SOS Virus aftermath horror

[whitewolf1984]

Hello everyone

This is my first time posting on here and I really need some help sorting out my girlfreinds computer.

System is Win 7 ultimate 32 bit. I belive hardware is irrelivent but if needed I will post it.


Whats happend.

So I got home from work today to find my girlfreind had gone out and left me a note saying her computer was shot. (she used more coulorful language )

After so investigation I discoverd that not only could you not open ANY FILE without the computer asking what program to open it with, her antivirus (windows defender) would not work either. So I resorted to pulling out her hard drive and hooking it upto my system and running virus scans ect, and I discoverd 2 trogens. After getting rid of them I put her hard drive back in her system and booted it up.

Viruses gone but still unable to open anything I googled the issue and found a fix for that issue, her registery was screwed up.

Well I have fixed that but now her network connection and sound are not working, its like the computer doesnt evan have either. I checked device manager and they are BOTH installed and working properly.

I have-

Uninstalled and reinstalled both devices

Compleatly rebooted the home network

Evan tryed creating a new network on her system (alas "there is no networking device attached to this computer")

Trying to use the sound and it says theres no sound device, yet the HD audio manager is working.

Can't use the online help via her pc as it thinks theres no internet.

When I run ip config I get this..

C:\Users\Rachael>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Rachael-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) Famil
Gigabit Ethernet NIC (NDIS 6.20)
Physical Address. . . . . . . . . : 00-24-1D-BF-96-85
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::613b:132f:316b:34c%13(Prefer
Autoconfiguration IPv4 Address. . : 169.254.3.76(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{EB48C48B-444D-4333-AC9D-E56D85E3797E}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 9:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Anyone have any idea's as how to fix this please.

 

[Jacee]

Have you tried resetting the modem?

Also... Windows defender is not an anti-virus program! Download MSE, a free anti-virus that includes Windows Defender https://www.microsoft.com/downloads...FamilyID=e1605e70-9649-4a87-8532-33d813687a7f

 

[whitewolf1984]

I have restarted everything still no dice. :S

 

[Jacee]

Let's try flushing the DNS cache and restoring MS's Hosts file.
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop. Right click the .bat file and run as Administrator. Your computer will reboot itself.

 

[whitewolf1984]

Ok did that, still no dice.

Will also add I have done the following too...

Chkdisk (no errors found)
uninstalled both the audio and the lan and reinstalled via disk.

sill nothing

I really dont wanna format it :S

 

[Jacee]

Make a free bootable Antivirus rescue disk ... FREE Bootable AntiVirus Rescue CDs Download List be sure to burn it a a slow speed, so it doesn't get corrupted.

It's quite possible that you didn't get rid of the malware.