BleepingComputer.com: internet connection reg errors

hey guys i have the same problem as a lot of other people but i cant seem to find enough relevant info to completly fix my internet connection errors. My computer was infected with win7 antivirus 2012 and i have since followed your sites procedures to remove it which work perfectly. i noticed you need a FSS log in order to possibly fix the problem so here it is-

(i realise other people have posted almost the exact same log but those treads dnt seem to resolve my issue?)

thanks for your help!

Farbar Service Scanner
Ran by chris (administrator) on 17-01-2012 at 16:35:36
Windows 7 Professional (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

afd Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open afd registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open afd registry key. The service key does not exist.


Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============
MpsSvc Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open MpsSvc registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open MpsSvc registry key. The service key does not exist.
Checking ServiceDll: Attention! Unable to open MpsSvc registry key. The service key does not exist.

bfe Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open bfe registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open bfe registry key. The service key does not exist.
Checking ServiceDll: Attention! Unable to open bfe registry key. The service key does not exist.

mpsdrv Service is not running. Checking service configuration:
The start type of mpsdrv service is OK.
The ImagePath of mpsdrv service is OK.


Firewall Disabled Policy:
==================


System Restore:
============
SDRSVC Service is not running. Checking service configuration:
The start type of SDRSVC service is OK.
The ImagePath of SDRSVC service is OK.
The ServiceDll of SDRSVC service is OK.

VSS Service is not running. Checking service configuration:
The start type of VSS service is OK.
The ImagePath of VSS service is OK.


System Restore Disabled Policy:
========================


Security Center:
============
wscsvc Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open wscsvc registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open wscsvc registry key. The service key does not exist.
Checking ServiceDll: Attention! Unable to open wscsvc registry key. The service key does not exist.


Windows Update:
===========
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.

BITS Service is not running. Checking service configuration:
The start type of BITS service is OK.
The ImagePath of BITS service is OK.
The ServiceDll of BITS service is OK.


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
Attention! C:\Windows\system32\Drivers\afd.sys is missing.
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2011-11-10 18:06] - [2011-09-30 02:43] - 1285488 ____A (Microsoft Corporation) 56C198AC82EFA622DD93E9E43575F79C

C:\Windows\system32\dnsrslvr.dll
[2011-04-15 20:34] - [2011-03-03 16:29] - 0132608 ____A (Microsoft Corporation) B15BE77A2BACF9C3177D27518AFE26A9

C:\Windows\system32\mpssvc.dll
[2009-07-14 10:53] - [2009-07-14 12:15] - 0565760 ____N (Microsoft Corporation) 5CD996CECF45CBC3E8D109C86B82D69E

C:\Windows\system32\bfe.dll
[2009-07-14 10:54] - [2009-07-14 12:14] - 0493568 ____N (Microsoft Corporation) 85AC71C045CEB054ED48A7841AAE0C11

C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll
[2009-07-14 10:23] - [2009-07-14 12:16] - 0125952 ____N (Microsoft Corporation) 5FD90ABDBFAEE85986802622CBB03446

C:\Windows\system32\vssvc.exe
[2009-07-14 10:24] - [2009-07-14 12:14] - 1025536 ____N (Microsoft Corporation) 7EA2BCD94D9CFAF4C556F5CC94532A6C

C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll
[2009-07-14 11:15] - [2009-07-14 12:16] - 1912832 ____N (Microsoft Corporation) A33408CC036F9C08142B11BE5E93F0A1

C:\Windows\system32\qmgr.dll
[2009-07-14 10:30] - [2009-07-14 12:16] - 0589312 ____N (Microsoft Corporation) 53F476476F55A27F580661BDE09C4EC4

C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll
[2009-07-14 10:33] - [2009-07-14 12:15] - 0135680 ____N (Microsoft Corporation) 9C231178CE4FB385F4B54B0A9080B8A4

C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

This may take a while to get a reply because most members are not experienced enough to read log entries, i suggest you move it to the virus area where it will get better attention.

thanks

Hi

Launch FSS again and type

afd.sys in the BOX and click on search files

Post the generated log

Good luck

ive since downloaded an afd.sys file and put it in WINDOWS/system32 then run:regsvr32 afd.sys but when i press enter it says "the module "afd.sys" was loaded but the entry point DllRegisterServer was not found? Also i have resolved the Dhpc service problem which is now running.

Farbar Service Scanner
Ran by chris (administrator) on 17-01-2012 at 19:52:09
Windows 7 Professional (X86)

************************************************
================== Search: "afd.sys" ===================

C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21712_none_da774a9ad5cea29e\afd.sys
[2011-06-16 20:23] - [2011-04-25 14:24] - 0338944 ____A (Microsoft Corporation) C427F91A748CD342A2B3F9278D9FD6A5

C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17603_none_d9f97e05bca8003a\afd.sys
[2011-06-16 20:23] - [2011-04-25 13:18] - 0338944 ____A (Microsoft Corporation) 9EBBBA55060F786F0FCAA3893BFA2806

C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.20951_none_d864ad9ad8c98d1f\afd.sys
[2011-06-16 20:23] - [2011-04-25 13:27] - 0338944 ____A (Microsoft Corporation) C114AB7A1550D42EA1700FFD4179CF5A

C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16802_none_d81220b5bf827af7\afd.sys
[2011-06-16 20:23] - [2012-01-14 16:17] - 0338944 ____A () D41D8CD98F00B204E9800998ECF8427E

C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16385_none_d7be98b5bfc0b4c1\afd.sys
[2009-07-14 10:12] - [2009-07-14 10:12] - 0338944 ____N (Microsoft Corporation) DDC040FDB01EF1712A6B13E52AFB104C

C:\Windows\System32\afd.sys
[2012-01-17 19:45] - [2008-10-16 22:35] - 0138368 ____A (Microsoft Corporation) 885B2F107A071EEBFC87D4CB16E2A6C3

C:\Windows\System32\Dism\afd.sys
[2012-01-17 19:42] - [2008-10-16 22:35] - 0138368 ____A (Microsoft Corporation) 885B2F107A071EEBFC87D4CB16E2A6C3

C:\Windows\SoftwareDistribution\Download\18e2c83e42cc8f0cc17b5dbfaf982690\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_d9efac7dbcaf385b\afd.sys
[2011-06-21 15:32] - [2010-11-20 19:40] - 0338944 ____A (Microsoft Corporation) 1151FD4FB0216CFED887BFDE29EBD516

====== End Of Search ======

Press Windows+R key and copy this line

C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16385_none_d7be98b5bfc0b4c1

and click ok

Copy the afd.sys file from the location and paste it in C:/WINDOWS/system32/drivers folder


To be on safer side before running registry fixes i would suggest you to

Download

http://www.snapfiles.com/get/erunt.html

Install it and backup your registry to C:/Windows/erdnt

Download afd.reg

http://www.mediafire.com/?p6b13ifat7v195c

Launch it,click YES when you get a UAC prompt

Restart your PC and check your browser

You also have windows firewall issue.Lets look into it after fixing internet


Good luck

This post has been edited by narenxp: 17 January 2012 - 04:53 AM