Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
networking problems after removing malware
#1
hello there guys,

my system recently was infected by malware, I removed the malware using Malwarebytes anti-malware, SUPERAntiSpyware, and then I ran a scan with hitmanPRO. the scans did find and remove the malware but in the process, they also did something to affect my network adapter. I have tried using the "net adapter repair all in one" tool, but I had no luck and repairing the issue. Can you guys please help me?

please note: I am connected to my network via an Ethernet cable
Reply

#2
Hey deadbird101 welcome to the forum


Please run following programs.

Step 1

[Image: FarbarServiceScanner.png]Scan with Farbar Service Scanner

Download Farbar Service Scanner by Farbar and save it to your desktop.
  • Right-click on [Image: FarbarServiceScanner.png]
  • icon and select [Image: RunAsAdmin.jpg] Run as Administrator to start the tool.
  • Make sure all of the options are checked!
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Press Scan.
  • It will create a log (FSS.txt) in the same directory the tool is run.

Please include that log in your next reply.



Step 2

[Image: MiniToolbox.PNG]Scan with MiniToolBox


Please download MiniToolBox by Farbar and save it to your desktop.
  • Right-click on [Image: MiniToolbox.PNG] icon and select [Image: RunAsAdmin.jpg] Run as Administrator to start the tool.
  • In the main window please checkmark the following checkboxes:
    • Flush DNS;
    • Report IE Proxy Settings;
    • Reset IE Proxy Settings;
    • Report FF Proxy Settings;
    • Reset FF Proxy Settings;
    • List content of Hosts;
    • List IP configuration;
    • List Winsock Entries;
    • List last 10 Event Viewer log;
    • List Installed Programs;
    • List Devices (Only problems);
    • List Users, Partitions and Memory size;
    • List Minidump Files.
  • Click Go and wait paiently.
  • Upon completion (a reboot may be needed) a file called Result.txt will be saved on your desktop.
Please include the content of that file in your next reply.
<left><form action="https://www.paypal.com/cgi-bin/webscr" method="post">If you are satisfied with my help, consider a donation. Thank you so much for your continued support! 
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="Y4ZDLXGFS4F8Q">
<input type="image" src="https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal — The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="0" height="0">
</form>

   </div></left> 
Reply

#3
(02-06-2015, 12:51 PM)Britec Wrote:  Hey deadbird101 welcome to the forum


Please run following programs.

Step 1

[Image: FarbarServiceScanner.png]Scan with Farbar Service Scanner

Download Farbar Service Scanner by Farbar and save it to your desktop.

  • Right-click on [Image: FarbarServiceScanner.png]
  • icon and select [Image: RunAsAdmin.jpg] Run as Administrator to start the tool.
  • Make sure all of the options are checked!
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Press Scan.
  • It will create a log (FSS.txt) in the same directory the tool is run.

Please include that log in your next reply.



Step 2

[Image: MiniToolbox.PNG]Scan with MiniToolBox


Please download MiniToolBox by Farbar and save it to your desktop.


  • Right-click on [Image: MiniToolbox.PNG] icon and select [Image: RunAsAdmin.jpg] Run as Administrator to start the tool.
  • In the main window please checkmark the following checkboxes:
    • Flush DNS;
    • Report IE Proxy Settings;
    • Reset IE Proxy Settings;
    • Report FF Proxy Settings;
    • Reset FF Proxy Settings;
    • List content of Hosts;
    • List IP configuration;
    • List Winsock Entries;
    • List last 10 Event Viewer log;
    • List Installed Programs;
    • List Devices (Only problems);
    • List Users, Partitions and Memory size;
    • List Minidump Files.
  • Click Go and wait paiently.
  • Upon completion (a reboot may be needed) a file called Result.txt will be saved on your desktop.
Please include the content of that file in your next reply.

