This problem has been partly solved in the course of today, but there’s a whinge at the end.
What seems to have happened:
I got infected with Banker. Removed it (4 instances in Windows snapshot etl files) using Avast boot-time scan;
lost all access to any bank;
uninstalled and removed all references to all Internet-banking related security, so as to try to reinstall and regain access;
no luck; lost all Internet access, except using the Avast SafeZone browser, but anything that did not run in that environment was dead (e-mail client, bank security installations etc.);
the problem was affecting both computers in a home cabled network.
provider support-person suggested I reconfigure the network from ‘automatic DNS server’ to a fixed DNS (Google - 8.8.8.8 and 8.8.4.4). Did that on both computers, worked a treat and I now have access again.
However, I would like to restore the original (automatic DNS server) configuration (and understand what got broke).
The fact that only the Avast SafeZone browser - but no other browser (IE, Chrome, Firefox) - was able to access the Internet should mean something specifically helpful in solving the problem, but what?
Malwarebytes Anti-Malware found no malware and did not write a ScanLog, just a ProtectionLog.
Frst logs are attached.
ASWMBR got stopped twice with ‘A problem has stopped this program from working. Windows is looking for a solution to the problem’. First, I thought it was because I had installed in ProgramFiles, which the program couldn’t write to, but even when I installed on Desktop and then rebooted, the result was the same. It didn’t finish scanning, so I didn’t get to ask for a log and there’s nothing in the folder.
Don’t know if this signifies, but coincidentally - after I sent in the log - VLC updated. Should I rescan and resubmit or does the fix still stand? Thank you for your time and help.
I have cleaned up and updated the bank security installations.
Access is hunky-dory, providing I use a (borrowed) fixed DNS server address.
I had managed to restore access by resetting
{at ‘Network and Sharing Center’ / ‘Change Adapter Settings’ / ‘Local Area Connection’ / ‘Local Area Connection Properties’/ ‘Internet protocol version 4 (TCP/UPv4)’ / ‘Properties’}
from ‘Obtain DNS server automatically’ to ‘Use the following DNS server address’ (8.8.8.8 and 8.8.4.4 - Google).
I now want to revert to the automatic DNS server setting, but if I do so, although the Network and Sharing Center says I have Internet connection, I cannot access any sites, use my e-mail client (Eudora) etc.
Tried to run ASWMBR again, but got the same outcome:
‘avast! Antirootkit has stopped working - A problem caused the program to stop working correctly. Windows will close the program and notify you if a solution is available.’
The last line reported is:
‘Scanning: C:\Windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.Policy\Ma…’ (then extends outside the box).
Sorry I didn’t make that clearer: no, I have no access at all (no e-mail client, no on-line installation, no mobiles via wireless, and none of my browsers except - and this is what intrigues me - the Avast SafeZone browser, which I am using to write this). I am now going back to opendns.
OK you will need to reset your router, do you know how to do this ?
Somewhere on the back of the router will be a pinhole marked reset
Using a biro press in until it clicks
Wait until the router has finished resetting then try the net again
I never did get back because things settled only partly and temporarily. We’re now back to a similar situation, but now Avast has reported an attack by HTML:Router CSRF-C. In telligent Scan reports no Virus, but does identify Network Problems (without specifying what they are). Boot-time Scan finds nothing. Whether or not this is a continuation of the previous problem, a new infection or a successfully averted attack, I have not been able to discover. In any case, all attempts to accesses banking sites from my wife’s computer get redirected to phishing sites.
Really sorry if this sounds a lot like back to square one…