Google and other sites being blocked..Need Help!

Viruses and worms
1

The attached image is what pops up every single time I try to connect to youtube, google, and many other sites. I have run my antivirus multiple times but have come up with nothing. I haven’t done anything to the computer as it is my secondary one that my little brother uses and he probably downloaded something he shouldn’t have. Where it says to unlock it makes you complete an offer which shows it isn’t a legitimate block by an ISP. Any help at all would be greatly appreciated. Thank You.

2

possible a trojan ransome
if able to…follow guide and attach logs. http://forum.avast.com/index.php?topic=53253.0

AdwCleaner
Malwarebytes
OTL
aswMBR

3

Here are the logs.

4

Last log

5

malware removers are notified, check back later today…

you seems to still have Norton installed…
never install multiple AV as this will give you a slow machine, mysterious windows errors and false detections
uninstall Norton, then run the Norton removal tool to clear any leftover files that may conflict
tool found here #26a http://singularlabs.com/uninstallers/security-software/

i see you run IObit system care…
some info about IObit company you may want to read

http://www.malwarebytes.org/forums/index.php?showtopic=29681
http://www.malwarebytes.org/forums/index.php?showtopic=30989
http://www.malwarebytes.org/forums/index.php?showtopic=33217

6

Hi I would agree that you need to remove the Comcast version of Norton

Let me know if this cures it

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\XDva393.sys -- (XDva393)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\XDva391.sys -- (XDva391)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\XDva390.sys -- (XDva390)
[2013/04/02 17:51:26 | 000,001,839 | ---- | M] () (No name found) -- C:\Documents and Settings\midwest\Application Data\Mozilla\Firefox\Profiles\9sajpn3l.default\extensions\tcbwbmaoew@tcbwbmaoew.org.xpi
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {5B291E6C-9A74-4034-971B-A4B007A0B315} - No CLSID value found.
O16 - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab (Reg Error: Key error.)
@Alternate Data Stream - 1171 bytes -> C:\Program Files\Common Files\Microsoft Shared:T6L4X06f5Y9QVUGobm8
@Alternate Data Stream - 1164 bytes -> C:\Program Files\Common Files\System:RAjW39kqV2caAfuXyYWXsZH46v2
@Alternate Data Stream - 1162 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:CQAUo9KZeO9adaTOnejHTDbY8
@Alternate Data Stream - 1062 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:grPdiPJxco4NG1Smwv1ps

:Files
C:\WINDOWS\tasks\At*.job

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

7

Latest OTL log. Really appreciate all this help.

8

OK the host file was not reset

Could you go to C:\Windows\System32\drivers\etc
Right click the Host file and select open with Notepad

Delete all the lines in the file
Paste in the following lines
127.0.0.1 localhost
::1 localhost

Then close notepad and save as Host there will be no extension after it to ensure that select all files in the drop down box

9

Alright got that done and do I need to restart the system. Also is there anything else that needs to be done to fix the computer?

10

Could you restart and run a fresh OTL log, then check google out

11

Everything is working now thanks a lot. I can get on to all the sites if I use Chrome but using IE I cannot get onto google. Hopefully that is just minor and won’t cause all the problems again. If you have a solution for that great if not no worries. I will post the last log just in case. Thanks a ton.

12

Lets try this first

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
IE - HKCU\..\SearchScopes\{91607fa7-3c2f-4f90-93e3-d5337a6b0ac2}: "URL" = Playbryte-fa-outbrowse/search/redirect/?type=default&user_id=a1efe145-2adc-4bd9-a844-8a60b8e60073&query={searchTerms}
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Activities present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
[2013/04/04 16:32:10 | 000,000,342 | ---- | M] () -- C:\WINDOWS\tasks\ROC_JAN2013_TB_rmv.job

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Retry Google with IE and if it fails open Avast
Select Browser cleanup
Run the tool
Select IE
Select reset