Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Malware Problem


  • Please log in to reply
4 replies to this topic

#1 Horace White

Horace White

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:04:29 PM

Posted 11 February 2012 - 06:40 AM

Mod Edit: Split from http://www.bleepingcomputer.com/forums/topic432356.html/page__p__2593161#entry2593161 ~ Hamluis.


I have the same problem.
I have included the result from FSS...

Farbar Service Scanner Version: 10-02-2012
Ran by Horace (administrator) on 11-02-2012 at 06:32:57
Running from "E:\"
Microsoft Windows 7 Professional Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is OK.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.


Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Google IP is accessible.
Yahoo IP is accessible.


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys
[2011-06-15 17:43] - [2011-04-24 21:18] - 0338944 ____A ()

C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

Edited by hamluis, 11 February 2012 - 11:52 AM.
PM sent new OP.


BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,716 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:01:29 PM

Posted 11 February 2012 - 12:12 PM

I have the same problem.

You need to tell us what the problem is.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 Horace White

Horace White
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:04:29 PM

Posted 11 February 2012 - 05:53 PM

was having problem with my Google search re-directing to other sites.
I then read some post on this site and decided to use Rkill, then Malwarebytes to solve the problem.

That did not work. I then tried system restore, but it would not restore because of error message....
" System restore did not complete successfully. Your computer system files and settings were
not changed

Details:
System restore failed to extract the file
(C:\Windows\$NtUninstallKB22595$\3006983033) from the restore point
The restore point was damaged or was deleted during the restore "


I then read a post here and decided to try "ComboFix"
After that, I tried to log onto the internet, but i cannot log on... wireless or
Ethernet cable.

#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,716 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:01:29 PM

Posted 11 February 2012 - 06:23 PM

Since you ran Combofix....


Please follow the instructions in ==>This Guide<== starting at Step 6. If you cannot complete a step, skip it and continue.

Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.

If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#5 Horace White

Horace White
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:04:29 PM

Posted 14 February 2012 - 12:11 AM

Hi Broni,

I posted it in the"Post a new malware removal request" section.
Hope I will get help soon :thumbup2:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users