Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

network issues after malware removal


  • This topic is locked This topic is locked
16 replies to this topic

#1 calenatar

calenatar

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:17 PM

Posted 26 August 2014 - 10:53 PM

So a friend brought me his laptop today and it was LOADED with malware. I've ran combofix, malwarebytes, rkill, and removed everything they found. went through startup programs, non microsoft services, etc looking for anything out of place but it has no network connectivity for some reason. neither wireless or wired. 0 transmission. When I connect it wirelessly it says limited access, but it acts like there's no access. when connected through a wired connection it says connected, but shows no transmission. almost like something's blocking the connections from transmitting. have checked/updated drivers even with no effect. Suggestions? machine is a dell inspiron 1564


Edited by calenatar, 26 August 2014 - 10:53 PM.


BC AdBot (Login to Remove)

 


m

#2 rockysosua

rockysosua

  • Members
  • 772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Caribbean
  • Local time:06:17 PM

Posted 26 August 2014 - 11:13 PM

Have you checked Internet Protocol Version 4 settings, ie the IP and DNS?

Also the LAN settings in IE, to be sure that it is set to automatically detect settings.


All is well in Paradise.

#3 calenatar

calenatar
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:17 PM

Posted 26 August 2014 - 11:19 PM

Have you checked Internet Protocol Version 4 settings, ie the IP and DNS?

Also the LAN settings in IE, to be sure that it is set to automatically detect settings.

yep, have done that. everything is set to auto. when I run diag on it windows says "there might be a problem with the driver" for both the wireless and the wired adapters, but both drivers are as they should be and are the latest version straight from dell. had this issue before driver update too. I assume its malware related still, but I cant find anything and the system runs perfect outside of this issue. on the windows troubleshooter though when I look through the details of the error it says windows couldnt automatically bind the ip proticol stack to the network adapter. dont know if thats a general statement cause it cant connect or if the actual issue lies therein.



#4 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,566 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 AM

Posted 26 August 2014 - 11:23 PM

Go Start>Run (Start search in Vista), type in:
cmd
Click OK (in Vista and 7, while holding CTRL, and SHIFT, press Enter).

In Command Prompt window, type in following commands, and hit Enter after each one:(Copy and Paste the commands to ensure accuracy)
ipconfig /flushdns
ipconfig /registerdns
ipconfig /release
ipconfig /renew
net stop "dns client"
net start "dns client"


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#5 calenatar

calenatar
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:17 PM

Posted 26 August 2014 - 11:28 PM

Go Start>Run (Start search in Vista), type in:
cmd
Click OK (in Vista and 7, while holding CTRL, and SHIFT, press Enter).

In Command Prompt window, type in following commands, and hit Enter after each one:(Copy and Paste the commands to ensure accuracy)
ipconfig /flushdns
ipconfig /registerdns
ipconfig /release
ipconfig /renew
net stop "dns client"
net start "dns client"

fail on the release/renew

 

says no adapter in the state permissible for this operation



#6 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,566 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 AM

Posted 26 August 2014 - 11:36 PM

Follow these steps and check if it works.

 

a.     Click Start, click Run, type cmd, and then press ENTER.

b.     At the command prompt, type netsh int ip reset resetlog.txt, and then press ENTER to reset the TCP/IP network protocol.

c.     At the command prompt, type ipconfig /renew, and then press ENTER and check whether you see the error.


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#7 calenatar

calenatar
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:17 PM

Posted 26 August 2014 - 11:44 PM

Follow these steps and check if it works.

 

a.     Click Start, click Run, type cmd, and then press ENTER.

b.     At the command prompt, type netsh int ip reset resetlog.txt, and then press ENTER to reset the TCP/IP network protocol.

c.     At the command prompt, type ipconfig /renew, and then press ENTER and check whether you see the error.

the reset worked, the renew still did not. same error as above.



#8 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,566 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 AM

Posted 26 August 2014 - 11:45 PM

I am beginning to wonder if perhaps the machine is still infected.

 

Run this first to verify that the Windows files are all ok.

 

Run System File Check from an Elevated Command Prompt
 1. Open Elevated Command Prompt as per directions
 2. Type sfc /scannow and press Enter (note the space between c and / it must be there)
 3. (On average).This should not take longer than 20 minutes to finish
 4. NOTE : Do not touch the keyboard while this is running

 

Do Not reboot the machine in the middle of this scan.

If this a laptop, be sure it has plenty of battery, or keep it on the charger


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#9 calenatar

calenatar
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:17 PM

Posted 26 August 2014 - 11:50 PM

got to 9% then stopped. said "windows resource protection could not preform the requested operation"


Edited by calenatar, 26 August 2014 - 11:51 PM.


#10 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,566 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 AM

Posted 27 August 2014 - 12:02 AM

are you certain you ran it from      http://www.bleepingcomputer.com/tutorials/windows-elevated-command-prompt/


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#11 calenatar

calenatar
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:17 PM

Posted 27 August 2014 - 12:05 AM

yep, showed running as admin at the top of the window and everything



#12 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,566 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 AM

Posted 27 August 2014 - 12:17 AM

Ok, seeing you have already run Combofix, I think it better for you to make use of the experts in the Malware Removal Area,

 

There is a strong possibility that Malware is still present on the laptop.

 

 

Please follow the instructions in the Preparation Guide For Requesting Help  starting at Step #6.

 

When you have done that, start a new topic and post the required logs to  Virus, Trojan, Spyware, and Malware Removal Logs   forum, NOT here, for assistance by the Malware Response Team Experts.

NOTE :If you are unable to complete any step, please just post the topic and leave a good description of your problems

Best of Luck !

 

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible.  I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#13 calenatar

calenatar
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:06:17 PM

Posted 27 August 2014 - 12:32 AM

Thanks for helping, posted over there as instructed.



#14 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,566 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 AM

Posted 27 August 2014 - 02:41 AM

New topic can be found HERE


Condobloke

Outback Australian  

 

fed up with Windows antics...??

 

LINUX IS THE ANSWER

 

I USE LINUX MINT EXCLUSIVELY... NO DUAL BOOT, NO VIRTUAL MACHINE

 

 

 Failure is not an option. It comes bundled with your Microsoft product.

 

 

 


#15 Ninous

Ninous

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:12:17 AM

Posted 27 August 2014 - 03:29 AM

If nothing above helps, this also could be if you have many antivirus softwares installed on your PC so each of them tries to protect your network activity and then comes to oversaturation. You should have only one antivirus installed.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users