Author Topic: Downadup/Conficker worm? Or what?  (Read 14091 times)

0 Members and 1 Guest are viewing this topic.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Downadup/Conficker worm? Or what?
« Reply #15 on: December 24, 2015, 05:05:29 PM »
This computer isn't infected.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Downadup/Conficker worm? Or what?
« Reply #16 on: December 24, 2015, 05:09:03 PM »
I didn't think so. But what else could be stopping it from connecting to and/or downloading from ONLY antivirus sites (other websites no problem)? Or disabling saving of email attachments. Why can't it connect to or get updates from Avast? Any ideas?

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Downadup/Conficker worm? Or what?
« Reply #17 on: December 24, 2015, 05:16:26 PM »
I need you to download Complete Internet Repair:

http://www.majorgeeks.com/mg/getmirror/complete_internet_repair,1.html

Extract it and run ComIntRep.exe.

Check all boxes and click GO. Let me know when it is done. Restart your PC after completion.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Downadup/Conficker worm? Or what?
« Reply #18 on: December 24, 2015, 05:50:38 PM »
Done. No change. Still cannot connect to Avast SecureLine. Still cannot connect to any Avast updates. Still cannot connect to or download from any other antivirus-type websites (either).

Still have no problem connecting to non-antivirus websites (Yahoo, Google, Facebook, etc.). Still have no problem sending/receiving email with Windows Mail (although attachments still cannot be saved).

Firewall? Sandbox? If not a virus, what could be blocking JUST those websites??? And why would this problem pop up seemingly out of the blue, with no changes to the computer - EXCEPT (coincidentally, right after) registering/updating Avast?

Is there some setting on Avast 2016 that might cause this?
« Last Edit: December 24, 2015, 05:53:19 PM by xntryk1 »

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Downadup/Conficker worm? Or what?
« Reply #19 on: December 24, 2015, 06:00:56 PM »
I would like you to temporarily uninstall Avast.

You can also use this uninstall tool to get rid of all avast components that are left after uninstall process:

https://www.avast.com/uninstall-utility
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31078
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Downadup/Conficker worm? Or what?
« Reply #20 on: December 24, 2015, 06:07:48 PM »
Asking for problems :
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

A very likely problem :
Winsock: Catalog5 07 D:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)

REDACTED

  • Guest
Re: Downadup/Conficker worm? Or what?
« Reply #21 on: December 24, 2015, 07:22:45 PM »
OK, getting ready to uninstall Avast. But won't that leave the computer wide open for attack?

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Downadup/Conficker worm? Or what?
« Reply #22 on: December 24, 2015, 07:27:09 PM »
Do you really think that malware only waits for you to turn off your protection so it can get in? It doesn't work like that. Just uninstall it and don't worry.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Downadup/Conficker worm? Or what?
« Reply #23 on: December 24, 2015, 07:34:52 PM »
Ha-ha! OK... :-)

REDACTED

  • Guest
Re: Downadup/Conficker worm? Or what?
« Reply #24 on: December 24, 2015, 08:02:55 PM »
Avast is uninstalled. What next? Try to reinstall it?

REDACTED

  • Guest
Re: Downadup/Conficker worm? Or what?
« Reply #25 on: December 24, 2015, 08:09:38 PM »
CORRECTION: I'm not sure if it's uninstalled or not. There's a Windows Security Alert that says: "Malware Protection: Check Settings. Virus Protection: Not Compatible. avast Antivirus is on but is reporting its status to Windows Security Center in a format that is no longer supported. Use the program's automatic updating feature, or contact the program manufacturer for an updated version."

Right now, there is NO avast icon in the tray.

The internet situation still seems to be exactly the same. Cannot access Avast website or any other antivirus website...
« Last Edit: December 24, 2015, 08:14:19 PM by xntryk1 »

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Downadup/Conficker worm? Or what?
« Reply #26 on: December 25, 2015, 01:09:18 AM »
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on icon and select Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content into your next reply.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Downadup/Conficker worm? Or what?
« Reply #27 on: December 25, 2015, 01:24:29 AM »
New FRST logs attached.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Downadup/Conficker worm? Or what?
« Reply #28 on: December 25, 2015, 01:36:06 AM »
Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable.

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on icon and select Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please attach it to your reply.


After you finish this, please download and execute this file

http://www62.zippyshare.com/v/nj6uPyf9/file.html


As the last step:

Scan with Farbar Service Scanner

Download Farbar Service Scanner by Farbar and save it to your desktop.

  • Right-click on icon and select Run as Administrator to start the tool.
  • Make sure all of the options are checked!
  • Press Scan.
  • It will create a log (FSS.txt) in the same directory the tool is run.
Please include that log in your next reply.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Downadup/Conficker worm? Or what?
« Reply #29 on: December 25, 2015, 02:02:24 AM »
Fixlog.txt attached.