Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected by XP Security 2012, Now no internet.


  • Please log in to reply
2 replies to this topic

#1 dgarsir

dgarsir

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:08:35 PM

Posted 03 January 2012 - 02:50 PM

Hello! Looks like this is an issue that is cropping up quite a bit, but it seems that after my home desktop contracted XP Security 2012, it lost access to the internet. Wireless network still works, other wireless devices still work (like this laptop), but no dice for the desktop. I removed the virus by transferring the programs via usb--and still not internet access, sadly. Computer just keeps "Acquiring Network Address". I did a little browsing on here, and included the Farbar Service Scanner Report, since it seems like that helps diagnose the issue. Help me, internet!


(Also, should this be posted in a security forum, perhaps?)


Farbar Service Scanner
Ran by *removed* (administrator) on 03-01-2012 at 14:42:47
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

afd Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open afd registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open afd registry key. The service key does not exist.


Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error: Google IP is unreachable
Attempt to access Yahoo IP returend error: Yahoo IP is unreachable


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
Attention! C:\WINDOWS\system32\Drivers\afd.sys is missing.
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4)
0x0700000005000000010000000200000003000000040000000600000007000000
IpSec Tag value is correct.

**** End of log ****

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:35 PM

Posted 03 January 2012 - 11:18 PM

@ dgarsir

Launch the FSS again and type

afd.sys

Click on search files

Post the generated log

Good luck

#3 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:35 AM

Posted 07 January 2012 - 03:16 AM

Checking ImagePath: Attention! Unable to open afd registry key..

Hi dgarsir -
Do you have your XP Pro CD, or access to an XP Pro CD ??
If you do, can you please place it in the CD tray but do not insert it yet -
Go Start > Run Box > Type or Copy / Paste " sfc /scannow " in the box > Click OK > Now insert an XP Pro CD -

As the afd service key does not exist in the registry, this is one way to replace it -

Thank You -
EDIT -
Install this update to enable afd.sys binary to be compatible with products from CheckPoint.
If you still have a problem, this is what M/soft point you to -
Article ID: 958752 - Last Review: October 3, 2011 - Revision: 3.0
For XP 32bit versions
http://www.microsoft.com/downloads/details.aspx?FamilyId=EE555116-9F9D-4F6E-8EB8-033124456984
For XP 64bit versions
http://www.microsoft.com/downloads/details.aspx?FamilyId=7FE9A44D-F2D6-4FED-B9CF-60C032A09EBE
The third-party products that this article discusses are manufactured by companies that are independent of Microsoft.
Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.
Lastly .......
If you do know your way around your system a bit This Article can also help you -

Thank You -

Edited by noknojon, 07 January 2012 - 03:37 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users