Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

help please no internet connection after using combo fix


  • This topic is locked This topic is locked
61 replies to this topic

#1 sexysam777

sexysam777

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 30 September 2012 - 05:21 PM

hi had a infection on my computer random websites used load up i used malwarebytes but it didnt find any virus, i used combofix it found a virus called rootkit.access it removed it but when i restarted my pc now it wont connect to the internet but my laptop wireless is fine i cant even restore system can someone help me thank you.

iv attached a fss txt file scan thank you

Attached Files

  • Attached File  FSS.txt   2.35KB   5 downloads


BC AdBot (Login to Remove)

 


#2 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,771 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:11:55 AM

Posted 30 September 2012 - 06:40 PM

Hi,

please download this file and double-click it: SharedAccess.reg.

Then please reboot and create a new log with FSS and let me know if internet works.

Please also run a scan with DDS:
Please run a scan with DDS:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
    DDS.scr
    DDS.pif
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results, click no to the Optional_Scan
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.


Information on A/V control HERE

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#3 sexysam777

sexysam777
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 01 October 2012 - 01:05 PM

thank you i will try when i get back home.

#4 sexysam777

sexysam777
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 01 October 2012 - 05:10 PM

here the fss file attached

the dds scan does not complete its been more than a hour i disabled all my security softwares thank you

Attached Files

  • Attached File  FSS.txt   2.4KB   4 downloads


#5 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,771 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:11:55 AM

Posted 02 October 2012 - 05:23 AM

Hi,

what happens with DDS? Is it freezing? Just slow?

Can you please run OTL instead:
We need to create an OTL Report
  • Please download OTL from one of the following mirrors:
  • Save it to your desktop.
  • Double click on the Posted Image icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • Push the Posted Image button.
  • Two reports will open, copy and paste them in a reply here:
    • OTL.txt <-- Will be opened
    • Extra.txt <-- Will be minimized

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#6 sexysam777

sexysam777
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 02 October 2012 - 01:47 PM

thanks for the reply and dds i think it freezes because scanned it twice and left it for 1 hour to scan but it didnt complete twice

both otltxt and extratxt attached thank you

Attached Files



#7 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,771 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:11:55 AM

Posted 03 October 2012 - 07:39 AM

Hi,

it seems like some of the malware wasn't sucessfully removed, could you please run ComboFix again:

Please download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop
  • Temporarily disable isable your AntiVirus and AntiSpyware applications. They may otherwise interfere with our tools
    Usually this can be done via a right click on the System Tray icon, check this tutorial for disabling the most common security programs: Link

  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image


Click on Yes, to continue scanning for malware.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.

This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper


If you need help, see this link:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#8 sexysam777

sexysam777
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 03 October 2012 - 01:06 PM

hi i ran combo fix but its giving me a message that the machine hasnt got Microsoft Windows Recovery Console click yes to download it but the internet dont work on that machine

how can i download ot to run the scan thank you

#9 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,771 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:11:55 AM

Posted 04 October 2012 - 04:51 AM

Hi,

sorry. I thought the recovery console was already installed. Please try it this way:


Go to Microsoft's website => http://support.microsoft.com/kb/310994

Scroll down to Step 1, and select the download that's appropriate for your Operating System. Download the file & save it as it's originally named.

Note: If you have SP3, use the SP2 package.


---------------------------------------------------------------------

Transfer all files you just downloaded, to the desktop of the infected computer.

--------------------------------------------------------------------


Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

Posted Image


  • Drag the setup package onto ComboFix.exe and drop it.

  • Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console.


    Posted Image


  • At the next prompt, click 'Yes' to run the full ComboFix scan.

  • When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt in your next reply.

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#10 sexysam777

sexysam777
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 04 October 2012 - 04:47 PM

iv followed your instructions from the forum iv downloaded xp sp2 and dragged to combofix it gives message

your are infected with rootkit.zeroacess and i clicked ok and its been scanning on blue screen 2 hours and its still scanning

i really hope you can help me sort my machine out its stressful

thank you

#11 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,771 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:11:55 AM

Posted 05 October 2012 - 06:01 AM

Hi,

does it make any progress in the steps that are being worked through or is it stuck on one step?

Have you disabled your anti virus?

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#12 sexysam777

sexysam777
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 05 October 2012 - 12:01 PM

it says creating restore point after that it says now scanning takes 10 minites but can take double that says on blue screen. and yes my firewall and anti virus software are diabled thank you

hope you can help

#13 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,771 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:11:55 AM

Posted 05 October 2012 - 12:19 PM

Hi,

could you please try renaming combofix.exe to fun.com and run it from safe mode?

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+


#14 sexysam777

sexysam777
  • Topic Starter

  • Members
  • 54 posts
  • OFFLINE
  •  
  • Local time:04:55 AM

Posted 06 October 2012 - 11:03 AM

hi safe mode completed scan log is attached thank you

Attached Files



#15 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,771 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:11:55 AM

Posted 07 October 2012 - 05:18 AM

Hi,

that took out quite some things. How is the PC doing now? Still offline?

Download RogueKiller to your desktop

  • Quit all running programs
  • For Vista/Seven, right click -> run as administrator, for XP simply run RogueKiller.exe
  • When prompted, type 1 and validate
  • The RKreport.txt shall be generated next to the executable.
  • If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe
Please post the contents of the RKreport.txt in your next Reply.

regards myrti

is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users