Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Internet not working, cant get into firewall.


  • Please log in to reply
6 replies to this topic

#1 JadedSentinel

JadedSentinel

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 29 December 2011 - 07:12 PM

Hi,

I recently had the rogue antivirus virus on another computer in my house. I managed to get rid of that fairly quickly using rkill and malwarebytes. However, now another problem has arisen. I am now unable to connect to the internet all.

I turned my firewall on and right afterwards i turned my computer off. I turned my computer back on and attempted to connect to the internet to no avail. I then tried going into my firewall but now i cant even get into my firewall.

So in essence my two problems are that i cant get into my firewall which is thus not allowing me to connect to the internet. In addition the computer itself has been running really slow too.
Im running Windows XP service pack 3.

Thank you for your help.

-Adam

Edited by hamluis, 29 December 2011 - 07:40 PM.
Moved from XP to Am I Infected.


BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:02:21 PM

Posted 29 December 2011 - 07:51 PM

Do NOT double post.

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#3 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:02:21 PM

Posted 29 December 2011 - 07:51 PM

Please download Farbar Service Scanner and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#4 JadedSentinel

JadedSentinel
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 29 December 2011 - 08:10 PM

I dont think i double posted. But if i did, i apologize. Anyways, here is the log:

Farbar Service Scanner
Ran by Alec Negri (administrator) on 29-12-2011 at 20:02:21
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Nerwork
****************************************************************

Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is set to Disabled. The default start type is Auto.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.

Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

Tcpip Service is not running. Checking service configuration:
The start type of Tcpip service is OK.
The ImagePath of Tcpip service is OK.

IpSec Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open IpSec registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open IpSec registry key. The service key does not exist.


Connection Status:
==============
Localhost is blocked.
LAN connected.
Attempt to access Google IP returned error: Other errors
Attempt to access Yahoo IP returend error: Other errors


Windows Firewall:
=============
sharedaccess Service is not running. Checking service configuration:
The start type of sharedaccess service is OK.
The ImagePath of sharedaccess service is OK.
The ServiceDll of sharedaccess service is OK.


Firewall Disabled Policy:
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall"=DWORD:0


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============
wscsvc Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open wscsvc registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open wscsvc registry key. The service key does not exist.
Checking ServiceDll: Attention! Unable to open wscsvc registry key. The service key does not exist.
Checking LEGACY_wscsvc: Attention! Unable to open LEGACY_wscsvc\0000 registry key. The key does not exist.


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys
[2004-10-08 07:01] - [2008-04-13 14:19] - 0075264 ____A () 1DA6C0C952319F33A54C16C024FE905A

C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
AegisP(10) Avgtdix(9) Gpc(3) NetBT(6) PSched(7) Tcpip(4)
0x0B0000000500000001000000020000000300000004000000090000000600000007000000080000000A0000000B000000

**** End of log ****

#5 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:02:21 PM

Posted 29 December 2011 - 08:37 PM

For starters we have one system file corrupted/infected and one registry key missing.

Please run Farbar Service Scanner.
Type the following in the edit box after "Search:".

ipsec.sys

Click Search Files button and post the log (FSS.txt) it makes to your reply.

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#6 JadedSentinel

JadedSentinel
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:05:21 PM

Posted 29 December 2011 - 09:27 PM

Farbar Service Scanner
Ran by Alec Negri (administrator) on 29-12-2011 at 21:22:56
Microsoft Windows XP Service Pack 3 (X86)

************************************************
================== Search: "ipsec.sys" ===================

C:\WINDOWS\system32\drivers\ipsec.sys
[2004-10-08 07:01] - [2008-04-13 14:19] - 0075264 ____A () 1DA6C0C952319F33A54C16C024FE905A

C:\WINDOWS\ServicePackFiles\i386\ipsec.sys
[2008-09-26 19:53] - [2008-04-13 14:19] - 0075264 ____N (Microsoft Corporation) 23C74D75E36E7158768DD63D92789A91

C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys
[2008-10-17 09:28] - [2004-10-08 07:01] - 0074752 ____C (Microsoft Corporation) 64537AA5C003A6AFEEE1DF819062D0D1

====== End Of Search ======

#7 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:02:21 PM

Posted 30 December 2011 - 12:21 PM

Download following file: http://www.filedropper.com/fix_5
Double click on it to run the fix.
Command prompt black window will pop-up for a split second and it'll disappear. That's normal.

Restart computer, post new FSS log.

My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users