I had Zonealarm firewall installed, and about three days ago after i visited a website zonealarm popped up message saying that a file called 0.9284379031266823.exe is trying to attach it self to explorer.exe, i blocked it but later all kinds of troubles appeared.
Note: Virustotal report on the above file is here: https://www.virustotal.com/file/b93024712c7152e4bca0f2c92a8bbc4d80245911f99e2781d12fde0013c1f73b/analysis/1344657701/
at the time of upload only one antivirus detected it and it was kaspersky(make me wish i had it installed) .
After restarting my computer no Internet connection was able to establish until i disable zonealarm firewall and after i disable it I noticed hundreds of connections is established through services.exe and upload is running at maximum speed through this service.
I uninstalled zonealarm and ran combofix to fix this, everything got cleaned and zeroaccess is cleanly removed, i done scan with many other virus removal tools such as kaspersky removal tools malwarebyte and no infection is detected.
Now my biggest problem is that i have an issue with dns resolver on my os, i can't ping any website address, run windows update or any program update or open any website.
pinging an ip address directly work fine or even run the applications through a proxy ip address everything work fine.
I tried various fixings that i can't remember them all but nothing seems to work.
At last i arrived into a page that i need to remove and install tcp/ipv4 to reinstall all missing services, i did this but the problem didn't get resolved and it caused some other problems such as this error when i try to run pppoe connection.:
"Remote Access error 720 - A connection to the remote computer could not be established. You might need to change the network settings for this connection."
and the previous dns issue remains the same.
Currently i have these services not able to run:
- Computer Browser- doesn't start automatically and when start manually it stops after a while.
- DHCP Client -doesn't start dependencies: "ancillary function driver for winsock" which is not available.
- TCP/IP Netbios helper -doesn't start; dependencies: "ancillary function driver for winsock" which is not available.
Any thoughts how to fix this?
If you need any report let me know.
Edited by teerawi, 11 August 2012 - 12:16 AM.