What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Software

help w/ "oauth"...

19 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
hello i posted a help request at http://forums.spybot.info and i was referred here…

this is the url to that post:

http://forums.spybot.info/showthread.php?t=67759

my computer has:

amd athlon 64 x2 dual
core processor 3800+
2.01 ghz 3.68 of ram

windows xp proffesional x64
ver 2003
service pack 2

any help would be greatly appreciated as is been more that 2 weeks since the problem started…

here is a copy of my post mention above…

i have a question about what i think is a web address that i think is a key logger or something like that…

a couple of days back i was on facebook & i clicked on a link for what i thought it was a youtube video, from a friend facebook page…

everything got mixed up, all the buttons on my desktop, toolbars, taskbar, quick launch, the bar where the clock is went blank, instead the icons & the names of files & folders everything was white…

i unplugged the cable from the modem as fast as i could, & the green light on front on my comp stood lit up for more than an hour, i could not do anything, not even move the mouse, after that i turn off the comp by pushing the power button on the comp…

when i turn the comp back on after let say 2 hours and try to do any thing on the internet i saw that when im loading / going to any page, above the start button there a bunch of web addresses that change very rapidly i have notice that there is this one ""https:// www. facebook .com/dialog /oauth?client _id=16995676698&response_ type=token%2C signed_request %2Cc"" (no spaces) that it stays on a bit longer that the others, even when im not logged in on face book…

with every different web site that i visit the numbers between the ""id="" & the ""&response"" part changes, i was told that it might be a key logger…

i have scan my computer with everything i can think of, (avg, spybot, kaspersky, Adaware, malwarebytes, avast free antivirus, spywareblaste, IObit Malware Fighter, SUPERAntiSpyware)… & they results vary but the most uncommon ones that they have report are these:…

the kaspersky…

1."Autorun from hard drives is allowed"
2."Autorun from network drives is enabled"
3."CD/DVD autorun is enabled"
4."Removable media autorun is enabled"
5."Microsoft Internet Explorer: clear history of typed URLs"
6."Microsoft Internet Explorer - disable caching data received via protected channel"
7."Microsoft Internet Explorer: disable sending error reports"
8."Microsoft Internet Explorer: delete cookies"
9."Microsoft Internet Explorer: clear the list of trusted domains"
10."Microsoft Internet Explorer: enable cache autocleanup on browser closing"
11."Microsoft Internet Explorer: start page reset"

the avg shows that all my excel & my word docs have macros in them, weird part about that is that i dont use that, i do not even know how to use or create macros…

i open a new excel worksheet & i saved it empty, nothing on it, i scanned my comp after that & it showed that it had macros…

i dont remember that happening before…

please advice on what steps can i do / follow to fix or verified everything id ok…

also i just remember to mention that is takes about 6 to 8 minutes from the time i push the on button on my comp till all is loaded, same goes for when i turn it off… from the time i click on the ""turn off"" icon till all the lights on my comp go off…

DDS not supported

This operating system is not supperted!
DDS only runs on:

*Windows 2000
*Windows XP (32 bit)
*Windows VIsta (32/64 bit)
*Windows 7 (32/64 bit)
*Windows 8 (32/64 bit)

i have windows xp professional x64 edition…

MBR log…

aswMBR version 0.9.9.1707 Copyright© 2011 AVAST Software
Run date: 2013-02-03 12:52:39
—————————–
12:52:39.859 OS Version: Windows x64 5.2.3790 Service Pack 2
12:52:39.859 Number of processors: 2 586 0x2B01
12:52:39.859 ComputerName: FAM-PUTTER UserName: D J RAC
12:52:41.437 Initialize success
14:00:45.743 AVAST engine defs: 13020300
14:09:48.384 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T1L0-e
14:09:48.384 Disk 0 Vendor: WDC_WD5000AAKB-00H8A0 05.04E05 Size: 476940MB BusType: 3
14:09:48.399 Disk 0 MBR read successfully
14:09:48.399 Disk 0 MBR scan
14:09:48.446 Disk 0 Windows XP default MBR code
14:09:48.462 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 476929 MB offset 63
14:09:48.509 Disk 0 scanning C:\WINDOWS\system32\drivers
14:09:55.212 Service scanning
14:10:10.071 Modules scanning
14:10:10.071 Disk 0 trace - called modules:
14:10:10.071 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys atapi.sys pciide.sys PCIIDEX.SYS hal.dll
14:10:10.087 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffadfa3a63770]
14:10:10.087 3 CLASSPNP.SYS[fffffadf98e0a8c9] -> nt!IofCallDriver -> \Device\00000068[0xfffffadfa45e0730]
14:10:10.087 5 ACPI.sys[fffffadf98fa9e69] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T1L0-e[0xfffffadfa45df060]
14:10:11.821 AVAST engine scan C:\WINDOWS
14:10:15.946 AVAST engine scan C:\WINDOWS\system32
14:14:20.805 AVAST engine scan C:\WINDOWS\system32\drivers
14:14:46.368 AVAST engine scan C:\Documents and Settings\D J RAC
14:31:28.087 AVAST engine scan C:\Documents and Settings\All Users
14:32:03.618 Scan finished successfully
14:54:58.759 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\D J RAC\Desktop\to up load\MBR.dat"
14:54:58.759 The log file has been saved successfully to "C:\Documents and Settings\D J RAC\Desktop\to up load\aswMBR.txt"

thanks a bunch…
Post #2 last edited
Hi joselepiu,

Sorry to hear about the problems you are experiencing with your machine.

