Guru Help Needed - Stumped [Solved]

Ok, I have been on this issue for the last 48 hours plus. Symptoms of Pc Windows 7 64x Pro on a business domain, DHCP obtained IP Pc is unable to access windows update and support.microsoft.com etc plus any AV website. Pc cannot Ping MS website at all we receive a general failure packet. Other websites return with a normal packet. Windows Defender will not update A new Anti Virus suite cannot obtain updates We initially cleaned a host file compromise to the system and a few trojans were removed a few weeks back. We have removed a poorly performing Sophos Endpoint suite from this Pc and have attempted to resolve. Virus traces were spotted manually in the registry, we have practically gone through every regisrty key & hive with a fine toothcombe and have elimited any obvious errors. We have run nearly every tool online for cleaning problems. List of things done not in order. Reset windows tcp/ip stack Disabled IPv6 Disabled firewall / Checked all firwewall inbound/outbound rules Updated NIC drivers Removed all user profiles Checked All Users / Default User Profiles Manaully checked all known rootkit locations Sophos Online Kit Avast Online Kit Win GNER rootkit - clear Combofix - did not resolve issue TDsKiller Rkill MBr check ADWcleaner Stinger.exe Nothing has resolved this, there are also tool and things I have done which I have not listed as its immense. I am happy to continue with this if someone feels there are other options to try, I hate giving up and this is just a crazy issue. The pc is behaving fine otherwise. IT would seem we have killed the virus but something is causing a problem as mentioned above which appear to be unfixable. We fear a complete re-build but this is the accounts PC. Cheers everyone

Ok,

I have been on this issue for the last 48 hours plus.

Symptoms of Pc

Windows 7 64x Pro on a business domain, DHCP obtained IP
Pc is unable to access windows update and support.microsoft.com etc plus any AV website.
Pc cannot Ping MS website at all we receive a general failure packet. Other websites return with a normal packet.
Windows Defender will not update
A new Anti Virus suite cannot obtain updates

We initially cleaned a host file compromise to the system and a few trojans were removed a few weeks back.

We have removed a poorly performing Sophos Endpoint suite from this Pc and have attempted to resolve.

Virus traces were spotted manually in the registry, we have practically gone through every regisrty key & hive with a fine toothcombe and have elimited any obvious errors.

We have run nearly every tool online for cleaning problems.

List of things done not in order.

Reset windows tcp/ip stack
Disabled IPv6
Disabled firewall / Checked all firwewall inbound/outbound rules
Updated NIC drivers

Removed all user profiles
Checked All Users / Default User Profiles
Manaully checked all known rootkit locations

Sophos Online Kit
Avast Online Kit
Win
GNER rootkit - clear
Combofix - did not resolve issue
TDsKiller
Rkill
MBr check
ADWcleaner
Stinger.exe

Nothing has resolved this, there are also tool and things I have done which I have not listed as its immense. I am happy to continue with this if someone feels there are other options to try, I hate giving up and this is just a crazy issue. The pc is behaving fine otherwise. IT would seem we have killed the virus but something is causing a problem as mentioned above which appear to be unfixable.


We fear a complete re-build but this is the accounts PC.

Cheers everyone

The more I think about this, I feel it's a DNS issue caused by the virus but I have no idea how to resolve it. All other PCs behind the same network can access MS sites etc. Tracert to MS sites does nothing. Tracert to other UK sites and facebook for example return normal results.

Thanks

Hi and welcome!

Windows 7 64x Pro on a business domain, DHCP obtained IP

Is this a work/business/corporate computer?

Hi thank you for reading my problem. Yes its a business PC Tower, its a corporate device that remains in a clients office. Has been part of a corporate sophos suite which has now been replaced. Thanks

Hi thank you for reading my problem.

You are more than welcome.

Yes its a business PC Tower, its a corporate device that remains in a clients office.

Per our Terms of Use

We offer free computer help and tech support for home and personal use. We are not here to support others that work for profit, or to support/replace your company's IT department.

Thanks for your understanding.

Well as you can tell I was pretty desperate to resolve this issue and did not have time when I registered, to read the T&Cs. The client has been told it's beyond fixing as too much time has been spent trying to overcome the issue. Fully understand. Cheers

Ok thanks for your understanding.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.