Removal of virus has blocked internet. PLEASE PLEASE HELP

ChronicX · 19 Jun 2015

Browsing through the forums and came across a case involving someone named Florida Rene who was experiencing similar issues to what i am now dealing with. Basically, it looks like Avast quarantined/deleted a file (likely malware that I thought I'd cleaned) called plsapp.dll. Since the deletion of that file, I am unable to get online even though my network says I have network access. I have run MBAM, Combofix, ESET and nothing is coming up as a threat. I am sure it has to do with some program called Pure Leads? I uninstalled Chrome, do not have Firefox and IE also will not connect. Please help!

Zoloft · 19 Jun 2015

run command prompt as administrator

type
netsh int ip reset
enter
type
netsh winsock reset
enter
type (just for good measure)
ipconfig /flushdns

close command prompt, reboot computer

ChronicX · 19 Jun 2015

Unfortunately, it did not work. Sorry about the font size.

ChronicX · 19 Jun 2015

Overnight I re-ran MBAM, ESET and no threats were found. Still down.

ChronicX · 19 Jun 2015

Browsing through the forums and came across a case involving someone named Florida Rene who was experiencing similar issues to what i am now dealing with (this person worked with Cottonball). Basically, it looks like Avast quarantined/deleted a file (likely malware that I thought I'd cleaned) called plsapp.dll. Since the deletion of that file, I am unable to get online even though my network says I have network access. I have run MBAM, Combofix, ESET, OTM, FSS and nothing is coming up as a threat. I am sure it has to do with some program called Pure Leads? I uninstalled Chrome, do not have Firefox and IE also will not connect. Please help!

Jacee · 19 Jun 2015

I think possibly you're having the problem because of a broken Winsock connection ... cause by removing plsapp.dll

Try this:
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop. Right click on the .bat file to run as Administrator.
Your computer will reboot itself.

Jacee · 19 Jun 2015

If that doesn't work .... download AdwCleaner by Xplode and save to your Desktop.

Step 1.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator.
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
Copy and paste the contents of that logfile in your next reply.
A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Step 2.
Using AdwCleaner: Scan & Clean:
This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder
******Post both .txt logs

This is the program, (PureLeads by Sendori) that caused the malware PureLeads by Sendori - Should I Remove It?

ChronicX · 19 Jun 2015

Still nothing.

I've attached some recent FSS and systemlook reports.

GokAy · 19 Jun 2015

Try:
- Restore the dll from Avast quarantine.
- Scan with MBAM again, but make sure Settings - Detection and Protection - Scan for rootkit is checked and PUP: treat as malware, PUM: treat as malware is set.

ChronicX · 19 Jun 2015

I ave run AdwCleaner this morning with no results. I am running it again right now. Thank you so much for your quick reply, I have been working on this issue for hours.

Removal of virus has blocked internet. PLEASE PLEASE HELP

Windows 7: Virus Deletion Now Makes Internet Access Impossible Part 2

Removal of virus has blocked internet. PLEASE PLEASE HELP