Re: Fake/Rogue AV causes Internet connection failure for infected prof
- From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
- Date: Wed, 3 Feb 2010 15:51:38 -0500
From: "E-Double" <EDouble@xxxxxxxxxxxxxxxxxxxxxxxxx>
| A machine recently was infected with that fake/rogue AV virus/spyware
| program. The machine has been cleaned manually and by using numerous AV and
| spyware programs including Avast, Symantec, Spybot S&D, SuperAntispyware,
| Malwarebytes, Ad-Aware, Windows Defender, etc... (most in Safe Mode as well
| when possible) and was also checked for rootkits. The machine runs great for
| other users/profiles, and all of the AV/spyware scans are coming-up clean.
| But when the user who was using the computer when it got infected logs on
| with their profile the machine is unable to make any connections to the
| Internet with any applications. It is not just WWW port 80 traffic but all
| Internet connect traffic including POP2, SMTP, etc...
| It appears as if some remnant of the virus is hijacking the Internet
| connections or something (not sure if it is just Internet traffic or all
| local traffic as well). Is there any way to solve this issue w/o deleting
| that user's profile and recreating it ? The reason I say that is that there
| have been similar problems with machines that are offsite so it is harder to
| either reinstall Windows or recreate the profiles for these machines.
| Cleaning the machine is the best (and sometimes only) option we have in these
| cases. TIA ...
Just that ONE person or any other person who logs onto that PC ?
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
- Prev by Date: Re: Finding a Criminal Lawyer for Computer Crimes?
- Next by Date: Re: Fake/Rogue AV causes Internet connection failure for infected prof
- Previous by thread: Fake/Rogue AV causes Internet connection failure for infected prof
- Next by thread: Re: Fake/Rogue AV causes Internet connection failure for infected prof