unable to access net for cleaning

Discussion in 'Malware Help (A Specialist Will Reply)' started by titanium69, Sep 25, 2007.

  1. titanium69

    titanium69 Private E-2

    i`m doing a cleaning for my other shit PC and whilst i can connect to the internet i cannot update anything or browse so its basically like i have no connected to the net.
    to be exact i can connect but nothing goes through
    i checked firewalls

    do i do the cleaning anyway without updating or doing the online scans? (i used a working PC to download the programs and put them on a cd to be able to run them on the shit pc)
     
  2. abri

    abri MajorGeek

    What are you writing this on? Are you sending your message to us on a different pc?
    When did the problems with your internet connection start? Do you think this is a malware problem?
    Please do ShowNew, GetRunKeys and HijackThis (be sure to install HJT according to the instructions in the READ & RUN ME -- in a HijackThis folder under C:\Program Files and with the .exe file renamed from hijackthis.exe to analyse.exe. Then post the three logs:

    newfiles.txt
    runkeys.txt
    hijackthis.log

    abri
     
  3. titanium69

    titanium69 Private E-2

    i`m writing this from my working PC (not one which is not screwed) everything i need to install on the shit PC i download with this, burn and install it on the shit PC via cd

    it was a long time ago(like a few months), considering I found a few stuff which looked bad while doing the counterspy scan. my internet is fine on this PC (we share the same modem, meaning when i wonna use PC i plug mine into the modem, when i wonna use net on the other PC i plug that PC into the same modem and i unplug mine)
    i have correct internet whilst that even though it connects, acts like it doesnt
     
  4. abri

    abri MajorGeek

    Okay, in that case, please do the scans I requested in post 2 so that I can see if there is malware on your computer. These scans won't fix anything, but they will help us see what we're looking at. If you need any instructions for running ShowNew, GetRunKeys and HijackThis <------- needs to be renamed and placed in the correct folder under Program Files as per the instructions), please refer to READ & RUN ME FIRST.

    As a favor to me, please remember that your computer doesn't care what you call it, but it's easier for me to work with you if you are not using your language as an outlet for your frustration. I need to understand the technical problems, so for the sake of this discussion, please refer to your computers as the good computer and the bad computer. When you switch to the word mine, I get lost.

    The last thing I want to be sure I understood is that you cannot download with the bad computer? You can, however, read the instructions on our webpage from that computer? Or not? It sounded like the webpages are loading for you, but it is the download mechanism itself which is not working. Is that correct?

    abri
     
  5. titanium69

    titanium69 Private E-2

    i referred to it as a shit pc because of its specs, nyways bad pc it is

    Now from bad PC the only thing i can do is connect to the internet when i do the log in (you know, username and password window)
    I fill in the username and password and it connects.
    then i try to browse but it shows me the page cannot be displayed screen(ALWAYS)
    i try to update an Anti virus or anything for that matter and it tells me to connect to the internet or that a connection is not up

    so basically as i said, the only thing i can do on the bad PC is connect for anything else i recieve the same msg i would if i would have not been connected to the internet(but i am, thats the problem)

    everything i need to view or download from the net i use the good PC
     
  6. titanium69

    titanium69 Private E-2

    i included the counterspy one anyway
     

    Attached Files:

  7. titanium69

    titanium69 Private E-2

    here
     

    Attached Files:

  8. titanium69

    titanium69 Private E-2

  9. titanium69

    titanium69 Private E-2

    sorry but the person(dad) i`m doing it for is getting impatient, what is my next step?
     
  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    titanium69,

    I apologize for the delay, you must have slipped by us. With high volume of threads it can happen, we try our best to answer each thread oldest to newest but sometimes we make mistakes.

    To get us updated, what problems are you currently experiencing?
     
  11. titanium69

    titanium69 Private E-2

    no problem at all
    the same as i described, i have had quarantined the viruses that were found during the counterspy scan.
    still un able to access any webpage or have any interaction with the internet even though i entered my username and connected to the internet
     
  12. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Okay! If you will attach some fresh logs from the below.

    • HijackThis Log
    • ShowNew Log
    • GetRunKey Log
     
  13. titanium69

    titanium69 Private E-2

    coming right up but you know they are going to be exactly the same, the broken pc has been mainly off ever since i did those logs
     
  14. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Okay! I just like fresh logs, things can change just from rebooting.
     
  15. titanium69

    titanium69 Private E-2

    do i have to stay doing the normal startup thing from msconfig and all that other stuff or i can just directly go to the getrunkey etc. HJ steps?
     
  16. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    The msconfig startup should be set to "Normal Startup", just run GetRunKey.bat and ShowNew.bat and attach those logs along with a HijackThis log.
     
  17. titanium69

    titanium69 Private E-2

    here you go guys
     

    Attached Files:

  18. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    First, please disable any antivirus and/or antispy programs you have installed so they will not block this fix.

    Pre-Instructions:
    If you do not have internet access, you will have to download this utility from another system and transfer it via USB, CD, etc; to run the fix below.

    Download LSP-Fix

    After download is complete, Run LSP-Fix

    Check the Box labeled "I know what I'm doing" and then click on the ou1viewer.dll file (in the “Keep” section) to select it.

    Then, Select the >> button to move ou1viewer.dll into the Remove section.

    Now, click the Finish Button. When the Repair Summary box appears, click OK.

    (Note: If the file ou1viewer.dll is already in the remove section, then just click FINISH.)


    Step 1:
    Please look in Add/Remove Programs for the following and uninstall if found. If you get any errors just make a note and proceed.

    Step 2:
    Now scan with HijackThis and check the boxes for the following entries:
    ( Make sure ALL browser windows are closed when you click FIX )

    Again, make sure ALL browser windows are closed when you click FIX.

    Step 3:
    Copy the contents of the below Quote Box to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file fixme.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.) Then double-click on the fixme.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to Add in to the registry, say yes.
    Step 4:
    Next, we need to remove a bad service
    • Now Click on Start, then Run ... type services.msc into the box that opens up, and press 'OK'.
    • On the page that opens, scroll down to Card Adapter (NETDown)
    • Then right click the entry, select Properties and press Stop Service.
    • When it shows that it is stopped, next please set the Start-up Type to 'Disabled'.
    • Click OK until you get back to Windows.
    • Next, run HJT, but instead of scanning, click on the None of the above, just start the program button at the bottom of the choices.
    • At the lower right, click on the Config button
    • Then click the Misc tools button
    • Select Delete an NT Service
    • Copy/pasteNETDown into the box that opens, and press OK
    • If you receive any error messages just ignore them and continue.
    • Now exit HJT but do not reboot when it tells you it needs to. We will do that further down after running HJT again to fix some other items.


    Step 5:
    Now download The Avenger by Swandog46, and save it to your Desktop.
    • Extract avenger.exe from the Zip file and save it to your desktop
    • Run avenger.exe by double-clicking on it.
    • Check the 'Input script manually' box.
    • Click on the magnifying glass icon.
    • Copy everything in the Quote box below, and paste it in the box that opens:
    • Now click the 'Done' button.
    • Click on the traffic light icon and OK the prompt.
    • You will be prompted to restart, OK the prompt and your PC should reboot, if not, reboot it yourself.
    • A log file from Avenger will be produced at C:\avenger.txt

    Step 6: Begin here after rebooting from Step 5!
    Next Reset Web Settings & Default Security Settings

    Note for IE 6 users:
    To Reset Web Settings:
    Right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

    If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK

    To Default Security Settings:
    Right click on your desktop Internet Explorer icon and select Properties. Then click the Security Tab and click Default Level for Internet, Local Intranet, Trusted Sites, and Restricted Sites. For IE 7 users, simply click the "Reset all zones to default level" button.

    Note for IE 7 users:
    Select Internet Options, then the Advanced Tab and then the Reset button under Reset Internet Explorer Settings.


    Step 7:
    Please download ATF Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

    NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.
    • Double-click ATF-Cleaner.exe to run the program.
    • Under Main choose: Select All
    • Click the Empty Selected button.
    If you use Firefox browser
    • Click Firefox at the top and choose: Select All
    • Click the Empty Selected button.
      • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    If you use Opera browser
    • Click Opera at the top and choose: Select All
    • Click the Empty Selected button.
      • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    Click Exit on the Main ATF Cleaner menu to close the program.


    Step 8:
    After you have completed ALL of the above in the correct order, please attach the following logs.
    • HijackThis Log
    • ShowNew Log
    • GetRunKey Log
    • Avenger Log
    Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds