viruses disable internet & AV install/update

Toshiba tablet pc / Satellite r15
January 15, 2010 at 00:59:10
Specs: Win XP Tablet 2005 SP3, Intel Pentium M 1.70GHz, 0.98GB RAM
Please help. I noticed my laptop acting up last week. It
was agonizingly slow. Then mozilla started redirecting
pages to google search. Then it hangs and I have to
reboot again and again. Then I tried downloading and
installing AVs, etc like HijackThis, Rootkitbuster,
CWShredder, Spybot, Malewarebytes, AVG, Avast. Only
CWShredder and AdAware ran but none would update.
When I run Norton, it hangs so I'd have to reboot again. I
can't get an internet connection according to IE8
browser but all indications say I do. What can I do to get
my laptop running again when all the treatments I use
are being blocked. Any assistance will b greatly
appreciated.

See More: viruses disable internet & AV install/update

Report •


#1
January 15, 2010 at 09:27:32
I just went through this last night. Took me 4 hrs to finally get all fixed. I got lucky though.. don't know if my solution will help. First off.. your IE is probably blocked by a fake proxy. Go to Tools - Internet Options - Connections tab - Lan Settings button. Uncheck 'Use a proxy server....' The virus selected that for me and then used a proxy script to only allow access to their site at "desktopantivirus.net"... a "buy me now" site to fix your problems that they gave you.
Unfortunately, after the first click to google, which worked, the box gets checked again and internet access blocked again.
What I did was download Malwarebytes and after running it the first time, it did nothing to fix. It needed to update and couldn't. Now.. you "should" be able to go into "Safe mode with networking" to allow for this, but it wasn't working on mine. I couldn't get an internet connection. I went to shut down by holding my power button down.. and you know how Windows stars shutting down all your programs/services before it goes all the way off? It did this to all the virus crap first.. all the popups went away... and the new systray icon wasn't reporting a message now. I quickly lifted my finger, so the machine wouldn't reboot all the way. Tested IE.. voila.. internent connection now worked. I launched Malwarebytes again.. and this time the update worked. After a 6 hour scan (overnight), all remnants of the virus are now gone.

Like I said.. this solution may not work for you, but at least find somewhere to get MalwareBytes on your computer with the latest updates. It will work.. just hard to get there.


Report •

#2
January 16, 2010 at 05:15:16
Surprisingly, I was able to run Avast on safe mode. It found around
10 or so virus/trojan-affected files. I tried to move each file to
chest (quarantine) but it displayed error messages, about rpc and
chest server down. I'm worried about deleting important files so I
just chose 'rename/move'. I guess it didn't work because they
started popping out again on my next reboot. ↲↲
I did try your suggestion, yy4u2rl82. But in my case, I already ticked
off the proxy server box and its still redirecting the pages.
Especially when I try to go to Malewarebytes.org, they're pretty
intense not to let me get there. ↲↲
So, I tried to download Prevx. I made it my homepage so that
Google Chrome (comes with Avast) has no choice but to open at
that page. Haha! But alas, when I tried to run it, it failed and said
that maybe a virus is keeping it from opening. ↲↲Housecall
wouldn't run either. But I was able to get a log of HijackThis on
safe mode. May I call on the moderator and ask permission to post
it here. Perhaps, some of our experts out there can give it a look
and fix the problem. Thank you in advance.

Report •

#3
January 16, 2010 at 13:26:06
To anyone who might have the same problem, this might be useful
information. This is how I solved the 'chest initialization failed'
error in Avast. (1) I made sure of the internet connection by
running the ipconfig, release and renew. I got the procedure from
1 post. But I doublechecked it also by checking out yahoo page
with that on my cellfone when connected wifi. (2) I went to safe
mode since the virus won't let me run win XP in normal mode (like
earthworm pace superslow). (3) I changed the proxy settings on
the Avast setup to Direct connection. I'd like to thank yy4u2rel82
for the idea. (4) Then, despite the redirections, I was able to
download Norton removal tools by using Google chrome, making
my homepage go to Norton and/or typing the URL itself. According
to 1 post, even if you have totally uninstalled Norton, the leftovers
could be the cause of Avast chest server error. As usual, the
removal tool didn't run at first so I went to right click> Properties.
It said on the lower part of the tray 'the the program came from
another computer blah blah blah. I just clicked Unblock>Security
and ran it again and it worked. (5) After removing Norton traces, I
then deleted all temp files and did disk cleanup before (6) I went
back to Avast setup and clicked update. And it did, whew. (7)
Afterwards, I clicked Repair and it installed. (8) So I ran Avast scan
with and without internet connection but sadly, the chest was still
not working. I never tried to uninstall it since every post I read
warned against doing so. (9) So, I did a bootscan mode instead.
And it worked perfectly, chest, update and all. (10) I tried to check
the viruses that infected my pc so I google them first on my
cellfone before I move the files to the chest. Especially the
windows system files, I had to be careful about them because I
don't have win XP installn disks. When the scan finished, I had 689
files infected and moved to chest. Right now, I'm back to running
win XP normally and happily at normal speed. I'm checking to see
if everything is running smoothly and if I didn't mistakenly remove
any important files. And I'm running the scan again in normal
mode but still offline and its working fine and still picking up
trojans here and there. Everything seems ok so far. But I still have
to check online functions, see if IE redirect virus was removed as
well and download/setup/install other antimalwares later.

Report •

Related Solutions

#4
January 16, 2010 at 18:36:43
jinglebot,
First of all,go into safe mode and then msconfig and disable all startup items. Then try running Trojan Remover (fully functional and good for 30 days) and remove all it finds.

Also, if you follow the beginners guide on unhackme, you should be able to get rid of your problem.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#5
January 17, 2010 at 13:20:24
Thank you for your reply, XpUser4Real but after the avast bootscan,
I was able to install/update/run some of the programs I already
have. Right now, I have Avast, Prevx, AdAware and Malwarebytes up
and running. I still found several viruses like the alureon, tdss-
something and the redirect virus. And happily, they were removed.
My laptop is ok now. Hopefully, it stays that way. Ciao!

Report •

#6
January 17, 2010 at 19:32:57
Thanks for posting back....glad you got things fixed!

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •


Ask Question