Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Removal of virus has blocked internet. PLEASE PLEASE HELP

19 Jun 2015   #1
ChronicX

Windows 7 Home Premium 64
 
 
Windows 7: Virus Deletion Now Makes Internet Access Impossible Part 2

Browsing through the forums and came across a case involving someone named Florida Rene who was experiencing similar issues to what i am now dealing with. Basically, it looks like Avast quarantined/deleted a file (likely malware that I thought I'd cleaned) called plsapp.dll. Since the deletion of that file, I am unable to get online even though my network says I have network access. I have run MBAM, Combofix, ESET and nothing is coming up as a threat. I am sure it has to do with some program called Pure Leads? I uninstalled Chrome, do not have Firefox and IE also will not connect. Please help!


My System SpecsSystem Spec
.
19 Jun 2015   #2
Zoloft

Win7 Home Premium x64
 
 

run command prompt as administrator

type
netsh int ip reset
enter
type
netsh winsock reset
enter
type (just for good measure)
ipconfig /flushdns

close command prompt, reboot computer
My System SpecsSystem Spec
19 Jun 2015   #3
ChronicX

Windows 7 Home Premium 64
 
 

Unfortunately, it did not work. Sorry about the font size.
My System SpecsSystem Spec
.

19 Jun 2015   #4
ChronicX

Windows 7 Home Premium 64
 
 

Overnight I re-ran MBAM, ESET and no threats were found. Still down.
My System SpecsSystem Spec
19 Jun 2015   #5
ChronicX

Windows 7 Home Premium 64
 
 
Removal of virus has blocked internet. PLEASE PLEASE HELP

Browsing through the forums and came across a case involving someone named Florida Rene who was experiencing similar issues to what i am now dealing with (this person worked with Cottonball). Basically, it looks like Avast quarantined/deleted a file (likely malware that I thought I'd cleaned) called plsapp.dll. Since the deletion of that file, I am unable to get online even though my network says I have network access. I have run MBAM, Combofix, ESET, OTM, FSS and nothing is coming up as a threat. I am sure it has to do with some program called Pure Leads? I uninstalled Chrome, do not have Firefox and IE also will not connect. Please help!
My System SpecsSystem Spec
19 Jun 2015   #6
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

I think possibly you're having the problem because of a broken Winsock connection ... cause by removing plsapp.dll

Try this:
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop. Right click on the .bat file to run as Administrator.
Your computer will reboot itself.
My System SpecsSystem Spec
19 Jun 2015   #7
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

If that doesn't work .... download AdwCleaner by Xplode and save to your Desktop.


Step 1.
  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Step 2.
Using AdwCleaner: Scan & Clean:
This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder
******Post both .txt logs

This is the program, (PureLeads by Sendori) that caused the malware PureLeads by Sendori - Should I Remove It?
My System SpecsSystem Spec
19 Jun 2015   #8
ChronicX

Windows 7 Home Premium 64
 
 

Still nothing. I've attached some recent FSS and systemlook reports.


Attached Files
File Type: txt FSS.txt (2.5 KB, 5 views)
File Type: txt SystemLook2.txt (22.6 KB, 8 views)
My System SpecsSystem Spec
19 Jun 2015   #9
GokAy

Windows 7 Ultimate x64 SP1
 
 

Try:
- Restore the dll from Avast quarantine.
- Scan with MBAM again, but make sure Settings - Detection and Protection - Scan for rootkit is checked and PUP: treat as malware, PUM: treat as malware is set.
My System SpecsSystem Spec
19 Jun 2015   #10
ChronicX

Windows 7 Home Premium 64
 
 

I ave run AdwCleaner this morning with no results. I am running it again right now. Thank you so much for your quick reply, I have been working on this issue for hours.
My System SpecsSystem Spec
Reply

 Removal of virus has blocked internet. PLEASE PLEASE HELP




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
help with possible virus removal?
I thought there was a section here, that gave details on what to submit here, in order for a professional from within to examine the content and then give further instruction. Is it still here, or is it gone? I looked under security. Hmm, I'm missing something...Thx, DM
System Security
Virus Removal
Just bought a laptop pretty decently priced even with the virus problem. I am just having problems getting rid of this one. It has content explorer which sets up proxy so after disabling it i can not get on net to install removal sofware. It has wb.exe, pc health, a password viewer, scorpion...
System Security
Want ideas for Virus removal if virus shows up in safemode CMD
Hi, Looking for general ideas on how everyone else handles a strong virus. If the virus is showing up in Windows regular mode, it opens in safemode and opens in safmode with command prompt. Besides the usual such as boot to repair mode and use system restore, dock hard drive to another pc and...
System Security
Virus Removal
My Microsoft Security Essentials keeps alerting me to something called: Name: Exploit:HTML/IframeRef.gen Alert Level: Severe I click remove but sometime later the message pops up again saying to remove. I have clicked remove quite enough times now but still the pop-up appears. I have also...
System Security
no internet after virus removal
I removed a virus from my friends e machine net book a week or so ago it was the system tool 2012 virus.it was removed fully and have checked this via AV and malwarebytes etc.but since then the internet always finds wifif points and connects but always says limited connection.problem is he lost his...
Network & Sharing
After Virus Removal
After virus removal, this message has been popping up every time I start the computer. What do I do to restore these two DLL files? Startup repair has done nothing and I don't want to system restore because I just installed tons of drivers.
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:19.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App