What do I do? Please help me! [Internet connection]

Viruses and worms
1

Hi, every 30 mins or 60 mins I lose my internet connection, I mean I am connected to my network, but I can’t access the internet and my avast browser freezes when this problem happens!!! so I restart the browser again and try to get in any website then it says this message https://ibb.co/h710PmJ but if I disconnect the network by myself it says this message when I try to enter a website “No Internet”, and the browser doesn’t freeze then,
I Then understood of the first case [which is in the screenshot] that this is not normal, I am connected but I can’t access the internet.

I fix that by reconnecting to my network again. then after a while it happens again. then I used a full scan by another anti virus and found this https://ibb.co/pPdLrTd I thought maybe that is the reason, but it didn’t give me the location of the file to delete it, all what I had is “RESOLVE” button so I clicked on resolve. then I scanned again and didn’t find it, but I still lose my internet connection.

I told my friend -He is High TechLevel engineer- that I be connected to my network but can’t access the internet, He said “You are probably DDOSed”.

I looked at the IP and used “WhatismyIPaddress” Website to know the location of this IP and I found it was in “Singapore” then I started to think “is my network being hacked by a guy in singapore?” “And does he use my network?” “And does he see my desktop?”
["And does he only know the IP of this PC? that is why my PC can’t access the internet?]
I then immediately changed the password of the Wifi page and the password of the network, but that didn’t work too, all what I realized is I can access my internet for a longer while after I changed the passwords then the problem happens again.

My network works fine on my other devices but on this PC it doesn’t, so I think my network is being hacked…Please help me.

2
.........then I used a full scan by [b]another anti virus[/b] and found this.............
Do you have more then one antivirus installed?

Follow instructions here >> https://forum.avast.com/index.php?topic=194892.0
Attach the requested logs from step #1 and #2

3

actually, I uninstalled my other antivirus -although it was useful to know that I was being switched to another IP- and I didn’t trust it much I thought maybe it is the reason of my problem, I have read lots of things about it “Fake Microsoft updates, fake scans, fake results, … ETC” so I uninstalled it, and installed avast, because I I thought maybe avast can protect me of this problem.
Now I only have avast.
But I still Have the problem. https://ibb.co/YXQyzqv this “!” symbol which is on the wifi Icon means that my network is limited, I read under my network name “Limited” that means the problem happened again, so I reconnect again.

Why should I install Farbar Recovery Scan Tool and MalwareBytes? I am okay with avast but … How do I get ride of this problem? And I apologize for putting screenshot links I don’t know how to put an Image here except with putting screenshot links. I don’t have or see “Attachments and other options” button.

I used Wifi Inspector which is in Avast and it said my network password is weak although the whole password consists of numbers and made a full scan using Avast and avast didn’t find anything. Please Free me of my problem.

4
Why should I install Farbar Recovery Scan Tool and MalwareBytes? I am okay with avast but ........
Did you want assistanse to solve your problem?

If so, those logs are needed. Tools can be removed when expert is finish

5

Is not Avast Anti Virus too? I don’t understand, why use malwarebytes and not Avast?

6

Malwarebytes is not antivirus
FRST is a diagnostic tool

7

MalwareBytes is really Dumb it detects around 225 viruses? … No No No I don’t think so, and how do I know which one is the correct virus that causes this problem? , Not good software. I am not gonna install it again.

And I don’t want to use Farbar Recovery Scan Tool. I am tired of downloading softwares that I don’t know and it could harm some parts of the system.
I am good with Avast.

Do you have another solution? Please all what I just want is to make my internet connection always on, That is all.
I am tired of reconnecting again and again.

8
MalwareBytes is really Dumb it detects around 225 viruses?
I guess it detected lots of PUPs ?

PUP = Possible Unwanted Program (usually crap)

Do you have another solution?
We can not see what is inside your computer .... for that we need to see logs

The two diagnostic logs from FRST are the important ones

9

Fine I will send you logs.
I decided to try avast premier, and I tried its firewall, However I still have the problem.
Do you want its log too?

