Vista Home Basic, No Internet connection

Yes because it is not the current version. You are also way out of date with MGtools. You need current versions of both programs. You will have to download them using another PC and copy them to this PC from a flash drive or similar. We need to have logs from current versions to help you.

From what you attach thus far, all I can say is it looks like you have no network adapter installed.

 

You are using an old version of MGTools. Please download the latest version of MGtools and save it to your root folder. Overwrite your previous MGtools.exe file with this one. Run the exe file and attach the new log. ( If running Win7 or Vista., right click and run as administrator, making sure the UAC is turned off. )

 

You missed some key early instructions in the READ & RUN ME. You have multiple antivirus programs and installed and you will have to uninstall them all right now.

Uninstall the below:
Ad-Aware
Microsoft Security Client
Microsoft Security Essentials
PC Tools AntiVirus Free 8.0


Also uninstall the below out of date Sun Java per the READ & RUN ME
Java(TM) 6 Update 26


I see you have Microsoft's FixIt program on your Desktop. Did you actually run this?

I don't believe you are having malware problems. All of your network services are running properly. From what I can see in your logs, it does not look like you have a network adapter being detected. You may need to reinstall all of software/drivers for your hardware.

 

You're welcome.

Let's try a couple things before we send you off to Networking.

Click Start, All Programs, and then scoll as nessary until you see he Accessories folder and select it. You see something like below.



Right click on the little black icon saying Command Prompt and select Run As Administrator.

A command prompt window should open with a title of Administrator:Command Prompt.
Now type the below commands each followed by the Enter key.

netsh winsock reset

Now reboot your PC.

If still having a problem with your internet connection, continue with the below.


Please download MiniToolBox and save it to your desktop and run it by right clicking and selecting Run As Administrator.

Checkmark following checkboxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List IP configuration
• List Winsock Entries
• List Devices -> All
• List last 10 Event Viewer log

Press Go and attach the result (Result.txt) that pops up. A copy of Result.txt will be saved in the same directory the tool is run from.


Now download Windows Repair by Tweaking.com and unzip the contents into a newly created folder on your desktop.

• Now open Repair_Windows.exe
• Go to Start Repairs tab.
• Choose "Custom Mode" and press "Start".
• Create a System Restore point if prompted.
• In the Custom Mode window, select the following repair options:
  • Repair Windows Firewall
  • Repair Internet Explorer
  • Repair Hosts File
  • Remove Policies Set By Infections
  • Repair Winsock & DNS Cache
  • Repair Windows Updates
• Now click the Start button.
• Be patient while the tool repairs the selected items.
• If asked to reboot the computer for the changes to take affect, make sure other tasks in the program are not still running before accepting to restart.

After this last reboot, is there any change now to your problem?

 

Okay. I'm still not seeing any malware reason for this. It just looks like your hardware is not being detected. However I want to run a scan with a newer version of MGtools to look for additional info. I was seeing a few registry entries that appeared to be missing in your previous logs, but I'm not sure they are a reason for not having your internet connection working. The services related to these reg keys were all running.

Now download the current version of MGtools and save it to your root folder. Overwrite your previous MGtools.exe file with this one.

Run MGtools.exe ( Note: If using Vista or Win7, make sure UAC is still disabled. Also don't double click on it, use right click and select Run As Administrator )

Now attach the below log:

• C:\MGlogs.zip

 

Okay I can see a bunch of required services that are not running. Let's check to see if they can be started by a easy method or not.


Click Start, All Programs, and then scoll as nessary until you see he Accessories folder and select it. You see something like below.



Right click on the little black icon saying Command Prompt and select Run As Administrator.

A command prompt window should open with a title of Administrator:Command Prompt. Do you get this??
If yes, continue. If not, stop and tell me.
Now enter the below commands the below into the command prompt window one at a time each followed by the enter key. Tell me EXACTLY why message you get for each.

sc start http
sc start fdphost
sc start fdrespub
sc start ssdpsrv

 

Just an FYI. In the command prompt window, you can right click on the top bar and you will have editing functions where you can Mark, Copy, and Paste.

The services have something stopping them from starting. Not sure what since all of the dependencies are okay. This may be a driver/hardware issue of some type, but you said Device Manager looked OK.

Please download Farbar Service Scanner and run it on the computer with the issue.

• Make sure to put a check in each of the check boxes for
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
• Press "Scan".
• It will create a log (FSS.txt) in the same directory the tool is run.
• Please attach this log to your next reply.

 

Okay we have some infected system files that no scans are finding as a problem. Also System Restore is broken.


Also, please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1


Download Mirror #2

• Double-click SystemLook.exe to run it.
• Copy the content of the following codebox into the main textfield:
  Code:

  :filefind
  tcpip.sys
  wscsvc.dll
  WMIsvc.dll
  

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. You can just close this notepad window since the log is already saved on your Desktop. Be patient! It may look like it is not doing anything, but it takes awhile for this to scan thru your whole system look for matches.
• Please attach the SystemLook.txt log found on your Desktop to next reply.

