unable to download anything once more

August 11, 2013 at 06:17:56
Specs: Windows Vista
about a month ago I had a problem of being unable to download anything - eventually I went to system restore and it worked ! - however it has now come back again and nothing can be downloaded ! - obviously the problem was bigger than I thought ! - any simple ideas ? ( also the computer is in Dutch which cant be changed so any solutions need to be in the terms of press the third button from the left etc ! )

See More: unable to download anything once more

Report •

#1
August 11, 2013 at 08:42:41
Here is a video on how to change language in Windows Vista: http://www.youtube.com/watch?v=vMhM...

Once you have that changed, I would suggest the following:

1. Disable system restore (viruses, malware, etc.) can all reside in System restore, and an infection can then return because it was in that protected area.
2. Need to determine the infection you have and attempt to clean.
2a. So start with running an ESET online scan here (and also can check your local Antivirus for any clues): http://www.eset.com/us/online-scanner/
3. Then determine how to remove the infection, remove it, and then re-enable system restore.

Please let us know what you are infected with (if anything) and include as many details as possible for the most effective troubleshooting. Logs, etc. Thanks!

www.standby-it.com

message edited by jpag3074


Report •

#2
August 11, 2013 at 20:28:13
Ahh, the Dutch OS. That rings a bell. Here's the previous thread:

http://www.computing.net/answers/se...

I guess you've determined the OS to be Vista?

Again, as I mentioned in your previous thread, I'm not sure if changing the language will change all of the original language references. But it might for Vista. We kinda assumed last time you had XP.

It could be you're experiencing the same problem because you did the same thing again--either changed a setting, installed some 'tune-up' software or went to a site that altered things.

Scans last time apparently turned up no infections.

If all else fails I guess you can try a restore again. Maybe go back to an earlier date.

message edited by DAVEINCAPS


Report •

#3
August 13, 2013 at 00:32:50
thanks for the suggestions ! - however cant download the anti virus to run it !

have had a few problems since the last huge problem so have been using system restore a few times - now it says something different :

er zijn geen herstelpunten op the systeemschiyf van uw computer gemaakt. Open systeembeveibing als u een hergelpunt wist maken

there are no restore points created on the system disk of your computer. Open systeembeveibing if you did make a hergelpunt


but have no idea what you so from there !


Report •

Related Solutions

#4
August 13, 2013 at 00:43:21
"however cant download the anti virus to run it !"

Here is my info on running ESET. It includes what to do, when you can't download it.

Run ESET Online Scanner, Copy and Paste the contents of the log please. This scan may take a very long while, so please be patient. Maybe start it before going to work or bed.
http://www.eset.com/us/online-scann...
http://www.eset.com/home/products/o...
You may have to download ESET from a good computer, put it on a flash/thumb/pen drive & run it from there, if your comp is unbootable, or won't let you download.
Create a ESET SysRescue CD or USB drive
http://kb.eset.com/esetkb/index?pag...
How do I use my ESET SysRescue CD or USB flash drive to scan and clean my system?
http://kb.eset.com/esetkb/index?pag...
Configure ESET this way & disable your AV.
http://i.imgur.com/3U7YC.gif
How to Temporarily Disable your Anti-virus
http://www.bleepingcomputer.com/for...
Which web browsers are compatible with ESET Online Scanner?
http://www.nod32.fi/eset-online-sca...
http://kb.eset.com/esetkb/index?pag...
Online Scanner not working
http://kb.eset.com/esetkb/index?pag...
Why Would I Ever Need an Online Virus Scanner?
I already have an antivirus program installed, isn't that enough?
http://www.squidoo.com/the-best-fre...
Once onto a machine, malware can disable antivirus programs, prevent antimalware programs from downloading updates, or prevent a user from running antivirus scans or installing new antivirus software or malware removal tools. At this point even though you are aware the computer is infected, removal is very difficult.
5: Why does the ESET Online Scanner run slowly on my computer?
If you have other antivirus, antispyware or anti-malware programs running on your computer, they may intercept the scan being performed by the ESET Online Scanner and hinder performance. You may wish to disable the real-time protection components of your other security software before running the ESET Online Scanner. Remember to turn them back on after you are finished.
17: How can I view the log file from ESET Online Scanner?
http://kb.eset.com/esetkb/index?pag...
http://www.eset.com/home/products/o...
The ESET Online Scanner saves a log file after running, which can be examined or sent in to ESET for further analysis. The path to the log file is "C:\Program Files\EsetOnlineScanner\log.txt". You can view this file by navigating to the directory and double-clicking on it in Windows Explorer, or by copying and pasting the path specification above (including the quotation marks) into the Start ? Run dialog box from the Start Menu on the desktop.
If no threats are found, you will simply see an information window that no threats were found.
http://www.trishtech.com/security/s...

