Author Topic: No Internet Access after virus removal :( (Read 38905 times)

nasroo7 · « **Reply #45 on:** January 13, 2012, 12:02:22 PM »

I just checked the computer....
Internet is not working anymore...

I tried what you told me to do earlier:

Quote

ipconfig /flushdns
ipconfig /registerdns
ipconfig /release
ipconfig /renew
net stop "dns client"
net start "dns client" .... etc

and

Quote

Let's try to uninstall/reinstall TCP/IP stack.

1. Download winsock.zip
Unzip it.
Right click on Winsock.reg, click "Merge".
Allow registry merge.

2. Restart computer.

3. Go to Start ==> Control Panel. Double-click Network Connections. Right-click Local Area Connection, and select Properties.

* On the General tab, click Install a popup window opens.
* Select Protocol from the list and then click Add.
* A new window opens, click Have Disk....
* In the browse... box type c:\windows\inf
* Click OK.
* Select Internet Protocol (TCP/IP), and then click OK.
* Restart and check the connection.

But.. in Network Connections.... There is NOTHING !

nasroo7 · « **Reply #46 on:** January 13, 2012, 12:11:23 PM »

I created a restore point after the Winsock, TCP IP reset, and DDS logs....

And there is also many restore points since that day, that Windows saved automatically.

Should I just go back to yesterday when Internet was working?

SuperDave · « **Reply #47 on:** January 13, 2012, 01:05:11 PM »

Quote

Should I just go back to yesterday when Internet was working?

Please try that. If it still doesn't work please run this:

Please download MiniToolBox to Desktop and run it.

Checkmark the following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
List content of Hosts
List IP Configuration
Lst Last 10 Event Viewer Errors
List Users, Partitions and Memory Size
[/b]
Click Go and copy/paste the log (Result.txt) into your next post. .

nasroo7 · « **Reply #48 on:** January 13, 2012, 02:19:57 PM »

Ok, I try that...

What's happening to this computer ??

nasroo7 · « **Reply #49 on:** January 13, 2012, 02:45:43 PM »

MiniToolBox by Farbar
Ran by Annette (administrator) on 13-01-2012 at 16:44:54
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip

popd
# End of interface IP configuration

Windows IP Configuration

Server: UnKnown
Address: 127.0.0.1

Ping request could not find host google.com. Please check the name and try again.

Server: UnKnown
Address: 127.0.0.1

Ping request could not find host yahoo.com. Please check the name and try again.

Server: UnKnown
Address: 127.0.0.1

Ping request could not find host bleepingcomputer.com. Please check the name and try again.

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1     1
===========================================================================
Persistent Routes:
None

========================= Event log errors: ===============================

Application errors:
==================
Error: (01/13/2012 04:37:44 PM) (Source: Windows Search Service) (User: )
Description: The application cannot be initialized.

Context: Windows Application

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:37:44 PM) (Source: Windows Search Service) (User: )
Description: The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:37:44 PM) (Source: Windows Search Service) (User: )
Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:37:42 PM) (Source: Windows Search Service) (User: )
Description: The search service has detected corrupted data files in the index. The service will attempt to automatically correct this problem by rebuilding the index.

Context: Windows Application, SystemIndex Catalog

Details:
    0xc0041801 (0xc0041801)

Error: (01/13/2012 04:31:08 PM) (Source: Windows Search Service) (User: )
Description: The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again.

Context: Application, SystemIndex Catalog

Error: (01/13/2012 04:25:31 PM) (Source: Windows Search Service) (User: )
Description: The update cannot be started because the content sources cannot be accessed. Fix the errors and try the update again.

Context: Application, SystemIndex Catalog

Error: (01/13/2012 04:21:10 PM) (Source: Windows Search Service) (User: )
Description: The application cannot be initialized.

Context: Windows Application

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:21:10 PM) (Source: Windows Search Service) (User: )
Description: The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:21:10 PM) (Source: Windows Search Service) (User: )
Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:21:09 PM) (Source: Windows Search Service) (User: )
Description: The search service has detected corrupted data files in the index. The service will attempt to automatically correct this problem by rebuilding the index.

Context: Windows Application, SystemIndex Catalog

Details:
    0xc0041801 (0xc0041801)

System errors:
=============
Error: (01/13/2012 04:37:47 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).

Error: (01/13/2012 04:37:39 PM) (Source: Service Control Manager) (User: )
Description: The MCSTRM service failed to start due to the following error:
%%2

Error: (01/13/2012 04:33:12 PM) (Source: Service Control Manager) (User: )
Description: The MCSTRM service failed to start due to the following error:
%%2

Error: (01/13/2012 04:24:21 PM) (Source: Service Control Manager) (User: )
Description: The MCSTRM service failed to start due to the following error:
%%2

Error: (01/13/2012 04:21:11 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).

Error: (01/13/2012 04:21:06 PM) (Source: Service Control Manager) (User: )
Description: The MCSTRM service failed to start due to the following error:
%%2

Error: (01/13/2012 04:15:16 PM) (Source: Service Control Manager) (User: )
Description: The MCSTRM service failed to start due to the following error:
%%2

Error: (01/13/2012 02:16:23 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D

Error: (01/13/2012 02:08:56 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D

Error: (01/13/2012 02:08:48 PM) (Source: Service Control Manager) (User: )
Description: The MCSTRM service failed to start due to the following error:
%%2

Microsoft Office Sessions:
=========================
Error: (01/13/2012 04:37:44 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:37:44 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:37:44 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
   The content index cannot be read. (0xc0041800)
Search.TripoliIndexer

Error: (01/13/2012 04:37:42 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
    0xc0041801 (0xc0041801)

Error: (01/13/2012 04:31:08 PM) (Source: Windows Search Service)(User: )
Description: Context: Application, SystemIndex Catalog

Error: (01/13/2012 04:25:31 PM) (Source: Windows Search Service)(User: )
Description: Context: Application, SystemIndex Catalog

Error: (01/13/2012 04:21:10 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:21:10 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
   The content index cannot be read. (0xc0041800)

Error: (01/13/2012 04:21:10 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
   The content index cannot be read. (0xc0041800)
Search.TripoliIndexer

Error: (01/13/2012 04:21:09 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
    0xc0041801 (0xc0041801)

========================= Memory info: ===================================

Percentage of memory in use: 34%
Total physical RAM: 1790.48 MB
Available physical RAM: 1178.39 MB
Total Pagefile: 3685.05 MB
Available Pagefile: 3120.62 MB
Total Virtual: 2047.88 MB
Available Virtual: 1971.02 MB

========================= Partitions: =====================================

2 Drive c: () (Fixed) (Total:149.04 GB) (Free:116.99 GB) NTFS

========================= Users: ========================================

User accounts for \\HOME-D8A73CBAEE

Administrator Annette ASPNET
Darren Guest HelpAssistant
SUPPORT_388945a0 UpdatusUser

**** End of log ****

SuperDave · « **Reply #50 on:** January 13, 2012, 04:57:00 PM »

Let's try another scan.

Please download Farbar Service Scanner and run it on the computer with the issue.

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.

nasroo7 · « **Reply #51 on:** January 13, 2012, 05:07:35 PM »

We already tried that before...
I'm running it right now
I post the log when it's done

nasroo7 · « **Reply #52 on:** January 13, 2012, 05:10:25 PM »

FSS with only the first checkmark checked

Farbar Service Scanner
Ran by Annette (administrator) on 13-01-2012 at 19:09:16
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error: Google IP is unreachable
Attempt to access Yahoo IP returend error: Yahoo IP is unreachable

File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4)
0x0700000005000000010000000200000003000 000040000000600000007000000
IpSec Tag value is correct.

**** End of log ****

nasroo7 · « **Reply #53 on:** January 13, 2012, 05:11:10 PM »

FSS with all checkmarks checked (I don't know which one you need ?)

Farbar Service Scanner
Ran by Annette (administrator) on 13-01-2012 at 19:09:38
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error: Google IP is unreachable
Attempt to access Yahoo IP returend error: Yahoo IP is unreachable

Windows Firewall:
=============

Firewall Disabled Policy:
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall"=DWORD:0

System Restore:
============

System Restore Disabled Policy:
========================

Security Center:
============

Windows Update:
===========

File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4)
0x0700000005000000010000000200000003000 000040000000600000007000000
IpSec Tag value is correct.

**** End of log ****

SuperDave · « **Reply #54 on:** January 14, 2012, 06:47:05 PM »

You should call your ISP(Internet Service Provider) to create a new network.

nasroo7 · « **Reply #55 on:** January 15, 2012, 10:15:04 PM »

But I plugged another computer to the same Ethernet cable, and internet is working fine...

nasroo7 · « **Reply #56 on:** January 15, 2012, 10:48:50 PM »

Quote

Turn off the computer.
Insert your Windows CD in the CD-ROM drive or the DVD-ROM drive, and start the computer from the CD.

When you are prompted To set up Windows now, press ENTER, press ENTER.

Setup looks for any previous installations of Windows XP on the hard disk and then displays a list of any previous installations that it finds.
Use the arrow keys to select the installation that you want to repair, and then press R to select the To repair the selected Windows installation, press R option.

This will start the repair of your previous Windows XP installation.

Would that work? or fix my connection problem?

nasroo7 · « **Reply #57 on:** January 16, 2012, 11:04:05 AM »

I just added an internal Ethernet LAN card.
And now internet works fine

But, the network of the MotherBoard (The ethernet plug located on the motherboard) is still NOT here, there is only the one of the new card. :s

What's going on with that computer???
Is it going to do the same thing ?

nasroo7 · « **Reply #58 on:** January 18, 2012, 05:44:47 PM »

Where are you SuperDave !???

SuperDave · « **Reply #59 on:** January 18, 2012, 06:39:34 PM »

I don't feel that this is a malware problem. We should do some cleanup and perhaps you should start a new thread in the hardware forum.

To uninstall ComboFix

Click the Start button. Click Run. For Vista: type in Run in the Start search, and click on Run in the results pane.
In the field, type in ComboFix /uninstall

(Note: Make sure there's a space between the word ComboFix and the forward-slash.)

Then, press Enter, or click OK.
This will uninstall ComboFix, delete its folders and files, hides System files and folders, and resets System Restore.

****************************************************
Clean out your temporary internet files and temp files.

Download TFC by OldTimer to your desktop.

Double-click TFC.exe to run it.

Note: If you are running on Vista, right-click on the file and choose Run As Administrator

TFC will close all programs when run, so make sure you have saved all your work before you begin.

* Click the Start button to begin the cleaning process.
* Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
* Please let TFC run uninterrupted until it is finished.

Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
***************************************************
Go to Microsoft Windows Update and get all critical updates.

----------

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.

Computer Hope Forum

News:

Author Topic: No Internet Access after virus removal :( (Read 38905 times)

nasroo7

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

SuperDave

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

SuperDave

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

SuperDave

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

nasroo7

Re: No Internet Access after virus removal :(

SuperDave

Re: No Internet Access after virus removal :(