[Resolved] i have been on this problem for 14 hours PLEASE SAVE M

I am presently investigating the results:

In the mean time do this:

Click Start > Run > type services.msc > Then right click and set to automatic for all these


Netman
Nhksrv
Nla
NVSvc
PolicyAgent
ProtectedStorage
RasMan
RpcSs
SamSs
Schedule
seclogon
SENS
SharedAccess
ShellHWDetection
Spooler
srservice
SSDPSRV
stisvc
Symantec Core LC
TapiSrv
TermService
Themes
TrkWks
W32Time
WebClient
winmgmt
WMDM PMSP Service
wscsvc
wuauserv
WZCSVC

Once you have done that, please advise if you are now able to access the web and if you are able to access Norton,

Thank-you

I will be back shortly with further instructions

can you try doing a search for gmer.txt

Start>Search>All files and folders

type gmer.txt into 'All or part of the file name'

under 'more advanced options' check the top three boxes > click search

If you find it, paste the results back here

Thanks

Hi iroc357

To try and get you back on line, please try the following:


Go to Start > Run then type: CMD into the run box

You will now see a black DOS-like screen.

Type the following at the command prompt:

IPconfig /Renew (Note the space between the "g" and the slash / - it needs to be there )

Hit enter

See if that gets your connection back.

Thanks

Click Start > Run > type services.msc > Then right click and set to automatic for all these the ones that where there was set to automatic but some where not there did a search for gmer.txt and no luck did IPconfig /Renew still no internet thanks for your time

Hi iroc357

Please download this program from your other computer and run it:


Download RootRepeal.zip and unzip it to your Desktop.

• Double click RootRepeal.exe to start the program
• Click on the Report tab at the bottom of the program window
• Click the Scan button
• In the Select Scan dialog, check:
  • Drivers
  • Files
  • Processes
  • SSDT
  • Stealth Objects
  • Hidden Services
• Click the OK button
• In the next dialog, select all drives showing
• Click OK to start the scan
  

  Note: The scan can take some time. DO NOT run any other programs while the scan is running

• When the scan is complete, the Save Report button will become available
• Click this and save the report to your Desktop as RootRepeal.txt

If the report is not too long, post the contents of RootRepeal.txt in your next reply. If the report is very long, it will not be complete if you post it, so please attach it to your reply instead.

To attach a file, do the following:

• Click Add Reply
• Under the reply panel is the Attachments Panel
• Browse for the attachment file you want to upload, then click the green Upload button
• Once it has uploaded, click the Manage Current Attachments drop down box
• Click on [external image: Posted Image] to insert the attachment into your post

