no internet connection after malware removal

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by laurenzo1, Nov 11, 2008.

  1. laurenzo1

    laurenzo1 Private E-2

    Having downloaded the new MSN toolbar we caught the antivirus 2009. Having run the malwarebytes to get rid of this I now cannot get connected to the internet.
    I have been on the phone to my internet provider who tells me that there is nthing wrong with my broadband connection as the two other wireless computers are working ok so it must be a firewall in the problem computer which is to blame.
    I have McAfee and have run several scans which tell me that there is nothing wrong. I have disabled mcafee and tried to reinstall the broadband with the suplier, but it's still not working.
    If anyone can help, that would be great.
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Welcome to Major Geeks!


    Moved your thread from networking to malware as I feel as if you still may have some components of antivirus 2009 or other payloads it may have downloaded with itself, so please to rule out any malware still being the cause of your connection issues, run the below guide and when finished attach the requested and saved logs.



    Please follow the instructions in the below link and attach the requested logs when you finish these instructions.


    • If something does not run, write down the info to explain to us later but keep on going.
    • Do not assume that because one step does not work that they all will not.
    Notes:

    1. If you run into problems trying to run theREAD & RUN ME or any of the scans in normal boot mode. You can run steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
    2. If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
     
  3. laurenzo1

    laurenzo1 Private E-2

    Hi,

    What you have asked me to do I have carried out yesterday, twice. It was after running the malware removal that I couldn't get access to the internet. I have also ran the malware removal after disabling the system restore.
     
    Last edited: Nov 11, 2008
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    Need to attach the logs, as the guide mentions if your still having issues attach the logs you gained as part of the process, mainly as many malwares when removed break/block components of the OS from working properly and the internet is one of them, alot of the time due to them leaving reminents of themselfs on the PC as no one removal tool can clean a PC fully and in many cases the trained eye of a malware removals expert is needed to review the logs and issue you some manual removal instructions.

    If you believe its the firewall, disable it to test if you can connect to the internet ok, but I have feeling knowing that Antivirus 2009 is nasty one that it has more reminents on your PC.
     
  5. laurenzo1

    laurenzo1 Private E-2

    Hi, sorry to appear pretty dim but I would not know how to access a log - where would I find this on my pc?

    Many Thanks
     
  6. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Hello, laurenzo1

    SuperAntiSpyware Log retrieval:
    • To retrieve the removal information ( the log )after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Although the logs are automatically save in a folder for SUPERAntiSpyware, you may want to save the log somewhere you can easily locate it. We suggest using an informative filename like SASlog.txt and save it to your desktop.

    Malwarebytes' Anti-malware Log retrieval:
    • Open the program
    • Click on the Logs tab
    • Highlight the mbam-log-{most recent date}
    • Click theOpen tab
    • Click on File > Save As >save it with its default file name to your desktop

    ComboFix Log
    Location: C:\combofix.txt

    MGlogs.zip
    Location: C:\MGlogs.zip

    * Note: Have you tried using either ComboFix or SUPERAntiSpyware to restore the internet connection? Directions for both are in the R&R Me First. Malware Removal Guide instructions and the links for using each tool:

    SUPERAntiSpyware instructions: Step 2:

    ComboFix instructions:
    Manually restoring the Internet connection
     
  7. laurenzo1

    laurenzo1 Private E-2

    Hi,

    I have tried the XP Windows cleaning procedure but...I cannot use SPYBOT as it wants to charge me - is this not free?
    The Super anti spyware also wants me to register and probabaly pay which I can't do as I do not have access to the internet. It did do a scan though and told me that I still have virusrspose 2009 in my machine. I cannot copy the log as the Configuration and Preferences,and click the Preferences button I can't see..
    Click the Scanning Control tab - this I can't see either although I can view the log but it will not allow me to cut and paste.
    I have ran the Malware bytes anti malware and it didn't show anything abormal - I attach the log.
    I could not run the MG TOOLS as it would not open when I transferred it to another computer.
    I attach the bleping computer log - hope that you can make something of it.

