.


OK, I have repeated it 5 times. Always appears a small window saying something about the system (?) and dissappears all, followed by reboot.

Then I have done what you asked (DNS was already in 'automatic').

When I went in MSDOS and wrote those lines in red, after ENTER, said in all that it was not recognized as any internal or external command, nor an executable program nor a batch file.

Anyway, the problem persists..., cannot load Avast nor Microsoft pages (always 'server not found' message appears).
Title: Re: Cannot access AVAST webpage!
Post by: Onix on January 10, 2010, 02:22:19 AM
I think you have got Kido(Conficker).You should install these 3 patches from Microsoft:
http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx
http://www.microsoft.com/technet/security/bulletin/ms08-068.mspx
http://www.microsoft.com/technet/security/bulletin/ms09-001.mspx

Furthermore,you should disconnect from Internet and launch this tool from Kaspersky Lab:
http://www.kaspersky.ru/support/downloads/utils/kk.zip
Unzip the folder and run KK.exe


Regards,
Onix
Title: Re: Cannot access AVAST webpage!
Post by: YoKenny on January 10, 2010, 02:32:00 AM
Onix, I said the same thing back in my post:
http://forum.avast.com/index.php?topic=53205.msg451115#msg451115

Then essexboy took over.
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 10, 2010, 02:42:39 AM
Thanks for your help, but how can I load those patches from Microsoft when I cannot open even the Microsoft page?

May I only load that executable file and try it without loading first those patches?

As I understand, i must run it offline, is that OK?

Tks again.
Title: Re: Cannot access AVAST webpage!
Post by: Onix on January 10, 2010, 10:07:02 AM
Onix, I said the same thing back in my post:
http://forum.avast.com/index.php?topic=53205.msg451115#msg451115

Then essexboy took over.
Yeah,but i offer KidoKiller ;)
As I understand, i must run it offline, is that OK?
You're right :)
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 10, 2010, 01:07:47 PM
Download the attached log file and rename the extension to .ZIP then extract the files to your destop run KK.exe and let me know the result
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 10, 2010, 06:12:26 PM
Hello Essexboy

Have done as you said. Appeared a window in black with a list of eliminated files. Have closed immediately internet and zip prog.
It continued and after a while it rebooted the PC.

Then tried to enter internet and Avast page: same problem. Also with Microsoft page: always says server not found...

Tried to run it again but seems 'it ' has detected KK. :(

Have been trying to see why  there is always  a growing quantity of files to compress when I clean the disk. Found a file in System32 modified in the future (?) and a zip file with the same name.
Going to TEMP in Windows found 4 or 5 files (and it should be empty, cause I had just run the disk cleaning prog. and it was 0KB)  (?) Have sent them to the bin. One of them says it's in use...(?)

I am also having problems with the clock. It gets back. Yesterday night left it OK, and now it was 10 hours back (!!).

Note. After loading KK. as you said, have tried to load KK from the link Onix gave, but couldn't open the page (same 'server not found').
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 10, 2010, 06:54:36 PM
So confiker removed some stuff but did not cure the problem ?

I have a fair size armoury of tools each a bit stronger than the previous one

Download AVZ from here http://www.mediafire.com/file/nnz111y252r/avz4.zip  then follow the instructions below for usage ignore the dowload and update links as they are for Kaspersky and will probably not work

Note: If you recieve an error message, chose a different source, then click Start again


(http://perplexus.geekstogo.com/avz-standardscripts-asa-removal.png)
When restarted

(http://i768.photobucket.com/albums/xx326/perplexus13/malware/avz-standardscripts.png)
Attach both virusinfo_syscure.zip and virusinfo_syscheck.zip to your next post Rename the zip extension to txt to enable an upload

Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 10, 2010, 08:43:30 PM
OK, all done.
But still can't load Avast page, and now it takes so long to load my mail, that i had to use other address.
(I've been using my mail to pass the files from my PC to the netbook.)

Am attaching the logs (zips).

(Note- Have rebooted after the second run too).
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 10, 2010, 09:14:07 PM
A quick question - do you use a router ? Can other computers access the net through that router with no problems ?

