Firefox/Google

[ColG]

I have just installed avast! on my laptop running XP3 and now Firefox/Google doesn't work any more. Firefox loads but on trying to search using Google all I get is the egg timer. MSN's "bing" works ok but the PC seems to be running slower. There is no other anti-virus software installed. Any suggestions please?

[micky77]

Thats strange,did google work before you installed Avast ? Where did you download Avast from. Download HijackThis, run the program,choose scan and save a log file.Copy/paste the log here.This will tell us whats running on your pc.

http://filehippo.com/download_hijackthis/

[DavidR]

I have just installed avast! on my laptop running XP3 and now Firefox/Google doesn't work any more. Firefox loads but on trying to search using Google all I get is the egg timer. MSN's "bing" works ok but the PC seems to be running slower. There is no other anti-virus software installed. Any suggestions please?

Both firefox and google searches work fine on my system, XP Pro SP3.
If it works on Bing then there should be absolutely no difference on other search engines as avast doesn't know (or care) what search engine or browser you use.

Have (or did) you another AV installed in this system, if so what was it and how did you get rid of it ?

What is your firewall ?

[ColG]

Reply to micky77 & DavidR - thanks for your replies and sorry about delay in getting back to you. I did have AVG installed which I uninstalled using REVO. I downloaded avast from File Hippo. I'm running Windows firewall. Regards, ColG

[ColG]

PS

Google worked fine previously. The reason I dumped AVG was that updating failed and I was unable to re-install it.

[micky77]

Run the program I suggested,it may shed some light. You may have bad host entries.Copy/paste the log please. I wonder why AVG did not update ?

[ColG]

Thanks micky77. I'll do as you suggest at the earliest opportunity - I'm working from a different PC away from home at the moment.

[micky77]

Good stuff. I find it strange that AVG would not update, or reinstall.Then google has problems. These can be classic signs of infection.
If you do not have these program,download,install,update,run and post the logs, along with the HJT log

http://filehippo.com/download_malwarebytes_anti_malware/

http://filehippo.com/download_superantispyware/

Of course, I could be completely wrong, I usually am 

[ColG]

Excuse my ignorance - I'm new to forums - but how do I "post" the results of the scans? I've tried the copy and paste process but, as you are all probably aware, it doesn't work! Advice gratefully received please.

[DavidR]

Either post is split over two or more posts or attach the log file to the post, easiest.

When you click the Reply button, there is an Additional Options link, this expands the options to attach a file, that can be an image file or a text file (.log or .txt).

[micky77]

but how do I "post" the results of the scans? I've tried the copy and paste process but, as you are all probably aware, it doesn't work! please.

Ok With HJT, choose scan and save a logfile,the file can then be found at C\program files\trend micro\hijackthis\hijackthis log

With MBAM and SAS, when the log results appear in txt, go to file, save as, then save to your desktop. Come back here, open new reply, look for the +additional options... below left. browse to your desktop, and one at a time attatch the logs, by clicking ' open '
Like this

[ColG]

If all goes well here's the HJT scan logfile and the MBAM quick scan results. the SAS scan didn't detect anything.

[micky77]

Well done, you are probably infected, a brief look at the log shows     F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\twext.exe, also  possibly
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock32.dll

Carry on with the other scans

[micky77]

Can you enable 'show hidden files ' http://www.bleepingcomputer.com/tutorials/tutorial62.html#winxp

Then locate mswsock32.dllin c:\windows\system32\mswsock32.dll,

twext.exe in C:\WINDOWS\system32\twext.exe

IMJPMIG.EXE in  C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE

ImScInst.exe in C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe

TINTSETP.EXE in C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE

 I know the last three could be related to some asian translation aid, but they have cropped up before, unexplained
 Send those files to Virustotal and if you cannot copy/paste, post the URL from the address bar

http://www.virustotal.com/

Have you recently removed other serious malware ?

One last thing, are you running AVG as well as Avast, this is a bad idea

[DavidR]

See http://www.systemlookup.com/search.php?type=filename&client=malwaresearch-ff&search=mswsock32.dll and http://www.bleepingcomputer.com/startups/twext.exe-23983.html and http://www.threatexpert.com/files/twext.exe.html.