WLAN Card Error

[structure]

After recently removing some malware (with help from these forums, thanks!) I have deleted the files that were located in my virus vault. I am now getting this popup error "Dell Wireless WLAN Card Wireless Network Controller stopped working and was closed." However my wireless card seems to be working just fine, and I am still connected to my wifi and my internet is all working. I have scanned my computer with malwarebytes with both the quick scan and the full scan. I have also scanned with my avast antivius; both have found no problems. I have uninstalled and reinstalled my wlan card driver after reading some google reports, but nothing has changed. My computer also seems to be slowly eating up small amounts of what little hard drive space I have left (like .01% each restart).

You guys have been very helpful here in the past, so maybe you know whats going on here. Any help would be appreciated. Thanks

[jered2011]

I have the same problem. After removing "TDL4 rootkit" and "system tool 2010" I began having the same problem with the Dell WLAN drivers and or associated programs crashing.

[jered2011]

I uninstalled the WLAN driver, rebooted, (verified clear system based on multiple antivirus, malware tools/programs), reinstalled and still had same issue. Maybe problem with NTDLL.DLL. I will try a windows startup repair. Has anyone else had trojan agent TDSS / TDL4 rootkit virus problem related to Dell WLAN wireless card.

[AdvancedSetup]

Please run the following scanner and post back the logs.

Download

DDS

and save it to your desktop

http://download.bleepingcomputer.com/sUBs/dds.scr

Disable any script blocker if your Anti-Virus/Anti-Malware has it.

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click

dds.scr

to run the tool.

When done, the

DDS.txt

will open.

Click Yes at the next prompt for Optional Scan.

When done, DDS will open two (2) logs:

1. DDS.txt
   
   
2. Attach.txt
   
   

• Save both reports to your desktop
  
  
• Please include the following logs in your next reply:
  DDS.txt
  and
  Attach.txt
  
  

[structure]

dds.txt

DDS (Ver_10-12-12.02) - NTFSx86

Run by Vostro 1500 at 8:31:45.55 on Tue 01/04/2011

Internet Explorer: 8.0.6001.18999 BrowserJavaVersion: 1.6.0_19

Microsoft

[AdvancedSetup]

STEP 01

Backup the Registry:

Modifying the Registry can create unforeseen problems, so it always wise to create a backup before doing so.

• Please download ERUNT from here
  
• ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.
  
• Double click on erunt-setup.exe to Install ERUNT by following the prompts.
  
• Use the default install settings but say NO to the portion that asks you to add ERUNT to the Start-Up folder. You can enable this option later if you wish.
  
• Start ERUNT either by double clicking on the desktop icon or choosing to start the program at the end of the setup process.
  
• Choose a location for the backup.
  
  • Note: the default location is C:\Windows\ERDNT which is acceptable.
    

  [*]Make sure that at least the first two check boxes are selected.

  [*]Click on OK

  [*]Then click on YES to create the folder.

Note: if it is necessary to restore the registry, open the backup folder and start ERDNT.exe

Once you've completed backing up your Registry, please perform the following fixes until fixed or all methods have been tried

STEP 02

Disable Internet Explorer Proxy Settings and Reset TCP/IP

It is very important that these steps be carried out exactly as shown otherwise the fix will not work.

If you have any questions please ask before moving on.

• Please start Notepad and using your mouse make sure you select and copy all the information below in the Code box into your new document.
  
• Then save the file as "fixme.bat" to your Desktop
  
• In the drop down box for Save as type: make sure you select All Files (*.*) and keep the quotes on the name as well. Then close the new file.
  

  @ECHO OFF
  reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer /f
  reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyOverride /f
  reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable  /t REG_DWORD /d 0 /f
  reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v GlobalUserOffline /t REG_DWORD /d 0 /f
  netsh int ip reset resetlog.txt

  
  

• On Windows XP you can double-click the file to run it.
  
• On Vista/Win7 you need to Right click the file and choose Run as administrator to run it. With User Account Control on it should ask permission to run it. Click Yes
  
• This will flash a black DOS box very quickly and go away, this is normal.
  
• Restart your computer now.
  
• Launch Internet Explorer and see if you can connect to the Internet.
  
• Launch MBAM and check for Updates
  

STEP 03

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

• Download the latest version of Java Runtime Environment (JRE) 23 and save it to your desktop.
  
