Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Can't connect to internet, email OK.

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Can't connect to internet, email OK.

Unread postby deanderwent » May 9th, 2011, 8:30 am

Internet connection has been running really slowly, then only for a couple of minutes, now not at all. Can receive emails though.

I can also e.g. ping google.com, with reasonable round-trip times. I'm wondering if it might be a problem with my installation of K9 web protection. Perhaps one of the kids has tried to hack it..

Looks like this is something to do with it, just restarted the K9 service and it appeared to be OK for 20 minutes or so. Then let my daughter on, & suddenly it wasn't connecting again. After stopping and starting the wireless card, and K9, it appears to be working again..



DDS log:

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Mummy and Daddy at 22:20:58.21 on Mon 09/05/2011
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2039.1411 [GMT 10:00]
.
AV: AVG Anti-Virus Free *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
svchost.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\EeePC\ACPI\AsTray.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
C:\Program Files\EeePC\ACPI\AsEPCMon.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\WINDOWS\system32\igfxext.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Asus\EeePC\Super Hybrid Engine\SuperHybridEngine.exe
C:\Documents and Settings\Mummy and Daddy\My Documents\My Downloads\dds.scr
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://news.bbc.co.uk/sport
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.6209.1142\swg.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File
uRun: [\\STUDYXP\EPSON Stylus Photo RX590 Series] c:\windows\system32\spool\drivers\w32x86\3\e_fatibpp.exe /fu "c:\docume~1\mummya~1\locals~1\temp\E_S2BC.tmp" /EF "HKCU"
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [AsusTray] c:\program files\eeepc\acpi\AsTray.exe
mRun: [AsusACPIServer] c:\program files\eeepc\acpi\AsAcpiSvr.exe
mRun: [AsusEPCMonitor] c:\program files\eeepc\acpi\AsEPCMon.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_03\bin\jusched.exe"
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\superh~1.lnk - c:\program files\asus\eeepc\super hybrid engine\SuperHybridEngine.exe
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
Trusted Zone: uecomm.com.au\firepass
DPF: {195538FD-1C39-44B1-A7C3-5D7137A8A8F1} - hxxps://firepass.uecomm.com.au/vdesk/te ... 0,611,2025
DPF: {30CF9713-6614-4556-B5F5-66F8C7F9DEF1} - hxxps://firepass.uecomm.com.au/vdesk/te ... 0,611,2025
DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/ ... vc1dmo.cab
DPF: {41EF3CD2-D8CC-4438-84B1-280BB4E77C8E} - hxxps://firepass.uecomm.com.au/vdesk/te ... 0,611,2051
DPF: {45B69029-F3AB-4204-92DE-D5140C3E8E74} - hxxps://firepass.uecomm.com.au/vdesk/te ... ,0611,2124
DPF: {49EC7987-E331-44E3-B170-748B58A268B9} - hxxps://firepass.uecomm.com.au/vdesk/te ... 0,611,2025
DPF: {57C76689-F052-487B-A19F-855AFDDF28EE} - hxxps://firepass.uecomm.com.au/vdesk/te ... ,1010,0303
DPF: {6C275925-A1ED-4DD2-9CEE-9823F5FDAA10} - hxxps://firepass.uecomm.com.au/vdesk/te ... ,0514,2337
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/200 ... ader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: {E0FF21FA-B857-45C5-8621-F120A0C17FF2} - hxxps://firepass.uecomm.com.au/vdesk/te ... 0,611,2119
DPF: {E615C9EA-AD69-4AE9-83C9-9D906A0ACA6D} - hxxps://firepass.uecomm.com.au/policy/d ... ,0611,2049
DPF: {EBDC91CB-F23F-477D-B152-3F7243760D04} - hxxps://firepass.uecomm.com.au/vdesk/te ... 0,611,2025
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: avgrsstarter - avgrsstx.dll
Notify: igfxcui - igfxdev.dll
