XP computer won't load resolve dns
Posted on 2006-05-23
I have an XP sp2 box which has lost the ability to hit the internet.
A staff member at one of our libraries was on the 'Net, got a malicious software warning from Norton 2006 and has since not been able to load web pages.
I first tried uninstalling/reinstalling the network card. That produced nothing as one of the symtoms was/is the inability of the NIC to pick up TCP info via DHCP (I verified the dhcp client service was running and tried ipconfig /release - ipconfig /renew). I then tried hard coding the tcp information, and was able to establish a network connection that allowed me to ping other machines on the subnet, even other subnets in the buliding, but can't get out.
I get a server not found error when I try to load pages, or run updates. I ran pings to websites on other machines in the building, then tried hitting the websites via ip address...no luck.
I ran winsockfix, hijackthis, trojan remover, spybot search and destroy. Hijack this had a reference to "Broken Internet access because of LSP provider 'c:\windows\system32\lspcs.dll' missing. I had Hijackthis repair it, and tried to find that file on my computer to replace it on the bad computer, but it apparently does not exist on mine (???). Trojan remover found nothing, and Spybot found 5 DSO exploits which I have been unable to fix...I know that involves the 1004 value, but can't remember what else.
I can ping my dsn servers, which are on a different internal subnet, but when I do, I get a beep, and the message prior to the actual ping replies inserts two ascii characters...what looks like a superscript o followed by a y with two dots over it.
I can't ping anything outside the building.
There is an entry on this site with what appears to be an identical issue, which is where I got the winsockfix idea, as well as MaxNegativeTtl and MaxTtl DWord entries to the HKLocal Machine\System\CurrentControlSet\DNSCache|Parameters key, but that didn't work either.
Any other ideas?