No Internet Access after virus removal :(

[nasroo7]

But do you remember when ComboFix told me he has discovered ZeroAcceess Trojan hidden in my TCP/IP protocol ?

And then after we fixed internet... three days later, internet disappeared...
I checked the device manager, and the Network Ethernet drivers were missing

I reinstalled them, but the computer won't reboot anymore. Even reboot it with "Last Known good configuration won't solve the problem"

I think my only choice is to reinstall windows all over...

[nasroo7]

And, also, before internet disapeared, the ethernet drivers were good and installed. And I never touched them (Before they disappeared)

[SuperDave]

But do you remember when ComboFix told me he has discovered ZeroAcceess Trojan hidden in my TCP/IP protocol ?

I never saw that in any of the scans that we ran. At this point the best thing you should do is to boot your computer with this rescue disk below, safe your important data and re-format. You could try posting the log but most important is to save your data.

We are going to be using a Windows Recovery Environment to help disinfect the system so it may boot again.

Download the OTLPE Standard REATOGO Windows Recovery Environment.

• Place a blank CD-R disc in to your CD burning drive.
• Download OTLPEStd.exe and double-click on it to burn to a CD using an ISO Burner. One can be found here.
  
• Reboot your system using the boot CD you just created.
• Note : If you do not know how to set your computer to boot from CD follow the steps here
  
• Your system should now display a REATOGO-X-PE desktop.
• Double-click on the OTLPE icon.
  
• When asked "Do you wish to load the remote registry", select Yes
  
• When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  
• OTL should now start. Change the following settings
  
• Change Drivers to Non-Microsoft
  
• Press Run Scan to start the scan.
  
• When finished, the file will be saved  in drive C:\_OTL\MovedFiles
  
• Copy this file to your USB drive if you do not have internet connection on this system
• Please post the contents of the OTL.txt file in your reply.
  

[nasroo7]

How about if I just format it, and reinstall windows?

But save only "My documents" folder, which contains all documents, and pictures....

[SuperDave]

That should work. Good luck.

[nasroo7]

and If I transfer "My Documents" files into an external HDD... will I have clean files? or infected files?

[SuperDave]

and If I transfer "My Documents" files into an external HDD... will I have clean files? or infected files?

You should scan your files with at least two good AV scanners before putting them back on your computer.

[nasroo7]

If I scan them with Microsoft Security Essentials, Malwarebytes, and SuperAntiSpyware.
is it enough?

[SuperDave]

If I scan them with Microsoft Security Essentials, Malwarebytes, and SuperAntiSpyware.
is it enough?

You also should include a scan with Avast AV.

[nasroo7]

ok. I'll do it
thank you

[nasroo7]

By the way, I have another last question:
   I was going to format the HDD, but just ran ComboFix (I know that if something happens, I don't care, since I'm going to reinstall Windows anyway =P )
and at the same time Microsoft Security Essentials told me that he detected items that have not been yet classified for risks, and will send them: "C:\32788R22FWJFW/iexplore.exe"

Do you have any idea or opinion about it ?




By the way, if people have the same problem.

When your Network connection disappear... check your device manager, and chances are that you're going to see missing drivers for the network adapter... even if it was installed and working fine a couple of hours before!

[SuperDave]

Do you have any idea or opinion about it ?

That's part of ComboFix.

[nasroo7]

Quote

    Do you have any idea or opinion about it ?

That's part of ComboFix.

Thank's 

Thank you for all your help superdave!

[SuperDave]

You're welcome. I will lock this thread. If you need it re-opened, please send me a pm.