 

Now we need to use ComboFix

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
• If ComboFix tells you it has expired or need to be updated to a new version, make sure you allow it to update.
• Open Notepad and copy/paste the text in the below quote box into it:

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

If after running Combofix you discover none of your programs will open up because you recieve the following error: Illegal operation attempted on a registry key that has been marked for deletion then you will need to reboot your computer which will normally fix this problem.

Now rerun Farbar's Service Scanner like last time.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

• C:\ComboFix.txt
• the new fss.txt log from Farbar's Service Scanner
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

Download and save the below file to the C:\MGtools folder ( it must be save here for the later fix with ComboFix to work ).

tcpip

Now we need to use ComboFix

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
• If ComboFix tells you it has expired or need to be updated to a new version, make sure you allow it to update.
• Open Notepad and copy/paste the text in the below quote box into it:

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

If after running Combofix you discover none of your programs will open up because you recieve the following error: Illegal operation attempted on a registry key that has been marked for deletion then you will need to reboot your computer which will normally fix this problem.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

• C:\ComboFix.txt
• C:\MGlogs.zip

 

Okay that look a lot better. Your network interface is now showing in your logs. But some services that should be running are still not running.

Now that we have you network interface showing, let's rerun some previous steps.

Rerun the Farbar Service Scanner and attach the new fss.txt log.

Also rerun MiniToolBox by right clicking and selecting Run As Administrator.


Checkmark following checkboxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List IP configuration
• List Winsock Entries
• List Devices -> All
• List last 10 Event Viewer log

Press Go and attach the Result.txt log that pops up. A copy of Result.txt will be saved in the same directory the tool is run from.



Rerun Windows Repair ( Repair_Windows.exe )by right clicking and selecting Run As Administrator

• Go to Start Repairs tab.
• Choose "Custom Mode" and press "Start".
• Create a System Restore point if prompted.
• In the Custom Mode window, select the following repair options:
  • Repair Windows Firewall
  • Repair Internet Explorer
  • Repair Hosts File
  • Remove Policies Set By Infections
  • Repair Winsock & DNS Cache
  • Repair Windows Updates
• Now click the Start button.
• Be patient while the tool repairs the selected items.
• If asked to reboot the computer for the changes to take affect, make sure other tasks in the program are not still running before accepting to restart.

Now reboot your PC, is there any change now to your problem?


Now download the current version of MGtools and save it to your root folder. Overwrite your previous MGtools.exe file with this one.

Run MGtools.exe ( Note: If using Vista or Win7, make sure UAC is still disabled. Also don't double click on it, use right click and select Run As Administrator )


Now attach the below log:

• C:\ComboFix.txt
• C:\MGlogs.zip

 

Yes that was just a typo on the combofix log.

Now please click Start, type services.msc into the Search box. Look for the icon to appear in the Start menu and double click it to run it. This will open up the Services form. Scroll down to the SSDP Discovery Service and double click on it. If the Service status: shows Stopped or Disabled, click the Start button. Does it Start? Make sure that the Startup type is set to Manual.

Now locate the Function Discovery Resource Publication service and Start it and set the Startup type to Automatic, Did this Start?

Now locate the Function Discovery Provider Host service and Start it and set the Startup type to Manual, Did this Start?

Now locate the UPnP Device Host service and Start it and set the Startup type to Automatic, Did this Start?


Now close the above services forms and reboot your PC. After reboot, get a new log from MGtools and attach it here along with your answers to what happened while trying to start all the above services.

​

 

Click Start, Run, and enter sfc /scannow and click OK. There is a space after the sfc. This runs System File Checker which looks for missing or corrupted system files and attempts to replace/repair them from files on your hard disk or from the CD if necessary. So it will ask for the Windows CD if it needs it.

Let me know what happens with the above scan.


Also I want to save the below link here for future reference as we may be trying to reinstall Vista SP2 at some point.

Windows Server 2008 SP2 and Windows Vista SP2 ( 476 MB download )

 

Okay reboot your PC and the run the below.

Run Farbar's Service Scanner again as earlier and attach the new fss.txt log.

Also run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

• the new fss.txt log
• C:\MGlogs.zip

 

Also if still having a problem with your connection, the next thing I want to try is below which are instructions for Vista systems assuming Control Panel is not in Classic View.

