Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Home Desktop - Firefox - Server Not Found - Virus? [Closed]

Started by Daniel Christmas Lee , Mar 29 2012 12:19 AM

Please log in to reply

#16
godawgs

Posted 17 April 2012 - 03:44 PM

Teacher

Retired Staff
8,228 posts

Hi Daniel,

I need you to run a tool before continuing with the rest of my previous instructions.

Step-1.

Run WVCheck

Please download WVCheck by Artellos to the desktop.

After the download, run WVCheck.exe (Vista / 7 users may need to right click on the file and click Run as Administrator)
As indicated by the prompt, This program can take a while depending on your hard drive space.
Once the program is done, copy the contents of the notepad file as a reply.

Step-2.

Things For Your Next Post:
1. The WVCheck log

#17
Daniel Christmas Lee

Posted 19 April 2012 - 09:40 AM

Member

Topic Starter
Member
208 posts

Hello,

I ran the ESET scan again, no threats found. Here is the log:

[email protected] as downloader log:
all ok
[email protected] as downloader log:
all ok
[email protected] as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=d68036117144e447988a13975efc5fc5
# end=stopped
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2012-04-17 03:27:02
# local_time=2012-04-17 08:27:02 (-0800, Pacific Daylight Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 12929466 86161525 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=78717
# found=8
# cleaned=8
# scan_time=59688
C:\ProgramData\Spybot - Search & Destroy\Recovery\MeMediaAdVantage1.zip

Win32/Bagle.gen.zip worm (cleaned by deleting - quarantined)

00000000000000000000000000000000 C
C:\TDSSKiller_Quarantine\19.03.2012_09.51.37\mbr0000\tdlfs0000\tsk0003.dta

Win32/Olmarik.AFK trojan (cleaned by deleting - quarantined)

00000000000000000000000000000000 C
C:\TDSSKiller_Quarantine\19.03.2012_09.51.37\mbr0000\tdlfs0000\tsk0004.dta

Win64/Olmarik.R trojan (cleaned by deleting - quarantined)

00000000000000000000000000000000 C
C:\TDSSKiller_Quarantine\19.03.2012_09.51.37\mbr0000\tdlfs0000\tsk0007.dta

Win32/Olmarik.AMN trojan (cleaned by deleting - quarantined)

00000000000000000000000000000000 C
C:\Users\Christmas\Downloads\smart-defrag-setup-beta.exe a variant of

Win32/Toolbar.Widgi application (deleted - quarantined) 00000000000000000000000000000000

C
C:\Users\Christmas\Downloads\Torrents\Windows.7.Ultimate.SP1.32-64Bit.(2011-03-

09)\Windows.7.Ultimate.SP1.32-64Bit.(2011-03-09).iso multiple threats (deleted -

quarantined) 00000000000000000000000000000000 C
C:\Users\DLee\Desktop\InternationalPrimoPDF.exe Win32/OpenCandy application (deleted -

quarantined) 00000000000000000000000000000000 C
C:\Users\DLee\Desktop\SmitfraudFix.exe multiple threats (deleted - quarantined)

00000000000000000000000000000000 C
[email protected] as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=d68036117144e447988a13975efc5fc5
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2012-04-19 01:59:18
# local_time=2012-04-18 06:59:18 (-0800, Pacific Daylight Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 13108885 86340944 0 0
# compatibility_mode=8192 67108863 100 0 113206 113206 0 0
# scanned=151534
# found=0
# cleaned=0
# scan_time=4605

I also ran the WVCheck, here is the log:

Windows Validation Check
Version: 1.9.12.5
Log Created On: 1726_18-04-2012
-----------------------

Windows Information
-----------------------
Windows Version: Windows 7 Service Pack 1
Windows Mode: Normal
Systemroot Path: C:\Windows

WVCheck's Auto Update Check
-----------------------
Auto-Update Option: Download updates and install them automatically.
-----------------------
Last Success Time for Update Detection: 2012-04-18 15:43:22
Last Success Time for Update Download: 2012-04-11 15:21:04
Last Success Time for Update Installation: 2012-04-11 16:50:18

WVCheck's Registry Check Check
-----------------------
Antiwpa: Not Found
-----------------------
Chew7Hale: Not Found
-----------------------