It's good that you managed to get the aswMBR log but I see that the logfile indicates it was completed a while ago now.

1 Please go here:
http://www.bleepingcomputer.com/download/otl/

see if you can down load the application (OTL) and following the directions create a log.

2 If you can get it to run and create a log (any sort of log is fine!) then please copy and paste both of them (including the aswMBR log) into your original topic here:
http://forums.spybot.info/showthread.php?t=67759

a malware specialst from "Safer Networking" will then respond with details of extra scans required.

If you cant get it to run then please post back here in this forum and we will advise the next step.

Note please don't post the logs in this topic here on this forum but only in the topic here:
http://forums.spybot.info/showthread.php?t=67759
Regards

paws
Post #4
Hi joselepiu, Well done on get the logs posted :thumbup: You have done well! Dont worry about letting them know…. they will be informed.. All best paws
Post #5
well, im back again…

it seems that my comp is malware, virus free…

but i still have the problem about taking for ever to load (about 8 mins may be more some times)…

so i was told to come here again, to look for help…

the url for the posts @ spybot is this…

http://forums.spybot.info/showthread.php?t=67759 …

please have a look i hopefully someone can help me…

thanks…
Post #6
In the Spybot thread, near the end you said:

is above the start icon, in the browser, every time you go to a web site you can see a lot of (what i guess) web addresses flashing really rapidly, really fast…

That is actually normal, it's all then advertisements being loaded.


How does it behave if you boot to Safe Mode with Networking?
Post #7
hello ztruker… i tried it on safe mode with networking, & it takes almost the same amount of time to load… regarding the web addresses above the start icon, my concern is that everything gets kind of stuck for a few seconds when it gets to the ""https:// www. facebook .com/dialog /oauth?client _id=16995676698&response_ type=token%2C signed_request %2Cc"" (no spaces) web address… some much that i was able to write it down on a piece of paper… any advice?… thanks again…
Post #8
That looks like a perfectly valid URL to me. The oauth?client _id=16995…. looks like it's passing parameters to some kind of authorization routine. Can you provide a link I can click on to see what it does for me?
Post #9
a link of what?…

like i said, they are web addresses that change really fast above the start icon…

but when it gets to the one i mention it stays there for quite some time, in comparison to the other ones…

but i have notice that every time something in it changes…

when i turn the comp back on after let say 2 hours and try to do any thing on the internet i saw that when im loading / going to any page, above the start button there a bunch of web addresses that change very rapidly i have notice that there is this one ""https:// www. facebook .com/dialog /oauth?client _id=16995676698&response_ type=token%2C signed_request %2Cc"" (no spaces) that it stays on a bit longer that the others, even when im not logged in on face book…

with every different web site that i visit the numbers between the ""id="" & the ""&response""

Post #10
I really don't think there is anything wrong. As I said before also, the URLs you see flashing along the bottom of the browser window are normal and are the links to advertising that are included, imbedded on the web page you are trying to look at. Annoying, yes. Slow things down, definitely. Any site that survives by advertising on the pages it shows you has these. Some are worse than others and some include links that are very slow and often don't complete at all. I avoid these sites like the plague unless I don't have a choice.
Post #11
Ztruker, i think the long startup/shutdown time is the biggest problem (8+ minutes.) so maybe they need to run a file check to see if there are any corrupted files slowing it down,(maybe full hard drive.) this may also be the cause of any slow browser problem too. if not at least when you can isolate and fix the startup problem you will only be left with the browser problem, maybe adding an adblock program at a later date when everything else is running ok will cure that.. shrugs.. just my immediate thoughts, might help you, might not, but thought i'd pass them along anyway. :D :popcorn:
Post #12
thx…

Ztruker, i think the long startup/shutdown time is the biggest problem (8+ minutes.) so maybe they need to run a file check to see if there are any corrupted files slowing it down,(maybe full hard drive.)

how can i do that?…
Post #13
  • Open My Computer.
  • Right click on drive: and select Properties (drive: is your boot drive, usually C:)
  • Click on the Tools tab then the Check now button.
  • Check the Automatically fix File System errors box.
Alternatively, you can click on Start then Run, type chkdsk c: /r and press Enter.

For your boot drive (usually C:), you will get a window that says the check could not be performed ….
Do you want to schedule this disk check to run the next time you restart the computer?
Click on Yes.

Shutdown and reboot. Chkdsk will start. It can take an hour or more to run depending on the size of your hard drive.

Be patient and let it complete undisturbed.

If it finds and corrects any errors, run it a 2nd time.
Post #14
i did it, but how do i know if it did find something wrong?… it didnt produced any log or something like that, that i can see… if it does, where can i find it?… i did run it 2 times, but it still the same… any other ideas?…
Post #15
It would have displayed messages if it was fixing anything and the summary at the end would have indicated so. No log file.

Time to check your system memory and hard drive.

Download Memtest86+ (you want the 2nd one Download - Pre-Compiled Bootable ISO (.zip)). Unzip it then create a CD from the iso file using your CD burning software. There is a good freeware burner called ImgBurn which will do this easily.

DO NOT burn the .iso file directly to CD. It must be used as input to a program that knows what to do with it, like the one I mentioned above.

You can do this on any computer that has a working CD Burner.

Boot the CD and run for at least 3 complete passes unless it shows errors sooner than that. An overnight run is even better.

Check the hard drive with the manufacturer's diagnostic tools.
Hard Drive Diagnostics Tools and Utilities (Storage) - TACKtech Corp.
Bootable Hard Drive Diagnostics

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI