Ok I followed the instructions and clicked on “fix” and sent you Fixlog.txt
I still have problem and I noticed that my IP address got changed, but the location is the same.
And I feel that the period got decreased, I mean maybe every 10 minutes or 15 minutes or even less than 10 minutes , the problem happens again.
it was 30 - 60 minutes,and now it is 10 -15 minutes or less than 10 minutes. I can’t spend an hour without losing connection.
Post fixlog.txt here.
Fix result of Farbar Recovery Scan Tool (x64) Version: 16-05.2019
Ran by Karam (18-05-2019 01:14:15) Run:1
Running from C:\Users\Karam\Desktop
Loaded Profiles: Karam (Available Profiles: Karam)
Boot Mode: Normal
==============================================
fixlist content:
*****************
HKLM-x32\...\Run: [chrome] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --headless --disable-gpu --remote-debugging-port=9222 hxxp://mi-de-ner-nis3.info/cdn-37.html?t=0.4
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {0EE3BE16-5A42-4419-B8BA-9680A80DBB10} - System32\Tasks\FastDataX Task => C:\PROGRA~2\FASTDA~1\FASTDA~1.EXE
Tcpip\Parameters: [NameServer] 82.163.142.9 95.211.158.137
Tcpip\..\Interfaces\{4C64E1C4-3495-4D7A-8109-C961B000B025}: [NameServer] 82.163.142.9 95.211.158.137
Tcpip\..\Interfaces\{532E43E3-D068-40CA-A3F9-1384E66BABDE}: [NameServer] 82.163.142.9 95.211.158.137
Tcpip\..\Interfaces\{532E43E3-D068-40CA-A3F9-1384E66BABDE}: [DhcpNameServer] 82.163.142.9
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\636559140.js [2017-04-27] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\636559140.cfg [2017-04-27] <==== ATTENTION
Shortcut: C:\Users\Karam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Intеrnеt Eхрlorer.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.erolpxei.bat (No File) <==== Cyrillic
Shortcut: C:\Users\Karam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Мozillа Firеfoх.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.xoferif.bat ()
Shortcut: C:\Users\Karam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzillа Firеfoх.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.xoferif.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Аvast SаfеZоnе Browsеr.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.rehcnual.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfоx.lnk -> C:\Users\Karam\AppData\Roaming\Browsers\exe.xoferif.bat ()
C:\Users\Karam\AppData\Roaming\Browsers
C:\ProgramData\{3ef26ccf-212c-1}
C:\PROGRA~2\FASTDA~1
EmptyTemp:
*****************
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\chrome" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0EE3BE16-5A42-4419-B8BA-9680A80DBB10}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0EE3BE16-5A42-4419-B8BA-9680A80DBB10}" => removed successfully
C:\WINDOWS\System32\Tasks\FastDataX Task => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FastDataX Task" => removed successfully
"HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\NameServer" => removed successfully
"HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4C64E1C4-3495-4D7A-8109-C961B000B025}\\NameServer" => removed successfully
"HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{532E43E3-D068-40CA-A3F9-1384E66BABDE}\\NameServer" => removed successfully
"HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{532E43E3-D068-40CA-A3F9-1384E66BABDE}\\DhcpNameServer" => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => removed successfully
C:\Program Files (x86)\mozilla firefox\defaults\pref\636559140.js => moved successfully
C:\Program Files (x86)\mozilla firefox\636559140.cfg => moved successfully
C:\Users\Karam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Intеrnеt Eхрlorer.lnk => moved successfully
C:\Users\Karam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Мozillа Firеfoх.lnk => moved successfully
C:\Users\Karam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzillа Firеfoх.lnk => moved successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Аvast SаfеZоnе Browsеr.lnk => moved successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfоx.lnk => moved successfully
C:\Users\Karam\AppData\Roaming\Browsers => moved successfully
C:\ProgramData\{3ef26ccf-212c-1} => moved successfully
"C:\PROGRA~2\FASTDA~1" => not found
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 16142581 B
Java, Flash, Steam htmlcache => 3409 B
Windows/system/drivers => 1299544632 B
Edge => 0 B
Chrome => 121913892 B
Firefox => 431771183 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 7676402 B
systemprofile32 => 336682503 B
LocalService => 1450820 B
NetworkService => 607262 B
Karam => 1470921471 B
RecycleBin => 0 B
EmptyTemp: => 3.4 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 01:14:51 ====
Post new FRST.txt and Addition.txt logs.
