Malware Discussions

[BCnow]

After running combofix lost internet connection, i followed the steps to try to repair it and have not been able to regain internet access on my pc. Would you know what can I do to resolve that? Heres the combofix log.

Thanks

[malwarekiller]

STEP 01

OK...I uploaded a registry fix to my skydrive for u....Please go here https://skydrive.live.com/?cid=83065969c52ffb2f find and download netsvc.reg to your dekstop.Double click on it and say yes to any warnings and reboot immediatey.

STEP 02
Then download and run the following and reboot your computer.

Please download and run these tools which are designed to restore some standard policy settings. They are not harmful.
VArestorepolicies.INF

• Download this INF repair file from here: VArestorepolicies.zip by MS-MVP Miekiemoes
• U may find the download links here:
• http://answers.microsoft.com/en-us/windows/forum/windows_xp-performance/how-can-i-make-task-manager-...
• Unzip or open the file VArestorepolicies.zip
• Open the folder VArestorepolicies and Right-click the file inside, VArestorepolicies.INF and choose Install

FixPolicies.exe

• Download this self-extracting ZIP archive from here: FixPolicies.exe by MS-MVP Bill Castner and save it to your desktop.
• U may find the download links here:
• http://forum.avast.com/index.php?topic=40765.0;
• Double-click FixPolicies.exe
• Click the "Install" button on the bottom toolbar of the box that will open
• The program will create a new Folder called FixPolicies
• Double-click to Open the new Folder, and then double-click the file within: Fix_Policies.cmd
• A black box will briefly appear and then close

[malwarekiller]

Warning This fix is only relevant for this system and no other, using on another computer may cause problems 

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot 

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following:

:files
C:\windows\system32\drivers\ipsec.sys|C:\windows\$NtServicePackUninstall$\ipsec.sys /replace

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done
• Please attach the log generated after the fix completion.

[BCnow]

It worked, did all the steps and now I have internet access, Thank you.

attached is OTL log

[malwarekiller]

OK...simply delete the current version of combofix on your desktop and download a new version from here:

http://www.bleepingcomputer.com/download/anti-virus/combofix

Run it again as instructed on previous page and attach the log.

[BCnow]

attaching combofix log

[malwarekiller]

FRESH AND CORRECT LINK 

[link was removed]

[malwarekiller]

Please refresh the page to get correct link to download.I messed up the download link. ensure the downloaded file says netsvcsp3

[BCnow]

hi, clicked on the new fresh link and when clicking to download it show the file to dowload is xpsp2_netsvcs.zip not xpsp3, should I continue to download?

[malwarekiller]

No delete the file here is a new link:

[link removed]