July 4, 2008 09:16pm pdt

1. KCTS 13,085
2. RobWill 13,080
3. Bamit99 11,450
4. from_exp 11,375
5. Chris-Dent 9,760
6. SysExpert 9,000
7. techno-wiz 8,600
8. omarfarid 8,300
9. donjohnston 6,800
10. johnb6767 6,664
11. oBdA 5,200
12. tigermatt 5,102
13. CrashDum... 5,000
14. uetian1707 4,850
15. 2PiFL 4,800

1. RobWill 175,321
2. stevenlewis 169,183
3. lrmoore 150,109
4. sirbounty 70,196
5. sciwriter 66,031
6. SysExpert 65,267
7. pseudocyber 55,832
8. PeteLong 40,870
9. Chris-Dent 33,085
10. KCTS 30,351
11. scrathcyboy 29,124
12. batry_boy 26,725
13. chicagoan 25,291
14. giltjr 24,658
15. leew 24,149

01.10.2008 at 03:57AM PST, ID: 23072172

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

8.0

DNS problem - I can ping IP but not name (including itself)

Zone: TCP/IP

Tags: ping, ip, name, can

I have 3 computers on same hub connected to DSL.
One XP others W2k (2k work fine). XP is up to date with updates.
I can share files use same printer(on XP), but XP cannot browse Internet (no server found)
In XP, Ping to any IP address (local, web) works but NOT to NAME - including itself.
ipconfig /all gives me all good info BUT netstat -a does not show Local addresses or Foreign adresses.
I swapped cables - problem is in XP.
No firewall installed and not enabled in XP. Problem ocurred after a bug attack (2 dll's) cleaned by antivirus.

I installed dig and I receive:

C:\dig>dig www.google.com 192.168.1.1 -t A +trace
net.c:62: socket() failed: The requested service provider could not be loaded or initialized.
dig: can't find either v4 or v6 networking

I checked ALL TCP config - all defaults in XP.

-------------------------------------------------------
On the one that works I get:
C:\dig>dig www.google.com 192.168.1.1 -t A +trace
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1501
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.google.com. IN A

;; ANSWER SECTION:
www.google.com. 602023 IN CNAME www.l.google.com.
www.l.google.com. 128 IN A 64.233.169.99
www.l.google.com. 128 IN A 64.233.169.147
www.l.google.com. 128 IN A 64.233.169.103
www.l.google.com. 128 IN A 64.233.169.104

;; Query time: 360 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Thu Jan 10 05:24:28 2008
;; MSG SIZE rcvd: 116

; <<>> DiG 9.3.2 <<>> www.google.com 192.168.1.1 -t A +trace
;; global options: printcmd
. 410865 IN NS D.ROOT-SERVERS.NET.
. 410865 IN NS E.ROOT-SERVERS.NET.
. 410865 IN NS F.ROOT-SERVERS.NET.
. 410865 IN NS G.ROOT-SERVERS.NET.
. 410865 IN NS H.ROOT-SERVERS.NET.
. 410865 IN NS I.ROOT-SERVERS.NET.
. 410865 IN NS J.ROOT-SERVERS.NET.
. 410865 IN NS K.ROOT-SERVERS.NET.
. 410865 IN NS L.ROOT-SERVERS.NET.
. 410865 IN NS M.ROOT-SERVERS.NET.
. 410865 IN NS A.ROOT-SERVERS.NET.
. 410865 IN NS B.ROOT-SERVERS.NET.
. 410865 IN NS C.ROOT-SERVERS.NET.
;; Received 436 bytes from 192.168.1.1#53(192.168.1.1) in 220 ms

. 86400 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISI
GN-GRS.COM. 2008010901 1800 900 604800 86400
;; Received 104 bytes from 128.8.10.90#53(D.ROOT-SERVERS.NET) in 110 ms

Very interesting tool but I cannot get any result out of it....any help?

PS:
ping to any IP address (local, web) works but NOT to NAME - including itself.
ipconfig /all gives me all good info BUT netstat -a does not show Local addresses or foreign adresses:

Active Connections

Proto Local Address Foreign Address State
TCP LISTENING
TCP LISTENING
TCP LISTENING
TCP LISTENING
TCP LISTENING
TCP LISTENING
TCP ESTABLISHED
UDP *:*
UDP *:*
UDP *:*
UDP *:*
UDP *:*
UDP *:*
UDP *:*
UDP *:*

The ESTABLISHED is a share connection with one of the W2k.