New Logs
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Fix result of Farbar Recovery Scan Tool (x64) Version: 19-05.2019
Ran by Karam (19-05-2019 16:40:35) Run:2
Running from C:\Users\Karam\Desktop
Loaded Profiles: Karam (Available Profiles: Karam)
Boot Mode: Normal
==============================================
fixlist content:
*****************
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
*****************
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
==== End of Fixlog 16:40:35 ====
I still have the problem, I got “limited” word under my network name and lost connection. So I reconnected again.
Do you have other PC, phone or tablet in same network and if you have, dou you have same problem on them?
Actually I have another PC, but its case is different, it can access the network but it can’t access the internet [AT ALL].
in the past it was working fine, then I stopped using it for months, then someday I turned it on and I found it very slow -[I looked at task manager then I found “System Process” it uses too much of the CPU, CPU Usage maybe 90 - 97 , I don’t know why]-, and can’t access the internet.
I don’t why it is slow, maybe because I didn’t clean it years ago with a blower. And I don’t know why it doesn’t have access to the internet.
According to logs your PC is clean. Can you test with Google Chrome instead of Avast Browser?
I uninstalled Avast Secure Browser and I tried Google Chrome but I still have the problem and google chrome Froze. so I reconnected again.
What do I do?
What about uninstalling all chrome browsers [Google Chrome and Avast Secure Browsers] and deleting some chrome codes using FRST?
Then installing chrome Browsers again.
What I mean is maybe we should start from 0
I don’t know I am just suggesting.
And did you see this? https://ibb.co/pPdLrTd I already posted that in my first post. I want to make sure you saw that.
And I don’t know if what is written in that screenshot happens to me or not, but that is what I got from my other anti virus -when I made a scan- before I uninstall it.
And should I do anything here? https://ibb.co/txnBN3W
Is problem gone if you uinstall avast?
The problem already started before I install Avast. Actually it is been months and my PC is still in that case.
Here is another screenshot, https://ibb.co/D7tn6xW
Nothing works…
-Avast Premier and its firewall and its Wi-Fi Inspector.
-Avast Online Security (browser extension).
-Uninstalling OpenVPN and other softwares.-------------------------------Do you want me to uninstall avast too?
-Using Google Chrome.----------------------------------------------------I re installed Avast Secure Browser again because Google Chrome didn’t fix my problem.
-Deselecting “Register This Connection’s Address in DNS” for IPv4 and IPv6
-Farbar Recovery Scan Tool.
-Uninstalling my other Anti Virus and its products.
-Running CMD as Administrator and Writing ipconfig command in CMD.
I need big help. I hope Sass Drake finds a solution for this.
I made Strong Full Virus Scan, with
-High sensitivity
-Scan for potentially unwanted programs (PUBs)
-Follow links during scan.
-Test whole files (Very slow for big files)
-High priority Scan
-Scan all types of archives
-Scan all files (very slow)
And here is what I got … I only know Avira VPN Crack the rest of the files I don’t know them.
Nettrans virus (also found as Nettrans.exe virus) is a term used to identify adware that connects to a remote host to transmit and receive unknown data. Once Nettrans is on a computer it will create a service named “Prefs Secure” that loads the C:\ProgramData\PrefsSecure\Nettrans.exe program.
When you “double-click” an EXE file, your computer automatically executes these instructions designed by a software developer (eg. Kingsoft Corporation) to run a program (eg. Kingsoft FastAit 2009) on your PC.
Every software application on your PC uses an executable file - your web browser, word processor, spreadsheet program, etc. - making it one of the most useful kinds of files in the Windows operating system. Without executable files like nettrans.exe, you wouldn’t be able to use any programs on your PC.
Nattrens erros The most common nettrans.exe errors that can appear on a Windows-based computer are:
I have never got any nettrans error before. At least Nettrans.exe and LogicHandler.exe don’t run on Task Manager.
So What do I do with all these files?
Or I send you them then you analyze them all? Then at the end deciding what to delete or repair?
Do you have same problem on other Wi-Fi network?
I have been using this network for approximately 2 years, and the problem started maybe 3 months ago,
So I don’t know if I use another network I will get this problem again or not.
What do I do to fix this problem?
And what about the 18 scanned files in Avast?
I made another scan to get a report file , this time I got same issues + one = 19 issues
Here is the report file
*
* Avast Scan Report
* This file is generated automatically
*
* Scan name: Advanced Scan
* Started on: Wednesday, May 22, 2019 12:44:17 AM
* VPS: 190521-4, 05/21/2019
*
C:\Users\Karam\AppData\Roaming\Stockdanstring.tst|>Nettrans.exe [L] Win32:Adware-gen [Adw] (0)
C:\Users\Karam\Downloads\Avira Phantom VPN 2.12.8.21345 Setup + Crack\Avira Phantom VPN 2.12.8.21345 Setup + Crack\Avira Phantom VPN 2.12.8.21345 Setup + Crack\Data Reset\Data Reset.exe [L] Win32:Malware-gen (0)
C:\ProgramData\a7c11770-3c77-0\a7c11770-3c77-0.d [L] Win32:AdwareX-gen [Adw] (0)
C:\Users\Karam\AppData\Roaming\Voyabam.bin|>LogicHandler.exe [L] Win32:InstallCore-IE [PUP] (0)
C:\Users\Karam\AppData\Roaming\Voyabam.bin [L] FileRepMalware [PUP] (0)
C:\ProgramData\a7c11770-4de7-1\a7c11770-4de7-1.d [L] Win32:AdwareX-gen [Adw] (0)
C:\ProgramData\{128871a8-412c-1}\{128871a8-412c-1}.d [L] Win32:Adware-gen [Adw] (0)
C:\ProgramData\{366F7B1D-C7EE-32EE-96DA-6DBE963D34EF}\{366F7B1D-C7EE-32EE-96DA-6DBE963D34EF}.tmp [L] Win32:Adposhel-E [Adw] (0)
C:\ProgramData\a7c11770-3b83-1\a7c11770-3b83-1.d [L] Win32:Adware-gen [Adw] (0)
C:\ProgramData\9cadea51-3c75-0\9cadea51-3c75-0.d [L] Win32:Adware-gen [Adw] (0)
C:\ProgramData\9cadea51-4cc1-1\9cadea51-4cc1-1.d [L] Win32:Adware-gen [Adw] (0)
C:\ProgramData\{4bc5400b-712c-0}\{4bc5400b-712c-0}.d [L] Win32:Adware-gen [Adw] (0)
C:\ProgramData\{71901338-412c-1}\{71901338-412c-1}.d [L] Win32:Adware-gen [Adw] (0)
C:\ProgramData\{11440c3a-312c-0}\{11440c3a-312c-0}.d [L] Win32:Adware-gen [Adw] (0)
C:\ProgramData\{70874456-512c-1}\{70874456-512c-1}.d [L] Win32:AdwareX-gen [Adw] (0)
C:\ProgramData\{E416A6AE-1A5D-E097-2507-146C25E04D3D}\{E416A6AE-1A5D-E097-2507-146C25E04D3D}.tmp [L] Win32:Adposhel-E [Adw] (0)
C:\ProgramData\a7c11770-03f3-0\a7c11770-03f3-0.d [L] Win32:Adware-gen [Adw] (0)
C:\ProgramData\{95C6A0E3-1C10-9147-6801-C41D68E69D4C}\{95C6A0E3-1C10-9147-6801-C41D68E69D4C}.tmp [L] Win32:Adposhel-E [Adw] (0)
C:\Users\Karam\Downloads\Avira Phantom VPN 2.12.8.21345 Setup + Crack.rar|>Avira Phantom VPN 2.12.8.21345 Setup + Crack\Avira Phantom VPN 2.12.8.21345 Setup + Crack\Data Reset\Data Reset.exe [L] Win32:Malware-gen (0)
Infected files: 19
Total files: 703134
Total folders: 46671
Total size: 151.6 GB
*
* Scan stopped: Wednesday, May 22, 2019 1:10:44 AM
* Run-time was 26 minute(s), 27 second(s)
*
Can you try to factory reset router of yours?
I reset the router and didn’t work too.
What now?
Hello? Anyone?
I made Strong Full Virus Scan, with -High sensitivity -Scan for potentially unwanted programs (PUBs) -Follow links during scan. -Test whole files (Very slow for big files) -High priority Scan -Scan all types of archives -Scan all files (very slow)
If you set High sensitivity back to default, what result to you get then?