[Tre1208]

Farbar Service Scanner Version: 03-05-2014
Ran by Main (administrator) on 04-05-2014 at 15:30:07
Running from "C:\Documents and Settings\Main\Desktop"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Security Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================

Other Services:
==============

File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)
0x0700000004000000010000000200000003000000050000000600000007000000
IpSec Tag value is correct.

**** End of log ****

[Advertisements]

Ok, your services are fine, so let's take a look at the Cryptographic error.



Please follow this link to Microsoft's website: http://support.microsoft.com/kb/822798

Once there, scroll down to Resolution and then click on Microsoft Fix-it.

Once done, please try IE again and let me know the results.

[pystryker]

Ok, your services are fine, so let's take a look at the Cryptographic error.



Please follow this link to Microsoft's website: http://support.microsoft.com/kb/822798

Once there, scroll down to Resolution and then click on Microsoft Fix-it.

Once done, please try IE again and let me know the results.

[Tre1208]

ok. I ran the fix it program , resarted and tried to reinstall IE8 again. Same Cryptographic error.

[Tre1208]

I was reviewing a few of our recent post. One in particular when I posted the log of when we pinged yahoo and google and it said they are accessible. Why do you think it said that when I can't really access them?

[pystryker]

I was reviewing a few of our recent post. One in particular when I posted the log of when we pinged yahoo and google and it said they are accessible. Why do you think it said that when I can't really access them?

They are accessible, as there is nothing wrong with your connection to the internet. The problem lies somewhere with these 2 browsers that are having problems. We can get to the sites, but we need to fix what is wrong with the browsers so they can access them.

Let's run Windows All In One Repair and check your hard drive.

Step 1: Windows All In One Repair

Download Windows Repair (All In One) from here.

It will allow you to repair common issues with your computer such as firewall, file permission, and Windows Update problems. When using this tool you can select the particular fixes you would like to launch and start the repair process.

Please download the tool to somewhere you can find it.

Double click to open and follow the prompts to install.

Once installed click on the tab Start Repairs and the button Start

At the list that presents put a check (tick) in the following:

Reset Registry Permissions
Reset File Permissions
Register System Files
Repair WMI
Repair Windows Firewall
Repair Internet Explorer
Repair MDAC & MS Jet
Repair Hosts File
Remove Policies Set By Infections
Repair Icons
Repair Winsock & DNS Cache
Remove Temp Files
Repair Proxy Settings
Unhide Non System Files
Repair Windows Updates
Repair CD/DVD Missing/Not Working

Also put a check in the Restart/Shutdown System When Finished (lower right) box.

and in Restart System

Then click on the Start button if it doesn't do it automatically

If it asks you to back up your system click No and continue

When it is finished come back and tell me how it went.


Step 2: System File Checker

Click on the Start Button and in the search box, type Command Prompt

When you see the Command Prompt on the list, right click on it and select Run as Administrator

When command prompt opens, type this in at the prompt: sfc /scannow

It may ask you if you want to run this at the next restart, select yes, and restart the machine.

Once it has finished scanning, type this in the command prompt window: copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt

This will create a file, cbs.txt on your Desktop Please attach this to your next post.

[Tre1208]

This is what i'm getting with the sfc /scannow. I get a window that says "windows file protection". It basically saying it checking to see if all windows protected file are in tact. I did let it finish that and nothing else happened afterwards. I type the cbs.txt command and the system couldn't find the path. And I got the same Cryptographic Error.

[Tre1208]

^{I did run the windows all in one}

[pystryker]

Ok, let's try this method to get to the cbs log.

Click the Start button then click Computer.

Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.

Find and double click on the Logs folder.

Right-click on the CBS folder, and look for cbs.log. Double click on it, and it will ask you what program you would like to use to open it, use Notepad

Please post the log in your next reply.

[Tre1208]

I've went to the directory you ask and I can't find a logs folder. I see different logs in the windows folder but no cbs. I also did a search on my computer and it can find logs or cbs. Funny though, I never seen a windows search that searches only the desktop or the web. I found the other search and it came back with no results on either.

[pystryker]

I've went to the directory you ask and I can't find a logs folder. I see different logs in the windows folder but no cbs. I also did a search on my computer and it can find logs or cbs. Funny though, I never seen a windows search that searches only the desktop or the web. I found the other search and it came back with no results on either.

Ok, let's hold off on the browser issues for the moment. I'd like to sweep your machine for any malware remnants, and check for out of date programs. Once we've gotten rid of any remnants, we'll re-address the browser problems.



