Internet Access Issue- Spyware?

TestTransmission

Long story short.

My sis has a dell notebook,mcafee had expired donekeys ago.
She didnt want to pay to renew.
I uninstalled mcafee on it.
Installed AVG.
AVG ran a scan,found a trojan..It could not be removed.
Internet then stopped working later that day.
Laptop has excellent connection to router via cable or wireless.
Open up IE or firefox,page cannot be displayed.
Got her to test with another laptop,works ok.
I went thru a few things with her on the phone,disable avg and microsoft firewall.
Still no joy.
Told her to ring eircom.
They went thru a series of t/s with her.
They then concluded that the wireless card was faulty.
My opinion,its spyware or something.
I wont get to have a look at the laptop for another fortnight,anything i could try to get her to do before she wipes the bloody thing.
Im completely at a loss at what the issue is.

Sherifu

If she knows how to access safe mode, a scan in safe mode may be able to remove it.

ActorSeeksJob

Do this

Please download Deckard's System Scanner (DSS) and save it to your Desktop.

• Close all other windows before proceeding.
• Double-click on dss.exe and follow the prompts.
• If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
• When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

TestTransmission

ActorSeeksJob wrote: »

Do this

Please download Deckard's System Scanner (DSS) and save it to your Desktop.

• Close all other windows before proceeding.
• Double-click on dss.exe and follow the prompts.
• If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
• When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

Maybe i wasnt clear,she can connect to the router.
But when she goes to view a page,she gets the error "page cannot be displayed"
so,d/l any remover off the net is a no go

ActorSeeksJob

You were perfectly clear, I thought you might show some ingenuity and use a USB key or any of the other numerous ways to transfer the file over

TestTransmission

yah,i know that,,but shes over 70 miles away..dont have the laptop with me!!!

deevey

Before doing a thing ... Turn off system restore .. viruses love it and can live a long happy life there.

1. Remove EVERYTHING from startup .. start > run > msconfig.. hit the startup tab and uncheck all the boxes .. apply and reboot. just in case its something loading from there preventing access.

if still no joy ...

2. Check the proxy settings in IE / Firefox, mcafee and other AV / Firewalls have a tendency to throw in the home address as a proxy to route traffic though or else something else (spyware or some of google's toys do this too!).

delete proxy... (even if its greyed out and disabled) remove it fully and set configuration to auto!

3. check she is getting a DHCP IP address from the router, you said its connected but may have a self assigned IP address e.g. 169.x.x.x

If she has a router assigned address .. try adding the DNS server address 192.168.1.254, if that isnt working try

dns1: 159.134.237.6
dns2: 159.134.248.17

if no ip address at all enter a manual IP address + DNS server.

assumming its an eircom router with default settings use the following .. if not you will need the router addy and adjust accordingly.

ip: 192.168.1.3
subnet: 255.255.255.0
gateway: 192.168.1.254
dns1: 159.134.237.6
dns2: 159.134.248.17

Try to ping the router..

if router is replying ping 159.134.198.138 (eircom's homepage)

test a webpage, if no webpage then try http://159.134.198.138 in IE's address bar..

if no joy ..

4. Check firewall settings, if she has macafee firewall or norton firewall / windows firewall / avg firewall / zonealarm etc... disable it, if no joy uninstall them.

if no joy ...

5. reset the TCP/IP stack doing the following.

a) open a Dos window

b) type: "netsh int ip reset reset.txt" (without quotes) press enter, should drop a line and do nothing else

c) type "netsh dump" (again without quotes) press enter ... load of text will fly up the screen. .. reboot.

if this worked the DNS and IP settings you put in earlier will have Disappeared and be set back to auto.

Test the web again .. hope you get some luck.

P.S. disabling firewalls more often than not is not enough as the services still run in the background and uninstalling is the only way. if you get a connection, enable the MS firewall straight away its not the best but should stop anything too malicious installing temporally.

Oh and if she gets a connection, ASAP set up a free logmein account and get her to download the client, it will give you access to install the antivirus etc ..

TestTransmission

deevey wrote: »

Before doing a thing ... Turn off system restore .. viruses love it and can live a long happy life there.

1. Remove EVERYTHING from startup .. start > run > msconfig.. hit the startup tab and uncheck all the boxes .. apply and reboot. just in case its something loading from there preventing access.

if still no joy ...

2. Check the proxy settings in IE / Firefox, mcafee and other AV / Firewalls have a tendency to throw in the home address as a proxy to route traffic though or else something else (spyware or some of google's toys do this too!).

delete proxy... (even if its greyed out and disabled) remove it fully and set configuration to auto!

3. check she is getting a DHCP IP address from the router, you said its connected but may have a self assigned IP address e.g. 169.x.x.x

If she has a router assigned address .. try adding the DNS server address 192.168.1.254, if that isnt working try

dns1: 159.134.237.6
dns2: 159.134.248.17

if no ip address at all enter a manual IP address + DNS server.

assumming its an eircom router with default settings use the following .. if not you will need the router addy and adjust accordingly.

ip: 192.168.1.3
subnet: 255.255.255.0
gateway: 192.168.1.254
dns1: 159.134.237.6
dns2: 159.134.248.17

Try to ping the router..

if router is replying ping 159.134.198.138 (eircom's homepage)

test a webpage, if no webpage then try http://159.134.198.138 in IE's address bar..

if no joy ..

4. Check firewall settings, if she has macafee firewall or norton firewall / windows firewall / avg firewall / zonealarm etc... disable it, if no joy uninstall them.

if no joy ...

5. reset the TCP/IP stack doing the following.

a) open a Dos window

b) type: "netsh int ip reset reset.txt" (without quotes) press enter, should drop a line and do nothing else

c) type "netsh dump" (again without quotes) press enter ... load of text will fly up the screen. .. reboot.

if this worked the DNS and IP settings you put in earlier will have Disappeared and be set back to auto.

Test the web again .. hope you get some luck.

P.S. disabling firewalls more often than not is not enough as the services still run in the background and uninstalling is the only way. if you get a connection, enable the MS firewall straight away its not the best but should stop anything too malicious installing temporally.

Oh and if she gets a connection, ASAP set up a free logmein account and get her to download the client, it will give you access to install the antivirus etc ..

i had gone as far as step 4 myself previously...
Wud u believe i just got her to go into safe mode
Got her to run AVG,and restored the corrupt file.
Problem solved,think i thought too hard about the probelm.