Virus Clean Up Required.

[maynardvdm]

Hi

 

I have hotmail, and sometimes i need to click twice on a e-mail to open it. Try to click twice on a e-mail.

[DirtyPolo]

If this does'nt work then try accessing hotmail from another web browser such as Firefox as opposed to Internet Explorer

 

Firefox web browser | Faster, more secure, & customizable

[suziqjjc]

Hi Guys, I was actually using Firefox as my default browser and double clicking didn't work. Tried IE and now all fine. Would you know what the problem is with using Firefox ? It worked ok before. Thanks Sue

[suziqjjc]

Also, I can't seem to get on to gmail, when using firefox or IE and type gmail into google, I get the following from FF and a similar message about the sites security from Internet Explorer. Secure Connection Failed Google uses an invalid security certificate. The certificate is not trusted because it is self signed. The certificate is only valid for google.com (Error code: sec_error_ca_cert_invalid) * This could be a problem with the server's configuration, or it could be someone trying to impersonate the server. * If you have connected to this server successfully in the past, the error may be temporary, and you can try again later. Edited March 26, 2009 by BeeCeeBee

[DirtyPolo]

Hey sue, if your hotmail worked on IE but not firefox, try uninstalling FireFox, rebooting your PC, then reinstall firefox and see if that cures the problem.

 

As for your other issue, I haven't seen thatbefore so I'll have a looka round and what Ic an find, hopefully someone else on the team or a member has some idea of the cause of it.

[BeeCeeBee]

It would appear that you have your IE security settings very high. Go to tools and then internet options. Under the security tab make certain that your settings are no higher than medium high and that the setting is for Internet. (The globe, not trusted sites or restricted sites.)

[Tootech]

Secure Connection Failed Google uses an invalid security certificate

Also, check your computer time and date are correct, sometimes when they are wrong you cannot logon to secure sites.

[suziqjjc]

Thanks guys, I did not get a chance to get back online after my last post so will try your suggestions and report back. Sue

[suziqjjc]

Hi All,

 

I uninstalled Firefox, rebooted and downloaded again from the link you provided above. Sill no change, cannot open email in my hotmail account and cannot log in to gmail. I can access my email using IE, changed the security setting to medium, but still cannot log on to gmail.

I have also checked the time and date which were fine.

 

I just noticed as I did a search in google for certificate errors that an ip address popped up in the address bar and I got and error - forbidden 403 or something. I clicked on the back button, clicked another link which was fine and tried the first link again and this time it brought me to the right site - would the fact that an ip address showed up in the address bar indicate that I still have a problem ?

 

Sue

[BeeCeeBee]

Have you tried simply clearing your user name and password and entering them manually? The error message generally means a restricted website. Since we really don't know what you clicked and it does not seem to be a recurring problem it can probably be discounted.

[suziqjjc]

Hi BeeCeeBee,

 

I don't even get as far as the log on - if I type gmail or click on mail at the top of the google search page, when using either IE or FF, it brings up the error above, ie, on Internet Exp I get "There is a problem with the websites security cert" and in FF I get "Secure Connection Failed

Google uses an invalid security certificate.

The certificate is not trusted because it is self signed.

The certificate is only valid for google.com.

(Error code: sec_error_ca_cert_invalid)

 

So I'm just not sure what to do to access my gmail account!

 

Sue

[BeeCeeBee]

Just to be sure, have you tried disabling your firewall to see if there is anything there blocking gmail. What firewall are you using?

 

Also, check to make sure that cookies are enabled and that your privacy settings are no higher than medium high. I doubt that is the problem but it is worth looking at.

Edited March 30, 2009 by BeeCeeBee

[suziqjjc]

At the risk of sounding like an idiot - what / where should I check re firewall ?

Also, as you mention cookies, I clicked on preferences from the google homepage earlier and it mentioned that my cookies were disabled, yet when I checked Firefox, the box was checked to accept cookies, not sure how to double check in IE. The privacy setting though is medium.

[BeeCeeBee]

In internet explorer you have to look in the privacy tab under internet options. It is not the same as the security tab. If it is telling you that cookies are disabled in the google gmail page then that may well be the problem. I use gmail and set my privacy settings at medium high and have no problem.

 

Gmail will not work with cookies disabled. If both your privacy and your security settings are at medium and it still does not get you into gmail then we are on the wrong track.

 

Next, the firewall. just tell us what security programs you know that you have up and running. Please give us the full name and version not just "Norton"or "McAfee"

 

Also go to your control panel and look at the security center and tell us what it says about a firewall.

Edited March 30, 2009 by BeeCeeBee

[suziqjjc]

Sorry if my post comes up twice, I submitted but then found i was logged out.

