Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

nslookup.exe produces could


  • Please log in to reply
6 replies to this topic

#1 mikerg87

mikerg87

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 21 November 2013 - 11:56 AM

Surfing the web looking for programming advise and I got hit by the "antivirus security pro". it seemed to jump onto my machine when a Java applet was invoked and then forced my machine to a BSOD. Rebooted and there was the infection. Latest Avira didn't seem to be good enough to defeat and the infection was on.

 

followed posts to manually remove the thing and that cured the first symptom, but the machine was still acting erratic.

 

When I tried to run nslookup.exe at the command prompt  I get the error:

 

Ordinal 1108 could not be located in dynamic link library WSOCK32.dll

 

this suggests that something else is broken or infected.

 

SFC indicates all is fine

Avira rescue CD indicates no further infections.

Microsoft Malicious Software Removal tool removed 2 infections

 

the problems persist. Is it time to run combofix and upload the result?

 

-- sorry I botched the topic header. can't seem to edit or delete and start fresh...

 

--mike

 

Moderator Edit. Moved from the Windows 7 Forum to a more appropriate forum

Roger


Edited by rotor123, 21 November 2013 - 01:23 PM.


BC AdBot (Login to Remove)

 


#2 technonymous

technonymous

  • Members
  • 2,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:46 PM

Posted 21 November 2013 - 12:27 PM

Run command as administrator and try..... netsh winsock reset  Then reboot the computer and try nslookup.exe Be aware this resets your network card and you may have to go in there and make changes IP address, gateway, dns etc.



#3 mikerg87

mikerg87
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 21 November 2013 - 01:46 PM

I tried but it produced:

 

the following helper dll could not be loaded: WSHELPER.dll

the following command was not found : winsock reset

 

?



#4 mikerg87

mikerg87
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 26 November 2013 - 11:41 AM

Any next steps to take since the reset of the network card/winsock stack did not work. ???

 

should I follow advise of other "antivirus security pro" posts ?



#5 technonymous

technonymous

  • Members
  • 2,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:46 PM

Posted 29 November 2013 - 01:52 AM

Run system file checker from administrator elevated cmd prompt.  sfc /scannow



#6 technonymous

technonymous

  • Members
  • 2,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:46 PM

Posted 30 November 2013 - 07:13 PM

http://support.microsoft.com/kb/2530126 If you're still having problems you could try that link. This might also help fix the WSHELPER.dll issues. It seems that the malware has trashed your internet settings, dll files and possibly your firewall.



#7 mikerg87

mikerg87
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:06:46 PM

Posted 30 November 2013 - 09:39 PM

SFC turned up no problems. I will run the KB to fix internet issues.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users