Unable to detect internet connection after removing malware

[user77]

*** Thanks to Harry 48 who helped me remove the malware and referred me to this forum to troubleshoot the subsequent interent connection issue. Please see below for background:

I have a HP Dv6226 laptop running Windows 7 Ultimate (Evalution copy Build 7100) which I upgraded a few months back on-line from Windows Vista.

I recently got some pop ups that kept flashing me virus alert and whenever i try to run any program it says "Application cannot be executed. The file **** is infected......." (not even a command prompt or notepad can be opened but with multiple try sometime i get the command prompt but it is ridiculous).

Before looking into this forum i tried Installing MBAM - Malware byte in normal mode, but it blocks it from installing even if I try to rename it before downloading.

Then I google'd and searched a couple forums and tried the instructions on a couple links. Superantispyware and a couple others were not getting installed at all. I get the installer screen and quickly it vanishes before i can access anything. i tried renaming it with .SCR instead of .exe but still same issue.


I did luck out finally and succeed in installing hijackthis under the name iexplore.exe. Also my avast anti virus program found nothing after a full scan.

So I succesfully ran hijack this and then removed the following :

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)



Afterword I restarted computer and ran combofix and though I believe it stated compatibility issues with Windows 7 it just started running (I may have hit OK too many times?) So it did its 50 something stage scan then deleted a bunch of files then rebooted the computer.

Upon reboot, computer mentions it is missing some sort of .dll file I beleive (it was late and I didnt write down the name ugh) everything seems to be working fine now but the internet signal bar icon shows a big red x through it. It says not connected and no internet connection available. I know my wireless networkis working fine as I confirm that by using my work laptop to connect to my wireless network normally.

When you troubleshoot it (by right clicking on top of icon and slecting troubleshoot problem) it says troubleshooting could not find the problem. However when you view detailed information (by clicking the link at the bottom of the nework diagnostic window that said it couldn't find the problem). It lists that WLAN autoconfig service could not be started. So then I went to the services list and when I tried to manually start the WLAN autoconfig service, it gave me the following error:



Windows could not start the wlan autoconfig service on local computer error 1075: the dependancy service does not exist or has been marked for deletion

Can someone please help me get me internet working again? I have the log report from combo fix . The last thing I tried is doing a previous restore point but my restore point option was shut off so I don't have a previous restore point. HELP!

I have since run malwarebytes which has seemed to have removed/quarantine more files but I STILL can not connect to the net.

I also just ran sfc/scannow and it stated that Windows Resource Protection did not find any integrity violations.




------------------------------------------------------------
Here is the report from the connection troubleshooter (which may contain some good leads):



Windows Network Diagnostics Publisher details

Issues found
The Windows wireless service is not running on this computerThe Windows wireless service is not running on this computer
The Windows wireless service is also called the WLAN Autoconfig service. Detected
Start the Windows wireless service Not run

A network cable is not properly plugged in or may be brokenA network cable is not properly plugged in or may be broken Detected
Plug an Ethernet cable into this computer Not run


Issues found Detection details

5 The Windows wireless service is not running on this computer Detected

The Windows wireless service is also called the WLAN Autoconfig service.
Start the Windows wireless service Not run

The Windows wireless service is not running on this computer.

6 A network cable is not properly plugged in or may be broken Detected


Plug an Ethernet cable into this computer Not run

An Ethernet cable looks like a telephone cable but with larger connectors on the ends. Plug this cable into the opening on the back or side of the computer. Make sure the other end of the cable is plugged into the router. If that does not help, try using a different cable.


