Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Stuck on 'acquiring network address' from prior malware

Started by Groco57 , Feb 29 2012 12:45 PM

  • Please log in to reply

#1
Groco57
Posted 29 February 2012 - 12:45 PM

Groco57

    New Member

  • Member
  • Pip
  • 6 posts
Hi,

I had some malware issues in the past that I was able to clean up, however, I'm still having problems connecting to the internet wirelessly. I used to connect in my apartment and in coffee shops without a problem. Now, when I attempt to connect it shows a full signal strength but my computer isn't able to get beyond "acquiring network address." After a few attempts of various "fixes" I've found on Google nothing seems to be working. My OTL log is below.

Thanks for your help!


OTL logfile created on: 2/29/2012 12:24:50 PM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Adam\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1013.29 Mb Total Physical Memory | 414.67 Mb Available Physical Memory | 40.92% Memory free
2.38 Gb Paging File | 1.73 Gb Available in Paging File | 72.56% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 139.24 Gb Total Space | 106.18 Gb Free Space | 76.25% Space Free | Partition Type: NTFS

Computer Name: PLACES | User Name: Adam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Documents and Settings\Adam\Desktop\OTL1.exe (OldTimer Tools)
PRC - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
PRC - C:\Program Files\Battery Meter\BTMeter.exe (Dell)
PRC - C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe ()
PRC - C:\Program Files\CapsLKNotify\CapsLKNotify.exe (Compal Electronics, Inc)
PRC - C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\WSED\WSED.exe (Dell)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)


========== Modules (No Company Name) ==========

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e9ba004858dcdb5958d86f26f043f85a\System.Web.Services.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll ()
MOD - C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\ppgooglenaclpluginchrome.dll ()
MOD - C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\pdf.dll ()
MOD - C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\avutil-51.dll ()
MOD - C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\avformat-53.dll ()
MOD - C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\avcodec-53.dll ()
MOD - C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\gcswf32.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Dell DataSafe Online\SdbShared.dll ()
MOD - C:\Program Files\Dell DataSafe Online\SdbShared.XmlSerializers.dll ()
MOD - C:\Program Files\Dell DataSafe Online\SdbUI.dll ()
MOD - C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe ()
MOD - C:\Program Files\Dell DataSafe Online\BalloonWindow.dll ()
MOD - C:\Program Files\Dell DataSafe Online\CppUtils.dll ()
MOD - C:\WINDOWS\system32\EMSC.DLL ()
MOD - C:\WINDOWS\system32\preflib.dll ()
MOD - C:\WINDOWS\system32\bcm1xsup.dll ()


========== Win32 Services (SafeList) ==========

SRV - (AppMgmt) -- File not found
SRV - (mfefire) -- C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.)
SRV - (McShield) -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe ()
SRV - (mfevtp) -- C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe (McAfee, Inc.)
SRV - (McODS) -- C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (MSK80Service) -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McProxy) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McNASvc) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McNaiAnn) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (mcmscsvc) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McMPFSvc) -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)


========== Driver Services (SafeList) ==========

DRV - (mfehidk) -- C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfefirek) -- C:\WINDOWS\system32\drivers\mfefirek.sys (McAfee, Inc.)
DRV - (mfeavfk) -- C:\WINDOWS\system32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfeapfk) -- C:\WINDOWS\system32\drivers\mfeapfk.sys (McAfee, Inc.)
DRV - (mfendiskmp) -- C:\WINDOWS\system32\drivers\mfendisk.sys (McAfee, Inc.)
DRV - (mfendisk) -- C:\WINDOWS\system32\drivers\mfendisk.sys (McAfee, Inc.)
DRV - (mferkdet) -- C:\WINDOWS\system32\drivers\mferkdet.sys (McAfee, Inc.)
DRV - (mfetdi2k) -- C:\WINDOWS\system32\drivers\mfetdi2k.sys (McAfee, Inc.)
DRV - (cfwids) -- C:\WINDOWS\system32\drivers\cfwids.sys (McAfee, Inc.)
DRV - (mfebopk) -- C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (OAO17Afx) -- C:\WINDOWS\system32\drivers\OAO17Afx.sys (Creative Technology Ltd.)
DRV - (Monfilt) -- C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) -- C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (RSUSBSTOR) -- C:\WINDOWS\system32\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (CtClsFlt) -- C:\WINDOWS\system32\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (EMSC) -- C:\WINDOWS\system32\DRIVERS\EMSC.SYS (Windows ® Codename Longhorn DDK provider)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Help_Page = http://support.dell....c=us&l=en&s=gen
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://g.msn.com/USCON/1

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)



========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\pdf.dll
CHR - plugin: Java Deployment Toolkit 6.0.170.4 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll
CHR - plugin: Java™ Platform SE 6 U17 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Adobe Acrobat (Enabled) = c:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\3.0.40624.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: AT_KarimRashidV3 = C:\Documents and Settings\Adam\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ldjcbfljkplgifccngillicohclloidg\3\

O1 HOSTS File: ([2012/02/14 19:28:10 | 000,000,736 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Program Files\McAfee\MSK\mskapbho.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20101201013240.dll (McAfee, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [BTMeter] C:\Program Files\Battery Meter\BTMeter.exe (Dell)
O4 - HKLM..\Run: [CapsLKNotify] C:\Program Files\CapsLKNotify\CapsLKNotify.exe (Compal Electronics, Inc)
O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe ()
O4 - HKLM..\Run: [dellsupportcenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [WSED] C:\Program Files\WSED\WSED.exe (Dell)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.3 192.168.2.72 192.168.1.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6E3E09E6-3B2B-4F74-83D4-74E9CCF0AC81}: DhcpNameServer = 192.168.2.3 192.168.2.72 192.168.1.22
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Adam\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Adam\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/25 19:45:49 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/02/29 12:15:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\McAfee
[2012/02/28 22:42:38 | 004,406,784 | ---- | C] (Geza Kovacs) -- C:\Documents and Settings\Adam\Desktop\unetbootin-xpud-windows-387.exe
[2012/02/14 20:00:38 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Adam\Desktop\OTL1.exe
[2012/02/14 19:37:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Xirrus
[2012/02/14 19:37:22 | 000,000,000 | ---D | C] -- C:\Program Files\Xirrus
[2012/02/14 19:36:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Local Settings\Application Data\Downloaded Installations
[2012/02/14 19:33:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2012/02/14 01:18:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2012/02/14 00:22:36 | 000,000,000 | ---D | C] -- C:\FRST
[2012/02/13 10:31:21 | 000,044,544 | ---- | C] (Absolute Software Corp.) -- C:\WINDOWS\System32\agremove.exe
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/02/29 12:15:53 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/02/29 12:15:51 | 1062,580,224 | -HS- | M] () -- C:\hiberfil.sys
[2012/02/28 23:52:00 | 000,000,974 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2491742117-680201500-1569145135-1006UA.job
[2012/02/28 22:46:21 | 067,108,864 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\xpud-0.9.2.iso
[2012/02/28 22:42:47 | 004,406,784 | ---- | M] (Geza Kovacs) -- C:\Documents and Settings\Adam\Desktop\unetbootin-xpud-windows-387.exe
[2012/02/28 17:52:00 | 000,000,922 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2491742117-680201500-1569145135-1006Core.job
[2012/02/28 14:42:42 | 000,032,198 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\adria4.jpg
[2012/02/28 14:39:03 | 000,024,259 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\adria3.jpg
[2012/02/28 14:38:39 | 000,025,235 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\adria2.jpg
[2012/02/28 14:38:13 | 000,024,956 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\adria.jpg
[2012/02/26 23:55:39 | 000,464,526 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/02/26 23:55:39 | 000,079,636 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/02/26 15:56:11 | 000,039,958 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\5.jpg
[2012/02/26 15:56:11 | 000,039,958 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\5 (2).jpg
[2012/02/26 15:53:55 | 000,070,012 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\4.jpg
[2012/02/26 15:53:09 | 000,080,339 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\3.jpg
[2012/02/26 15:51:32 | 000,058,861 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\2.jpg
[2012/02/26 15:50:44 | 000,197,296 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\1.jpg
[2012/02/25 20:37:11 | 000,009,216 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\Ladies.wps
[2012/02/25 20:37:11 | 000,000,486 | ---- | M] () -- C:\Documents and Settings\Adam\Application Data\wklnhst.dat
[2012/02/25 15:27:28 | 000,002,379 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\Microsoft Works Word Processor.lnk
[2012/02/21 00:53:30 | 000,002,279 | ---- | M] () -- C:\Documents and Settings\Adam\Desktop\Google Chrome.lnk
[2012/02/21 00:53:30 | 000,002,257 | ---- | M] () -- C:\Documents and Settings\Adam\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/02/21 00:45:56 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/02/15 23:28:25 | 000,182,632 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/02/15 13:09:57 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/02/14 20:26:21 | 000,018,432 | ---- | M] () -- C:\Documents and Settings\Adam\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/02/14 20:00:38 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Adam\Desktop\OTL1.exe
[2012/02/14 19:38:47 | 000,002,413 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Xirrus Wi-Fi Inspector.lnk
[2012/02/14 19:28:10 | 000,000,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012/02/13 10:31:39 | 000,044,544 | ---- | M] (Absolute Software Corp.) -- C:\WINDOWS\System32\agremove.exe
[2012/02/12 17:09:18 | 000,012,288 | ---- | M] () -- C:\Documents and Settings\Adam\My Documents\Untitled Document.wps
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/02/28 22:44:46 | 067,108,864 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\xpud-0.9.2.iso
[2012/02/28 14:42:54 | 000,032,198 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\adria4.jpg
[2012/02/28 14:39:12 | 000,024,259 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\adria3.jpg
[2012/02/28 14:38:49 | 000,025,235 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\adria2.jpg
[2012/02/28 14:38:30 | 000,024,956 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\adria.jpg
[2012/02/26 15:56:10 | 000,039,958 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\5 (2).jpg
[2012/02/26 15:54:08 | 000,039,958 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\5.jpg
[2012/02/26 15:53:58 | 000,070,012 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\4.jpg
[2012/02/26 15:53:14 | 000,080,339 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\3.jpg
[2012/02/26 15:51:36 | 000,058,861 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\2.jpg
[2012/02/26 15:50:55 | 000,197,296 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\1.jpg
[2012/02/25 15:28:21 | 000,009,216 | ---- | C] () -- C:\Documents and Settings\Adam\Desktop\Ladies.wps
[2012/02/14 19:37:32 | 000,002,413 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Xirrus Wi-Fi Inspector.lnk
[2012/02/14 18:54:57 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/02/14 18:54:57 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2010/06/08 19:06:01 | 000,018,432 | ---- | C] () -- C:\Documents and Settings\Adam\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/06 20:27:16 | 000,000,486 | ---- | C] () -- C:\Documents and Settings\Adam\Application Data\wklnhst.dat
[2010/06/06 20:03:52 | 000,002,164 | ---- | C] () -- C:\Documents and Settings\Adam\Application Data\install.dat
[2010/02/11 09:57:28 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2010/02/11 09:56:27 | 000,077,824 | ---- | C] () -- C:\WINDOWS\setpwr32.exe
[2010/02/11 09:52:24 | 000,001,155 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2010/02/11 08:48:14 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2010/02/11 08:30:36 | 000,000,076 | RHS- | C] () -- C:\WINDOWS\CT4CET.bin
[2010/02/11 08:23:09 | 000,577,536 | ---- | C] () -- C:\WINDOWS\System32\EMSC.DLL
[2010/02/11 08:22:13 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2010/02/11 08:22:12 | 000,753,664 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll
[2010/02/11 08:22:12 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\WLTRYSVC.EXE
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/25 19:47:34 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008/04/25 19:44:05 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008/04/25 19:42:57 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2008/04/25 14:33:19 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/04/25 14:33:18 | 000,464,526 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008/04/25 14:33:18 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008/04/25 14:33:18 | 000,079,636 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008/04/25 14:33:18 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008/04/25 14:33:17 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008/04/25 14:33:17 | 000,004,627 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008/04/25 14:33:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2008/04/25 14:33:14 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008/04/25 14:33:14 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008/04/25 14:33:10 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008/04/25 14:33:06 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008/04/25 07:39:19 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008/04/25 07:38:33 | 000,182,632 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini

========== LOP Check ==========

[2010/06/10 22:57:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Application Data\Absolute
[2010/12/24 01:27:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Application Data\Absolute_Software
[2010/06/06 20:27:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Application Data\Template
[2010/02/11 08:21:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Application Data\Windows Desktop Search
[2010/06/07 22:57:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Application Data\Windows Search
[2012/02/12 17:00:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\cNgKh06308
[2010/02/11 08:29:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PCDr
[2010/02/11 08:29:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SupportSoft
[2010/02/11 08:23:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Vista32
[2010/02/11 08:23:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Vista64
[2010/02/11 08:23:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Win732
[2010/02/11 08:23:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Win764
[2010/02/11 08:24:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\XP32
[2010/06/08 20:44:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

========== Purity Check ==========



< End of report >
  • 0

Advertisements

#2
RKinner
Posted 29 February 2012 - 03:37 PM

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP
Start, All Programs, Accessories then Command Prompt. Type (with an Enter after each line):

net  start  dhcp

net  start  tcpip

net  start  afd

net  start  netbt

If the service/driver is running it will say:

The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


I expect DHCP will not start because of a dependency and that at least one of the other three will not be started and may even say it doesn't exist.

Let me know which ones aren't running already.

Ron
  • 0

#3
Groco57
Posted 29 February 2012 - 04:28 PM

Groco57

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
Hi Ron,

Thank you very much for your reply. When I entered in those commands each one of them gave me the same message: "The requested service has already been started." I'm not in a place where wireless internet is available. I'm assuming it would act the same if it were?

Thank you for your help,
Adam
  • 0

#4
RKinner
Posted 29 February 2012 - 04:52 PM

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP
Shouldn't make any difference for those commands.

Can you connect with a cable? Does that work?

Does the command:

ipconfig

work?

Should give you something like when trying to connect wirelessly:


Windows IP Configuration


Ethernet adapter Local Area Connection 2:

Media State . . . . . . . . . . . : Media disconnected

Ethernet adapter Wireless Network Connection:

Connection-specific DNS Suffix . : msevents.local
IP Address. . . . . . . . . . . . : 172.16.25.66
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 172.16.25.1

Are you using a program that came with your wireless or are you using Windows to control the wireless?

What make and model PC and wireless (if not builtin)?

Are you using encryption on your link? If so what kind, 64 or 128bit?
  • 0

#5
Groco57
Posted 01 March 2012 - 10:45 AM

Groco57

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
Hi Ron,

Yes, I can connect to the internet with a cable just fine. It does the same "aquiring network address" for a minute, but then it finishes and actually connects - unlike when I attempt to connect wirelessly.

When I typed in that command I got exactly what you posted: "media disconnected" and then below it my wired connection IP address and such.

I'm just using whatever program came with my computer to connect. It worked perfectly fine before.

The computer is a Dell Inspiron Mini 1012.

I'm unsure of how to check if there's encryption. I hadn't set anything up.

Thank you very much for your help,
Adam
  • 0

#6
RKinner
Posted 01 March 2012 - 11:48 AM

RKinner

    Malware Expert

  • Expert
  • 24,625 posts
  • MVP
Right click on My Computer and select Manage then Device Manager. In the right pane find the Network Adapters entry and click on the + in front of it to open up the subentries. Find the one that refers to wireless (I expect it will say Atheros ) and right click on it and Uninstall. Reboot. It will redetect it and reinstall it which may fix the problem. If not, go to Dell Support:
http://www.dell.com/support/drivers

Put in your service tag or go through the selection process and find the Wifi driver under Network.

I think it should be http://www.dell.com/...leId=2731091769 which is the Atheros Atheros AR9285 802.11b/g/n WiFi Adapter but make sure it matches the company name that you saw in Device Manager.

If that doesn't help then try letting Windows handle the wireless:

http://www.purenetwo...rt/faq/139.html
  • 0

#7
Groco57
Posted 01 March 2012 - 11:53 PM

Groco57

    New Member

  • Topic Starter
  • Member
  • Pip
  • 6 posts
Uninstalling and reinstalling my wireless manager did it. It's all better now. Thank you very much for your help, Ron.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP