Many web pages suddenly no longer load

[Lex Gamer]

Well, my problem seems a bit broad, and I can't entirely point out what may have caused it, so I'll give you a run down of how it came about, then tag on some computer spec type stuff. With a large dose of luck, maybe I can get this straightened out.

Short Summary:
I was trying to get a game server up an running, spent hours on it, never got it to work, gave up, and now many websites I frequent will not load.

Long Summary:
So I was trying to set up a server for Minecraft on my PC, to play with my friends, and for all I could tell it should have been working. I tried lots of things, all sorts of forums and help websites, changed things they said to in my router, my computer, the game, lot's of changes, but the best I ever got was to be able to get people on it locally, and yes I port forwarded the heck out of all the things! BUT THAT ISN'T THE PROBLEM I POSE HERE.

The problem then arrouse when I gave up, and noticed that many webpages would not load any more. Most annoyingly my email at comcast, not comcast.net itself mind you, only my inbox. Other things like all of IGN.com doesn't work, or just the videos of GameTrailers.com. In fact the only videos that seem to work at all are Youtube videos, so I can't watch my DVR. (I don't mean to sound like I'm whining, simply trying to get all the helpful symptoms out there).

At one point in my troubleshooting for the server I had my firewall down, to see if that was the problem (it wasn't), and I fear I let something in that shouldn't be there, like a virus or something. Thing is, I've done everything I normally do to handle viruses: Loaded a restore point from before I began messing with things, ran my 'Advanced SystemCare' virus protection thing (it found nothing), and removed any recent programs I didn't recall from the programs list (Of which there weren't really any, just Minecraft). If it is a virus of sorts, I don't know what kind of program I'll need since I don't know what kind of virus it is, if that even makes sense.

The web problem persists though, I'm surprised the system restore didn't fix it. So then I figured it must be something I changed in the router(s). So I removed the port forwards and tried to recall anything else I might have changed, still bad. Not to mention, all other computers and devices in the house seem unaffected.

So at this point I'm at a loss and need a miracle or some heavy direction...

System Stuff:
It's an HP Pavilion Elite HPE-240f PC

haven't changed a thing since I got it, so it's still an
i5-650 core
8 GB RAM
Windows 7 64 bit

It's connected to a wired Linksys router, which is connected to a LAN wireless adapter hub, with the other hub on the opposite side of the house, which connected to a wireless belkin router (which is also connected to my computer, it's the two together that make a usable connection for me) Which is then connected to our modem/router (we don't use the router features of the modem because they suck.)
So it's a terrible set up I know, and will change eventually, but previously it had worked wonderfully, and still does for 40% of websites, lightning fast.

Closing:
I imagine you guys will ask me things as you try to help, I'll update this post to keep the data consolidated, and just reply to let you know I've done so. yeah?

[DaveLembke]

One test I would do is to see if its profile related. To test this you create an alternate account on the same pc. Then logon to that account and see if the problems are also with this other account or if the problems go away. If the problems go away then its a profile specific browser setting that needs adjustment etc. If the problem remains then we will dig deeper into changes of the system or router that would affect all users.

[Lex Gamer]

Unless I'm missing it, it seems I can't update my original post as I said I would, oh well there.
Anyway, I gave it a test per your suggestion, and the result is: Yes, the issue persists for all Users, including those freshly created.

[patio]

No need to update the original Post...just continue on in this Topic and i'm sure others can keep up...

[jason2074]

'Advanced SystemCare' virus protection

I think you should remove this all in one protection software as it is not recommended. Secondly, while waiting for Dave, check for any related internet VPN connection/Hamachi softwares installed by Add or Remove Programs or device manager and then try uninstalling.

[SuperDave]

I will move this thread to the malware forum and run some scans to make sure the computer is clean and we'll take it from there.

[SuperDave]

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
Please download AdwCleaner by Xplode onto your Desktop.

Before starting AdwCleaner, close all open programs and internet browsers, then double-click on the AdwCleaner icon.



If Windows prompts you as to whether or not you wish to run AdwCleaner, please allow it to run.
When the AdwCleaner program will open, click on the Scan button as shown below.



AdwCleaner will now start to search for malicious files that may be installed on your computer.
To remove the files that were detected in the previous step, please click on the Clean button.



AdwCleaner will now prompt you to save any open files or data as the program will need to reboot the computer. Please do so and then click on the OK button. AdwCleaner will now delete all detected adware from your computer. When it is done it will display an alert that explains what PUPs (Potentially Unwanted Programs) and Adware are. Please read through this information and then press the OK button. You will now be presented with an alert that states AdwCleaner needs to reboot your computer.
Please click on the OK button to allow AdwCleaner reboot your computer.A log will be produced. Please copy and paste this log in your next reply.
*********************************************
Please download Malwarebytes Anti-Malware from here.
Double Click mbam-setup.exe to install the application.

• It should update automatically if the computer is connected to the internet.
• Click on Threat Scan and click on Scan Now.
  
• The scan may take some time to finish,so please be patient.
• When the scan is complete make sure all the infections have "quarantine" selected in the Action box.
  
• Click on "Apply actions" You may be asked to Restart your computer to completely remove the infections.
  
• When disinfection is completed you can click on "Copy to Clipboard".
  
• Paste the log in you next reply (CTRL+ V)

*************************************************
Please download Junkware Removal Tool to your desktop.

•Warning! Once the scan is complete JRT will shut down your browser with NO warning.

•Shut down your protection software now to avoid potential conflicts.

•Temporarily disable your Antivirus and any Antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

•Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click JRT and select Run as Administrator

•The tool will open and start scanning your system.

•Please be patient as this can take a while to complete depending on your system's specifications.

•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

•Copy and Paste the JRT.txt log into your next message.
************************************************
Download Security Check by screen317 from one of the following links and save it to your desktop.

Link 1
Link 2

* Double-click Security Check.bat
* Follow the on-screen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Post the contents of that document in your next reply.

Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.

[Lex Gamer]

Hi SuperDave!

So here's what I got

adwcleaner:

# AdwCleaner v4.110 - Logfile created 10/02/2015 at 17:12:34
# Updated 05/02/2015 by Xplode
# Database : 2015-02-09.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Lex - LEX-PC
# Running from : C:\Users\Lex\Desktop\adwcleaner_4.110.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ytd video downloader
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Folder Deleted : C:\Program Files (x86)\Bench
Folder Deleted : C:\Program Files (x86)\DealBulldog Toolbar
Folder Deleted : C:\Program Files (x86)\Free Offers from Freeze.com
Folder Deleted : C:\Program Files (x86)\jZip
Folder Deleted : C:\Program Files (x86)\Common Files\Spigot
Folder Deleted : C:\Users\Lex\AppData\Local\Temp\jZip
Folder Deleted : C:\Users\Lex\AppData\Local\Giant Savings Extension
Folder Deleted : C:\Users\Lex\AppData\Local\jZip
Folder Deleted : C:\Users\Lex\AppData\Local\Slick Savings
Folder Deleted : C:\Users\Lex\AppData\Roaming\Slick Savings
Folder Deleted : C:\Users\Lex\AppData\Roaming\0T1F0D1F2W1G1I1F1T1Q
Folder Deleted : C:\Users\Lex\AppData\Roaming\Mozilla\Firefox\Profiles\9k8n9oyz.default-1384220911003\Extensions\[email protected]
Folder Deleted : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Folder Deleted : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Folder Deleted : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
[/!\] Not Deleted ( Junction ) : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
[/!\] Not Deleted ( Junction ) : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
File Deleted : C:\Users\Lex\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\Lex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jZip.lnk
File Deleted : C:\Users\Lex\AppData\Roaming\Mozilla\Firefox\Profiles\9k8n9oyz.default-1384220911003\searchplugins\yahoo_ff.xml

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
Key Deleted : HKLM\SOFTWARE\Classes\jZip.file
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppPath\jZip.exe
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3614D305-2DBB-4991-9297-750DD60FFC73}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CABB465E-13F6-4794-94D5-10364DE43652}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CABB465E-13F6-4794-94D5-10364DE43652}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CABB465E-13F6-4794-94D5-10364DE43652}
Key Deleted : HKCU\Software\Cr_Installer
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\jZip
Key Deleted : HKCU\Software\Somoto Toolbar
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\Zugo
Key Deleted : HKCU\Software\DriverTuner_Init
Key Deleted : HKCU\Software\DriverTuner
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Giant Savings Extension
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKLM\SOFTWARE\AdvertisingSupport
Key Deleted : HKLM\SOFTWARE\Freeze.com
Key Deleted : HKLM\SOFTWARE\Giant Savings
Key Deleted : HKLM\SOFTWARE\jZip
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\jZip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v34.0.5 (x86 en-US)