1. Please open Notepad2. Now copy/paste the entire content of the codebox below into the Notepad window:

Code: [Select]
File::
c:\documents and settings\Utente\Dati applicazioni\Sun\Java\jre1.6.0_17\lzma.dll
c:\documents and settings\Utente\Dati applicazioni\Sun\Java\jre1.6.0_17\gtapi.dll

Registry::
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"2140:TCP"=-


3. Then in the text file go to FILE > SAVE AS and in the dropdown box select SAVE AS TYPE to ALL FILES

4. Save the above as CFScript.txt

5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below.  This will start ComboFix again.

(http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif)


6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 10, 2010, 09:43:30 PM
A router? (?)

There is a way to connect 2 PCs to solve problems using Windows. Have seen the possibility somewhere in my PC. But I have never used it.

On the other side, I am connected to the internet by an adsl modem attached to the telephone line.
This connection is secured by a password. My PC, is connected by an ethernet cable. Netbook not.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 10, 2010, 09:49:46 PM
So you use the same router for both netbook and the infected system.  Can you install OpenDNS (https://www.opendns.com/start/computer/) and see if the problem remains

ON your router is the login password the default one ?
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 10, 2010, 09:58:38 PM
There is a window to get in the internet and all is ready filled there just  to click 'OK' .

The Modem is connected to the PC via a LAN connection, i think. Netbook wireless.

Have now seen my modem is 'bridged + routed' active connected.

HAVE TRIED TO CHANGE THE DNS : SAYS ERROR 734 AND CAN'T CONNECT  (USUALLY DNS IS IN AUTOMATIC).

Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 10, 2010, 11:06:09 PM
Ok, there goes the file, but the problem persists.  :(
Title: Re: Cannot access AVAST webpage!
Post by: YoKenny on January 10, 2010, 11:41:12 PM
Ok, there goes the file, but the problem persists.  :(

I would have given up by now and found my install CDs and backed up my important data to external media then ran FORMAT and install the operating system then restore what I needed.

essexboy must have the patience of Job:
http://www.usingenglish.com/reference/idioms/patience+of+job.html
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 10, 2010, 11:52:32 PM
Whilst I research that error can you set the computer as opposed to the router to use OpenDNS
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 11, 2010, 12:00:59 AM
 ???
That means, return to automatic DNS ? Have done it already...
Or... to deactivate the router?


(Just seen your post YoKenny:  :) . Was thinking in turning off my PC. Will have patience. Tks.)
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 11, 2010, 08:33:40 PM
No set the router to use OpenDNS along with setting your computer to do the same the instructions for both are on the OpenDNS link
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 11, 2010, 09:14:40 PM
Have read a little over Dynamic DNS (my modem can use it, but it's not in use now) but am not sure if that is what you mean by Open DNS  :-[
Is it so, please?

Also I've seen my modem is using a firewall (server's?).
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 11, 2010, 09:53:05 PM
OpenDNS bypasses the router DNS lookup if you could go to this page https://store.opendns.com/setup/computer/ select your operating system and then follow the instructions to set your computer to use OpenDNS.  Let me know if that enables you to access Avast 
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 11, 2010, 11:11:21 PM
Been trying to change the DNS on the modem, but cannot find the way. Have called the provider but they say it's too late to talk with the technicians now and that I should call tomorrow... ::)

Anyway I've also read about the possibility of a higher risk of malaware and virus attacks using open DNS...  :-\
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 11, 2010, 11:40:53 PM
Quote
Anyway I've also read about the possibility of a higher risk of malaware and virus attacks using open DNS... 
Really OpenDNS have their own database of bad sites and block access to them, I have never encountered any malware since using it - and I do look for it

Can you access your router by typing in the address bar of IE 192.168.0.1

Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 14, 2010, 08:44:08 PM
Hello Essexboy.

Have just tried to load what you said. Nothing.

Said page not found in IE. Tried in Firefox: first said the page took too long to load, 2 or 3 times after: the same 'page not found' appeared... :(

Avast page and Microsoft's still show message: 'cannot find the server'...
Title: Re: Cannot access AVAST webpage!
Post by: DavidR on January 14, 2010, 09:35:48 PM
Whilst that is the generally accepted local IP address for router setup, some routers use a different address, so you will have to check your routers documentation.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 14, 2010, 11:07:58 PM
Have you tried OpenDNS yet ?
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 15, 2010, 06:50:37 PM
Have tried OpenDNS page also with my netbook.
Found the address for my modem, but there stays only the DNS am using but no possibility to change them.
Have also called the provider. They say within 3 days (!!!) a thecnician will call me... ::)
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 15, 2010, 08:17:48 PM
Can you try openDNS on the computer ? as that may give you a temporary respite
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 16, 2010, 08:04:45 PM
Have tried, I think, all possibilities...

