Suspicious Activity malware preventing access to Internet

[rick stritzinger]

Im having similar issues. When I installed and ran Zemana it stopped due to no internet connection.

 

[TwinHeadedEagle]

Hello,


Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
  
  
  
  
  
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

[rick stritzinger]

Attached is requested report. Fyi; since this began I've tried nearly every available tool and resolution with no avail and I am somewhat computer knowledgeable especially with malware/virus removal. Thanks in advance.

 

[rick stritzinger]

I also want to add a couple days prior to infection my Windows messaging center was asking to "update settings". After I updated the problems began, first with no internet connectivity and second Microsoft Security Client cannot start. Recently I noticed communication to printer is not available either.

 

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[rick stritzinger]

Ok done as instructed. Attached log. Note: when I ran Farbar it failed to update.

 

[TwinHeadedEagle]

You still have no internet?

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition.txt option is checked.
  
  
  
  
  
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please attach report into your next reply.

 

[rick stritzinger]

Correct, still no internet. Yesterday I manually updated Windows Defender and did a full 9 hour scan and found no threats. Also did TDSS with EWS selected, due to no internet, found traces but no threats. It actually said Farbar was "suspicious". Weird. Still cant open firewall and Windows Security Essentials. Attached are logs you requested. Oh, and I WILL be buying you a beer. Thanks again

 

[TwinHeadedEagle]

How does your internet icon look like? Do you have wired or wireless connection? No internet at all on your system or some apps can access it?

 

[rick stritzinger]

How does "Internet icon look"?? I'm not sure how to answer that. I have a wired connection and no internet at all. Even safe mode with networking. I unplugged ethernet and rebooted modem and router. I have another pc thats connected to same router that I'm using now to correspond with you and download tools etc. And the no internet is just one symptom. Microsoft essentials can not start(it's actually gone), i can't turn on firewall, System restore is unavailable, I cant communicate with printer. I manually updated Malewarebytes and scanned and found 1-2 threats that were removed.

 

[TwinHeadedEagle]

Do you have an exclamation mark on your internet connection icon in bottom right corner of your screen?

Scan with TDSSKiller

Please download TDSSKiller by Kaspersky and save it to your desktop.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Click on Change parameters and put a checkmark beside Loaded modules. A reboot will be needed to apply the changes, allow it to do so.
• Your machine may appear very slow and unusable after that - it's normal.
• TDSSKiller will run automaticaly. Click on Change parameters and click OK.
• Click the Start Scan button and wait patiently.

If anything will be found follow this guidelines:

• If a suspicious object is detected, the default action will be Skip, click on Continue.
• If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
  If Cure is not available, please choose Skip instead.
• Do not choose Delete unless instructed!

A report will be created in your root directory, (usually C:\ drive) in the form of TDSSKiller.[Version]_[Date]_[Time]_log.txt. Please include the contents of that file in your next post.

 

[rick stritzinger]

I thought thats what you meant about the icon but I was thinking something deeper. No icon on the desktop. I've attached a screenshot of desktop and tdsskiller log. And also on desktop Windows Action center notifies that "firewall and windows security center need turned on".

 

[TwinHeadedEagle]

You're missing driver for internet connection.

Command Prompt

• Press the
  
  + R on your keyboard at the same time. Type cmd and click OK.
• Copy/Enter the command below and press Enter:

• wmic baseboard get product,Manufacturer,version,serialnumber > %userprofile%\Desktop\report.txt

• Please attach report.txt from your Desktop.

 

[rick stritzinger]

You are correct. But surely a virus/malware caused this?? Maybe? Attached is the log however I determined the driver, downloaded from intel and tried to install but pc wouldnt allow me to. I also tried to update driver through Device manager and same result, pc wouldnt allow me to update/install driver. Ive attached screenshots of those as well. Man, this is a tough one. I can normally get these out myself.

 

[rick stritzinger]

ooops forgot attachments. Sorry

 

[TwinHeadedEagle]

Can you try some of these solutions:

There must be a real solution to "Windows found driver software for your device but encountered an error installing"

Error: "Windows found driver software for your device but encountered an error while attempting to install it, Error code: 18" with audio drivers on Windows 10

http://difusal.blogspot.rs/2010/10/windows-found-driver-software-for-your.html

 

[rick stritzinger]

OK Ill try those when I get back home. U don't think a virus a or malware is causing all these problems? Or if I get internet connectivity back I can fix other issues? Seems like malware would be causing firewall not to be close able so I'm open to hacks. Just my thoughts

 

[TwinHeadedEagle]

Nope, your computer isn't infected.

 

[rick stritzinger]

Do you mean its not infected with malware but perhaps theres a virus? Certainly something is affecting my pc for all these things to suddenly start happening.

 

[TwinHeadedEagle]

I will repeat, your computer isn't infected. Reports show you have some problem with your system and with the internet driver.

You can try this:

How to Manually Install Adapters on Windows 7 - TP-Link