cant get rid of pup virus

i no longer had access to the internet, spent an hour with cable company before they suggested in might be a virus. I used several types of programs to scan and found nothing, until malwarebytes supposedly cleaned 14 pup viruses. Still had no internet. Tried several more times including rebooting etc… I even deleted my firefox (left me with IE). I downloaded several root programs they didn’t work (I had to download them on my laptop, copy and deliver them to my desktop). I even tried several system restores, no luck. I just did a bootscan with Avast Premier 2015, I didn’t have it set for the highest level however. It discovered the following;

a virus in office toolkit 2010.exe win32: pup.gen [pup]

It asked me what I wanted to do I didn’t know (delete? fix? quarrentine?) I selected fix automatically.

I don’t think it found anything else, I stepped out of the room, came back it was over. Still no access to the internet. Im trying it again with the settings at the highest and waiting to see what happens. Any thoughts on what else to do? what choice do I select when it asks? anything else I can do? Any help is appreciated. The links below are screenshots of what malwarebytes found the first time, I couldn’t attach them.

http://i1126.photobucket.com/albums/l612/21oliver/001_zpsleuwdmnw.jpg
http://i1126.photobucket.com/albums/l612/21oliver/002_zpsdpbcudso.jpg

Attach your basic logs. (MBAM, FRST and aswMBR…!!)
Instructions: https://forum.avast.com/index.php?topic=53253.0

supposedly cleaned 14 pup viruses.
PUP = not virus / Possible Unwanted Program .... usually crap that comes bundled with free downloads
I couldn't attach them.
below the box you write in here, you find [b]Attachments and other options[/b]

ill check out the link tyvm, been at this almost 6 hours now. I couldn’t attach the screenshots because they were too large, not because I didn’t see where to do so.

Thx again, im still waiting on the 2nd bootscan meanwhile ill check out the link…

I couldn't attach the screenshots because they were too large
attach logs ... that is what we need to help

I have used updated versions of malwarebytes, combofix and tdsskiller…malwarebytes found one problem (the log is attached). After cleaning and rebooting malwarebytes no longer found any problems, and I still have no access to the internet. None of the other programs found anything.

Follow the instructions in Reply #1 and attach your logs, else we can’t help.

sorry I was in the process of doing that, was just posting upgrades. I followed all the info in the link and have attached the 3 logs.

OK, now you’ve to wait a bit…

ty for your help. If it was just me I could deal with it, but im the caregiver for my elderly mother and handle all of her affairs, being without the internet is a real problem. For now I have access with a laptop.

Thank you again-

Hi there the first thing I noticed was that the driver for the wireless LAN card is not properly installed

Name: 802.11n Wireless LAN Card Description: 802.11n Wireless LAN Card Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Ralink Technology, Corp. Service: netr28x Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver

Could you go to control panel > device manager and see if the network adapter has a yellow exclamation mark alongside (screenshot below)
If it has then right click the driver and select uninstall.
Reboot the computer and windows should re-install the driver

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKU\S-1-5-21-3075089630-1504692016-2662391995-1001\...\Run: [Wisdom-soft ScreenHunter 6.0 Free] => 0 CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR HKU\S-1-5-21-3075089630-1504692016-2662391995-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File FF SearchPlugin: C:\Users\21oliver\AppData\Roaming\Mozilla\Firefox\Profiles\cj3szsls.default\searchplugins\BrowserDefender.xml FF SearchPlugin: C:\Users\21oliver\AppData\Roaming\Mozilla\Firefox\Profiles\cj3szsls.default\searchplugins\webwebweb.xml FF Plugin-x32: @TrendMicro.com/FFExtension -> C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll No File FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com [2015-01-26] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] CHR HKLM\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - No Path CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - No Path 2015-01-28 06:39 - 2015-01-28 06:39 - 00000000 ____D () C:\Users\21oliver\AppData\Local\TempTaskUpdateDetection0DD0C395-B398-4D6F-AC41-B90F63BC6F66 CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset c:\resetlog.txt CMD: ipconfig /release CMD: ipconfig /renew EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Download and run farbar service scanner

https://dl.dropboxusercontent.com/u/73555776/fssscan.JPG

Tick “All” options.
Press “Scan”.
It will create a log (FSS.txt) in the same directory the tool is run.

Please copy and paste the log to your reply.

Ok I did all that and attached the text file (I checked when I rebooted the adaptor was ok, so that worked).

TY

Could you attach the FRST fixlog please

So you still have no internet connection ?

nope nothing :frowning:

There should be a fixlog on the desktop after the FRST fix that will tell me whether or not there was a problem with your connections

Please download MiniToolBox, save it to your desktop and run it.

https://dl.dropbox.com/u/73555776/minitoolbox.JPG

Checkmark the following checkboxes:

[]Flush DNS
[
]Report IE Proxy Settings
[]Reset IE Proxy Settings
[
]Report FF Proxy Settings
[]Reset FF Proxy Settings
[
]List content of Hosts
[]List IP configuration
[
]List Winsock Entries
[]List last 10 Event Viewer log
[
]List Installed Programs
[]List Devices
[
]List Users, Partitions and Memory size.
[*]List Minidump Files

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using “Reset FF Proxy Settings” option Firefox should be closed.

k done…

I just woke up and now have internet access! :o

Thx!

What problems are you experiencing now ?