Win 7 ,what happend?

[Alfons]

When I started my stationary to read some newspapers this morning I got into a wall of trouble.

First I can't reach my router(tried to bypass it doesn't want to connect directly either) from the stationary, it doesn't want to connect, so now I'm writing from my laptop. When I did the troubleshooting it crashed ( APPCRASH).
+ it also started to complain about valid windows =/
+ avast (antivirus) couldn't start up since some dll file was missing.

What should I do?


Sorry if I placed this in the wrong forum section

 

[Mike Connor]

First, you need to see if malware is affecting your system, download the free version of this;

Malwarebytes

and run a FULL scan after updating the database. If it finds anything, post the log here.

I realise you may have difficulty if you are unable to access the internet from the machine with the problem. You can download to your laptop, and then copy the installation file to your desktop.

Regards....Mike Connor

 

[Alfons]

Downloaded, scanned and clean .

Seems I'm missin the dnsapi.dll file which I've now been trying to get back in my system. I believe my problem to be that the dnsapi.dll files I've downloaded aren't compatible with my win 7 x 64 client. *facepalm*

Any tips?

 

[Mike Connor]

Downloaded, scanned and clean .

Seems I'm missin the dnsapi.dll file which I've now been trying to get back in my system. I believe my problem to be that the dnsapi.dll files I've downloaded aren't compatible with my win 7 x 64 client. *facepalm*

Any tips?

Well, I'm afraid the only sensible advice on that, is not to do it, most of the things on line associated with this dnsapi business are scams of some sort.

The dnsapi.dll is not essential to Windows 7 and I would advise you not to download anything like that from anywhere. If you have already done so, run a malware scan and delete them.

My best guess right now is that you have some form of trojan etc on your machine. These are known to disable anti-virus software.

Download this and run it;

SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

You should also run this to check your system files;

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

If those things don't work, then I think you need to consult one of our resident security experts and do some deeper scans and investigation.

Regards....Mike Connor

 

[wazzam]

As Mike said, best not to try and download a dll file. You'd be better to run the Avast install program to repair broken or missing dll files.

 

[johnnya]

Not sure just what you mean by the comment "You'd be better to run the Avast install program to repair broken or missing dll files." What does Avast have to do with this problem. Running sfc /scannow is the preferred way to replace broken/missing Windows files. Sorry if I am missing something here.

Regards
JohnnyA

 

[Mike Connor]

Not sure just what you mean by the comment "You'd be better to run the Avast install program to repair broken or missing dll files." What does Avast have to do with this problem. Running sfc /scannow is the preferred way to replace broken/missing Windows files. Sorry if I am missing something here.

Regards
JohnnyA

I think he just made a mistake. No harm done.

Regards....Mike Connor

 

[wazzam]

I was assuming that the missing dll was file needed by Avast after the OP said "avast (antivirus) couldn't start up since some dll file was missing".

 

[Mike Connor]

I was assuming that the missing dll was file needed by Avast after the OP said "avast (antivirus) couldn't start up since some dll file was missing".

No problem. However, anything that disables an anti-virus program is almost certainly malware. There are huge numbers of Internet scams which rely on the victim downloading some file or other which sounds as if it should belong to the operating system. This is NEVER the case.

You should NEVER download anything like this.

The way to check system files is by using;

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

You have to be very careful when giving advice, because if you give the wrong advice you can destroy somebody's system, and cause them a lot of problems.

Quite a few people will automatically assume that any advice they see here is OK. This is quite a heavy responsibility for all of us.

Anybody can make a mistake, and we all do! But if you are unsure about something it is better to ask about it, or say nothing.

Regards....Mike Connor

 

[Alfons]

Hello, thanks for the tips and effort ! Greatly appriciated!
I tried to delete the dll files that I downloaded, only to see that one of them is actually working as intended. avast is now up and running again.
I downloaded the other recommended program and ran it without finding anything.
I did the scan and said that some files were corrupted which has led me to believe that it's infact a hardware problem. I ran "chdks" which too hours. without result and I*m now running windows memory diagnostic tool.
I tried to do a ipconfig but the it yelled for a dnsapi.dll again.. So I deleted the one supporting avast.
And I just recieved the info that the computer had been doing some chdks at startup earlier this month, giving me more reason to believe in hardware failure. Though I wonder why I can't connect to the net...

The dnsapi.dll thingie is spooky.

If the diagnostic tool fails to give me anything valuable I'll go for a clean disk an re install of win 7 + components.

Thanks for your help

 

[Mike Connor]

My pleasure.

Please let us know how things turn out. I don't like that dnsapi.dll business at all. I still think you may have a serious trojan. In which case a clean install is probably the best thing to do.

If it was hardware, then you would be getting other indications and the system would not be calling for a file.

I don't know how much use it will be to you, but these are the instances of dnsapi in my system on this machine running x64 Ultimate, with locations, sizes, and dates;



If you have anything else, or obvious size or date discrepancies then I would be very suspicious indeed. Also, Windows can not simply "lose" dll's for no reason.

Further, I would remove Avast and use MSE ( Microsoft Security Essentials);

http://www.microsoft.com/en-us/security_essentials/default.aspx

Also, if you are behind a router then you don't need a firewall. ( Just in case you are using one).

Regards....Mike Connor

 

[Alfons]

ohh I was wrong, yapp seems I have a pretty bad trojan on my hands. allways nice with some holiday work. Going to post a hijack this log soon

 

[Mike Connor]

ohh I was wrong, yapp seems I have a pretty bad trojan on my hands. allways nice with some holiday work. Going to post a hijack this log soon

I will be very interested in that. Thanks for the feedback.

Regards....Mike Connor

 

[Alfons]

Hijack log, atm I'm clueless =/

 

[Mike Connor]

Hijack log, atm I'm clueless =/

http://www.hijackthis.de/en

Paste the log into the above.

 

[Jacee]

The HJT log isn't showing much of anything!!

• Download random's system information RSIT
  http://images.malwareremoval.com/random/RSIT.exe
• It is important that is saved to your desktop.
• Double click on RSIT.exe to run RSIT.
• Click Continue at the disclaimer screen.
• Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

 

[Alfons]

Log ->

Logfile of random's system information tool 1.08 (written by random/random)
Run by William the poet at 2011-04-22 23:42:50
Microsoft Windows 7 Professional 
System drive C: has 83 GB (30%) free of 280 GB
Total RAM: 4095 MB (74% free)

 

[Jacee]

That's not the entire log ....
Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

 

[Alfons]

Trying to post info from rsit again. I ran this from the desktop. And this time I uninstalled hijack before running the script. When the rsit was done I used save as and onto the flash drive, I don't know any other way to secure the content the full content of the file =/ Other then c&p . I hope this is the complete log that you are looking for. I really appriciate the help!

 

[Alfons]

System restore - resulted in system restore "crash"
Microsoft management console - stopped working ( was going to save some file through partition)
Scripted diagnostic native host - stopped working ( trouble shooter)
Atm I'm running all scans in safe mode ^^ with 0 results yet.
The search continues =/