[cahele]

When i run GMER in the midle of the process it gives an error and the computer restarts.

[Advertisements]

Hi,

You must first verify that you can logon to the Windows Recovery Console.
To do so, you must have the Recovery Console installed or use the Windows XP installation cd.

How to install and use the Windows XP Recovery Console


Next, please download maxlook, saving the file to your desktop.
Double click maxlook.exe to run it. Note - you must run it only once!
As instructed when the tool runs, restart the computer and logon to the Recovery Console.
Execute the following bolded command at the x:\windows> prompt <--- the red x represents your operating system drive letter, usually C

batch look.bat




You will see 1 file copied many times then return to the x:\windows> prompt.
Type Exit to restart your computer then logon in normal mode.
Please run maxlook.exe again now. Note - you must run it only once!
It will produce looklog.txt on the desktop and open it.
Please post the results here.

[hammerman]

Hi,

You must first verify that you can logon to the Windows Recovery Console.
To do so, you must have the Recovery Console installed or use the Windows XP installation cd.

How to install and use the Windows XP Recovery Console


Next, please download maxlook, saving the file to your desktop.
Double click maxlook.exe to run it. Note - you must run it only once!
As instructed when the tool runs, restart the computer and logon to the Recovery Console.
Execute the following bolded command at the x:\windows> prompt <--- the red x represents your operating system drive letter, usually C

batch look.bat




You will see 1 file copied many times then return to the x:\windows> prompt.
Type Exit to restart your computer then logon in normal mode.
Please run maxlook.exe again now. Note - you must run it only once!
It will produce looklog.txt on the desktop and open it.
Please post the results here.

[cahele]

Run from C:\Dokumente und Einstellungen\Caro\Desktop\maxlook.exe on 12/05/2010 at 18:08:57,32

No infected file found

Ok, this is the maxlook log... Thanks, aparently I'm virus free; I still cann't connect to internet and I don't know if you can help me??

Thanks again!!

[hammerman]

Hi,

See if these steps will fix your internet.

• Please go to Start > Control Panel > Network and Internet Connections > Network Connections.
• Right-click on your default connection, usually Local Area Connection or Dial-up Connection if you are using dial-up.
• Left-click on the Properties option.
• Double-click on the Internet Protocol (TCP/IP) item and select the radio button that says "Obtain DNS servers automatically".
• Click OK twice, and restart your computer.

• Go to Start then to Run...
• In the Open: box, type in Cmd and click OK to open a command window.
• Type in ipconfig /flushdns then click Enter
• Type in ipconfig /release all then click Enter
• Now type in ipconfig /renew all and click Enter
• Type in Exit and click Enter to exit the command window.

[cahele]

Hi thanks for answering!

Ive done this ipconfig several times and it keeps on disconnected or in the repair option it stays trying to read the ip address...

Do you have another idea??

Thanks again

[hammerman]

Hi,

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
• Copy the content of the following codebox into the main textfield:
  

  :filefind
  netbt.sys

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

[cahele]

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 20:55 on 18/05/2010 by Caro (Administrator - Elevation successful)

========== filefind ==========

Searching for "netbt.sys"
C:\WINDOWS\maxdriver\NetBT.sys --a--- 0 bytes [00:08 19/06/2009] [19:25 05/05/2010] D41D8CD98F00B204E9800998ECF8427E
C:\WINDOWS\system32\drivers\NetBT.sys --a--- 0 bytes [00:08 19/06/2009] [19:25 05/05/2010] D41D8CD98F00B204E9800998ECF8427E

-=End Of File=-

No idea what is this for but THANKS!!

[hammerman]

Hi,

The file is not correct and we need to find a replacement.

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

SRPeek::
C:\WINDOWS\system32\drivers\NetBT.sys

Save this as CFScript.txt, in the same location as ComboFix.exe




Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

[hammerman]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.