Computer Hope

Software => Computer viruses and spyware => Virus and spyware removal => Topic started by: toda on November 09, 2016, 07:34:29 AM

Title: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 09, 2016, 07:34:29 AM
I'm stumped ~ I thought over the years I'd seen it all … but now this is new to me. I'm working on a friends Toshiba Satellite running Windows 7. Some tune up was performed several weeks ago with the elimination of 3 or 4 "driver update" programs…no restore point was launched, so I can't go back to a previous point.

My friend phoned to tell me she was having problems trying to open some websites most dealing with travel. My first impression was her system was Hijacked! I found that I'm unable to launch previously installed "spyware" programs I'd installed: Spybot => Runtime error @ 500E8338.

I'm unable to download familiar programs I'm familiar with like Malwarebytes, Rootkit Blacklight, etc. She has Panda (lifetime) as her prophylactic (guarding as her virus protection). Panda is supposed to be the baddest Panda in the neighborhood. A system scan with Panda was not rewarding.

Seems to me as if a .dll file has been corrupted or deleted? Why? some sites are accessible but Pop-ups don't launch either. This
problem exists with several browsers I've tried to eliminate a browser concern. I again deleted a "Auto- Driver Program", my reason for thinking after I deleted all the driver update programs, several weeks later it's back.

Thinking out loud here, if a driver was downloaded and a .dll file was corrupted, then it's possible that that could be the root of the problem.

Your thoughts and opinions are welcomed before I reformat C: drive. Thanks Tommy
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: patio on November 09, 2016, 08:20:39 AM
I would visit the Malware Section of the Forums...
We have some of the Best over there to assist...she's definitely infected but they may be able to prevent you from having to do a wipe and clean install.
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: SuperDave on November 09, 2016, 10:19:44 AM
Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
If you can't download these programs, please try doing it in Safe Mode with NetWorking. If this doesn't work, download them on another computer and transfer them.

Please download AdwareCleaner onto your Desktop. AdwCleaner  (http://www.bleepingcomputer.com/download/adwcleaner/)

Before starting AdwCleaner, close all open programs and internet browsers, then double-click on the AdwCleaner icon.

(http://i424.photobucket.com/albums/pp322/digistar/AdwCleaner-icon.jpg)

If Windows prompts you as to whether or not you wish to run AdwCleaner, please allow it to run.
When the AdwCleaner program will open, click on the Scan button as shown below.

(http://i424.photobucket.com/albums/pp322/digistar/untitled.png)

AdwCleaner will now start to search for malicious files that may be installed on your computer.
To remove the files that were detected in the previous step, please click on the Clean button.

(http://i424.photobucket.com/albums/pp322/digistar/3.png)

AdwCleaner will now prompt you to save any open files or data as the program will need to reboot the computer. Please do so and then click on the OK button. AdwCleaner will now delete all detected adware from your computer. When it is done it will display an alert that explains what PUPs (Potentially Unwanted Programs) and Adware are. Please read through this information and then press the OK button. You will now be presented with an alert that states AdwCleaner needs to reboot your computer.
Please click on the OK button to allow AdwCleaner reboot your computer.A log will be produced. Please copy and paste this log in your next reply.
*********************************************
(http://i424.photobucket.com/albums/pp322/digistar/mbamicontw5.gif) Please download Malwarebytes Anti-Malware from here. (http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe)
Double Click mbam-setup.exe to install the application.
*************************************************
Please download Junkware Removal Tool (http://thisisudax.org/downloads/JRT.exe) to your desktop.

•Warning! Once the scan is complete JRT will shut down your browser with NO warning.

•Shut down your protection software now to avoid potential conflicts.

•Temporarily disable your Antivirus and any Antispyware real time protection before performing a scan. Click this  (http://www.bleepingcomputer.com/forums/topic114351.html) link to see a list of security programs that should be disabled and how to disable them.

•Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click JRT and select Run as Administrator

•The tool will open and start scanning your system.

•Please be patient as this can take a while to complete depending on your system's specifications.

•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

•Copy and Paste the JRT.txt log into your next message.
**********************************************************
Download Security Check by screen317 from the following link and save it to your desktop.

Security Check (http://www.bleepingcomputer.com/download/securitycheck/)

* Double-click Security Check.bat
* Follow the on-screen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Post the contents of that document in your next reply.

Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 10, 2016, 06:45:12 AM
Thanks Patio and Super Dave … As I pointed out in my thread, I'm not able to open "some" websites. Those sites where software is available to assist with Malware. I loaded Spybot and receive a code when it attempts to launch. In the 20 years, I've been working on computers - for friends, this is a first. Super Dave ~ thank you for the move … I wasn't sure if this was a result of an incomplete download from Driver updates or a virus/malware issue. Panda will launch and run but doesn't report any anomalies. I fixed a similar problem from an incomplete driver up but I knew where to go and  see the last downloaded file. The software company sent out a fix. Apparently the algorithm error argument. That is not an east fix by no measure.

I'll try to download on my Mac and launch in Safe Mode on the Windows Machine. Thanks again Tommy
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: SuperDave on November 10, 2016, 11:48:22 AM
Spybot is obsolete. Don't bother with it.
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 11, 2016, 07:39:45 AM
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 11/10/2016
Scan Time: 10:52 AM
Logfile: Malwarebytes Scan.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.11.10.06
Rootkit Database: v2016.10.31.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Mels

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 278405
Time Elapsed: 30 min, 15 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 19
PUP.Optional.Quiknowledge, HKLM\SOFTWARE\CLASSES\CLSID\{323C6E6D-1621-470F-8A52-4FDEC4E75E40}, , [7b233e805149d660c23b366d9e637d83],
PUP.Optional.Quiknowledge, HKLM\SOFTWARE\CLASSES\TYPELIB\{F213853A-D221-4C97-8A4B-7E0AC63F31A1}, , [7b233e805149d660c23b366d9e637d83],
PUP.Optional.Quiknowledge, HKLM\SOFTWARE\CLASSES\INTERFACE\{CE4B58AF-E4FD-4C27-8627-AE9324C11F3F}, , [7b233e805149d660c23b366d9e637d83],
PUP.Optional.Quiknowledge, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{CE4B58AF-E4FD-4C27-8627-AE9324C11F3F}, , [7b233e805149d660c23b366d9e637d83],
PUP.Optional.Quiknowledge, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{CE4B58AF-E4FD-4C27-8627-AE9324C11F3F}, , [7b233e805149d660c23b366d9e637d83],
PUP.Optional.Quiknowledge, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F213853A-D221-4C97-8A4B-7E0AC63F31A1}, , [7b233e805149d660c23b366d9e637d83],
PUP.Optional.Quiknowledge, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{F213853A-D221-4C97-8A4B-7E0AC63F31A1}, , [7b233e805149d660c23b366d9e637d83],
PUP.Optional.Quiknowledge, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{323C6E6D-1621-470F-8A52-4FDEC4E75E40}, , [7b233e805149d660c23b366d9e637d83],
PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{E38FA7CB-C053-4B07-84AD-BCA6D2BE4FE7}, , [1589f6c837638bab7bc243600bf69f61],
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E38FA7CB-C053-4B07-84AD-BCA6D2BE4FE7}, , [1589f6c837638bab7bc243600bf69f61],
PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{E38FA7CB-C053-4B07-84AD-BCA6D2BE4FE7}, , [1589f6c837638bab7bc243600bf69f61],
PUP.Optional.DriverRestore, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverRestore_RASAPI32, , [3866fec04951ab8be5a6e7d3d62dc53b],
PUP.Optional.DriverRestore, HKLM\SOFTWARE\MICROSOFT\TRACING\DriverRestore_RASMANCS, , [c1ddf2cc6e2c79bda5e6417906fd4fb1],
PUP.Optional.ReMarkable, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Re-Markable Update, , [c2dc5c622575a98dd8482e6ab151ac54],
PUP.Optional.ReMarkable, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Re-Markable_wd, , [aef0ead4ff9bf145cd535c3c43bf03fd],
PUP.Optional.Runner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Test TimeTrigger, , [c9d509b5d0ca44f2e8ba791f6a98b14f],
PUP.Optional.SavingsHero, HKLM\SOFTWARE\WOW6432NODE\Savings Hero, , [afef7e40a7f31323310cbedb3ec44ab6],
PUP.Optional.NewPlayer, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NewPlayerUpdaterService, , [49552f8f792183b367a1791b8f73e51b],
PUP.Optional.GetSavin, HKU\S-1-5-21-4250833897-710296522-4234368863-1000\SOFTWARE\APPDATALOW\SOFTWARE\GetSavin, , [e8b6efcfbbdfeb4b2a8a8703dd258e72],

