Virus/Malware Problems

[bbmoon]

No threats found with TDSSKiller.

Report Attached

Thanks for you help.

[Blade81]

Good. Please uninstall QuickTime Player and reinstall if needed to make it work properly again (one of its files couldn't be fixed).

How's the system running now? Are there any issues left?

[bbmoon]

I Uninstalled QuickTime.

I seem to still have protection problems and Windows Security Center still shows items not working or OFF.

I still can't get virus updates or program updates with Avast. Getting this error - "error: Cannot connect to server" and after attempt "Last encountered error: Cannot connect to download 810.avast.com (75.125.243.154.80)"

Also, cannot get Window updates (even from website) and/or unable to turn on "Automatic Updates". In Windows Security Center I cannot get Automatic Updates "ON" and Virus Protection indicates "OUT OF DATE". I was able to get Firewall ON.

I do have a good internet connection and can browse.

Other computer functions seem good.

Thanks for your continued help.

[Blade81]

Let's see if this finds anything:
Download aswMBR to your desktop. Double click the aswMBR.exe to run it
Click the Scan button to start scan

On completion of the scan click save log, save it to your desktop and post in your next reply.

Also, let's check the connection:
Please run Notepad (start > All Programs > Accessories > Notepad) and copy and paste the text in the quote box into a new file:

@echo off
>Log1.txt (
ipconfig /all
nslookup google.com
ping -n 2 google.com
route print
)
start Log1.txt
del %0

• Go to the File menu at the top of the Notepad and select Save as.
• Select save in: desktop
• Fill in File name: test.bat
• Save as type: All file types (*.*)
• Click save.
• Close the Notepad.
• Locate and double-click test.bat on the desktop.
• A notepad opens, copy and paste the content it (log1.txt) to your reply.

[bbmoon]

Another odd issue that is still happening: After booting I get a window with this message - "One of the files containing the systems registry data had to be recovered by use of a log or alternate copy. The recovery was successful." with a (OK) box.

aswMBR.txt file attached

Thank You

Here is Log1.txt


Windows IP Configuration



Host Name . . . . . . . . . . . . : Theresa

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection 2:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connection

Physical Address. . . . . . . . . : 00-16-76-D2-27-07

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.0.12

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.0.1

DHCP Server . . . . . . . . . . . : 192.168.0.1

DNS Servers . . . . . . . . . . . : 192.168.0.1

Lease Obtained. . . . . . . . . . : Thursday, April 21, 2011 10:42:33 AM

Lease Expires . . . . . . . . . . : Thursday, April 28, 2011 10:42:33 AM

Server: UnKnown
Address: 192.168.0.1

Name: google.com
Addresses: 74.125.227.20, 74.125.227.18, 74.125.227.19, 74.125.227.16
74.125.227.17



Pinging google.com [74.125.227.17] with 32 bytes of data:



Reply from 74.125.227.17: bytes=32 time=17ms TTL=56

Reply from 74.125.227.17: bytes=32 time=18ms TTL=56



Ping statistics for 74.125.227.17:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 17ms, Maximum = 18ms, Average = 17ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 16 76 d2 27 07 ...... Intel(R) PRO/100 VE Network Connection - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.12 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.0.0 255.255.255.0 192.168.0.12 192.168.0.12 20
192.168.0.12 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.0.255 255.255.255.255 192.168.0.12 192.168.0.12 20
224.0.0.0 240.0.0.0 192.168.0.12 192.168.0.12 20
255.255.255.255 255.255.255.255 192.168.0.12 192.168.0.12 1
Default Gateway: 192.168.0.1
===========================================================================
Persistent Routes:
None

[Blade81]

Hi,

After booting I get a window with this message - "One of the files containing the systems registry data had to be recovered by use of a log or alternate copy. The recovery was successful." with a (OK) box.

Please run disk check by following instructions here. Let's see if that helps.

[bbmoon]

Ran Disk Check as instructed. No indication of problems or repairs during or after the scan.

Sorry, Still getting the same "Windows-Registry Recovery" message after boot. And still can not get security items working (Firewall ON; Austomatic Updates OFF; Virus Protection OFF) and unable to update Avast. Otherwise system seems to running ok.

Thanks.

[Blade81]

Hi,

That error message is tricky since it existed before I started assisting making it hard to tell what triggered the error in first place.

Have you tried to reinstall Avast to see if it can update itself after that? Some infections harm antivirus program installation so that the program must be reinstalled.

[bbmoon]

I Uninstalled and then reinstalled Avast. After install it will try to update and then has warning that it was not able to update. I then go to "Maintenance" then "Update" and try manually to update.

Sorry, the results are the same. Cannot update "Program" or "Virus Definitions".

Also not able to perform "windows" update.

Thanks for your help.

[bbmoon]

When attempting to update Avast (after successful install) I get an error.

At first it appears the update process is normal but then I quickly get this.

"Error: Cannot connect to server"

Thanks