BleepingComputer.com: Win 7 64 Virus or Rootkit

Win 7 64-bit

I'm not sure what's going on with my laptop. I have ran Malware Antibytes and it came back clean. I have a valid IP address, but I can't get on the internet. I check the IE options and the proxy setting are not selected. Please help.

Thanks!

This post has been edited by hamluis: Today, 02:20 PM
Reason for edit: Moved from Am I infected to Win 7 ~ Hamluis.

Report
Back to top MultiQuote
Quote Edit
--------------------------------------------------------------------------------
#2 hamluis

Forum Addict

Group:
Moderator Posts:
23,293 Joined:
03-September 05 Gender:Male Location:Killeen, TX Posted Today, 02:20 PM

<<...but I can't get on the internet.>>

Error message?

System manufacturer and model?

What makes you give your post the title you gave?

Louis

You CAN teach an old dog new tricks...if the dog is willing to learn and adapt to the fact that change is constant and has the potential for self-growth.

BC Discussion Forum Rules
Preparation Guide Before Using Malware Removal Tools and Requesting Help
Report
Back to top MultiQuote
Quote
--------------------------------------------------------------------------------
#3 Mikeyb1

New Member

Group:
Members Posts:
5 Joined:
Today, 01:19 PM Posted Today, 04:39 PM

Dell Inspiron 1545

No Error messages that I have found. The reason I titled it with "rootkit" is because that's what was wrong with another one of my PCs.

I have ran MA in safe mode and it appears to be clean, but I still can't access the web.

Report
Back to top MultiQuote
Quote Edit
--------------------------------------------------------------------------------
#4 Broni

The Coolest BC Computer

Group:
BC Advisor Posts:
6,418 Joined:
01-February 08 Gender:Male Location:Daly City, CA Posted Today, 07:07 PM

1. Click Start>Run (Start>"Start search" in Vista).

2. Type in (or copy and paste):

cmd /c ping google.com>%temp%\$.$&notepad %temp%\$.$

and press Enter.

3. Notepad will open.

4. Copy all text in Notepad ([Ctrl-A], then [Ctrl-C]), and then post it (paste = [Ctrl-V]) in your next reply.

My Website



My help doesn't cost a penny, but if you'd like to consider a donation, click

Still can't get on the web....not sure what's causing it.

Try this--open control, internet options, connections tab, lan settings, uncheck the box next to "use proxy...."
OR
Go to Start ... Run and type in cmd
A dos Window will appear.
Type in the dos window: netsh winsock reset
Click on the enter key.

Reboot your system to complete the process.

"The requested operation requires elevation (Run as Administrator)"

right-click the "Command Prompt" and choose to "Run as Administrator".

Awesome! Worked like a charm! Thanks!

Great!! If you haven't cleared the Rootkit then do this next.

Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!
Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.

• Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
  Vista/Windows 7 users right-click and select Run As Administrator.
  
• If TDSSKiller does not run, try renaming it.
  
• To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.
  
• Click the Start Scan button.
  
• Do not use the computer during the scan
  
• If the scan completes with nothing found, click Close to exit.
  
• If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  
• Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
  
• A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).
  
• Copy and paste the contents of that file in your next reply.