Browser Hijacker

Hi CB… AVG uninstalled with the tool,Avira av put on as you suggested, that won't update it virus files either…just like avg!..tries for a whle and then says a fault has occurred! Regards, Mick

CB in case it helps this is the file log from Avira when it does finally fail to connect/update its data base… Avira AntiVir Personal - Free Antivirus Updater Creation time: Wed Apr 01 18:11:44 2009 Operating system: Windows XP (Service Pack 3) [5.1.2600] Product information: Product version: 9.0.0.386 Updater: C:\Program Files\Avira\AntiVir Desktop\update.exe 09.00.00.42 Plugin: C:\Program Files\Avira\AntiVir Desktop\updext.dll 09.00.00.06 Temp Directory: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\ Backup folder: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\BACKUP\ Installation Directory: C:\Program Files\Avira\AntiVir Desktop\ Updater folder: C:\Program Files\Avira\AntiVir Desktop\ AppData folder: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\ [UPD] [INFO] Checking whether newer files are available. [UPD] [INFO] Select update server 'http://80.190.154.239/update'. [UPD] [INFO] Downloading of 'http://80.190.154.239/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.239/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Downloading of 'http://80.190.154.239/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.239/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Downloading of 'http://80.190.154.239/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.239/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Select update server 'http://80.190.154.235/update'. [UPD] [INFO] Downloading of 'http://80.190.154.235/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.235/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Downloading of 'http://80.190.154.235/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.235/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Downloading of 'http://80.190.154.235/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.235/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Select update server 'http://62.146.66.182/update'. [UPD] [INFO] Downloading of 'http://62.146.66.182/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://62.146.66.182/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Downloading of 'http://62.146.66.182/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] IDX- integrity check failed. [UPD] [INFO] Select update server 'http://80.190.154.239/update'. [UPD] [INFO] Downloading of 'http://80.190.154.239/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.239/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Downloading of 'http://80.190.154.239/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.239/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Downloading of 'http://80.190.154.239/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.239/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Select update server 'http://80.190.154.235/update'. [UPD] [INFO] Downloading of 'http://80.190.154.235/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.235/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Downloading of 'http://80.190.154.235/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.235/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Downloading of 'http://80.190.154.235/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] Download manager: The function WinINet::InternetOpenUrl() 'http://80.190.154.235/update/idx/master.idx' failed. Error: A connection with the server could not be established [UPDLIB] [ERROR] Download manager: An error occurred inside the WinINet library. [UPD] [INFO] Select update server 'http://62.146.66.182/update'. [UPD] [INFO] Downloading of 'http://62.146.66.182/update/idx/master.idx' to 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. [UPDLIB] [ERROR] IDX- integrity check failed. [UPD] [ERROR] Generation of update structure failed. UpdateLib delivers error 19. Summary: ******** 0 Files downloaded Regards, Mick

Thank-you, I shall research that and see what I can come up with…it appears one (or more) of your services are corrupted… I'll see what I can find out, but i may just need to clean you up and have you post a new topic in our Windows tech forum. We have some amazing tech's on staff here with a lot more knowledge than I when it comes to the technical side of things…I think now all the malware is cleaned from your system, so we just need to repair these broken services… i shall post back later with further instructions…… thanks for all your patience. CB

Thanks CB.. I'll wait for you to post…you have been GREAT

Hi Mick,

Well this is interesting, corruption in the WinINet library seems to be common place and the WinINet.dll appears to be available for download,

The corruption was most likely cause by AVG ironically as it has been known to remove that file…sometimes malware writers embed atheir malicious code into it, so when it is removed it destabalizes the system as we have witnessed.

It would definitely be in your best interest to post a new topic in our WINDOWS forum and let our expert tech guru's guide you in the repair of this service…I could muddle you through it, but I'd be happier if they did it

I don't think I can clean you up properly without the service being repaired as the tools cleaner didn't run properly.

so post the link back to this thread so the tech experts can see you are clean of Malware…once your system has been repaired - come back to this thread for the final clean up.


Call your topic "WinINet corruption" and I'll let them know to expect you.

cheers

CB

Thanks CB… Which forum do I need and how do I do alink back to this thread please?..

I posted the link - it's embedded in the word 'WINDOWS' right click any of the "post numbers" - {top right of the window pane} - choose 'copy link location" and paste that into the new thread…good luck or highlight the url address when you are in your topic and copy/paste that into the new thread

Thanks CB ..all done… Do I just post a new thread on here onece I have sorted the other issues, to get some help to clean up my machine? Thanks again… Mick.

No, I'll leave this thread open till your done, just 'addreply' here and I'll pick it up again CB

HI CB… Just to let you know I'm still waiting for a reply from the post I put up yesterday on the Windows forum, so please keep this thread open for me until I can some help on there which may be a few days yet … Thanks again…. Best Regards, Mick

no problem - they are very busy there and sometimes they need to research a resolution so it does take a few days for a response…some-one will respond - it just might take a while … no rush…this will stay open till you're done CB

Thanks CB