I think you may have posted the wrong log - that's the gmer log again Thanks

okay sorry here the rootrepeal log ROOTREPEAL © AD, 2007-2008 ================================================== Scan Time: 2009/02/21 19:41 Program Version: Version 1.2.3.0 Windows Version: Windows XP SP3 ================================================== Drivers ——————- Name: ABP480N5.SYS Image Path: ABP480N5.SYS Address: 0xF9BFA000 Size: 23552 File Visible: - Status: - Name: ACPI.sys Image Path: ACPI.sys Address: 0xF98E3000 Size: 187776 File Visible: - Status: - Name: ACPI_HAL Image Path: \Driver\ACPI_HAL Address: 0x804D7000 Size: 2189184 File Visible: - Status: - Name: adpu160m.sys Image Path: adpu160m.sys Address: 0xF986A000 Size: 101888 File Visible: - Status: - Name: afd.sys Image Path: C:\WINDOWS\System32\drivers\afd.sys Address: 0xF70DE000 Size: 138496 File Visible: - Status: - Name: agp440.sys Image Path: agp440.sys Address: 0xF9A32000 Size: 42368 File Visible: - Status: - Name: agpCPQ.sys Image Path: agpCPQ.sys Address: 0xF9A62000 Size: 44928 File Visible: - Status: - Name: aha154x.sys Image Path: aha154x.sys Address: 0xF9D4A000 Size: 12800 File Visible: - Status: - Name: aic78u2.sys Image Path: aic78u2.sys Address: 0xF9992000 Size: 55168 File Visible: - Status: - Name: aic78xx.sys Image Path: aic78xx.sys Address: 0xF9962000 Size: 56960 File Visible: - Status: - Name: aliide.sys Image Path: aliide.sys Address: 0xF9E36000 Size: 5248 File Visible: - Status: - Name: alim1541.sys Image Path: alim1541.sys Address: 0xF9A42000 Size: 42752 File Visible: - Status: - Name: amdagp.sys Image Path: amdagp.sys Address: 0xF9A52000 Size: 43008 File Visible: - Status: - Name: AmosNt.SYS Image Path: C:\WINDOWS\System32\DRIVERS\AmosNt.SYS Address: 0xF8D96000 Size: 155648 File Visible: - Status: - Name: amsint.sys Image Path: amsint.sys Address: 0xF9D56000 Size: 12032 File Visible: - Status: - Name: asc.sys Image Path: asc.sys Address: 0xF9BCA000 Size: 26496 File Visible: - Status: - Name: asc3350p.sys Image Path: asc3350p.sys Address: 0xF9C02000 Size: 22400 File Visible: - Status: - Name: asc3550.sys Image Path: asc3550.sys Address: 0xF9D5A000 Size: 14848 File Visible: - Status: - Name: ASCTRM.SYS Image Path: C:\WINDOWS\System32\Drivers\ASCTRM.SYS Address: 0xF9EBA000 Size: 7488 File Visible: - Status: - Name: atapi.sys Image Path: atapi.sys Address: 0xF9883000 Size: 96512 File Visible: - Status: - Name: audstub.sys Image Path: C:\WINDOWS\System32\DRIVERS\audstub.sys Address: 0xFA00E000 Size: 3072 File Visible: - Status: - Name: basic2.sys Image Path: C:\WINDOWS\System32\DRIVERS\basic2.sys Address: 0xF8E43000 Size: 69408 File Visible: - Status: - Name: Beep.SYS Image Path: C:\WINDOWS\System32\Drivers\Beep.SYS Address: 0xF9E96000 Size: 4224 File Visible: - Status: - Name: BOOTVID.dll Image Path: C:\WINDOWS\system32\BOOTVID.dll Address: 0xF9D42000 Size: 12288 File Visible: - Status: - Name: cbidf2k.sys Image Path: cbidf2k.sys Address: 0xF9D62000 Size: 13952 File Visible: - Status: - Name: cd20xrnt.sys Image Path: cd20xrnt.sys Address: 0xF9E40000 Size: 7680 File Visible: - Status: - Name: Cdfs.SYS Image Path: C:\WINDOWS\System32\Drivers\Cdfs.SYS Address: 0xF2791000 Size: 63744 File Visible: - Status: - Name: Cdr4_xp.SYS Image Path: C:\WINDOWS\System32\Drivers\Cdr4_xp.SYS Address: 0xF9A92000 Size: 54944 File Visible: - Status: - Name: Cdralw2k.SYS Image Path: C:\WINDOWS\System32\Drivers\Cdralw2k.SYS Address: 0xF9C4A000 Size: 21184 File Visible: - Status: - Name: cdrom.sys Image Path: C:\WINDOWS\System32\DRIVERS\cdrom.sys Address: 0xF9AA2000 Size: 62976 File Visible: - Status: - Name: cdudf_xp.SYS Image Path: C:\WINDOWS\System32\Drivers\cdudf_xp.SYS Address: 0xF7294000 Size: 233344 File Visible: - Status: - Name: CLASSPNP.SYS Image Path: C:\WINDOWS\System32\DRIVERS\CLASSPNP.SYS Address: 0xF9A02000 Size: 53248 File Visible: - Status: - Name: cmdide.sys Image Path: cmdide.sys Address: 0xF9E38000 Size: 6656 File Visible: - Status: - Name: CO_Mon.sys Image Path: C:\WINDOWS\system32\drivers\CO_Mon.sys Address: 0xF9D12000 Size: 30592 File Visible: - Status: - Name: cpqarray.sys Image Path: cpqarray.sys Address: 0xF9D46000 Size: 14976 File Visible: - Status: - Name: ctlface.sys Image Path: C:\WINDOWS\system32\drivers\ctlface.sys Address: 0xF9E54000 Size: 6912 File Visible: - Status: - Name: ctljystk.sys Image Path: C:\WINDOWS\System32\DRIVERS\ctljystk.sys Address: 0xF9FFD000 Size: 3712 File Visible: - Status: - Name: dac2w2k.sys Image Path: dac2w2k.sys Address: 0xF983E000 Size: 179584 File Visible: - Status: - Name: dac960nt.sys Image Path: dac960nt.sys Address: 0xF9D52000 Size: 14720 File Visible: - Status: - Name: disk.sys Image Path: disk.sys Address: 0xF99F2000 Size: 36352 File Visible: - Status: - Name: dpti2o.sys Image Path: dpti2o.sys Address: 0xF9C0A000 Size: 20192 File Visible: - Status: - Name: drmk.sys Image Path: C:\WINDOWS\system32\drivers\drmk.sys Address: 0xF9080000 Size: 61440 File Visible: - Status: - Name: dump_atapi.sys Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys Address: 0xF6F3F000 Size: 98304 File Visible: No Status: - Name: dump_WMILIB.SYS Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS Address: 0xF9EA0000 Size: 8192 File Visible: No Status: - Name: Dxapi.sys Image Path: C:\WINDOWS\System32\drivers\Dxapi.sys Address: 0xF73EF000 Size: 12288 File Visible: - Status: - Name: dxg.sys Image Path: C:\WINDOWS\System32\drivers\dxg.sys Address: 0xBF9C3000 Size: 73728 File Visible: - Status: - Name: dxgthk.sys Image Path: C:\WINDOWS\System32\drivers\dxgthk.sys Address: 0xF9F7A000 Size: 4096 File Visible: - Status: - Name: eeCtrl.sys Image Path: C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys Address: 0xF6FBF000 Size: 385024 File Visible: - Status: - Name: el90xbc5.sys Image Path: C:\WINDOWS\System32\DRIVERS\el90xbc5.sys Address: 0xF8D85000 Size: 66560 File Visible: - Status: - Name: emu10k1f.sys Image Path: C:\WINDOWS\system32\drivers\emu10k1f.sys Address: 0xF8E9B000 Size: 777088 File Visible: - Status: - Name: EraserUtilRebootDrv.sys Image Path: C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys Address: 0xF6FA3000 Size: 114688 File Visible: - Status: - Name: fallback.sys Image Path: C:\WINDOWS\System32\DRIVERS\fallback.sys Address: 0xF249D000 Size: 289888 File Visible: - Status: - Name: Fastfat.SYS Image Path: C:\WINDOWS\System32\Drivers\Fastfat.SYS Address: 0xF6F57000 Size: 143744 File Visible: - Status: - Name: faxnt.sys Image Path: C:\WINDOWS\System32\DRIVERS\faxnt.sys Address: 0xF225F000 Size: 199712 File Visible: - Status: - Name: fdc.sys Image Path: C:\WINDOWS\System32\DRIVERS\fdc.sys Address: 0xF9C42000 Size: 27392 File Visible: - Status: - Name: Fips.SYS Image Path: C:\WINDOWS\System32\Drivers\Fips.SYS Address: 0xF96B9000 Size: 44544 File Visible: - Status: - Name: flpydisk.sys Image Path: C:\WINDOWS\System32\DRIVERS\flpydisk.sys Address: 0xF9C82000 Size: 20480 File Visible: - Status: - Name: fltmgr.sys Image Path: fltmgr.sys Address: 0xF981E000 Size: 129792 File Visible: - Status: - Name: Fs_Rec.SYS Image Path: C:\WINDOWS\System32\Drivers\Fs_Rec.SYS Address: 0xF9E94000 Size: 7936 File Visible: - Status: - Name: fsksnt.sys Image Path: C:\WINDOWS\System32\DRIVERS\fsksnt.sys Address: 0xF2458000 Size: 115776 File Visible: - Status: - Name: ftdisk.sys Image Path: ftdisk.sys Address: 0xF98B3000 Size: 125056 File Visible: - Status: - Name: gameenum.sys Image Path: C:\WINDOWS\System32\DRIVERS\gameenum.sys Address: 0xF9E0E000 Size: 10624 File Visible: - Status: - Name: gmer.sys Image Path: C:\WINDOWS\System32\DRIVERS\gmer.sys Address: 0xF1BDA000 Size: 82592 File Visible: - Status: - Name: hal.dll Image Path: C:\WINDOWS\system32\hal.dll Address: 0x806EE000 Size: 131840 File Visible: - Status: - Name: HIDCLASS.SYS Image Path: C:\WINDOWS\System32\DRIVERS\HIDCLASS.SYS Address: 0xF9B82000 Size: 36864 File Visible: - Status: - Name: HIDPARSE.SYS Image Path: C:\WINDOWS\System32\DRIVERS\HIDPARSE.SYS Address: 0xF9C8A000 Size: 28672 File Visible: - Status: - Name: hidusb.sys Image Path: C:\WINDOWS\System32\DRIVERS\hidusb.sys Address: 0xF9188000 Size: 10368 File Visible: - Status: - Name: hpn.sys Image Path: hpn.sys Address: 0xF9C1A000 Size: 25952 File Visible: - Status: - Name: hpt3xx.sys Image Path: hpt3xx.sys Address: 0xF99B2000 Size: 38144 File Visible: - Status: - Name: HSF_CNXT.sys Image Path: C:\WINDOWS\System32\DRIVERS\HSF_CNXT.sys Address: 0xF8DBC000 Size: 551168 File Visible: - Status: - Name: HTTP.sys Image Path: C:\WINDOWS\System32\Drivers\HTTP.sys Address: 0xF1FB2000 Size: 264832 File Visible: - Status: - Name: i2omgmt.SYS Image Path: C:\WINDOWS\System32\Drivers\i2omgmt.SYS Address: 0xF918C000 Size: 8576 File Visible: - Status: - Name: i2omp.sys Image Path: i2omp.sys Address: 0xF9BDA000 Size: 18560 File Visible: - Status: - Name: i8042prt.sys Image Path: C:\WINDOWS\System32\DRIVERS\i8042prt.sys Address: 0xF9040000 Size: 52480 File Visible: - Status: - Name: imapi.sys Image Path: C:\WINDOWS\System32\DRIVERS\imapi.sys Address: 0xF9AC2000 Size: 42112 File Visible: - Status: - Name: ini910u.sys Image Path: ini910u.sys Address: 0xF9D5E000 Size: 16000 File Visible: - Status: - Name: intelide.sys Image Path: intelide.sys Address: 0xF9E3E000 Size: 5504 File Visible: - Status: - Name: ipnat.sys Image Path: C:\WINDOWS\System32\DRIVERS\ipnat.sys Address: 0xF701D000 Size: 152832 File Visible: - Status: - Name: ipsec.sys Image Path: C:\WINDOWS\System32\DRIVERS\ipsec.sys Address: 0xF722A000 Size: 75264 File Visible: - Status: - Name: isapnp.sys Image Path: isapnp.sys Address: 0xF9932000 Size: 37248 File Visible: - Status: - Name: k56nt.sys Image Path: C:\WINDOWS\System32\DRIVERS\k56nt.sys Address: 0xF23F8000 Size: 391744 File Visible: - Status: - Name: kbdclass.sys Image Path: C:\WINDOWS\System32\DRIVERS\kbdclass.sys Address: 0xF9C3A000 Size: 24576 File Visible: - Status: - Name: KDCOM.DLL Image Path: C:\WINDOWS\system32\KDCOM.DLL Address: 0xF9E32000 Size: 8192 File Visible: - Status: - Name: kmixer.sys Image Path: C:\WINDOWS\system32\drivers\kmixer.sys Address: 0xF1B0F000 Size: 172416 File Visible: - Status: - Name: ks.sys Image Path: C:\WINDOWS\system32\drivers\ks.sys Address: 0xF8E54000 Size: 143360 File Visible: - Status: - Name: KSecDD.sys Image Path: KSecDD.sys Address: 0xF97F5000 Size: 92288 File Visible: - Status: - Name: mmc_2K.SYS Image Path: C:\WINDOWS\System32\Drivers\mmc_2K.SYS Address: 0xF9C7A000 Size: 18560 File Visible: - Status: - Name: mnmdd.SYS Image Path: C:\WINDOWS\System32\Drivers\mnmdd.SYS Address: 0xF9E98000 Size: 4224 File Visible: - Status: - Name: Modem.SYS Image Path: C:\WINDOWS\System32\Drivers\Modem.SYS Address: 0xF9D32000 Size: 30080 File Visible: - Status: - Name: MODEMCSA.sys Image Path: C:\WINDOWS\system32\drivers\MODEMCSA.sys Address: 0xF96D9000 Size: 16128 File Visible: - Status: - Name: mouclass.sys Image Path: C:\WINDOWS\System32\DRIVERS\mouclass.sys Address: 0xF9D3A000 Size: 23040 File Visible: - Status: - Name: mouhid.sys Image Path: C:\WINDOWS\System32\DRIVERS\mouhid.sys Address: 0xF9184000 Size: 12160 File Visible: - Status: - Name: MountMgr.sys Image Path: MountMgr.sys Address: 0xF9942000 Size: 42368 File Visible: - Status: - Name: mraid35x.sys Image Path: mraid35x.sys Address: 0xF9BD2000 Size: 17280 File Visible: - Status: - Name: mrxdav.sys Image Path: C:\WINDOWS\System32\DRIVERS\mrxdav.sys Address: 0xF25FC000 Size: 180608 File Visible: - Status: - Name: mrxsmb.sys Image Path: C:\WINDOWS\System32\DRIVERS\mrxsmb.sys Address: 0xF7043000 Size: 455296 File Visible: - Status: - Name: Msfs.SYS Image Path: C:\WINDOWS\System32\Drivers\Msfs.SYS Address: 0xF9CBA000 Size: 19072 File Visible: - Status: - Name: msgpc.sys Image Path: C:\WINDOWS\System32\DRIVERS\msgpc.sys Address: 0xF9B02000 Size: 35072 File Visible: - Status: - Name: msikbd2k.sys Image Path: C:\WINDOWS\System32\DRIVERS\msikbd2k.sys Address: 0xF9E56000 Size: 6208 File Visible: - Status: - Name: mssmbios.sys Image Path: C:\WINDOWS\System32\DRIVERS\mssmbios.sys Address: 0xF9E2A000 Size: 15488 File Visible: - Status: - Name: Mup.sys Image Path: Mup.sys Address: 0xF9721000 Size: 105344 File Visible: - Status: - Name: NAVENG.SYS Image Path: C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090202.024\NAVENG.SYS Address: 0xF72ED000 Size: 82400 File Visible: - Status: - Name: NAVEX15.SYS Image Path: C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20090202.024\NAVEX15.SYS Address: 0xF7302000 Size: 869408 File Visible: - Status: - Name: NDIS.sys Image Path: NDIS.sys Address: 0xF973B000 Size: 182656 File Visible: - Status: - Name: ndistapi.sys Image Path: C:\WINDOWS\System32\DRIVERS\ndistapi.sys Address: 0xF9E22000 Size: 10112 File Visible: - Status: - Name: ndisuio.sys Image Path: C:\WINDOWS\System32\DRIVERS\ndisuio.sys Address: 0xF6F2F000 Size: 14592 File Visible: - Status: - Name: ndiswan.sys Image Path: C:\WINDOWS\System32\DRIVERS\ndiswan.sys Address: 0xF8CCF000 Size: 91520 File Visible: - Status: - Name: NDProxy.SYS Image Path: C:\WINDOWS\System32\Drivers\NDProxy.SYS Address: 0xF9B32000 Size: 40576 File Visible: - Status: - Name: netbios.sys Image Path: C:\WINDOWS\System32\DRIVERS\netbios.sys Address: 0xF9BA2000 Size: 34688 File Visible: - Status: - Name: netbt.sys Image Path: C:\WINDOWS\System32\DRIVERS\netbt.sys Address: 0xF7100000 Size: 162816 File Visible: - Status: - Name: Npfs.SYS Image Path: C:\WINDOWS\System32\Drivers\Npfs.SYS Address: 0xF9CC2000 Size: 30848 File Visible: - Status: - Name: Ntfs.sys Image Path: Ntfs.sys Address: 0xF9768000 Size: 574976 File Visible: - Status: - Name: ntoskrnl.exe Image Path: C:\WINDOWS\system32\ntoskrnl.exe Address: 0x804D7000 Size: 2189184 File Visible: - Status: - Name: Null.SYS Image Path: C:\WINDOWS\System32\Drivers\Null.SYS Address: 0xFA059000 Size: 2944 File Visible: - Status: - Name: nv4_disp.dll Image Path: C:\WINDOWS\System32\nv4_disp.dll Address: 0xBF9D5000 Size: 1970176 File Visible: - Status: - Name: nv4_mini.sys Image Path: C:\WINDOWS\System32\DRIVERS\nv4_mini.sys Address: 0xF8F6D000 Size: 797184 File Visible: - Status: - Name: parport.sys Image Path: C:\WINDOWS\System32\DRIVERS\parport.sys Address: 0xF8D71000 Size: 80128 File Visible: - Status: - Name: PartMgr.sys Image Path: PartMgr.sys Address: 0xF9BBA000 Size: 19712 File Visible: - Status: - Name: ParVdm.SYS Image Path: C:\WINDOWS\System32\Drivers\ParVdm.SYS Address: 0xF9EB6000 Size: 6784 File Visible: - Status: - Name: pci.sys Image Path: pci.sys Address: 0xF98D2000 Size: 68224 File Visible: - Status: - Name: pciide.sys Image Path: pciide.sys Address: 0xF9EFA000 Size: 3328 File Visible: - Status: - Name: PCIIDEX.SYS Image Path: C:\WINDOWS\System32\DRIVERS\PCIIDEX.SYS Address: 0xF9BB2000 Size: 28672 File Visible: - Status: - Name: perc2.sys Image Path: perc2.sys Address: 0xF9C12000 Size: 27296 File Visible: - Status: - Name: perc2hib.sys Image Path: perc2hib.sys Address: 0xF9E42000 Size: 5504 File Visible: - Status: - Name: PfModNT.sys Image Path: C:\WINDOWS\System32\PfModNT.sys Address: 0xF9E68000 Size: 4352 File Visible: - Status: - Name: PnpManager Image Path: \Driver\PnpManager Address: 0x804D7000 Size: 2189184 File Visible: - Status: - Name: portcls.sys Image Path: C:\WINDOWS\system32\drivers\portcls.sys Address: 0xF8E77000 Size: 147456 File Visible: - Status: - Name: processr.sys Image Path: C:\WINDOWS\System32\DRIVERS\processr.sys Address: 0xF9090000 Size: 35840 File Visible: - Status: - Name: psched.sys Image Path: C:\WINDOWS\System32\DRIVERS\psched.sys Address: 0xF8CBE000 Size: 69120 File Visible: - Status: - Name: ptilink.sys Image Path: C:\WINDOWS\System32\DRIVERS\ptilink.sys Address: 0xF9C62000 Size: 17792 File Visible: - Status: - Name: pwd_2K.SYS Image Path: C:\WINDOWS\System32\Drivers\pwd_2K.SYS Address: 0xF8D5E000 Size: 76608 File Visible: - Status: - Name: PxHelp20.sys Image Path: PxHelp20.sys Address: 0xF9C22000 Size: 19936 File Visible: - Status: - Name: ql1080.sys Image Path: ql1080.sys Address: 0xF99C2000 Size: 40320 File Visible: - Status: - Name: ql10wnt.sys Image Path: ql10wnt.sys Address: 0xF9972000 Size: 33152 File Visible: - Status: - Name: ql12160.sys Image Path: ql12160.sys Address: 0xF99E2000 Size: 45312 File Visible: - Status: - Name: ql1240.sys Image Path: ql1240.sys Address: 0xF9982000 Size: 40448 File Visible: - Status: - Name: ql1280.sys Image Path: ql1280.sys Address: 0xF99D2000 Size: 49024 File Visible: - Status: - Name: rasacd.sys Image Path: C:\WINDOWS\System32\DRIVERS\rasacd.sys Address: 0xF9DFE000 Size: 8832 File Visible: - Status: - Name: rasl2tp.sys Image Path: C:\WINDOWS\System32\DRIVERS\rasl2tp.sys Address: 0xF9AD2000 Size: 51328 File Visible: - Status: - Name: raspppoe.sys Image Path: C:\WINDOWS\System32\DRIVERS\raspppoe.sys Address: 0xF9AE2000 Size: 41472 File Visible: - Status: - Name: raspptp.sys Image Path: C:\WINDOWS\System32\DRIVERS\raspptp.sys Address: 0xF9AF2000 Size: 48384 File Visible: - Status: - Name: raspti.sys Image Path: C:\WINDOWS\System32\DRIVERS\raspti.sys Address: 0xF9C6A000 Size: 16512 File Visible: - Status: - Name: RAW Image Path: \FileSystem\RAW Address: 0x804D7000 Size: 2189184 File Visible: - Status: - Name: rdbss.sys Image Path: C:\WINDOWS\System32\DRIVERS\rdbss.sys Address: 0xF70B3000 Size: 175744 File Visible: - Status: - Name: RDPCDD.sys Image Path: C:\WINDOWS\System32\DRIVERS\RDPCDD.sys Address: 0xF9E9A000 Size: 4224 File Visible: - Status: - Name: redbook.sys Image Path: C:\WINDOWS\System32\DRIVERS\redbook.sys Address: 0xF9AB2000 Size: 57600 File Visible: - Status: - Name: rksample.sys Image Path: C:\WINDOWS\System32\DRIVERS\rksample.sys Address: 0xF9050000 Size: 59392 File Visible: - Status: - Name: rootrepeal.sys Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys Address: 0xF1BFF000 Size: 45056 File Visible: No Status: - Name: SCSIPORT.SYS Image Path: C:\WINDOWS\System32\DRIVERS\SCSIPORT.SYS Address: 0xF989B000 Size: 98304 File Visible: - Status: - Name: serenum.sys Image Path: C:\WINDOWS\System32\DRIVERS\serenum.sys Address: 0xF9E12000 Size: 15744 File Visible: - Status: - Name: serial.sys Image Path: C:\WINDOWS\System32\DRIVERS\serial.sys Address: 0xF9030000 Size: 64512 File Visible: - Status: - Name: sfman.sys Image Path: C:\WINDOWS\system32\drivers\sfman.sys Address: 0xF9070000 Size: 36992 File Visible: - Status: - Name: sisagp.sys Image Path: sisagp.sys Address: 0xF9A12000 Size: 40960 File Visible: - Status: - Name: SOAR.SYS Image Path: C:\WINDOWS\System32\DRIVERS\SOAR.SYS Address: 0xF9060000 Size: 45056 File Visible: - Status: - Name: sparrow.sys Image Path: sparrow.sys Address: 0xF9BC2000 Size: 19072 File Visible: - Status: - Name: spkpnt.sys Image Path: C:\WINDOWS\System32\DRIVERS\spkpnt.sys Address: 0xF21FB000 Size: 73248 File Visible: - Status: - Name: sr.sys Image Path: sr.sys Address: 0xF980C000 Size: 73472 File Visible: - Status: - Name: SRTSP.SYS Image Path: C:\WINDOWS\System32\Drivers\SRTSP.SYS Address: 0xF744F000 Size: 299008 File Visible: - Status: - Name: SRTSPX.SYS Image Path: C:\WINDOWS\System32\Drivers\SRTSPX.SYS Address: 0xF9B92000 Size: 36992 File Visible: - Status: - Name: srv.sys Image Path: C:\WINDOWS\System32\DRIVERS\srv.sys Address: 0xF220D000 Size: 333952 File Visible: - Status: - Name: swenum.sys Image Path: C:\WINDOWS\System32\DRIVERS\swenum.sys Address: 0xF9E60000 Size: 4352 File Visible: - Status: - Name: sym_hi.sys Image Path: sym_hi.sys Address: 0xF9BF2000 Size: 28384 File Visible: - Status: - Name: sym_u3.sys Image Path: sym_u3.sys Address: 0xF9BEA000 Size: 30688 File Visible: - Status: - Name: symc810.sys Image Path: symc810.sys Address: 0xF9D4E000 Size: 16256 File Visible: - Status: - Name: symc8xx.sys Image Path: symc8xx.sys Address: 0xF9BE2000 Size: 32640 File Visible: - Status: - Name: SYMDNS.SYS Image Path: C:\WINDOWS\System32\Drivers\SYMDNS.SYS Address: 0xF9E9C000 Size: 6912 File Visible: - Status: - Name: SYMEVENT.SYS Image Path: C:\WINDOWS\system32\Drivers\SYMEVENT.SYS Address: 0xF7180000 Size: 151552 File Visible: - Status: - Name: SYMFW.SYS Image Path: C:\WINDOWS\System32\Drivers\SYMFW.SYS Address: 0xF716A000 Size: 89728 File Visible: - Status: - Name: SYMIDS.SYS Image Path: C:\WINDOWS\System32\Drivers\SYMIDS.SYS Address: 0xF9CD2000 Size: 31872 File Visible: - Status: - Name: SymIDSCo.sys Image Path: C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\ipsdefs\20090129.001\SymIDSCo.sys Address: 0xF7128000 Size: 270336 File Visible: - Status: - Name: SymIM.sys Image Path: C:\WINDOWS\system32\DRIVERS\SymIM.sys Address: 0xF9C72000 Size: 24576 File Visible: - Status: - Name: SYMNDIS.SYS Image Path: C:\WINDOWS\System32\Drivers\SYMNDIS.SYS Address: 0xF9CCA000 Size: 30720 File Visible: - Status: - Name: SYMREDRV.SYS Image Path: C:\WINDOWS\System32\Drivers\SYMREDRV.SYS Address: 0xF9E06000 Size: 15616 File Visible: - Status: - Name: SYMTDI.SYS Image Path: C:\WINDOWS\System32\Drivers\SYMTDI.SYS Address: 0xF71A5000 Size: 177536 File Visible: - Status: - Name: sysaudio.sys Image Path: C:\WINDOWS\system32\drivers\sysaudio.sys Address: 0xF29FC000 Size: 60800 File Visible: - Status: - Name: tcaicchg.sys Image Path: C:\WINDOWS\System32\tcaicchg.sys Address: 0xF2495000 Size: 14400 File Visible: - Status: - Name: TCAITDI.sys Image Path: C:\WINDOWS\System32\DRIVERS\TCAITDI.sys Address: 0xF9D02000 Size: 18560 File Visible: - Status: - Name: tcpip.sys Image Path: C:\WINDOWS\System32\DRIVERS\tcpip.sys Address: 0xF71D1000 Size: 361600 File Visible: - Status: - Name: TDI.SYS Image Path: C:\WINDOWS\System32\DRIVERS\TDI.SYS Address: 0xF9C5A000 Size: 20480 File Visible: - Status: - Name: termdd.sys Image Path: C:\WINDOWS\System32\DRIVERS\termdd.sys Address: 0xF9B12000 Size: 40704 File Visible: - Status: - Name: tonesnt.sys Image Path: C:\WINDOWS\System32\DRIVERS\tonesnt.sys Address: 0xF2358000 Size: 50688 File Visible: - Status: - Name: toside.sys Image Path: toside.sys Address: 0xF9E3A000 Size: 4992 File Visible: - Status: - Name: UdfReadr_xp.SYS Image Path: C:\WINDOWS\System32\Drivers\UdfReadr_xp.SYS Address: 0xF724F000 Size: 205824 File Visible: - Status: - Name: ultra.sys Image Path: ultra.sys Address: 0xF99A2000 Size: 36736 File Visible: - Status: - Name: update.sys Image Path: C:\WINDOWS\System32\DRIVERS\update.sys Address: 0xF8C60000 Size: 384768 File Visible: - Status: - Name: USBD.SYS Image Path: C:\WINDOWS\System32\DRIVERS\USBD.SYS Address: 0xF9E62000 Size: 8192 File Visible: - Status: - Name: usbhub.sys Image Path: C:\WINDOWS\System32\DRIVERS\usbhub.sys Address: 0xF9B22000 Size: 59520 File Visible: - Status: - Name: USBPORT.SYS Image Path: C:\WINDOWS\System32\DRIVERS\USBPORT.SYS Address: 0xF8D3A000 Size: 147456 File Visible: - Status: - Name: USBSTOR.SYS Image Path: C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS Address: 0xF7447000 Size: 26368 File Visible: - Status: - Name: usbuhci.sys Image Path: C:\WINDOWS\System32\DRIVERS\usbuhci.sys Address: 0xF9C52000 Size: 20608 File Visible: - Status: - Name: v124nt.sys Image Path: C:\WINDOWS\System32\DRIVERS\v124nt.sys Address: 0xF215B000 Size: 490336 File Visible: - Status: - Name: vga.sys Image Path: C:\WINDOWS\System32\drivers\vga.sys Address: 0xF9CB2000 Size: 20992 File Visible: - Status: - Name: viaagp.sys Image Path: viaagp.sys Address: 0xF9A22000 Size: 42240 File Visible: - Status: - Name: viaide.sys Image Path: viaide.sys Address: 0xF9E3C000 Size: 5376 File Visible: - Status: - Name: VIDEOPRT.SYS Image Path: C:\WINDOWS\System32\DRIVERS\VIDEOPRT.SYS Address: 0xF8F59000 Size: 81920 File Visible: - Status: - Name: VolSnap.sys Image Path: VolSnap.sys Address: 0xF9952000 Size: 52352 File Visible: - Status: - Name: wanarp.sys Image Path: C:\WINDOWS\System32\DRIVERS\wanarp.sys Address: 0xF96A9000 Size: 34560 File Visible: - Status: - Name: watchdog.sys Image Path: C:\WINDOWS\System32\watchdog.sys Address: 0xF9CF2000 Size: 20480 File Visible: - Status: - Name: wdmaud.sys Image Path: C:\WINDOWS\system32\drivers\wdmaud.sys Address: 0xF280F000 Size: 83072 File Visible: - Status: - Name: Win32k Image Path: \Driver\Win32k Address: 0xBF800000 Size: 1847296 File Visible: - Status: - Name: win32k.sys Image Path: C:\WINDOWS\System32\win32k.sys Address: 0xBF800000 Size: 1847296 File Visible: - Status: - Name: WMILIB.SYS Image Path: C:\WINDOWS\System32\DRIVERS\WMILIB.SYS Address: 0xF9E34000 Size: 8192 File Visible: - Status: - Name: WMIxWDM Image Path: \Driver\WMIxWDM Address: 0x804D7000 Size: 2189184 File Visible: - Status: -

