Our November Competition
 User Reviews - Add Yours!
The PCHF Lounge
Go Back   PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs
Reload this Page [Pending] WinXP Firewall "error: 1068"
Register for a Free Account

[Fixed] Hijackthis! Logs - [Pending] WinXP Firewall "error: 1068" posted in the Security & Safety forums; Hi, I know that if you google "error: 1068" you get alot of responses, but no straight answers. I get an error: 1068 when trying to enable Windows Firewall/Internet Connection ...


Reply
Recommended Driver Scanner
Old 03-14-2007   #1
Bronze Member
 
Join Date: Aug 2006
Posts: 7
Default [Pending] WinXP Firewall "error: 1068"
Hi,

I know that if you google "error: 1068" you get alot of responses, but no straight answers. I get an error: 1068 when trying to enable Windows Firewall/Internet Connection Sharing Service. I've checked the dependencies and found that two were not running, and I could not start them. These services are:

Remote Access Auto Connection Manager

Remote Access Connection Manager

When I tried to start these services I got "error: 5 Access Denied"

I tried a fix that suggested rebuilding the Winsock LSP chain:

netsh winsock reset

This didn't seem to do anything, but the article said you should be running SP2. I'm not sure that it was. Not my computer, and it's not here with me.

I recently removed alot of spyware from this machine. I read that alot of anti-spyware programs do not rebuild or replace LSPs (layered service providers) when they remove spyware. I don't know much about that.

Can anyone help?
ajcook is offline   Reply With Quote
Register for a Free PCHF account
Advertisement - Register to Remove
Old 03-15-2007   #2
Senior Security Analyst
 
chiaz's Avatar
 
Join Date: Jun 2006
Location: Singapore
Posts: 5,120
PC Experience: PC Guru
Default
Back up your TCP/IP Settings
If your system is not using DHCP to obtain a TCP/IP address, open network connections and record your TCP/IP information: IP Address, Netmask, Gateway, DNS Servers, domain prefixes.
    1. Start->Settings->Control Panel->Network Connections
    2. Right click on the Local Area Connection and select Properties.
    3. Double click on the Internet Protocol (TCP/IP) entry to open the properties dialog.
    4. Record the information in the Use the following IP Address section.
    5. Record the information in the Use the following DNS server addresses section.
    6. Click the Advanced button and then the DNS tab.
    7. Record the information (if any) in the Append these DNS suffixes section.
    8. You may need to record other information, but these are the critical ones.
  2. Let Winsock XP Fix back up your Registry
    1. Download the Winsock XP Fix utility from WinSock XP Fix - fix XP internet connectivity download, reviewed and rated from Spychecker.com -
      This utility will make a backup of parts of your Windows registry, reset your TCP/IP settings and replace your existing Winsock2 registry entries with a default set and replace your Hosts file with a default one.
    2. Launch the WinsockXPFix.exe
    3. On the Winsock and TCP Repair Utility screen, click ReG-Backup.
    4. On the Welcome screen, click OK.
    5. On the Backup to: screen, click OK.
    6. On the Folder does not exist question screen click Yes.
    7. You will see a status screen as your registry is being backed up.
    8. On the Registry backup is complete! screen, click OK.
  3. Reset the Winsock Stack
    1. On the Winsock and TCP Repair Utility screen, click Fix.
    2. On the Apply the VB_Winsock fix? screen click Yes.
    3. The Winsock and TCP Repair Utility screen will display a status message.
    4. On the Repair Completed screen click OK to re-boot your computer.
    5. If your computer was not using DHCP, you will need to re-configure TCP/IP.
__________________
I vouch only for my own advice. You may want to take others' with a pinch of salt. More if necessary.
chiaz is offline   Reply With Quote
Old 03-16-2007   #3
Bronze Member
 
Join Date: Aug 2006
Posts: 7
Default
I tried your suggestion. Everything completed without errors, but I still can't enable the firewall. Although, my error message changed a little. It doesn't say "error: 1068" anymore. It only says that a module dependency failed to start. Problably no difference, but I noticed that it changed.

