« previous next »
Pages: 1 2 [3] 4 5 ... 7   Go Down

Author Topic: New Virus?  (Read 25134 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #30 on: September 25, 2011, 06:16:29 PM »
OK that killed the rest - lets now look at the internet

First we will try the easy route, then CF if that should fail

Download and transfer winsockXP fix to the poorly system and then run http://majorgeeks.com/WinSock_XP_Fix_d4372.html
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #31 on: September 25, 2011, 06:24:08 PM »
Quote from: essexboy on September 25, 2011, 06:16:29 PM
OK that killed the rest - lets now look at the internet

First we will try the easy route, then CF if that should fail

Download and transfer winsockXP fix to the poorly system and then run http://majorgeeks.com/WinSock_XP_Fix_d4372.html

Okay, I ran that and rebooted.  Still no access (limited/no connectivity)
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #32 on: September 25, 2011, 06:30:22 PM »
OK next we will reset the TCPIP using a MS fixit
Download the fixit on this page (Press the button about one third the way down to download it) - transfer to the other system and then run http://support.microsoft.com/kb/299357
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #33 on: September 25, 2011, 06:37:53 PM »
Quote from: essexboy on September 25, 2011, 06:30:22 PM
OK next we will reset the TCPIP using a MS fixit
Download the fixit on this page (Press the button about one third the way down to download it) - transfer to the other system and then run http://support.microsoft.com/kb/299357

Okay, I did that, rebooted but still no connectivity.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #34 on: September 25, 2011, 06:42:53 PM »
Lets see if the main file is present

Run OTL with this script please

  • Select All Users
  • Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
mswsock.*
/md5stop
C:\Windows\assembly\tmp\U /s
CREATERESTOREPOINT
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #35 on: September 25, 2011, 06:47:18 PM »
Quote from: essexboy on September 25, 2011, 06:42:53 PM
Lets see if the main file is present

Run OTL with this script please

  • Select All Users
  • Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
mswsock.*
/md5stop
C:\Windows\assembly\tmp\U /s
CREATERESTOREPOINT


And then Run Scan or Quick Scan?
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #36 on: September 25, 2011, 06:56:24 PM »
I did Run Scan (sorry, running out of time) and have the new log.  Attach it?
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #37 on: September 25, 2011, 07:09:32 PM »
OK the file is in the right location - what is the exact error you get when you try to connect ?
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #38 on: September 25, 2011, 07:15:02 PM »
Quote from: essexboy on September 25, 2011, 07:09:32 PM
OK the file is in the right location - what is the exact error you get when you try to connect ?

The Ethernet icon has a yellow exclamation point and states "Limited or no connectivity."  Same with WiFi icon.

When I open IE, it states: Internet Explorer cannot display the webpage.  And there's a Diagnose Connection Problems button.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #39 on: September 25, 2011, 07:22:28 PM »
When you press the diagnose problems what does it report ? 

Re-run Combofix to see if that resolves the problem

Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #40 on: September 25, 2011, 07:28:06 PM »
After that we will need to reset both drivers
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #41 on: September 25, 2011, 07:33:41 PM »
Quote from: essexboy on September 25, 2011, 07:22:28 PM
When you press the diagnose problems what does it report ? 

Re-run Combofix to see if that resolves the problem



It said something about Winsock.  Running Combofix again
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #42 on: September 25, 2011, 07:40:59 PM »
Ran COmbofix again.  Log attached.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #43 on: September 25, 2011, 07:47:18 PM »
Hmm yet we have repaired the winsock

OK could you go to control panel
System devices
Look for a yellow exclamation mark

Is there one next to the network adapter ?

If so select the ethernet one (Yukon)
Right click and select uninstall
Reboot and windows will reload the driver for that

Does the ethernet now work


Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #44 on: September 25, 2011, 07:49:08 PM »
Quote from: essexboy on September 25, 2011, 07:47:18 PM
Hmm yet we have repaired the winsock

OK could you go to control panel
System devices
Look for a yellow exclamation mark

Is there one next to the network adapter ?

If so select the ethernet one (Yukon)
Right click and select uninstall
Reboot and windows will reload the driver for that

Does the ethernet now work




No, nothing next to it.
Logged
Pages: 1 2 [3] 4 5 ... 7   Go Up
« previous next »