No internet after malware removal.

[Zearoth]

Oh great wizards of the computer world, hear my pleas for help and my cries for knowledge!

A terrible malware has infected my computer like a cancer. For every time I try to remove this illness, it damages my system, and leaves me no choice but to keep it on my computer in order to use it!

Basically what's happening with my computer is I will run a scan with malwarebytes and remove the malware on my system. Once I reboot my computer, my internet is gone, kind of. I am able to send PMs over skype and over steam. However, I can't talk in skype groups, and the steam home page doesn't load. Furthermore, I can't access the internet with any web browser.

A troubleshoot tells me that my winsock files are missing or corrupted, but it can't repair them, and when I reset these files use the CMD command 'netsh winsock reset' in an elevated command prompt, it tells me there are no issues, and the winsock registry entries are there (Though I don't know if they're damaged or not). I don't know for sure what the malware is but I think it said something about being a DNS hijacker? Could these strange internet problems be related to my DNS settings and not a winsock issue?

 

[dextermat]

Hi,

to be sure the malware is remove it would be best to download and run in safe mode : JRT, Roguekiller and adwcleaner

Goto a computer that can connect to internet. Goto bleepingcomputer.com and download : JRT, Roguekiller and adwcleaner, minitoolbox

once this is done, if internet is still not working

download and run

http://www.majorgeeks.com/files/details/tweaking_com_repair_winsock_dns_cache.html

http://www.majorgeeks.com/files/details/winsock_xp_fix.html

You can also try windows repair all in one: this programs does miracle (available @ bleepingcomputer.com )

 

[Rabmac]

You are in luck as some nice person made this tool and is letting us use it for free. You can download Windows Repair Tool here: http://www.bleepingcomputer.com/download/windows-repair-all-in-one/

Complete each step before running the repair at the end. Make sure you do this in safe mode. This should fix all the damage caused by the malware.

 

[Zearoth]

Will these fixes work on my windows 10 machine?

 

[Chicano]

Must be DNS Hijacking.. corrrupted winsock doesn't allow any internet access, but check your DNS here: https://forms.fbi.gov/check-to-see-if-your-computer-is-using-rogue-DNS


Check the gohacking.com article for solutions that basically consist in:
1. Changing the Router password,
2. verify your current DNS settings and configure them as per ISP guidelines...

Include these repairs.
3. Run Malwarebytes selecting to include scanning for Rootkits
4. Run AdwCleaner
5. Run the antivirus
6. Run Complete Internet Repair

DNS Hijacking: What is it and How it Works
http://www.gohacking.com/dns-hijacking/

 

[Zearoth]

Chicano, thanks for the PM and the message here. I looked at my DNS settings and saw that it wasn't what I had it set to (For the record I use the Google public DNS). After changing the DNS address, removing the malware did not remove my internet with it.

Thank you again for all your help. I can now sleep soundly knowing someone isn't using my DNS to track me, or something.