connection to security sites is interrupted

[mrK]

everytime that i use my browser to connect to sites such as grisoft, symantec, etc., i get an error message in my browser (firefox v3.0.1) that the connection is interrupted.  i also tried to browse those sites using internet explorer and it also displays that the page cannot be loaded.  the antivirus installed on my computer is NOD32, and (hopefully) it updates itself,  but the previous av's that i used could not update (namely, avast! and avg) maybe also due to the interruption to the connection.  i was able to connect to these sites before, but suddenly now i can't. i would appreciate all the help you could give me, thx..

i have CrapCleaner installed and run.
i could NOT download SAS because connection is interrupted when i go to http://www.superantispyware.com
i could NOT download MBAM for the same reason as above
i have updated my JRE (update 7)
i could NOT download HJT for the same reason as above

[evilfantasy]

See if you can download HJT from here. http://filehippo.com/download_hijackthis/download/58170ee6e58bba306c943f5b6d745c99/

[mrK]

thanks for the very quick reply

i have downloaded and installed HJT

log is as follows

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Download and run SAS from here. http://filehippo.com/download_superantispyware/download/ecce874e7453171c74fa20c432221e09/

Post the log from SAS in the next reply along with a new HijackThis log.

[mrK]

sorry, it took a while to scan with  SAS.

attached is the SAS log file together with the fresh HJT log.

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Open HijackThis and select Do a system scan only.

Place a check mark next to the following entries: (if there)

- O2 - BHO: (no name) - {10F3E8BD-257A-4702-A2F5-DC02055B068C} - (no file)
- O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
- O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://c:\windows\downloaded program files\conflict.1\stg_drm.ocx

Important: Close all windows except for HijackThis and then click Fix checked.

Exit HijackThis.

----------

Can you download and run MalwareBytes now?

[mrK]

i followed your instructions but still the connection interruption persist

could not connect to besttechie (connection interrupted)
could not connect to bleepingcomputer (connection interrupted)

[evilfantasy]

Download Combofix by sUBs from one of the below links.


Link #1
Link #2

Combofix MUST be saved to the desktop.

Close all other browser windows.
 
Go to Start > Run and copy/paste in the following:

"%userprofile%\desktop\combofix.exe" /killall

Press Enter and Combofix will begin to run.
 
When finished, it will produce a log file located at C:\ComboFix.txt
 
Post the contents of that log in your next reply.

Note: Do not mouseclick combofix's window while it is running. That may cause your system to stall.

[mrK]

i am very sorry but i cannot

connection to the two links provided was inturrupted

any other mirror site you could suggest?

[evilfantasy]

I uploaded it here. http://www.filedropper.com/combofix_2

[mrK]

filedropper says:

503: Service Temporarily Unavailable

The server is temporarily unable to service your request due to
maintenance downtime or capacity problems. Please try again later.

what shall i do?

[evilfantasy]

Try again please. I just went to the download page with no problems.

http://www.filedropper.com/combofix_2

[mrK]

after i coppied "%systemroot%...../killall, there was a message saying that a rootkit has been detected, and that i must reboot my system.  without other options, i clicked ok and it rebooted.  was that normal?

anyway, here is the log

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

there was a message saying that a rootkit has been detected

A message from what?

[mrK]

i don't know. it just poped up. the header was like, "Rootkit!" and the contents were like what i said, that there was a rootkit detected and a reboot is needed.