Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

2012 windows virus help


  • Please log in to reply
9 replies to this topic

#1 Zashin

Zashin

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:01:14 PM

Posted 28 December 2011 - 09:29 PM

I got rid of the windows 2012 virus but somthing is still blocking my internet connection. im still sending packets and reciveing them but i cant not connect to the internet at all. Please help me.

Edit: Moved topic from Windows 7 to the more appropriate forum. ~ Animal

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:14 PM

Posted 28 December 2011 - 09:36 PM

Please download Farbar Service Scanner

http://download.bleepingcomputer.com/farbar/FSS.exe

and run it on the computer with the issue.


* Press "Scan".
* It will create a log (FSS.txt) in the same directory the tool is run.
* Please copy and paste the log to your reply.

#3 Zashin

Zashin
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:01:14 PM

Posted 28 December 2011 - 09:53 PM

arbar Service Scanner
Ran by Andrew (administrator) on 28-12-2011 at 21:43:18
Microsoft Windows 7 Professional Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============
MpsSvc Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open MpsSvc registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open MpsSvc registry key. The service key does not exist.
Checking ServiceDll: Attention! Unable to open MpsSvc registry key. The service key does not exist.

bfe Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open bfe registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open bfe registry key. The service key does not exist.
Checking ServiceDll: Attention! Unable to open bfe registry key. The service key does not exist.

mpsdrv Service is not running. Checking service configuration:
The start type of mpsdrv service is OK.
The ImagePath of mpsdrv service is OK.


Firewall Disabled Policy:
==================


System Restore:
============
SDRSVC Service is not running. Checking service configuration:
The start type of SDRSVC service is OK.
The ImagePath of SDRSVC service is OK.
The ServiceDll of SDRSVC service is OK.

VSS Service is not running. Checking service configuration:
The start type of VSS service is OK.
The ImagePath of VSS service is OK.


System Restore Disabled Policy:
========================


Security Center:
============

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

Attached Files

  • Attached File  FSS.txt   2.6KB   0 downloads


#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:14 PM

Posted 28 December 2011 - 11:08 PM

Everything looks fine regarding your internet connection

Open command prompt as administrator and these commands


netsh int ip reset reset.log

netsh winsock reset catalog


Restart your PC

Reinstall your network drivers

See if you can browse now

Good luck

#5 Zashin

Zashin
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:01:14 PM

Posted 28 December 2011 - 11:28 PM

It worked! Thank you so much!

#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:14 PM

Posted 28 December 2011 - 11:57 PM

:thumbsup:

#7 Zashin

Zashin
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:01:14 PM

Posted 29 December 2011 - 09:56 AM

Ok.... I thought i got rid of it for good and it appeared around 4am.... Im guessing it is making my anti virus stuff telling me that its removed when it isnt.... also i have 2 500g hard drivees raided togather. plz help me solve this >.<

#8 Zashin

Zashin
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:01:14 PM

Posted 29 December 2011 - 10:48 PM

Spybot helped alittle but i think the virus is either saying that or it got rid of files but they reappear..... such a rampaging evil virus. my microsoft anti-virus is destroyed by it and also my malwarebytes....

#9 Zashin

Zashin
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:01:14 PM

Posted 29 December 2011 - 11:36 PM

now the virus corrupted files on the hard drive. It will not allow me toeven get to login screen. This is what its saying "windoes failed to start. a recent harware or software change might be the cause." So the microsoft anti virus i got reinstalled and updated probly just ate some important files.........

#10 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:14 PM

Posted 29 December 2011 - 11:37 PM

You should be able to boot into safemode

Read the preparation guide and

Create a new topic here

http://www.bleepingcomputer.com/forums/forum22.html

Good luck




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users