Hosts: 127.0.0.1 http://www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\docume~1\mummya~1\applic~1\mozilla\firefox\profiles\jv3wzg7s.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://news.bbc.co.uk/sport
FF - prefs.js: keyword.URL - hxxp://search.avg.com/?d=4d6a0d8c&i=23&tp=ab&nt=1&q=
FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll
FF - component: c:\program files\avg\avg10\firefox4\components\avgssff4.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.53\npGoogleUpdate3.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\microsoft silverlight\3.0.50106.0\npctrlui.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
.
============= SERVICES / DRIVERS ===============
.
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2011-5-8 216400]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2011-5-8 29584]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2011-5-8 243024]
R1 bckd;bckd;c:\windows\system32\drivers\bckd.sys [2009-1-14 72992]
R2 avg9emc;AVG Free E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2011-5-8 921952]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2011-5-8 308136]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-10-21 50704]
S3 bsusbser;Basecom USB Device for Legacy Serial Communication;c:\windows\system32\drivers\bsusbser.sys [2009-11-7 99456]
S3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\drivers\netaapl.sys [2010-10-8 18432]
S3 RT80x86;Ralink 802.11n Wireless Driver;c:\windows\system32\drivers\rt2860.sys [2008-6-27 625024]
S4 bckwfs;Blue Coat K9 Web Protection;c:\program files\blue coat k9 web protection\k9filter.exe [2008-11-22 1078560]
S4 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-6 135664]
S4 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-2-6 135664]
.
=============== Created Last 30 ================
.
2011-05-09 09:19:41 388096 ----a-r- c:\docume~1\mummya~1\applic~1\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-05-09 09:19:40 -------- d-----w- c:\program files\Trend Micro
2011-05-09 09:07:30 -------- d-----w- c:\docume~1\mummya~1\locals~1\applic~1\Temp
2011-05-08 13:31:19 -------- d-----w- c:\docume~1\mummya~1\applic~1\Malwarebytes
2011-05-08 13:31:13 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-08 13:31:12 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2011-05-08 13:31:07 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-08 13:31:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-05-08 11:57:56 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2011-05-08 11:57:56 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2011-05-08 11:57:40 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2011-05-08 11:57:30 -------- d-----w- c:\windows\system32\drivers\Avg
2011-05-08 11:57:12 -------- d-----w- c:\docume~1\alluse~1\applic~1\avg9
2011-05-08 03:53:14 -------- d-----w- c:\program files\CCleaner
2011-05-08 02:54:57 16856 ----a-w- c:\program files\mozilla firefox\plugin-container.exe
2011-05-08 02:54:53 781272 ----a-w- c:\program files\mozilla firefox\mozsqlite3.dll
2011-05-08 02:54:52 719832 ----a-w- c:\program files\mozilla firefox\mozcpp19.dll
2011-05-08 02:54:52 1874904 ----a-w- c:\program files\mozilla firefox\mozjs.dll
2011-05-08 02:54:51 89048 ----a-w- c:\program files\mozilla firefox\libEGL.dll
2011-05-08 02:54:51 465880 ----a-w- c:\program files\mozilla firefox\libGLESv2.dll
2011-05-08 02:54:51 15832 ----a-w- c:\program files\mozilla firefox\mozalloc.dll
2011-05-08 02:54:50 1892184 ----a-w- c:\program files\mozilla firefox\d3dx9_42.dll
2011-05-08 02:54:50 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2011-05-08 02:54:49 1974616 ----a-w- c:\program files\mozilla firefox\D3DCompiler_42.dll
2011-04-20 12:02:47 -------- d-----w- c:\program files\Vidyo
.
==================== Find3M ====================
.
2008-05-07 23:34:00 15523560 ----a-w- c:\program files\U1 Setup.exe
.
============= FINISH: 22:22:46.81 ===============

