C:\Windows\SysWOW64\rundll32.exe

Viruses and worms
1

All 4 logs are attached. MalwareBytes keeps giving pop-ups blocking a malicious IP. Any help much appreciated

2

Could you let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION URLSearchHook: HKU\S-1-5-21-3733008882-996166134-1886125243-1000 - (No Name) - {f0381dbd-e018-4e07-ae40-d96ab15083f0} - No File BHO-x32: No Name -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> No File BHO-x32: No Name -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> No File BHO-x32: No Name -> {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} -> No File BHO-x32: No Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> No File BHO-x32: No Name -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> No File Toolbar: HKU\S-1-5-21-3733008882-996166134-1886125243-1000 -> No Name - {F0381DBD-E018-4E07-AE40-D96AB15083F0} - No File DPF: HKLM-x32 {CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} DPF: HKLM-x32 {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} Winsock: Catalog5 07 pcapwsp.dll File Not found () Winsock: Catalog5-x64 07 pcapwsp.dll File Not found () 2015-02-04 21:32 - 2013-08-22 11:54 - 00000314 _____ () C:\Windows\Tasks\qeizkraj.job EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

3

After running fix on FRST i restarted, now can’t connect to the internet at all.

Edit; Skype works, browsers, steam client etc don’t. I’m posting from my other pc.

4

So internet is working …

Can you copy the FRST log to an usb stick so you can post/attach it here from the other pc ?

Greetz, Red.

5

Done

6

OK, thank you.

But we have to wait for Essexboy now. I don’t know if he will be online again today because it is almost midnight where he lives. I will send him a pm anyhow.

Greetz, Red.

7

I can connect to websites using the IP… like I can get to google.com using the IP, 74.125.24.104. but the site just never resolves if i use google.com or anything like that. Not sure where to go from here

8

Just do nothing !

Wait untill tomorrow. I have send Essexboy a pm, so the first thing he will do when he is back online is helping you :slight_smile:

Greetz, Red.

9
  • Disable/remove the proxy software.
  • nest start > run > cmd > ipconfig /flushdns
  • reboot
  • try to connect to a website using the name
10

Thanks, this worked! Removed ProxyCap even though it was disabled, flushed & rebooted and it now works.

11

Could you attach the fix log please so that I can see what occurred

12

The fix log is already posted in post 5 :wink:

Greetz, Red.

13

Duh… :-[

How is the computer behaving now ?