Friend of mine runs small company. One of the computers started to behave weird and he asked me for help. After Windows boot up I noticed some "new" antivirus on desktop listing lots of infected files and requiring immediate license purchase. Even though I closed the window it appeared again each time I tried to run any application. After quick search I found that it was: Security Pro virus.
I run TDSS, RougeKiller and MBAM - which removed: Rogue.AntivirusSecurity, Hijack.SecurityCenter, Rootkit.0Access.ED and Trojan.Kelihos.OTF. Everything was working fine after reboot, but still I was not sure if my computer is clean so I decided to run Combofix. After this I checked if everything is working ok - and then I removed Combofix backups (uninstall).
After few hours it turned out that there is some problem with networking. PC has Internet connection, but is not(!) visible in local network, does not(!) respond to ping and other computers cannot access sharded folders on this computer
I checked services, event log and network connection settings - everything looks ok. I can also ping other computers and browse shared files. I tried to do some TCP/IP reset:
netsh int ip reset
but it failed with message: Reseting Echo Request, failed. Access is denied.
Do you have any ideas how to fix this ?
PC runs Windows Vista 32bit and Nod 32 antivirus.