Can't access internet over LAN after deleting virus infected file,2kPro

[mscir]

I have 2 computers on a wired network with DSL. One can access the
internet and one can't. The computer that can't connect downloaded a
file with a virus, AVG caught it, the file was deleted, and the internet
conn. never worked after that. The downloaded file was a game and had
nothing to do with the Win2kPro OS.



I tried creating a new Connection, uninstalling and reinstalling TCP/IP,
but so far nothing works.

Any suggestions on how I could diagnose this?

TIA,
Mike

This is what ipconfig /all shows for the computer that can't connect:

Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : Mission1
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapter
Physical Address. . . . . . . . . : 00-05-5D-4D-B5-A8
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IP Address. . . : 169.254.141.110
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . :

This is what ipconfig /all shows for the computer that can connect:

Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : mission2
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Kingston EtherRx KNE111TX PCI Fast
Ethernet Adapter
Physical Address. . . . . . . . . : 00-C0-F0-75-4D-A7
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.105
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
206.13.28.12
68.94.156.1
Lease Obtained. . . . . . . . . . : Friday, January 13, 2006 7:56:32 PM
Lease Expires . . . . . . . . . . : Saturday, January 14, 2006 7:56:32 PM

 

[Pegasus \(MVP\)]

I have 2 computers on a wired network with DSL. One can access the
internet and one can't. The computer that can't connect downloaded a
file with a virus, AVG caught it, the file was deleted, and the internet
conn. never worked after that. The downloaded file was a game and had
nothing to do with the Win2kPro OS.



I tried creating a new Connection, uninstalling and reinstalling TCP/IP,
but so far nothing works.

Any suggestions on how I could diagnose this?

TIA,
Mike

This is what ipconfig /all shows for the computer that can't connect:

Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : Mission1
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapter
Physical Address. . . . . . . . . : 00-05-5D-4D-B5-A8
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IP Address. . . : 169.254.141.110
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . :

This is what ipconfig /all shows for the computer that can connect:

Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : mission2
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Kingston EtherRx KNE111TX PCI Fast
Ethernet Adapter
Physical Address. . . . . . . . . : 00-C0-F0-75-4D-A7
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.105
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
206.13.28.12
68.94.156.1
Lease Obtained. . . . . . . . . . : Friday, January 13, 2006 7:56:32 PM
Lease Expires . . . . . . . . . . : Saturday, January 14, 2006 7:56:32 PM

Your problem PC is no longer getting an IP address from
your DHCP server. I don't know why but you can easily
walk around the problem by setting the following values manually:

IP Address. . . . . . . . . . . . : 192.168.0.115
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
206.13.28.12
68.94.156.1

If you run many PCs then you may have to tell your DHCP
server to remove the above fixed address from its pool of
addresses.

 

[mscir]

Pegasus (MVP) wrote:
....

Your problem PC is no longer getting an IP address from
your DHCP server. I don't know why but you can easily
walk around the problem by setting the following values manually:

IP Address. . . . . . . . . . . . : 192.168.0.115
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
206.13.28.12
68.94.156.1

If you run many PCs then you may have to tell your DHCP
server to remove the above fixed address from its pool of
addresses.

I've been trying entering values similar to what you suggested with no
luck so far. I entered the values you suggested and still can't connect.
I can ping 127.0.0.1 or 192.168.0.1 but not yahoo.com.

I don't know how to enter the DHCP Server IP Address.
And I get a warning because there is an empty primary WINS address.

How would you suggest I proceed?

Thanks,
Mike

Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : Mission1
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapter
Physical Address. . . . . . . . . : 00-05-5D-4D-B5-A8
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.115
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
68.94.156.1
206.13.28.12

 

[Pegasus \(MVP\)]

Pegasus (MVP) wrote:
...

I've been trying entering values similar to what you suggested with no
luck so far. I entered the values you suggested and still can't connect.
I can ping 127.0.0.1 or 192.168.0.1 but not yahoo.com.

I don't know how to enter the DHCP Server IP Address.
And I get a warning because there is an empty primary WINS address.

How would you suggest I proceed?

Thanks,
Mike

Windows 2000 IP Configuration
Host Name . . . . . . . . . . . . : Mission1
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapter
Physical Address. . . . . . . . . : 00-05-5D-4D-B5-A8
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.115
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 206.13.31.12
68.94.156.1
206.13.28.12

You may have a problem with your DSN. Try reaching Yahoo
by IP address rather than by name, both from a Command Prompt
and from your browser.

ping 66.94.230.75
Browser address: http://66.94.230.75 (instead of www.yahoo.com)

You must also disable your PC-based firewall while you perform your tests.

