Solved no internet access after running malwarebytes

evergreen

New Member
Thread author
Apr 15, 2015
13
A couple of days ago, after running malwarebytes antimalware program on my laptop and restarting it in order to solve slow browser and ad pops problems, I couldn't connect to websites. It seeems there is no problem with internet connection itself but I have no access to webpages, with the message "This page can't be displayed." In addition, I continue to get this error message:
C:\Windows\system32\WebWatcherLSP.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation mediaor contact your system administrator or the software vendor for support.

At first I tried system restore but it didnt solve the problem. So I tried to undo the system restore but failed with the error message above. Now system restore continues to fail. Every time I use a program, I get the same error message regading WebWatcher. I tried some repair and scanning programs, such as Windows Repair, FSS, tdsskiller, CCE, EFRC, Recuva Installer, but still have no access to webpages.
 

Attachments

  • FRST.txt
    23.1 KB · Views: 64
  • Addition.txt
    25.7 KB · Views: 32

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

  • fixlist.txt
    1.9 KB · Views: 82

evergreen

New Member
Thread author
Apr 15, 2015
13
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

Thanks. Here is the Fixlog.txt. I still have no access to webpages.
 

Attachments

  • Fixlog.txt
    5.7 KB · Views: 30

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
adwcleaner_new.png
Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your desktop.

  • Right-click on
    adwcleaner_new.png
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
  • Follow the prompts and click Scan.
  • When finished, please click Clean.
  • Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.


FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content into your next reply.
 

evergreen

New Member
Thread author
Apr 15, 2015
13
Here are the documents requested. You will find 3 AdwCleaner[S*].txt because I ran AdwCleaner 3 times. In the first scan AdwC singled out Webwatcher service and I cleaned it, but after restarting my laptop the error message regarding WebWatcher popped up again. In addition, I couldn't locate the Adw text document requested after the first running. So I ran it again and AdwC detected WebWatcher again. After the cleaning and restarting process, the problem persisted. So I ran it again in safe mode and the same thing happened. You may find some difference between the three AdwC documents. I re-ran FRST and attach the two files. Thank you.
 

Attachments

  • AdwCleaner[S0].txt
    4.1 KB · Views: 24
  • AdwCleaner[S1].txt
    2 KB · Views: 27
  • AdwCleaner[S2].txt
    2.1 KB · Views: 21
  • FRST.txt
    22.1 KB · Views: 23
  • Addition.txt
    23.6 KB · Views: 18

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
51a5bf3d99e8a-ComboFixlogo16.png
Scan with ComboFix

This is a very powerful tool that should be used only if advised by Malware Analyst.
Do not run ComboFix on your own!


Referring to this instruction, please download ComboFix by sUBs and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on
    51a5bf3d99e8a-ComboFixlogo16.png
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
  • Accept the disclaimer and agree if prompted to install Recovery Console.
  • Do not take any actions while ComboFix goes through your System - it may cause it to stall!
  • This scan may take some time!
  • When finished - it will display a logfile (located also on your main drive, usually C:\ComboFix.txt).

Include that log in your next reply.
icon_idea.gif
If you'll encounter any issues with internet connection after running ComboFix, please visit this link.
icon_idea.gif
If an error about operation on the key marked for deletion will appear after running the tool, please reboot your machine.
 

evergreen

New Member
Thread author
Apr 15, 2015
13
Thanks. Here is the ComboFix logfile. I ran ComboFix and the problems (no access to webpages and the WebWatcher error message) still persist.
 

Attachments

  • ComboFix.txt
    21 KB · Views: 28

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
3. Open notepad and copy/paste the text in the quotebox below into it:

Code:
File::
c:\windows\system32\drivers\wwwd.sys
c:\windows\system32\WebWatcherLSP.dll

Driver::
wwwd

Save this as CFScript.txt, in the same location as ComboFix.exe

CFScriptB-4.gif


Refering to the picture above, drag CFScript into ComboFix.exe
When finished, it will produce a log for you at C:\ComboFix.txt which I will require in your next reply.
 

evergreen

New Member
Thread author
Apr 15, 2015
13
Thanks, Argus. Here is the log you required. Still no access to webpages but no more error message regarding WebWatcher.
 

Attachments

  • ComboFix.txt
    19.7 KB · Views: 29

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content into your next reply.
 

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

  • fixlist.txt
    1.9 KB · Views: 50

evergreen

New Member
Thread author
Apr 15, 2015
13
Wow! It works. Now I have internet access back. Thank you so much for your help. Here is the logfile.
 

Attachments

  • Fixlog.txt
    8.5 KB · Views: 38

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
Very good.

Glad we could help. We will delete all used tools.


Download DelFix by Xplode and save it to your desktop.
  • Run the tool by right click on the
    51a5ce45263de-delfix.png
    icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run and wait until the tool completes his work.
  • All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt)
The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.
 

evergreen

New Member
Thread author
Apr 15, 2015
13
Yes, I did. Do you need the report? Delfix removed the tools we used. By the way, I still have some tools that I used before I asked for your help: CCE, Windows Repair, TDSSKiller, EFRCSetup, rcsetup152, Recuva, Eusing Free Registry Cleaner. Do I need to uninstall them?
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top