WVCheck's File Dump
-----------------------
C:\Users\Christmas\AppData\Roaming\Azureus\torrents\Windows.7.Anytime.Upgrade.Keygen.5874850.TPB.torrent
Size: 886 bytes
Creation; 23/3/2011 11:5:2
Modification; 23/3/2011 11:5:2
MD5; ad3f127a45c44e1b0ad247f60f98c164
Matched: The words 'windows' and 'keygen' in one sentence.
-----------------------
C:\Users\Christmas\Downloads\Torrents\Windows 7 Anytime Upgrade Keygen.rar.txt
Size: 5292007 bytes
Creation; 23/3/2011 11:6:2
Modification; 23/3/2011 11:6:32
MD5; 386ba2a47f12e49c6053f638d78a628e
Matched: The words 'windows' and 'keygen' in one sentence.
-----------------------
C:\Users\Christmas\Downloads\Torrents\Windows.7.Anytime.Upgrade.Keygen\Windows.7.Anytime.Upgrade.Keygen.rar.txt
Size: 46402 bytes
Creation; 23/3/2011 11:5:2
Modification; 23/3/2011 11:5:45
MD5; 82ab483b4a27be8cfb3ee9658fa0e8ee
Matched: The words 'windows' and 'keygen' in one sentence.
-----------------------
C:\Windows\System32\slwga.dll
Size: 14336 bytes
Creation; 3/6/2011 12:46:28
Modification; 20/11/2010 4:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16385_none_ff27e02604a90885\slwga.dll
Size: 13824 bytes
Creation; 13/7/2009 16:36:22
Modification; 13/7/2009 18:16:15
MD5; 01fe4bdd0b47a7d8bf34d78d2bc23ddb
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16723_none_ff66c6b2047a22cd\slwga.dll
Size: 14336 bytes
Creation; 3/6/2011 12:16:49
Modification; 20/12/2010 21:38:16
MD5; 2008845b41d561fb77b77bbe0045099e
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.20862_none_ffc423831db91904\slwga.dll
Size: 14336 bytes
Creation; 3/6/2011 12:16:49
Modification; 20/12/2010 21:29:6
MD5; 2332de32759ebcc691850e092b2564a6
Matched: slwga.dll
-----------------------
C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_0158f3ee01978c1f\slwga.dll
Size: 14336 bytes
Creation; 3/6/2011 12:46:28
Modification; 20/11/2010 4:21:24
MD5; 19f75d71e4256f5113d64ce2bb66b838
Matched: slwga.dll
-----------------------

WVCheck's Dir Dump
-----------------------
C:\Users\Christmas\Downloads\Torrents\Windows.7.Anytime.Upgrade.Keygen
Size: 0 bytes
Creation; 23/3/2011 11:5:2
Modification; 29/3/2011 13:0:2
Matched: The words 'windows' and 'keygen' in one sentence.
-----------------------

WVCheck's Missing File Check
-----------------------
WVCheck found no missing Windows files.

WVCheck's MBAM Quarantine Check
-----------------------
There were no bad files quarantined by MBAM.

WVCheck's HOSTS File Check
-----------------------
WVCheck found no bad lines in the hosts file.

WVCheck's MD5 Check
EXPERIMENTAL!!
-----------------------
user32.dll - f1dd3acaee5e6b4bbc69bc6df75cef66

-------- End of File, program close at 1728_18-04-2012 --------

Firefox is still acting up whenever I upload something. Chrome has also been acting up... losing connection having to refresh. However that could have just been a problem with my office router.

#18
godawgs

Posted 19 April 2012 - 03:00 PM

Teacher

Retired Staff
8,228 posts

Hi Daniel,

Let's continue. You said that you don't have the same problem with Safari or Chrome, but how about Internet Explorer?
My instructor has come across this problem before and a fresh install of FF was the only thing that corrected it. But we can try the following things first:

Step-1.

Disable the Add-ons in FireFox

You have a lot of add-ons installed in FireFox. Sometime some of them cause FF to have a problem. We need to check that.

Close any open Firefox windows and Start Firefox in Safe Mode. To do that:

Clidk Start > Run
In the Run box type firefox -safe-mode and click OK
In the Firefox Safe Mode Window, click the box beside the following:
- Disable all add-ons: Disables all Firefox Add-ons
Click on Make Changes and Restart.

