Windows XP forum: Google Sites Won't Open

Grif Thomas, thanks, but I'm afraid that's not the answer. I've tried resetting modem and router and turning off PC before, possibly not in the sequence you mentioned, so I tried it again as per your instructions. The extended modem off time apparently made the ISP supply me with a new IP address, but didn't get me any better connectivity with Google.

My System apparently doesn't have the same path to cache and temporary internet folders as yours, but I cleaned these out from Tools in FF and IE (as I have done a number of times in the past few days), and it makes no difference.

Grif Thomas, thanks again. You were right about the path. I had "Show all files and folders" turned on; it's just that I looked in the wrong place. Sorry

In any case, I emptied out the temp folders, etc. No luck. I had already looked in the Hosts file a few days ago. Google isn't there. I also updated my version of Java. Again no change.
I had run Windows Defender, AVG Spyware, and Norton AV (all updated) on my PC a couple of days ago, and found nothing much. I ran the anti-spyware you recommended, and it found a few trojans and some tracking cookies, which I quarantined. I rebooted, tried Gmail - no luck.

I then did something I should have done a couple of days ago. I took my wife's laptop to a cafe that has a hotspot. I got into GMail with no problems (with FF), and read her mail. I closed the laptop, took it home, and opened it up, and tried getting into GMail, and it worked. I then went to my PC and tried GMail - no luck! Went back to the laptop, closed FF, opened it again, and tried to get GMail - this time no luck.

I then spent a couple of hours with Technical Support at my IPS, trying to convince them that it's a problem with connectivity to Google. They did all sorts of traces, and changed all sorts of settings for my modem and router (including my password) but they couldn't find anything. At their end, everything worked. I think we both gave up out of exhaustion.

That's the situation now, except that I think I've regressed - now Google search doesn't work correctly on FF. Sometimes I get nothing when I search, sometimes the search list but the links don't work. In IE, Google search seems to work OK. All other sites work OK on FF and IE.

If you have any more suggestions, I'd be happy to hear them.

Please try these instructions and a second free spyware removal tool from the link below.. Remember, although it may take quite a bit of time, run these tools on BOTH of your computers, laptop and desktop, repeatedly till you find nothing on both..

On a friend or family member's computer, download the Malwarebytes installer and update files from the links below, copy them to a CD or flash drive, then transfer the files to the problem machine and use them.. I use the sites below to download the installer file and the manual updater:

Once downloaded and before transferring them to the problem machine, rename the program installer "mbam-setup.exe" file to something else like "Gogetum.exe", then copy the installer file and the update file to a CD or flash drive.. Transfer the file to the problem machine, then install the "Gogetum.exe" file, then run the update to get the program current.. After that, run a full system scan and delete anything it finds.

Malwarebytes Installer Download Link (Clicking on the links below will immediately start the download dialogue window.)
http://www.besttechie.net/tools/mbam-setup.exe

Malwarebytes Manual Updater link
http://www.malwarebytes.org/mbam/database/mbam-rules.exe

In a few situations, in order for the program to run, it was also necessary to rename the main "mbam.exe" file also after installing it.. It resides in the C:\Programs Files\Malwarebytes Antimalware folder.

Hope this helps and let us know more.

Grif

Grif Thomas, again thanks for your help. As I said, I don't think the router is at fault, since removing the router didn't change the way the system rejects Google sites at all. As for updating the modem, it was provided by the cable company, and it doesn't have any firmware updates.

My present thought is to change ny ISP. I have to leave on a 2 week trip in a couple of days (I'm not taking the laptop, I'm taking a flash memory), so I won't be able to do this, or try the spyware removal tool you mentioned till I get back. I had hoped to resolve the problem before I left, but unfortunately, there's not enough time.

Festerf, are you able to get into Google Gmail Help and ask them any questions? I can't - have you given it a try - I once had a different problem with Gmail, and they answered me and gave me a solution.

Just curious whether Chrome has something to do with the issue.. No reason for it but it is curious??

On a computer without Chrome can you log in to Gmail or use Google sites?

Hope this helps.

Grif

No i have both IE and Firefox on the laptop with the problem.. i only tried to install Chrome to see if it would help but as i mentioned above.. When i click on any Chrome link i get sent straigh t to google homepage..

Has to be the strangest problem i have seen in years.. it leads me to think there is still some forum of infection on the lappy but after 2 scans of 3 different programs the laptop shows up clean..

...searching the computer for the mentioned file in the link below:

http://forums.cnet.com/5208-6132_102-0.html?forumID=32&threadID=322286&messageID=2939683&tag=forums06;posts#2939683

Read the discussions mentioned carefully and be sure to identify the correct problem malware file.. IF it's there, is will reside at : C:/Windows/system32/wdmaud.sys
___________

And if you haven't used BOTH Malwarebytes and SuperAntispyware, please use the instructions below to scan your computer:

On a friend or family member's computer, download the Malwarebytes installer and update files from the links below, copy them to a CD or flash drive, then transfer the files to the problem machine and use them.. I use the sites below to download the installer file and the manual updater:

Once downloaded and before transferring them to the problem machine, rename the program installer "mbam-setup.exe" file to something else like "Gogetum.exe", then copy the installer file and the update file to a CD or flash drive.. Transfer the file to the problem machine, then install the "Gogetum.exe" file, then run the update to get the program current.. After that, run a full system scan and delete anything it finds.

Malwarebytes Installer Download Link (Clicking on the links below will immediately start the download dialogue window.)
http://www.besttechie.net/tools/mbam-setup.exe

Malwarebytes Manual Updater link
http://www.malwarebytes.org/mbam/database/mbam-rules.exe

Next, download the SuperAntispyware program and the manual updater from the links below. After running the Malwarebytes tool above, if you still can't download and install it directly from the problem machine, download it on a friend or family member's computer as well.:

SuperAntispyware
http://www.superantispyware.com/

SuperAntispyware Manual Updater
http://www.superantispyware.com/definitions.html
____________

In a few situations, in order for the program to run, it was also necessary to rename the main "mbam.exe" file also after installing it.. It resides in the C:\Programs Files\Malwarebytes Antimalware folder.

Hope this helps.

Grif

Seems like wdmaud.sys is hiding from the normal scanning process, much like a rootkit.

We'll see.

Grif

If you read my post in the thread mentioned in my earlier link, you'll see the "C:\Windows\System32\drivers\wdmaud.sys" file is intended to be there.. It's only a problem if the file resides in the C:\Windows\System32 folder, exactly as Mark mentioned below.

Hope this helps.

Grif

Please follow Marianna's instructions in the link below to search for the "TDSSserv.sys" file/driver:

http://forums.cnet.com/5208-6132_102-0.html?forumID=32&threadID=319948&messageID=2926532#2926532

Hope this helps.

Grif

I discovered the problem i had was with a monstermarket redirect which was not removed correctly on the first scan of anti spyware software... after running combofix all was sorted thanks for your time guys

I was having the same trouble...

I'm on Windows XP Pro SP 2, using Firefox 3.0.6

When I used Google, Live, or Yahoo searches, I'd get link results like: police-xp.com, toseeka.com, antivirus-scan.com, antivirus.com, moxiesearch.com, couponmountain.com, monstermarketplace.com, areaconnect.com, searchexplorer.com, and info.com.

When I'd search using Blackle (an energy-efficient version of google), Gigablast, Altavista, and Lycos I get the normal link results that I am used to; sites like: law.cornell.edu, usconstitution.net, wikipedia.org, house.gov, law.emory.edu, archives.gov, findlaw.com, gpoaccess.gov, and memory.loc.gov...

I'd also get normal search results from Google & Yahoo IF & ONLY IF I went through a proxy server

To add to my wonderment, when I searched Google, Live, or Yahoo and got the weird links, I'd still seem to get the proper site descriptions....

I had been having this problem since Google's "This Site May Harm Your Computer" issue on Saturday, Jan. 31st, for which I was up and had experienced first-hand, though I am not sure if they're related, but it sure is suspicious, as I had tried clicking Google's info link about "This Site May Harm Your Computer", but that page would never load, it would just go to a blank screen. When I clicked on the website result link, instead of taking me to my desired website it would take me to the info page that previously would not load, but would offer me no way of getting to the actual site. About 30 minutes later that issue was gone, but I then started getting the bogus link results...

I cleared my history, cookies, & cache. I made sure that I had the most up-to-date installs on my OS, browser & its plugins. I scanned my PC with AVG, TrendMicro, Adware, Spybot Search & Destroy, and with HijackThis... they all found nothing...

Totally frustrated, I downloaded Norman AntiVirus and scanned with that and it found that "C:\WINDOWS\system32\wdmaud.sys" was infected with W32/Agent.LED. Norman deleted the file, and all was well after that.

As an example of the problem I created a pic with screen shots here: http://i166.photobucket.com/albums/u81/stormyygirll/All-ConstitutionSearch2-5-09-1.jpg
It shows, side-by-side, my Blackle, Google, & Yahoo search results for "U.S. Constitution".

Since I started this thread, I feel obliged to state how MY Google problem was finally solved:
The cable company technician came today and replaced the modem with a new one, and now all Google sites seem to work. Still don't understand
how a faulty modem can discriminate against just Google, but it
happened.

Hi..No doubt you have this resolved by now as it is April /09

If not..This will fix it..Thankfully, someone found out that it was Ctfmon.exe that was causing Chrome to always fail for some reason. So, all you need to do is to simply disable the process and Google Chrome would work just fine. The trick was how that can be done. Again, that merely requires you to check out the Microsoft's support site and the instructions are all spelled out there. In fact, it tells you how to remove Ctfmon.exe entirely.

But before removing it, you might want to check and see if you really need the process or not. Now according to Microsoft, Ctfmon.exe monitors the active windows and provides text input service support for speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies. Sounds to me like something I don't need at all (thankfully!)

And apparently, all you need to do is to unregister a couple of dlls, reboot and you'll then be able to enjoy using Chrome! Yup. A very simple and painless fix indeed!



Run Regsvr32 /U on the Msimtf.dll and Msctf.dll Files
1. Click Start and then click Run.
2. In the Run dialog box, type the following command:
Regsvr32.exe /u msimtf.dll
3. Click OK.
4. Repeat steps 1 through 3 for the Msctf.dll file.
5. Reboot.