Page 2 of 3

Posted: Tue Feb 09, 2010 11:39 pm
by Mattheww044
yea, Ive been reading up on programs like that, and I guess they randomize their file names, so its something rediculous like random numbers and letters, so there isnt much of a way to trace it. I will try to DL that program recommended onto a flash drive, and then put it on my computer and see how that works! Wish me luck! haha

Posted: Wed Feb 10, 2010 4:55 am
by fishbone79
Yes, but if you know the directories and timestamps of when the fecal matter hit the rotary oscillator than you'll know what to delete.

Good luck getting rid of it! I have a few legal windows XP pro keys that I have no use for - and an .iso of the install disc, if you want them.

Posted: Wed Feb 10, 2010 7:40 pm
by Mattheww044
is that all I would need to "reformat" it?

Posted: Thu Feb 11, 2010 10:02 pm
by fishbone79
It should be all you need... You might have driver issues though. If it's a dell, just go to their website, put in the service tag, and the drivers should be there to download. Only ones you really need are sound card, video card and network card. There will be about 50 things on the page though.

Posted: Fri Feb 12, 2010 2:58 am
by Mattheww044
its an e-machines. ive heard nothing but bad things about them, but mine has been great for the last 8ish years Ive had it

Posted: Mon Feb 15, 2010 11:45 pm
by Mattheww044
OK, now I believe I got rid of the software. But still no internet, the software must have somehow changed my internet settings. I know that it somehow created its own IP address, which I had to delete (and did) according to a site I found online that give steps on how to remove the software. Any Ideas why my internet wouldn't work or what I could check though? It just says the usual "internet explorer cannot display this page"

Posted: Mon Feb 15, 2010 11:55 pm
by Buffman
check your host file under windows/system32/drivers/etc. Use notepad to open it. If the bad juju played with it, It will have all sorts of IPS in there. If you have spybot you'll see liek 127.0.0.1 or something, That's fine, but anything else (if you didn't put it there), shouldn't be in there. Check and make sure the stuff didn't turn on a proxy.. Under internet options and connection.

Matt

Posted: Wed Feb 17, 2010 4:55 am
by SubiePrice88
I just got a New laptop and Im scared to use photobucket now...

Posted: Wed Feb 17, 2010 8:43 pm
by Mattheww044
it looks like it did turn on a proxy, i unchecked the box, and still nothing... im so lost. Im thinking about just taking it in or getting a new computer... if only I were rich

Posted: Wed Feb 17, 2010 11:59 pm
by Buffman
what virus program, and what software firewall if any exist on the computer? Did you check the host file? You can always try flushing the dns cache too. ipconfig /flushdns

Posted: Thu Feb 18, 2010 9:40 am
by Mattheww044
i don't even know what half that is haha Ive heard of it, but don't know much about that kinda stuff. So I think Im kinda screwed for that part of it

Posted: Fri Feb 19, 2010 4:25 am
by fishbone79
open up a terminal (start>programs>accessories>command prompt) and type:

ipconfig /flushdns

then:

ipconfig /release
ipconfig /renew

Those commands are a bit redundant, but its ok. After you've run that last one, wait a couple seconds, then run:

ipconfig /all

and look down the list to see if you're being assigned an IP address from the router. If you are, then you should be able to get online. If you don't have an IP, then you're network stack is probably hosed. If you don't see it the first time you check, wait a minute or two and check it again, sometimes the re-registry takes longer than it should.

Posted: Fri Feb 19, 2010 9:52 am
by Mattheww044
ok, once I get home tomorrow I will definately try that. Thanks sooo much for your help guys. hopefully that tells me whats wrong at least.

Posted: Sat Feb 20, 2010 9:51 pm
by Mattheww044
Ok

"could not flush the DNS reserver cache: function failed during execution"

"ip address for adapted Local area connection has already been released"

"an error occurred while renewing interface local area connection: the RPC server is unavailable"

When I type ipconfig all the ip address is just 0.0.0.0

You can pm me if you want to help me any further, and thanks alot for your time

Posted: Sat Feb 20, 2010 10:47 pm
by Buffman
have u run malwarebytes yet or spybot search and destroy? Download a program called rkill.com from bleepingcomputer. That will stop any process currently running to allow malwarebytes or SPybot to find things.

Posted: Sun Feb 21, 2010 4:11 am
by Mattheww044
I will have to try to find those. Can I just DL the program on this computer, burn it to a disc, and the DL it on my computer?

Posted: Sun Feb 21, 2010 4:23 am
by fishbone79
Yes. Sounds like your network stack might be corrupted. There is a way to fix it. Sorry for the limited reply, on my phone.... Will post back later.

Posted: Sun Feb 21, 2010 4:48 am
by Mattheww044
ok thank again for the help guys

Posted: Sun Feb 21, 2010 6:11 am
by Buffman
yeah you can burn them to a disc and then run them on another PC.

Posted: Mon Feb 22, 2010 2:50 am
by Mattheww044
ok, so finally DLed malwarebytes to my computer, ran that. It found 1 infection, and I removed it. Still no internet though. And I tried
flush/release/renew again, and still the same results

Posted: Mon Feb 22, 2010 3:37 am
by Buffman
can you get in safe mode or go to windows update?


Did you download and execute the rkill.com program before running the Mlwarebytes? Run Spybot search and destroy also.

Posted: Mon Feb 22, 2010 3:55 am
by Mattheww044
i can get into safe mode. Havent tried windows update, but im guessing its internet related, so I most likely cant do it. I didn't do search and destroy yet, Ill go start that and post the results

Posted: Mon Feb 22, 2010 5:42 am
by Mattheww044
spybot didn't catch anything. So the "virus" should be gone now. Just need to figure out why I don't have internet. How would I not have an IP address? and how would I "reset" mine or w/e?

Posted: Mon Feb 22, 2010 5:43 am
by Buffman
LMK what Spybot comes up with, I probably have on more program for you to run after that can get us a log of what's going on.

Posted: Mon Feb 22, 2010 5:47 am
by Mattheww044
spybot came up with nothing, and malwarebytes came up with 1 thing, and I removed that. What else ya got in store for me? haha