Virus Deletion Now Makes Internet Access Impossible

OKAY I just found a solution (THANK YOU VERY MUCH, Kaktussoft and Indiacarnie)


Here's what I discovered, and is why it is now working for Florida Rene.
I deleted EVERY AdpeekProxy.dll and Don't forget the AdpeekProxy64.dll in the system32 folder! AVG doesn't detect that! So find everything that is related to Adpeek and delete it. Then the browsers will stop working after doing the AVG scan and deleting Adpeek completely.

Run this bat file that Indiacarnie mentioned:

Code:

@Echo off
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 0
del %0

(Run as administrator... otherwise it doesn't work)

This will fix it. Thank you! And remember! It was a team effort! I have been working on this for 2 days straight in a row! However, as I own a business in Computer Repair, I do have the tools and such. I have literally been imaging the client's hard-drive back and forth between working internet and non-working internet, and finally that AdpeekProxy.dll was the very thing that caused this problem. The "netsh winsock reset all" command fixes the Proxy Reference. So it no longer is looking for Adpeek virus.
Check this link out. It tells you what winsock reset does netsh winsock reset
This command in cmd should show you a list of all/any changes made to the winsock catalog!

Code:

netsh winsock audit trail

(If anyone found something else regarding this issue... please do share! and also if someone could post a list of file locations for Adpeek that AVG does NOT detect, such as the AdpeekProxy DLL in system32. Thank you!)

I am glad to say that this terrible and extremely painful annoyance has been solved.

So remember... Don't get Scorpion Saver or Adpeek.. they're really bad.


~jmscreator
Computer Smith, MA

My apologies to jmscreator but I'm a little leery of self proclaimed "experts" in any field. I WOULD NOT personally replace that .dll file. The .bat file I gave you in post #16 should have done the trick as it contained all the commands that eventually led to your net being restored. In my haste I may have forgotten/neglected to mention that any .bat file should be run as an administrator (Elevated Command Prompt). And for this I deeply apologize for wasting your time and that of the other members helping you.

The .bat file I suggested, and what it does is available on the net without too much searching. I know because that's where I got it and I've had it saved for over a year now in my "tools" folder. Its worked before in similar situations and dumbfounded me when it didn't work for you. Again, my apologies for neglecting something so basic as running it as an elevated command. (I've since made a note to myself in my tools folder so this doesn't happen again)

Yes, its becoming increasingly more common for malware to change/rewrite system files. That's why I suggested a repair install/clean install when my original posting of the "fix" didn't "fix" the problem.

I'm just happy that your machine is up and running. (I'll catch heat for this, but maybe you should consider a different anti-virus also. AVG is not like it used to be and there are many other free alternatives that perform better and faster.) Also, when downloading anything pay extra attention as you install, unchecking any and all things you don't want. Everybody, it seems, wants to install the little extra's that lead to this kind of thing. Save any programs/things you download and scan them first before installing. I know this advice is very basic, but after my slip-up earlier vis-a -vis the command prompt, I'd rather err on the side of caution.

netsh winsock reset : That has solved it I think.
Although the poster posted that didn't solve it (even after reboot). He did "netsh int ip reset" as well. tcp/ip was running fine... no reason to reset actually.

There wasn't a generic http proxy in the tcp/ip stack Netsh Commands for Windows Hypertext Transfer Protocol (WINHTTP)
Neither was there a proxyserver defined in internet explorer (and most likey not in other browsers).

Only common tcp/ip stuff which could cause these http errors is winsock Winsock - Wikipedia, the free encyclopedia

It supports Layered Service Providers. a Layered Service Provider can intercept and modify inbound and outbound Internet traffic. It allows processing of all the TCP/IP traffic taking place between the Internet and the applications that are accessing the Internet (such as a web browser, the email client, etc.). For example, it could be used by malware to redirect web browers to rogue websites, or to block access to sites like Windows Update. Alternatively, a computer security program could scan network traffic for viruses or other threats.
Layered Service Provider - Wikipedia, the free encyclopedia

There can be more Layered Service Providers (LSP) chained together. You deleted the DLL (the LSP)... the cause of the problem.

netsh winsock reset : that resetted the LSP chain to default standard order. Maybe virusscanner isn't working corectly now (maybe we deleted that LSP as well[?]). Uninstall and install AVG again

My apologies Kattussoft.

Run your A/V in safe mode and Malwarbytes too for that matter just to be safe. PUP = Potentially Unwanted Program. (NO you don't want any of these.) It looks like Malwarebytes successfully got them. You can also run Superantispyware (which I highly recommend) (Full scan)

There is no "best" Anti-Virus as its a matter of taste. There ARE leaders in the field (we have multiple threads pertaining to this subject so I will not recommend one. I used Avast until this morning when I changed to Bit Defender. Avast is near the top at detection rates but I personally don't care for the new UI and its increasing amounts of nag balloons.)

Just a suggestion from a NON EXPERT. (ME)
Something I use often and it does help me. Using Microsoft I.E. works best for me with the download.

Free Virus Scan | Online Virus Scanner from ESET