Hi iroc357,

It does appear that your machine is clean of any malware.

One of your settings is amiss that is preventing your ability to connect to the internet.

I suggest you start a new topic in our tech forum HERE and allow our tech experts to assist you with getting reconnected.

Please link them to this topic so they can see you have been cleared of malware and give them access to your logs.

If you are still unable to access Norton, the best advise is to uninstall it completely then re-install it.

If you still have a length of time left on your subscription then that would be the best idea.

If you have no active subscription, then I can suggest a good FREE alternative (only use 1 antivirus)

Download the Norton Remover tool for your product and follow the instructions for removal. Then re-install Norton if that is your preference.

These are three very good antivirus alternatives:

Avira AntiVir.

Avast,

AVG,

Below I have included a number of recommendations for how to protect your computer against malware infections.

• Keep Windows updated by regularly checking their website at :
  http://windowsupdate.microsoft.com/
  This will ensure your computer has always the latest security updates available installed on your computer.
• SpywareBlaster protects against bad ActiveX, it immunizes your PC against them.
• SpywareGuard offers realtime protection from spyware installation attempts. Make sure you are only running one real-time anti-spyware protection program ( eg : TeaTimer, Windows Defender ) or there will be a conflict.
• Make Internet Explorer more secure
  
  • Click Start > Run
  • Type Inetcpl.cpl & click OK
  • Click on the Security tab
  • Click Reset all zones to default level
  • Make sure the Internet Zone is selected & Click Custom level
  • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
  • Next Click OK, then Apply button and then OK to exit the Internet Properties page.
• ATF Cleaner - Cleans temporary files from IE and Windows, empties the recycle bin and more.  Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
• MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.
• Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more
  secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in pop up
  blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from
  Here
  If you choose to use Firefox, I highly recommend these add-ons to keep your PC even more secure.
  
