Infected with "Best Virus Protection" malware

[ramjet696]

Maniac,

Winsock got my firewall and windows udate back but still no internet. Got new modem box today, set it up through phone company, and they said all was well with internet connection into my house, but my computer still can't connect to internet explorer. There's a bug in there that shut the door to the internet. Any suggestions?

Thank you for all your help. .

[Maniac]

Please post a new fresh Farbar Service Scanner to see if there is any change.

[ramjet696]

Maniac,

Here's my FSS file.

Farbar Service Scanner Version: 01-03-2012

Ran by RAF (administrator) on 18-04-2012 at 18:18:16

Running from "C:\Documents and Settings\RAF\Desktop"

Microsoft Windows XP Home Edition Service Pack 3 (X86)

Boot Mode: Normal

****************************************************************

Internet Services:

============

Connection Status:

==============

Localhost is accessible.

LAN connected.

Attempt to access Google IP returned error: Google IP is offline

Attempt to access Yahoo IP returend error: Yahoo IP is offline

Windows Firewall:

=============

Firewall Disabled Policy:

==================

System Restore:

============

System Restore Disabled Policy:

========================

Security Center:

============

Windows Update:

============

File Check:

========

C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit

C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit

C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit

C:\WINDOWS\system32\netman.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\srsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit

C:\WINDOWS\system32\wscsvc.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\wuauserv.dll => MD5 is legit

C:\WINDOWS\system32\qmgr.dll => MD5 is legit

C:\WINDOWS\system32\es.dll => MD5 is legit

C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit

C:\WINDOWS\system32\svchost.exe => MD5 is legit

C:\WINDOWS\system32\rpcss.dll => MD5 is legit

C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:

=======

fssfltr(9) Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4)

0x09000000080000000500000001000000020000000300000004000000060000000700000009000000

**** End of log ****

After not being able to connect to internet and getting some help from computer guru neighbor, I did a system restore (thinking that would help) and I think that brought everything back to square 1.

[Maniac]

Yes, this brings us back from the beginning of this topic. I suggest you to reinstall your OS. This will start on a clean system and you will be able to take this time from the beginning steps to prevent such problems.

http://forums.malwarebytes.org/index.php?showtopic=104379&pid=515983&st=0entry515983

[Maurice Naggar]

This topic is now closed.