After that we will need to reset both drivers
system
42
It said something about Winsock. Running Combofix again
system
43
Ran COmbofix again. Log attached.
Hmm yet we have repaired the winsock
OK could you go to control panel
System devices
Look for a yellow exclamation mark
Is there one next to the network adapter ?
If so select the ethernet one (Yukon)
Right click and select uninstall
Reboot and windows will reload the driver for that
Does the ethernet now work
system
46
I uninstalled the Ethernet adapter and scanned for changes. Found it, installed it and it is acquiring an address. I presume it will fail.
system
48
Heh. It’s still looking (and I’ve got to leave for the airport in 1 hour). Bah!
OK one further quick shot
Go to control panel > Internet Options
Select the connections tab
Select LAN settings
Ensure acquire DNS automatically is ticke d
system
50
It was wasn’t checked. I checked it, rebooted and it’s still searching for an address.
system
51
And, STILL searching for an address. WTH?
OK
As I am on windows 7 which is slightly different
Could you follow the steps on this page http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ClientConfig.html
Start here Click Start → Control Panel → Network Connections
system
53
Followed with no success. Setup to obtain IP automatically (DHCP)
system
54
Here’s what Windows says when I click on the Diagnose Connection Problems button:
Windows has detected a problem with the Winsock provider catalog on this computer. THis catalog allows programs to communicate with this computer across the network. Would you like Windows to reset the catalog to the default configuration?
system
56
I did. Reboot and still looking for an IP address.
system
57
Back on ground now. Any additional help would be great. Still trying to acquire address.
OK lets try the system services next
Open Services…
Start > Run > Type: services.msc > Click OK
Scroll down to and double click DNS Client
Set to Automatic under Startup type
Click the Apply button
Click the Start button
When it starts click OK
Repeat for DHCP Client.
And repeat for Remote Procedure Call (RPC).
When done, close Services.
Try the connection again
system
59
Interesting. Dns and the other were both auto and started. Dhcp was auto bit stopped. Started it and the following error popped up;
Could not start the dhcp client service on local computer.
Error 1075. The dependency service does not exist or has been marked for deletion.
Plz forgive typos. On phone now
OK what I think is that TDSSKiller deleted the netbt file - lets find a copy and then move it
OK run OTL and run the following script as I need to check the dependency files
[*]Select All Users
[*]Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%*.exe
/md5start
afd.*
tcpip.*
netbt.*
/md5stop
C:\Windows\assembly\tmp\U /s
CREATERESTOREPOINT