See if FireFox still has the uploading problem. If the problem is still there, go directly to step 2. If the problem goes away, one or more of the add-ons is the culprit. To find out which add-ons are causing the problem,

Click Tools at the top of the page and click Options on the drop down menu.
On the Options page click the General option at the top of the page and then click Manage Add-ons... on the bottom of that page.
On the Add-ons page click the Extensions icon at the top of the page.
Click the first add-on in the list and click the Enable button.

Then restart FireFox and see if the problem comes back. If it does, that add-on is causing a problem and you should uninstall it using the Uninstall button on the add-on.
Restart FireFox after checking each add-on and repeat numbers 1 thru 4 above until you have found and uninstalled all add-on(s) causing the problem.
If that didn't solve the problem go to the next step.

Step-2.

Check the FF Connection Settings

Open FireFox.
Click Tools at the top of the window and click Options on the drop down menu.
On the Options page click the Advanced icon.
Click the Network tab and click the Settings button in the Connection box.
Op the Connection Settings page make sure that the only radio button that is ticked is the one beside Use System Proxy Settings

If that button was the only one with a tick in it go on to the next step. If you had to change the settings, restart Firefox and see if that corrected the problem. If it didn't, go to the next step.

Step-3.

Reset FireFox Defaults

Click Start > Run
In the Run box type firefox -safe-mode and click OK
Choose what you want to be brought back to its original settings by checking the following options:

Click the box beside:
- Reset toolbars and controls: Removes any made toolbar customization.
- Reset all user preferences to Firefox defaults: Restores the default Options and preference settings and resets the default theme. It also changes back to default all the entries in the about:config page.
- Restore default search engines: Adds back all of the default search engines (Google, Yahoo, eBay, Creative Commons, Answers.com, and Amazon.com) , without removing any added search engines.
Click on Make Changes and Restart.

If that didn't solve the problem we are down to updating FF to the most recent version. The version you are using now is 3.6.28. The most current version is FireFox 11.

Step-4.

Things For Your Next Post:
1. Let me know if any of the options corrected the problem with FireFox
2. Do you have the same problem in Internet Explorer?

Edited by godawgs, 19 April 2012 - 03:01 PM.

#19
Daniel Christmas Lee

Posted 20 April 2012 - 09:57 AM

Member

Topic Starter
Member
208 posts

Hello,

So I'm replying after Step 3. I actually did Step 1 wrong in that I did not disable add-ons. I went on to change the connection settings back to Use System Settings. That did not solve the problem.

Step 3 solved the problem, but I have not tested it yet in the main functioning browser. So I will do that now.

To answer your question about Internet Explorer. I don't use Internet Explorer because it is crap. I would probably quit my job if all I had to use was Internet Explorer.

-----

Update. So Step 3 did not fix the problem after I restarted Firefox. And now that I think about it, I spoke too soon, I dont think Step 3 even solved the problem, I just thought it did because it successfully uploaded a file, but I did not check to see if the "server error" was present... usually when the upload fails, it's an indication the problem is still there, but this time it was successful, so I jumped to conclusion.

Sigh. I wish I could continue using the same browser... ok and how do I get all my preferences back... and customizations...

Edited by Daniel Christmas Lee, 20 April 2012 - 10:03 AM.

#20
godawgs

Posted 20 April 2012 - 03:59 PM

Teacher

Retired Staff
8,228 posts

Hi Daniel,

I understand your concerns about IE. In the past it has been loaded with security holes. But IE9, believe it or not, is more secure out of the box than even Firefox. The decision to use another browser is yours, but IE is a core component of Windows and it should be updated even if you aren't using it. I'm not saying that you aren't updating IE, I'm just reminding you to keep it updated.

I found something else concerning FF. Also, in this round we need to get an Anti-Virus on the system.

Step-1.

You don't have Anti-Virus protection installed.
It is very important that you have Anti-Virus software running on your machine. In fact, it is a requirement for my continuing to help you. By having an Anti-Virus program running, files will be scanned as you use them, download them, or open them. If a virus is found in one of the items you are about to use, the Anti-Virus program will stop you from being able to run that program and therefore infect yourself. They also protect against spyware and other potentially unwanted software.
*NOTE* One Anti-Virus program is a must have! But never more than one, as this can and will cause conflicts and false readings. I have listed a couple of free AV's below which are as good as any paid subscription AV, as long as you allow them to update themselves.

Anti-Virus Programs

Please go to our Free Anti-Virus Software page.