Seems the DNS are controlled by the provider, no way to change them in the modem.

Have changed DNS in my PC, I can go in internet, open OpenDNS page, login, open my modem page, but cannot find the way to change the DNS of the modem. (Of course, still cannot open AVAST nor Microsoft pages).

Have seen the DNS in both PC and netbook are the same. What changes is the IP.

Have also noticed , each time I clean the disk (each time I go out from internet), even If I have opened one or no page, there are a big quantity of files to compress (???), round 27MB(!!!).


Today I have called again the provider and talked with a technician. He said they cannot change the DNS (!!!), they can only read it.... I asked which were those values and he gave me (for the ethernet connection) 2 very different ones [from the DNS I can see on the control panel (IP link) of my modem], and didn't want to give me the link where he could see those DNS values (said was a private info)...

Someone blocked the connection (!) (= cleared the sftw. to reach the modem) and I had to erase the connection program and reload it newly (from provider's CD).

Please HELP!

Have just controlled the clock of my PC: it was 8 days and some minutes back (!!!!)...

Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 19, 2010, 09:11:13 PM
Essexboy?
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 19, 2010, 09:25:31 PM
Sorry for the delay - I have been discussing this with some network experts.  They are currnetly bemused - but I have been asked to try Combofix again as it has recently been updated for the newer infections.  Just delete the old copy from your desktop 
Quote
Someone blocked the connection (!) (= cleared the sftw. to reach the modem) and I had to erase the connection program and reload it newly (from provider's CD).
Does your router have a wep key or was it an unprotected one.

Download ComboFix from one of these locations:


Link 1 (http://www.forospyware.com/sUBs/ComboFix.exe)
Link 2 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)


* IMPORTANT !!! Save ComboFix.exe to your Desktop


**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


(http://img.photobucket.com/albums/v706/ried7/RcAuto1.gif)


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

(http://img.photobucket.com/albums/v706/ried7/whatnext.png)


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you.  Please include the C:\ComboFix.txt in your next reply.
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 19, 2010, 10:27:08 PM
The connection with the modem is WPA protected via ethernet, WEP protected via WiFi.

I suspected it was the same technician with whom I talked on telephone who erased the sftw.: he said the system was in danger for I told him I probably had a virus in my PC...

As I was a bit desperate, thinking that maybe 'it' has been controlling the AV, I erased AVAST ( :-[) and tried to install it anew: sorry could'nt anymore (the '.exe' file needs loading it from AVAST page)... :'( .  The problem persists even without AVAST installed...

Will do what you say in your message, tks.
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 20, 2010, 04:17:56 PM
OK, done. Here goes the file....


Just tried again with AVAST and Microsoft pages: always "server not found"-window appears...

(PC-Clock was 43 hours back as I turned the PC today.  Files compressed reduced to 6MB after clearing those little anti-malware programs and logs I used in these days, before running ComboFix today).
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 20, 2010, 10:13:53 PM
OK I have just found a netservice entry that was not present before  ;D

1. Please open Notepad2. Now copy/paste the entire content of the codebox below into the Notepad window:

Code: [Select]
File::
c:\windows\system32\mzvscoqf.dll
c:\windows\Installer\eafea.msi

Driver::
suhbgm

NetSvc::
suhbgm

3. Then in the text file go to FILE > SAVE AS and in the dropdown box select SAVE AS TYPE to ALL FILES

4. Save the above as CFScript.txt

5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below.  This will start ComboFix again.

(http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif)


6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 21, 2010, 07:24:01 PM
ESSEXBOY!!!!   ;D

Am using my PC now!!!

Am downloading updates and will re-install AVAST.

Hope all turns OK now  :)

Thank you  :-*
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 21, 2010, 08:50:29 PM
Thank sUBs he makes and updates the programme to look in all the good areas - I just play with the results I get.  Let it run for 24 hours - and if you are happy I will remove my tools and tidy up after me  ;D
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 21, 2010, 09:30:20 PM
OK, I thank sUBs. 

