asked on

XP won't resolve DNS after virus removal

After removing viruses from an HP Pavilion running XP Home it cannot resolve DNS. I have run two different products to make sure the viruses are gone. The network connection is set to automatically obtain IP and DNS, IPCONFIG/all looks normal. I have even tried deleting the connection and recreating it. I also manually entered static DNS entreies of my ISP with no success.

I have run NetDiag which told me WINSOCK is OK, I have reset TCP/IP via NETSH. I have created a new account and it has the same problem the original accounts have which is I cannot get to websites or update software via domain name. I cannot ping via the domain name but can via a public IP address.

The network has other PC's and they all can use the internet, no server is invloved in this network.

carlsiy

try using ipconfig /release. then using ipconfig /renew.

mike_hale

Try running the following commands.

ipconfig /release
ipconfig /flushdns
ipconfig /renew
ipconfig /registerdns

Then try again.

If it doesn't work, run:
ipconfig /all

and paste the output here, please.

aperesc

Check if the firewall of your machine isn´t blocking DNS traffic.

baguthrie

You may have an issue with your IP stack. What you could do is uninstall the NIC drivers, reboot and then install the new NIC drivers again. Worth a shot at least.

Qlemo

If it was something like AntiSpy fake or Antivirus fake virus, you will have a rootkit (TDS or similar), which prevents DNS resolution. Like I told in https://www.experts-exchange.com/questions/24022544/Can-ping-router-can-ping-DNS-server-but-can't-access-internet.html?#23285987.

ITMuscle

i have seen a few cases that were exactly like yours, try removing the following windows update. KB 951748. if you are using ZA please go to this link to correct the issue.

http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

Bob Alvarez

ASKER

The IPCONFIG suggestions did not havea any effect on my problem. Here is the requested output incuding an IPCONFIG /all

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Stephanie.BASEMENTPC>ipconfig /renew

Windows IP Configuration

Comment: Ran a test after the /renew and it did not work.

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.0.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1

C:\Documents and Settings\Stephanie.BASEMENTPC>ipconfig /release

Windows IP Configuration

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 0.0.0.0
Subnet Mask . . . . . . . . . . . : 0.0.0.0
Default Gateway . . . . . . . . . :

C:\Documents and Settings\Stephanie.BASEMENTPC>ipconfig /flushdns

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

C:\Documents and Settings\Stephanie.BASEMENTPC>ipconfig /renew

Windows IP Configuration

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.0.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1

C:\Documents and Settings\Stephanie.BASEMENTPC>ipconfig /registerdns

Windows IP Configuration

Registration of the DNS resource records for all adapters of this computer has b
een initiated. Any errors will be reported in the Event Viewer in 15 minutes..

C:\Documents and Settings\Stephanie.BASEMENTPC>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : BasementPC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast Eth
ernet NIC
Physical Address. . . . . . . . . : 00-14-2A-A3-AA-19
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Lease Obtained. . . . . . . . . . : Saturday, January 10, 2009 11:19:42
AM
Lease Expires . . . . . . . . . . : Sunday, January 11, 2009 11:19:33 AM

Bob Alvarez

ASKER

Turned Windows Firewall Off and do not use Zone Alarm.

Used Spware Doctor w/Antivirus and Malwarebytes to remove and check for virues. I will check to make sure root toolkits were scanned. With no abilty to get navigate through websites i have not been able to try a third option of using an online scanner.

ASKER CERTIFIED SOLUTION

ITMuscle

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Bob Alvarez

ASKER

Removing KB951748 fixed the problem even though the PC does not use Zone Alarm.

http://support.microsoft.com/kb/951748
Thank you all for your help and suggestions.

Softjazze

I'm just a bit confused as to why your DNS entry under your ipconfig /all points to your default gateway if you dont have a server in your network.

MSwainLCC

Re: the question on why DNS points to the default gateway. Many ISP provided routers provide DNS services. For example, my DSL router from AT&T does this.