Firefox/Google

General Topics
1

I have just installed avast! on my laptop running XP3 and now Firefox/Google doesn’t work any more. Firefox loads but on trying to search using Google all I get is the egg timer. MSN’s “bing” works ok but the PC seems to be running slower. There is no other anti-virus software installed. Any suggestions please?

2

Thats strange,did google work before you installed Avast ? Where did you download Avast from. Download HijackThis, run the program,choose scan and save a log file.Copy/paste the log here.This will tell us whats running on your pc.

http://filehippo.com/download_hijackthis/

3

Both firefox and google searches work fine on my system, XP Pro SP3.
If it works on Bing then there should be absolutely no difference on other search engines as avast doesn’t know (or care) what search engine or browser you use.

Have (or did) you another AV installed in this system, if so what was it and how did you get rid of it ?

What is your firewall ?

4

Reply to micky77 & DavidR - thanks for your replies and sorry about delay in getting back to you. I did have AVG installed which I uninstalled using REVO. I downloaded avast from File Hippo. I’m running Windows firewall. Regards, ColG

5

PS

Google worked fine previously. The reason I dumped AVG was that updating failed and I was unable to re-install it.

6

Run the program I suggested,it may shed some light. You may have bad host entries.Copy/paste the log please. I wonder why AVG did not update ?

7

Thanks micky77. I’ll do as you suggest at the earliest opportunity - I’m working from a different PC away from home at the moment.

8

Good stuff. I find it strange that AVG would not update, or reinstall.Then google has problems. These can be classic signs of infection.
If you do not have these program,download,install,update,run and post the logs, along with the HJT log

http://filehippo.com/download_malwarebytes_anti_malware/

http://filehippo.com/download_superantispyware/

Of course, I could be completely wrong, I usually am ;D

9

Excuse my ignorance - I’m new to forums - but how do I “post” the results of the scans? I’ve tried the copy and paste process but, as you are all probably aware, it doesn’t work! Advice gratefully received please.

10

Either post is split over two or more posts or attach the log file to the post, easiest.

When you click the Reply button, there is an Additional Options link, this expands the options to attach a file, that can be an image file or a text file (.log or .txt).

11

Ok With HJT, choose scan and save a logfile,the file can then be found at C\program files\trend micro\hijackthis\hijackthis log

With MBAM and SAS, when the log results appear in txt, go to file, save as, then save to your desktop. Come back here, open new reply, look for the [url=http://+additional options…]+additional options…[/url] below left. browse to your desktop, and one at a time attatch the logs, by clicking ’ open ’
Like this

12

If all goes well here’s the HJT scan logfile and the MBAM quick scan results. the SAS scan didn’t detect anything.

13

Well done, you are probably infected, a brief look at the log shows F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\twext.exe, also possibly
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock32.dll

Carry on with the other scans

14

Can you enable 'show hidden files ’ http://www.bleepingcomputer.com/tutorials/tutorial62.html#winxp

Then locate mswsock32.dllin c:\windows\system32\mswsock32.dll,

twext.exe in C:\WINDOWS\system32\twext.exe

IMJPMIG.EXE in C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE

ImScInst.exe in C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe

TINTSETP.EXE in C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE

I know the last three could be related to some asian translation aid, but they have cropped up before, unexplained
Send those files to Virustotal and if you cannot copy/paste, post the URL from the address bar

http://www.virustotal.com/

Have you recently removed other serious malware ?

One last thing, are you running AVG as well as Avast, this is a bad idea

15

See http://www.systemlookup.com/search.php?type=filename&client=malwaresearch-ff&search=mswsock32.dll and http://www.bleepingcomputer.com/startups/twext.exe-23983.html and http://www.threatexpert.com/files/twext.exe.html.

16

Hello David,I was sure about twext.exe,
edit
and yes you are correct about mswsock32.dll, thank you for that

As with the others,they seem to be harmless asian translation aids, however, Prevx has them as cloaked malware, I doubt this very much

I think its ok to fix F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\twext.exe
Run HJT again, choose scan only, put a tick next to that entry, choose fix selected.

Regarding mswsock32.dll in O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock32.dll, please read this link http://www.bleepingcomputer.com/tutorials/tutorial59.html
I am no expert with this program, but this entry may explain your problems with google.So i would try running LSP-Fix

Also, as DavidR pointed out mswsock32.dll in the 010 list is Virus.Win32.AutoRun.fj http://www.systemlookup.com/search.php?type=filename&client=malwaresearch-ff&search=mswsock32.dll It would be wise to run Autorun Eater, this will find bad autorun.inf files and delete them http://download.cnet.com/Autorun-Eater/3000-2239_4-10752777.html You may want to insert any flash drives etc, to look for these files.Is it possible thats where you got this infection.
After that, reboot, and report back with another hjt log

17

Just want to say thanks for the most helpful advice from micky77 and DavidR. I’ve identified and rectified a number of problems on my PC after following their suggestions and - touch wood - it’s running ok now. Thanks again and best wishes.

18

You’re welcome, glad that your system is working as it should.