joessportster Posted January 24, 2015 Share Posted January 24, 2015 Sorry to bother you guys with this, but I don't where else to get some help. Starting last week, every time I click on a website (like avs.com) the internet wants to go through Google.com to get there. The error message displayed is "waiting for google.com" then it times out with a standard message "website not available." On routine sites the computer freezes on Google.com then finally times out and allows me onto the site, but it takes a minute per screen, and before (like last week) it would be less than 1 second. Google searches time out completely, and when I tried to go to Google.com to ask this question, it times out. Bing, Yahoo and other search engines are less than 1 second with searches. I have: Windows 7, everything is updated AVG Anti-virus free, latest version. I ran a whole computer scan, zero virus detected Firefox 35.0, latest version (IE 11 also bombs out) I already flushed the temp files and cache, and deleted all cookies. Nothing helped. Could others please try google.com and see if it is working? Try malware bytes it gives you a free trial and is the best for ferreting out malware https://www.malwarebytes.org/lp/lp4/02_r/?gclid=CjwKEAiAoo2mBRD20fvvlojj5jsSJABMSc7jGoidqmbJCAnpkbg0AOiYNBkppEzId06CE2ANr4c7DRoCsrvw_wcB Quote Link to comment Share on other sites More sharing options...
mustang guy Posted January 24, 2015 Share Posted January 24, 2015 (edited) Thanks Joe. Dave, in a way some good came out of all this torture you went through. I didn't realize I hadn't installed MWB on my machine since I changed to an SSD. I just ran it and uncovered (cut/paste): Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 1/24/2015 Scan Time: 12:43:29 PM Logfile: Administrator: Yes Version: 2.00.4.1028 Malware Database: v2015.01.24.13 Rootkit Database: v2015.01.14.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 8.1 CPU: x64 File System: NTFS User: HT Scan Type: Threat Scan Result: Completed Objects Scanned: 454688 Time Elapsed: 10 min, 22 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 5 PUP.Optional.WeCare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB}, , [c37a8a71d7b20c2a2a4bdc4f4db6b14f], PUP.Optional.uTorrentBar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bejbohlohkkgompgecdcbbglkpjfjgdj, , [7fbec6353f4a83b3d451c6c56f947e82], PUP.Optional.WeCare, HKU\S-1-5-21-658952791-3350312930-2491447216-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\wecarereminder, , [99a42ad191f85fd72c81207623e0d729], PUP.Optional.InstallCore.A, HKU\S-1-5-21-658952791-3350312930-2491447216-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [a4991fdc008979bd8299249caa591de3], PUP.Optional.InstallCore.A, HKU\S-1-5-21-658952791-3350312930-2491447216-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [182527d4c4c5a096c66a6c6a4bb92dd3], Registry Values: 5 PUP.Optional.uTorrentBar.A, HKU\S-1-5-21-658952791-3350312930-2491447216-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}, , [5edfd427e2a72e0831d9836ec63c3ac6], PUP.Optional.uTorrentBar.A, HKU\S-1-5-21-658952791-3350312930-2491447216-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}, úâ¬s¿´ã²M¯>Ââ¡Æ¤[ü, , [5edfd427e2a72e0831d9836ec63c3ac6] PUP.Optional.uTorrentBar.A, HKU\S-1-5-21-658952791-3350312930-2491447216-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}, , [5edfd427e2a72e0831d9836ec63c3ac6], PUP.Optional.uTorrentBar.A, HKU\S-1-5-21-658952791-3350312930-2491447216-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}, , [1e1f18e31c6dc0768387ba370ef45fa1], PUP.Optional.InstallCore.A, HKU\S-1-5-21-658952791-3350312930-2491447216-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, zr2Y1E2Z1G1J1T1M, , [182527d4c4c5a096c66a6c6a4bb92dd3] Registry Data: 0 (No malicious items detected) Folders: 1 PUP.Optional.WeCare.A, C:\ProgramData\WeCareReminder, , [ac917e7d97f243f3095bd7999370847c], Files: 2 PUP.Optional.Amonetize, C:\Users\HT\AppData\Roaming\New Version Available\AdvancedWinUtilitiesFree.exe, , [f944619a89002016dba64449f80dfe02], PUP.Optional.WeCare.A, C:\ProgramData\WeCareReminder\aspca.bmp, , [ac917e7d97f243f3095bd7999370847c], Physical Sectors: 0 (No malicious items detected) (end) It's a good thing I ran it. BTW, I use AVG, and it did NOT see this. I will be using MWB in the background now, so this won't happen again. Another thing I found in my inspection. There was a device driver installed in my hardware profiles I didn't recognize. It was called Glance Speed Boost. It was showing up as a second device adapter. I thought it was odd, so I did a bit of research. As it turns out, it is a program that is meant for remote desktop connections. I haven't installed any such applications. I removed it using IOBit Uninstaller, then rebooted. I did all this before performing the MWB scan and quarantining the PUP.Optional crap. Everybody who has a PC with Windows should check to see if they have an extra video card adapter showing up in their hardware profiles. Somebody on the internet could be spying on you! Edited January 24, 2015 by mustang guy 1 Quote Link to comment Share on other sites More sharing options...
wvu80 Posted January 24, 2015 Author Share Posted January 24, 2015 (edited) Well, it looks like I am at the end of a successful journey on this topic. Thanks to the many suggestions, not only am I virus free, but the computer had its files cleaned up and now it runs super fast! I attribute the success mostly to Avast, CC Cleaner and Malwarebytes. I had to run Avast several times and it found viruses each time, the last (successful) time through it picked up nine. The only confounding variable now is I bragged to my wife that I finally got rid of the virus which was having trouble with Goggle, and she said "oh yeah, Google has been off all week on my iPhone, but it works fine now." Great, thanks honey, for telling me. In any case, a big thank you to everybody who made suggestions, I think I used them all. Edited January 24, 2015 by wvu80 Quote Link to comment Share on other sites More sharing options...
mustang guy Posted January 25, 2015 Share Posted January 25, 2015 Your ISP was blocking it? Are you CAS or Suddenlink? Quote Link to comment Share on other sites More sharing options...
The Dude Posted April 19, 2015 Share Posted April 19, 2015 I don't know if I am having the same issue as wvu. But from what I have read I believe I was having a problem with Google chrome. I tried Malwarebytes remover, it comes up with nothing. I tried Adware remover it keeps coming up with some Google Chrome apps that are infected, I deleted them and my computer runs normal for a couple of days. Then my ram usage is back up to 70 percent and things are lagging. Now I deleted Google Chrome, and installed Firefox. Things were running smooth for a while, until I notice the ram usage increasing. So I found this thread and thought I would try some of this cleaners you all mentioned. Neither of them found anything and my ram usuage is up to 70 percent again. I have deleted all the programs I down loaded last night. Now you may ask why I associated the infection to ram usage. I guess when things are running slow, I check my performance and it showed that the ram usage was up that high. When I would run a scan and delete the infected files, the ram usage would go back down to 30 percent and the computer would run faster. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.