Overclock.net › Forums › Software, Programming and Coding › Networking & Security › No Internet access after fake AV removal
New Posts  All Forums:Forum Nav:

No Internet access after fake AV removal - Page 8

post #71 of 80
Quote:
Originally Posted by Markeh View Post
FIXED THE PROBLEM.
`
The machine is now virus-free, but there was no connection still..

So I go to run ComboFix, and just before I do (after disabling Avast), I accidentally clicked the Firefox icon. And Google loaded!

So I re-enabled Avast, and it died. So I went through each single shield, disabling and re-enablling, and found the problem lay with the Web Shield.

What I did was went to:
Settings >> Troubleshooting >> Redirect Settings

Then I unticked both "Ignore Local Communication" boxes, and deleted the contents of all of the boxes.

And now it works! Will run MBAM to be doubly sure however.
That's great news. You've got to love it when a program meant to protect the system ends up causing issues.
ColdCut
(14 items)
 
YetiKube
(19 items)
 
 
CPUMotherboardGraphicsRAM
5960x Asus Rampage V Extreme  XFX 295x2 Core Hydro Edition CORSAIR Vengeance LPX 16GB DDR4 2800 
Hard DriveHard DriveHard DriveOptical Drive
Samsung 850 Pro  Samsung 850 EVO Western Digital Black 3TB  LG Bluray Burner 16x 
CoolingOSMonitorPower
H110i GT Windows 8.1 Pro Asus 4k Corsair AX1500i  
CaseAudio
Corsair 900D Stock 
CPUMotherboardGraphicsRAM
(1) 2500K ASRock Extreme3 Gen3 GTX 780 Classified Mushkin 996995 DDR3 1600 (2 Sticks) 
Hard DriveHard DriveHard DriveOptical Drive
Samsung 840 Pro (1) 150GB Western Digital Raptor (1) 1TB Western Digital Black Caviar (1) Samsung SATA DVD Burner 
CoolingOSMonitorKeyboard
Antec Kuhler H2O 620 Windows 8.1 LG 21:9 Ultrawide 34" 3440x1440 Filco 114 key (Blue Cherry) / HHKB Pro 2 
PowerCaseMouseMouse Pad
Corsair HX850W - 850W Mountain Mods - U2 UFO Orginal - Gloss Black Logitech G400 / Razer Deathadder BE Razer Goliathus Extended / Artisan Hien VE (Sof... 
AudioOtherOther
Creative Sounds Blaster X-FI Titanium HD Asus USB N-53 Wireless USB adapter  12 Case Fans 
  hide details  
Reply
ColdCut
(14 items)
 
YetiKube
(19 items)
 
 
CPUMotherboardGraphicsRAM
5960x Asus Rampage V Extreme  XFX 295x2 Core Hydro Edition CORSAIR Vengeance LPX 16GB DDR4 2800 
Hard DriveHard DriveHard DriveOptical Drive
Samsung 850 Pro  Samsung 850 EVO Western Digital Black 3TB  LG Bluray Burner 16x 
CoolingOSMonitorPower
H110i GT Windows 8.1 Pro Asus 4k Corsair AX1500i  
CaseAudio
Corsair 900D Stock 
CPUMotherboardGraphicsRAM
(1) 2500K ASRock Extreme3 Gen3 GTX 780 Classified Mushkin 996995 DDR3 1600 (2 Sticks) 
Hard DriveHard DriveHard DriveOptical Drive
Samsung 840 Pro (1) 150GB Western Digital Raptor (1) 1TB Western Digital Black Caviar (1) Samsung SATA DVD Burner 
CoolingOSMonitorKeyboard
Antec Kuhler H2O 620 Windows 8.1 LG 21:9 Ultrawide 34" 3440x1440 Filco 114 key (Blue Cherry) / HHKB Pro 2 
PowerCaseMouseMouse Pad
Corsair HX850W - 850W Mountain Mods - U2 UFO Orginal - Gloss Black Logitech G400 / Razer Deathadder BE Razer Goliathus Extended / Artisan Hien VE (Sof... 
AudioOtherOther
Creative Sounds Blaster X-FI Titanium HD Asus USB N-53 Wireless USB adapter  12 Case Fans 
  hide details  
Reply
post #72 of 80
Thread Starter 
I never realised it had proxy settings in it, so would never have guessed until I did that by accident.
Misery Business
(20 items)
 
