Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

tcp/ip problems


  • Please log in to reply
1 reply to this topic

#1 teocristi2002

teocristi2002

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:07:33 PM

Posted 15 December 2012 - 03:06 PM

I recently had the XP Home Security 2012 virus/malware on my computer. Avast sad my computer have an infection. After that, Avast reboot my computer and recomand to scan my computer. This is where my current issue began, after scanning my computer, I lost my connection to internet. When I looked at the Local Area Connection Status is indicated that 0 Packets were being sent and 0 were being received. This lead me to try to Repair Local Area Connection when it indicated this: Windows could not finish repairing the because the following action cannot be completed:
Failed to query TCP/IP setting of the connection. Cannot proceed. For assistance, contact the person who manages your network.
Following this, I tried to access internet explorer when the browser displayed: 'Internet Explorer cannot display the webpage.'
After doing that I began to google information regrading this issue and came across some theories through message boards. The first thing I tried was this:
C:\Documents and Settings\User> netsh int ip reset reset.log
C:\Documents and Settings\User> netsh winsock reset catalog
Sucessfully reset the Winsock Catalog.
You must restart the machine in order to complete the reset.
Rebooted!! Then I did restarted the computer with zero luck.
I downloaded the FSS.exe and i got this:
Farbar Service Scanner Version: 10-12-2012
Ran by User (administrator) on 14-12-2012 at 15:26:24
Running from "D:\"
Microsoft Windows XP Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is OK.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.

Dhcp Service is not running. Checking service configuration:
The start type of Dhcp service is OK.
The ImagePath of Dhcp service is OK.
The ServiceDll of Dhcp service is OK.

Tcpip Service is not running. Checking service configuration:
The start type of Tcpip service is set to Disabled. The default start type is System.
The ImagePath of Tcpip service is OK.


Connection Status:
==============
Attempt to access Local Host IP returned error: Localhost is blocked: Other errors
There is no connection to network.
Attempt to access Google IP returned error. Other errors
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo IP returned error. Other errors
Attempt to access Yahoo.com returned error: Other errors


File Check:
========
C:\WINXP\system32\dhcpcsvc.dll
[2008-06-03 16:01] - [2008-06-03 16:01] - 0126976 ____A (Microsoft Corporation) C51DE19619D50CBD03708647ACA10E70

C:\WINXP\system32\Drivers\afd.sys => MD5 is legit
C:\WINXP\system32\Drivers\netbt.sys => MD5 is legit

ATTENTION!=====> C:\WINXP\system32\Drivers\tcpip.sys FILE IS MISSING AND SHOULD BE RESTORED.

C:\WINXP\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINXP\system32\dnsrslvr.dll => MD5 is legit
C:\WINXP\system32\svchost.exe => MD5 is legit
C:\WINXP\system32\rpcss.dll
[2009-02-09 12:56] - [2009-02-09 12:56] - 0401408 ____A (Microsoft Corporation) 9222562D44021B988B9F9F62207FB6F2

C:\WINXP\system32\services.exe
[2009-12-23 17:05] - [2009-12-23 17:05] - 0110592 ____A (Microsoft Corporation) C519E15665CD89A91AD383FCE3CB556A


Extra List:
=======
Gpc(3) IPSec(5) NetBT(6) NwlnkIpx(9) NwlnkNb(10) PSched(7) Tcpip(4) Tcpip6(11)
0x0A00000005000000010000000200000003000000040000000600000007000000090000000A0000000B000000
IpSec Tag value is correct.

**** End of log ****

After that I launched the FSS again and I typed ipsec.sys in the BOX. I clicked on search files and I got this:
Farbar Service Scanner Version: 10-12-2012
Ran by User (administrator) on 14-12-2012 at 15:31:25
Microsoft Windows XP Service Pack 3 (X86)

************************************************
======== Search: "ipsec.sys" =========

C:\WINXP\system32\drivers\ipsec.sys
[2008-04-14 14:00] - [2008-04-14 14:00] - 0075264 ____A (Microsoft Corporation) 23C74D75E36E7158768DD63D92789A91

====== End Of Search ======
Please help.

BC AdBot (Login to Remove)

 


#2 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:33 PM

Posted 17 December 2012 - 07:33 PM

Run the services repair tool reboot and post new Fss Log please.
http://kb.eset.com/library/ESET/KB%20Team%20Only/Malware/ServicesRepair.exe




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users