10

Attach the log to your post, using the Attachments and other options below the text window, click the text to expand.

11

Do I have to put it here in public?

It may have some sensitive information.

12

There are only a few volunteer malware removal specialists available to help and Pondus isn’t one of them. Their available time is limited and they may also be in a different time zone.

So you could well be plying time zone ping pong, so direct communication even by PM would make the whole process more difficult. Generally help is only provided through the medium of the forums.

13

What do you mean by “Volunteer”? You mean they are just volunteers not part of Avast team?
And Who are they?

And By the way I am still waiting for Pondus to read the logs which I sent to him.

You too can help me in my problem please? Can I send you logs?

14
What do you mean by "Volunteer"? You mean they are just volunteers not part of Avast team? And Who are they?
Yes .... you find all info at top in the guide

@Sass Drake is notified and i gave him links to the logs.
It may take hours before he is online, sometimes not before next day

15

Ok.

16
  • Open Notepad (click Start button → type notepad.exe → press Enter)
  • Copy text from code block below and paste it into Notepad
HKLM-x32\...\Run: [chrome] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --headless --disable-gpu --remote-debugging-port=9222 hxxp://mi-de-ner-nis3.info/cdn-37.html?t=0.4
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {0EE3BE16-5A42-4419-B8BA-9680A80DBB10} - System32\Tasks\FastDataX Task => C:\PROGRA~2\FASTDA~1\FASTDA~1.EXE
Tcpip\Parameters: [NameServer] 82.163.142.9 95.211.158.137
Tcpip\..\Interfaces\{4C64E1C4-3495-4D7A-8109-C961B000B025}: [NameServer] 82.163.142.9 95.211.158.137
Tcpip\..\Interfaces\{532E43E3-D068-40CA-A3F9-1384E66BABDE}: [NameServer] 82.163.142.9 95.211.158.137
Tcpip\..\Interfaces\{532E43E3-D068-40CA-A3F9-1384E66BABDE}: [DhcpNameServer] 82.163.142.9
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\636559140.js [2017-04-27] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\636559140.cfg [2017-04-27] <==== ATTENTION
Shortcut: C:\Users\Karam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Intеrnеt Eхрlorer.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.erolpxei.bat (No File) <==== Cyrillic
Shortcut: C:\Users\Karam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Мozillа Firеfoх.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.xoferif.bat ()
Shortcut: C:\Users\Karam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzillа Firеfoх.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.xoferif.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Аvast SаfеZоnе Browsеr.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.rehcnual.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfоx.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.xoferif.bat ()
C:\Users\Karam\AppData\Roaming\Browsers
C:\ProgramData\{3ef26ccf-212c-1}
C:\PROGRA~2\FASTDA~1
EmptyTemp:
  • Go to File → Save As
  • Make sure that UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.
17

I am very very sorry I uninstalled some Software I thought that may solve my problem but No, It didn’t.
I will send you new logs.
And I am sorry again.

I have some questions please,
Won’t the software harm the system if I click on “Fix” button? What I mean is maybe it is not smart software. Nothing is guaranteed about it.
And what does fixlist.txt do?
And should I select all the options so it fixes them? Registry, Services, Drivers, Processes, Internet.
If yes, then why not choosing only “Internet” Option? I only have problem with my internet connection, I can access my network but can’t access the internet.

18

When you click on Fix button, FRST will look for fixlist.txt and do what is instructed in fixlist.txt. Options Registry, Services, Drivers, Internet are scan options and they control what will appear in scan log. Follow instructions I gave please.

19

OK but I see in the fixlist “Mozilla firefox”. so I must tell you that I uninstalled Mozilla firefox too. I am sorry for that.

So I think the new logs have the latest information, That is why I sent you them. Shouldn’t I use a new fixlist.txt because of the new logs?

or Should I still use the old fixlist you gave me?

20

Doesn’t matter if you uninstalled Firefox. Just follow the instructions.