Author Topic: cannot use internet on infected computer (Read 23449 times)

JAJsangel · « **Reply #15 on:** August 03, 2011, 07:22:55 PM »

Uh how do I do that without the internet?

SuperDave · « **Reply #16 on:** August 04, 2011, 01:27:35 PM »

Quote

Uh how do I do that without the internet?

Sorry. I didn't realize that you still can't connect.

Please run Notepad (start > All Programs > Accessories >
Notepad) and copy and paste the text in the code box into a new file:

Code: [Select]

@echo off
>Log1.txt (
ipconfig /all
nslookup google.com
nslookup yahoo.com
ping -n 2 google.com
ping -n 2 yahoo.com
route print
)
start Log1.txt
del %0

•Go to the File menu at the top of the Notepad and select Save as.

•Select save in: desktop

•Fill in File name: test.bat

•Save as type: All file types (*.*)

•Click save.

•Close the Notepad.

•Locate and double-click test.bat on the desktop.

•A notepad opens, copy and paste the content it (log1.txt) to your reply.

JAJsangel · « **Reply #17 on:** August 04, 2011, 03:38:49 PM »

Windows IP Configuration

Host Name . . . . . . . . . . . . : YOUR-433A10CD72

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Broadcast

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 7:

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : NVIDIA nForce Networking Controller

Physical Address. . . . . . . . . : 00-40-CA-93-6F-F1

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 0.0.0.0

Subnet Mask . . . . . . . . . . . : 0.0.0.0

Default Gateway . . . . . . . . . :

DHCP Server . . . . . . . . . . . : 10.0.0.1

DNS Servers . . . . . . . . . . . : 10.0.0.1

Server: UnKnown
Address: 127.0.0.1

Server: UnKnown
Address: 127.0.0.1

Ping request could not find host google.com. Please check the name and try again.

Ping request could not find host yahoo.com. Please check the name and try again.

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 40 ca 93 6f f1 ...... NVIDIA nForce Networking Controller - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
255.255.255.255 255.255.255.255 255.255.255.255 2 1
===========================================================================
Persistent Routes:
None

SuperDave · « **Reply #18 on:** August 04, 2011, 04:33:05 PM »

Please download MiniToolBox to Desktop and run it.

Checkmark the following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
List content of Hosts
List IP Configuration
Lst Last 10 Event Viewer Errors
List Users, Partitions and Memory Size
[/b]
Click Go and copy/paste the log (Result.txt) into your next post. .

JAJsangel · « **Reply #19 on:** August 04, 2011, 06:16:54 PM »

MiniToolBox by Farbar
Ran by Owner (administrator) on 04-08-2011 at 20:12:09
Microsoft Windows XP Service Pack 3 (X86)

***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip

# Interface IP Configuration for "Local Area Connection 7"

set address name="Local Area Connection 7" source=dhcp
set dns name="Local Area Connection 7" source=dhcp register=PRIMARY
set wins name="Local Area Connection 7" source=dhcp

popd
# End of interface IP configuration

Windows IP Configuration

Host Name . . . . . . . . . . . . : YOUR-433A10CD72

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Broadcast

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 7:

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : NVIDIA nForce Networking Controller

Physical Address. . . . . . . . . : 00-40-CA-93-6F-F1

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 0.0.0.0

Subnet Mask . . . . . . . . . . . : 0.0.0.0

Default Gateway . . . . . . . . . :

DHCP Server . . . . . . . . . . . : 10.0.0.1

DNS Servers . . . . . . . . . . . : 10.0.0.1

Server: UnKnown
Address: 127.0.0.1

Ping request could not find host google.com. Please check the name and try again.

Server: UnKnown
Address: 127.0.0.1

Ping request could not find host yahoo.com. Please check the name and try again.

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 40 ca 93 6f f1 ...... NVIDIA nForce Networking Controller - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
255.255.255.255 255.255.255.255 255.255.255.255 2 1
===========================================================================
Persistent Routes:
None

========================= Event log errors: ===============================

Application errors:
==================
Error: (08/04/2011 01:38:13 AM) (Source: Application Error) (User: )
Description: Faulting application jusched.exe, version 2.0.2.1, faulting module user32.dll, version 5.1.2600.5512, fault address 0x000187f1.
Processing media-specific event for [jusched.exe!ws!]

Error: (08/03/2011 09:59:44 PM) (Source: MsiInstaller) (User: Owner)Owner
Description: Product: GPBaseService2 -- Error 1706. An installation package for the product GPBaseService2 cannot be found. Try the installation again using a valid copy of the installation package 'GPBaseService2.msi'.

Error: (08/03/2011 09:59:41 PM) (Source: MsiInstaller) (User: Owner)Owner
Description: Product: GPBaseService2 -- Error 1706. An installation package for the product GPBaseService2 cannot be found. Try the installation again using a valid copy of the installation package 'GPBaseService2.msi'.

