viruses and rootkits

Viruses and worms
1

Hello to everybody!

I have old Copaq NX9000 machine on Windows XP professional. There is a lot of viruses and rootkits which Avast can’t remove (or even recognize), so I decided to ask You for help.

I think that some viruses control the keyboard, and every 5 seconds runing StickyKeys (an accessibility feature to help computer users who have physical disabilities).

Also, It can’t connect to the internet. I try everything I know but it didn’t help.

I attached log files as You asked in the introduction post.

Sorry for my English,

Thank you very much!

2

Please attach Mini032415-01.dmp also.

3

it seems your Malwarebytes program was not updated before you scanned - Malware Database: v2015.03.09.05

sorry, missed the: no connection above :wink:

4

It is old.

As I wrote, it is not possible to connect to the internet.

I tried to update MBAM manually but I’m not so skilled.

Sorry if I miss something but can you tell me which program I need to use for making that Mini032415-01.dmp

Thank you guys!

5

OK first we will try to get the net working. When you try to connect what error do you get ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: SearchScopes: HKLM -> DefaultScope value is missing. C:\Documents and Settings\Administrator\DelB15.bat C:\Documents and Settings\Default User\DelB15.bat CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset c:\resetlog.txt CMD: ipconfig /release CMD: ipconfig /renew CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

Added below as fixlist.txt if that makes it easier

6

There is no eny error message when I plug the LAN cable into it. I just see zero sent/recieved bytes.

It stopped working about seven day ago.

THANK YOU VERY MUCH!

I will do as you instructed right now. Just a moment.

7

Ok, there is a FIRST log file.

8

Do you have another Ethernet cable that you could use ?

9

yes. I tried to plug in but nothing happened. :-\

10

You do not need to create that minidump, it is already on your system.

11

Ок, thanks. Good to know.

12

I would tend to suspect a problem with the Ethernet card

Please download MiniToolBox, save it to your desktop and run it.

https://dl.dropbox.com/u/73555776/minitoolbox.JPG

Checkmark the following checkboxes:

[]Flush DNS
[]Report IE Proxy Settings
[]Reset IE Proxy Settings
[]Report FF Proxy Settings
[]Reset FF Proxy Settings
[]List content of Hosts
[]List IP configuration
[]List Winsock Entries
[]List last 10 Event Viewer log
[]List Installed Programs
[]List Devices
[]List Users, Partitions and Memory size.
[*]List Minidump Files

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using “Reset FF Proxy Settings” option Firefox should be closed.

13
I would tend to suspect a problem with the Ethernet card
One of the reasons why I asked for that minidump ;)
14

Here is a log file.

Thank you very much!

15

Yep, nothing is seeing the router and is reporting that the Ethernet card is not connected… Methinks it has broken

16

I suggest to download and try to install the latest drivers for it.

17

ОК, anyway, thank you very much for taking you time!

18

I will.

Thanks.