Attach log:

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 11/7/2009 10:43:42 PM
System Uptime: 5/9/2011 9:16:33 PM (1 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | 1000H
Processor: Intel(R) Atom(TM) CPU N270 @ 1.60GHz | PBGA 437 | 1254/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 80 GiB total, 17.501 GiB free.
D: is FIXED (NTFS) - 69 GiB total, 21.795 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP155: 2/12/2011 11:53:35 AM - System Checkpoint
RP156: 2/13/2011 8:49:21 PM - Installed DirectX
RP157: 2/24/2011 7:24:54 PM - System Checkpoint
RP158: 2/25/2011 9:09:22 PM - System Checkpoint
RP159: 2/26/2011 9:57:02 PM - Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
RP160: 2/26/2011 9:57:21 PM - Installed AVG 2011
RP161: 2/26/2011 9:59:16 PM - Removed AVG Free 8.5
RP162: 2/27/2011 7:35:26 PM - Installed AVG 2011
RP163: 3/6/2011 2:18:41 PM - System Checkpoint
RP164: 3/7/2011 10:59:04 PM - System Checkpoint
RP165: 3/10/2011 6:58:19 PM - System Checkpoint
RP166: 3/13/2011 9:01:59 AM - System Checkpoint
RP167: 3/17/2011 9:39:13 PM - System Checkpoint
RP168: 3/19/2011 10:05:02 AM - System Checkpoint
RP169: 3/22/2011 5:53:37 PM - System Checkpoint
RP170: 3/25/2011 8:06:55 AM - System Checkpoint
RP171: 3/26/2011 1:42:24 PM - System Checkpoint
RP172: 3/27/2011 6:09:15 PM - System Checkpoint
RP173: 3/29/2011 4:55:16 PM - System Checkpoint
RP174: 4/2/2011 4:26:59 PM - System Checkpoint
RP175: 4/4/2011 2:39:32 PM - System Checkpoint
RP176: 4/5/2011 6:15:31 PM - System Checkpoint
RP177: 4/8/2011 10:02:20 AM - System Checkpoint
RP178: 4/10/2011 11:03:48 AM - System Checkpoint
RP179: 4/11/2011 3:57:06 PM - System Checkpoint
RP180: 4/13/2011 4:37:43 PM - System Checkpoint
RP181: 4/15/2011 7:32:58 PM - System Checkpoint
RP182: 4/17/2011 2:03:11 PM - System Checkpoint
RP183: 4/19/2011 1:55:53 PM - System Checkpoint
RP184: 4/20/2011 3:29:02 PM - System Checkpoint
RP185: 4/23/2011 11:50:59 AM - System Checkpoint
RP186: 4/24/2011 4:00:43 PM - System Checkpoint
RP187: 4/27/2011 8:19:44 AM - System Checkpoint
RP188: 4/30/2011 3:50:35 PM - System Checkpoint
RP189: 5/7/2011 5:39:04 PM - Removed AVG 2011
RP190: 5/7/2011 5:40:15 PM - Removed AVG 2011
RP191: 5/7/2011 5:49:44 PM - Installed AVG 2011
RP192: 5/7/2011 5:50:21 PM - Installed AVG 2011
RP193: 5/8/2011 9:57:11 PM - Installed AVG Free 9.0
RP194: 5/8/2011 9:59:17 PM - Avg Update
RP195: 5/8/2011 10:04:37 PM - Avg Update
RP196: 5/9/2011 7:19:38 PM - Installed HiJackThis
.
==== Installed Programs ======================
.
.
Adabas D 13.01.00
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 8.1.1
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft TotalMedia Backup
Asus ACPI Driver
ASUSUpdate for Eee PC
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
Audacity 1.2.6
AVG Free 9.0
Azurewave Wireless LAN
BIG-IP Edge Client Components (All Users)
Blue Coat® K9 Web Protection 4.0.288
Bonjour
CamStudio
CCleaner
Compatibility Pack for the 2007 Office system
Crazy John's Broadband
ECAP
Eee Instant Key
Eee Storage
Freez iPod Video Converter
FrostWire 4.21.3
GIMP 2.6.8
Google Earth
Google Toolbar for Internet Explorer
Google Update Helper
HiJackThis
Hotfix for Windows XP (KB954708)
Intel(R) Graphics Media Accelerator Driver
InterVideo Register Manager
InterVideo WinDVD
iTunes
Java(TM) 6 Update 3
Junk Mail filter update
K-Lite Mega Codec Pack 5.3.0
LimeWire 5.3.6
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 1.1 Hotfix (KB929729)
Microsoft .NET Framework 2.0
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft National Language Support Downlevel APIs
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
Mozilla Firefox 4.0.1 (x86 en-GB)
MSVCRT
OPSWAT AntiVirus and Firewall Integration Libraries
Optus Wireless Broadband
QuickTime
Realtek High Definition Audio Driver
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Segoe UI
Skype™ 3.6
SolveigMM AVI Trimmer
Spybot - Search & Destroy
StarOffice 8 ASUS Edition
Super Hybrid Engine
Update for Windows XP (KB942763)
Update for Windows XP (KB953356)
Vidyo Desktop 2.0.4
WebFldrs XP
WIDCOMM Bluetooth Software
Winamp
Windows Internet Explorer 7
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Toolbar
Windows Live Upload Tool
Windows Live Writer
WinPcap 4.1.1
WinRAR archiver
Yahoo! Messenger
Zero Assumption Recovery Version 8.4
.
==== Event Viewer Messages From Past Week ========
.
5/9/2011 6:44:44 PM, error: PlugPlayManager [12] - The device '802.11n Wireless LAN Card' (PCI\VEN_1814&DEV_0781&SUBSYS_27901814&REV_00\4&37028e5f&0&00E3) disappeared from the system without first being prepared for removal.
5/9/2011 6:40:01 PM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 00224342BE1E. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
5/8/2011 11:00:59 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AvgLdx86 AvgMfx86 AvgTdiX bckd Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
5/8/2011 1:37:10 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service gupdatem with arguments "/comsvc" in order to run the server: {E225E692-4B47-4777-9BED-4FD7FE257F0E}
5/8/2011 1:37:09 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service gusvc with arguments "" in order to run the server: {89DAE4CD-9F17-4980-902A-99BA84A8F5C8}
5/8/2011 1:15:00 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service gupdate with arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}
5/7/2011 5:42:59 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
5/7/2011 5:30:02 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Avgldx86 Avgmfx86 Fips intelppm
5/7/2011 5:16:01 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
5/7/2011 4:20:19 PM, error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.
5/7/2011 2:31:56 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Avgldx86 Avgmfx86 Avgtdix bckd Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
5/7/2011 2:31:56 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2011 2:31:56 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2011 2:31:56 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2011 2:31:56 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2011 2:31:56 PM, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2011 2:31:56 PM, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2011 2:31:35 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
5/7/2011 2:31:31 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
5/7/2011 1:52:13 PM, error: Tcpip [4199] - The system detected an address conflict for IP address 192.168.0.100 with the system having network hardware address D4:9A:20:46:4F:96. Network operations on this system may be disrupted as a result.
5/2/2011 6:29:33 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Dnscache service.
.
==== End Of File ===========================
deanderwent
Active Member
 