Anklebiters
(5 items)
 
Ignorance
(9 items)
 
CPUGraphicsRAMHard Drive
Intel Core i7-3630QM Nvidia GT640M 2GB 8GB DDR3-1600 Sandisk Plus 240GB 
OS
Windows 10 
CPUGraphicsRAMHard Drive
Pentium Dual-Core T3200 Intel GMA4500MHD 4GB DDR2-667 120GB Kingston V300 SSD 
Optical DriveOSMonitorCase
HL-DT-ST GSA-T50N DVD-RW Windows 8.1 64-bit 15.4" 1280x800 Toshiba Satellite L300D (recased) 
Other
Intel WiFi Link 5100 agn 
  hide details  
Reply
Misery Business
(20 items)
 
Anklebiters
(5 items)
 
Ignorance
(9 items)
 
CPUGraphicsRAMHard Drive
Intel Core i7-3630QM Nvidia GT640M 2GB 8GB DDR3-1600 Sandisk Plus 240GB 
OS
Windows 10 
CPUGraphicsRAMHard Drive
Pentium Dual-Core T3200 Intel GMA4500MHD 4GB DDR2-667 120GB Kingston V300 SSD 
Optical DriveOSMonitorCase
HL-DT-ST GSA-T50N DVD-RW Windows 8.1 64-bit 15.4" 1280x800 Toshiba Satellite L300D (recased) 
Other
Intel WiFi Link 5100 agn 
  hide details  
Reply
post #73 of 80
Quote:
Originally Posted by Markeh View Post
I never realised it had proxy settings in it, so would never have guessed until I did that by accident.
Yeah, that's what most AV's do nowadays. After you're infected they change all of your homepages and use proxy settings to redirect you to malicious websites.

Nice job on fixing it
post #74 of 80
Quote:
Originally Posted by Markeh View Post
FIXED THE PROBLEM.
You should consider going back and giving Rep+ to those who helped you. It seems to be a courtesy that has been lost around this board...

Just a suggestion
O.C. Rig
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel 980x Extreme Gigabyte X58A-UD7 (rev 2.0) Gigabyte GTX 460 OC 768 Kingston HyperX 1600Mhz (3x4GB) 
Hard DriveOptical DriveOSMonitor
OCZ Vertex 2 100GB Lite-On Lightscribe 24x Windows 7 Pro x64 Dell 2408wfp 
KeyboardPowerCaseMouse
MS Wireless Laser 6000 v2.0 Corsair Pro AX1200 Gold Cooler Master HAF 922 MS Wireless Laser 6000 
  hide details  
Reply
O.C. Rig
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel 980x Extreme Gigabyte X58A-UD7 (rev 2.0) Gigabyte GTX 460 OC 768 Kingston HyperX 1600Mhz (3x4GB) 
Hard DriveOptical DriveOSMonitor
OCZ Vertex 2 100GB Lite-On Lightscribe 24x Windows 7 Pro x64 Dell 2408wfp 
KeyboardPowerCaseMouse
MS Wireless Laser 6000 v2.0 Corsair Pro AX1200 Gold Cooler Master HAF 922 MS Wireless Laser 6000 
  hide details  
Reply
post #75 of 80
Thread Starter 
I knew I'd forgotten to do something. Will do that now.
Misery Business
(20 items)
 
Anklebiters
(5 items)
 
Ignorance
(9 items)
 
