We help IT Professionals succeed at work.

All Network Adapters disabled-Yellow exclamation point

1,584 Views
Last Modified: 2013-11-17
Owner had heavily spyware infected PC.
Had him run Malwarebytes, SuperAntivirus, ATF cleaner.
Removed all infections.
Also did something to the Network adapters.
All have yellow exclamation points with Error Code (39).
The Broadcom 440x NIC, Wireless NIC, Infrared Port and all theWAN Miniports are affected.
I've done the whole uninstall, etc and tried to reininstall drivers both from Acer and Broadcom.
No System  Restore Points.
I'm able to boot from my WinUBCD4 and access the network
No OS recovery CD.

Pete
Comment
Watch Question

CERTIFIED EXPERT

Commented:
From another machine running XP, get the file c:\windows\system32\drivers\ndis.sys

Copy the good ndis.sys file from that machine into the c:\windows\system32\drivers directory in your machine, overwriting the damaged ndis.sys file.

Good luck!

BitsBytesandMoreNetwork Operations Manager
Top Expert 2009

Commented:
Spyware removal often has as a result the crippling of Windows services and drivers.
By what you are describing.... it seems that not only the drivers were affected but some critical OS files as well.
Replacing the ndis.sys file as suggested above is a good idea although I'm not sure if doing this alone would solve the problem. You need to check if other files have been damaged as well.
From the command prompt type:
sfc /scannow (this will check all your critical OS files are there and not corrupted).
You might have your TCP/IP damaged as well. Again, from the command prompt type:
netsh int ip reset (this will rebuild your TCP/IP)
Hopefully you won't need to take other more invasive steps such as a "repair install" .... if it continues to fail.... let me know and I will send you a complete guide so you can avoid having to do a fresh install plus having to install all the applications as well.
Keep me posted...
Digital Services Advisor, SCM, ERP
CERTIFIED EXPERT
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
Closing time here.
Thanks for quick replies.
sfc /scannow didn't work.
Neither did the lsp/winsock fixes.
I'll try all suggestions again in AM again.
No OS CD so I can't do a repair/install.
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
>>   did something to the Network adapters  <<  what did you do?  how much adapters?

Commented:
nobus, I believe he means that the malware did something to his network adapters.

Author

Commented:
"nobus, I believe he means that the malware did something to his network adapters."

That's correct.
During the cleaning process, I noticed that I couldn't get updates from Malwarebytes..., etc.
After finishing all the ckeanups, I looked at the no connection problem and found  the yellow warnings.
At that point, I tried uninstalling and reinstalling with local and downloaded drivers.

Am about to try "Combofix" and copying the drivers from another machine.

Also, I don't have a restore CD. I'll try that with a CD of my own Windows XP which sometimes works.

Will post back shortly.

Pete

Author

Commented:
And all the adapters have the warnings, including the WAN Miniports.
CERTIFIED EXPERT

Commented:
Have you tried replacing the ndis.sys file from a known good machine?  This is a file which, if damaged by malware, would yield the results you're getting.  If that's the problem, then once you've replaced this file, you may be able then to reinstall the drivers for your network hardware.

CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
i would go to the manufacturer site of the mobo, and update the drivers from there first
CERTIFIED EXPERT
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
BitsBytesandMoreNetwork Operations Manager
Top Expert 2009
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
Tried all above and NG except that "ndis.sys" is missing.
Replaced missing "ndis.sys" from a good XP.
PC BSOD'ed as soon as I copied file.
Booted to safe mode and was able to copy file.
Rebooted to a "reboot loop" with BSOD flash.
OK to boot to Safe Mode, drivers installed, no yellow!!!
Boot normal, keeps rebooting.
Boot to "Safe Mode with Networking" goes to reboot loop.
Can only boot to safe mode.
With Automatically Reboot unchecked, get a 0x0000007E screen.

Now what?
Shoot as BSOD with 0x7e problem..
Pete

Author

Commented:
Would do a "Repair/Installation", have done many before, but no OS CD.
Haven't tried it, but can I use one of my original Windows XP installation CD's. Seems to me I caused a activation problem when I tried that before.

Pete

Commented:
No, you can cause serious issues if you don't use an install disk with the same SP level.

Author

Commented:
I should have said that SP3 is installed on the affectedPC  and my XP OS disk has SP3 slipstreamed on it.
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
I didn't have the owner's recovery CD's when I got the PC. Just got them this PM.
Checked the disks and they're Acer Recovery.
I agree that full install is probably best route since I can access  the data.
Will check with owner and get back and close.
Everyone gets points and a big thanks.

Pete
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
can you post the BSOD ?   rename it to ***.txt and attach here

here's how to do the repair install, and what to look out for : http://www.michaelstevenstech.com/XPrepairinstall.htm      

Author

Commented:
Thanks for all the help.
As I noted, cleaned PC of malware before posting
Since I could run a CD mounted XP and connect to the internet, I assumed hardware, except HD, was OK.
As suggested by arixsin, was able to do a  full Recovery with the 7 CD's the owner had made. PC now up and running.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.