virus/rootkit blocking internet acting like firewall. need advice

Discussion in 'malware problems & news' started by codeyell0, Sep 18, 2010.

Thread Status:
Not open for further replies.
  1. codeyell0

    codeyell0 Registered Member

    Joined:
    Sep 18, 2010
    Posts:
    1
    I am a computer tech,
    One of the things i handle daily is viruses. Most I can deal with remotely.

    But one has been blocking me more often now.

    No real symptoms other then no internet connection.
    If i run ipconfig /renew I get can't contact dhcp server.

    I have replaced the modems/routers dhcp server so I know its not the hardware
    I have also tried system restore but this doesn't work.

    I have no means of getting A/V software on these machines or combofix
    I am wondering if there might be some registry entry I should look for.
    Or some work around. Like I said many times I can fix most of what rootkits/viruses do to stop me but this one lately has me and my other techs baffled.

    If there is no net connection whats the point. unless it has some way of keeping some connection open while blocking normal internet usage
    If you check the pc will have no good ip or gateway since it can't seem to reach the DHCP
    static doesn't work either.


    I normally have to reload the OS but i'd love to lick this one if I can
     
  2. Searching_ _ _

    Searching_ _ _ Registered Member

    Joined:
    Jan 2, 2008
    Posts:
    1,988
    Location:
    iAnywhere
    If your a tech than why am I confused?
    Are you trying to conect remotely or is this a machine you have physical access to?
    Does your sniffer smell anything?

    Have you thought about using Virtualization?
    Linux Host, Windows Guest w/snapshot. If it gets an issue, roll back.
     
Loading...
Thread Status:
Not open for further replies.