No Network Adapters (Code 39)

Discussion in 'Malware Help (A Specialist Will Reply)' started by mgungor, Jun 9, 2009.

  1. mgungor

    mgungor Private E-2

    My laptop is Windows XP Tablet PC Edition Service Pack 2. (Acer TravelMate C110)

    Sunday i had a problem with cmd.exe and regedit.exe. When I want to open regedit or cmd explorer.exe crashes. Then I downloaded Norman Malware Cleaner. I opened in safe mode.


    But after the reboot i saw no internet connection. I opened device manager. All of devices work good without network adapters. Network adapter say "Windows cannot load the device driver for this hardware. The driver may be missing or corrupt. (Code 39)”

    I uninstalled the drivers. I downloaded new drivers. But it didn work.

    Yesterday I solved regedit and cmd problem. But also i have network adapters problem..

    I have tried uninstalling the network adaptors and reinstalling the drivers from the Intel website but no luck. I attached the log files to this message. From here I do not know where to go. Any help is appreciated.
     

    Attached Files:

  2. mgungor

    mgungor Private E-2

    Can someone help me?
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    You really should have read the email you received when you signed up. It instructed you to read the below link:

    Don't Bump! It Only Hurts You!!!

    This post cost you at least another 2 days.

    Your NDIS wrapper driver has been infected/corrupted and needs to be replaced. Since you do not have any copies of it on your PC, please do the below.

    Download this XPsp2bu.exe to your C:\ folder like MGtools.exe was downloaded too. It must be put here or it will not do what we need. Once you have it downloaded, just double click it to run it. It will extract some files we will need into your C:\MGtools folder. You will just notice a command prompt window ( a black window) open briefly and then close.


    for long term storage. You need to keep ComboFix.exe here for now as we need it, but we will be removing it when we are finished with your cleanup. A cluttered Desktop is malware's playground and it can also cause performance degradation especially when you start saving large files here like you are doing.

    You have leftovers from Symantec still running that must be removed. Please run the below then reboot. After reboot run it one more time.

    Norton Removal Tool (SymNRT)

    Now run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

    Uninstall the below old versions of software:
    Java(TM) 6 Update 3



    Now we need to use ComboFix to remove a bunch of malware files.
    • Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
      • If it is not on your Desktop, the below will not work.
    • Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
    • If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
    • Open Notepad and copy/paste the text in the below quote box into it:
    • Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
    • At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
    • You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
    • Now use your mouse to drag CFscript.txt on top of ComboFix.exe
    • Follow the prompts.
    • When it finishes, a log will be produced named c:\combofix.txt
    • I will ask for this log below
    Note:

    Do not mouseclick combofix's window while it is running. That may cause it to stall.


    After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

    Now run Ccleaner. Only use the Run Cleaner button. Do not run anything else on any other forms.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).



    Then attach the below logs:
    • C:\ComboFix.txt
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
    Last edited: Jun 22, 2009
  4. mgungor

    mgungor Private E-2

    Thanks for help..=)

    Now i dont have problems about networking..=)

    Sorry for my old post =( My english isnt good..

    Thanks again..=)
     

    Attached Files:

  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You did not shutdown your protection software (NOD32) before running ComboFix. As a result, ComboFix ran in Reduced Functionality Mode and some parts of the fix did not work. Let's try again we another smaller fix but this time make sure you shutdown NOD32.



    Now we need to use ComboFix again.
    • Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
      • If it is not on your Desktop, the below will not work.
    • Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
    • If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
    • Open Notepad and copy/paste the text in the below quote box into it:
    • Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
    • At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
    • You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
    • Now use your mouse to drag CFscript.txt on top of ComboFix.exe
    • Follow the prompts.
    • When it finishes, a log will be produced named c:\combofix.txt
    • I will ask for this log below
    Note:

    Do not mouseclick combofix's window while it is running. That may cause it to stall.


    Now run Ccleaner. Only use the Run Cleaner button. Do not run anything else on any other forms.

    Now download the current version of MGtools and save it to your root folder. Overwrite your previous MGtools.exe file with this one.

    Run MGtools.exe ( Note: If using Vista make sure UAC is still disabled. Also don't double click on it, use right click and select Run As Administrator )


    Now attach the below log:
    • C:\ComboFix.txt
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
    Last edited: Jun 25, 2009
  6. mgungor

    mgungor Private E-2

    I attached logs

    Thanks=)
     

    Attached Files:

  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Your logs are clean.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we used Pocket Killbox during your cleanup, do the below
      • Run Pocket Killbox and select File, Cleanup, Delete All Backups
    3. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    7. Go to add/remove programs and uninstall HijackThis.
    8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    9. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    10. After doing the above, you should work thru the below link:
     
  8. mgungor

    mgungor Private E-2

    Thanks for this problem =)

    Now I have a another problem. When the computer starts, I see Application Error.

    Code:
    IWMSWindow : S24EvMon.exe
    The exception unknown software exception 0xc0000409 occurred in the application at location 0x0044a920
    And when I want start some programs. I see again another error.

    Code:
    The application failed to initialize properly (oxc0000005). Click on OK to terminate the application.
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please post these problems in the Software Forum.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds