aerodynamic
FOCKING HELL
+241|5992|Roma
So last night i was attacked by a fucking virus acting like if it was an antivirus program and all and didn't let me open anything.
So i rebooted in safetymode and used Avast to scan the computer and delete the bastard.
But now i think it fucked up with my internet some how since, i cannot use any of the web broswers, Chrome, IE, Opera and ifrefox. None of them work. I cannot go online with steam or use MSN. But my internet is connected both sending and receiving. Also Jdownloader is still able to download files normally. So i'm thinking its either a firewall problem or something else? I tried setting the browers to Allow in the firewall but with no success...
Any help? I use windows 7.

--------------------------
Catbox's reply.
if your comp is beyond fixing use this free program link below
http://www.bleepingcomputer.com/combofi … e-combofix

and this... use combofix first
http://www.cexx.org/lspfix.htm
--------------------------

So you think its still the virus causing the problem?

Last edited by aerodynamic (2010-05-13 02:00:53)

https://bf3s.com/sigs/8ea27f2d75b353b0a18b096ed75ec5e142da7cc2.png
Ultrafunkula
Hector: Ding, ding, ding, ding...
+1,975|6712|6 6 4 oh, I forget

Win7 ?

Hey if you haven't installed or done anything important, you can always run the backup from before the virus attacked. I did it once and it worked muy taco after it. Had to install a game again but it was worth it.
aerodynamic
FOCKING HELL
+241|5992|Roma
It won't let me do the system restore thing to yesterday morning or the day before that...

damn, combfix won't work, it says its only for xp and w2000

Last edited by aerodynamic (2010-05-13 06:28:00)

https://bf3s.com/sigs/8ea27f2d75b353b0a18b096ed75ec5e142da7cc2.png
aerodynamic
FOCKING HELL
+241|5992|Roma
seriously guys, combofix won't work.
I tried using LSP fix but it didn't do anything
https://bf3s.com/sigs/8ea27f2d75b353b0a18b096ed75ec5e142da7cc2.png
steelie34
pub hero!
+603|6620|the land of bourbon
with lspfix you have to delete the rogue file(s) that are in your layered service provider and delete them... not easy if you don't know what to look for.  you could always google each item in the list to see if it's legitimate or not, or just post the names here.

also, you need to reset your winsock settings:

http://support.microsoft.com/kb/299357
https://bf3s.com/sigs/36e1d9e36ae924048a933db90fb05bb247fe315e.png
King_County_Downy
shitfaced
+2,791|6836|Seattle

Combofix is dangerous. Use only as a last resort.... but it's sounds like it's too late.

Malwarebytes.org for the scan. You may need to run it in safe mode to really clean the virus...

If you're certain that the virus is gone, try resetting your winsock settings like steelie said, then run a  system file check.

Start-->Run. SFC /scannow <enter>

Also, Microsoft has a removal tool for this fake antivirus. If you have your windows updates;

Start--> Run. MRT <enter>
Sober enough to know what I'm doing, drunk enough to really enjoy doing it
aerodynamic
FOCKING HELL
+241|5992|Roma
aight, will try these.
https://bf3s.com/sigs/8ea27f2d75b353b0a18b096ed75ec5e142da7cc2.png
aerodynamic
FOCKING HELL
+241|5992|Roma
fucking hell.
nothing seems to work.
I might just reformat eveyrthing.
https://bf3s.com/sigs/8ea27f2d75b353b0a18b096ed75ec5e142da7cc2.png
SonderKommando
Eat, Lift, Grow, Repeat....
+564|6898|The darkside of Denver
reset your router?
aerodynamic
FOCKING HELL
+241|5992|Roma
did that.

wtf, i can enter steam tho the homepage and anythign won't show up but i'm actually online and use the chat to talk to other people...

Last edited by aerodynamic (2010-05-13 15:11:29)

https://bf3s.com/sigs/8ea27f2d75b353b0a18b096ed75ec5e142da7cc2.png
steelie34
pub hero!
+603|6620|the land of bourbon
are you sure you reset your winsock settings?  http://www.pctechbytes.com/2009/07/15/f … n-windows/

also, what was listed in the lspfix tool?  take a screenie and post it.

Last edited by steelie34 (2010-05-13 15:18:22)

https://bf3s.com/sigs/36e1d9e36ae924048a933db90fb05bb247fe315e.png
aerodynamic
FOCKING HELL
+241|5992|Roma
nothing really.
It said STATUS NORMAL.

I downloaded the microsoft FIX IT for Winsock2 and TCP/IP reset.

Last edited by aerodynamic (2010-05-13 15:18:49)

https://bf3s.com/sigs/8ea27f2d75b353b0a18b096ed75ec5e142da7cc2.png
steelie34
pub hero!
+603|6620|the land of bourbon
so your lspfix window looks like this?

https://i176.photobucket.com/albums/w171/steelie34/test.png
https://bf3s.com/sigs/36e1d9e36ae924048a933db90fb05bb247fe315e.png
aerodynamic
FOCKING HELL
+241|5992|Roma
yeah.
https://bf3s.com/sigs/8ea27f2d75b353b0a18b096ed75ec5e142da7cc2.png
Morpheus
This shit still going?
+508|6238|The Mitten
lol.
"I know what I'm doing (or enjoy reinstalling my operating system...)"
EE (hats
steelie34
pub hero!
+603|6620|the land of bourbon
check your network connection properties.  highlight the tcp/ip ip4 settings and make sure there aren't any bogus dns servers listed there.
https://bf3s.com/sigs/36e1d9e36ae924048a933db90fb05bb247fe315e.png
phishsux
­
+131|5370
reformat ffs
aerodynamic
FOCKING HELL
+241|5992|Roma
I bought W7 Pro Anytime upgrade and reinstalled it.
Now it works fine.

Last edited by aerodynamic (2010-05-14 09:36:10)

https://bf3s.com/sigs/8ea27f2d75b353b0a18b096ed75ec5e142da7cc2.png
Defiance
Member
+438|6910

For the future, give RKill a try.
acdc
Member
+37|6814|SEATTLE, WA
Head out Californee way..  Rumor going around there might be some internet out there.
konfusion
mostly afk
+480|6789|CH/BR - in UK

I recommend reinstalling anytime you have a virus - you never know how much is in there that's silent.

-kon

Board footer

Privacy Policy - © 2024 Jeff Minard