Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Removed Virus, Now Without the Internet


  • Please log in to reply
2 replies to this topic

#1 mikkimax

mikkimax

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:03:37 AM

Posted 19 February 2015 - 12:25 AM

Okay so basically, I used Combofix to rid my laptop of the virus but after doing so, I was still unable to connect to my home wifi. I just recently ran a Farbar scan and this was the result:

 

 

Farbar Service Scanner Version: 17 - 01 - 2015
Ran by Owner (administrator) on 18-02-2013 at 19:43:50
Running from “E:\”
Microsoft Windows 7 Professional Service Pack 1
Boot Mode: Normal

****************************************************************

 

Internet Services:
============
Dnscache Service is not running. Checking service configuration:

The start type of Dnscache service is OK.

The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.

Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

 

 

Connection Status:

============

Attempt to access Local Host IP returned error: Localhost is blocked: Other errors

LAN connected.

Attempt to access Google IP returned error. Other errors

Attempt to access

Google.com returned error: Other errors

Attempt to access Yahoo.com returned error: Other errors

 

Windows Firewall

============

MpsSvc service is not running. Checking service configuration:

The start type of MpsSvc service is OK.
The ImagePath of MpsSvc service is OK.
The ServiceDll of MpsSvc service is OK.

 

Firewall Disabled Policy:
==================

System Restore:

============

System Restore Policy:
========================

Action Center:
============

Windows Update:
============

wuauserv Service is not running. Checking service configuration:

The start type of wuauserv service is OK.

The ImagePath of wuauserv service is OK.

The ServiceDll of wuauserv service is OK.

 

BITS Service is not running. Checking service configuration:

The start type of BITS service is OK.

The ImagePath of BITS service is OK.

The ServiceDll of BITS service is OK.

Windows Autoupdate Disabled Policy:

============================

Other Services:

==============

 

 

File Check:

========

C:\Windows\System32\nsisvc.dll => File is digitally signed

C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed

C:\Windows\System32\dhcpcore.dll => File is digitally signed

C:\Windows\System32\drivers\afd.sys => File is digitally signed

C:\Windows\System32\drivers\tdx.sys => File is digitally signed

C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed

C:\Windows\System32\dnsrslvr.dll => File is digitally signed

C:\Windows\System32\mpssvc.dll => File is digitally signed

C:\Windows\System32\bfe.dll => File is digitally signed

C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed

C:\Windows\System32\SDRSVC.dll => File is digitally signed

C:\Windows\System32\vssvc.exe => File is digitally signed

C:\Windows\System32\wscsvc.dll => File is digitally signed

C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed

C:\Windows\System32\wuaueng.dll => File is digitally signed

C:\Windows\System32\qmgr.dll => File is digitally signed

C:\Windows\System32\es.dll => File is digitally signed

C:\Windows\System32\cryptsvc.dll => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

 

 

**** End of log ****

 

I am completely and entirely clueless as to what I need to do now, and currently I'm in desperate need to my laptop for school. Could someone please instruct in what I should do next?

 



BC AdBot (Login to Remove)

 


#2 Orecomm

Orecomm

  • Members
  • 266 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Roseburg, Oregon
  • Local time:04:37 AM

Posted 19 February 2015 - 08:08 PM

As a first step, go into Device Manager (in Control Panels), find Network Adapters, open it and find your wireless adapter. Hilight it and delete. Confirm. Now reboot the computer. Windows will "discover" that you have a wireless adapter and "install" it. Many kinds of malware insert themselves into the driver stack, and when they are removed it leaves a "hole" that, for all intents and purposes, your bits fall into. Deleting and reinstalling the adapter is the simplest way to get everything back to normal. If that doesn't do the trick get back to us. There are other things, proxy settings and such, that can gum things up but this one looks like the driver is clobbered.



#3 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:12:37 PM

Posted 19 February 2015 - 08:17 PM

Try restarting your computer - ComboFix tends to cause loss of internet connectivity when it runs, but a reboot should solve the problem.

Also, I do NOT recommend running ComboFix unsupervised.

Alex




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users