Network Connection Problems

An external source hacked our Windows 2003 Server via ASP.NET account, installed Proxy Switcher and Proxy Finder. Upon running a malware scan, machine rebooted. Now, TCP/IP settings-->Network Connections details is null; however, TCP/IP properties are accessible and modifiable.

DHCP, DNS, SQL and many other services will NOT start, even manually. When we modify TCP/IP properties, Windows prompts that the server be rebooted upon saving changes (not protocol).

When attempting to repair local connection, receive error: "Windows could not finish repairing the problem because the following action cannot be completed: Failed to query TCP/IP settings of the connection. Cannot proceed."

When attempting to start local services (i.e. DHCP, DNS), receive error 1068.

We have attempted uninstalling the network driver and allowing the OS to auto detect the driver.
Bob VaalIT ManagerAsked:
Who is Participating?
 
Bob VaalIT ManagerAuthor Commented:
Ended up calling Microsoft Support - they walked us through many registry entries which allowed us to restore from tape.
0
 
acsevenCommented:
Hi,

You can try the following, in case you haven't already:

Check the event log for the services start attempts to check for dependencies failing to start automatically.
Run "sfc /scannow" on the command line just in case something is damaged
Check if you have all these services up and running:
Computer Browser
TCP/IP Netbios helper
Workstation
DHCP Client
DNS Client
Network Connections
Network Location Awareness
Remote Procedure Call (RPC)
Server
0
 
Bob VaalIT ManagerAuthor Commented:
Checked these services ans all are stopped and as I mentioned when attempting to start them, we get an error and the service won't start.
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
acsevenCommented:
Have you tried running "sfc /scannow"?
0
 
Bob VaalIT ManagerAuthor Commented:
Running sfc now. Will post results when finished.
0
 
acsevenCommented:
In the meantime, and in case you haven't had the change, check the event log for the error description on starting those services - looking for something related to the origin of the failure (failed dependencies for example).
0
 
Bob VaalIT ManagerAuthor Commented:
Self-Solved
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.