Hey guys I'm stuck browsing and posting from my iPhone so please excuse the grammar.
I ran into a malicious site earlier and I think my laptop was briefly infected by something. The site did trigger my avira and windows defender alerts. It was something called antivir solutions pro or something where it was a bogus scanner-type of program that was running on my laptop. I then closed everything and restarted my laptop. I then scanned my laptop with ad aware, spybot, and avira. Everything seems fine now and the scanners didn't really detect too much. The only problem left is that now when I try to use the Internet via explorer or firefox, it won't let me.
It's sayin that my firefox is configured to use a proxy server that is refusing connections. I'm thinkin the virus, or whatever, changed these values. I tried everything but cannot figure out how to get access to the Internet with my laptop. Any help will be GREATLY appreciated. I haven't been able to check any work emails since earlier today. Thanks in advance!
-
-
perrin_aybara Notebook Consultant
Hi, Have you tried uninstalling then reinstalling firefox and ie?
-
-
It changed a few things in your windows registry and a few settings in your proxy settings.
Symptoms that may be in a HijackThis Log:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5643
O4 - HKLM\..\Run: [*random*] %UserProfile%\local settings\application data\*random*\*random*.exe
O4 - HKCU\..\Run: [*random*] %UserProfile%\local settings\application data\*random*\*random*.exe
Associated Antivir Solution Pro Files:
%UserProfile%\Local Settings\Application Data\*random*\
%UserProfile%\Local Settings\Application Data\*random*\*random*.exe
Associated Antivir Solution Pro Windows Registry Information:
HKEY_CURRENT_USER\Software\AVSolution
HKEY_CURRENT_USER\Software\AVSuitE
HKEY_LOCAL_MACHINE\SOFTWARE\AVSolution
HKEY_LOCAL_MACHINE\SOFTWARE\AVSuitE
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "*local*"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5643"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "*random*"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "*random*"
Full removal instructions here: Remove Antivir Solution Pro (Uninstall Guide)
or you could try a System Restore to an earlier point however those randomly named malicious files will still be present but inactive. -
Thanks a million twiz. I'm currently following the steps in the link and hopefully everything will be back to normal. I'll rep u when my laptop is done scanning and cleanin
edit: just got done following twiz's link and everything seems to have returned to normal. twiz, yur help was greatly appreciated and i rep'd u as promised. thanks again.
Can't use Internet! Please help!
Discussion in 'Windows OS and Software' started by houstoned, Aug 6, 2010.