Please disable your antivirus for the duration of my instructions. Don't forget to re-enable them after you have completed the steps.

Step 1: Scan with Malwarebytes


Please download Malwarebytes Anti-Malware to your desktop
Install the progamme and select update
Once it has updated select Settings > Detection and Protection
Tick Scan for rootkits



Go back to the Dashboard and select Scan Now



If threats are detected, click the Apply Actions button, MBAM will ask for a reboot.





On completion of the scan (or after the reboot) select View Detailed Log
Select Export > Select text file and save to the desktop



Step 2: ESET Online Virus Scan

Please note: You can use Internet Explorer or Firefox for this step.

If you use Firefox, you will be prompted to download esetsmartinstaller_enu.exe. Please do so, then double click it to install it.

Please click on this link and then click the ESET Online Scanner bar ---->

• Select the option YES, I accept the Terms of Use then click on Start
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked.
• Make sure that the option Scan archives is checked.
• Now click on Advanced Settings and select the following:
• Scan for potentially unwanted applications
• Scan for potentially unsafe applications
• Enable Anti-Stealth Technology
• Now click on Start
• The virus signature database will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically. The scan may take several hours.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• Now click on Finish
• Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
• Copy and paste that log as a reply to this topic.

Step 3: SecurityCheck Scan


Download Security Check by screen317 from here or here.

• Save it to your Desktop.
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• NOTE: If SecurityCheck aborts and you get the following message: UNSUPPORTED OPERATING SYSTEM! ABORTED! try rebooting the system and then run SecurityCheck again.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Things I need to see in your next post:

• ESET Scan Log
• MBAM Log
• SecurityCheck Log

[Tre1208]

ok, here's what's happening. Every time I try to install Malwarebytes,  get a Error. (Internal error: expression error ' Runtime Error(at 57:177): External exception E06D7363.'. I wont even allow me to access the download site.

[pystryker]

ok, here's what's happening. Every time I try to install Malwarebytes,  get a Error. (Internal error: expression error ' Runtime Error(at 57:177): External exception E06D7363.'. I wont even allow me to access the download site.

That error is usually caused by a corrupt installation of MBAM. Let's completely eradicate any traces of it, and then try a re-install.


Please download mbam-clean.exe from here to your desktop and save it.

Please close all open applications and temporarily shutdown your antivirus to avoid any conflicts when running the tool.

Locate the file mbam-clean.exe and double-click to run it and follow the onscreen prompts.

It will ask to restart your computer, please allow it to do so very important

After the computer restarts, ensure that your antivirus is enabled and download the latest version of Malwarebytes Anti-Malware from here and save it to your desktop.

Now close all open applications including your browser and again temporarily disable your antivirus as before and launch the Malwarebytes installer you just downloaded.

If you have never tried the PREMIUM version Trial and wish to do so then leave the Trial checkmark enabled otherwise please make sure to uncheck the Trial checkmark near the end of the installation if you do not wish to try the PREMIUM version features for 14 days.

Please make sure you check for updates at the end of the installation as well.

Make sure you have re-enabled your Anti-Virus/Internet-Security applications.


If the re-install goes successfully, please proceed with the MBAM scan and the rest of the steps.

[Tre1208]

Did you want me to skip to your next step with ESET Online Virus Scan? I tried Malwarebytes several times and it didn't work so i'm just going to wait till your next response before I touch anything.

[Tre1208]

Sorry. Must have posted at the same time. I'm following your step now.

[Tre1208]

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=8
# iexplore.exe=7.00.6000.21376 (vista_ldr.140224-1641)
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=7f33c75a27b6444fa086ed2f3b90c637
# engine=18162
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-05-07 04:30:39
# local_time=2014-05-07 12:30:39 (-0500, Eastern Daylight Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=1026 16777214 0 2 27942843 27942843 0 0
# compatibility_mode=5892 16776574 100 100 230977985 256452315 0 0
# scanned=82615
# found=2
# cleaned=0
# scan_time=4346
sh=FB0F4B8B72FAA03B4871092E42DBF62437280194 ft=1 fh=b02086738a4c4172 vn="a variant of Win32/Bundled.Toolbar.Ask.D potentially unsafe application" ac=I fn="C:\Documents and Settings\Main\Desktop\rasetup.exe"
sh=14DEA19C346BAA184CD96010C8788D02418D78AB ft=1 fh=2852b0fb4a5772c0 vn="a variant of Win32/Bundled.Toolbar.Ask.E potentially unsafe application" ac=I fn="C:\Documents and Settings\Main\My Documents\APNSetup.exe"