suspiscion of virus...cannot get update...is proxy configured?...

system · May 6, 2015, 10:10am

i cannot update my tomtom
message:“no internet connection.mydrive connect will try to reconnect when it detects an internet connection”

and i have a connection wifi to internet.

i cannot execute eset online scanner.
message: cannot get update, is proxy configured?

i run avast scan (aswboot.log)
i tun combofix
i run mbm.
i run farbar.
i run aswmbr:
message: avast antirootkit a cessé de fonctionner et la derniere ligne de aswmbr est la suivante:

scanning c:\windows\assembly\gac_msil\microsoft.visualstudio.tools.applications…

if you can be so kind to help me,
I thank you in advance,
many greetings

pierre

Pondus · May 6, 2015, 10:41am

i run farbar.

Attach Farbar logs ... two logs total

system · May 6, 2015, 10:56am

here are 2 log’s farbar

pierre

essexboy · May 6, 2015, 1:36pm

Could you attach the combofix log please

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: GroupPolicy: Group Policy on Chrome detected <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-1315751904-1439911886-537610384-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION SearchScopes: HKLM-x32 -> DefaultScope value is missing. Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2015-04-28] <==== ATTENTION CHR HKLM-x32\...\Chrome\Extension: [kbhplonhjleiopohgmppianogioknked] - No Path Or update_url value 2015-05-01 15:19 - 2015-05-01 15:19 - 00002960 _____ () C:\windows\System32\Tasks\{60933612-0DE0-4A34-BAA3-B04892E77487} 2014-12-12 21:13 - 2014-12-12 21:13 - 0000000 _____ () C:\Users\nne\AppData\Local\{E26A9988-AA2A-4D14-B279-56CA5095EACF} Task: {073B41B5-B4CE-4CCC-8054-E05D9E4042AB} - System32\Tasks\SBW_UpdateTask_Time_313535383137383530362d235b783432415b45345a2d6c => Wscript.exe //B "C:\ProgramData\SpeedBit\sbhe.js" sbu.exe /invoke /f:check_services /l:0 Task: {5AC77F5C-DAAE-4CAF-BE15-C87E04F48816} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION C:\ProgramData\SpeedBit Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset c:\resetlog.txt CMD: ipconfig /release CMD: ipconfig /renew CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

system · May 6, 2015, 2:54pm

I had several update windows waiting reboot and the pc must be rebooted…

i run frst with fix.

here is the log fixlog.txt.

and pc reboot.

what has happened? delete proxy setting… and change policies…?

pierre

essexboy · May 6, 2015, 4:11pm

Is tom tom able to update now ? Yes there were some adjustments made to your connection settings

system · May 6, 2015, 6:20pm

no, the symptoms are the same

essexboy · May 6, 2015, 6:27pm

Could you attach the combofix log please

Do any other programmes have problems connecting or updating ?

system · May 6, 2015, 6:39pm

I am unable to update the new program avast internet security,
update 8:32 p.m.
current version: 150506-3
Publication 06/05/2015 6:05 p.m.
connection established
8:35 p.m. host unreachable

essexboy · May 6, 2015, 7:30pm

Did you install Avast VPN ?

If not repair Avast and deselect that option

system · May 6, 2015, 7:37pm

i use vpn, not actually, but often.

essexboy · May 6, 2015, 7:43pm

When you try to update other programmes do you get the same error ? Does your browser connect quite happily

system · May 6, 2015, 8:02pm

firerfox generally ok.

attempted update of mbm:
impossible to access the update server.

update Office 365 ok

VLC update …> an error occurred during the search update.

essexboy · May 6, 2015, 9:05pm

Do any other computers that use your router experience the same problem ?

Could you disable all Avast shields for 10 minutes and see if the updates work

system · May 6, 2015, 9:37pm

I deactivated all avast agents
the result is the same here on my laptop.

also on my desktop pc I can update tomtom and run eset online …no problem.

pierre

system · May 7, 2015, 9:42am

I repaired avast same problem …
I uninstalled / reinstalled avast same problem …
I can not seem to install the new avast program host unreachable …

essexboy · May 7, 2015, 1:42pm

OK lets fully uninstall Avast, then reset the network settings and winsock

Then try a full install

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel

[]Run the uninstall tool and accept the reboot to safe mode
[]Once complete reboot your system
[]Run the FRST fixlist below
[]Reinstall Avast

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset c:\resetlog.txt CMD: ipconfig /release CMD: ipconfig /renew CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

system · May 7, 2015, 7:23pm

from another pc…
i have execute frst.exe with fix,
there is one error below

can i continue réinstall avast?

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-05-2015
Ran by nne at 2015-05-07 20:55:35 Run:2
Running from C:\Users\nne\Desktop
Loaded Profiles: nne (Available profiles: nne)
Boot Mode: Normal

Content of fixlist:

Quote
CreateRestorePoint:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

Quote => Error: No automatic fix found for this entry.
Restore point was successfully created.

========= netsh advfirewall reset =========

Ok.

essexboy · May 7, 2015, 7:28pm

Is tomtom updating ? Run a quick check before you reinstall Avast

system · May 7, 2015, 7:33pm

no sorry…

suspiscion of virus...cannot get update...is proxy configured?...

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-05-2015 Ran by nne at 2015-05-07 20:55:35 Run:2 Running from C:\Users\nne\Desktop Loaded Profiles: nne (Available profiles: nne) Boot Mode: Normal

Announcements

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-05-2015
Ran by nne at 2015-05-07 20:55:35 Run:2
Running from C:\Users\nne\Desktop
Loaded Profiles: nne (Available profiles: nne)
Boot Mode: Normal