Kosh Posted January 17, 2019 ID:1292998 Share Posted January 17, 2019 I recently did a scan with Malwarebytes and once completed there were over 2000 threats detected. One was a Trojan DNS. Proceeded to quarantine and remove all threats. Once removed all internet stopped working. Everything else seems to be working fine. Just cannot get on the internet via wired or wireless connections. I have read seve Link to post Share on other sites More sharing options...
Kosh Posted January 17, 2019 Author ID:1293000 Share Posted January 17, 2019 I hit submit by accident. Reposting I recently did a scan with Malwarebytes and once completed there were over 2000 threats detected. One was a Trojan DNS, there were some BHO items, and numerous registry entries. Proceeded to quarantine and remove all threats. Once removed all internet stopped working. Everything else seems to be working fine. Just cannot get on the internet via wired or wireless connections. I have read several threads on how to fix the issue but they were old so I wanted to double check if those solutions apply. Attached is the log from Malwarebytes malware.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 17, 2019 Root Admin ID:1293020 Share Posted January 17, 2019 Hello @Kosh and Please copy the programs via another computer and USB if needed. Run the FRST script and post back both logs as an attachment so that we can see what might be going on. Please download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well. Thanks Ron Link to post Share on other sites More sharing options...
Kosh Posted January 17, 2019 Author ID:1293117 Share Posted January 17, 2019 Ron, attached are both files after running FRST. Addition.txt FRST.txt Link to post Share on other sites More sharing options...
Kosh Posted January 17, 2019 Author ID:1293122 Share Posted January 17, 2019 Ron, on chance I checked the IPv4 properties and saw that the radio button "Use the following DNS server addesses:" was selected and a specific address was there. I changed it back to Obtain DNS server address automatically and wired and wireless connections are working. I assume the Trojan DNS change virus did this and hijacked it. Anything else I should do? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 17, 2019 Root Admin ID:1293138 Share Posted January 17, 2019 I would recommend not using this software and uninstalling it unless you really want it. AVG Web TuneUp You may have an issue with your hard drive or connection to it. This is from the Event Logs Error: (01/17/2019 11:23:34 AM) (Source: Disk) (EventID: 11) (User: ) Description: The driver detected a controller error on \Device\Harddisk1\DR2. Please download the attached fixlist.txt file and save it to the Desktop.NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system. Run FRST or FRST64 and press the Fix button just once and wait. If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply. Note: If the tool warned you about an outdated version please download and run the updated version. fixlist.txt Thanks Ron Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 27, 2019 Root Admin ID:1300889 Share Posted February 27, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts