Re: Fake/Rogue AV causes Internet connection failure for infected prof

From: "E-Double" <EDouble@xxxxxxxxxxxxxxxxxxxxxxxxx>

| A machine recently was infected with that fake/rogue AV virus/spyware
| program. The machine has been cleaned manually and by using numerous AV and
| spyware programs including Avast, Symantec, Spybot S&D, SuperAntispyware,
| Malwarebytes, Ad-Aware, Windows Defender, etc... (most in Safe Mode as well
| when possible) and was also checked for rootkits. The machine runs great for
| other users/profiles, and all of the AV/spyware scans are coming-up clean.

| But when the user who was using the computer when it got infected logs on
| with their profile the machine is unable to make any connections to the
| Internet with any applications. It is not just WWW port 80 traffic but all
| Internet connect traffic including POP2, SMTP, etc...

| It appears as if some remnant of the virus is hijacking the Internet
| connections or something (not sure if it is just Internet traffic or all
| local traffic as well). Is there any way to solve this issue w/o deleting
| that user's profile and recreating it ? The reason I say that is that there
| have been similar problems with machines that are offsite so it is harder to
| either reinstall Windows or recreate the profiles for these machines.
| Cleaning the machine is the best (and sometimes only) option we have in these
| cases. TIA ...

| e.


Just that ONE person or any other person who logs onto that PC ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.

Relevant Pages

  • Re: Stop one user connecting to the Internet
    ... connecting to the Internet, and without assigning passwords to the users? ... I don't just want to stop stuff like IE and OE, but all IP connections, ... machine) and each user profile gives access to certain features of the ... another profile runs video editing software but no document ...
    (microsoft.public.windowsxp.basics)
  • Fake/Rogue AV causes Internet connection failure for infected prof
    ... spyware programs including Avast, Symantec, Spybot S&D, SuperAntispyware, ... with their profile the machine is unable to make any connections to the ... Internet connect traffic including POP2, SMTP, etc... ... that user's profile and recreating it? ...
    (microsoft.public.security.virus)
  • Another gift from the Republican 1990s
    ... Why Internet connections are fastest in South Korea ... An average broadband bill there runs about $28.50. ...
    (rec.sport.pro-wrestling)
  • Re: Another gift from the Republican 1990s
    ... Why Internet connections are fastest in South Korea ... An average broadband bill there runs about $28.50. ...
    (rec.sport.pro-wrestling)
  • RE: Folder wscsvc, error 1058, security center disabled
    ... internet unsecure warnings when trying to logon to email. ... Spybot scan indicates a problem with registry HKEY Local Machine System ... Then click on Advanced tab and scroll down to under the Browsing Option: ... You may experiencing a profile corruption, try to create a new profile (as ...
    (microsoft.public.windowsxp.security_admin)