Choose one of the Anti-Virus programs.
- I use and would recommend Microsoft Security Essentials. It integrates into the Windows system well and seems to play better with other programs than some of the other Anti-Viruses
Click on the link to download the program set-up file to the desktop.
Right click the set-up file and click Run as Administrator to install the program
Follow the on screen prompts to install and set the program up.

My research indicates that the DownThemAll add-on for Firefox can cause the symptoms you are describing.

Step-2.

Open a new tab in Firefox.
In the Address bar at the top type about:config and press the Enter key.
Click the I'll be careful, I promise button on the Warning page.
In the Filter box at the top of the page type: network.http Firefox will go to the network.http settings. Look for the following settings:
- network.http.max-connections
- network.http.max-connections-per-server
- network.http.max-persistent-connections-per-proxy
- network.http.max-persistent-connections-per-server
Tell me the following things:
- Are those settings listed in regular type are are they bold?
- Tell me what the settings are for each of the lines, ie; network.http.max-connections;30

Step-3.

Things For Your Next Post:
1. Tell me how the Anti-Virus installation went.
2. An answer to the questions about the network.http settings

#21
Daniel Christmas Lee

Posted 23 April 2012 - 10:28 AM

Member

Topic Starter
Member
208 posts

network.http.max-connections
network.http.max-connections-per-server
network.http.max-persistent-connections-per-proxy
network.http.max-persistent-connections-per-server
Are those settings listed in regular type are are they bold?

1. 30
2. 15
3. 8
4. 6
5. Settings are not in bold.

And I just installed the anti virus... running a scan after it updates. I also uninstalled the DownloadThemAll extension. Havent tested to see if the problem still exists for I am at work, will do so at end of day. Thank you!

Edited by Daniel Christmas Lee, 23 April 2012 - 10:34 AM.

#22
godawgs

Posted 23 April 2012 - 02:32 PM

Teacher

Retired Staff
8,228 posts

Hi Daniel,

The network.http settings look OK. In re-reading this thread I noticed in your post #19 that you said that you didn't restart FF with the add-ons disabled. You have so many add-ons and I can't rule out the possibility that one of them is causing the problem without disabling them. So I want to try that again.

Step-1.

Disable the Add-ons in FireFox

You have a lot of add-ons installed in FireFox. Sometime some of them cause FF to have a problem. We need to check that.

Close any open Firefox windows and Start Firefox in Safe Mode. To do that:

Click Start > Run
In the Run box type firefox -safe-mode and click OK
In the Firefox Safe Mode Window, click the box beside the following:
- Disable all add-ons: Disables all Firefox Add-ons
Click on Make Changes and Restart.

See if FireFox still has the uploading problem. If the problem goes away, one or more of the add-ons is the culprit.

Let me know if you still have the problem or if disabling all add-ons cured the upload problem. If disabling the add-ons cured the problem, we can start the process of finding out which add-on(s) caused it.

#23
Daniel Christmas Lee

Posted 24 April 2012 - 09:35 AM

Member

Topic Starter
Member
208 posts

Unfortunately, disabling all add-ons did not solve the problem.

#24
godawgs

Posted 24 April 2012 - 04:11 PM

Teacher

Retired Staff
8,228 posts

Hi Daniel,

Well I'm afraid we are at that point. Something in the FF settings somewhere is causing the problem and we haven't been able to locate it. The only thing we can try now is creating another profile, but the new profile would need to erase all of the settings in the previous profile. And if the change has been made in some other part of the program the problem will still be there. As I said earlier, my instructor has had a couple of these and the only thing that solved the problem was a complete uninstall and removal of all remnants of the old version and install of the new version.

If it helps any Mozilla has started sending URGENT warnings saying that Firefox 3.6.28 will be vulnerable to security attacks very soon. And as the newest version of Firefox is now version 12, you are walking a dangerous line by keeping version 3.6.28.

You can backup your bookmarks. And after creating the new profile or installing the new version we will make sure it is running OK and then you can import the bookmarks.

Let me know what you want to do and I'll post the steps we need to take.

#25
Daniel Christmas Lee

Posted 24 April 2012 - 05:09 PM

Member

Topic Starter
Member
208 posts

This is sad. I like keeping old versions because of the UI, I am more familiar with how the way things used to "look."

For example, my windows desktop scheme is like Win 98, but I run Win 7.

I am actually worried about my extensions not working with the newer version of Firefox. I mean some extensions I can't live without... but yeah I think it is time to upgrade...

Gmail, just today, warned me that their features don't function well with the old Firefox I am using...

So I think that is the only way to go... download the new version 12 of Firefox.

However, I am not going to do it right now, I'll have to do it by end of week to finish my work week without that much complication in case something goes wrong.

Please allow me time to update my Firefox, and I will report back as soon as possible. Thank you!

#26
godawgs

Posted 24 April 2012 - 09:57 PM

Teacher

Retired Staff
8,228 posts

Hi Daniel,

I would rather you just keep the version of Firefox you have now until you get to a point where we can uninstall and completely remove Firefox 3.6.28 for a couple of reasons:

1. Firefox made a major upgrade when it released Firefox 4.0 and Firefox and other tech sites highly recommend a clean install of major upgrades. Everything from version 4 thru the current version are considered updates.

2. If we don't do a clean install of version 12 after completely removing 3.6.28 there will be remnants of the old version left behind in the registry and other places. That could mean that the problem you are experiencing will still be there.

As for the add-ons

On the Menu bar click Tools, then Options
On the Options page click the Manage Add-ons button.
On the Add-ons page click the Extensions icon
Copy down all of the extensions
Click the red X in the upper right corner to close the Add-ons page
Click Cancel on the Options page to close it.
Back on the Firefox window, in the Address Bar type https://addons.mozilla.org/en-US/firefox/ and press the Enter key. This will take you to the Firefox Add-ons page.
In the Search box type the name of a add-on and click the green arrow --> to search for the add-on. When the page for that add-on comes up it should tell you in the description of the add-on what version of Firefox the add-on is compatible with.
Do this for all add-ons to find out which ones are compatible with ver12.

Firefox is supposed to do a compatibility check with add-ons but sometimes something slips through the cracks.

#27
Daniel Christmas Lee

Posted 25 April 2012 - 10:06 AM

Member

Topic Starter
Member
208 posts

Thank you Godawgs for the detailed instructions!
Please be advised that I have a busy work week, so it might be a while (next week) until I can sit down and really figure out the implications of my drastic move to newer software.

Right now I am can survive at work with my old version of Firefox. But you're right, this must change if I don't want major problems in the future.

Here's another thing, I plan on formatting my hard drive, backing up all work files and starting from scratch since my workstation is cluttered with random stuff. Call it Spring cleaning.

Either way I will touch base here at the end of the week to reevaluate my time.

I appreciate your help!

Oh yes, I almost forgot. I guess we are doing this for my home computer too? Since I am running an old version of Firefox back at home, I would think it's time for a change there too.

Oh wells!

#28
godawgs

Posted 25 April 2012 - 10:39 AM

Teacher

Retired Staff
8,228 posts

Here's another thing, I plan on formatting my hard drive, backing up all work files and starting from scratch since my workstation is cluttered with random stuff. Call it Spring cleaning.

You plan on formatting the hard drive of this computer (the work computer)? If so we won't need to do the uninstall and reinstall of Firefox as the reformat will wipe the hard drive and you can start with a fresh install of FF12. We also won't need to clean up the tools we've used on it as the reformat will take care of those also. Just let me know what you want to do.
And we can look at the home computer when ever you're ready. :thumbsup:

#29
godawgs

Posted 29 April 2012 - 11:43 AM

Teacher

Retired Staff
8,228 posts

Hi Daniel,

Do you still need assistance?

#30
Daniel Christmas Lee

Posted 30 April 2012 - 10:23 AM

Member

Topic Starter
Member
208 posts

Hello Godawgs,

My apologies. I do still need assistance, but a lot is going on right now in terms of work and personal life. I am in the process of moving, changing living location, and the company I work for just got acquired. So everything is up in the air.

It looks like I am not formatting my work computer hard drive any time soon because it would be a huge hassle bring my workstation back to normal functionality in terms of software and preference. I could barely let go of this ancient Firefox!

Can we schedule to Completely Remove Firefox this coming Friday since it's the end of the work week? Well, I'm more so just letting you know that I should be able to carry out any instructions regarding Completely Removing Firefox from my system.

Then. Doing a clean install of a fresh and most up to date version of Firefox.

Please advise. Thank you!

As for my home computer... again, I apologize... I am moving and won't be available until the weekend, that is if I have time to sit down at my home computer and figure it out.

All in all, I will make time this weekend, starting Friday, May 4th, after work... oh crap... there's Cinco de Mayo, guess I might have to do all this drunk