computer problems

[XJ Stryker]

Ok for all you computer gurus

My co-worker got a viruse. SystemPro anti-virus VIrus. Basically it holds your computer hostage till you pay them to get rid of it. Then I think they hijack all your info at the same time.

Well I was able to disable the virus with his virus protection software in Safe Mode.

Ever since then he has not been able to connect to the internet.

I have tried the whole IPconfig /release and renew along with a DNS FLUSH. I made sure is TCIP protocols were good.

He can however connect to the internet with a Wireless Verizon card. Just not with Lan Cable or his internal wireless.

Please give me some new Ideas if you have any. Thanks

 

[themangeraaad]

My boss had the same issue, but cant remember what he had to do :banghead:

IIRC he told me that he had to run malwarebytes or whatever the antivirus program was, which deleted the virus, then there was another registry file he had to delete or something. He just said that he found out how to fix it by searching google for something along the lines of: lost internet after removing spyware

Sorry I can't be more specific...

 

[kastein]

make sure nothing played tricks with his hosts file (though that's not what's causing the issue) - look in the windows folder under system32\drivers\etc\ for a file named hosts, read it with notepad, check if there is anything except a localhost definition in it. How are you checking if he can connect to the internet? If you're using a browser make sure the proxy connection settings did not get tampered with.

 

[JNickel101]

I hope this isn't the one that's a rootkit virus....otherwise, it is a b***h to get rid of.

x2 on Malwarebytes - probably the best anti-spyware program out there.

 

[CherBear]

x3 malewarebytes

 

[XJ Stryker]

make sure nothing played tricks with his hosts file (though that's not what's causing the issue) - look in the windows folder under system32\drivers\etc\ for a file named hosts, read it with notepad, check if there is anything except a localhost definition in it. How are you checking if he can connect to the internet? If you're using a browser make sure the proxy connection settings did not get tampered with.

I am connected to the Internet by my own computer. I am helping him with his. Although I am not much help.

Spybot search and destory is what I have been using for years. I am sure malwarebytes is just as good. that isn't the problem anymore.

I have gotten rid of the virus but the effects of what it caused still remain. I will search his System files and see what I can find.

 

[RTicUL8]

Make sure you that you also get rid of the system restoral points after clearing the infection.

 

[Mesh]

run LSP-Fix to check for TCP/IP problems http://www.cexx.org/lspfix.htm

run autoruns.exe http://live.sysinternals.com/ make sure the SystemPro anti-virus is removed from the startup and delete the program if you have not already done so.

If running 2000 or XP get Temp File Cleaner and run it. this will delete all temp files and restore points http://software.addpcs.com/tfc/index.php program requires java to run.

Install and run a full scan with Malwarebytes and superantispyware with the latest deinitions. after cleaning restart and run a second time.

 

[Mesh]

Spybot is a great program with useful tools but I stopped using it to clean adware/spyware. These programs have gotten harder to remove over the years and spybot has not changed for that. Superantispyware and malwarebytes get (some of) the hard stuff.

 

[RichP]

I get rid of it by booting with a hawkpe cd, delete the directory in program files then reboot the machine. Then I ran winsocxpfix. there was some other stuff but after 3 of them I locked the users down till they squeaked. No problems since then

 

[muduck18]

I won't say it... I promise...

:-X

 

[XJ Stryker]

I am thinking about sending the computer to Chuck Norris now

(insert Norrisism here)

For real I will try the Ideas in the morning.

I will report back what I find. THanks

 

[XJ Stryker]

No luck on any of the above mentioned solutions. It is a work computer so he is sending it in to CSC now.

Thanks for the attempts.