Error: (08/03/2011 09:53:42 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: socket() failed (Socket error 10050)

Error: (08/02/2011 09:38:19 PM) (Source: Application Error) (User: )
Description: Faulting application jusched.exe, version 2.0.2.1, faulting module user32.dll, version 5.1.2600.5512, fault address 0x000187f1.
Processing media-specific event for [jusched.exe!ws!]

Error: (08/02/2011 07:52:44 PM) (Source: MsiInstaller) (User: Owner)Owner
Description: Product: GPBaseService2 -- Error 1706. An installation package for the product GPBaseService2 cannot be found. Try the installation again using a valid copy of the installation package 'GPBaseService2.msi'.

Error: (08/02/2011 07:52:38 PM) (Source: MsiInstaller) (User: Owner)Owner
Description: Product: GPBaseService2 -- Error 1706. An installation package for the product GPBaseService2 cannot be found. Try the installation again using a valid copy of the installation package 'GPBaseService2.msi'.

Error: (08/02/2011 07:51:38 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: socket() failed (Socket error 10050)

Error: (08/02/2011 11:38:01 AM) (Source: Application Error) (User: )
Description: Faulting application jusched.exe, version 2.0.5.1, faulting module user32.dll, version 5.1.2600.5512, fault address 0x000187f1.
Processing media-specific event for [jusched.exe!ws!]

Error: (08/02/2011 11:02:04 AM) (Source: MsiInstaller) (User: Owner)Owner
Description: Product: GPBaseService2 -- Error 1706. An installation package for the product GPBaseService2 cannot be found. Try the installation again using a valid copy of the installation package 'GPBaseService2.msi'.

System errors:
=============
Error: (08/04/2011 11:24:53 AM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the following nonexistent service: Afd

Error: (08/03/2011 10:44:50 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the following nonexistent service: Afd

Error: (08/03/2011 10:44:49 PM) (Source: DCOM) (User: Owner)
Description: The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.

Error: (08/03/2011 10:44:20 PM) (Source: Service Control Manager) (User: )
Description: The Background Intelligent Transfer Service service terminated with service-specific error 2147952450 (0x80072742).

Error: (08/03/2011 09:59:44 PM) (Source: DCOM) (User: Owner)
Description: Unable to start a DCOM Server: {66C99B38-BC12-4134-90A2-C5D6ABFC5FFE}.
The error:
"%%2"
Happened while starting this command:
C:\PROGRA~1\HP\DIGITA~1\bin\hpqgpc01.exe -Embedding

Error: (08/03/2011 09:54:24 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the following nonexistent service: Afd

Error: (08/03/2011 09:54:04 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the following nonexistent service: Afd

Error: (08/03/2011 09:53:53 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the following nonexistent service: Afd

Error: (08/03/2011 09:53:52 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the following nonexistent service: Afd

Error: (08/03/2011 09:53:52 PM) (Source: Service Control Manager) (User: )
Description: The iPod Service service failed to start due to the following error:
%%2

Microsoft Office Sessions:
=========================

========================= Memory info: ===================================

Percentage of memory in use: 83%
Total physical RAM: 1502.42 MB
Available physical RAM: 244.28 MB
Total Pagefile: 2696.08 MB
Available Pagefile: 1491.5 MB
Total Virtual: 2047.88 MB
Available Virtual: 1998.89 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:148.93 GB) (Free:96.43 GB) NTFS
2 Drive d: (RECOVERY) (Fixed) (Total:4.43 GB) (Free:2.23 GB) FAT32
4 Drive f: () (Removable) (Total:3.72 GB) (Free:3.62 GB) FAT32
5 Drive g: (FreeAgent Drive) (Fixed) (Total:232.88 GB) (Free:134.14 GB) NTFS

========================= Users: ========================================

User accounts for \\YOUR-433A10CD72

Administrator ASPNET Guest
HelpAssistant Owner SUPPORT_388945a0
UpdatusUser

== End of log ==

SuperDave · « **Reply #20 on:** August 04, 2011, 07:36:47 PM »

The ping test shows 2 sent and 2 received. Can you connect to the net now? What browser do you use?

JAJsangel · « **Reply #21 on:** August 05, 2011, 08:38:03 AM »

No it still has the same error. I use Firefox.

SuperDave · « **Reply #22 on:** August 05, 2011, 05:39:32 PM »

Quote

No it still has the same error.

What was that error again?