Start your free trial to view this solution

Question Stats

Zone: Networking

Question Asked By: dpexperts

Solution Provided By: MrHusy

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

01.10.2008 at 04:04AM PST, ID: 20626504

MrHusy:

Hi dpexperts
Is the preferred DNS server specified in TCP/IP properties working at another client? Pleasae post the output of ipconfig /all from this computer and from a computer that can browse internet.
Also make sure that proxy setting of the computer is sae with the client that works (no proxy should be defined in most cases, in internet explorer settings>connection)
You dont need 3rd party tools for name queries. You can use nslookup. Just type nslookup in cmd then type the web.
Also running the following tool may work http://www.snapfiles.com/get/winsockxpfix.html

Regards

Accepted Solution

01.10.2008 at 06:00AM PST, ID: 20627112

_jesper_:

nslookup does not provide diagnostics which is why dig is preferred.

knowing that this was an infected machine tells me that you need to repair the system files or reinstall.

01.10.2008 at 12:19PM PST, ID: 20630724

dpexperts:

I was about to leave an answer but WinsockxpFix FIXED the problem. I still leave the answer for proof.
Thanks MrHusy ! You deserve more points than the max I could give you.
I went through TCPIP param registry before, but I did not notice the following (changed made by WinsockxpFix):

1.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ServicesNetBT\Parameters\Interfaces\Tcpip{....}
for all NetbiosOptions = 0 (from 1 - one of 4 val was 1)
this is unexpected - everywhere I read was advised to enable netbios over TCP
In TCP params gui (WINS) - Netbios is at default (enablle LMHOSTS and default Netbios-now and b4)
2.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ServicesNetBT\Parameters
EnableLMHOST value - deleted
3.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{..}
TCPAllowedPorts =0; UDPAllowedPorts=0; from 1
(unfortunately I looked under patameters only not interfaces - but I RESETED theTCPIP Filter!!! It should have done it --> MicrX$Xft )
4. Deleted:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\
DontAddDefaultGatewayDefault=0
EnableICMPRedirect=0
EnableSecurityFilters
SearchList
UseDomainNameDevolution
5. Added:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock\Setup Migration\Providers\NetBIOS\
WinSock 2.0 Provider ID
6. Enabled WinSock2:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\
@0..01==> \Enabled from 0 to 1
@ 0..04 ==> \ LibraryPath: changed from PrxerNsp.dll to nwprovau.dll and a few others
@0..05 ==> moved data to 0..04 and deleted this key

FILES CHANGES:
put windows hosts default - this was no problem)
Last but not least:
added C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf 718k
does anybody know what this is?????

THANK YOU AGAIN , GUYS AND HAPPY NEW YEAR !

----------------
jesper:
Which files should I repair (update) ?

MrHusy:
DNS is default in all PC (all PC are at defaults) i.e. Obtain DNS auto. I even enabled filter and desabled it to reset it ....No proxy enabled.

nslookup gives same on any PC, but kind of same for any crap address:

C:\>nslookup www.google.com
Server: dslrouter
Address: 192.168.1.1
Non-authoritative answer:
Name: www.google.com.westell.com
Addresses: 66.150.2.134, 8.15.7.117, 66.150.2.134, 63.251.179.13

C:\>nslookup www.g$$gles.net
Server: dslrouter
Address: 192.168.1.1
Non-authoritative answer:
Name: www.g$$gles.net.westell.com
Addresses: 63.251.179.13, 66.150.2.134, 8.15.7.117, 66.150.2.134

BAD PC:
C:\>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : inv
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : myhome.westell.com
Description . . . . . . . . . . . : NVIDIA nForce MCP Networking Controller
Physical Address. . . . . . . . . : 00-0C-6E-E5-64-CC
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.46
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1
192.168.1.1
Lease Obtained. . . . . . . . . . : Thursday, January 10, 2008 1:53:30 PM
Lease Expires . . . . . . . . . . : Friday, January 11, 2008 1:53:30 PM

GOOD PC:
C:\>ipconfig /all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : inv2
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : myhome.westell.com

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : myhome.westell.com
Description . . . . . . . . . . . : Xircom Cardbus Ethernet 100 + Modem
56 (Ethernet Interface)
Physical Address. . . . . . . . . : 00-10-A4-F7-61-EF
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.44
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1
192.168.1.1
Lease Obtained. . . . . . . . . . : Thursday, January 10, 2008 1:28:07 P
M
Lease Expires . . . . . . . . . . : Friday, January 11, 2008 1:28:07 PM

dpexperts

01.10.2008 at 01:58PM PST, ID: 20631746

PS:
Regarding file: nwprovau.dll
checked with http://www.virustotal.com
FileAdvisor 1 2008.01.10 No threat detected, but known vulnerabilities exist
I wonder what vulnerabilities ?
No other antivirus objected..

file NTOSBOOT-B00DFAAD.pf OK

20080236-EE-VQP-29 / EE_QW_2_20070628