message edited by Johnw


Report •

#5
August 13, 2013 at 23:28:46
great ! - managed to run the anitvirus ( I saved it on flash from another computer ) and the results were :

A varient of win 32 / Adware Yontoo - 4 of the viruses were able to be qunarantied and 2 remain
Bundbre – this has been quarantined

a little unsure what to do now to remove these - but this seems a step in the right direction !


Report •

#6
August 14, 2013 at 01:21:41
"great ! - managed to run the anitvirus"

Copy & paste the entire contents of the log in your next post please.


Report •

#7
August 14, 2013 at 13:36:28
sorry - it couldnt be done - it wouldnt work to copy and paste but I wrote down previously as much as I could

Report •

#8
August 14, 2013 at 13:42:01
"sorry - it couldnt be done - it wouldnt work to copy and paste but I wrote down previously as much as I could"
Break it up into parts or upload the log.

If any of the logs are too large, upload them to a site of your choosing or, all can be done with this. I use Imgur.com for images & load.to for files.
Image Uploader
http://www.softpedia.com/get/Intern...
http://www.softpedia.com/progScreen...
http://zenden.ws/imageuploader_ru
How to use for images.
http://i.imgur.com/mWxzNlv.gif
http://i.imgur.com/ODCCcPf.gif
http://i.imgur.com/zalhLtW.gif
For other files.
http://i.imgur.com/FhtnM6c.gif
http://i.imgur.com/vf3B7ee.gif
http://i.imgur.com/txFkgpT.gif



Report •

#9
August 14, 2013 at 16:19:49
the logs arent large - I just cant copy and paste them and only have half the info at the end - however re- running and at the bottom it says :

4 virusus

win 32/Dealply.c.application
a varient of win 32. Dealply.c.application
probably a varient of win 32/ toolbar Bablyon application
a varient of win 32/ toolbar Bablyon application


Report •

#10
August 14, 2013 at 16:31:02
1: Run AdwCleaner
http://www.softpedia.com/get/Antivi...
http://www.softpedia.com/progScreen...
http://general-changelog-team.fr/en...
http://www.raymond.cc/blog/adwclean...
Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

2: Reboot

3: Run Junkware Removal Tool
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
http://www.bleepingcomputer.com/dow...
http://thisisudax.blogspot.com.au/2...
Download Junkware Removal Tool to your desktop.
Warning! Once the scan is complete JRT will shut down your browser with NO warning.
Shut down your protection software now to avoid potential conflicts.
Temporarily disable your antivirus and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them. http://www.bleepingcomputer.com/for...
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Copy and Paste the contents of the JRT.txt log please.


Report •

#11
August 14, 2013 at 17:39:52
tried to run adwacleaner but of course it wont download on my computer - tried on another one and saved on flash but it wont work - it comes up with a red cross and some writing ( cant read it as in Dutch but think it says insufficient something available) - is it not possible to save this file on flash ?

message edited by dawit6


Report •

#12
August 14, 2013 at 17:59:03
"is it not possible to save this file on flash ?"
Don't know, usually has to run on the Desktop.

Let's try Combofix, I have given you all the instructions, we will have to run it again later ( in other words we will run it more than once )

Scroll down to the Safe mode option for this run.

