WTHeck is happening on my computer!!

Hi,

Crazy things are happening on my computer!! Most importantly though is that Avast (which is my virus checker) does not work. I have tried to uninstall, & reinstall (I run AIS) and on the reinstall I get to the very end and then it crashes. I have run SAS & Malwarebytes but no viruses found. At times I lose my network and cannot create a connection to the internet. I then have to run system restore in safemode to get it back. It will not run otherwise. Thunderbird (my email client) does not work anymore but of course webmail works. I lost permission to download to my E drive download folder which I almost always download to. I have been having various things happening for a while now, such as script not running on page in Explorer, flash player can’t copy a folder . My big problem started on Sept 4 when I tried to update my flash player. On reboot I lost my network (see screenshot failed) and screenshot repair failed). Basically the DCHP Client service stops running so therefore no network to connect to. If I don’t have a virus then what’s next. I need to get Avast running!

I have attaqched Malwarebytes, OTL and aswMBR screenshot failed. I will attach in next post repair failed and Avast screenshot, not sure if you need it or not but I’ll post anyway!

I also had a virus a while back, see http://forum.avast.com/index.php?topic=97480.0
Cheers,
Janice

Screenshots attached

Hi,

Further to the above, every time my computer crashes, I lose the network, get the message that the DCHP client service has stopped working and then have to run system restore yet again from safe mode to be able to get my network back and connect to the internet.

Cheers,
Janice

I have just opened my Explorer browser and my homepage has been changed to search.conduit.com. This was also the case on Firefox. Definitely not my choice of homepage on either browser.

run the first program in essexboys guide …AdwCleaner

HI,

I have been working all day on my computer and looks like everything is as it should be. Finally got Avast to install and run but can only do so in Safe Mode as regular mode crashes my computer. See attached adwcleaner log. I have also attached blue screen error as well since Avast causes it.

Thanks,
Janice

I have just opened my Explorer browser and my homepage has been changed to search.conduit.com.
did AdwCleaner fix that ?

Malware removers are notified to check the other logs. It may take hours before one arrive so be patient

Hi @nanajana

Re-run OTL.exe.

[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.


:services
Lavasoft Kernexplorer
AvgArCln
AVG Anti-Rootkit

:Files
C:\Program Files\Lavasoft\Ad-Aware

:OTL
DRV - File not found [Kernel | System | Stopped] -- System32\DRIVERS\AvgArCln.sys -- (AvgArCln)
DRV - File not found [Kernel | Boot | Stopped] -- System32\DRIVERS\avgarkt.sys -- (AVG Anti-Rootkit)
IE - HKU\S-1-5-21-18352488-1640588172-2141896131-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT3101810
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O2 - BHO: (no name) - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - No CLSID value found.
O2 - BHO: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found.

:commands
[CREATERESTOREPOINT]
[emptytemp]

[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.


Download DDS and save it to your Desktop from here:
http://download.bleepingcomputer.com/sUBs/dds.scr

Double click dds to run the tool.

* When done, DDS will open two (2) logs:
    1. DDS.txt
    2. Attach.txt

Save both reports to your desktop. DDS.txt and Attach.txt attach back to topic.

HI,

I changed both of my homepages, Firefox first a day or so before I ran adwcleaner and it didn’t go back to search.conduit so I can’t be sure but neither are changing so hopefully the fix is in!

Attached otl & dds logs. I inadvertently checked all users in OTL so hope that didn’t harm the results.

IN dds by the time I read the command to disable all script blocking it may have been too late? I did disable NO Script but don’t know if the scan ran before I did.

HI,

In answer to did AdwCleaner fix that ? I changed both of my homepages, Firefox first a day or so before I ran adwcleaner and it didn’t go back to search.conduit so I can’t be sure but neither are changing so hopefully the fix is in!

Attached otl & dds logs. I inadvertently checked all users in OTL so hope that didn’t harm the results.

IN dds by the time I read the command to disable all script blocking it may have been too late? I did disable NO Script but don’t know if the scan ran before I did.

Malware removers are notified to check the other logs. It may take hours before one arrive so be patient
[/quote]

HI

Please ignore the above as it is already done, doing too many things at once!!!

Cheers
Janice

Hi,

Why am I getting this message and what does it mean, see screenshot below? Any idea how I can get rid of it? Also why can’t I run browser protection on Firefox & Explorer from AIS. When I try to do this neither browser can connect to the internet.

Cheers,
Janice

Hi,

I’m just wondering if anybody is going to read my attached logs, otl & dds as posted above & advise what’s next. Sorry if I’m jumping the gun here!! Trying hard to be patient and if need be will continue to do so, just don’t want to be lost in the shuffle, lol.

Cheers,
Janice

@nanajana

Sorry I forgot to you :slight_smile:

Re-run DDS

Save both reports to your desktop. DDS.txt and Attach.txt attach back to topic.


Download Flash player uninstaller and uninstall flash player
http://helpx.adobe.com/flash-player/kb/uninstall-flash-player-windows.html

Reinstall flash player

Hi,

Have been out of town but have now done as requested. See attached & I have uninstalled & reinstalled flash.

Cheers,
Janice

Hi Janice

[]Download AdwCleaner (by Xplode) on your desktop.
[*]Launch it, click on [Search] and wait for the scan.
[
]When the scan ends, notepad with the report will appears.

[*] Click on the [Delete] Wait for the programme completes his work.
The program will close all active programs. Click OK to confirm that.
On the next two windows that open ( Informations and Restart required ) click OK

[*] The computer will restart and open a notepad ( C:\AdwCleaner[S1].txt ) with the report.
[*] Save the notepad report on the Desktop
[*] Please attach here C:\AdwCleaner[S1].txt

Note: The report will also be stored on C:\AdwCleaner[S1].txt

Hi,

Okay did as requested, log attached.

Cheers,
Janice

Do you still have the problem?

Hi,

Nope, everything now seems to be running fine, I do believe all is well and thank you soooo much for helping me out!!!

Cheers,
Janice

Re-run AdwCleaner and click Uninstall

Please download TFC by OldTimer to your desktop

[*]Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
[*]It will close all programs when run, so make sure you have saved all your work before you begin.
[*]Click the Start button to begin the process. Depending on how often you clean temp
files, execution time should be anywhere from a few seconds to a minute
or two. Let it run uninterrupted to completion.
[*]Once it’s finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

Cheers