Spyware Protect 2009 killed LAN/WAN access

April 26, 2009 at 07:19:02
Specs: Windows XP
I somehow got Spyware Protect 2009 on my PC (even though AVG was running). I thought I had removed it with Malwarebytes Anti-Malware but it has now blocked me accessing my LAN and the internet... (I am having to use a friends PC to access this site)

I have run scans on both Malwarebytes Anti-Malware and Super AntiSpyware Free Edition but as I cannot update the virus database in either program via the net the scans may not be finding the very newest virus'

The Malwarebytes Anti-Malware scan did seem to remove Spyware Protect 2009 initially but still I cannot access anything on either the LAN or the internet. I cannot use system restore to rollback either and I have also noticed when trying to start the Windows Firewall I get this message:

"Windows cannot start the Windows Firewall/Internet Connections Sharing (ICS) service"

Please can somebody help me resolve this problem?

edited by moderator: HJT Log deleted

See More: Spyware Protect 2009 killed LAN/WAN access

Report •

April 26, 2009 at 16:10:21
Go to Services (services.msc in the Run box is one method).

Look down the list for
"Windows Firewall/Internet Connection Sharing (ICS)".

It should be set to Automatic - if it's not, double click the
entry and change it.

some other bloke...

Report •

April 27, 2009 at 08:41:48
Use another PC and print out Spyware protect manual removal guide. Then search for related files and processes. There's might be left some undeleted. Detailed manual removal guide:

Report •

April 27, 2009 at 12:31:03
cheers for the replies... unfortunately these suggestions have still not fixed the problem!!

I went to the services list and the "Windows Firewall/Internet Connection Sharing (ICS)" was already set to automatic.... I tried clicking the 'Start the service' button and got this error message:

"Could not start the Windows Firewall/Internet Connection Sharing (ICS) service on Local Computer.

Error 2: The system cannot find the file specified."

I then ran the Spyhunter scan and also searched for all the files in both the manual removal guides but found none of the files/proccesses/registry entries linked with the virus (I think my previous Malwarebytes Anti-Malware scan must have already removed them).

I also reset Internet Explorer as Hertinas suggested but still no success.

Another thing I have now noticed is when I am trying to access Ipconfig in DOS I get an error message "An internal error occurred: The request is not supported". The additional information says 'Unable to query host name'. I get the same error message for all IPconfig dos commands!

What is going on??

Ps. Just as I was writing this my PC found a number of usp10.dll files (in different folders) which are supposed to be a threat according to the pcthreat site. I deleted all the files but was unable to remove the one in the system32 folder(even in safe mode). After searching the net it seems this file is needed by windows to run but could this file be the problem?

Report •

Related Solutions

April 27, 2009 at 13:17:22
also have noticed scandisk doesn't work either!!

Report •

April 27, 2009 at 15:28:50
combofix sorted it

Report •

April 27, 2009 at 15:44:57
That's good news. Thx for letting us know what fixed it.

some other bloke...

Report •

May 1, 2009 at 11:08:56
I have almost exactly the same problem. Same malware. I removed it, but I'm still having three problems (that I know of):

1. No Internet access.
2. The BITS service won't start.
3. The Automatic Update service won't start. (error 0x80072772)

I have posted more information on this under the following topic:


I'm not trying to post the same problem twice, but I did want to see if bigjeff80 might be willing to offer more details on how he solved it. Thanks! -dave

Report •

Ask Question