Jump to content

No internet after clearing virus with mwbt

gavlow

By gavlow
in Resolved Malware Removal Logs

 Share

Recommended Posts

gavlow

gavlow

Posted
  • Author
Posted

Hi

 

I am new to this forum. I ran MWBT to clear DNS unblocker. Staright after that I was unable to load any web pages in any browser. my connection says "limited". I am using a wireless router on a home network. I also tried hot spotting my phone which normally works but had the same problem. I do have one connection that does not seem to be affected which is a dongle that attaches to the laptop. Is MWBT affecting the internet or do I have still have the virus? Help please. Thx

FRST.txt

Addition.txt

Link to post
Share on other sites
dbreeze

dbreeze

Posted
Posted

Hello and :welcome:
If you've not already done so please start here and post back the 2 log files FRST.txt and Addition.txt

P2P/Piracy Warning:
 

 
If you're using
Peer 2 Peer
software such as
uTorrent, BitTorrent
or similar you must either fully uninstall them or completely disable them from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

If you have
illegal/cracked software, cracks, keygens etc
. on the system, please remove or uninstall them now and read the policy on
.




Before we proceed further, please read all of the following instructions carefully.
If there is anything that you do not understand kindly ask before proceeding.
If needed please print out these instructions.
  • Please do not post logs using CODE, QUOTE, or FONT tags. Just paste them as direct text.
  • If the log is too large then you can use attachments by clicking on the More Reply Options button.
  • Please enable your system to show hidden files: How to see hidden files in Windows
  • Make sure you're subscribed to this topic:
    • Click on the Follow This Topic Button (at the top right of this page), make sure that the Receive notification box is checked and that it is set to Instantly

    [*]Removing malware can be unpredictable...It is unlikely but things can go very wrong! Please make sure you Backup all files that cannot be replaced if something were to happen. You can copy them to a CD/DVD, external drive or a pen drive [*]Please don't run any other scans, download, install or uninstall any programs unless requested by me while I'm working with you. [*]The removal of malware is not instantaneous, please be patient. Often we are also on a different Time Zone. [*]Perform everything in the correct order. Sometimes one step requires the previous one. [*]If you have any problems while following my instructions, Stop there and tell me the exact nature of the issue. [*]When we are done, I'll give you instructions on how to cleanup all the tools and logs [*]Please stick with me until I give you the "all clear" and Please don't waste my time by leaving before that. [*]Your topic will be closed if you haven't replied within 3 days [*](If I have not responded within 24 hours, please send me a Private Message as a reminder)



FIRST >>>>
Can you attach the MalwareBytes Anti-Malware log that shows the infection(s) removed?


SECOND >>>>

Download the attached fixlist.txt file and save it to the Desktop.  Fixlist.txt

NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST64 by right clicking on the FRST64.exe file, selecting "Run as Administrator..".  The User Account Control may open up; if it does, select Yes to continue to let FRST open and load.  

The tool will check for an updated version of itself every time it loads; please allow it to do this and the program will either inform you it is downloading an updated copy (and to wait until it is safe to continue) or show that it is ready to use (meaning there is no update found) and you can continue on.  Press the Fix button just once and wait.  The tool will create a restore point, process the script and ask for a restart of your system.

Press%20the%20FIX%20button_zpsdd5zi3mt.p

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post the log in your next reply.


THIRD >>>>

How is the system running now?  Can you connect to the network now?
 

Link to post
Share on other sites
dbreeze

dbreeze

Posted
Posted

Please download MiniToolBox, save it to your desktop (via the USB stick <> working system) and run it.

Checkmark the following checkboxes:

  • Flush DNS
  • Report IE Proxy Settings
  • Report FF Proxy Settings
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Devices [ Only Problems ]
  • List Users, Partitions and Memory size.

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.


 

 

Link to post
Share on other sites
dbreeze

dbreeze

Posted
Posted

Download NetAdapter Repair from here.
Transfer this to the infected computer.
You do not have to install the file but do make sure that to start the program you right click on the downloaded file and select "Run as Administrator".