Detection details

Diagnostics Information (Network Adapter)
Details about network adapter diagnosis:

Network adapter Wireless Network Connection driver information:

Description . . . . . . . . . . : Broadcom 802.11b/g WLAN
Manufacturer . . . . . . . . . : Broadcom
Provider . . . . . . . . . . . : Broadcom
Version . . . . . . . . . . . : 4.102.15.61
Inf File Name . . . . . . . . . : C:\Windows\INF\oem34.inf
Inf File Date . . . . . . . . . : Wednesday, January 03, 2007 8:43:12 PM
Section Name . . . . . . . . . : BCM43XG11_NT60
Hardware ID . . . . . . . . . . : pci\ven_14e4&dev_4311&subsys_1363103c
Instance Status Flags . . . . . : 0x180200a
Device Manager Status Code . . : 0
IfType . . . . . . . . . . . . : 71
Physical Media Type . . . . . . : 9



Diagnostics Information (Network Adapter)
Details about network adapter diagnosis:

Network adapter Local Area Connection driver information:

Description . . . . . . . . . . : Intel® PRO/100 VE Network Connection
Manufacturer . . . . . . . . . : Intel
Provider . . . . . . . . . . . : Microsoft
Version . . . . . . . . . . . : 8.0.47.1
Inf File Name . . . . . . . . . : C:\Windows\INF\netefe32.inf
Inf File Date . . . . . . . . . : Wednesday, April 22, 2009 12:47:41 AM
Section Name . . . . . . . . . : D110KMP.ndi
Hardware ID . . . . . . . . . . : pci\ven_8086&dev_1092
Instance Status Flags . . . . . : 0x180200a
Device Manager Status Code . . : 0
IfType . . . . . . . . . . . . : 6
Physical Media Type . . . . . . : 0



Diagnostics Information (Wireless Connectivity)
Details about wireless connectivity diagnosis:

For complete information about this session see the wireless connectivity information event.

Helper Class: Auto Configuration
Initialize status: Success

Information for connection being diagnosed

Result of diagnosis: Problem found

Root cause:
The Windows wireless service is not running on this computer
The Windows wireless service is also called the WLAN Autoconfig service.

Detailed root cause:
The Windows Wireless Service is not running on this computer

Repair option:
Start the Windows wireless service
The Windows wireless service is not running on this computer.




Network Diagnostics Log
File Name: 0E30E93E-087B-4273-A21E-EC24D2402C6A.Diagnose.0.etl

Collection information
Computer Name: MALEKFAMILY-PC
Windows Version: 6.1
Architecture: x86
Time: Monday, January 18, 2010 9:28:54 PM

[patio]

There is malware that removes any connectivity at all...

Did the Helpers in the Virus and Malware Forum give you a clean bill of health ? ?
You may still have work to complete over there...

[user77]

There is malware that removes any connectivity at all...

Did the Helpers in the Virus and Malware Forum give you a clean bill of health ? ?
You may still have work to complete over there...

gotcha I will let you know as soon as the system is confirmed clean

[user77]

Patio, it looks like the comp has been cleaned but still no internet connection. Malwarebytes shows no malware remaining on computer.  The only thing left in the hjt report tool is :

What to do in HijackThis

1. Open HijackThis.
2. Click Do a system scan only
3. Check the boxes that correspond to the below lines.

 

•o18 - protocol: bwfile-8876480 - {9462a756-7b47-47bc-8c80-c34b9b80b32b} - c:\program files\logitech\desktop messenger\8876480\program\gaplugprotocol-8876480.dll ***      (I kept this b/c it is my logitech application for my universal remote)

•o23 - service: symantec lic netconnect service (cltnetcnservice) - unknown owner - c:\program files\common files\symantec shared\ccsvchst.exe (file missing)  (this is a left over from the uninstall of symantec/norton )

*** This could be a valid entry for your Internet Service provider, School network, and/or an online scanner. If you recognize all of this line it's suggested that it not be fixed.


4. Once the above have been checked click the Fix checked button.
5. After fixed close HijackThis.

Delete files

Delete the following files if found on the computer. If you're unable to delete the files because they're in use you'll need to boot the computer into Safe Mode.

c:\windows\system32\taskhost.exe *

* This file could be a legitimate file. Make sure you're positive this is not a valid file by reading the suggestions in the above chart before deleting it. If you're not comfortable deleting the file just leave it alone.
** Files not found in the Windows directory may be part of a program that can be uninstalled through the Add/Remove programs in the Control Panel before simply deleting this file.

====================================================

[user77]

There is malware that removes any connectivity at all...

Did the Helpers in the Virus and Malware Forum give you a clean bill of health ? ?
You may still have work to complete over there...

Patio please help. I really want to salvage my computer if possible. Thanks.