Error 1068, Can't connect to internet

First can you click start and then in the search box type the following:


Open the first application shown

Upon launch search for 'Wired AutoConfig' and then right click and click on properties



After that you should get a properties window, please start the service as well as change the Startup Type to Automatic



This should allow your ethernet NIC to connect automatically if all drivers are correct.

If not then can you boot the machine in safe mode with networking and test. To do so follow this tutorial (OPTION ONE ONLY) - http://www.sevenforums.com/tutorials/69585-safe-mode.html



If it still doesn't connect then try to use a different port on your router and/or a different cable as it may be a physical issue. If that doesn't work then I would begin to suspect drivers

Josh

OK, here's what I did. After posting to the Networking forum I decided to try something I should have done first. I performed a system restore to a point 2 weeks ago. Voila' the internet is back!

So, I then ran hitman, which found some stuff. I let hitman take care of it. Then I ran Malewarebytes. And then Tdsskiller.

Malewarebytes found some stuff and got rid of it. Tdsskiller found no problems.

I used Norton removal tool to remove Norton Security Suite (which would not uninstall). I then downloaded Microsft Secutity Essentials and ran a complete system scan. It found one adware.

I also ran Windows Malicious Software removal tool, which found nothing.

I then ran the Services fixer tool you recommended and it was able to restore the services.

I've attached log files from Hitman and Malewarebytes. Thanks.

HitmanPro_20130801_1746.log

mbam-log-2013-08-01 (17-06-04).txt

Might want to run AdwCleaner and Junkware Removal Tool . Glad you have fixed your issue .

Will do. Thanks!

jkoll66,

Good news, and a good job on your part!!

Was just getting ready to tackle the Internet issue, and running a Registry backup from July 23 using FRST was one of the items on the agenda.

Would appreciate your attaching the HitmanPro_20130801_1746.log, and the mbam-log-2013-08-01 (17-06-04).txt again. Something did not work with the attachment.

Also, since we have come this far, let's make sure all is well.

Please run the following from the Desktop...

Farbar Recovery Scan Tool - this time check the Addition option
Farbar Service Scanner
MiniToolBox

On the MiniTooloBox:
(Image from BleepingComputer)
http://i646.photobucket.com/albums/uu186/farbar/MTB.gif

Check the following options:
Report FF Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Devices
List Restore Points

When done with all of the above, please post the new reports from the 3 tools.

Thanks!!

Thanks. I'll run the scans sometime tonight or tomorrow. Meanwhile here's the log files again.

View attachment HitmanPro_20130801_1746.log

View attachment mbam-log-2013-08-01 (17-06-04).txt

Thanks for the info.

Lots of garbage there, and it would be wise to run AdwCleaner and the Junkware Removal Tool as VistaKing suggested.

In addition, since there were ZeroAccess entries (RootKit) showing in the previous runs, having the results of the Farbar Recovery Scan Tool (with the Addition option), Farbar Service Scanner, and the MiniToolBox would be wise.You do not want any Rootkit leftovers.

We'll be ready when you post.

Ran the tools you suggested. Here's the log files.

View attachment FSS.txt

View attachment FRST.txt

View attachment Result.txt

View attachment tdsskillerlog.txt

View attachment JRT.txt

I do see the zero access inside FRST.txt log . The AdwCleaner[Sn].txt log

I ran adwcleaner, however, it didn't produce a log file afterwards. I can try running it again.

Pressing on with FRST...

:info: Open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the quote box below (Do not copy the word 'Quote')
Save it on the Desktop, and name it: fixlist.txt

start
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$8d6e451df1df7da1582cafd4e7bd6506\n. ATTENTION! ====> ZeroAccess?
HKLM\...\InprocServer32: [Default-cscui] <==== ATTENTION!
HKCR\...409d6c4515e9\InprocServer32: [Default-shell32] C:\$Recycle.Bin\S-1-5-21-3925031014-69785429-301285770-1000\$8d6e451df1df7da1582cafd4e7bd6506\n. ATTENTION! ====> ZeroAccess?
C:\Users\Nicholas\jagex_cl_loginapplet_LIVE.dat
C:\Users\Nicholas\jagex_cl_runescape_LIVE.dat
C:\Users\Nicholas\random.dat
End

Click to expand...

This script is written specifically for jkoll66, and, only for use on this infected computer.
Running this on another computer may cause damage to the Operating System!!

Run FRST, and press the Fix button, just once, and wait.

The tool creates a report on the Desktop called: Fixlog.txt

:ar: Please post the Fixlog.txt in your reply.

Duplicate post.

Here's the log file. Thanks.
View attachment Fixlog.txt

jkoll66,

My apology for the delay.

Please provide an update on whether you are still having malware problems.

Thanks!

My stepson hasn't reported any issues. Did the last log file show anything else? Someone mentioned "zero access" in an earlier post. Thanks.

The last fixlist of the FRST program should have taken care of the issue.

However, since no one program is all-inclusive, it is best to also use 'reinforcements'.

:info: Please download Malwarebytes : Malwarebytes Anti-Rootkit

Save to the Desktop (easy to find)
Right-click the file and select: Extract here...
Follow the Usage instructions on the website, but, for now, please stop at Step 6.

When the program is done, two reports are created in the mbar folder:
1. system-log.txt
2. mbar-log-2013-08-08 (20-13-32).txt (corresponds to mbar-log-year-month-day (hour-minute-second).txt)

If anything is detected and removed, please provide the mbar-log containing the information.

I ran Malwarebytes anti rootkit. It found no malware.

Looks like all is going well.

Next, let's remove the programs you no longer need...

:info: Remove any fixlist.txt from the Desktop.
Open Notepad (Start > All Programs > Accessories > Notepad)
Copy/paste all the contents of the quote box below to Notepad (do not copy the word 'Quote').
Save it on the Desktop as: fixlist.txt

start
DeleteQuarantine:
End

Click to expand...

Run FRST from the Desktop again, press the Fix button once.
When done, you can delete the FRST icon from the Desktop (if still there).


:info: Also, the following can be removed or uninstalled:
-Malwarebytes Anti-Rootkit
-RogueKiller
-Farbar Service Scanner
-MiniToolBox
-AdwCleaner (run the program and press: Uninstall)
-Junkware Removal Tool
-TDSSKiller
-ESET ServiceRepair
-HitmanPro.Kickstart (free 30 days trial)


:info: The following .bat or .reg files can be deleted (Use right-click > Delete):
-isvcfix.bat
-ActionCenterIcon.reg
-DNScache
-DHCP
-AFD
-TCPIP
-Nsi
-nsiproxy
-mpsdrv
-MpsSvc
-BFE


:info: Last, let’s check your Security status with the following...
Download Security Check:
http://screen317.spywareinfoforum.org/
Save to your Desktop.
Double-click: SecurityCheck.exe
Follow the onscreen instructions inside the black box.
When done, a Notepad report opens automatically, called: checkup.txt

:ar: Please post the checkup.txt in your reply.
(Please do not take any corrective actions!)