CPUGraphicsRAMHard Drive
Intel Core i7-3630QM Nvidia GT640M 2GB 8GB DDR3-1600 Sandisk Plus 240GB 
OS
Windows 10 
CPUGraphicsRAMHard Drive
Pentium Dual-Core T3200 Intel GMA4500MHD 4GB DDR2-667 120GB Kingston V300 SSD 
Optical DriveOSMonitorCase
HL-DT-ST GSA-T50N DVD-RW Windows 8.1 64-bit 15.4" 1280x800 Toshiba Satellite L300D (recased) 
Other
Intel WiFi Link 5100 agn 
  hide details  
Reply
Misery Business
(20 items)
 
Anklebiters
(5 items)
 
Ignorance
(9 items)
 
CPUGraphicsRAMHard Drive
Intel Core i7-3630QM Nvidia GT640M 2GB 8GB DDR3-1600 Sandisk Plus 240GB 
OS
Windows 10 
CPUGraphicsRAMHard Drive
Pentium Dual-Core T3200 Intel GMA4500MHD 4GB DDR2-667 120GB Kingston V300 SSD 
Optical DriveOSMonitorCase
HL-DT-ST GSA-T50N DVD-RW Windows 8.1 64-bit 15.4" 1280x800 Toshiba Satellite L300D (recased) 
Other
Intel WiFi Link 5100 agn 
  hide details  
Reply
post #76 of 80
Good to see the solution was a mistake instead of the virus. I tried removing a fake AV that got into the registry and edited almost every registry value that had to due with the internet. Still never found what value caused a redirection of any link to a false search engine.....
Edited by Chunkylad - 5/12/11 at 9:42am
Project Purity
(18 items)
 
  
CPUMotherboardGraphicsRAM
i5 750 EVGA P55 FTW 200 EVGA GTX 480 Corsair Dominator GT 4Gb x 2 
Hard DriveOptical DriveCoolingCooling
2x500gb Spinpoint F3 (Raid 0)/1tb Spinpoint F3 Asus DRW Heatkiller 3.0 XSPC EX360 
CoolingCoolingOSMonitor
Swiftech MCP655 EK GTX 480 Windows 7 Ultimate 64-bit Samsung UN32C6500 32" LED TV 
KeyboardPowerCaseMouse
Steelseries Merc Stealth Corsair HX1000W Corsair Obsidian 800d Razer Mamba 
Mouse PadAudio
Razer Destructor Asus Xonar DX 
  hide details  
Reply
Project Purity
(18 items)
 
  
CPUMotherboardGraphicsRAM
i5 750 EVGA P55 FTW 200 EVGA GTX 480 Corsair Dominator GT 4Gb x 2 
Hard DriveOptical DriveCoolingCooling
2x500gb Spinpoint F3 (Raid 0)/1tb Spinpoint F3 Asus DRW Heatkiller 3.0 XSPC EX360 
CoolingCoolingOSMonitor
Swiftech MCP655 EK GTX 480 Windows 7 Ultimate 64-bit Samsung UN32C6500 32" LED TV 
KeyboardPowerCaseMouse
Steelseries Merc Stealth Corsair HX1000W Corsair Obsidian 800d Razer Mamba 
Mouse PadAudio
Razer Destructor Asus Xonar DX 
  hide details  
Reply
post #77 of 80
Always run mgtools. It always reset the proxy settings in the browser. But why are you using IE anyways. Use google chrome of firefox
post #78 of 80
Thread Starter 
I later found out that her primary browser IS Firefox. But seeing as I don't use Firefox, and the issue persisted in all browsers, I did all the troubleshooting in IE.
Misery Business
(20 items)
 
Anklebiters
(5 items)
 
Ignorance
(9 items)
 
CPUGraphicsRAMHard Drive
Intel Core i7-3630QM Nvidia GT640M 2GB 8GB DDR3-1600 Sandisk Plus 240GB 
OS
Windows 10 
CPUGraphicsRAMHard Drive
Pentium Dual-Core T3200 Intel GMA4500MHD 4GB DDR2-667 120GB Kingston V300 SSD 
Optical DriveOSMonitorCase
HL-DT-ST GSA-T50N DVD-RW Windows 8.1 64-bit 15.4" 1280x800 Toshiba Satellite L300D (recased) 
Other
Intel WiFi Link 5100 agn 
  hide details  
Reply
Misery Business
(20 items)
 
