coolein

That makes sense. Thanks!

Thank you. The reason I posted here instead of the Malware removal forum is because I honestly don't think it's the malware (if it's still there) that is causing this but you seem to disagree. You obviously know more about this than I do so I will take your word over mine.

I was asked to come to this forum instead. Quick version of events: Computer was infected with the "Antivirus IS" virus/malware. Malwrbytes wasn't able to detect it in safe mode (the virus wouldn't let me run it in normal mode). I downloaded a few antiviruses (spyware doctor, avg? -->didn't install though) and some more removal tools trying to get rid of the virus. At this point I lost my internet connection (I am not sure what I was downloading or installing). I figured it was the virus but now I am thinking it was one of the antivirus programs I installed that blocked/messed up the connection or maybe I changed a setting or something. I finally figured out and removed the virus by following these directions in safemode thanks to these forums: [*]Close all programs leaving only HijackThis running. Place a check against each of the following, making sure you get them all and not any others by mistake: R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:27811 O4 - HKCU\..\Run: [gmcbkfoy] C:\Users\Andrew\AppData\Local\Temp\tomfmfaiq\cfjswtulanw.exe Click on Fix Checked when finished and exit HijackThis. After I fix checked these two files, I then logged onto normal mode and everything was fine (except still no internet connection). The virus was however "gone"...gone meaning that I can actually run my computer in normal mode without the virus interferring as it did before..it might still be hidden (either case I don't think this virus is causing the blocked i-net connection). I ran Malwrbytes and nothing showed up. My problem still persist though in that I have no internet connection. I use Clear and called them and we tried everything but no help. The connection works fine on the laptop but doesn't work on the desktop (the previously infected computer) so it's not the connection but the computer and something I did to it when trying to install programs to get rid of the virus. I have uninstalled all the antiviruses and taken off firewall and everything I could think of that would be blocking my connection, no luck. I also don't have system restore so I can't go back. Again, in safe mode, there was never any indications of the virus and the internet was working fine for a day in safe mode after I couldn't do anything in normal mode besides being offered to buy the fake antivirus. I have run malwarebytes with the 9/26 version (I am still waiting for the recent version to come out since I have to manually download it, save it on the flash drive, and transfer it to the infected computer). I really do appreciate everyones help. This has been extremely frustrating.

I actually can't even install Avira. Just tried but can't because you need internet connection to install it. Remember, the infected comp has no internet connection. I am transfering all the files from a laptop to an infected comp. If you want me to go to the other forum I will do so.

No I never downloaded the avira program until now. I can download it from the website but you have to realize that I have to save it onto a flash drive and put it on the infected comp. I can't update Avira from the infected comp since there is no internet. It's like Mlwrbytes...when I put it on the infected comp I have to manually download the database and put it on the program to update it since it can't update without an internet connection. I will install the latest version of Avira but I am not sure if that's the latest update, if you know what I mean.

is there a place where I can download the updated database of avira?

One thing that I should add to all this is the fact that the internet connection was fine for one day with the virus. I was surfing the web fine in safemode with the virus...it wasn't until I installed some of the antiviruses/removal programs in safemode is when I suddenly lost connection. That's the reason I don't believe that it's a virus that's keeping me from getting internet connection. I have to wait now until the most updated malwarebyte database comes out online (it's still 7 days old)...then I will give that a try.

Tried both steps. No luck. It was actually unchecked so I ended up checking it. I also did the bat thing and restarted. I assumed there are no spaces between the lines but that probably won't make a difference. I still don't think it's a infection that's causing this but I will try to update my MBAM through a flash drive and see if it finds anything.

Quick version of events: Computer was infected with the "Antivirus IS" virus/malware. Malwrbytes wasn't able to detect it in safe mode (the virus wouldn't let me run it in normal mode). I downloaded a few antiviruses (spyware doctor, avg -->didn't install though) and some more removal tools trying to get rid of the virus. At this point I lost my connection (I am not sure what I was downloading or installing). I figured it was the virus but now I am thinking it was one of the antivirus programs I installed that blocked the connection. I finally figured out and removed the virus by following these directions in safemode: [*]Close all programs leaving only HijackThis running. Place a check against each of the following, making sure you get them all and not any others by mistake: R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:27811 O4 - HKCU\..\Run: [gmcbkfoy] C:\Users\Andrew\AppData\Local\Temp\tomfmfaiq\cfjswtulanw.exe Click on Fix Checked when finished and exit HijackThis. I then logged onto normal mode and everything was fine (except still no internet connection). The virus was however "gone"...gone meaning that I can actually run my computer in normal mode without the virus interferring as it did before..it might still be hidden (either case I don't think this virus is causing the blocked i-net connection). I ran Malwrbytes and nothing showed up. My problem still persist though in that I have no internet connection. I use Clear and called them and we tried everything but no help. The connection works fine on the laptop but doesn't work on the desktop (the previously infected computer) so it's not the connection but the computer and something I did to it when trying to install programs to get rid of the virus. I have uninstalled all the antiviruses and taken off firewall and everything I could think of that would be blocking my connection, no luck. I also don't have system restore so I can't go back.

The virus won't let me. When I log on to normal mode and try to open MBAM it closes it. It also closes rkill when I try to open it.

Do you know when that link will be updated w/ a newer database? I will use the removal forum for sure if the new database doesn't detect it.

That gives me the same thing. Database 4700, 9/26.

Is this the only place one can manually download the database? http://www.gt500.org/malwarebytes/ That one is indeed several days old (9/26) as you mentioned. So there is no other place I can download the latest version? I have spent the last 7 hours trying to get rid of this virus and I am really hoping the latest database will do the trick. I really appreciate all the help given that I have an exam for dental school on Monday and I really could use my own computer instead of this 10 year old laptop I am on.

Where do I download the latest database of Malwarebytes so I can save it on a flash drive and run it on the infected computer? I currently have database version 4700 (9/26) on the infected computer (that won't go on the internet probably due to the virus). It's the "Antivirus IS" virus and I have scanned it with the Malwarebytes in safe mode, after running rkill and disabling proxy on the IE but it didn't find it. I am hoping that the latest database (10/2) will but can't find the latest update.