-\\ Google Chrome v40.0.2214.93

[C:\Users\Lex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Lex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

-\\ Chromium v

[C:\Users\Lex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Lex\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [7368 bytes] - [10/02/2015 17:10:27]
AdwCleaner[S0].txt - [7255 bytes] - [10/02/2015 17:12:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7314  bytes] ##########

-------------------------------------------------------------------------------------------------------------------------------------------

mbam:

This one refuses to download, sits at 0kb/s   :/

--------------------------------------------------------------------------------------------------------------------------------------------

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 7 Home Premium x64
Ran by Lex on Tue 02/10/2015 at 17:23:58.58
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{652853ad-5592-4231-88c6-706613a52e61}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{652853AD-5592-4231-88C6-706613A52E61}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\cloud software ltd"
Successfully deleted: [Folder] "C:\Users\Lex\appdata\locallow\somototoolbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\somototoolbar"
Successfully deleted: [Folder] "C:\ai_recyclebin"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ FireFox

Emptied folder: C:\Users\Lex\AppData\Roaming\mozilla\firefox\profiles\9k8n9oyz.default-1384220911003\minidumps [87 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 02/10/2015 at 17:36:10.73
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--------------------------------------------------------------------------------------------------------------------------------------------

Security Check:

 UNSUPPORTED OPERATING SYSTEM! ABORTED!

-----------------------------------------------------------------------------------------------------------------------------------------------

If the second one ever decides to download, I'll reply with that as well. The last one probably isn't supposed to do that... anyway, it's Windows 7. After the other, the issue persists.

[SuperDave]

mbam:

This one refuses to download, sits at 0kb/s   :/

You can try downloading it in Safe Mode with Networking or download it on another computer and transfer it to your computer.It's important that we run this scan.

[Lex Gamer]

Dang, it won't download in safe mode either (and the issue persists).

I'll have to bring one of my USB drives into work tomorrow and download it to that, then bring it home tomorrow evening. 

[SuperDave]

Ok, please keep me updated.

[Lex Gamer]

Got off work early today
here's the log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2/12/2015
Scan Time: 12:45:30 PM
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.11.20.06
Rootkit Database: v2015.02.03.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Lex

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 409828
Time Elapsed: 10 min, 56 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 2
PUP.Optional.CrossRider.A, C:\Users\Lex\AppData\Local\Updater21810, Quarantined, [b35379c54e2e3303cca8bc4f6d96ff01],
PUP.Optional.CrossRider.A, C:\Users\Lex\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_halffneccaebicfdfajnbfgpglahfgoe_0, Quarantined, [da2c9da17606ff37d1a434e0838028d8],

Files: 3
Malware.Packer.Gen, C:\Program Files (x86)\Windows Movie Maker\WMM2EXT.dll, Quarantined, [c93d4df1592348ee8065f0759a660ff1],
PUP.Optional.GiantSavings.A, C:\Users\Lex\AppData\Local\Updater21810\Updater21810.exe, Quarantined, [20e61c2285f76ccaf9bed169659c6f91],
PUP.Optional.CrossRider.A, C:\Users\Lex\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_halffneccaebicfdfajnbfgpglahfgoe_0\3, Quarantined, [da2c9da17606ff37d1a434e0838028d8],

Physical Sectors: 0
(No malicious items detected)


(end)

[SuperDave]

I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan

•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

•Check
•Click the button.
•Accept any security warnings from your browser.

• Leave the check mark next to Remove found threats.
  

•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

[Lex Gamer]

For Chrome and Firefox, it's another thing that refuses to download. Luckily my sister is around with her laptop, so I downloaded it to hers and moved it to mine, then the problem was that when I ran the installer, it tried to download more stuff... which it refused to do.
So I tried Internet Explorer to skip having to do the download, but after accepting the terms and conditions I get a blank pop up window, I've attached an image of it.


[attachment deleted by admin to conserve space]

[SuperDave]

There are different procedures for anyone not using IE. Did you notice that?