Jump to content

DNSAPI.dII is missing, cannot run Malwarebytes or access internet

KLR

By KLR
in Resolved Malware Removal Logs

 Share

Recommended Posts

KLR

KLR

Posted
Posted

I cannot connect to the internet with Google Chrome, Firefox or Internet Explorer.  In addition Malwarebytes cannot start because DNSAPI.dII is missing from my computer.  I did a system restore when the problem initially occurred which seemed to help for a little while, but now the issue is back.  After the system restore I did scan with Malwarebytes and Trend Micro Maximum Security and some issues where found and deleted.

 

I would be very grateful for any help and advice available.  I must warn that I am not very computer savvy :wacko:

 

I have attached the Farbar reports as instructed.

 

I look forward to a reply asap.

FRST.txt

Addition.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Run the following:

 

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.
 

Next,

 

Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt and Shortcut.txt under "Optional scan" Select scan, when done post the new logs....
 

Thanks,

 

Kevin

Fixlist.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

Next,

 

Download AdwCleaner by Xplode onto your Desktop.

  • Double click on Adwcleaner.exe to run the tool.
  • Click on the Scan in the Actions box
  • Please wait fot the scan to finish..
  • When "Waiting for action.Please uncheck elements you want to keep" shows in top line..
  • Click on the Cleaning box.
  • Next click OK on the "Closing Programs" pop up box.
  • Click OK on the Information box & again OK to allow the necessary reboot
  • After restart the AdwCleaner(C*)-Notepad log will appear, please copy/paste it in your next reply. Where * is the number relative to list of scans completed...

 
Next,
 
thisisujrt.gif Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts. (re-enable when done)
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

 

Next,

 

dr_web_cureit_zpse80d87bf.jpg
Download Dr Web Cureit from here http://www.freedrweb.com/cureit save to your desktop. (Scroll to bottom of page)

  • The file will be randomly named
  • Reboot to safe mode <<<<<------------ http://support.eset.com/kb2268/
  • Run Dr Web
  • Tick the I agree box and select continue
  • Click select objects for scanning

    drwebselect.JPG
  • Tick all boxes as shown
  • Click the wrench and select automatically apply actions to threats

    drwebfolders.JPG
  • Press start scan
  • The scan will now commence

    drwebscan.JPG
  • Once the scan has finished click open report <<<--- Do not miss this step

    drwebscancomplete.JPG
  • A notepad will open
  • Select File > Save as..
  • Save it to your desktop



This log will be excessive,  Attach it to your next reply…

 

Let me see those logs, also give an updatre on any remaining issues or concerns...

 

Thank you,

 

Kevin..
 

Fixlist.txt

Link to post
Share on other sites
KLR

KLR

Posted
  • Author
Posted

Hi Kevin,

 

Thanks for your reply, I will follow your instructions & post soon.  Just one thing, my PC is now showing a message as follows:

 

Windows 7

Build 7601

This copy of Windows is not genuine

 

Never seen this before, is this meant to happen or do I now have another issue??

 

Many thanks,

 

Karen

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

What is the current status of your system, if the connection is still down run the following:

 

Farbar scanner, for use when connection or redirect issues:

Download Farbar Service Scanner from here: http://www.bleepingcomputer.com/download/farbar-service-scanner/dl/62/ and run it on the computer with the issue.
Make sure the following options are checked:

  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center/Action Center
  • Windows Update
  • Windows Defender


  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.

 

and this:

 

Please download MiniToolBox from here:

http://www.bleepingcomputer.com/download/minitoolbox/dl/65/

Transfer to sick PC save to desktop and run it.

Checkmark the following checkboxes:

  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Devices
  • List Users, Partitions and Memory size.
  • List Minidump Files
  • List Restore Points



Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.
 
Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
 

Post those logs....

 

Kevin.

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.
 

Fixlist.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

mmmm, those keys are correct, check one more key

 

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.
 

Fixlist.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

That key is also correct.....    Download Portable Windows Repair (all in one) from one of the following:

http://www.tweaking.com/content/page/windows_repair_all_in_one.html
http://www.majorgeeks.com/Tweaking.com_-_Windows_Repair_Portable_d7222.html
http://www.bleepingcomputer.com/download/windows-repair-all-in-one-portable/

Unzip the contents into a newly created folder on your desktop.

Open the folder, run the tool by right click on Repair_Windows (icon with red briefcase) select "Run as Administrator"


tweak1.jpg

From the main GUI do the following:


Select Tab 5 and Create System Restore Point


tweak4.jpg

Select Repairs tab => Click the Open repairs tab


tweak5.jpg

The repairs window will open, Check the boxes as indicated, also the "Restart" option, then select Start...


tweak6.jpg

DON'T use the computer while each scan is in progress.

Post the log, to access select "settings" tab > "open log folder" tab, log will be named _Windows_Repair_Log


tweak7.jpg


Let me see that log,

Link to post
Share on other sites
KLR

KLR

Posted
  • Author
Posted

Hi Kevin,

 

I'm happy to announce that I am now messaging you from my PC........you did it!  :D   I downloaded the Portable Windows Repair from www.tweaking and ran it last night.  I had to leave it running overnight and when I checked it this morning my PC had an internet connection again.  I can't tell you how happy I am and how pleased my Mom will be to have her laptop back.  I'm having trouble finding the Windows Repair Log, this morning when I checked the PC I could not locate the unzipped contents, so I unzipped the file again, but when I checked the location you suggested the Log file was empty.  Any idea what happened to it?

 

Do you think I dare hope that my PC is now clean?

 

Kevin I cannot thank you enough for your time and help.  I could not have achieved this without you.  Is there anything further I now need to do, other than donate to you via PayPal :D

 

Kind regards,

 

Karen 

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Thanks fpr the update, good to hear we`ve made progress and found the light at the end of the tunnel. If you have no remaining issues or concerns we can clean up...

 

Download "Delfix by Xplode" and save it to your desktop.

Or use the following if first link is down:

"Delfix link mirror"

Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator

Make Sure the following items are checked:



  •    
  • Remove disinfection tools
       
  • Purge System Restore <--- this will remove all previous and possibly exploited restore points, a new point relative to system status at present will be created.
       
  • Reset system settings



Now click on "Run" and wait patiently until the tool has completed.

The tool will create a log when it has completed. We don't need you to post this.

Any remnant files/logs from tools we have used can be deleted…
 

Next,

 

Read the following links to fully understand PC Security and Best Practices, you may find them useful....

Answers to Common Security Questions and best Practices

Do I need a Registry Cleaner?

Take care and surf safe

Kevin...  busy.gif
 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.