Cannot access Antivirus Sites/Google/Avast etc.

**bakuryu** · 29-05-2009, 02:21 PM

Open notepad and copy+paste the following text and save the file as CFScript.txt in the same directory where combofix is present. Then drag and drop the CFScript.txt file over combofix executable file, and combofix will run again.

Code:

File::
c:\windows\system32\cfgnm.dll

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=-
"UpdatesDisableNotify"=-
"AntiVirusOverride"=-
"FirewallOverride"=-
[-HKEY_LOCAL_MACHINE\System\ControlSet001\Services\wrxyvjp]

open command prompt (cmd.exe) and type the follow

Code:

netsh firewall set opmode mode=ENABLE
netsh firewall set portopening protocol=ALL port=4527 mode=DISABLE scope=ALL profile=CURRENT

sc delete wrxyvjp

Open regedit.exe and go to : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost

find the value (in the right hand pane) named netsvcs (entries are not in alphabetical order), double click to edit, find the line containing wrxyvjp (each line will contain one value, and they won't be in alphabetical order) and delete only that line. Click OK and close the edit window and close regedit.

Reboot and check if you can access all sites.

Finally install this security update : http://www.microsoft.com/technet/sec.../MS08-067.mspx

ft06 · 30-05-2009, 12:26 PM

many thanks for your reply - problem solved

sndloader · 31-05-2009, 02:57 PM

@bakuryu

Thanks dude I also experienced this problem, I just followed your common steps I downloaded this W32.Downadup Removal Tool and Combofix.After scanning I can now view security sites.

Again thank you btw is there any site that can analyze combofix log? like hjt log.

**bakuryu** · 31-05-2009, 05:25 PM

For HijackThis you do have : hijackthis log file analysis - Google Search

You can do it manually too (preferred) : HijackThis Tutorial - How to use HijackThis to remove Browser Hijackers & Spyware

For Combofix there's no such general tutorial/ automated log analysis that can help you to fix the problem.

Brocket · 01-06-2009, 11:05 AM

I too am having the same problems. I can't access numerous sites that seem to be related antivirus/spyware scanners. Can't install Spybot and my AVG won't update. I have read through a number of your posts so I will post the combofix log and pray that you can help me!

**bakuryu** · 01-06-2009, 05:38 PM

First check this: Conficker Eye Chart

Quote:

Conficker Worm Patch - April 1st Virus - April Fools Virus 2009 - Windows Conficker C | W32.Downadup Conflicker Worm

Or, you can restore access to security web sites on an infected machine by taking the following steps:

1. Click Start > Run.
2. In the Run box, type the following: cmd
3. Click OK.
4. Type the following and then press Enter. cd..
5. Repeat the previous step until you get to the root level, or C:\>. Note that if your root drive is not C, the letter will be different.
6. At C:\> type the following: net stop dnscache
7. Press Enter.

Download removal tool : W32.Downadup Removal Tool | Symantec

Brocket · 01-06-2009, 06:40 PM

Everything seems to be ok with the eye chart, all the icons are showing. Funny thing is, yesterday I tried to access the eye chart and the site wouldn't load at all.

**bakuryu** · 03-06-2009, 02:59 AM

Did you follow the instructions and installed W32.Downadup Removal Tool ?

Can you access antivirus sites after that ?

Brocket · 03-06-2009, 09:33 AM

Sorry, I thought if I could see the icons it was perhaps something else. I am running vista and when ran the the net stop dnscache it said "system error 5 has occured" "access denied".

I am running a Belkin N1 wireless router and downloaded the latest firmware. Everything seems to be working fine now as I was able to downloaded spybot, malwarebytes, rooter, microsoft one care and ran scans and nothing was detected. It appears that I can now access all the sites. I will let you know if I have additional problems and thanks very much for your assistance.

ryuzaki17 · 04-06-2009, 01:10 PM

hi im new here... just reformatted my pc because my antivirus softwares are always disabled and i searched the net its a virus so i reformatted my pc but then after reformatting... i suddenly cant access antivirus and antispyware sites...

ive been searching the net for some help because i cant access any of the antivirus sites and anti spyware sites and i found this site....

please help me......
here is my hijackthis log file

Code:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:56:06 PM, on 6/4/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Task Killer\TaskKiller.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\WeetWeet\Desktop\HJT.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

--
End of file - 2508 bytes

ive just ran spybot s and d and fix all the problems but i cant still access antivirus sites and antispyware sites pls help me

29-05-2009, 02:21 PM	#661
bakuryu ƒ(ψ)=Θº×φ Join Date: May 2006 Location: India Age: 23 Posts: 6,621 Thanks: 19 Thanked 645 Times in 603 Posts Rep Power: 87 OS:	Re: Cannot access Antivirus Sites/Google/Avast etc. Open notepad and copy+paste the following text and save the file as CFScript.txt in the same directory where combofix is present. Then drag and drop the CFScript.txt file over combofix executable file, and combofix will run again. Code: File:: c:\windows\system32\cfgnm.dll Registry:: [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=- "UpdatesDisableNotify"=- "AntiVirusOverride"=- "FirewallOverride"=- [-HKEY_LOCAL_MACHINE\System\ControlSet001\Services\wrxyvjp] open command prompt (cmd.exe) and type the follow Code: netsh firewall set opmode mode=ENABLE netsh firewall set portopening protocol=ALL port=4527 mode=DISABLE scope=ALL profile=CURRENT sc delete wrxyvjp Open regedit.exe and go to : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost find the value (in the right hand pane) named *netsvcs* (entries are not in alphabetical order), double click to edit, find the line containing wrxyvjp (each line will contain one value, and they won't be in alphabetical order) and delete only that line. Click OK and close the edit window and close regedit. Reboot and check if you can access all sites. Finally install this security update : http://www.microsoft.com/technet/sec.../MS08-067.mspx __________________ Please don't click here

30-05-2009, 12:26 PM	#662
ft06 Newbie Join Date: May 2009 Posts: 2 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 0 OS:	Re: Cannot access Antivirus Sites/Google/Avast etc. many thanks for your reply - problem solved

31-05-2009, 02:57 PM	#663
sndloader Newbie Join Date: May 2009 Posts: 1 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 0 OS:	Re: Cannot access Antivirus Sites/Google/Avast etc. @bakuryu Thanks dude I also experienced this problem, I just followed your common steps I downloaded this W32.Downadup Removal Tool and Combofix.After scanning I can now view security sites. Again thank you btw is there any site that can analyze combofix log? like hjt log.

31-05-2009, 05:25 PM	#664
bakuryu ƒ(ψ)=Θº×φ Join Date: May 2006 Location: India Age: 23 Posts: 6,621 Thanks: 19 Thanked 645 Times in 603 Posts Rep Power: 87 OS:	Re: Cannot access Antivirus Sites/Google/Avast etc. For HijackThis you do have : hijackthis log file analysis - Google Search You can do it manually too (preferred) : HijackThis Tutorial - How to use HijackThis to remove Browser Hijackers & Spyware For Combofix there's no such general tutorial/ automated log analysis that can help you to fix the problem.

01-06-2009, 06:40 PM	#667
Brocket Newbie Join Date: Jun 2009 Posts: 3 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 0 OS:	Re: Cannot access Antivirus Sites/Google/Avast etc. Everything seems to be ok with the eye chart, all the icons are showing. Funny thing is, yesterday I tried to access the eye chart and the site wouldn't load at all.

03-06-2009, 02:59 AM	#668
bakuryu ƒ(ψ)=Θº×φ Join Date: May 2006 Location: India Age: 23 Posts: 6,621 Thanks: 19 Thanked 645 Times in 603 Posts Rep Power: 87 OS:	Re: Cannot access Antivirus Sites/Google/Avast etc. Did you follow the instructions and installed W32.Downadup Removal Tool ? Can you access antivirus sites after that ?

03-06-2009, 09:33 AM	#669
Brocket Newbie Join Date: Jun 2009 Posts: 3 Thanks: 0 Thanked 0 Times in 0 Posts Rep Power: 0 OS:	Re: Cannot access Antivirus Sites/Google/Avast etc. Sorry, I thought if I could see the icons it was perhaps something else. I am running vista and when ran the the net stop dnscache it said "system error 5 has occured" "access denied". I am running a Belkin N1 wireless router and downloaded the latest firmware. Everything seems to be working fine now as I was able to downloaded spybot, malwarebytes, rooter, microsoft one care and ran scans and nothing was detected. It appears that I can now access all the sites. I will let you know if I have additional problems and thanks very much for your assistance.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

New To Site?	Need Help?
Register to Participate Meet our Staff Refer Forum Rules Contact Us	Frequently Asked Questions Did you forget your password? Mark Forums Read

Cannot access Antivirus Sites/Google/Avast etc.

Computer Security