Run ComboFix. Copy & Paste the contents of the log please. ComboFix's log should be located at C:\COMBOFIX.TXT.
http://www.bleepingcomputer.com/dow...
http://download.bleepingcomputer.co...
http://www.forospyware.com/sUBs/Com...
A guide and tutorial on using ComboFix
http://www.bleepingcomputer.com/com...
http://www.winhelp.us/index.php/gen...
Manually restoring the Internet connection
http://www.bleepingcomputer.com/com...
"There are circumstances ComboFix will hang, crash or stall at various stages due to malware interference, failure to disable other real-time protection tools or the presence of CD Emulators (Daemon Tools, Alchohol 120%, Astroburn, AnyDVD) so that it does not complete successfully. Also, depending on how badly a system is infected, ComboFix may take longer to complete its routine than it normally does or fail to run properly. While that is not normal behavior, it is not unusual"
Run Defogger
http://majorgeeks.com/Defogger_d708...
http://www.bleepingcomputer.com/dow...
This program can enable and disable CD emulation, often required in removing difficult malware. Some CD Emulation programs use a hidden driver that may be seen as a rootkit or that will interfere with the proper operation of the anti-rootkit scanner.
If you think it's frozen, look at the computer clock.
If it's running, Combofix is still working.
Note:
Do not mouseclick combofix's window while it is running. That may cause it to stall.
NOTE:
ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.
The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.
Allow ComboFix to download the Recovery Console.
Accept the End-User License Agreement.
The Recovery Console will be installed.
You will then get this next prompt that asks if you want to continue the malware scan, select yes.
If after running Combofix you discover none of your programs will open up, and you recieve the following error: "Illegal operation attempted on a registry key that has been marked for deletion". Then the answer is to REBOOT the machine, and all will be corrected.
Can't Install an Antivirus - Windows Security Center still detects previous AV
http://www.experts-exchange.com/Vir...
We are almost ready to start ComboFix, but before we do so, we need to take some preventative measures so that there are no conflicts with other programs when running ComboFix. At this point you should do the following:
* Close all open Windows including this one.
* Close or disable all running Antivirus, Antispyware, and Firewall programs as they may interfere with the proper running of ComboFix. Instructions on disabling these type of programs can be found in this topic.
http://www.bleepingcomputer.com/for...
Once these two steps have been completed, double-click on the ComboFix icon found on your desktop. Please note, that once you start ComboFix you should not click anywhere on the ComboFix window as it can cause the program to stall. In fact, when ComboFix is running, do not touch your computer at all. The scan could take a while, so please be patient.
Note: If Combofix won't run.
1: Try Safe mode.
2: Rename Combofix.exe as you download it to winlogon.exe or Combo-Fix.exe or anything you like.
Notes:
It is very important that save the newly renamed EXE file to your desktop.
You must rename Combofixe.exe as you download it and not after it is on your computer.
You may have to modify your browser settings if you use Firefox, so you can rename Combofix.exe as you download it. To do that:
Open Firefox
Click Tools -> Options -> Main
Under the downloads section check the button that says "Always ask me where to save files".
Click OK
For Internet Explorer:
Choose to save, not open the file
When prompted - save the file to your desktop, and rename it winlogon.exe.


Report •

#13
August 14, 2013 at 23:27:29
many thanks for your help however I am not computer savvy enough to easily do these things ( especially as everything is in Dutch ) - e.g. dont know how to start the computer in safe mode etc !