But without your work, patience and perseverance there is nothing to do with the program  ;)

Thank you very much again  :)

Will report in 24 hours.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 21, 2010, 09:36:00 PM
I'll be here  ;D
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 22, 2010, 08:24:01 PM
Hello Essexboy.  :)

Today loaded the service pack 3.

The clock still gets back (was 17 hours back when I turned my PC).

Cannot even try to open the Java icon in the Control Panel: PC crashes!


But till now I can open those pages I could not before: AVAST's and Microsoft's.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 22, 2010, 08:41:12 PM
Form the way your clock is behaving it may be a CMOS battery problem - this can also cause random crashes.  Have you ever replaced the battery and how old is the computer ?
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 22, 2010, 09:04:27 PM
My PC is more or less 4 years old  :-[ ...

So I have to change that CMOS battery?

But, why I cannot open the Java icon in Control Panel? Maybe it's necessary more memory space specifically for Java? Also when I try the 'virtual machine' (from Java page) to see if Java is running or not, the system crashes (it reboots) again...

Thanks for your help Essexboy.

Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 22, 2010, 09:13:20 PM
Your java is out of date anyway - so lets change that first.  I will find a guide to how to change the CMOS for and an explanation of the problems it can cause 

(http://users.telenet.be/bluepatchy/miekiemoes/images/javaicon.gif)   Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version of Java components and upgrade the application. Beware it is NOT supported for use in 9x or ME and probably will not install in those systems

Upgrading Java:
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 22, 2010, 11:43:57 PM
Did it.

This time when I click over the Java icon on Control Panel, appears a window saying : "The system cannot find the registry key specified:
HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_18 \JavaHome" 

Sorry it took a long time to install the offline version (had to install it twice).
When I tried to open a page to see a video camera, there was nothing to see and  they asked for a plug-in:  I loaded it and the crashing problem returned as before.
 Then I noticed the update 17 was again there (control panel). So I repeated all the steps again...

That page still says I must load a plug-in or update the Java version.
Have thought maybe it's the Firefox version (I have the 3.5.7). There is a new version (3.6) but as I remember last time I had to return to the 3.5v....

In tools Menu (Firefox), under Plugins, stays a 'Java Deployment Toolkit 6.01.180.7 NPRuntime Script Plug-in Library for Java (TM) Deploy' I couldn't erase, so I disabled it, but apparently nothing changes...

Should I try to update Firefox to 3.6 v.?

Thanks.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 22, 2010, 11:49:48 PM
Not being a firefox user myself, I would think that may be a good plan  - especially as it seems related to that plugin
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 23, 2010, 05:55:28 PM
OK, updated Firefox to 3.6 v., loaded Java Console 6.0.18 and enabled the plug-in 'Java Deployment Toolkit 6.01.180.7' in the browser.
Always stays the same problem.

Tried reinstalling anew the Java update (18 v.) from the .exe file downloaded to my desktop..., nothing.

Changed 'MSI' for 'JavaHome' in 'HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_18 \MSI' (as I found it in the 'regedit.exe' Start command, but nothing changes.

Have used many times the Java Verification Page and it shows always: "Oops! You don't have Java installed or you have a version less than 1.4.2"

Maybe reinstalling  the OS...?  :-\ 
(Have found many statements in regedit for Java, many of them in relation to the System).
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 23, 2010, 05:59:41 PM
OK lets clear the remnants first by using Javara

Please download JavaRa (http://www.softpedia.com/get/System/System-Miscellaneous/JavaRa.shtml) to your desktop and unzip it to its own folder

Then retry if that fails then go to add/remove and remove Java followed by going to system32 and deleting all folders relating to Java or Sun then retry
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 23, 2010, 10:36:15 PM
Tried all and many times  :(

Also the 'Windows Installer CleanUp Utility': nothing.

Windows Update asked for updates twice. In the last Win. update were some Java things included. Turned PC off. Waited some minutes and put it on again: no change ???

It seems that register Key is some way blocked, don't know how nor what to do about it...  :-\
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 23, 2010, 10:37:33 PM
So windows updates are not downloading, but you can access the site - what error does windows give for the failure to update ?
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 23, 2010, 10:41:55 PM
They say the update was ok, but the problem persists...

(Somehow the update was already to do when PC was offline  ???)
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 23, 2010, 10:47:36 PM
Try this MS fixit solution

http://support.microsoft.com/kb/971058
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 23, 2010, 11:18:20 PM
With the default one: does nothing.