I also ran a spybot scan and HJT log if you're interested in that...
ajcook is offline   Reply With Quote
Old 03-17-2007   #4
Senior Security Analyst
 
chiaz's Avatar
 
Join Date: Jun 2006
Location: Singapore
Posts: 5,120
PC Experience: PC Guru
Default
No problem, post the hjt log here.
__________________
I vouch only for my own advice. You may want to take others' with a pinch of salt. More if necessary.
chiaz is offline   Reply With Quote
Old 03-18-2007   #5
Bronze Member
 
Join Date: Aug 2006
Posts: 7
Default
Logfile of HijackThis v1.99.1
Scan saved at 11:20:34 AM, on 3/15/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Tommy\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = HughesNet Portal
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {965A592F-8EFA-4250-8630-7960230792F1} - (no file)
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 www.google.td
O1 - Hosts: 66.180.173.39 Google
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [winsync] C:\WINDOWS\System32\wpwacy.exe reg_run
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Dell Home - {C318DA20-C42B-11D3-9656-50AF4EC100A6} - Find a Notebook, Desktop, Server, Printer, Software, Service, Monitor or TV at Dell. (file missing) (HKCU)
O12 - Plugin for .bat: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .pif: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .wav: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O16 - DPF: {47CD99DF-8BCF-4B9B-94EF-02E51B2F79DA} - http://www.alwaysupdatednews.com/install/aun_0035.exe
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/085c6555...p/RdxIE601.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1168932401873
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1168974031694
O16 - DPF: {75830EBF-3274-48D0-8878-15049168B3CD} - http://install.spywarelabs.com/landi...apperouter.EXE
O16 - DPF: {EC51659D-721F-4CBF-9CEA-5E776D89CEA9} - http://www.pacimedia.com/install/pcs_0006.exe
O20 - Winlogon Notify: Guardian - C:\WINDOWS\system32\msg118.dll
O21 - SSODL: NTDBGTOOL - {D7C8E957-D26A-460E-A17A-1A8B8A27D290} - C:\WINDOWS\System32\h323srad.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\System32\ScsiAccess.EXE
O23 - Service: Winkai - Unknown owner - C:\WINDOWS\System32\Winkai.exe (file missing)
O23 - Service: Winkdn - Unknown owner - C:\WINDOWS\System32\Winkdn.exe (file missing)
O23 - Service: Winksh - Unknown owner - C:\WINDOWS\System32\Winksh.exe (file missing)

I ran a spybot scan before this because HJT kept shutting down. Spybot fixed 97 problems, and HJT ran fine after that. I deleted the hosts file to get rid of all the redirects. I'm still not able to turn on the firewall.
ajcook is offline   Reply With Quote
Old 03-18-2007   #6
Senior Security Analyst
 
chiaz's Avatar
 
Join Date: Jun 2006
Location: Singapore
Posts: 5,120
PC Experience: PC Guru
Default
Hmm...I see quite a lot we can fix.


Please download Qoofix by RubbeR DuckY from http://www.malwarebytes.org/Qoofix.zip
  1. Unzip all files to a convenient location such as C:\Qoofix.
  2. Go to the folder you unzipped all files and run Qoofix.exe.
  3. Click Begin Removal and wait for the scan to finish.
  4. If an infection has been found, select yes to restart your computer.


Upon reboot, please run HijackThis and place a checkmark by the following entries if they still exist:
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {965A592F-8EFA-4250-8630-7960230792F1} - (no file)
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 Google
O1 - Hosts: 66.180.173.39 www.google.td
O1 - Hosts: 66.180.173.39 Google
O4 - HKLM\..\Run: [winsync] C:\WINDOWS\System32\wpwacy.exe reg_run
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Dell Home - {C318DA20-C42B-11D3-9656-50AF4EC100A6} - Find a Notebook, Desktop, Server, Printer, Software, Service, Monitor or TV at Dell. (file missing) (HKCU)
O16 - DPF: {75830EBF-3274-48D0-8878-15049168B3CD} - http://install.spywarelabs.com/landi...apperouter.EXE
O16 - DPF: {EC51659D-721F-4CBF-9CEA-5E776D89CEA9} - http://www.pacimedia.com/install/pcs_0006.exe
O20 - Winlogon Notify: Guardian - C:\WINDOWS\system32\msg118.dll
O21 - SSODL: NTDBGTOOL - {D7C8E957-D26A-460E-A17A-1A8B8A27D290} - C:\WINDOWS\System32\h323srad.dll
O23 - Service: Winkai - Unknown owner - C:\WINDOWS\System32\Winkai.exe (file missing)
O23 - Service: Winkdn - Unknown owner - C:\WINDOWS\System32\Winkdn.exe (file missing)
O23 - Service: Winksh - Unknown owner - C:\WINDOWS\System32\Winksh.exe (file missing)

Close all other windows except HijackThis and press "Fix Checked". Then close HijackThis and restart the computer.


Now rescan with HijackThis and post the new log in your next reply.
__________________
I vouch only for my own advice. You may want to take others' with a pinch of salt. More if necessary.
chiaz is offline   Reply With Quote

Reply

Bookmarks

Tags
error 1068, firewall, pending, winxp

« [Resolved] virus | [Pending] Removing a TROJAN Virus (Troj_GenericADV) »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On


Site Map - Top

All times are GMT. The time now is 07:56 AM.
Powered by vBulletin
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2