Farbar Service Scanner Version: 17-01-2015
Ran by enano (administrator) on 06-02-2015 at 08:41:22
Running from "C:\Users\enano\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error. Google IP is unreachable
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo.com returned error: Other errors


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****






MiniToolBox by Farbar  Version: 30-11-2014
Ran by enano (administrator) on 06-02-2015 at 08:43:44
Running from "C:\Users\enano\Desktop"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================
::1             localhost

127.0.0.1       localhost

========================= IP Configuration: ================================

Atheros AR8152/8158 PCI-E Fast Ethernet Controller (NDIS 6.20) = Local Area Connection (Connected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled


popd
# End of IPv4 configuration



Windows IP Configuration

 Host Name . . . . . . . . . . . . : enano-HP
 Primary Dns Suffix  . . . . . . . :
 Node Type . . . . . . . . . . . . : Hybrid
 IP Routing Enabled. . . . . . . . : No
 WINS Proxy Enabled. . . . . . . . : No
Server:  UnKnown
Address:  127.0.0.1

Ping request could not find host google.com. Please check the name and try again.
Server:  UnKnown
Address:  127.0.0.1

Ping request could not find host yahoo.com. Please check the name and try again.

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
  Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
1...........................Software Loopback Interface 1
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
      127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
      127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination      Gateway
1    306 ::1/128                  On-link
1    306 ff00::/8                 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880] (Microsoft Corp.)
x64-Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880] (Microsoft Corp.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (02/06/2015 08:18:04 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak).  hr = 0x80070539, The security ID structure is invalid.
.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {47823611-b2f3-4bea-a7fa-304ba21cea34}

Error: (02/06/2015 08:12:17 AM) (Source: System Restore) (User: )
Description: Failed to initiate System Restore (Bomgar Support Customer Client Restore Point).

Error: (02/06/2015 08:10:59 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak).  hr = 0x80070539, The security ID structure is invalid.
.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {d2f44ad4-6ade-4cef-9630-e173637eb115}

Error: (02/05/2015 10:35:39 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak).  hr = 0x80070539, The security ID structure is invalid.
.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {6b168cdd-5967-471e-880d-e8558c5a24ca}

Error: (02/02/2015 00:03:38 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak).  hr = 0x80070539, The security ID structure is invalid.
.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {b996c201-d77a-41b0-95bf-048fef966dfd}

Error: (02/02/2015 00:02:10 PM) (Source: Application Error) (User: )
Description: Faulting application name: mmc.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc808
Faulting module name: mscorwks.dll, version: 2.0.50727.5485, time stamp: 0x53a11d6c
Exception code: 0xc0000005
Fault offset: 0x00000000001934c8
Faulting process id: 0x%9
Faulting application start time: 0xmmc.exe0
Faulting application path: mmc.exe1
Faulting module path: mmc.exe2
Report Id: mmc.exe3

Error: (02/02/2015 00:02:10 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 2.0.50727.5485 - Fatal Execution Engine Error (000007FEF129600A) (80131506)

Error: (01/30/2015 03:00:43 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak).  hr = 0x80070539, The security ID structure is invalid.
.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {55f0790f-bdd9-451a-a657-3954d4f0ec8e}

Error: (01/29/2015 08:57:23 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak).  hr = 0x80070539, The security ID structure is invalid.
.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {a01dbaec-92b1-4ea1-b7ae-87e841ff6598}


System errors:
=============
Error: (02/06/2015 08:24:22 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (02/06/2015 08:23:22 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
HssDRV6

Error: (02/06/2015 08:23:13 AM) (Source: Service Control Manager) (User: )
Description: The mintcastnetworks service failed to start due to the following error:
%%2

Error: (02/06/2015 08:20:52 AM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (02/06/2015 08:08:03 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (02/06/2015 08:07:15 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
HssDRV6

Error: (02/06/2015 08:06:57 AM) (Source: Service Control Manager) (User: )
Description: The mintcastnetworks service failed to start due to the following error:
%%2

Error: (02/05/2015 06:03:57 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (02/05/2015 05:04:58 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (02/05/2015 05:04:04 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
HssDRV6


Microsoft Office Sessions:
=========================
Error: (02/06/2015 08:18:04 AM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak)0x80070539, The security ID structure is invalid.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {47823611-b2f3-4bea-a7fa-304ba21cea34}

Error: (02/06/2015 08:12:17 AM) (Source: System Restore)(User: )
Description: Bomgar Support Customer Client Restore Point0x8007000d

Error: (02/06/2015 08:10:59 AM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak)0x80070539, The security ID structure is invalid.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {d2f44ad4-6ade-4cef-9630-e173637eb115}

Error: (02/05/2015 10:35:39 AM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak)0x80070539, The security ID structure is invalid.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {6b168cdd-5967-471e-880d-e8558c5a24ca}

