Computer Running slowly after virus removal and Internet not automatically connecting

Hello,

I was told to start a post under this section as a way to recieve additional help with my connection problem. My first post can be found at http://www.bleepingcomputer.com/forums/topic432455.html and my second post can be found at http://www.bleepingcomputer.com/forums/topic436006.html/page__pid__2560305#entry2560305.

My explanation was: About a month ago I was infected with a nasty virus that completely shut down my computer. After doing some research and following directions I found here on Bleepingcomputer.com (one of the greatest websites I must say) I was able to remove the virus. However, after removal, I was unable to connect to to the Internet via wireless. My icon in the lower right corner just continued to say "Acquiring Network Address." I tried everything and, after many days of working on it, I was able to get my Wireless Internet back.

However, I noticed that my computer is running somewhat slow and that in order for me to get my Internet to connect, I must do Start > Run > services.msc. Then from there I must click on DHCP Client and click "Start." Once I do this, my Internet comes back on and I am able to use the web. However, after ever restart I make, I have to go through this same process. I was told that it doesn't look like I am still infected and that I needed to reach out for help on this forum. Any type of help you can provide is greatly appreacited!!!

Make and model of computer: Sony Vaio
How the computer is connected: Wireless Connection
Make and model of Router: Linksys
Approximate Distance From the router the PC is if its a wireless connection: 10 Feet
What type of internet you have: DSL


Here is my Minitoolbox Log:

MiniToolBox by Farbar Version: 18-01-2012
Ran by administrator on 18-01-2012 at 12:09:34
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Marvell Yukon 88E8036 PCI-E Fast Ethernet Controller = Local Area Connection (Disconnected)
1394 Net Adapter = 1394 Connection (Disconnected)
Intel® PRO/Wireless 3945ABG Network Connection = Wireless Network Connection (Connected)


# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip


# Interface IP Configuration for "Wireless Network Connection"

set address name="Wireless Network Connection" source=dhcp
set dns name="Wireless Network Connection" source=dhcp register=PRIMARY
set wins name="Wireless Network Connection" source=dhcp


popd
# End of interface IP configuration




Windows IP Configuration



Host Name . . . . . . . . . . . . : Laptop

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Wireless Network Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Intel® PRO/Wireless 3945ABG Network Connection

Physical Address. . . . . . . . . : 00-18-DE-63-0D-44

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.1.108

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.1.1

DHCP Server . . . . . . . . . . . : 192.168.1.1

DNS Servers . . . . . . . . . . . : 192.168.2.1

NetBIOS over Tcpip. . . . . . . . : Disabled

Lease Obtained. . . . . . . . . . : Wednesday, January 18, 2012 09:31:40

Lease Expires . . . . . . . . . . : Thursday, January 19, 2012 09:31:40

Server: UnKnown
Address: 192.168.2.1

Name: google.com
Addresses: 74.125.157.147, 74.125.157.99, 74.125.157.104



Pinging google.com [74.125.157.99] with 32 bytes of data:



Reply from 74.125.157.99: bytes=32 time=59ms TTL=51

Reply from 74.125.157.99: bytes=32 time=59ms TTL=51



Ping statistics for 74.125.157.99:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 59ms, Maximum = 59ms, Average = 59ms

Server: UnKnown
Address: 192.168.2.1

Name: yahoo.com
Addresses: 72.30.2.43, 98.137.149.56, 98.139.180.149, 209.191.122.70



Pinging yahoo.com [98.137.149.56] with 32 bytes of data:



Reply from 98.137.149.56: bytes=32 time=198ms TTL=48

Reply from 98.137.149.56: bytes=32 time=123ms TTL=47



Ping statistics for 98.137.149.56:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 123ms, Maximum = 198ms, Average = 160ms

Server: UnKnown
Address: 192.168.2.1

Name: bleepingcomputer.com
Address: 208.43.87.2



Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:



Reply from 208.43.87.2: Destination host unreachable.

Reply from 208.43.87.2: Destination host unreachable.



Ping statistics for 208.43.87.2:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time=1ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 1ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 18 de 63 0d 44 ...... Intel® PRO/Wireless 3945ABG Network Connection
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.108 25
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
169.254.0.0 255.255.0.0 192.168.1.108 192.168.1.108 20
192.168.1.0 255.255.255.0 192.168.1.108 192.168.1.108 25
192.168.1.108 255.255.255.255 127.0.0.1 127.0.0.1 25
192.168.1.255 255.255.255.255 192.168.1.108 192.168.1.108 25
224.0.0.0 240.0.0.0 192.168.1.108 192.168.1.108 25
255.255.255.255 255.255.255.255 192.168.1.108 192.168.1.108 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None

========================= Event log errors: ===============================

Application errors:
==================
Error: (01/17/2012 10:59:23 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 30860

Error: (01/17/2012 10:59:23 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 30860

Error: (01/17/2012 10:59:23 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/17/2012 10:59:21 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 28844

Error: (01/17/2012 10:59:21 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 28844

Error: (01/17/2012 10:59:21 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/17/2012 10:59:19 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 26860

Error: (01/17/2012 10:59:19 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 26860

Error: (01/17/2012 10:59:19 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/17/2012 10:59:17 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 24860


System errors:
=============
Error: (01/18/2012 10:51:09 AM) (Source: 0) (User: )
Description: \Device\Harddisk0\D

Error: (01/18/2012 09:31:37 AM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service.

