Removal of virus has blocked internet. PLEASE PLEASE HELP

Page 8 of 12 FirstFirst ... 678910 ... LastLast

  1. Posts : 2,470
    Windows 7 Home Premium
       #71

    You are correct!! Those may be the entries that, if MBAM removes them, you will not have an Internet connection.
    Hold tight on those!! Need to find out more info.



    Boot in Safe Mode and see if you create a restore point:
    1. When the computer is powered on or restarted, tap the F8 key in 1 second intervals.
    2. After your computer displays hardware information and runs a memory test, the Advanced Boot Options menu appears.
    3. Use the arrow keys to select Safe Mode,and press: ENTER
      My Computer


  2. Posts : 2,470
    Windows 7 Home Premium
       #72

    Doubt that I will get the folks from MBAM at this hour.

    Also, I do need to get some sleep.

    Will get back with you tomorrow and see if we can figure out what to do with those blankity-blank entries.

    You have been great through all this.
    My old brain is not what it used to be.

    Thanks for your patience.
      My Computer


  3. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #73

    I created some restore points although I have not tested them out yet. Overnight I will be running full scans with ESET and Malwarebytes Anti-Rootkit. :) Thank you again. I cannot tell you how thankful I am. I am hopeful we can smoke out those other Pure Leads instances. Thanks again!
      My Computer


  4. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #74

    And oh yes... I made backups of the plsapp/plsapp64... renamed them and squirreled them away just in case.
      My Computer


  5. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #75

    Updated AdwCleaner report.
    Removal of virus has blocked internet. PLEASE PLEASE HELP Attached Files
      My Computer


  6. Posts : 2,470
    Windows 7 Home Premium
       #76

    Will you also download a new copy of the Farbar Recovery Scan Tool:
    Farbar Recovery Scan Tool Download

    Check: Addition.txt

    Remove the old copy. This program gets updated often. New version: 21-06-2015

    Please post the two reports.

    Thanks.
      My Computer


  7. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #77

    Here are the latest reports. Malwarebytes Anti-Root Kit came up clean.
    Removal of virus has blocked internet. PLEASE PLEASE HELP Attached Files
      My Computer


  8. Posts : 2,470
    Windows 7 Home Premium
       #78

    ChronicX,

    Checking a few things out to get rid of the nuisance without losing the Internet connection.

    Also need to go out for a while. Will be back later.

    Thanks for your patience.
      My Computer


  9. Posts : 70
    Windows 7 Home Premium 64
    Thread Starter
       #79

    Thanks, Cottonball, I am updating a lot of the tools and rescanning fairly often. Nothing has come up and the scans as of yet. Thanks again for your help. :)
      My Computer


  10. Posts : 2,470
    Windows 7 Home Premium
       #80

    ChronicX,

    Let's roll once again...

    We are going to take a chance, since the entries found by MBAM are a Layered Service Provider .dll that uses Winsock APIs to attempt to insert itself into the TCP/IP protocol stack. However, we need to get rid of the .dll.

    If, after running MBAM you have no Internet connection, the program that follows processes the netsh winsock reset catalog command. It resets the winsock catalog to the standard Windows configuration, which means that all Layered Service Providers (LSPs) that were added, are skipped. So if you were using third-party LSPs, the associated programs may have to be re-installed or repaired.

    So, here we go...

    Run Malwarebytes Anti-Malware
    Make sure you update the program.

    Run the Threat Scan.

    When the scan completes, you are presented with a screen showing what Malwarebytes Anti-Malware has detected.
    Click on the Quarantine All button, and then click on the Apply Actions button.

    Malwarebytes Anti-Malware quarantines all the files or entries that it found.

    When removing the files from Quarantine, Malwarebytes Anti-Malware requires a reboot.
    When it displays a message stating that it needs to reboot the computer, please allow it to do so.
    A prompt appears after the first reboot stating MalwareBytes Anti-Malware needs to reboot the computer a second time. Please do so.

    Please post the MBAM report in your reply.

    [The log is automatically saved by MBAM and is also viewed by clicking:
    History tab > Application Logs.]


    Test the Internet.


    In case of Internet failure, please use the tool: Zoek

    First, temporarily disable your AV program.
    Info on how to disable your security applications > How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides

    Zoek Download > http://download.bleepingcomputer.com/smeenk/zoek.exe
    When the download appears, save to the Desktop.
    On the Desktop, right-click the Zoek.exe file and select: Run as Administrator (Give it a few seconds to appear.)

    Next, copy/paste the entire script inside the code box below to the input field of Zoek:

    Code:
    createsrpoint;
    netsh winsock reset catalog;b
    ipconfig /flushdns;b
    emptyfolderscheck;delete
    emptyclsid;
    emptyalltemp;
    autoclean;
    Now...
    Close any open Browsers.
    Click the Run script button, and wait. It takes a few minutes to run all the script.

    When the tool finishes, the zoek-results.log is opened in Notepad.
    The log is also found on the systemdrive, normally C:\
    If a reboot is needed log is opened after the reboot.

    Please attach the zoek-results.log in your reply.
      My Computer


 
Page 8 of 12 FirstFirst ... 678910 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 16:32.
Find Us