 

[John Wunderlich]

I have 2 computers on a wired network with DSL. One can access the
internet and one can't. The computer that can't connect downloaded
a file with a virus, AVG caught it, the file was deleted, and the
internet conn. never worked after that. The downloaded file was a
game and had nothing to do with the Win2kPro OS.

For your situation, freeware LSPFix might work:
"Repairs Winsock 2 settings, caused by buggy or improperly-removed
Internet software, that result in loss of Internet access"

<http://www.cexx.org/lspfix.htm>

HTH,
John

 

[mscir]

You may have a problem with your DSN. Try reaching Yahoo
by IP address rather than by name, both from a Command Prompt
and from your browser.

ping 66.94.230.75
Browser address: http://66.94.230.75 (instead of www.yahoo.com)

You must also disable your PC-based firewall while you perform your tests.

I uninstalled the Firewall a while back, didn't want any complications.

I can ping 66.94.230.75 from the command prompt

Pinging 66.94.230.75 with 32 bytes of data:
Reply from 66.94.230.75: bytes=32 time=37ms TTL=54
Reply from 66.94.230.75: bytes=32 time=79ms TTL=54
Reply from 66.94.230.75: bytes=32 time=167ms TTL=54
Reply from 66.94.230.75: bytes=32 time=14ms TTL=55

Ping statistics for 66.94.230.75:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 14ms, Maximum = 167ms, Average = 74ms

When I try to access either of these, I get the dnserror page in IE:
http://www.yahoo.com
http://66.94.230.75

The browser is set to automatically detect the LAN Connection Settings.

I'm looking forward to your next message, thanks very much!
Mike

 

[mscir]

For your situation, freeware LSPFix might work:
"Repairs Winsock 2 settings, caused by buggy or improperly-removed
Internet software, that result in loss of Internet access"

<http://www.cexx.org/lspfix.htm>

HTH,
John

John,

Good Call!

I ran the lspfix and it showed that I had some new.net garbage
installed. Possibly the infected file that the virus scanner found and
deleted had a chance to change the Windows settings before it was
deleted! After uninstalling new.net using the control panel internet
access was back!

Thanks Very Much to both you and Pegasus for all of your help!
Mike

 

[Pegasus \(MVP\)]

tests.

I uninstalled the Firewall a while back, didn't want any complications.

I can ping 66.94.230.75 from the command prompt

Pinging 66.94.230.75 with 32 bytes of data:
Reply from 66.94.230.75: bytes=32 time=37ms TTL=54
Reply from 66.94.230.75: bytes=32 time=79ms TTL=54
Reply from 66.94.230.75: bytes=32 time=167ms TTL=54
Reply from 66.94.230.75: bytes=32 time=14ms TTL=55

Ping statistics for 66.94.230.75:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 14ms, Maximum = 167ms, Average = 74ms

When I try to access either of these, I get the dnserror page in IE:
http://www.yahoo.com
http://66.94.230.75

The browser is set to automatically detect the LAN Connection Settings.

I'm looking forward to your next message, thanks very much!
Mike

I'm rapidly running out of ideas. Here are a few thoughts
before I admit defeat:

- There is something wrong with your DNS. If the problem PC's
DNS setting is the same as the DNS setting of a working PC
then I would expect ping.exe to work both with names and
with IP addresses - yet you write that it only works with
IP addresses.

- Since you can ping IP addresses, I would expect IE to work
with addresses such as http://66.94.230.75. It certainly does
for me - when I click this link then I get Yahoo. You report
that it does not work for you - why?

- I suspect that you have something that blocks access to
web sites (port 80). You can test this with the following
command:
telnet 66.94.230.75 80
I suspect that you will get no response. If so then you may
have a second firewall, on top of the one you uninstalled.

At this stage you may have to resort to installing a network
sniffer such as Ethereal, to see what's really going on.

You might also consider changing virus scanners. If you
currently use the free version of AVG then the money spent
on a commercial virus scanner might be well spent.

 

[John Wunderlich]

John,

Good Call!

I ran the lspfix and it showed that I had some new.net garbage
installed. Possibly the infected file that the virus scanner found
and deleted had a chance to change the Windows settings before it
was deleted! After uninstalling new.net using the control panel
internet access was back!

Thanks Very Much to both you and Pegasus for all of your help!
Mike

Thanks for the feedback. I'm glad your back to normal.
-- John