Managed to rerun the virus scan and the results are :
C:\Program Files\BabylonToolbar\BabylonToolbar\1.6.4.6\BabylonToolbarApp.dll a variant of Win32/Toolbar.Babylon application
C:\Program Files\BabylonToolbar\BabylonToolbar\1.6.4.6\BabylonToolbarsrv.exe probably a variant of Win32/Toolbar.Babylon application
C:\Program Files\DealPly\DealPlyIE.dll a variant of Win32/DealPly.A application cleaned by deleting
C:\Program Files\DealPly\DealPlyUpdateRun.exe Win32/DealPly.C application cleaned by deleting
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF10_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF10_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF11_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF11_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF12_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF12_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF3_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF3_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF4_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF4_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF5_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF5_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF6_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF6_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF7_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF7_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF8_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF8_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF9_13.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DataMngrHlpFF9_59.dll probably a variant of Win32/Toolbar.SearchSuite.D application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DM_DLL_74.dll a variant of Win32/Toolbar.SearchSuite.C application cleaned by deleting
C:\Program Files\Searchqu Toolbar\del_DM_DLL_89.dll a variant of Win32/Toolbar.SearchSuite.C application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DM_EXE_36.dll a variant of Win32/Toolbar.SearchSuite.A application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_DM_EXE_7.dll a variant of Win32/Toolbar.SearchSuite.A application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_IEBHO_42.dll a variant of Win32/Toolbar.SearchSuite application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\del_IEBHO_91.dll a variant of Win32/Toolbar.SearchSuite application cleaned by deleting - quarantined
C:\Program Files\Searchqu Toolbar\Datamngr\del_DM_DLL_nsl579A.dll a variant of Win32/Toolbar.SearchSuite.C application cleaned by deleting - quarantined
C:\Program Files\VideoConverter\VideoConverter.exe a variant of Win32/InstallCore.A application cleaned by deleting - quarantined
C:\Program Files\VideoConverter\Uninstall\Uninstall.exe a variant of Win32/InstallCore.AF application cleaned by deleting - quarantined
C:\Users\Inge\Documents\Downloads\DownloadSetup.exe Win32/InstallMate application cleaned by deleting - quarantined
C:\Users\Inge\Documents\Downloads\SoftonicDownloader_for_kung-fu-panda.exe Win32/SoftonicDownloader.E application cleaned by deleting - quarantined
C:\Users\Inge\Documents\Downloads\VideoConverterSetup.exe a variant of Win32/InstallCore.AF application cleaned by deleting - quarantined
C:\Users\Inge\Documents\Downloads\VLCSetup.exe a variant of Win32/KBM.A application cleaned by deleting - quarantined
C:\Users\Inge\Downloads\iLividSetup-r418-n-bc.exe Win32/Toolbar.SearchSuite application cleaned by deleting - quarantined
C:\Users\Inge\Downloads\iLividSetup-r752-n-bc.exe Win32/Toolbar.SearchSuite application cleaned by deleting - quarantined


are there any simplier ways to deal with this ?


Report •

#14
August 14, 2013 at 23:49:09
like adwclaner although you can download combofix on flash it wont work from flash and of course it wont work from the computer directly - any other suggestions ? - know that this is hard going but your suggestions are very much apprciated !

Report •

#15
August 15, 2013 at 00:38:04
" e.g. dont know how to start the computer in safe mode etc ! "
Always google anything you don't understand.

safe mode vista
http://is.gd/a3zM5W


Report •

#16
August 15, 2013 at 00:40:05
"download combofix on flash it wont work from flash"

Note: If Combofix won't run.
1: Try Safe mode.
2: Rename Combofix.exe as you download it to winlogon.exe or Combo-Fix.exe or anything you like.
Notes:
It is very important that save the newly renamed EXE file to your desktop.
You must rename Combofixe.exe as you download it and not after it is on your computer.
You may have to modify your browser settings if you use Firefox, so you can rename Combofix.exe as you download it. To do that:
Open Firefox
Click Tools -> Options -> Main
Under the downloads section check the button that says "Always ask me where to save files".
Click OK
For Internet Explorer:
Choose to save, not open the file
When prompted - save the file to your desktop, and rename it winlogon.exe.


Report •

#17
August 15, 2013 at 00:44:26
"any other suggestions ? - know that this is hard going"
Plenty of other options, but we will probably run into the same problem with your skill level.
I'm quite happy to keep going, but you may be able to get someone with a higher skill level to help you.

Report •

#18
August 17, 2013 at 06:43:03
managed to run adwacleaner but still no downloads - is this to be expected ?

Report •

#19
August 17, 2013 at 14:31:59
"managed to run adwacleaner"
Do you mean Junkware Removal Tool, if so, post the log.

"is this to be expected ?"
Expect anything, until we remove all the problems, bit by bit.


Report •

Ask Question