Solved

Windows XP-Cannot obtain IP address after spyware removal

Posted on 2004-09-09
28
31,723 Views
Last Modified: 2013-11-09
I have a Linksys wireless router, and a desktop networked to it that has worked great for years.  I tried a new trial version of a spyware removal program (Aluria Spyware Eliminator).  It removed a copule things (I don't remember what), but I didn't like the program so I removed it.  Now, I cannot connect to my network.
The networ status just say's "Aquiring Network Address", and it never gets one.  It eventually assigns some random IP address.  Any thoughts what could be happening?  I have lost all network connectivity and can't get it back.  I have another computer on the network which works fine, so my router is unchanged.  The network uses DHCP, and NOTHING has changed since it worked 2 days ago...  Please help!  I'm desparate!  Thanks.

The network is:
Linksys Wireless Router BEFW11S4
Wireless Adapter: DLink DWL-650  Thinking maybe my wireless adapter was broken, I bought Linksys WUSB11, same problem with both.
0
Comment
Question by:BudALite
28 Comments
 
LVL 4

Expert Comment

by:gusdarino
ID: 12017253
The problem is most likely a corrupt driver or tcp/ip stack.

Make sure you have the drivers for the NIC and your windows CD.
Uninstall the NIC drivers and remove all the network components.
Reboot your system and reinstall all of the above.  

If this does not work please specify the OS in use and what Service Packs you have installed.

Gus
0
 
LVL 49

Accepted Solution

by:
sunray_2003 earned 500 total points
ID: 12017260
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 12017267
How to reset Internet Protocol (TCP/IP) in Windows XP
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q299357&

SR
0
 

Author Comment

by:BudALite
ID: 12017302
The Linksys network adapter I just purchased this morning hoping that would fix the problem.  So that is brand new installed today.  I even got on the phone with Linksys and they tried to help but couldn't, said something must be going on with my computer itself.  Any other thoughts?  I am using Windows XP SP2.  Firewall is off (interestingly, it won't even let me turn it on.  May just be because my connection isn't there).
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12017331
what is the random IP address it assigns?  if it is between 196.254.0.0 and 169.254.255.254, then it is getting a APIPA address which means that it can't reach the DHCP server (your router in this case)   I would give the PC a static address of 196.168.1.111 (an address within the linksys DHCP scope) and then see if you can ping your router,,, your routers address is probably 196.168.1.1.
0
 

Author Comment

by:BudALite
ID: 12017336
SR-  I went to the command prompt and typed: netsh int ip reset c:\resetlog.txt
It say's 'netsh' is not recognizes as an internal or external command.  Am I doing something wrong?
0
 

Author Comment

by:BudALite
ID: 12017351
It assigned 169.254.177.252  For some reason command prompt won't recognize ping command either...
0
 
LVL 4

Expert Comment

by:gusdarino
ID: 12017358
As you suspected, the SP2 Firewall is not on because you don't have network connectivity.  You need to make sure the network card drivers are installed properly.  If the NIC drivers are installed properly then you need to remove and reinstall the TCP/IP components.  You can use the information provided by sunray_2003 to do this if you don't know how.

Gus
0
 
LVL 4

Expert Comment

by:gusdarino
ID: 12017377
If the ping command is not recognized then you may have a TCP/IP Stack issue as previously stated.  

Gus
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 12017379
what happends when you do ipconfig -all ?  if it tells you an IP address,,, that usually indicates that the TCP/IP stack is ok
0
 
LVL 8

Expert Comment

by:anil_u
ID: 12017434
A long shot, but I had this problem, seemed to be an issue with Mcaffee Security Center, in the end to resolve it,  had to uninstall this application.
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 12017475
BudALite,

Try to get that winsock tool using ne connection from a different machine and run it in the machine that has issues
0
 

Author Comment

by:BudALite
ID: 12017481
SR- Your http://www.spychecker.com/program/winsockxpfix.html did it!  Thank you!  Now however, the conection couldn't possible be any slower.  Any thoughts why?  It used to fly, but now although I have connection, it is dog slow!
0
 
LVL 1

Expert Comment

by:litomd
ID: 12017483
If you cannot change firewall setting then you could be loggin in with a non-Administrator user. Try starting windows in safe mode (pressing F8 when booting and chossing safe mode in the start menu), then go to control panel - network connections - your connection (the one with the linksys adapter). I would use a static address, to see what address you can use go to the other computer and in a command prompt type IPCONFIG and use the same parameters for all but the IP address which should change only in the las number (the last octect) add one there. For DNS servers type IPCONFIG /All and check. Restart the machine in normal mode and try again.
Finally, check the wireless configuration, check the channel being used if security is turned on, if network id is the same, etc., this is done different from vendor to vendor, but you should check for a wireless manager or similar program included with the software of the card.
Hope this helps.
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 49

