Books
#1
Senior Member
Profile: Join Date: Oct 2007
Location: Kentucky
Posts: 65
Computer Experience:
[Unable to connect to internet, use messenger or AVG, etc]
Yes, I am back with yet another computer. This time, The computer cannot browse the web at all. It has been like this for at least a week. I can connect to wireless networks, but the browsers do not work and neither do the messengers. AVG doesn't scan, and adaware 2008 says it cannot open because it cant get online. Help please?SP2
#3
Staff
Profile: Join Date: May 2002
Location: Staffordshire, UK
Posts: 16,706
Computer Experience:
Please observe Posting Rules #3 - Meaningful Subject - I have adjusted your title.
#4
Senior Member
Profile: Join Date: Oct 2007
Location: Kentucky
Posts: 65
Computer Experience:
HJT logifle:SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)http://runonce.msn.com/?v=msgrv75 http://www.yahoo.com/ http://www.yahoo.com/ http://www.kaspersky.com/kos/eng/par...an_unicode.cab http://by22fd.bay22.hotmail.msn.com/...s/MsnPUpld.cab http://update.microsoft.com/microsof...?1137309636114 http://messenger.zone.msn.com/binary...t.cab31267.cab http://locator1.cdn.imagesrvr.com/si...nerInstall.cab https://webapps.eku.edu/stunav/webinst.cab http://static.zangocash.com/cab/Zang...55e39bbcd1b030 http://pccheckup.dellfix.com/rel/35/...l/gtdownde.cab Ad -Aware Service (aawservice) - Unknown owner - E:\aawservice.exe (file missing)DSS on the infected computer because it locks up while its running. There are no programs open to cause it to freeze either.
#5
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hi TinyTuba822SmitfraudFix S!Ri ) to your Desktop.Safe Mode by doing the following :Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.
SmitfraudFix.exe Clean by typing 2 and press "Enter " to delete infected files.Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".C:\rapport.txt Warning : running option #2 on a non infected computer will remove your Desktop backgroundATF Cleaner by Atribune and save it to your Desktop.Windows Temp P2P software ( Limewire, BitTorrent uTorrent etc… ) installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page here , here and here .I would strongly recommend that you uninstall them, Note: try Deckards again and post it if it will run now.
#6
Senior Member
Profile: Join Date: Oct 2007
Location: Kentucky
Posts: 65
Computer Experience:
This computer I am using is not allowing me to access Smitfraudfix.exe. I can't get the file to the infected computer. AVG keeps telling me this is a potentially harmful threat, and I clicked ignore. I also closed AVG. However I don not know how to get around these download settings. The computer I am trying to download it on is running Vista 32 bt.
#7
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
HiIt is very important to turn this back on after downloading the tool.
#8
Senior Member
Profile: Join Date: Oct 2007
Location: Kentucky
Posts: 65
Computer Experience:
No, I still can't download it. I'm even posting with the UAC off, and I probably shouldn't. I know my way around XP, but not Vista.
#9
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hihttp://www.bleepingcomputer.com/forums/topic114351.html
#10
Senior Member
Profile: Join Date: Oct 2007
Location: Kentucky
Posts: 65
Computer Experience:
Got it. I ran smitfraudfix.exe and dss .exe. Here are the logs.DNS SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)dss .exehttp://www.kaspersky.com/kos/eng/par...an_unicode.cab http://by22fd.bay22.hotmail.msn.com/...s/MsnPUpld.cab http://update.microsoft.com/microsof...?1137309636114 http://messenger.zone.msn.com/binary...t.cab31267.cab http://locator1.cdn.imagesrvr.com/si...nerInstall.cab https://webapps.eku.edu/stunav/webinst.cab http://static.zangocash.com/cab/Zang...55e39bbcd1b030 http://pccheckup.dellfix.com/rel/35/...l/gtdownde.cab Ad -Aware Service (aawservice) - Unknown owner - E:\aawservice.exe (file missing)Ad -Aware Service) - e:\aawservice.exe (file missing)PCI \VEN_14E4&DEV_1677&SUBSYS_01771028&REV_01\4&1D7EFF9E&0&00E0PCI \VEN_14E4&DEV_1677&SUBSYS_01771028&REV_01\4&1D7EFF9E&0&00E0http://www.beyondlogic.org; Command Line Process Utility>
#11
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hi TinyTuba822
#12
Senior Member
Profile: Join Date: Oct 2007
Location: Kentucky
Posts: 65
Computer Experience:
Sadly, no. I wish I was, because I really need updates too. Also, one step of the cleaning process never happened. Smitfraudfixe.exe never asked me about this:
#13
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hiipconfig /release ipconfig /flushdns ipconfig /renew
