What's new
By:
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal

Help pls! Auth failed, http connection errors.. :(

N

Nesco

New Member
Joined
Jan 15, 2010
Messages
26
Reaction score
0
Hi,

yesterday i got attacked by a trojan named antimalware doctor. it absolutely shut down every attempt to do anything on my computer.
Once i managed to get rid of it my Honorbuddy and my Gatherbuddy startet to give me errors when starting them.

Really dont know what i could do, i already searched the forum for answers but none worked.
Thanks in advance.

Nesco

PS: The system date of my Pc is set on 9th sept. because i once changed it for an other game.
Whenever i try to change it to the actual date the "warden check" message appears and only disappears when changing the date back - so thats not the problem.
 

Attachments

something is blocking Gb/Hb
check firewall/antivirus/proxy
 
Stopped every programm that i know that could deny the process - still not working..
Is there a way to see which programm is blocking?
 
create a new windows admin acc and try to run Gb from that acc
post back your results
 
What did you use to get rid of it? Run Malware Bytes to make sure everything is back to normal, and check your dns to make sure its pointing somewhere legit.

Also, you should set your clock correctly and remove the HKey_Current_user\Software\<10digitnumber>\LastUpdate key so that the warden check goes away, because it sounds like its set to a date in the future.
 
Thanks about the date :)
I already ran Malware Bytes and everything is clean now..
How can i check my dns? (w7)

Edit: If that is what you mean - the dns is automatically set.
 
Last edited:
The line : DNS Server shows my Ip and the NetBios TCP/IP is activated..
Was that what you needed to know?
 
Nesco said:
The line : DNS Server shows my Ip and the NetBios TCP/IP is activated..
Was that what you needed to know?
Click to expand...

DNS server shows your IP?

Try this:
- nslookup
- auth.gatherbuddy.com

See if it resolves an address of 188.93.10.125
 
-nslookup : "Server: unknown" and "Address: My Ip"

-auth.gatherbuddy : First was the same as above - unknown and my Ip

then the dns request timed out twice for 2 seconds, then a unauthorized answer appared :
Name: auth.gatherbuddy.com
Address: 188.93.10.155
 
Nesco said:
-nslookup : "Server: unknown" and "Address: My Ip"

-auth.gatherbuddy : First was the same as above - unknown and my Ip

then the dns request timed out twice for 2 seconds, then a unauthorized answer appared :
Name: auth.gatherbuddy.com
Address: 188.93.10.155
Click to expand...

Can you get to auth.gatherbuddy.com in a web browser?
 
Working as usual, i can log in and delete / upload profiles.
 
Nesco said:
Working as usual, i can log in and delete / upload profiles.
Click to expand...

Hmm, I'm at a loss. Something is preventing HB from accessing the site, but since your browser can get to it it must be application specific and not just something on your machine.
 
Check off these lines:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6522
O4 - HKCU\..\Run: [newsecureapp70700.exe] C:\Users\Felix\AppData\Roaming\B83BB896B25A32DE0B32F925AD57CBB6\newsecureapp70700.exe

Then restart and try. I'm betting its the Proxy line.
 
Mh, the seconds one is another new path of this &/(?%)(? virus i had.. -.- thanks for finding..

Edit: Rebooted.. aaand its working!
Here is are some cookies for you :) Thanks you so much!

Cookie%20Stack.webp
 
Last edited:
You must log in or register to reply here.
Back
Top