Once this is open, check that the Network Adapter is set to Wi-Fi.
Select (check) the following:

  • Release and Renew DHCP Address
  • Clear Host File
  • Clear Static IP Settings (enable DHCP)
  • Change to Google DNS
  • Flush DNS Cache
  • Clear ARP/Route Table <Note: Restart Needed to Complete the Reset Process>
  • NetBIOS Reload and Release
  • Internet Options - Clear SSL State
  • Enable Wireless Adapters
  • Reset Internet Options Security/Privacy
  • Set Network Windows Services Default <Note: Restart Needed to Complete Repair>

Click Run all Selected and follow the prompts.  Some of the repairs will ask you to restart your computer.
A log file will be produced in the same directory as the program is run from ( entitled netadpter-log-date&time.txt ).
 

 

Note: You may have to reboot your system twice for all the repairs to take place.

Link to post
Share on other sites
gavlow

gavlow

Posted
  • Author
Posted

I did as requested. I had to restart the netadaptor repair program after the reboot (cause nothing happened) and then reticked the options after the one requiring reboot and then hit run again - was that right?? I have attached the logs. I was also asked whether to repair just the wi fi network adaptor or all adaptors and I said wi fi only. Hope this is OK.

netadapter-log-2015-12-10-19-04-42.txt

netadapter-log-2015-12-10-19-04-56.txt

netadapter-log-2015-12-10-19-20-19.txt

netadapter-log-2015-12-10-19-20-31.txt

netadapter-log-2015-12-10-19-30-02.txt

netadapter-log-2015-12-10-19-30-18.txt

Link to post
Share on other sites
gavlow

gavlow

Posted
  • Author
Posted

It is a samsung laptop. I had already tried the F12 thing but still got the same message. No networks are showing up. When I click on the network icon at bottom of windows 8 I get three options - 1. View network settings, 2. No connections are available and 3. Troubleshoot. I tried troubleshoot and it tells me I need to connect an ethernet cable. I used to click the network icon and it would search for networks but it doesn't do that now.

Link to post
Share on other sites
dbreeze

dbreeze

Posted
Posted

Right click on the Network icon and select Open Network and Sharing center. 

Click on Change Adapter settings. 

Select the Wi-Fi connection and right click on it.

Select Properties.

This opens the Wi-Fi properties window.  In the middle is a box showing "This connection uses the following items:".  Can you take some screenshots of that list (you may have to make more than one screenshot to capture the entire list) and post them here?

Link to post
Share on other sites
dbreeze

dbreeze

Posted
Posted

Thank you for the images. 

 

Have you tried turning the router off, waiting 30 secs (or longer) and turning it back on?

 

By the way, the USB dongle you are using is a Broadband based connection.  It is wireless but is using a cell phone type connection to get to the internet.  I don't believe it is going through your router.

Link to post
Share on other sites
gavlow

gavlow

Posted
  • Author
Posted

I have other computers in the house that are working on the network fine. Also, I have been at work today with the computer and it was not registering the work network either. Any ideas of what else I can do or do I need to get it to a computer tech?? Could the repair process have affected the drivers or do you have a theory on what may have happened? Thanks heaps.

Link to post
Share on other sites
dbreeze

dbreeze

Posted
Posted

I checked the logs so far; let's get one more look for nasties and go from there ....

AdwCleaner by Xplode

Download AdwCleaner from here or from here. Save the file to the desktop.

NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

  • Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.

    You will see the following console:

    AdwCleaner_v5016_zpsf8ln0fea.png

  • Click the Scan button and wait for the scan to finish.
  • After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove.
  • Click the Clean button.
  • Everything checked will be deleted.
  • When the program has finished cleaning a report appears.
  • Once done it may ask to reboot (depending on what it found to remove): please allow this

    adwcleaner_delete_restart.jpg

  • On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[s0].txt
Optional:

NOTE: If you see AVG Secure Search being targeted for deletion, Here's Why and Here. You can always Reinstall it.

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.