Will try the aggressive one... :-\


Still nothing... :'(
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 24, 2010, 12:42:23 AM
Downloaded again the offline Java prog., but noticed the PC boots before the installation has ended... ???

Also noticed the link you gave was:

jre-6u18-windows-i586-p.exe

 And the link I found and downloaded was:

jre-6u18-windows-i586.exe    ???

(Problem persists)

Tks for your patience.



Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 24, 2010, 01:55:03 PM
Which MS updates (KB numbers) are continually being re-downloaded ?
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 24, 2010, 08:42:24 PM
Where can I have that info. please?  :-\

They have asked twice, but think were different updates.



They have just asked again and the updates were:

 -  (KB951847)x86
 -  MS Office 2003 SP3

And it's the second time they say: 'It is impossible to install MS Office Service Pack 3 (SP3)'



There is no update registered in Control Panel/Add\Remove  today and no (KB951847) there... ???



In this moment they (Win Updates) have asked again to install that '(KB951847)x86'...
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 24, 2010, 09:44:34 PM
They have installed Net. Framework SP1 3.5 v. and SP2 v.3.0... ??? (Control Panel's Add|Remove)

For Office SP3 Update they ask for the file "PRO11.MSI" : not found...



The problem with Java is still there...  :(


In Firefox's Add-ons: stays 'Microsoft .Net Framework Assistant 1.0
                                            Adds ClickOnce support and the ability to report
                                            installed  .NET versions to the web server
                                            Not compatible with Firefox 3.6' 

There's no update for this also...


Am afraid I should return to previous browser version... :-\

Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 24, 2010, 10:27:03 PM
The KB is in regards to net framework and is a known problem by MS  - There are two options for this :
1. Remove and then re-download all net frameworks
2. Hide the update and then ignore it
The options quoted at MS


For Office 
Quote
Office 2003, Office XP, and Office 2000 provide the Detect and Repair command.
You can find the Detect and Repair command on the Help menu of almost all Office programs.
Using this command corrects identifiable problems such as missing files, corrupt files, registry omissions, or damaged registry entries.
It replaces the .msi file if it was deleted, damaged, or is the wrong version.
Using the Detect and Repair command usually requires you to provide the installation CD for the version of Office currently installed on your computer.
that will replace the file it keeps asking for

Still looking into the Java error
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 24, 2010, 11:27:55 PM
OK, tks.
Will wait...
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 28, 2010, 05:07:25 PM
May I try to use the Sun Download Manager to download Java?  ???  :-\

Thanks.



Have found that everytime the PC boots, one can see (in a DOS window): "TrendChipAwayVirus(TM)on Guard"

Is it possible for this program to boot the PC and  to block* Java?

*(Have tried to click on the links for support Sun M. gives - in the add/remove panel, Java program-  but they don't function: even no browser opens... ???)

 
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 28, 2010, 10:17:15 PM
Quote
"TrendChipAwayVirus(TM)on Guard"
That is a BIOS antivirus guard

So far I have found several solutions for this - but alas they are ones we have allready tried - I will ask some techs if they know any super tricks

You can use the Sun downloader but it will set itself to start with the system for auto update - although this can be disabled
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 28, 2010, 11:24:20 PM
Thanks Essexboy.

In the meantime I have found something about a program called 'gmer'.
Please ask also for this prog. and if I can use it on my PC without the risk of ending with a dead PC  :-\

Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 28, 2010, 11:30:04 PM
GMER is a nifty rootkit detector that will detect most nefarious activity.  However, sometimes for no apparent reason it will fail to run

 Download the GMER Rootkit Scanner (http://www.gmer.net/gmer.zip). Unzip it to your Desktop.

Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<--- ROOKIT" entries unless advised!

If possible rootkit activity is found, you will be asked if you would like to perform a full scan.Once the scan is complete, you may receive another notice about rootkit activity.
Post the contents of GMER.txt in your next reply.
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 29, 2010, 12:50:48 AM
OK, there goes the log...

(Were no alarm windows during the process).


(Java is still blocked...)

Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 29, 2010, 08:05:40 PM
Well you will be pleased to know that there was no indication of a rootkit at all.

Did the sun download manager achieve anything ?
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 29, 2010, 08:13:00 PM
Have not tried yet, as I was afraid something in the PC was blocking Java...