  • NoScript - for blocking ads and other potential website attacks
  • McAfee SiteAdvisor - this tells you whether the sites you are about to visit are safe or not. A must if you do a lot of Googling
• Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories.  This article is full of good information on alternatives for home backup solutions.
• ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.
• Recovery Console - Recent trends appear to indicate that future infections will include attacks to the boot sector of the computer. The installation of the Recovery Console in the computer will be our only defense against this threat. For more information and steps to install the Recovery Console see This Article. Should you need assistance in installing the Recovery Console, please do not hesitate to ask.
• Please read the guide by Rorschach112 on how to prevent malware and about safe computing here

Thank you for your patience, and performing all of the procedures requested.

If you have any other questions or concerns please advise

when opened ie i clicked on diagnose connection problems, then ran network diagnostics it said windows cannot connect to the internet using HTTP, HTTPS OR FTP this is probably by firewall settings on the computer. check the firewall settings for the HTTP port 80, HTTPS port 443 and FTP port 21. and this is the log, i dont if it helps but i cant hurt. thanks again for you time Last diagnostic run time: 02/21/09 20:31:13 HTTP, HTTPS, FTP Diagnostic HTTP, HTTPS, FTP connectivity warn FTP (Passive): Error 12029 connecting to ftp.microsoft.com: A connection with the server could not be established warn HTTP: Error 12029 connecting to www.microsoft.com: A connection with the server could not be established warn FTP (Active): Error 12029 connecting to ftp.microsoft.com: A connection with the server could not be established warn HTTPS: Error 12029 connecting to www.microsoft.com: A connection with the server could not be established warn HTTPS: Error 12029 connecting to www.passport.net: A connection with the server could not be established warn HTTP: Error 12029 connecting to www.hotmail.com: A connection with the server could not be established error Could not make an HTTP connection. error Could not make an HTTPS connection. error Could not make an FTP connection. info Redirecting user to support call DNS Client Diagnostic DNS - Not a home user scenario info Using Web Proxy: no info Resolving name ok for (www.microsoft.com): yes No DNS servers DNS failure Gateway Diagnostic Gateway info The following proxy configuration is being used by IE: Automatically Detect Settings:Enabled Automatic Configuration Script: Proxy Server: Proxy Bypass list: info Could not get proxy settings via the Automatic Proxy Configuration mechanism info This computer has the following default gateway entry(ies): 192.168.2.1 info This computer has the following IP address(es): 192.168.2.19 info The default gateway is in the same subnet as this computer info The default gateway entry is a valid unicast address info The default gateway address was resolved via ARP in 1 try(ies) info The default gateway was reached via ICMP Ping in 1 try(ies) info TCP port 80 on host [removed] was successfully reached info The Internet host www.microsoft.com was successfully reached info The default gateway is OK IP Layer Diagnostic Corrupted IP routing table info The default route is valid info The loopback route is valid info The local host route is valid info The local subnet route is valid Invalid ARP cache entries action The ARP cache has been flushed IP Configuration Diagnostic Invalid IP address info Valid IP address detected: 192.168.2.19 Wireless Diagnostic Wireless - Service disabled Wireless - User SSID Wireless - First time setup Wireless - Radio off Wireless - Out of range Wireless - Hardware issue Wireless - Novice user Wireless - Ad-hoc network Wireless - Less preferred Wireless - 802.1x enabled Wireless - Configuration mismatch Wireless - Low SNR WinSock Diagnostic WinSock status info All base service provider entries are present in the Winsock catalog. info The Winsock Service provider chains are valid. info Provider entry MSAFD Tcpip [TCP/IP] passed the loopback communication test. info Provider entry MSAFD Tcpip [UDP/IP] passed the loopback communication test. info Provider entry RSVP UDP Service Provider passed the loopback communication test. info Provider entry RSVP TCP Service Provider passed the loopback communication test. info Connectivity is valid for all Winsock service providers. Network Adapter Diagnostic Network location detection info Using home Internet connection Network adapter identification info Network connection: Name=Local Area Connection, Device=3Com EtherLink XL 10/100 PCI For Complete PC Management NIC (3C905C-TX), MediaType=LAN, SubMediaType=LAN info Network connection: Name=RTSMini, Device=Conexant HSF V92 56K RTAD Speakerphone PCI Modem, MediaType=PHONE, SubMediaType=NONE info Ethernet connection selected Network adapter status info Network connection status: Connected HTTP, HTTPS, FTP Diagnostic HTTP, HTTPS, FTP connectivity warn FTP (Passive): Error 12029 connecting to ftp.microsoft.com: A connection with the server could not be established warn FTP (Active): Error 12029 connecting to ftp.microsoft.com: A connection with the server could not be established warn HTTPS: Error 12029 connecting to www.microsoft.com: A connection with the server could not be established warn HTTP: Error 12029 connecting to www.microsoft.com: A connection with the server could not be established warn HTTPS: Error 12029 connecting to www.passport.net: A connection with the server could not be established warn HTTP: Error 12029 connecting to www.hotmail.com: A connection with the server could not be established error Could not make an HTTP connection. error Could not make an HTTPS connection. error Could not make an FTP connection.

Completely uninstall your Norton firewall - see if that is the problem, then re-install - the malware corrupted your Norton installation.

But you may wish to verify that first with our tech experts in the tech forum (LINK) - they are better able to deal with this situation than I

thanks for all your help but i gave up and just reinstalled windows,runing great now

Good to hear, sorry I couldn't help you fix it without going through all that.

Please consider the advise I posted in this LINK
to keep your system clean and prevent any future problems.

Stay safe

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.