Registry Values: 8
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{21BC2CE4-79DF-4413-85BC-2DFCF54E7739}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, , [f4aa2698e0ba6acc4d3c7955877bf60a]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{DD36445E-BF8C-4CD0-A5D2-4CEAC5E7144C}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, , [7b23a816abefbb7bdaaf7f4f1ee4768a]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{F113C99E-205B-4815-BEC7-AC9B7603B2E1}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Windows\SysWOW64\ARFC\wrtc.exe|Name=wrtc|, , [b6e8308e2e6c0a2cfb8df6d843bf6e92]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{7C22455A-BCE2-461A-856E-33FA2489F338}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Windows\SysWOW64\ARFC\wrtc.exe|Name=wrtc|, , [ff9f7c42cdcdd85e00889d3129d94cb4]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{C8D27012-CC23-4F75-B413-04816AEAD78D}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, , [b9e5724c405a52e4256465691de5728e]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{E164221F-683F-4063-A42B-3C88FA935496}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, , [d5c91ea0a7f321159fea2ea042c0ce32]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{ADBA3DFC-DA3C-4961-9691-C5880B91797A}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Windows\SysWOW64\ARFC\wrtc.exe|Name=wrtc|, , [9fff2b93d8c275c1652307c7e9197e82]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{BD3268A2-F6FF-41F8-9DA7-2CCC550EF1E5}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Windows\SysWOW64\ARFC\wrtc.exe|Name=wrtc|, , [5648fbc30b8f23135533448a986a669a]

Registry Data: 0
(No malicious items detected)

Folders: 1
PUP.Optional.ConduitTB.Gen, C:\Users\Mels\AppData\Local\CRE, , [acf227977a200d293ab316cf61a0ae52],

Files: 7
PUP.Optional.DriverUpdate, C:\Users\Mels\Downloads\DriverUpdate-setup.exe, , [019d0eb0a6f4e1558b46ecbad2315ca4],
PUP.Optional.RegCleanerPro, C:\Users\Mels\Downloads\rcpsetup_cpxlatest_cpxlatest.exe, , [504ef0ce1585f046fedf2250926efc04],
PUP.Optional.RegCleanerPro, C:\Users\Mels\Downloads\rcpsetup_cpx_cpx.exe, , [2b73c1fd27731b1b25b83141c53b7b85],
PUP.Optional.APNToolBar, C:\Users\Mels\AppData\Local\Downloaded Installations\{6C9C7031-E3C7-4C60-BECD-25D97EDAB7CF}\The Weather Channel App.msi, , [3866704ec1d9181e0c89f1d7a45c8a76],
PUP.Optional.APNToolBar, C:\Windows\Installer\36e97e.msi, , [6a34dce21486c571177ecefa12ee956b],
PUP.Optional.ConduitTB.Gen, C:\Users\Mels\AppData\Local\CRE\fdkednngfjmpnljkolbapdednncafhen.crx, , [acf227977a200d293ab316cf61a0ae52],
PUP.Optional.SavePathDeals, C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bedjehmkhkgidfpdcninflgnnbcglmkd_0.localstorage, , [742a823ca4f640f6ca47d2c7bd45ab55],

Physical Sectors: 0
(No malicious items detected)


(end)
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 11, 2016, 07:41:26 AM
# AdwCleaner v6.030 - Logfile created 10/11/2016 at 10:21:20
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-11-10.1 [Server]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : Mels - MELS-PC
# Running from : D:\AdwCleaner.exe
# Mode: Clean
# Support : hxxps://www.malwarebytes.com/support



***** [ Services ] *****

[!] Service not deleted: NewPlayerUpdaterService
[!] Service not deleted: qknfd
[!] Service not deleted: YahooAUService
[!] Service not deleted: swdumon


***** [ Folders ] *****

[-] Folder deleted: C:\Program Files (x86)\HD-Vpro--1.91
[-] Folder deleted: C:\Users\Mels\AppData\Local\MapsGalaxy_39
[-] Folder deleted: C:\Users\Mels\AppData\LocalLow\MapsGalaxy_39
[-] Folder deleted: C:\Program Files (x86)\MapsGalaxy_39
[x64] HKLM\SOFTWARE\Classes\Interface\{05F5414D-DCD6-4EE6-8C46-20A3F1209E0F}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{0D8734DB-7110-4CDB-833F-52BC93865AB2}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{200F1306-1316-473B-90CE-A777144BBDF5}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{269D72FF-8629-4DB6-AB4F-86AA3A92F8A9}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{41AE59EF-88EE-450B-B60A-F153679E6EE8}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{4404078E-2745-4E25-B010-BBC026C0E9C2}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{47A124BA-A6E2-4ED4-AA6F-84FF29E4D7DC}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{4AEF0F25-D761-4EAA-AEB7-9E756C6BF11E}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{4E26AE37-A628-496E-B410-5D432F38BD1A}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{4F55EE37-30D9-45D6-870F-3EEA6CB9BE9F}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{50ADA3A9-20B4-4EE0-8AFA-DE0BCAB94A25}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{6818868A-1B3D-4E35-A561-FA964A96CD3B}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{797657A7-D3C7-4D7C-98E3-D0324DDFC4BA}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{7A739956-FB82-4379-AF60-E38C48226AA7}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{902E7D34-D421-4766-8191-15A1B52D0BA2}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{9193E23B-4182-493F-A38E-682307A7C463}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{9D2A3081-70F2-4877-A06D-9BF697A35518}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{9EF88362-131D-48B0-8969-CCC96F897AB8}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{B03CD630-51ED-4B15-974C-76472E4624C0}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{C285FFF4-DE32-402D-B8FD-6F34F1D5920C}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{CDDB17CD-7A6B-4887-8EE6-68A43F532197}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{DE4CC811-10B7-41F0-AB0E-EC2CFC91A8AD}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{E2DAE1A4-09EE-4209-AD3B-1C96330EDCEF}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{EF8C6146-8009-4A3F-8CA3-9E932B017099}
[-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{F8B71C28-069E-406D-8D61-4461B464E37F}
[-] Key deleted: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\NewPlayerUpdaterService
[x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
[-] Key deleted: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF}
[-] Key deleted: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{4C4C7AAB-5854-4241-A414-E2F1EF119C4A}
[-] Key deleted: HKU\S-1-5-21-4250833897-710296522-4234368863-1000\Software\Microsoft\Internet Explorer\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}
[C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: websearch.ask.com
[-] [C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: searchtheweb
[-] [C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: askws
[-] [C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: search.conduit.com
[-] [C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: aol.com
[-] [C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: ask.com
[-] [C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: start.mysearchdial.com
[-] [C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: mysearchdial.com
[-] [C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default] [extension] Deleted: aaaaaiabcopkplhgaedhbloeejhhankf
[-] [C:\Users\Mels\AppData\Local\Google\Chrome\User Data\Default] [extension] Deleted: bbmegnmpleoagolcnjnejdacakedpcgd


*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [31562 Bytes] - [10/11/2016 10:21:20]
C:\AdwCleaner\AdwCleaner[R0].txt - [7171 Bytes] - [21/04/2014 22:27:06]
C:\AdwCleaner\AdwCleaner[S0].txt - [6718 Bytes] - [21/04/2014 22:31:10]
C:\AdwCleaner\AdwCleaner[S1].txt - [29182 Bytes] - [10/11/2016 10:16:00]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [31856 Bytes] ##########
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 11, 2016, 08:06:11 AM
/Volumes/USB20FD/Screenshot of Error

/Volumes/USB20FD/Screenshot of Error.jpg

[attachment deleted by admin to conserve space]
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 11, 2016, 08:09:25 AM


/Volumes/USB20FD/Screenshot of Error.jpg
[/quote]

Sorry about the multiple posts. Trying to mover back and forth between Windows 7 (problem computer) to my MacBook is a challenge.
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 11, 2016, 08:20:21 AM
"…download junk file to your desktop…" Dave keep in mind that the source computer running Windows 7 is the problem computer => not the Macbook that I am using to logon to Computer Hope Boards. I have to download windows files => burn to disk => launch on the subject computer. Write text files .txt => load to flash drive => then post thread to board. Also, as you probably know, Cntrl-V or Cee doesn't apply to Apple. The more I work on Windows OS, the more I appreciate my Macbook.
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: SuperDave on November 11, 2016, 01:27:24 PM
Have you tried another browser?
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 12, 2016, 06:25:02 AM
Yes ~ I pointed that out in my original thread…One of the first things I do when unable to connect to a web page.
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: SuperDave on November 12, 2016, 11:57:15 AM
I believe it has something to do with Panda firewall. Please try disabling Panda and see if it goes away. If it works with Panda disabled, you will need to check the settings.
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 13, 2016, 11:04:38 AM
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 7 Home Premium x64
Ran by Mels (Administrator) on Sat 11/12/2016 at 12:17:00.13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 21

Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\Users\Mels\AppData\Roaming\productdata (Folder)
Successfully deleted: C:\Windows\wininit.ini (File)
Successfully deleted: C:\Program Files (x86)\GUT4CEC.tmp (File)
Successfully deleted: C:\Program Files (x86)\GUTECCD.tmp (File)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HIEZ9IX (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IBKIU0Z (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LGNH4GS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D08Q5LOW (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E95WY7YF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0T62ECR (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M387UF96 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\URA0U975 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HIEZ9IX (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IBKIU0Z (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LGNH4GS (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D08Q5LOW (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E95WY7YF (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0T62ECR (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M387UF96 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\URA0U975 (Temporary Internet Files Folder)



Registry: 3

Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\qknfd (Registry Key)
Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\SWDUMon (Registry Key)
Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\YahooAUService (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 11/12/2016 at 12:33:59.42
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks Dave ~ this suggestion and Junkware Removal Tool solved her problem.  Somewhere in those lines is/was the problem. I would like to know which line was the culprit..Tommy
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: SuperDave on November 13, 2016, 11:15:38 AM
I still believe that the problem was with Panda.
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 14, 2016, 08:25:16 AM
You may be right … it's back but with fewer deletions. I ran JRT again and only 14 deletions showed up. There are two files with exclamation marks that I tried to delete from the registry => didn't happen! Also, I added a REM to the line…that didn't take either. Those two files continue to show up. Whatever those files represent is very possible the problem.

Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 7 Home Premium x64
Ran by Mels (Administrator) on Sun 11/13/2016 at 18:01:16.53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 16

Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HIEZ9IX (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IBKIU0Z (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LGNH4GS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D08Q5LOW (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E95WY7YF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0T62ECR (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M387UF96 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\URA0U975 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HIEZ9IX (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IBKIU0Z (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LGNH4GS (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D08Q5LOW (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E95WY7YF (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0T62ECR (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M387UF96 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\URA0U975 (Temporary Internet Files Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 11/13/2016 at 18:09:54.90
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
My friend phoned to tell me it happened again … She's sending the latest JRT text file. I'm narrowing this problem down to find out which files are left standing and causing the problem. Any thoughts are welcomed…tommy
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 14, 2016, 08:31:42 AM
The latest JRT text as of this morning:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 7 Home Premium x64
Ran by Mels (Administrator) on Mon 11/14/2016 at  9:43:55.48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 14

Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HIEZ9IX (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IBKIU0Z (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LGNH4GS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D08Q5LOW (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E95WY7YF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0T62ECR (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\URA0U975 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HIEZ9IX (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IBKIU0Z (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LGNH4GS (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D08Q5LOW (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E95WY7YF (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0T62ECR (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\URA0U975 (Temporary Internet Files Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 11/14/2016 at  9:55:07.30
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 14, 2016, 08:33:38 AM
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 7 Home Premium x64
Ran by Mels (Administrator) on Mon 11/14/2016 at  9:43:55.48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 14

Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HIEZ9IX (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IBKIU0Z (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LGNH4GS (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D08Q5LOW (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E95WY7YF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0T62ECR (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Mels\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\URA0U975 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0HIEZ9IX (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IBKIU0Z (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5LGNH4GS (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D08Q5LOW (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E95WY7YF (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I0T62ECR (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\URA0U975 (Temporary Internet Files Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 11/14/2016 at  9:55:07.30
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: SuperDave on November 14, 2016, 12:44:17 PM
Are you still experiencing the same problem?
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: toda on November 16, 2016, 07:32:23 AM
Maybe not Dave … I "THINK" the problem has been resolved … I updated that worst of the worst browsers known to the computing world => I.E. since that was in the text report JRT, and installed Mozilla Firefox to open to Yahoo. She likes Yahoo so I performed a work-around. So far so good. I found many - many Google matches on that topic. Even some not-too-easy to read YOUTUBE videos.

I've concluded the problem has so many variances that trying to nail one specific problem down to a "fix" is trial and error. Perhaps my subject would lend itself to more interest in an effort to find a solution. My friend told me she has several of her customers who are having the same exact problem with one variation => email.

In an effort to keep this topic in the forefront of curious computer minds, I'll post again on any new issues should I work to address others problems as well. Tommy
Title: Re: "This site can't be reached" = ERR_Invalid_ARGUMENT
Post by: Dr Jay on November 17, 2016, 01:47:07 AM
Since the user claims the problem is solved, this topic is closed. Please start a new topic for further help.

=>SOLVED