Error: (01/17/2012 09:31:11 PM) (Source: Dhcp) (User: )
Description: The IP address lease 192.168.1.101 for the Network Card with network address 0018DE630D44 has been
denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

Error: (01/17/2012 05:21:34 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D

Error: (01/17/2012 05:21:27 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D

Error: (01/17/2012 05:21:20 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D

Error: (01/17/2012 05:21:13 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D

Error: (01/17/2012 05:21:07 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D

Error: (01/17/2012 05:21:00 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D

Error: (01/17/2012 05:20:53 PM) (Source: 0) (User: )
Description: \Device\Harddisk0\D


Microsoft Office Sessions:
=========================

========================= Memory info: ===================================

Percentage of memory in use: 89%
Total physical RAM: 502.11 MB
Available physical RAM: 54.08 MB
Total Pagefile: 1225.98 MB
Available Pagefile: 316.57 MB
Total Virtual: 2047.88 MB
Available Virtual: 1971.27 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:69.07 GB) (Free:20.24 GB) NTFS
5 Drive h: (My Book) (Fixed) (Total:465.65 GB) (Free:285.78 GB) FAT32

========================= Users: ========================================

User accounts for \\LAPTOP

Administrator ASPNET Guest
HelpAssistant SUPPORT_388945a0


**** End of log ****

Thank you in advance for your help!!

I am sorry for the delay in helping you with your connection issues. Rest assured I am back on the forums and I will help you as much as I can. I need to do some research on your problem when I return to my office. I will post back this evening.

Glad I could help. Allow me to do some testing on my XP virtual machine since this may require some registry work. In the mean time you can set your Ip address static and this will eliminate the need for the DHCP service to be running.

• Click Start followed by Control Panel
• Click Network Connections
• Locate your wireless adapter
• Right-click it and select Properties
• Under the this connection uses the following items: window, scroll to the Internet Protocol (TCP/IP)] entry and click on the Properties button.
• Select the radio button next to use the following IP address and enter the IP 192.168.1.100, subnet mask 255.255.255.0 and default gateway of 192.168.1.1
• Select the radio button next to use the following DNS server addresses and enter the DNS server 192.168.1.1

In your opening post you listed a Linksys router what model number router is it and how many other computers are on your network.

I did what you told me, but when I try to open a webpage after making the changes, it says "website cannot be found." I went back and clicked the radio button to automatically find TCP/IP and DNS. Once I did this, I was able to connect again to the Internet.

Also, the model number of my router is WRT54G and there are currently three computers on my network. However, only two access it at a time as the third is very seldomly used.

Thank you VERY much for your help with this!!!

Sorry about that I gave you the wrong dns server address it should be 192.168.2.1.
Posted from my HTC Thunderbolt.

Edit: I will get you the rest of the info this evening.

DO NOT SAVE OR MAKE ANY CHANGES AT THIS TIME

Click Start, click Run, type regedit in the Open box, and then click OK

In Registry Editor, locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp

Look at the depend on service entry in the right hand pane and tell me what it says under Data

It says Tcpip Afd NetBt under the data section.

Good the dependent services are correct. Next, in the services.msc control panel (in the start menu go to RUN and type services.msc) right click on DHCP and click PROPERTIES. Make sure its the start up type is set to automatic. If this is correct click on the dependencies tab at the top of that window. It will show the Tcpip, AFD, NetBT click on each one to expand it and see what drivers those services require. Let me know what drivers are listed.

The DHCP Client is set to automatic, but I still have to hit the "start" button after every restart.

Under the Dependencies Tab the following are listed:

AFD - there is nothing I can click to expand.

NetBios over Tcpip - After I expand, it says: TCP/IP Protocol Driver. I can then expand again under this name and it says: IPSEC driver.

TCP/IP Protocol Driver - After I expand, it says: IPSEC Driver

I havent forgot about you sorry I haven't posted. I am looking for a solution, so far it seems a repair install of windows may be in order. Do you have access to your windows xp pro cd?

No problem on the delay, I just appreaciate you taking the time to help me! I looked for my cd, but I have a feeling that it may be lost/gone due to moving. I will keep looking tonight and let you know tomorrow if I find it.

Thanks again for the help!!

So, no luck on finding the CD. Do you think I should contact the compay that made my laptop and ask them to send me the disc?

There are a few other options we can try before ordering new cd's. First save me some digging (if you posted it already) and give me the make and model of your laptop. This way I can see what recovery options are available for your specific model. However factory recovery's are sometimes limited to what they can do. A repair install from a Windows XP Cd will re-write the operating system leaving your programs and settings intact (barring any errors or mistakes that could require reformatting) A factory recovery will put your laptop back to factory state removing everything you have added/changed since you started using your laptop. This means all of your documents, music, pictures, e-mail contacts (if you use windows live e-mail, outlook express etc..) programs you have installed and registration keys you may not have copies of will be erased. I would recommend backing up you hard disc using Easus Todo Backup before restoring, or doing a repair install. Should anything happen or be forgotten you will have a back up image of the hard disc you can access and recover. This file is usually quite large depending on the size of your operating system partition and the amount of compression you choose when making the back up. This will require either space on your recovery partition (if you have one), an external HDD with free space or SEVERAL Blank DVD's. If you don't have anything on your laptop that you can't live without or don't have backed up already then you can skip the back up part.

Sorry for the delay in my response, but I have been away for work. As you requested, my computer is a Sony Vaio Laptop. I'm not sure of the exact model number, but if you need it, let me know and I will hunt down the box! Regarding a recovery, which ever you think is the best route to take, I am fine with. I have already backed up all of my important items (pics/documents/contacts) on my external and I made sure that my registration keys for those few programs I would have to reinstall still work. What do you recommend as my next step?

The simplest way would be to do a factory restore. However did your laptop come with a bunch of disc's labeled recovery or did you make them using the laptop's utility?