The DNS server isn’t responding

I did not add anything to TeamViewer.

AdWareCleaner did not work exactly as you said, probably because it is a newer version. I noticed it was going to delete everything found on the initial log without asking for confirmation, so I saved the Getright registry key with all the program needs to work properly, and a directory with some Winpatrol stuff. It deleted them and as Getright had lost everything I put them back where they belonged. There were too many things on that frst log and I couldn't check everyone in a couple of hours, so I let it delete most of them, but I also noticed that some lines with paths pointed to empty folders, not important, because sonmetimes I get rubbish that I get rid of later, and it could be that. However I hardly believe I had any malware because I am careful and also scan with Defender and Avast, but of course, that is never 100% sure. Isn't this version dangerous because it does not ask to delete as you said? I hope it did not delete something useful like the two I noticed and saved. After this I had a look at Device Manager and found a problem with WAN Miniport (Network Monitor); lost its driver and "The system cannot find the file specified". If you find anything else of the sort, please tell me. The final log is below.

Nothing changed concerning Comodo, so everything is as before.


# AdwCleaner v2.111 - Logfile created 02/07/2013 at 23:18:46
# Updated 05/02/2013 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)
# User : Administrator - ROCCO-PC
# Boot Mode : Normal
# Running from : B:\Downloads\GetRight\Control\Anti-virus\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\ProgramData\InstallMate

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\Headlight
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2937 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= --> hxxp://www.google.com

-\\ Google Chrome v24.0.1312.57

File : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.8] : homepage = "hxxp://search.babylon.com/?affID=112185&tt=4812_4&babsrc=HP_ss&mntrId=04d0a9cb000[...]
Deleted [l.47] : icon_url = "hxxp://www.babylon.com/favicon.ico",
Deleted [l.50] : keyword = "babylon.com",
Deleted [l.53] : search_url = "hxxp://search.babylon.com/?q={searchTerms}&affID=112185&tt=4812_4&babsrc=SP_ss&[...]
Deleted [l.1670] : homepage = "hxxp://search.babylon.com/?affID=112185&tt=4812_4&babsrc=HP_ss&mntrId=04d0a9cb000000[...]

*************************

AdwCleaner[R1].txt - [9587 octets] - [07/02/2013 22:26:22]
AdwCleaner[R2].txt - [9426 octets] - [07/02/2013 22:45:14]
AdwCleaner[R3].txt - [9393 octets] - [07/02/2013 22:47:17]
AdwCleaner[S1].txt - [340 octets] - [07/02/2013 22:52:42]
AdwCleaner[S2].txt - [9782 octets] - [07/02/2013 23:18:46]

########## EOF - C:\AdwCleaner[S2].txt - [9842 octets] ##########


Thank you for your work.

chev65 said:

Why not start by removing Avast completely from your system?

avast! Uninstall Utility | Download aswClear for avast! Removal

There are also components of Comodo that need to be removed.

Uninstaller Tool for Comodo Products

After cleaning according to the link, the keyboard stopped responding, I rebooted and then no keyboard, no mouse. I am at a very small XP partition. I am not going to ask for help for this. I reinstall the same image as on my post 11 and will be back to that position. Then I will repeat Jacee's last post instructions and will be back here late tomorrow. Thank you all for kindly trying to help, but I believe it will not be impossible just to reset the TCP/IP4 to its original OS settings, that's all I need.

Neophile said:

chev65 said:

Why not start by removing Avast completely from your system?

avast! Uninstall Utility | Download aswClear for avast! Removal

There are also components of Comodo that need to be removed.

Uninstaller Tool for Comodo Products

After cleaning according to the link, the keyboard stopped responding, I rebooted and then no keyboard, no mouse. I am at a very small XP partition. I am not going to ask for help for this. I reinstall the same image as on my post 11 and will be back to that position. Then I will repeat Jacee's last post instructions and will be back here late tomorrow. Thank you all for kindly trying to help, but I believe it will not be impossible just to reset the TCP/IP4 to its original OS settings, that's all I need.

You probably just needed to pull the USB and plug them in again. Anti virus removal tools do not do this.

As long as you have those A/V's, even the smallest pieces on your system, you will continue to have problems.

Part of the Comodo so called DNS security is still leaving things in your Device Manager which also need to be removed.

Once that stuff is completely removed you might have a chance at fixing this problem. The link below explains how to run this problem down but assumes that a rogue A/V software is not involved.

http://atechjourney.com/dns-server-n...rror-fix.html/

Well, Layback Bear, your summary is a bit mixed up, but that is not astonishing after all that happened. To put it short, after installing an image nothing is as it was when I started this thread. Now I am as on my post 11, so let's make it easy and cut short all that both happened before and after, and take this one as the if it were the first post.

• That is, I unisntalled Comodo;
• Then I found the browser is still going to Comodo’s site when a site is not found, does not exist or because of a typing error;
• I searched for Comodo files and registry entries and used Revo's Force uninstal to the paths and it deleted a lot of files and registry entries;
• I cleaned the remaining with Little Registry Cleaner.
• The only remaining issue is the TCO/IP4 that needs to be reset to its original default values. This will also solve the problem with the browser.

This is the present point. Comodo never again, it lives in the system like a parasite, works as a virus changing things without asking or noticing, an abuse; and third party that duplicate OS functions only after researching for known results, etc.


Chev65, I am very sorry, but I don’t understand what you mean. I don’t know what you say about “pull the USB and plug them in again”. I also don’t understand about the anti-virus. I am sure I am being too silly and you did not explain. Your link at the end of your post goes to a page with the title “DNS Server Not Responding Error – How to Fix it”, but I am not sure about that because what we can read on the images at my post 11 are actually the Comodo IPs. The problem on my first post, before re-imaging the system (not now), started when I deleted that Comodo IPs from the TCP settings. that makes me ask what to do now, not to fall on the same again. Please, let me understand what you are telling me to do. I read something about your IPResetALL.zip. Would you advise me to use it?


Jacee, do you think I should use AdwCleaner again? I mean, from what you read on the two logs I posted, is it necessary or useful? Please let me know.


Thank you all.

I followed your hints. The first two and another one I had already found, but found others and more under C:\Windows\System32\DriverStore\FileRepository\inspect.inf_amd64_neutral_a7ec3789bc21a5c0 with inspect.sys, .inf, .pnf and .cat. Also some registry keys with related names.

I only verified a little of all what AdwCleaner wants to delete and it took me a until now. I only don’t understand why it persists on deleting Getright registry key and Winpatrol setup file. Maybe the developer doesn’t like them.

Jacee said:

If you're still having problems with Comodo, watch the video .... then perhaps you might re-install it, then uninstall it.
What a Pita!!!
How to Uninstall COMODO Firewall - YouTube

I have the same problem.
Are you suggesting to reinstall it and then re-uninstall?

Layback Bear said:

That video reminds me of removing Webroot with Spysweeper years ago. What a bag of worms. I had to use Normal as well as Safe mode to get it all out. I took me most part of a weekend. Some how using 3rd party programs, regedit, msconfig and screaming I did finally get rid of it. All this was done after I use the removal tool from Webroot/Spysweerer and Add/Remove in Windows.
Going from Normal to Safe mode over and over just to remove one little part and then doing it all over again for a lot of little parts one or two at a time takes forever. If I had to do it again I would just do a Wipe and Clean Install.

I can figure out what you mean because I have had some much smaller identical cases and I know very little. I only use computers for over 25 year = experience, but no knowledge .