    What do you think is wrong? At first I thought it's something perhaps like a firewall not letting the internet conection through as my ISP tells me that we have pinged the router, checked everything possible and something is blocking it entering. It must be the virus scan, I canot think of anything else.

    If you can give me any advice that would be great, but can you pleaae keep it as simple as possible as I'm not good with computers!

    Thanks, Lorenzo1
     

    Attached Files:

  8. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Hello, laurenzo1

    First - as a reminder, please post attachments as .TXT files only, do not attach them as .DOC files.

    Secondly - to address your malware issues, I need to get more logs. Please download the following tools to a USB drive or CD and transfer them to the infected computer.
    1. WinSock XP Fix 1.2 <---If this successfully restores for your connection, follow up with
    2. Download a fresh SUPERAntiSpyware <--- RENAME the new version to "SAS" > Un-install the previous version > run CCleaner > install SAS and run it after updating to the latest definitions.
    3. Now try running MGTools.exe

    Attach to your next reply:
    • SASlog.txt log from SuperAntiSpyware
    • MGlogs.zip - normally it is C:\MGlogs.zip - only attach this log from MGtools.exe DO NOT attach any logs seen in the MGtools folder.

    Please tell me of any problems you still have!
     
  9. laurenzo1

    laurenzo1 Private E-2

    Hello,

    I have just downloaded the winsoc onto a disc and transferred it onto the infected computer. It tells me that I have 528 problems. The problm I have though is that this programme tells me that it will only repair 6 problems for free - more than that requires me to register now to repiar all errors which I can't do because I cannot get connected to the internet. Can you please help.

    Thanks
     
  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    What is telling you that you have to register?

    Download the attached file, save to your desktop and run it. Let us know what happens. Also, after running this proceed with dr.moriarty's instructions.
     

    Attached Files:

    Last edited: Nov 16, 2008
  11. laurenzo1

    laurenzo1 Private E-2

    Hi,

    Sorry if I am not making myslf clear this is all new to me so please bear with me. When I down load the Win SocK XP fix it comes up as PC Tools Registry Mechanic - is this correct?
    If so, then if I click 'repair' a pop up arrives and asks me to 'purchase online' which I obviously cannot do as I do not have access to the internet. If I click continue then it tells me the problems it has found after scanning results and when I click repair it then comes up with a pop up saying to either continue or purchase now. As I saud if I click continue it states that some errors were not fixed with the free evaluation 9all 520 of them!).

    I have also tried the 'spyware doctor' which is also 'PC Tools' system - again when you click 'fix checked' on the spyware doctor it pops up alsing you to register spyware doctor and purchase online.
    Hope you can help.
    Laurenzo
     
  12. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    laurenzo1

    Please got to post#10 in this thread... download and install the file BJ attached for you. It is freeware - nothing to buy. And please - do not install any other software without our instructions.

    Click "Fix" and it does it thing, beeps and you reboot.

    Thanks!
    dr.m
     
    Last edited: Nov 17, 2008
  13. laurenzo1

    laurenzo1 Private E-2

    Thank y for being patient. I have just tried this and I'm afraid th although it did beep, I still do not have internet connection. What is funny though is that I still have e mail and can access a secure internet connection to my work which starts with https rather than the normal http

    Sorry that what you have told me doesn't work, I appreciate your patience.

    Thanks,
    L.
     
  14. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    :)

    I'm conferring with the other fighters, laurenzo1.

    dr.m
     
  15. laurenzo1

    laurenzo1 Private E-2

    Thanks for your help, this is really confusing as I think that I still have the anti virus but can't understandn why it doesn't affect a secure link to a https site. I have neer been so frustrated!

    L.
     
  16. laurenzo1

    laurenzo1 Private E-2

    Just so s you know I have restored my computer to it's factory settings - this has worked!
    Thanks for your hlp.
     
  17. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    ;)

    Good news.

    Now, please install and run SUPERAntiSpyware{re-named if needed} and MGTools.exe and attach those logs to your next reply. Just a reminder - ALL of our tools are freeware.. with nothing to purchase.

    Thanks!
    dr.m
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds