One of my users brought in their home computer because it was running slow and getting pop ups. They weren't running any antivirus I could find, so ran Malwarebytes and found some items and cleaned it up. Then the internet stopped working. Through some suggestions from other sites tried running TDSSKiller (found some items and removed), Spybot (found items and removed), Microsoft Security Essentials (found items and removed), AVG Free 2012 (found yet more items and removed them), as well as some other tools from other sites (similar to the Farbar Service Scanner mentioned here).
No love. I think I have all of the malware/spyware removed, but the internet connection just states "Unidentified Network, Access: Local only". I ran SFC /SCANNOW and it tells me that AFD.sys and tcpmon.ini are corrupt and not repairable. Neither are visible on the system. I tried copying afd.sys from a different vista PC (Vista Pro) but it still doesn't work.
I have run the netsh winsock reset, updated NIC drivers, uninstalled the NIC and reinstalled all with no luck.
If I try and do an ipconfig /renew, I get the message "An error occurred ...: A socket operation encountered a dead network". The IP address sits at 169.254.209.40. It's not the network, as I can use the same connection to connect with other devices. I check the status of the network connection on the PC in question and it shows that it is receiving packets, but sending nothing.
I'm kind of at a loss. Based on the other post, I ran the Farbar Service Scanner so I could attach it in case it would help. At this point I think everything is cleaned off of the computer, we just can't get the PC to connect to the internet. I've also tried reinstalling Vista SP1 but it errors out.
Currently running MS Security Essentials as the antivirus (ran another scan and it found nothing). Also have run Microsoft Malicious software removal tool, and that came up with no results. AVG, Spybot and Malwarebytes are currently uninstalled.
Any help would be appreciated ... thanks in advance.
Edited by Orange Blossom, 17 August 2012 - 02:50 PM.
Moved to AII from Vista. ~ OB