Error: (02/02/2015 00:03:38 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak)0x80070539, The security ID structure is invalid.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {b996c201-d77a-41b0-95bf-048fef966dfd}

Error: (02/02/2015 00:02:10 PM) (Source: Application Error)(User: )
Description: mmc.exe6.1.7600.163854a5bc808mscorwks.dll2.0.50727.548553a11d6cc0000005000000000​01934c8

Error: (02/02/2015 00:02:10 PM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 2.0.50727.5485 - Fatal Execution Engine Error (000007FEF129600A) (80131506)

Error: (01/30/2015 03:00:43 AM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak)0x80070539, The security ID structure is invalid.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {55f0790f-bdd9-451a-a657-3954d4f0ec8e}

Error: (01/29/2015 08:57:23 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-1506593355-1612532702-1158213597-1003.bak)0x80070539, The security ID structure is invalid.


Operation:
 OnIdentify event
 Gathering Writer Data

Context:
 Execution Context: Shadow Copy Optimization Writer
 Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Writer Name: Shadow Copy Optimization Writer
 Writer Instance ID: {a01dbaec-92b1-4ea1-b7ae-87e841ff6598}


CodeIntegrity Errors:
===================================
Date: 2012-12-16 08:35:09.088
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2012-12-16 08:35:08.911
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



=========================== Installed Programs ============================
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.60512.1804 - ATI Technologies Inc.) Hidden
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{85A5A208-1A5A-A736-170E-AA826BC19B2A}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
AVG PC TuneUp 2014 (en-US) (x32 Version: 14.0.1001.380 - AVG) Hidden
AVG PC TuneUp 2014 (HKLM-x32\...\AVG PC TuneUp) (Version: 14.0.1001.380 - AVG)
AVG PC TuneUp 2014 (x32 Version: 14.0.1001.380 - AVG) Hidden
Belkin F5D8053 N Wireless USB Adapter (HKLM-x32\...\InstallShield_{E6607F5B-50E7-4B54-81B7-F0600E3C8CF4}) (Version: 2.0.0.10 - Belkin)
Belkin F5D8053 N Wireless USB Adapter (x32 Version: 2.0.0.10 - Belkin) Hidden
Canon MX450 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX450_series) (Version: 1.00 - Canon Inc.)
Canon MX510 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX510_series) (Version:  - )
ccc-utility64 (Version: 2011.0512.1812.30806 - ATI) Hidden
Definition Update for Microsoft Office 2010 (KB2910899) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{C8358E8D-6C89-41B3-8439-FEFBC0353D81}) (Version:  - Microsoft)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.93 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Customer Experience Enhancements (x32 Version: 6.0.1.8 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.9.0.0 - Hewlett-Packard)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
iTunes (HKLM\...\{D601CEAD-2E4F-4BBB-85CC-C29A4CE6A3C0}) (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (English) 2010 (HKLM-x32\...\{90140000-0015-0409-0000-0000000FF1CE}) (Version:  - )
Microsoft Office Access Setup Metadata MUI (English) 2010 (HKLM-x32\...\{90140000-0117-0409-0000-0000000FF1CE}) (Version:  - )
Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2010 (HKLM-x32\...\{90140000-001A-0409-0000-0000000FF1CE}) (Version:  - )
Microsoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (HKLM-x32\...\{90140000-002C-0409-0000-0000000FF1CE}) (Version:  - )
Microsoft Office Publisher MUI (English) 2010 (HKLM-x32\...\{90140000-0019-0409-0000-0000000FF1CE}) (Version:  - )
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (HKLM-x32\...\{90140000-0115-0409-0000-0000000FF1CE}) (Version:  - )
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version:  - Microsoft)
Verizon Quick Connect (HKLM-x32\...\QuickConnect) (Version: 8.6.10066.25 - )
Windows Driver Package - Leapfrog (Leapfrog-USBLAN) Net  (09/10/2009 02.03.05.012) (HKLM\...\8F14F2ECEDE68D26EA515B48DC25B39103C4FE8D) (Version: 09/10/2009 02.03.05.012 - Leapfrog)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

========================= Devices: ================================

Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Anchorfree HSS VPN Adapter
Description: Anchorfree HSS VPN Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Anchorfree HSS VPN Adapter
Service: taphss6
Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)
Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded.
Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

Name: Hotspot Shield Routing Driver 6
Description: Hotspot Shield Routing Driver 6
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: HssDRV6
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


========================= Memory info: ===================================

Percentage of memory in use: 46%
Total physical RAM: 2662.55 MB
Available physical RAM: 1423.31 MB
Total Pagefile: 5323.28 MB
Available Pagefile: 3679.84 MB
Total Virtual: 4095.88 MB
Available Virtual: 3980.6 MB

========================= Partitions: =====================================

1 Drive c: (OS) (Fixed) (Total:454.29 GB) (Free:109.97 GB) NTFS
2 Drive d: (HP_RECOVERY) (Fixed) (Total:11.37 GB) (Free:1.39 GB) NTFS
4 Drive f: (8GB BLUE) (Removable) (Total:7.59 GB) (Free:7.59 GB) FAT32

========================= Users: ========================================

User accounts for \\ENANO-HP

Administrator            carlitos                 enano                    
fbwuser                  Guest                    

========================= Minidump Files ==================================

No minidump file found


**** End of log ****
Reply

#4
Hi DeadBird101, 

Can you follow this guide until I get back later. 

let me know how you get on

https://briteccomputers.co.uk/posts/fix-network-problems-in-windows/
<left><form action="https://www.paypal.com/cgi-bin/webscr" method="post">If you are satisfied with my help, consider a donation. Thank you so much for your continued support! 
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="Y4ZDLXGFS4F8Q">
<input type="image" src="https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal — The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="0" height="0">
</form>

   </div></left> 
Reply

#5
(02-06-2015, 05:50 PM)Britec Wrote:  Hi DeadBird101, 

Can you follow this guide until I get back later. 

let me know how you get on

https://briteccomputers.co.uk/posts/fix-network-problems-in-windows/


I was not able to get on. I had to use a different computer and put the programs on a flash drive and then run them off of the flash drive on the computer that is having the network issues. Then I took the text files from the computer, put them on the flash drive, and copied and pasted them using the wotkong computer. I follow the guide in your video before I made my first post,I will try running the "netadaptor repair tool" one more tim. Thank you
Reply

#6
What AV did the computer have on it before the infection?
Reply

#7
Sorry for delay was real busy yesterday, can you please follow these steps for me.


Step 1


Remove Mintcastnetworks from Add and Remove Programs
  • Go Start > Control Panel in the search box, then tap or click Control Panel.
  • Under View by:, select Large Icons, then tap or click Programs and features.
  • Click the program, then click Uninstall.
Step 2

Please download [Image: adwcleane.png] AdwCleaner (by Xplode) and save it to your Desktop


  • Right-click on AdwCleaner.exe and Run as administrator.
  • Click Scan. (AdwCleaner will now scan for Adware.)

  • Once scan finishes, click Clean, now follow the on screen prompts.

  • Your computer should now reboot.

  • A log file will automatically open. Please Copy and Paste when you replay in your next post.


Note: The log can also be found in here: C:\AdwCleaner\


Step 3


[Image: JRTbythisisu.png]Fix with Junkware Removal Tool



Please download JRT by Thisisu and save the file to your desktop.

Temporary disable your AntiVirus and AntiSpyware protection - instructions here.


  • Right-click on [Image: JRTbythisisu.png] icon and select [Image: RunAsAdmin.jpg] Run as Administrator to start the tool.
  • Follow the prompts and let this process run uninterrupted. 
  • This scan can take a while, depending on your System specs.
  • Upon completion, a log (JRT.txt) will open on your desktop.


Please include the contents of that file in your reply.



Do not forget to re-enable your previously switched off protection software!
Please also manually reboot your machine after this procedure.


Step 4

Have checked proxy settings?
  • Open Internet Explorer and click Tools > Internet options.
  • Select the Connections tab.
  • Click the LAN Settings button and deselect the Proxy server check box.
  • Click OK and then OK again to close the window.
<left><form action="https://www.paypal.com/cgi-bin/webscr" method="post">If you are satisfied with my help, consider a donation. Thank you so much for your continued support! 
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="Y4ZDLXGFS4F8Q">
<input type="image" src="https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal — The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="0" height="0">
</form>

   </div></left> 
Reply



Forum Jump:


Users browsing this thread:
1 Guest(s)

Powered By MyBB, © 2002-2024 Melroy van den Berg.