Expert Comment

by:sunray_2003
ID: 12017506
BudALite,

regarding connection , it depends on your setup i mean router etc. Try a wired connection (connect ethernet cable from router to computer) and see if that would help in speed .

if you had installed windows xp SP2 lately , you are sure might have slow connection
0
 
LVL 3

Expert Comment

by:frieked
ID: 12017525
Wow, seems like tcp/ip isn't even there... try this:
To Reinstall TCP/IP do the following:

Navigate to: C:\windows\inf
Find the File: nettcpip.inf
Right click the file and choose install
With regard to the speed of the command, it is instantaneous, that is why it will almost seem like it did nothing at all
0
 

Author Comment

by:BudALite
ID: 12017616
What do you mean about the SP2 install?
This is terrible, about 2 mins to paint a page.
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 12017669
BudALite,

Did you install Service pack 2 in windows xp lately ? slow speed of internet could be because of that or if you have not installed then check wired connection from router and see what happens
0
 

Author Comment

by:BudALite
ID: 12017674
Seems like it snapped out of it.  Working good again.  Thanks!
Pts go to SR, as he ultimately send the link to the program that fixed it, but thank you ALL for your help very much!  Well worth the 500.
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 12017745
Thanks Budalite...
0
 

Expert Comment

by:William_Cacho
ID: 12173151
I'm having almost the same problem on a pc.  It is able to send packets but cannot receive.  I've tried Spycheecker Winsockfix but it doesn't work on this machine.  It worked on 3 other machines but not this one.  The differences between this machine and the others is that the other 3 were Dells and this one is a generic.  Also it seems as if thou the generic has boot from network card enabled.  Even if the computer is turned off the activity light on my cable modem still flashes.  Any other suggestions?  I have tried a new network card, reinstalled Windows and nothing works.
0
 

Author Comment

by:BudALite
ID: 12178919
If you have reinstalled windows an installed a new network card, and this computer still can not get on the internet but your other computers can, my guess would be that your router is not allowing this computer on the network.  Have you tried to plug the computer directly into the cable modem yet?  That would help determine if it is a problem with the router or PC.
0
 

Expert Comment

by:William_Cacho
ID: 12183799
Yes I have the modem plugged directly into the network card at this time.
0
 

Expert Comment

by:gerpaqit
ID: 12207508
had something similar a while back... i did not have time to fix it so i did a system restore to 2 days previous and it sorted it out.   the spyware software i had used had removed some of "limewire"..this is when the problem began.  i did the system restore and removed limesire ising add remove progs.....hope this helps...
0
 

Expert Comment

by:mmizzell
ID: 12209793
reset ip/tcp stack
0
 

Expert Comment

by:afalkov
ID: 12223004
I run into the same problem.  Some one already suggested to reinstall TCP/IP.  I only want to add.  Before reinstalling it, delete winsock and winsock2 from registery, reboot computer then reinstall TCP/IP.  There is an knowledge base article on this subject.
0
 

Expert Comment

by:astragalix
ID: 12252253
Hi.  I had the same problem and it turned out to be a hardward problem with the linksys router.  Try the following:

a) open the webpage config for your router (192.168.1.1, probably), and do a software reset;

b) stick a paperclip into the reset switch until the "diag" light lights up AND goes off again; turn off all the computers and reboot.

(if this doesn't work, then consider)

c) buy a new router (which is what i ended up doing, everything worked fine after that.



0
 

Expert Comment

by:ssgbuck
ID: 12825284
I believe there is a much deeper issue at work here, something we have not yet discovered from the world of spyware/malware. I manage a major help desk for a large corporation and have seen this issue a handful of times. I have at my disposal all of the tools listed here and then some. In the every case, the same Brand and Model NIC did not solve the issue, but a different model NIC did???? More questions arose when the old NICs were tested and found to be in good working order. In one case 2 weeks after the new NIC was installed the problem reoccurred after running the usual Spyware removal tools. The PC was then reimaged and now works fine. (For the moment) Some piece of spyware has to be hooking into the XP OS in a place we have not yet looked.

My question: Can the MAC Address be compromised in anyway that would cause a PC to lose its LAN connectivity?

Theory: Spyware is hooking into the MAC settings somewhere in the Registry and causing XP to ignore the NIC that is installed. (Thus the inability to change the firewall setting) This also explains why a new NIC of a different brand with a different MAC solves the problem.

Any ideas?
0

Featured Post

Give your grad a cloud of their own!

With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

Join & Write a Comment

Suggested Solutions

I recently purchased a Bluetooth headset called the Music Jogger (model BSH10). The control buttons on it look like this: One of my goals is to use it as the microphone and speakers for Skype calls. In that respect, it works well. However, I …
Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now