From: RAIDSpay on

Hello guys, I'm facing a serious problem here: I've been trying to fix
a computer here but I am just so stuck.

First the PC was filled with viruses to the point that it wouldn't
allow you to get on the internet without some scan popping up and
without the page rerouting you to an antisoftware page to buy the
product. I got rid of all of that.:) The pc had XP SP2, so all I
wanted to do was upgrade to XP SP3 and get the critical updates and
security so it could be more secure. Boy was that not easy. The 2
times I've tried installing SP3, I have not been able to go on the
internet. The first time I tried it I wasn't able to go on the net, so
I hit system restore and was able to go back to SP2 and be on the net
just fine. But then I tried to put SP3 on it again back in SP2 but
during the process the system didn't even restart. To make it quick,
that's no longer an option because I moved the system restore point up
so I can't go back.:mad: I have no choice but to face the XP SP3
problem now.

This is what I've discovered so far: Services that are supposed to
start but won't start are IPSEC services, Network Location Awareness
(NLA) DHCP client, Automatic Updates, Windows Firewall/Internet Connect
Sharing (ICS), TCP/IP NetBios Helper.

Long story short, the 2 computer icons on the lower right hand of my
screen says limited or no connectivity. I reseached and tried to see to
see if I could start the DHCP service from a window named
Services(Local) but I get message that says:
_Could_not_start_the_DHCP_Client_service_on_Local_Computer._Error_1068:_The_dependency_service_or_group_failed_to_start._
I then went into computer-manage-device manager and hit View up top and
clicked Show hidden devices. Under the Non-Plug and Play Drivers, I saw
a yellow warning sign next to AFD Networking Support Environment. I
think this is the root of the problem.

Look at the pic here to let me show you why I think AFD may be the root
of this:

'[image: http://img23.imageshack.us/img23/2005/devicemanagerpic.jpg]'
(http://img23.imageshack.us/i/devicemanagerpic.jpg/)


Anyway I need help desperately. People please help me out and help me
get internet running on XP SP3 on my PC! I have faith in this group.
Please don't disappoint me!:)


From: smlunatick on
On Jul 21, 12:51 am, RAIDSpay <RAIDSpay.4eg...(a)no.email.invalid>
wrote:
> Hello guys, I'm facing a serious problem here:  I've been trying to fix
> a computer here but I am just so stuck.
>
> First the PC was filled with viruses to the point that it wouldn't
> allow you to get on the internet without some scan popping up and
> without the page rerouting you to an antisoftware page to buy the
> product.  I got rid of all of that.:)  The pc had XP SP2, so all I
> wanted to do was upgrade to XP SP3 and get the critical updates and
> security so it could be more secure.  Boy was that not easy.  The 2
> times I've tried installing SP3, I have not been able to go on the
> internet.  The first time I tried it I wasn't able to go on the net, so
> I hit system restore and was able to go back to SP2 and be on the net
> just fine.  But then I tried to put SP3 on it again back in SP2 but
> during the process the system didn't even restart.  To make it quick,
> that's no longer an option because I moved the system restore point up
> so I can't go back.:mad:  I have no choice but to face the XP SP3
> problem now.
>
> This is what I've discovered so far: Services that are supposed to
> start but won't start are IPSEC services, Network Location Awareness
> (NLA) DHCP client, Automatic Updates, Windows Firewall/Internet Connect
> Sharing (ICS), TCP/IP NetBios Helper.
>
> Long story short, the 2 computer icons on the lower right hand of my
> screen says limited or no connectivity.  I reseached and tried to see to
> see if I could start the DHCP service from a window named
> Services(Local) but I get message that says:
> _Could_not_start_the_DHCP_Client_service_on_Local_Computer._Error_1068:_The_dependency_service_or_group_failed_to_start._
> I then went into computer-manage-device manager and hit View up top and
> clicked Show hidden devices. Under the Non-Plug and Play Drivers, I saw
> a yellow warning sign next to AFD Networking Support Environment. I
> think this is the root of the problem.
>
> Look at the pic here to let me show you why I think AFD may be the root
> of this:
>
> '[image:http://img23.imageshack.us/img23/2005/devicemanagerpic.jpg]'
> (http://img23.imageshack.us/i/devicemanagerpic.jpg/)
>
> Anyway I need help desperately. People please help me out and help me
> get internet running on XP SP3 on my PC!  I have faith in this group.
> Please don't disappoint me!:)

The problem you are describe is really pointing to a "damaged" system
with left-over "changes" done by the viruses and the "repairs" /
"removals" you have done. You will need to re-install XP, either as a
repair re-install with SP3 "slipstreamed" on the XP install CD.
Please note that you might have to "bite the bullet" and do a clean XP
install.
From: PA Bear [MS MVP] on
> First the PC was filled with viruses to the point that it wouldn't
> allow you to get on the internet without some scan popping up and
> without the page rerouting you to an antisoftware page to buy the
> product. I got rid of all of that.

Chances are you have MUCH more work to do!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now post the requested logs in an appropriate forum for assistance by an
expert in such matters. DO NOT SKIP THIS STEP!!

I can recommend the expert assistance offered in these forums:
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php, and
http://aumha.net/viewforum.php?f=30

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.


RAIDSpay wrote:
> Hello guys, I'm facing a serious problem here: I've been trying to fix
> a computer here but I am just so stuck.
>
> First the PC was filled with viruses to the point that it wouldn't
> allow you to get on the internet without some scan popping up and
> without the page rerouting you to an antisoftware page to buy the
> product. I got rid of all of that.:) The pc had XP SP2, so all I
> wanted to do was upgrade to XP SP3 and get the critical updates and
> security so it could be more secure. Boy was that not easy. The 2
> times I've tried installing SP3, I have not been able to go on the
> internet. The first time I tried it I wasn't able to go on the net, so
> I hit system restore and was able to go back to SP2 and be on the net
> just fine. But then I tried to put SP3 on it again back in SP2 but
> during the process the system didn't even restart. To make it quick,
> that's no longer an option because I moved the system restore point up
> so I can't go back.:mad: I have no choice but to face the XP SP3
> problem now.
>
> This is what I've discovered so far: Services that are supposed to
> start but won't start are IPSEC services, Network Location Awareness
> (NLA) DHCP client, Automatic Updates, Windows Firewall/Internet Connect
> Sharing (ICS), TCP/IP NetBios Helper.
>
> Long story short, the 2 computer icons on the lower right hand of my
> screen says limited or no connectivity. I reseached and tried to see to
> see if I could start the DHCP service from a window named
> Services(Local) but I get message that says:
> _Could_not_start_the_DHCP_Client_service_on_Local_Computer._Error_1068:_The_dependency_service_or_group_failed_to_start._
> I then went into computer-manage-device manager and hit View up top and
> clicked Show hidden devices. Under the Non-Plug and Play Drivers, I saw
> a yellow warning sign next to AFD Networking Support Environment. I
> think this is the root of the problem.
>
> Look at the pic here to let me show you why I think AFD may be the root
> of this:
>
> '[image: http://img23.imageshack.us/img23/2005/devicemanagerpic.jpg]'
> (http://img23.imageshack.us/i/devicemanagerpic.jpg/)
>
>
> Anyway I need help desperately. People please help me out and help me
> get internet running on XP SP3 on my PC! I have faith in this group.
> Please don't disappoint me!:)

From: RAIDSpay on

Can anyone help?


From: PA Bear [MS MVP] on
cf.
http://groups.google.com/group/microsoft.public.windowsxp.general/msg/aceb01a09f2fc6cd

Paul wrote:
> RAIDSpay wrote:
>> Can anyone help?
>>
>
> In Non Plug and Play devices here, my AFD is OK and these
> are the details.
>
> AFD
> Service Name AFD
> Display Name AFD
> Status: Started
>
> Type: System
>
> Driver Details: C:\WINDOWS\system32\drivers\AFD.sys
>
> File version 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236)
>
> So the first thing you might check, is whether the file is
> present or not.
>
> There are some details here, on SFC scannow, which gives
> you some idea how files are stored in the system. Windows
> File Protection keeps cached copies of files, for automatic
> replacement. Malware activity on the machine, could play
> with many aspects of that. The i386 folder (like on your
> original WinXP CD), should have a copy of AFD.sys to put
> back, even if it isn't the SP3 one.
>
> http://www.updatexp.com/scannow-sfc.html
>
> I have the following file, and I think that is where SFC would
> get files that were updated by SP3. I don't see an AFD.sys in
> there (I looked inside it to check).
>
> C:\WINDOWS\Driver Cache\i386\sp3.cab
>
> I can see that KB956803 changed the AFD.sys file. I think
> that is where my 5.1.2600.5657 version came from. AFD
> stands for "Ancillary Function driver" - no mistaking
> what that does :-) Um... Not a clue.
>
> http://support.microsoft.com/kb/956803
>
> Paul