Lost internet (via IE) / localhost access / ftp ability

[john97]

gmer log

omg ... I tried gmer again ... and it finally worked! ... I attached the log file

 

[kimsland]

Thanks, actually I've been offline for quite a few hours, so sorry for the late reply (although in this case it may have been for the best)
I have 32 email replies to get through and yours (well your original reply up there) is the first
Also note you can EDIT and add to your post (if its the last post in the topic still) instead of replying to yourself, this will save me getting multiple emails (well, from many members)

Anyway, GMER Rootkit scan came out ok
But you had some issues along the way this may be caused either by a memory issue or possibly even cross file links, lets go with that one
Start > Run > chkdsk /r > (right click and run as Administrator) ok > Y > then close the command window
The next time you restart CheckDisk will perform a scan, just let it run without pressing any keys on the keyboard, but we will continue before restarting.

Un-install Combofix

• Click START then RUN
• Now type Combofix /uninstall in the runbox and click OK
• Any popup errors about Antivirus just ok or close

Note: 1 space after ComboFix in that uninstall command


Download and run TFC http://oldtimer.geekstogo.com/TFC.exe
Your computer may need to Restart


Remove old System Restore Points

• 
  Open System by clicking the Start button
  
  , right-clicking Computer, and then clicking Properties.
• In the left pane, click System protection
  
  . Administrator permission required If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
• Under Protection Settings, click the disk, and then click Configure.
• Click Turn off system protection, click OK, and then click OK again.

Then turn it back on again.


Restart, and let me know how its performing

 

[john97]

the chkdsk completed with nothing found, combofix removed, TFC has been run and the old system restore points have removed
the original issues persist though - can not access localhost with either IE or firefox, can not access anything with IE, can not ftp, can not ping localhost (although can ping 127.0.0.1) ... also seems that many microsoft programs that need to access externally fail at that point (ie. accessing online content for help, etc.)

 

[kimsland]

There's nothing I've missed (malware removal wise)
You did run the AVG Remover Tool, I posted?

You could try running SFC /ScanNow to check all Windows files are intact

 

[john97]

what is SFC /ScanNow ?

 

[kimsland]

System File Checker (sfc)

Scans and verifies the versions of all protected system files after you restart your computer

More info: http://support.microsoft.com/kb/929833

 

[john97]

yes I did run the AVG remover tool ... the SFC ran with no mention of files that couldn't be repaired ...

If we have no malware, is it possible to reset what ever is "upset" regarding connections to the internet ?

 

[kimsland]

But you can connect to the Internet via Firefox, therefore its not a network reset
Is that true? What happens when you try loading google.com in Internet Explorer?

Maybe provide a fresh HJT log as an attachment

 

[kimsland]

It may be your modem/router that requires a reset

But before doing this, please start Windows in Safe Mode with Networking (press F8 key before Windows starts to load up)
Once in Safe Mode with Networking, then check your sites in the browsers

Edit:
Since you had this folder: C:\found.000
This means that your drive has had corruption before. You may have a faulty hard drive that requires replacing (actually this is likely it)

 

[john97]

yes I can connect via firefox ... no sites at all with IE ... I've attached a zip with a new hjt log ... also includes a ff image for the screen when I attempt localhost and 2 screen shoot for ie - first shows google or any page attempt, the second shows the diagnostic message

 

[kimsland]

I edited in above

How big is your hard drive and how much of it is used and free space?
I'll check the logs now

 

[john97]

HD = 100G, using approx 54 G

safe mode = same access as regular mode

have been logged on four different routers / modems since this issue developed - 2 public and 2 private, the private ones were reset to be certain

 

[kimsland]

Mine doesn't go directly to localhost as well
But that's because I haven't got Internet Information Services and configured it to use localhost as my IP

Is this all we are talking about, because if so, its just a configuration issue

Have you installed IIS ?

Its either that or your Windows firewall has blocked it

This is not a Virus and Malware issue

 

[john97]

I have IIS installed and have used localhost via both browsers quite regularly for some time. I've used both browsers and my ftp client also for quite sometime. approx a week ago in the middle of my day, when I was using ie and my ftp client (not together ) I suddenly lost all access ... they just can't seem to resolve addresses, or what ever ...
I eventually managed to access the internet via FF by using hjt to remove an entry mentioned earlier.
.. IIS has been uninstalled, re-installed (or in vista - turned on again) and reset, IE has been re-installed and then upgraded to be sure if any file had been corrupted they would be replaced .... ftp client has been updated ... ip has been reset ...firewall and virus protection have been shut off to test that (now back on)... all to no avail

see also original post

 

[kimsland]

Well I did mention possible memory or specifically Hard Drive issue (I have seen this before)

But we probably need to check IPConfig and Firewall settings and even IIS configurations and so forth.
BUT, lets just say "Virus and Malware" issue (if ever) solved
You will need to create a New Topic in: Storage and Networking forum, as we have come too far in this Topic and cannot go "offtopic" as such (ie no Virus or Malware present - that I can see)

I like networking issues (meaning I try to solve them as well) but there are a few top notch network support helpers here, that may see your new topic and say just do this .... (that would be nice )

How about that?

 

[john97]

OK Kimsland,
Thanks ever so much for the guidance and your patience. I really appreciate that. J