Will try now...

(What about eliminating that TrendMicroAwayVirus...etc...?)

Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 29, 2010, 08:27:11 PM
That is actually with the BIOS setup - I'll see if I can find some instructions
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 29, 2010, 08:36:42 PM
Hmm it is so old that it references win95 in the references I found

Can you boot to the BIOS screen and it will probably be in the advanced section, and you just set to disabled, save and exit bios and it will reboot 
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 29, 2010, 08:46:34 PM
Have just tried with the sun manager... I think it's worse...Java still blocked and the size of the update is 2MB smaller...



Please, how can I boot to the BIOS screen?   :-\
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 29, 2010, 09:06:47 PM
 here (http://www.hiren.info/pages/bios-boot-cdrom) is a link that shows how to access your bios (although this is regarding boot order the process is the same > look under Advanced chipset features for the trend function
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 31, 2010, 05:44:16 PM
I have had a suggestion from one of the techs - remove Java with Revo uninstaller using the forced uninstall option - this is only available on the Pro edition.  However, there is a 30 day free trial of it  ;D

http://www.revouninstaller.com/revo_uninstaller_free_download.html
Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 31, 2010, 05:46:12 PM
Thanks again for your help and patience, Essexboy.

 :-[ Till now I cannot enter in the DOS desktop. Have tried many times. It always stops loading just before running the OS. Leaves only 2 options: running normal XP version or the safe one to control problems with the OS... :-[...

Title: Re: Cannot access AVAST webpage!
Post by: Kary on January 31, 2010, 05:47:28 PM
 :)  Thank you...

Will try it now.
Title: Re: Cannot access AVAST webpage!
Post by: essexboy on January 31, 2010, 05:50:39 PM
You need to be really fast to get into bios
Title: Re: Cannot access AVAST webpage!
Post by: Kary on February 02, 2010, 12:01:02 AM
Hello Essexboy.

Have '50 times' uninstalled and reinstalled Java's latest update, with no positive result.
In the meantime have erased here and there all references to Java...

As I realized the last Firefox update (3.6 v.) probably wouldn't function (saw something about it on Java page), have returned to version 3.5.7 .

Today have reinstalled many times the Java last version and tried to install U16 v. and U5 v. (I had the '.exe' files somewhere in my PC).

Tired of trying I decided to run the oldest version (U5) and to see if it worked (is the only version which Java page recognizes as installed in the PC). Blocked the last version plugins in Firefox ... and tried to see the video I was trying to watch days ago...

To my surprise: It functions now! : I can watch the video OK.

 The only problem is that Java keeps asking to update to the last version... :-\

(Thank you again for your help and patience Essexboy  :) )

Hope all goes OK...



On the other side, I cannot enter the DOS desktop yet... (and I think there stays the solution to freely update Java...)



What about the clock, please?
(I still have to change the hour each time I turn on the PC.)



Title: Re: Cannot access AVAST webpage!
Post by: essexboy on February 02, 2010, 12:13:51 AM
If you are losing time like that I would seriously consider changing the CMOS battery

You can set Java to stop nagging, Go to control Panel > Java   and on the update page is a checkbox to never check for updates 
Title: Re: Cannot access AVAST webpage!
Post by: Kary on February 02, 2010, 12:26:02 AM
  I will find a guide to how to change the CMOS for and an explanation of the problems it can cause 

Would thank you very much for any suggestion about that CMOS battery change...

Title: Re: Cannot access AVAST webpage!
Post by: essexboy on February 02, 2010, 12:28:25 AM
http://www.computerhope.com/issues/ch000239.htm 
http://www.liverepair.com/encyclopedia/articles/cmosreplace.asp
these are for a desktop

Title: Re: Cannot access AVAST webpage!
Post by: Kary on February 02, 2010, 12:38:23 AM
Thanks  :) .

(You are an angel ).




Have already turned off the Java updates...




(http://users.telenet.be/bluepatchy/miekiemoes/images/javaicon.gif)   Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.

...That means I should always continue trying to solve the problem of the Java updating...



Title: Re: Cannot access AVAST webpage!
Post by: essexboy on February 02, 2010, 08:29:05 PM
If you do not really need Java then you can uninstall it - I have no Java on my system and I have no problems with any programmes or the net  ;D.