1. Please click Start, and type cmd.exe into the search box
   • You should see a cmd.exe and icon appear in the Programs area of the Start Menu.
   • Right click on cmd.exe and select Run As Administrator
   • A command prompt window should open with a title of Administrator:Command Prompt.
   • Type the following in the command prompt window and then hit enter:
     • notepad c:\windows\inf\nettcpip.inf
     • (note that there is space after notepad)
   • The above file will open in the notepad.
   • Under the [MS_TCPIP.PrimaryInstall] section find the following: Characteristics = 0xA0
   • Edit 0xA0 and replace it with 0x80 (replace A with 8)
   • Under File menu click Save and close the notepad.
2. Go to Start ==> Control Panel and under Network and Internet, select View network status and tasks. On the next page select the Manage network connection item in the left column. Now Right-click Local Area Connection, and select Properties.
   • Now click the Install button and a popup window opens.
   • Select Protocol from the list and then click Add.
   • A new window opens, click Have Disk....
   • In the Browse... box type c:\windows\inf and hit enter
     
   • Select Internet Protocol Version 4 (TCP/IPv4), and then click OK.
   • On the Local Area Connection Properties screen select Internet Protocol Version 4 (TCP/IPv4) and click Uninstall, and then click Yes.
   • Wait until it asks to restart, and then restart as requested. Continue with the below after restarting.
3. Please click Start, and type cmd.exe into the search box
   • You should see a cmd.exe and icon appear in the Programs area of the Start Menu.
   • Right click on cmd.exe and select Run As Administrator
   • A command prompt window should open with a title of Administrator:Command Prompt.
   • Type the following in the command prompt window and then hit enter:
     • notepad c:\windows\inf\nettcpip.inf
     • (note that there is space after notepad)
   • The above file will open in the notepad.
   • Under [MS_TCPIP.PrimaryInstall] section find the following: Characteristics = 0x80
   • Edit 0x80 and replace it with 0xA0 (replace 8 with A)
   • Under File menu click Save and close the notepad.
4. Go to Start ==> Control Panel.and under Network and Internet, select View network status and tasks. On the next page select the Manage network connection item in the left column. Now Right-click Local Area Connection, and select Properties.
   • Now click the Install button and a popup window opens.
   • Select Protocol from the list and then click Add
   • A new window opens, click Have Disk....
   • In the Browse... box type c:\windows\inf and hit enter
     
   • Select Internet Protocol Version 4 (TCP/IPv4), and then click OK.
   • On the Local Area Connection Properties screen select Internet Protocol Version 4 (TCP/IPv4) and click Uninstall, and then click Yes.
   • Wait until it asks to restart, and then restart as requested. Continue with the below after restarting.
5. After restart please run Farbar Service Scanner again and save the fss.txt log to attach below.
6. Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).
   
   Then attach the below logs:
   • the new fss.txt log from Farbar's Service Scanner
   • C:\MGlogs.zip

 

I assume you mean you received this after loading the file and editing the 0xA0 to 0x80 and trying to save it???

 

You cannot do step 2 if step 1 had not worked.

Can you give me a snapshot of your LAN connection window? Do not capture your whole desktop as that will not be readable. Just capture the section of the screen related to the LAN connections. You can use a program like Faststone Screen Capture ( one of favorites ). It will let you choose and area or a window...etc.

 

Okay the problem is due to how Vista has changed permissions on the file and folder which is not the way it was in the past. I did not think about that when I was modifying the procedure which had been used on Win XP in the past. We will need to Take Ownership of this file for Administrators and then grant full permissions to Administrators first. The we will likely have to run the notepad program via an elevated permissions command prompt.

Let's change the owner and permissions on the file.



Note: you may see warnings while doing the below about changing permissions on system folders resulting in unexpected access problems. Just say yes!

• Click Start and in the Search box type explore c:\windows\inf and hit enter.
• This should open up the C:\Windows\inf folder in Windows Explorer.
• Scroll down to the nettcpip.inf file and right click on it and select Properties and then the Security tab
• Click the Advanced button at the bottom.
• This will bring up the Advanced Security Settings for nettcpip.inf form.
• Select the Owner button. This will likely show the Current owner: as TrustedInstaller
• Click the Edit button at the bottom of this form
• Now on this Owner form down at the bottom you should see a Change owner to: label above a box listing other names. Select Administrators (pcname\Administrators) - where pcname is the name of your computer.
• Then click Apply and OK. Then OK again on next form.
• Now you should be back to the nettcpip.inf Properties form.
• Click the Edit button and then select the Administrators (pcname\Administrators) user name
• The put a check in the Allow Full Control box in the Permissions for Administrators area. Checks should appear next to all check boxes in the Allow column.
• Click Apply and OK.
• And then OK on the Properties form to close it.

Let me know if/when you are able to do this. In the meantime, I'm going to edit previous instructions to change how to run notepad in an elevated command prompt to avoid problems.

 

Okay. And just so I don't forget, when we get done with all of this, we need to change the Owner of the file back to TrustedInstaller which will require adding NT SERVICE\TrustedInstaller to the name list and reapplying. Don't do this now. I just want to post this as a reminder to us.

 

Okay then go back to message # 32 which I have edited and see if you can do this now.

By the way, you can right click on that itsmoney connection and rename it back to Local Area Connection

 

You completed the Adding of the Protocol with not problem? I expected that after doing this, that you would get back to the Properties form and the Uninstall would be available?

If you close the Network Connections Properties form and reopen it, does it activate?