Search:

Okay, after hours of working on the problem, I finally got the Internet back up. The trick was downloading WinSockFix from a website other than the one I got it from before.

My computer seems to...

The device manager shows nothing with an exclamation mark.

I don't have the CD that came with my computer. My computer is about six years old so I lost all packages that came with it.

I tried...

By the way, when I rebooted the computer, the card was recognized as new hardware but when I open network connection, the original connection is no longer listed.

Tried it, still no luck.

Okay, I know this is probably really simple but under the Network adapters section, I see two items: 1) 1394 Net Adapter, and 2) Intel(R) PRO/100 VE Network Connection.

Which is the one I should...

No, there are no items with exclamation marks in the Device Manager. The two items with the exclamation marks from before are not even listed anymore.

Could you please provide more details on...

Hi,

Followed your instructions, unchecked WinpkFilter Driver, uninstalled it, and rebooted. Still no Internet connection.

Then tried WinsockXP from my flash drive. Ran it, rebooted. Still no...

Rebooted and tried again. Doesn't work.

Okay, I disabled both items and there is now a red X next to each one of them. Please inform me of the next step. Thanks for helping, by the way.

There is an option for disabling them. Should I go ahead and do that?

The computer won't let me uninstall either of those two items. A message pops up saying, "Failed to uninstall the device. The device may be required to boot up the computer."

For the first one:

Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)

Click Troubleshoot to start the...

Posted the new resultant log from ComboFix. Also, my device manager shows two items with exclamation marks:

-Intel(R) PRO/100 VE Network Connection - WinpkFilter Miniport
-WAN Miniport (IP) -...

ComboFix 10-08-15.01 - Waqar 08/18/2010 1:05.5.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.321 [GMT -4:00]
Running from: c:\documents and...

I have posted new ComboFix, DDS, and Attach logs. I couldn't run the Kaspersky scanner because the Internet connection on my computer has been cut off. I can't access Mozilla or IE. Any...

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 7/16/2009 10:37:12...

Run by Waqar at 18:17:43.59 on Tue 08/17/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.297 [GMT -4:00]

...

ComboFix 10-08-15.01 - Waqar 08/17/2010 18:02:39.4.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.312 [GMT -4:00]
Running from: c:\documents and...

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 7/16/2009 10:37:12...

Run by Waqar at 8:17:59.76 on Tue 08/17/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.258 [GMT -4:00]

...

ComboFix 10-08-15.01 - Waqar 08/17/2010 1:27.3.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.222 [GMT -4:00]
Running from: c:\documents and...

I spoke too soon. About an hour after I ran the WinsockXP program, Antimalware Doctor (the original problem) showed up again and it seems my computer is still infected. Also, the Internet...

I have an update. While I was using my flash drive to paste the ComboFix log on another computer, I research the problem I had with Internet connectivity and found a download called "WinsockXP." I...

Just posted the ComboFix log. I can't find DDS on my computer and so can't run it.

ComboFix 10-08-15.01 - Waqar 08/16/2010 0:52.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.358 [GMT -4:00]
Running from: c:\documents and...

I can ComboFix and a log was even produced but when the computer re-booted afterwards, I found that I could no longer access the Internet. Every time I open a browser, Mozilla says, "Server not...

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 7/16/2009 10:37:12...

Run by Waqar at 4:44:59.17 on Thu 08/12/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.181 [GMT -4:00]

...

For some reason, I don't know why, I ran TDSSKiller again and no threats were found.

As you can see, I have posted the TDSSKiller log but I am still having the same problems with the DDS and Attach logs. I can't copy and paste them; I get the "Connection was Reset" page. And the...

2010/08/12 04:41:57.0484 TDSS rootkit removing tool 2.4.1.1 Aug 10 2010 14:48:09
2010/08/12 04:41:57.0484 ================================================================================
2010/08/12...

There is one item found by TDSSKiller that does not have a "cure" option, but rather a "delete" option. Should I go ahead and delete that one? The other item does have a cure option.

RkU Version: 3.8.388.590, Type LE (SR2)
==============================================
OS Name: Windows XP
Version 5.1.2600 (Service Pack 3)
Number of processors #2...

I was infected with Anti-Malware Doctor about two weeks ago. Pop-ups and ads for anti-malware software were coming up all over my screen. A quick Google search on the problem led me to a link that...

problems:

1) computer freezes after 5 to 20 minutes of use. i cannot click on anything to get out of frozen state. task manager does not open when typing ctrl+alt+del. when computer freezes, i...

========== FILES ==========
File/Folder c:\windows\system32\xqatbn.dll not found.

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 04252009_204451

i did a second search for the file and then couldnt find it. i guess it may be gone. the xqatbn file was actually in a quarantine folder, along with a bunch of other files that have ".vir" as an...

good morning to you, too.

things havent changed; same problems persist.

my computer was already set to view hidden folders and such. i couldnt find the xqatbn file when i searched the the...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:34, on 4/24/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running...

ComboFix 09-04-25.03 - Gamer 04/24/2009 21:18.31 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.503.266 [GMT -4:00]
Running from: c:\documents and...

i am deeply sorry to hear about your loss. i am sure that whoever in your family has passed was proud of your good heart and your willingness to help strangers without asking for anything in return....

above you will find the new combofix log. i dont know if this makes a difference but when i ran combofix this time, the computer did not restart

ComboFix 09-04-25.03 - Gamer 04/24/2009 17:07.30 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.503.269 [GMT -4:00]
Running from: c:\documents and...

i posted the GMER log but when i tried to click the button on the top of where i post to attach the combofix log, i got the same error message telling me that the attachment wont upload since the...

GMER 1.0.15.14966 - http://www.gmer.net
Rootkit scan 2009-04-24 06:30:31
Windows 5.1.2600 Service Pack 2


---- System - GMER 1.0.15 ----

SSDT d347bus.sys (PnP BIOS Extension/ ) ...

got an email addy i can send it to? the combofix log is ~500KB, whereas this website does not allow any attachments larger than ~50KB

same problems persist:sad:

i only posted the HJT log. the combofix log is ABSOLUTELY HUGE! do you know how i can send it in a reply as an attachment?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:40, on 4/22/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running...

hi,

when i was running the scan, a little window poppued up mentioning that some "rootkit activity" was found, and one of the lines in the log showed up in red color