Help - Search - Members - Calendar
Full Version: problems opening web pages
Gladiator Security Forum > Malware Help Forum > HELP! Think you are Infected?
saso
here is a problem i have.

some time ago i got a call from a guy to check his computer, after i fixed few problems i noticed a strange thing that i did not see before. pages in IE ware not displaying properly, the text and pictures ware shown just fine, but all of the background colors and borders ware missing. since i didn't have time to investigate the problem and since i am not able to take that computer home with me, i simple installed firefox on it and it was working fine.

however, few week later i got another call and guess what? yes, the same problem is now also in firefox OMG.gif

does anyone here has any experience with a thing like that and has some solution for it, so that i could fix the problem?

and no, there are no extensions installed in firefox that would do such filtering. i belive it is probably because of not fully removed spyware/adware. there ware several detected and removed at different times with different tools, among them also the 2search and the007guard and i suspect they could be the reasion for this problem uhm.gif

UPDATE: i had to edit the text above a bit because i just copied in from another forum where i asked for help about two week ago. in this two week i was able to do several more things to try to remove/correct this but with no success. for example i run several anti spyware tools like webroot, microsoft beta, s&d, lavasoft and ewido. they ware able to find and remove some additional reg entries (remember things ware already removed before by the owner and by me), but nothing has fixed the main problem with the no backgrounds in both browsers IE and firefox. additionaly i also run some av tools like kaspersky and vba32 that did not find nothing. and run also hijackthis, proces-- The nicest hobby on Earth ;) --plorer and autoruns and as far as i (and hijackthis.de) can tell they ware all clean. also blacklight and RKR did not find anything. i aslo fully removed firefox, also the profiles and all other folders and files on the pc that include the strings firefox or mozilla. after clean reinstall the problem was the same.

in the end it was late and i had to go home, so next time i will try to run drweb and mcafee and also filemon and regmon, but i must say i am quite at the end with my ideas. the is one thing that i was able to find with google just yesterday that i will also try out, it is the accessibility option in IE. i try it out on my pc and yes i must sy this is exactly how it look on that machine, but i have some doubts that it will works since the same is also in firefox and i made an fresh install of it.
LoPhatPhuud
A simple question before we over any assistance.

Are you doing the fix for hire or for free?
saso
for free. removing malware and computers in general is not my profession, just a hobby. additional we are also relatives, so yes, maybe i will get a chocholate or something :)
LoPhatPhuud
Thanks for the reply and the understanding. We have logs posted in the past from individuals charging for removal. When in doubt we ask.

First:
Create a directory on your hardrive to save HijackThis.exe. A directory like c:\hijackthis. If you do not do this, you will not be able to use the backup/restore features.

Download HijackThis from:

HijackThis Download Site

Save this file into the directory you made previously and then run the program named hijackthis.exe. When the program opens click on the Config button, then click on the Misc Tools button, and click on the Check for update online button. When it completes checking/applying updates press the back button.

Now click on the Scan button and when it is finished click on the Save Log button. A Notepad window will open with the contents of this log. Click on Edit then click on Select all. Then click on Edit and then Click on Copy.

Create a reply to this post here and right click in message area and select paste to paste the log into the post.

Someone will reply to you after reading this post. DO NOT fix any entries unless you understand what you are doing.

To see a tutorial with screenshots on using HijackThis you can click on the link below:

How to use HijackThis to remove Browser Hijackers, Malware, & Spyware


Second:
Would you please use HiJackThis to produce a startup list and post it here:
1. From HJT main screen, click 'Config' button
2. Click 'Misc Tools' button
3. Check both boxes to the right of 'Generate StartupList Log' button
4. Click 'Generate StartupList Log' button
5. Click 'Yes' in the next dialog
6. Save the log and post a copy in this thread.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.