« previous next »
Pages: 1 2 3 [4] 5 6 7   Go Down

Author Topic: AV protection 2011 malware  (Read 25501 times)

0 Members and 1 Guest are viewing this topic.

aznsaiyan1029

  • Guest
Re: AV protection 2011 malware
« Reply #45 on: November 27, 2011, 09:17:21 PM »
I tried that option already, but on the PCI simple communications controller, it said the driver is missing, and I have trouble finding/knowing the correct drive to fix the error icon on it.
Logged

DonZ63

  • Guest
Re: AV protection 2011 malware
« Reply #46 on: November 27, 2011, 11:24:25 PM »
You can try the Intel web site: http://www.intel.com/p/en_US/support/detect/network

Note: Many OEMS use modified hardware. The Intel drivers might or might not work.

It is entirely possible that a Win 7 driver does not exist for that NIC. In that case, I suspect whomever install Win 7 on that PC used the Vista x86 or x64 driver from the Gateway site. Some of the Vista drivers do work under Win 7. I use a Vista x64 driver on WIN 7 x64 for my old HP printer since HP does not offer a WIN 7 driver for it. Works with about 90% functionality.

Your pretty much in a "try it and see if it works" mode here.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: AV protection 2011 malware
« Reply #47 on: November 27, 2011, 11:30:23 PM »
Lets check all the services - I have found a batch file that will do it for me


Please copy all in the below quote box:


Quote
@echo off
echo Please post back the %SystemDrive%\MyNICDetails.txt on your next reply
echo.
echo CheckMyNIC by AdvancedSetup >%SystemDrive%\MyNICDetails.txt
echo ... >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc dhcp >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex dhcp >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc TCPIP >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex TCPIP >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc Afd >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex Afd >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc NetBT >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex NetBT >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc NetBIOS >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex NetBIOS >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc Lmhosts >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex Lmhosts >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc Dnscache >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex Dnscache >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc PolicyAgent >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex PolicyAgent >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc Nla >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex Nla >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc lanmanserver >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex lanmanserver >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc IPSEC >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex IPSEC >>%SystemDrive%\MyNICDetails.txt
cmd /c sc qc RPCSS >>%SystemDrive%\MyNICDetails.txt
cmd /c sc queryex RPCSS >>%SystemDrive%\MyNICDetails.txt
pause
Save in Notepad as "MyNICDetails.bat" with the quote marks.
Save as type All Files to Desktop.
Once saved transfer to the infected computer's Desktop.
Click the file and post back the text file it produces please.

The text file will be located here: C:\MyNICDetails.txt
Logged

aznsaiyan1029

  • Guest
Re: AV protection 2011 malware
« Reply #48 on: November 27, 2011, 11:49:33 PM »
After I transfer the file and click on it, only the cmd window pops up awaiting for commands.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: AV protection 2011 malware
« Reply #49 on: November 27, 2011, 11:52:18 PM »
Could you replace pause with exit
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: AV protection 2011 malware
« Reply #50 on: November 27, 2011, 11:54:26 PM »
Having said that I have just run it on my system again and it works - could you confirm that you run it as admin ?

Also could you check the c drive for the text file
Logged

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89126
  • No support PMs thanks
Re: AV protection 2011 malware
« Reply #51 on: November 27, 2011, 11:58:36 PM »
I just ran it in XP Pro and it also worked as expected

@ aznsaiyan1029 - I believe that is the Pause at the end of the batch file, that places the waiting, etc.

when you press any key it closes the command window and should generate the c:\MyNICDetails.txt file.

Did you press any key to close the window ?
If so check the C:\ drive for the MyNICDetails.txt file.
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

aznsaiyan1029

  • Guest
Re: AV protection 2011 malware
« Reply #52 on: November 28, 2011, 12:13:48 AM »
I tried replacing with "end" and ran it as administrator, but its still the same.

The cmd stays up, awaiting for commands with some text before it.

"Please post back the C:MyNICDetails.txt on your next reply

CheckMyNIC by AdvancedSetup C:MyNICDetails.txt
... C:MyNICDatails.txt
Microsoft Windows -Version 6.1.7600]
Copy right <c> 2009 Microsoft Corporation. All right reserved.

C:\User\Jenny\Desktop>"
Logged

aznsaiyan1029

  • Guest
Re: AV protection 2011 malware
« Reply #53 on: November 28, 2011, 12:19:27 AM »
Never mind. Somehow my copy function omitted all the ">" sign. Here is the file. Sorry for the trouble.
Logged

DonZ63

  • Guest
Re: AV protection 2011 malware
« Reply #54 on: November 28, 2011, 12:46:01 AM »
I just found this thread where people discussed how they fixed their PCI Simple Communication Controller issues: http://social.microsoft.com/Forums/en-US/whssoftware/thread/9adcf4df-0dfd-47f0-a955-2dd1cb56e151/

Appears to me this is just a modem driver. If your connected via broadband, you don't even need it.
Logged

aznsaiyan1029

  • Guest
Re: AV protection 2011 malware
« Reply #55 on: November 28, 2011, 01:04:48 AM »
if the pci driver is not the case, then I have no idea what is preventing me from accessing to internet.
Logged

DonZ63

  • Guest
Re: AV protection 2011 malware
« Reply #56 on: November 28, 2011, 01:53:49 AM »
Follow the procedure given in that Microsoft link on how to id your controller. Then go to the PCIDatabase site that is referenced to see if it has a driver for your controller. Note that it should have instructions on how to install the driver which I suspect would be the manually method.

I know from experience that Intel modem and NIC drivers are a bear to install at times.
Logged

aznsaiyan1029

  • Guest
Re: AV protection 2011 malware
« Reply #57 on: November 28, 2011, 10:21:08 PM »
I may let essexboy to handle this first. :p
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: AV protection 2011 malware
« Reply #58 on: November 28, 2011, 10:51:36 PM »
Well the log states that all services are running  (I ran a comparison on my system to be sure)

But by scouring my system there is one file that you should have - but I will need to locate all copies using OTL to confirm it is in the right place

Copy/paste the following into the custom scan fixes box and then press quick scan 

/md5start
ipsecsvc.*
ipsec.*
/md5stop
Logged

aznsaiyan1029

  • Guest
Re: AV protection 2011 malware
« Reply #59 on: November 28, 2011, 11:42:19 PM »
Here is the log.
Logged
Pages: 1 2 3 [4] 5 6 7   Go Up
« previous next »