Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Screwed the Pooch? Help with TCP/IP Firewall


  • Please log in to reply
18 replies to this topic

#1 jmbelden98

jmbelden98

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 16 January 2012 - 06:17 PM

I have a Dell Computer running Windows xp service pack 3.

It had a ton of viruses on it so I ran a few of the free cleanup programs available.

It now seems to be virus free, however it is totally unable to connect to the internet.

I started digging into the services and found Windows Firewall/Internet Connection Sharing (ICS) was not running.

When I tried to start the service manually I go:

Error 2: The system cannot find the file specified

I downloaded a utility Farbar Service Scanner (saw it was recommended by Budapest) The results posted below:

Farbar Service Scanner
Ran by Erica Belden (administrator) on 16-01-2012 at 17:55:28
Microsoft Windows XP Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is OK.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.

Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

Tcpip Service is not running. Checking service configuration:
The start type of Tcpip service is OK.
The ImagePath of Tcpip service is OK.

IpSec Service is not running. Checking service configuration:
Checking Start type: Attention! Unable to open IpSec registry key. The service key does not exist.
Checking ImagePath: Attention! Unable to open IpSec registry key. The service key does not exist.


Connection Status:
==============
Localhost is blocked.
There is no connection to network.
Attempt to access Google IP returned error: Other errors
Attempt to access Yahoo IP returend error: Other errors


Windows Firewall:
=============
sharedaccess Service is not running. Checking service configuration:
The start type of sharedaccess service is OK.
The ImagePath of sharedaccess service is OK.
The ServiceDll of sharedaccess service is OK.


Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

Windows Update:
===========
BITS Service is not running. Checking service configuration:
The start type of BITS service is set to Demand. The default start type is Auto.
The ImagePath of BITS service is OK.
The ServiceDll of BITS: "C:\WINDOWS\system32\qmgr.dll".


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(6) NetBT(5) NwlnkIpx(9) NwlnkNb(13) PSched(7) Tcpip(3) Tcpip6(14)
0x0E00000004000000010000000200000003000000050000000600000007000000080000000A0000000B0000000C000000090000000D0000000E000000
Attention! IpSec Tag value should be 4Attention! IpSec Tag value is missing and it should be 4

**** End of log ****


I do not have the boot disks or repair disks.

Is there anything I can do?

Thanks

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:49 AM

Posted 16 January 2012 - 07:30 PM

To be on safer side before running registry fixes i would suggest you to

Download

http://www.snapfiles.com/get/erunt.html

Install it and backup your registry to C:/Windows/erdnt

Download

http://www.smartestcomputing.us.com/files/getdownload/75-registry-network-keys/

Download the zip file

Extract and launch ipsec.reg

Click YES when you get the UAC prompt

Restart your PC and check your browser

Good luck

Edited by narenxp, 16 January 2012 - 07:31 PM.


#3 jmbelden98

jmbelden98
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 16 January 2012 - 07:57 PM

Hi,

Thanks for the response..

I downloaded the registery copy program
downloaded the zip file
extracted the program you suggested and ran it.

It requested to replace a directory entry and I said yes.

Unfortunately

The problem still persists...

When I try to start the service manually I recieve the following:

Could not start Windows Firewall/Internet Connection Sharing (ICS) on Local Computer
Error 2: The system could not find the specified File

Do we have other alternatives?

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:49 AM

Posted 16 January 2012 - 08:30 PM

I want to know if you can connect to internet
Lets look into windows firewall next

Edited by narenxp, 16 January 2012 - 08:30 PM.


#5 jmbelden98

jmbelden98
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 16 January 2012 - 08:37 PM

NO... I cannot make connection to internet.

THanks for helping.

#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:49 AM

Posted 16 January 2012 - 08:41 PM

Download

Winsock fix

Launch it ,Click on FIX

Restart your PC after it gets completed

Check your browser.If that doesnt work try this


PLEASE create a restore point before trying this

Please copy the entire contents of the codebox below into Notepad:


REGEDIT4

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock]

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2]





Open a notepad ,copy the script,save it as

Filename:winsock.reg
save as type:All files


Launch it and click YES to add it to registry

After that, Reboot your computer.

After the restart,

Go to Network Connections
Right click on your normal connection icon, and choose Properties
Click the Install button
Choose Protocol then click Add
Click Have disk
In the drop down box, type in: C:\WINDOWS\INF and click OK
In the next dialog, click Internet Protocol (TCP/IP) then click OK
Click Close to leave the properties box

After that, restart your computer and see if you can browse now.

Post the NEW FSS log

Good luck

#7 jmbelden98

jmbelden98
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 17 January 2012 - 06:44 AM

Thanks, I will give this script a try tonight after work.

Thanks for the Good Luck. I think I will need it!

#8 jmbelden98

jmbelden98
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 17 January 2012 - 06:22 PM

Getting ready to try this.

Not sure I understand the following:

Open a notepad ,copy the script,save it as

Filename:winsock.reg
save as type:All files

#9 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:49 AM

Posted 17 January 2012 - 06:24 PM

Press Windows+R key and type

notepad and click ok

On top left corner you have FILE option

Good luck

#10 jmbelden98

jmbelden98
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 17 January 2012 - 07:03 PM

Hi...

The really good news is that the services are now running :clapping:

The not so good news is that I am still not making the connection to the network through wireless

I have not tried a direct connection to the router.

Here is the FSS report

Farbar Service Scanner
Ran by Erica Belden (administrator) on 17-01-2012 at 18:55:11
Microsoft Windows XP Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error: Google IP is unreachable
Attempt to access Yahoo IP returend error: Yahoo IP is unreachable


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

Windows Update:
===========
BITS Service is not running. Checking service configuration:
The start type of BITS service is set to Demand. The default start type is Auto.
The ImagePath of BITS service is OK.
The ServiceDll of BITS: "C:\WINDOWS\system32\qmgr.dll".


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(6) IPSec(5) NetBT(5) NwlnkIpx(9) NwlnkNb(13) PSched(7) Tcpip(3) Tcpip6(14)
0x0E00000005000000040000000100000002000000030000000600000007000000080000000A0000000B0000000C000000090000000D0000000E000000
IpSec Tag value is correct.

**** End of log ****

#11 jmbelden98

jmbelden98
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 17 January 2012 - 07:21 PM

Some more good news.... I can connect to the internet now through a hardwired connection to the router.

This is a HUGE win :)

All I need to do now is to get the wireless connection to work.

#12 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:49 AM

Posted 17 January 2012 - 07:25 PM

:thumbup2:

Download

http://go.microsoft.com/?linkid=9662461

Run the fixit

Press Windows+R key and type

cmd and click ok

Run the following commands


netsh i i r r
netsh winsock reset
ipconfig /registerdns
ipconfig /flushdns
ipconfig /release
ipconfig /renew


Press Windows+R key and type

devmgmt.msc and click ok

Expand network adapters

Right click on your network driver-Uninstall

Restart your PC and check your browser

Good luck

Edited by narenxp, 17 January 2012 - 07:26 PM.


#13 jmbelden98

jmbelden98
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 17 January 2012 - 07:29 PM

will this fix the wireless adapter?

I was just about and try to down load the adapters off the net.

Based upon all the instructions you have given me so far.. I think I trust your solution.

#14 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:49 AM

Posted 17 January 2012 - 07:37 PM

:thumbup2:

#15 jmbelden98

jmbelden98
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:01:49 AM

Posted 17 January 2012 - 07:54 PM

ok... I went through the sequence..

Have the same result... cannot connect the wireless..

It appears that I have the drivers on the PC...

When I attempt to start WNDA3100v2 Netgear i get Failed to Run Service

Will I need to reinstall the drivers?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users