Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

No web access unless in safe mode (with networking)


  • Please log in to reply
4 replies to this topic

#1 MikeInKC

MikeInKC

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:27 AM

Posted 19 November 2009 - 08:46 AM

Windows XP Media Center Edition, Service Pack 3.

I cannot access any web site unless I am in Safe Mode (with networking). I can ping successfully, but any URL gives me a 404 error.

There was quite a bit of malware on the machine, which I removed with MBAM.

I've gone through the process list, and everything seems to be legit.

Any help would be welcome. Thanks.

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,871 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:27 AM

Posted 19 November 2009 - 09:46 AM

Hi :thumbsup:.

Any error messages onscreen?

Have you checked Event Viewer for any errors...which might illuminate what could be impacting your connectivity?

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/t/40108/how-to-use-event-viewer/

My wild guess would be that something...that loads with normal boot...is preventing your Internet access.

No access at all...or specific sites/types of sites?

System manufacturer and model?

You have tried uninstalling, then reinstalling your network drivers?

Louis

#3 MikeInKC

MikeInKC
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:27 AM

Posted 19 November 2009 - 10:46 AM

No error messages other than the 404 in IE. Google Chrome says connection reset. Update: Found fio32.dll in sys32 directory, which apparently is part of KoobFace. Rebooted into safe mode and was able to delete it. Was then able to update NOD32, which immediately found fio32.sys.

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,871 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:27 AM

Posted 19 November 2009 - 11:29 AM

Just for reading, http://www.bleepingcomputer.com/forums/t/259221/websites-keep-getting-redirected-to-strange-sites-was-infected-with-wormkoobface-before-and-trojanagentgen-virutpp/

I think I would post at the BleepingComputer.com - Am I infected What do I do - http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/. It seems that many users who think they have resolved malware situations on their own...realize later that they haven't.

Louis

#5 Ken-in-West-Seattle

Ken-in-West-Seattle

  • Members
  • 518 posts
  • OFFLINE
  •  
  • Local time:05:27 AM

Posted 19 November 2009 - 07:06 PM

I concur.

Koobface is usually the tip of the iceberg and lately seems to be dropped along with some nasty polymorphic rootkits.

I have backed up and reinstalled the last 4 I have been asked to clean. Odd behavior and damaged windows files persist long after a chain of scanners and AV software shows them clean.

Koobface also has a bank password stealing component that some scanners find and some don't.
http://us.trendmicro.com/imperia/md/conten...ace_jul2009.pdf




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users