#46
Senior Member
Profile: Join Date: Nov 2007
Posts: 64
Computer Experience:
SOn of a....
WHile there are no .dll's for any of the above, each one has a .exe on my drive. The problem was gone for both my laptop and PC until last night, when both computers are now not going back to previous pages, but trying to go to an ad .server and I have to hit back multiple times. I don't know what to do! I have a firewall, i do everything I should. I don't go to websites I haven't gone to for years and years and never had a previous problem.
#47
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Good that those dlls aren't present. I'll have to double check to be sure, but I believe there should be an exe for each.DNS ? If not, disable your internet connection and close all open windows. Scan again with HijackThis and fix the following entries. If Winpatrol alerts you to changes, allow them.
#48
Senior Member
Profile: Join Date: Nov 2007
Posts: 64
Computer Experience:
Not sure
I know it is supposed to be set to automatically find DNS settings. That is mandated by corporate IT. AVG did find a trojan and attrib.dll. It deleted and quaruntined. Still want me to do HJT ?
#49
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Yes, do the HJT instructions.
#50
Senior Member
Profile: Join Date: Nov 2007
Posts: 64
Computer Experience:
Seems OK
Seems OK, I will post an HJT log of my desktop that also has the problem again shortly. Here is the HJT post what I was instructed to do.SP2 (WinNT 5.01.2600)Ad -Aware 2007\aawservice.exehttp://www.ebsco.com/intranet http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://datapro65.curtiscirc.com/wias...on/install.cab http://go.microsoft.com/fwlink/?linkid=58813 http://www.kaspersky.com/kos/eng/par...an_unicode.cab http://download.bitdefender.com/reso...an8/oscan8.cab http://www.update.microsoft.com/micr...?1188952783593 http://acs.pandasoftware.com/actives...ree/asinst.cab http://datapro65.curtiscirc.com/wias...n/ZaboIEen.cab Ad -Aware 2007\aawservice.exe
#51
Senior Member
Profile: Join Date: Nov 2007
Posts: 64
Computer Experience:
argh
I was wrong, problem persists. AVG virus shield keeps finding a trojan in Systems VOlume, or something like that, its called restore and then a b bunch of numbers and letters. I heal it, it says it healed, but it keeps reoccurring. Yet, when I do an AVG virus scan, not threat is found.
#52
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
That's not a problem. It's past System Restore points which we can clear. Have the other symptoms been put to rest?Clear past system restore points and create a new one. Verify a new restore point was created.
#53
Senior Member
Profile: Join Date: Nov 2007
Posts: 64
Computer Experience:
still persistent
Problem with back button in IE still exists.
#54
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Please post a fresh dss log and be sure to let me know which machine it's from.
#55
Senior Member
Profile: Join Date: Nov 2007
Posts: 64
Computer Experience:
Here ya go
Here is the deckards main.txt file and extra.txt file:SP2 (WinNT 5.01.2600)Ad -Aware 2007\aawservice.exedss .exehttp://www.ebsco.com/intranet http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://datapro65.curtiscirc.com/wias...on/install.cab http://go.microsoft.com/fwlink/?linkid=58813 http://www.kaspersky.com/kos/eng/par...an_unicode.cab http://download.bitdefender.com/reso...an8/oscan8.cab http://www.update.microsoft.com/micr...?1188952783593 http://acs.pandasoftware.com/actives...ree/asinst.cab http://datapro65.curtiscirc.com/wias...n/ZaboIEen.cab Ad -Aware 2007\aawservice.exeHJT www.007guard.com www.008k.com www.00hq.com www.032439.com
#56
Senior Member
Profile: Join Date: Nov 2007
Posts: 64
Computer Experience:
extra
Here is the extra file. All this is for my laptop. I haven't gotten to the desktop yet.CPU 0: Intel(R) Core(TM)2 Duo CPU T7100 @ 1.80GHzCPU 1: Intel(R) Core(TM)2 Duo CPU T7100 @ 1.80GHzJS ;.JSE;.WSF;.WSH(new local, admin, net ready) (admin) (admin) (admin) Ad -Aware 2007 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}DNS /dns02.dnsebsco.com. No authentication protocol was available.DNS /dns02.dnsebsco.com. The failure code from authentication protocol KerberosDNS /dns01.dnsebsco.com. No authentication protocol was available.DNS /dns01.dnsebsco.com. The failure code from authentication protocol KerberosDNS /dns01.dnsebsco.com. No authentication protocol was available.
#57
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Nothing in those logs to suggest a problem. Close all browser windows and open Internet Options in the Control Panel. Select the Programs tab and click Reset Web Settings. Homepage is optional. Restart your browser and let me know if there's any change.
#58
Senior Member
Profile: Join Date: Nov 2007
Posts: 64
Computer Experience:
Still a problem
Problem still exists, this latest time instead of going back to previous page, it attempted to take me too:
#59
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Did you install a custom HOSTS file a while back, possibly just prior to this problem with the Back button?
#60
Senior Member
Profile: Join Date: Nov 2007
Posts: 64
Computer Experience:
Yes
Yes I did, I installed the MVP or MVHosts file from your prevention list.
All times are GMT +1. The time now is 12:02 .
