Member Avatar for courtney.

Hello,
I am new to this forum & I actually found your site through doing a search on google on this thread: http://www.daniweb.com/techtalkforums/showthread.php?t=5212&page=1&pp=15

I am having similar problems. A few websites are giving me the cannot display page with the "Cannot find server or DNS ErrorInternet Explorer"
Not all sites does this. However, I have a website & have had it quite some time now & it's not viewable either, which I am told by others can view it.

I read up on the thread above & I have done various things. I have ran the CWS Shredder & it came up clean, I have ran Spybot & it detected and fixed a few problems, and Adware came up clean, and I ran my AVG and it found no viruses, I had even uninstalled firewall and it done nothing. Last thing I done was run Hijack This and here is my results:

Logfile of HijackThis v1.97.7
Scan saved at 1:16:01 AM, on 5/16/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\8RGBL759\HijackThis[1].exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [AVG_CC] C:\Program Files\Grisoft\AVG6\avgcc32.exe /startup
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [getuname] C:\WINDOWS\System32\getuname.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/7d90ae05585062/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38111.818587963
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Also I must say that I had the Netsky & Bagel Worm detected in my emails, which I never opened attachments to, but decided that I needed to go ahead and reformat, which I did. After reformatting, my website and others were viewable until 2 days ago. Also, about a couple of weeks or so ago, I was having a problem with the certificate of B2L Community This is where my site is hosted on, It was like that for a couple of days or so then it just disappeared.

Any help given on this would be greatly appreciated. And I am a beginner when it comes to messing with settings on my PC, and I have had no experience of registry as well.

PS I did not want to post this in the other thread in fear of confusing the situation since it is still not resolved.

  • 3 Contributors
  • 2 Replies
  • 168 Views
  • 2 Days Discussion Span
  • Latest Post Latest Post by crunchie
Member Avatar for DMR

PS I did not want to post this in the other thread in fear of confusing the situation since it is still not resolved.

Thank you for that courtney- much appreciated. :)

I'm moving this to our Security forum so that some of our more "malware-savy" members can have a look at your HJT log.

Member Avatar for crunchie

This is the only suspect entry in your log:
O4 - HKCU\..\Run: [getuname] C:\WINDOWS\System32\getuname.exe

If you do not recognise it do the following:

Unzip HJT into it's own permanent folder before doing anything in order for it to create backups. (Not a temporary folder or the desktop & not directly on your hard drive). Close all (browser) windows & rescan with hijackthis. When the scan is finished place a check in the box to the left of the following entries & click 'fix checked' :

O4 - HKCU\..\Run: [getuname] C:\WINDOWS\System32\getuname.exe

Reboot into safe mode following the instructions here & navigate to & delete

C:\WINDOWS\System32\getuname.exe< file.

Reboot normally.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.