[Conrad 678]

Something happened and I can no longer get onto the internet (I currently use IE). I tried to load Firefox and Opera and both load but I cannot open either one. I think I have a virus/trojan or something. I followed your guide up to the point where you asked to post a log after the MBAM. Here it is:

Malwarebytes' Anti-Malware 1.44
Database version: 3642
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

1/26/2010 7:15:02 PM
mbam-log-2010-01-26 (19-15-02).txt

Scan type: Quick Scan
Objects scanned: 123438
Time elapsed: 13 minute(s), 49 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\{F9197A7E-CE10-458e-85F8-5B0CE6DF2BBE} (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I still cannot access the internet. Please help.

Thanks!

[Advertisements]

In IE, Tools, Internet Options, Connections, LAN Settings, then uncheck all boxes and OK. Close IE and restart.

Any better?

If not tell me what version of windows you have and how you connect to the internet.

Ron

[RKinner]

In IE, Tools, Internet Options, Connections, LAN Settings, then uncheck all boxes and OK. Close IE and restart.

Any better?

If not tell me what version of windows you have and how you connect to the internet.

Ron

[Conrad 678]

No change. I am usine IE8 and I connect wirelessly.

Thanks!

[RKinner]

Internet was down on the island for a while. Seems to be OK now.

I still need to know what version of Windows you have (XP, Vista, 7 or?)

We can run a few tests to see if we can figure out what is going on.

Start, Run, cmd, OK. This will open up a command window. Type (with an Enter after each line)

ipconfig /all

(Normally you get something like this:


Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . : domain_not_set.invalid
Link-local IPv6 Address . . . . . : fe80::15d5:251b:acb:4626%12
IPv4 Address. . . . . . . . . . . : 192.168.0.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1


Do you get something similar to this or does it say disconnected after Wireless LAN adapter Wireless Network Connection?

If you get something similar to above what IPv4 Address do you get? Most wireless routers will use either 192.168.0.x or 192.168.1.x. If you get one that starts with 169. then your PC was unable to get an IP address from the router.

Assuming you have a decent IP address, note the Default gateway (192.168.0.1 in the above example) and type:

ping 192.168.0.1

(You should get something like this:

Pinging 192.168.0.1 with 32 bytes of data:
Reply from 192.168.0.1: bytes=32 time=2ms TTL=255
Reply from 192.168.0.1: bytes=32 time=2ms TTL=255
Reply from 192.168.0.1: bytes=32 time=12ms TTL=255
Reply from 192.168.0.1: bytes=32 time=2ms TTL=255

Ping statistics for 192.168.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 12ms, Average = 4ms

Do you or does it say Lost = 100%? )

If it works you can talk to your router so let's check the DNS. )

nslookup att.com

(This is what I get:
Server: dslmodem.domain
Address: 192.168.0.1

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Non-authoritative answer:
Name: att.com
Addresses: 144.160.143.51
144.160.1.81

The important thing is that I get the two addresses at the bottom. If you get them then the DNS is working. Let's check the connection to the internet: )

tracert -d f1.com

(that's tracert SPACE -d SPACE f ONE dot com You should get something like this:

Tracing route to f1.com [195.69.153.8]
over a maximum of 30 hops:

1 3 ms 2 ms 2 ms 192.168.0.1
2 20 ms 18 ms 19 ms 69.29.184.8
3 19 ms 17 ms 18 ms 209.206.160.4
4 23 ms 18 ms 20 ms 206.51.71.125
5 19 ms 18 ms 19 ms 216.156.100.13
6 36 ms 37 ms 36 ms 207.88.13.150
7 37 ms 37 ms 38 ms 207.88.12.186
8 50 ms 37 ms 38 ms 64.125.12.181
9 40 ms 42 ms 40 ms 64.125.27.94
10 39 ms 40 ms 60 ms 64.125.28.13
11 39 ms 40 ms 42 ms 64.125.26.197
12 116 ms 116 ms 116 ms 64.125.26.230
13 116 ms 115 ms 116 ms 64.125.26.97
14 185 ms 186 ms 185 ms 64.125.27.58
15 186 ms 186 ms 187 ms 213.152.240.6
16 188 ms 187 ms 187 ms 195.69.153.8

Trace complete.

The important thing is that it says Trace Complete. If you get this far we have connectivity to the internet. Now let's check your hosts file.)

notepad \windows\system32\drivers\etc\hosts

(notepad will open. This is what it should look like in XP or Vista:

# Copyright © 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
::1 localhost

The lines that start with # are comments and are ignored. The two bottom lines where it says localhost are all you need. Delete anything below them and then File, Save and exit.

I'll stop now until I hear where yours fails. )

Ron

[Conrad 678]

I am fine unitl I get to: notepad \windows\system32\drivers\etc\hosts

I type that in but it says "The system cannot find the path specified.

Lemme know.

Thanks!

Steve

[Conrad 678]

Oh, and I forgot, I have Windows XP.

Sorry

[Conrad 678]

Now for some reason it worked. This is what printed out:

# Copyright © 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost


Thanks for your help thus far.

Steve