I checked the privacy tab under internet options and it was already set to medium. The security tab is also set to medium - yet I just checked on the google home page, just to the right of the search box, advanced, preferences and language tools, clicked on preferences and I get:

Your cookies seem to be disabled.

Setting preferences will not work until you enable cookies in your browser.

I have McAfee installed, the products are

security centre version 8.1

virus scan version 12.1

personal firewall version 9.1

I also have Norton Security Scan - version 2.1.0.22

Checked control panel, security centre, firewall is on, automatic updates, on and virus protection is set to on also.

[Tootech]

Do you have any toolbars, eg Yahoo, Google etc?

 

If you do, uninstall them all, restart and have another go.

 

If that hasn't made any difference, a full Internet Explorer reset is in order.

 

Open Internet Explorer, go to Tools>Internet Options> Advanced, then down at the bottom, Reset. Click Reset.

 

Once that is complete, close Internet Explorer, open it again and.........does it work correctly?

[BeeCeeBee]

Just a quick addition to what Tootech suggested. Norton Security Center, while not a full Antivirus program (and is, in fact, a tool used by Norton to sell its products) it does perform limited scanning. It should not be used alongside McAfee. While you are looking for toolbars you may consider uninstalling that (security center) as well. There is a possiblity of a conflict that may be effecting your browser.

[suziqjjc]

Hi Guys,

 

I uninstalled Norton and reset IE but nothing has changed. In addition, google is redirecting, a number of times when searching this evening, I've been redirected to an adult site, each time I notice in the address bar the same IP address appearing - I don't know if its my address or not. I would also say that my pc is a bit noisy, like its working extra hard when I haven't really got anything running. Keep the suggestions coming and thanks again.

[maynardvdm]

It sounds like you are still infected with malware.

 

Update and run Malwarebytes and SuperantiSpyware again.

[BeeCeeBee]

There is almost no question about it your machine is infected. The real question is whether it has become reinfected or are you suffering from a very persistent bug that keeps reinstalling itself.

 

By all means follow Maynarddvdm's instructions and rescan your computer. While we are still working on finding the culprit you may want to make certain that all of your important files are backed up to DVDs or an external hard drive in case it becomes necessary to reinstall windows and clean up your hard drive. That also means letting us know what disks you have that may have come with your machine when you purchased it.

[suziqjjc]

Ok - I will go through the steps again and report back - will also check the disks I have.

 

Sue

[RandyL]

In my opinion you are still suffering from the basic malware infection as noted by others.

 

This infection is not hard to detect or clean if all the steps are followed properly includining updating the scan engines before running them.

 

This problem is now 45 posts long. Please read every single post line by line as it seems you may be missing the basic things you have been asked to do.

 

I suspect that if you have properly followed the steps to disinfect then you have suspect malware programs installed such as p2p, torrents, screensavers etc. that are reinfecting you.

 

If all these things are too complicated for you then like BeeCeeBee said it may be time to reinstall Windows. Once done carefully reinstall programs to avoid malicious software.

 

Reinstall your AV and update Windows immediatly after.

[suziqjjc]

Thanks for your input Randy, Despite my lack of technical info, I am capable of following instructions. I have followed the steps outlined 1-5 precisely and disabled AV before I started. Malewarebytes did not detect anything, but SuperAntispyware detected 26 items, 24 cookies and 2 virus melt files. Once I completed step 5, I did a couple of searches on google but the problem still appears to be there, I was redirected twice, the same errors are appearing when I try and get on to gmail on both IE and FF and I can't seem to get on to hotmail now on FF either. So I guess its time to reinstall the software. I've checked the info that came with the pc, • Microsoft Windows XP System Restore returns your computer to an earlier operating state without affecting data files. • Dell PC Restore by Symantec restores your hard drive to the operating state it was in when you purchased the computer. Dell PC Restore permanently deletes all data on the hard drive and removes any applications installed after you received the computer. I guess I need to do the Dell Pc Restore ?

[BeeCeeBee]

Thanks for your input Randy, Despite my lack of technical info, I am capable of following instructions.

 

There really is not call for you to take offense from anything said by anyone in these posts. Frankly all the manipulating of the system with a lack of understanding of what you were doing is cause for some criticism. (I am still concerned about what you did with regard to that proxy and I have a good guess at what you meant about changing the Firefox connection box. TCP/IP settings in your network perhaps.)

 

In any case you are seriously infected and the full format and re-installation of the operating system (Dell PC Restore) seems the best bet. Before you do that please make sure you post any questions you may have regarding the process and also keep in mind that this will wipe your hard drive clean. You will lose all of your files. So be sure you back up everything that you may want as noted in one of my previous posts and make sure they are secure. The full format and restore cannot be reversed.

[BeeCeeBee]

For a complete run down on the Dell restore process you should review the following carefully.

 

Dell - Technical Support