• Scroll down to where it says JDK 6 Update 23 (JDK or JRE)
  
• Click the Download JRE button to the right
  
• Select the Windows platform from the dropdown menu.
  
• Read the License Agreement and then check the box that says: "I agree to the Java SE Runtime Environment 6u23 with JavaFX 1 License Agreement". Click on Continue. The page will refresh.
  
• Click on the link to download Windows Offline Installation and save the file to your desktop.
  
• Close any programs you may have running - especially your web browser.
  
• Go to Start > Control Panel, double-click on Add or Remove Programs and remove all older versions of Java.
  
• Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java™ 6) in the name.
  
• Click the Remove or Change/Remove button.
  
• Repeat as many times as necessary to remove each Java versions.
  
• Reboot your computer once all Java components are removed.
  
• Then from your desktop double-click on jre-6u23-windows-i586-s.exe to install the newest version.
  

• After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
  • On the General tab, under Temporary Internet Files, click the Settings button.
    
  • Next, click on the Delete Files button
    
  • There are two options in the window to clear the cache - Leave BOTH Checked
    Applications and Applets
    Trace and Log Files
    

    [*]Click OK on Delete Temporary Files Window

    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.

    [*]Click OK to leave the Temporary Files Window

    [*]Click OK to leave the Java Control Panel.

Let me know if the errors continue or not after restarting again when all of the above has been completed.

[Brian67]

Hi structure and jered2011,

First let me say that I'm by no means a "techie", just a simple home user.

I think the problems you're experiencing with the Dell WLAN card have probably been caused by the latest Avast!5 update

(5.1.864) and if you visit the Avast forums, you'll find all the information available to you but in short, Avast is aware of the

situation and it seems a "fix" will be available this coming weekend.

I took the advice offered, Control Panel>Add/Remove Program(Avast)>Change Program, unchecked box for Behaviour Shield

and Reboot, problem resolved.

If you havn't already figured this problem out, I hope this snippet of information helps you but do visit the Avast forums, it

seems this "bug" generated by this latest update has caused lots of problems, mostly for Dell laptop users like myself.

Cheers, Brian67

[AdvancedSetup]

Thank you for the reply Brian, much appreciated.

In the case of structure's posted DDS it shows he has a proxy set that was almost certainly set by some type of Malware and it too should be removed.

uInternet Settings,ProxyOverride = <local>;*.local

uInternet Settings,ProxyServer = http=127.0.0.1:5555

Thank you again.

[opera]

Just for info here is the Avast thread

http://forum.avast.com/index.php?topic=68625.0

[Brian67]

Just trying to help AdvancedSetup, with my limited knowledge I thought these problems were probably caused by the Avast update situation but as you say,

it seems there are other issues.

Have a Happy and "trouble free " year one and all!!

Brian67

[structure]

I seem to be unable to preform step 2. When right clicking on the fixme.bat file, I get no option to "run as administrator." I have a few options, but none of them allow me to run the document as a file.

I am using a vista machine. I assume when you say notepad, you mean a .txt file (thats the program that comes up when I search notepad). I have saved fixme.bat both with quotes ("fixme.bat") and without. Neither seem to matter. I have also tried to save as .txt and of course as all files, neither work. Maybe I should be Encoding the file as something different? It is default set as ANSI, but I have tried all the others (UNICODE, UTF-8 and unicode big endian) none of which work.

thanks

[daledoc1]

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)

Skype

[structure]

Ok, sorry, I was able to run the fixme.bat file (did not notice the way in which it was being saved to my desktop). I have also uninstalled and updated my JAVA. I am still getting the WLAN error. I will now try uninstalling avast and see if that could be the culprit. Will report back once I find out.

And to the poster above, thanks for pointing that out, I did not notice it. I had just removed the "system tools" virus (or at least I thought I did) prior to this wlan problem occurring.

Neither mbam nor avast have picked up the malware, so I just assumed it was off of my computer. Should I be concerned about it?

thanks

[structure]

Ok, I have uninstalled avast! and the wlan error has gone away. So I assume the program was causing the problem. I have left AVAST! off my computer and am now installing AVG2011 and will use that as my antivirus. Is there any way I can check to make sure all traces of previous virus and malware are removed from my computer?

thanks for the help

[AdvancedSetup]

Is there any way I can check to make sure all traces of previous virus and malware are removed from my computer?

If you're still concerned that you might have some type of infection please follow the advice below and someone will assist you.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org