Anklebiters
(5 items)
 
Ignorance
(9 items)
 
CPUGraphicsRAMHard Drive
Intel Core i7-3630QM Nvidia GT640M 2GB 8GB DDR3-1600 Sandisk Plus 240GB 
OS
Windows 10 
CPUGraphicsRAMHard Drive
Pentium Dual-Core T3200 Intel GMA4500MHD 4GB DDR2-667 120GB Kingston V300 SSD 
Optical DriveOSMonitorCase
HL-DT-ST GSA-T50N DVD-RW Windows 8.1 64-bit 15.4" 1280x800 Toshiba Satellite L300D (recased) 
Other
Intel WiFi Link 5100 agn 
  hide details  
Reply
post #79 of 80
Thank you for remembering the Rep+ Markeh
O.C. Rig
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel 980x Extreme Gigabyte X58A-UD7 (rev 2.0) Gigabyte GTX 460 OC 768 Kingston HyperX 1600Mhz (3x4GB) 
Hard DriveOptical DriveOSMonitor
OCZ Vertex 2 100GB Lite-On Lightscribe 24x Windows 7 Pro x64 Dell 2408wfp 
KeyboardPowerCaseMouse
MS Wireless Laser 6000 v2.0 Corsair Pro AX1200 Gold Cooler Master HAF 922 MS Wireless Laser 6000 
  hide details  
Reply
O.C. Rig
(13 items)
 
  
CPUMotherboardGraphicsRAM
Intel 980x Extreme Gigabyte X58A-UD7 (rev 2.0) Gigabyte GTX 460 OC 768 Kingston HyperX 1600Mhz (3x4GB) 
Hard DriveOptical DriveOSMonitor
OCZ Vertex 2 100GB Lite-On Lightscribe 24x Windows 7 Pro x64 Dell 2408wfp 
KeyboardPowerCaseMouse
MS Wireless Laser 6000 v2.0 Corsair Pro AX1200 Gold Cooler Master HAF 922 MS Wireless Laser 6000 
  hide details  
Reply
post #80 of 80
Quote:
Originally Posted by kmss1 View Post
You should consider going back and giving Rep+ to those who helped you. It seems to be a courtesy that has been lost around this board...

Just a suggestion
as much as i agree that a lot of people seem to fail to use the rep system properly. I do believe it is against the "rules" to remind others to use the system. Basically they just have to remember a lot of users don't. Unless its for some stupid avatar or joke. never really for info that is worth it.
    
CPUMotherboardGraphicsRAM
Intel I7 2600k Asus p8p67-Deluxe Zotac GTX780 6GB OC G-skill Ripjaws 1866 
Hard DriveHard DriveHard DriveOptical Drive
Samsung 840 EVO 250 Samsung EVO 120 Western Digital 1TB Black Lite On 20x DVD RW 
CoolingOSOSOS
XSPC RayStorm + 360Extreme Rad Arch Linux Windows 8.1 x64 WindowsRE 
MonitorKeyboardPowerCase
Asus PB278Q ThermalTake Meka G1 Evga SuperNova 1000 P2 Xigmatek Elysium 
MouseMouse PadAudio
Logitec G500 Gaming Mouse Ultra Pad Fiio E-17 + ATH-M50 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
Intel I7 2600k Asus p8p67-Deluxe Zotac GTX780 6GB OC G-skill Ripjaws 1866 
Hard DriveHard DriveHard DriveOptical Drive
Samsung 840 EVO 250 Samsung EVO 120 Western Digital 1TB Black Lite On 20x DVD RW 
CoolingOSOSOS
XSPC RayStorm + 360Extreme Rad Arch Linux Windows 8.1 x64 WindowsRE 
MonitorKeyboardPowerCase
Asus PB278Q ThermalTake Meka G1 Evga SuperNova 1000 P2 Xigmatek Elysium 
MouseMouse PadAudio
Logitec G500 Gaming Mouse Ultra Pad Fiio E-17 + ATH-M50 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › No Internet access after fake AV removal