AVENGER

Download The Avenger by Swandog46 from here.
Unzip/extract it to a folder on your desktop.
Double click on avenger.exe to run The Avenger.
Click OK.
Make sure that the box next to Scan for rootkits has a tick in it and that the box next to Automatically disable any rootkits found does not have a tick in it.
Click the Execute button.
You will be asked No script has been entered. Do you want to execute a rootkit scan only?.
Click Yes.
You will now be asked First step completed --- The Avenger has been successfully set up to run on next boot. Reboot now?.
Click Yes.
Your PC will now be rebooted.
After your PC has completed the necessary reboots, a log should automatically open. If it does not automatically open, then the log can be found at %systemdrive%\avenger.txt (typically C:\avenger.txt).
Please post this log in your next reply.

JAJsangel · « **Reply #23 on:** August 06, 2011, 09:11:50 AM »

"Error 1075: The dependency does not exist or has been marked for deletion"
when I try to start the DHCP client or TCP/IP netbios helper

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

Completed script processing.

*******************

Finished! Terminate.

SuperDave · « **Reply #24 on:** August 06, 2011, 05:54:44 PM »

Make sure, your computer is set to obtain IP address automatically.
1. Go Start>Settings>Control Panel (Vista/7 users: Start>Control Panel)
2. Double click Network Connections (Vista/7 users: Network and Sharing Center)
3. Vista/7 users - From the list of tasks on the left, click Manage network connections.
4. For a wired network connection, right-click Local Area Connection, and then select Properties.
For a wireless network connection, right-click Wireless Network Connection, and then select Properties.
5. From the General tab (Vista/7 users: Networking tab), click Internet Protocol (TCP/IP), make sure it is checked, and then click Properties
6. Click Obtain an IP Address Automatically, and then click OK.

JAJsangel · « **Reply #25 on:** August 07, 2011, 07:14:15 AM »

both things were already checked in that tab.

SuperDave · « **Reply #26 on:** August 07, 2011, 04:36:20 PM »

Ok. Can you please run the ping test in Reply # 16 and post the log again?

JAJsangel · « **Reply #27 on:** August 08, 2011, 07:48:34 AM »

Windows IP Configuration

Host Name . . . . . . . . . . . . : YOUR-433A10CD72

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Broadcast

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 7:

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : NVIDIA nForce Networking Controller

Physical Address. . . . . . . . . : 00-40-CA-93-6F-F1

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 0.0.0.0

Subnet Mask . . . . . . . . . . . : 0.0.0.0

Default Gateway . . . . . . . . . :

DHCP Server . . . . . . . . . . . : 10.0.0.1

DNS Servers . . . . . . . . . . . : 10.0.0.1

Server: UnKnown
Address: 127.0.0.1

Server: UnKnown
Address: 127.0.0.1

Ping request could not find host google.com. Please check the name and try again.

Ping request could not find host yahoo.com. Please check the name and try again.

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 40 ca 93 6f f1 ...... NVIDIA nForce Networking Controller - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
255.255.255.255 255.255.255.255 255.255.255.255 2 1
===========================================================================
Persistent Routes:
None

SuperDave · « **Reply #28 on:** August 08, 2011, 05:07:49 PM »

I can't remember if I asked you what browser do you use? Could you please try another browser?

•Please download Dial-A-Fix from one of the following mirrors:

Primary mirror
Secondary mirror

•Extract the zip file to your desktop.

•Double click Dial-a-Fix.exe to start the program. Dial-A-Fix might give you a lot errors, just ignore them and Click

to continue.

•Press the green double checkmark box (Looks like this:

UNcheck Empty Temp Folders, as well as Adjust Time/Date in the prep section. The prep section should then look like this:

•Click on Go

•Wait for Dial-A-Fix to finish (All the checks marks will be all gone)

•Close Dial-A-Fix
**********************************************
If that doesn't work...
Turn off computer. Disconnect router, and modem from power source for 1 minute. At the same time disconnect ethernet cable as well.
Reconnect everything.
Restart computer.

If that doesn't work, bypass router, and connect computer straight to the modem.

JAJsangel · « **Reply #29 on:** August 09, 2011, 11:12:27 AM »

none of those worked and I figured that the other two wouldn't work because the internet works fine just not on that computer.

Computer Hope Forum

News:

Author Topic: cannot use internet on infected computer (Read 23449 times)

JAJsangel

Re: cannot use internet on infected computer

SuperDave

Re: cannot use internet on infected computer

JAJsangel

Re: cannot use internet on infected computer

SuperDave

Re: cannot use internet on infected computer

JAJsangel

Re: cannot use internet on infected computer

SuperDave

Re: cannot use internet on infected computer

JAJsangel

Re: cannot use internet on infected computer

SuperDave

Re: cannot use internet on infected computer

JAJsangel

Re: cannot use internet on infected computer

SuperDave

Re: cannot use internet on infected computer

JAJsangel

Re: cannot use internet on infected computer

SuperDave

Re: cannot use internet on infected computer

JAJsangel

Re: cannot use internet on infected computer

SuperDave

Re: cannot use internet on infected computer

JAJsangel

Re: cannot use internet on infected computer