Posts: 2
Joined: May 9th, 2011, 5:30 am
Advertisement
Register to Remove

Re: Can't connect to internet, email OK.

Unread postby torreattack » May 12th, 2011, 10:04 am

Hi deanderwent and welcome to Malware Removal :)

My name is torreattack, and I will be helping you with your malware problems.


I am currently working under the guidance of the MRU teachers, everything I post to you, will need to be reviewed by them.
This additional review process can add some extra time to my responses, but hopefully not too much.


Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.
Read Back up your files

please note the following important guidelines.
  • The instructions being given are for YOUR computer and system only!.
    Using these instructions on a different computer, can damage that computer and possibly make it inoperable!
  • If you don't know or understand something, please don't hesitate to ask.
  • Only post your problem at One help site. Applying fixes from multiple help sites can cause problems.
  • Only reply to this thread do not start another, Please continue responding until I give you the "All Clean"
    Absence of symptoms does not mean that everything is clear.
  • Please DO NOT run any other tools or scans whilst I am helping you.
  • Please DO NOT install any other software (or hardware) during the cleaning process. This adds more items to be researched.
  • Print each set of instructions... if possible...your Internet connection might not be available during some fix processes.
  • Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
  • Note: No Reply Within 3 Days Will Result In Your Topic Being Closed!
  • The logs from the tools we use can take some time to research so please be patient.

  • If you haven't done so already, please read this topic ALL USERS OF THIS FORUM MUST READ THIS FIRST where the conditions for receiving help here are explained.


I am currently reviewing your log and will return, as soon as possible, with additional instructions.

Thank you for your patience.
torreattack
torreattack
Retired Graduate
 
Posts: 940
Joined: July 27th, 2008, 1:36 am

Re: Can't connect to internet, email OK.

Unread postby torreattack » May 13th, 2011, 7:13 pm

Hi deanderwent:

1. Is this a business computer?


2.Remove Programs
  • Click Start > Control Panel > Add/Remove Programs
  • Remove these programs by clicking Remove:
    Java(TM) 6 Update 3
    Spybot - Search & Destroy
If some programs listed are not present, please do not panic


3. Malware Removal - Policy Notification

P2P Warning!
IMPORTANT There are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.
FrostWire 4.21.3
LimeWire 5.3.6

Please note whenever you use any form of P2P networking to download files you can anticipate infestations of malware to occur.
P2P file sharing used to be fairly safe. This is no longer true...continue to use P2P sharing ...at your own risk! Keep in mind that this practice may be the source of your current malware infestation.

As long as you have the P2P program(s) installed, per Malware Removal Forum Policy, I can offer you no further assitance.

I strongly recommend that you uninstall:
FrostWire 4.21.3
LimeWire 5.3.6

You can do so using the Control Panel >> Add or Remove Programs function...however, that choice is up to you.
If you choose NOT to remove these programs...indicate that in your next reply.
If you choose to remove these programs, when finished...run another DDS scan and copy/paste it in your next reply.



4. CKScanner
Please download CKScanner ... Save it to your desktop.
Make sure that CKScanner.exe is on the your desktop before running the application!
  1. Double-click on the CKScanner.exe icon... then click the Search For Files button.
  2. When the scan is finished (the cursor hourglass disappears) click the Save List To File button.
    A text file will be created on your desktop named "ckfiles.txt"
  3. Click OK at the file saved message box. Double-click on the ckfiles.txt icon on your desktop.
  4. Please copy/paste the contents of ckfiles.txt in your next reply.



5. Checklist
Please restart your computer and post:
  • Answer about business computer
  • Answer about P2P software
  • New DDS log
  • CKScanner log


Thanks,
torreattack
torreattack
Retired Graduate
 
Posts: 940
Joined: July 27th, 2008, 1:36 am

Re: Can't connect to internet, email OK.

Unread postby Cypher » May 17th, 2011, 10:58 am

Due to a lack of response, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 15148
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns
Advertisement
Register to Remove


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 306 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware