Forum Home
Press F1
 
Thread ID: 95772 2008-12-16 21:05:00 All anti-virus software is blocked from downloading sam111122 (14419) Press F1
Post ID Timestamp Content User
729805 2008-12-16 21:05:00 For some reason when i try to update my anti-virus software a display pops up saying there is no internet connection.

I cannot download from the website, nor can I download another anti-virus as the same issue arises ie cannot connect.

Can someone please help? 		sam111122 (14419)
729806 2008-12-16 21:10:00 You've probably picked up malware / or virus from somewhere

If youre using XP, disable system restore

Boot into safe mode / networking, if you can

Then get this <-- direct link (www.simplysuponline.com)

Update it, then click on scan, then select al options under the utilities menu

Then get hijackthis below, install it then run it. Click on scan the system, and save a log. Copy and paste the log here 		Speedy Gonzales (78)
729807 2008-12-16 21:11:00 Three ideas I have:

>proxy not set in AV software (assuming you are using one)
>firewall not allowing AV to connect.
>you have a virus on your machine already that is breaking your AV (like all good viruses do)

When was the last time you successfully download AV updates?
What is the error message you get?
The second paragraph, do you mean you cannot even browse to a website and manually download? 		first attempt (14417)
729808 2008-12-17 00:29:00 He says he cannot connect to the Internet, so he won't be able to d/load anything. He must have used someone else's machine to post on here.

LL 		lakewoodlady (103)
729809 2008-12-17 00:32:00 Doesnt mean it wont work in safe mode, if he's using the networking option

Since, whatever it is, if it runs in the background / on startup, (in normal windows) it wont run (or shouldn't) in safe mode 		Speedy Gonzales (78)
729810 2008-12-17 03:52:00 Anything dodgy in your hosts file?

Post a HijackThis log here.
Download it, put it on a flash drive and boot the PC normally(not safe mode)
Then run it and copy paste log here 		Blam (54)
729811 2008-12-17 04:05:00 See if the below applies. Sounds like you have TDSSserv.sys running and it still runs in Safe Mode.

Go to Start > Control Panel > System > Hardware > Device Manager > View > Show Hidden Devices.

Scroll down to “Non-plug and Play Drivers” and click the plus icon to open those drivers.

Then search for “TDSSserv.sys”

Right click on it, and select “Disable”

Note: If you select Uninstall, it will install itself again when you reboot the system, so DON’T select Uninstall.

Restart your pc.

You can now update your Antirus/Malware/Rootkit softwares.

In simple terms, TDSSserv.sys is a service/server redirecting all software updates to 127.0.0.1 (your own computer) so they won’t update 		berryb (99)
729812 2008-12-17 04:10:00 Anything dodgy in your hosts file?

To check your hosts file, go to C:\Windows\system32\drivers\etc, and double-click hosts. Open it with Notepad.

There should only be one line there that reads:


127.0.0.1 localhosts

Anything else should be removed. 		pcuser42 (130)
729813 2008-12-17 04:22:00 See if the below applies. Sounds like you have TDSSserv.sys running and it still runs in Safe Mode.

Go to Start > Control Panel > System > Hardware > Device Manager > View > Show Hidden Devices.

Scroll down to “Non-plug and Play Drivers” and click the plus icon to open those drivers.

Then search for “TDSSserv.sys”

Right click on it, and select “Disable”

Note: If you select Uninstall, it will install itself again when you reboot the system, so DON’T select Uninstall.

Restart your pc.

You can now update your Antirus/Malware/Rootkit softwares.

In simple terms, TDSSserv.sys is a service/server redirecting all software updates to 127.0.0.1 (your own computer) so they won’t update

Much more sophisticated than most viruses these days.. 		Blam (54)
729814 2008-12-17 09:03:00 Antivirus XP 2008 and others use it. I have removed a few lately and this method has been the easiest way I have found to get programs installing and updating. berryb (99)
1 2