WHY Cant I Get Google - and What is Search.iMesh ?? !!!

[PFMarconi]

Bear with me cos im a real novice.
I have a laptop running Vista and the internet via a wireless router. That is all ok.
My prob is with a desktop (which my 2 sons use)
It goes like this:
1. 3+ months ago it was freezing - v high cpu - probs opening progs.
2. I did system restore (i think)
3. System suddenly working fine.
4. 6 days ago Windows ReActivation message came on, so had 3 days to sort that out. At the same time, the browser bar had search.iMesh in it - despite default being Google. Unable to go online at all.
5. Dealt with reactivation - no probs.
6. Tried finding all ways to get rid of iMesh stuff then finally found where it was and "uninstalled" it - i think??
7. Now have Google back in address bar but unable to go online - even via Microsoft default.

What has gone wrong and how can I sort it out?

Thanks for any advice. I really am in the dark !!
ps having tried 4 dates, been unable to restore system to earlier time.
Paul

[evilfantasy]

search.iMesh is an indication your computer is being used to download via P2P, which in many instances P2P downloads are usually illegal files being music, movies and so on.

What happens when you try to connect to the internet?

[PFMarconi]

Thanks Evil

I open up browser with Google in address bar & "IE cannot display the internet page" message.
Thinking about contacting Linksys, I put their IP address in the bar - 192.168.1.1...and got;
http://search.imesh/webResults.html?...&q=192.168.1.1
closed browser and Google homepage came up - in address bar only!
Whatever happens, nothing goes further than the IE cannot display...........message.

Thanks, Paul

(I've spoken to my lads abouts iMesh now - surprisingly they're not very pc savvy and would have just downloaded this without a second thought or checking any review)

[evilfantasy]

Try this please. Reset Internet Explorer 8 settings

Scroll down to and click To reset Internet Explorer automatically and use the Fix it button for the auto fix. You will likely need to restart IE for the settings to take effect.

[PFMarconi]

Thanks again Evil

No joy i'm afraid.
Unable to do auto fix, did simple manual one but without success. Tried twice.
Right now have address bar with http://go.microsoft.com/fwlink/?Link Id=74005
INFRONT of IE cannot display message is a pop up box;
Blue Band top says SmartBridge Alerts:BTHelpNotifier.exe-Entry Point Not Found
The actual message says "The procedure entry point GetProcessImageFileNameW could not be located in the dynamic link library PSAPI.DLL."

Hope this all means something to you cos it's double dutch to me!
Thanks again

Paul

[evilfantasy]

Can you download anything or transfer over the installer and install it?

Download TrendMicro HijackThis.exe (HJT) to the Desktop.

• Double-click on HJTInstall.
• Click on the Install button.
• It will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe.
• Upon install, HijackThis should open for you.
• Click on the Do a system scan and save a log file button
• HijackThis will scan and then a log will open in notepad.
• Copy and then paste the entire contents of the log in your post.
• Do not have HijackThis fix anything yet. Most of what it finds will be harmless or even required.

[PFMarconi]

I can't download anything.

Sorry, how do i go about using the installer - i have no idea.

Thanks, Paul

[evilfantasy]

Do you have another computer and a flash drive or a CD to copy files with?

Can you start Internet Explorer in Safe Mode and if so how does it act?

• Go to Start and in the search box type:
• iexplore -extoff
• Press Enter

Internet Explorer will now run without any additional functionality from addons.

How does it work now?

[PFMarconi]

Thanks Evil

Yes, I have a 4gb flash pen

Re. iexplore -extoff ...... started in Safe Mode - typed in iexplore -extoff in the files/folders box and put search to Computer. No results at all.
Am I doing something wrong?

Thanks for your help.

Paul

[evilfantasy]

In the search box are you leaving a space between iexplore and -extoff

[PFMarconi]

Thanks Evil

I have 2 user names to go in on -

Administrator
Magic6

The Magic6 account is used all the time. However, I have tried a search under both. Under both I have done this;

Start
Search
Clicked on All Files & Folders
Typed in iexplore -extoff
Clicked on My Computer
Search...............................and no results are displayed.

Thanks,
Paul

[evilfantasy]

OK I think there is some confusion.

Add the iexplore -extoff where I have the arrow pointing and then click where I have the circle.

Click the image to enlarge it.

[PFMarconi]

I'm very sorry Evil. I've completely and stupidly led you up the garden path with the understanding that the problem exists with a Vista system.
It doesn't!
The problem is on a desktop pc running XP.

My apologies.
Needless to say once you've stopped cursing my stupidity, any help would be gratefully received!

Paul

[evilfantasy]

Let's try this.

Put ComboFix on your flash drive and transfer it over to the infected computers desktop and then run it.

Download ComboFix© by sUBs from one of the below links. Be sure top save it to the Desktop.

Link #1
Link #2

**Note: It is important that it is saved directly to your Desktop

Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting ComboFix.

Temporarily disable your antivirus and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

Double click combofix.exe & follow the prompts.
Vista users Right-Click on ComboFix.exe and select Run as administrator (you will receive a UAC prompt, please allow it)
When finished ComboFix will produce a log for you.
Post the ComboFix log in your next reply.

Important: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.

Remember to re-enable your antivirus and antispyware protection when ComboFix is complete.

If you have problems with ComboFix usage, see How to use ComboFix

[PFMarconi]

As instructed-
Transferred ComboFix by flash pen to problem pc Desktop (normal mode)
AV etc turned off

Message shows up.
"This machine does not have the Microsoft Windows recovery console installed. Without it, ComboFix shall not attempt the fixing of some serious infections. Click "Yes" to have ComboFix download/install it. NOTE: this requires an active internet connection."

Unfortunately I can't download anything!

The ComboFix autoscan completes all the stages then that's it. After running the second link you mentioned, I end up with quite a log.

This system is legal by the way, having been bought from a local shop.

Paul