[SOLVED] Error 8007312; SFC /scannow and SfcFix Both Clean

Thank you. Same spot I see. This should get us past that component.

Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Download the attached file named Sysnative.zip to your desktop.
2. Right-click on this file and select Extract All...
3. Keep the defaults and click the Extract button. When this is complete you should have a folder on your Desktop named Sysnative with over 100 folders in it.
4. Download attached file named fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
5. Run FRST by Right-Clicking on the file and choosing Run as administrator. In your case it may already be open.
6. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
7. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.
 

Attachments

Thanks. Let's do another scan.


SFC Scan

  1. Click on the Start
    Start%20Orb.jpg
    button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.


Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 
Darn. You can delete the Sysnative.zip file off of your desktop to avoid confusion. Please do the following.

Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

1. Download the attached file named Sysnative2.zip to your desktop.
2. Right-click on this file and select Extract All...
3. Keep the defaults and click the Extract button. When this is complete you should have a folder on your Desktop named Sysnative2 with some folders in it.
4. Download attached file named fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
5. Run FRST by Right-Clicking on the file and choosing Run as administrator. In your case it may already be open.
6. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
7. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

Step#2 - SFC Scan
  1. Click on the Start
    Start%20Orb.jpg
    button and in the search box, type Command Prompt
  2. When you see Command Prompt on the list, right-click on it and select Run as administrator
  3. When command prompt opens, copy and paste the following commands into it, press enter after each

    sfc /scannow

    Wait for this to finish before you continue

    copy %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt
  4. This will create a file, cbs.txt on your Desktop. Please attach this to your next post.

Please Note:: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the link.
 

Attachments

I booted into safe mode to delete the last remnants of Avira. I guess the malware didn't like that because when I rebooted into normal mode I now have no internet connection - said windows could not automatically detect this network's proxy (I don't use a proxy). My Malwarebytes won't start and can't connect to system event notification service.

I'm really fckd now.
 
If you don't have another machine that we can transfer files back and forth with, I'm not sure what else can be done. I believe I remember seeing that you had the Windows Repair program from Tweaking.com installed. If you do, can you try the following?

Step#1 - Run Windows Repairs
Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Open the Windows Repair program.
2. When the program opens, click the Reboot to Safe Mode button at the bottom of the screen. Answer Yes to allow.
3. Once rebooted into Safe Mode, open the program again. When the program opens, click the Repairs tab and click the Open Repairs button.
4. A backup of your registry will be made. After a few moments you will have many options from which you can choose.
5. Please click the Unselect All button and then click to enable only the following ones:

03 - Reset Service Permissions
04 - Register System Files
05 - Repair WMI
06 - Repair Windows Firewall
07 - Repair Internet Explorer
10 - Remove Policies Set By Infection
13 - Repair Winsock & DNS Cache
15 - Repair Proxy Settings


6. Ensure the Restart check box is selected and click the Start Repairs button in the lower right of the screen. This may take some time to run so be patient.
StartRepairsWithReboot.JPG

7. Once the fixes are complete you will be prompted to restart your machine. Answer Yes.
 
The malware got to my Tweaking program. Tried running it, said "file not found."

What I don't understand is how it killed my internet connection. Are there any network settings that malware typically targets that I could try to fix manually?
 
This is a hale mary but you can try the following. Open up notepad. Just click Start and type in notepad in the search box and then click on the resulting program.

Once it is open, type the following commands into it and then save the file to your desktop named fixlist.txt. Then open up FRST and click the Fix button. Reboot afterwards and see if your internet is back.
Code:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON 
CMD: ipconfig /flushdns 
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
 
First two commands failed with error 11003. Flushing DNS failed too (function failed during execution).

resetting winsock succeeded.

the final command with resetlog.txt failed because I misspelled something. This probably won't help but can you rewrite me a script just with that command?
 
No. Apparently I didn't get a chance to save sysnative2.zip before I lost connection.

The only things I can think of is to try system restore in safe mode or calling Verizon to see if they can walk me through settings but highly doubt either will help.
 
Back
Top