[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

After malware removal Windows XP machine can not resolve DNS name's from network.  Can resolve IP fine.

Posted on 2011-05-05
10
Medium Priority
?
481 Views
Last Modified: 2012-08-13
So I removed a pretty bad case of malware on an employees machine the other day.  Two employees to be exact.  I used combofix, malwarebytes, spybot sd, and advanced system care 4.  After the removal everything seemed fine and I was pleased to see the performance dramatically increased.  However,  a few days later both of these employees were having trouble printing.  I went into their printers and saw that under each printer that is located on a server it said "unable to connect".  I tried connecting via tcpip port and they printed fine.  I started to dig more and reallized that the computer was unable to resolve any dns names, only the ip address.  For one of the machines I did a repair install and that worked fine but took a while.  I know I can fix this problem without a repair install though and would like you guys to help me get to the bottom of it.  I have ran lspfix.exe, netsh winsock reset, sfc /scannow and advanced system care again with no luck.  Any suggestions?  Is there a service or something I should be looking at?
0
Comment
Question by:danielwebb
  • 8
10 Comments
 
LVL 8

Expert Comment

by:steinmto
ID: 35701462
Did you check the host file under c:\windows\system32\hosts?  It sounds like something got left.  Did you check the dns servers?  Also try this

http://support.microsoft.com/kb/299357
0
 

Author Comment

by:danielwebb
ID: 35701493
what should i be looking for in the host files?

Another note, I can ping the server name through the command prompt which seems odd to me.
0
 

Author Comment

by:danielwebb
ID: 35701502
under the system32 folder i don't see a hosts subfolder.  The closest thing I see is a hostname.exe file
0
Transaction-level recovery for Oracle database

Veeam Explore for Oracle delivers low RTOs and RPOs with agentless transaction log backup and transaction-level recovery of Oracle databases. You can restore the database to a precise point in time, even to a specific transaction.

 

Author Comment

by:danielwebb
ID: 35701542
ok found the host file.  The only text in it is "127.0.0.1      local host".  Is this normal?
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 35701547
C:\Windows\System32\Drivers\etc

Then there's a text file call Hosts (it has no extension, so you'll have to choose Notepad to open it).

Chris
0
 

Author Comment

by:danielwebb
ID: 35701637
yeah I opened it and there was only that one line in my previous post but that looks normal.
0
 

Author Comment

by:danielwebb
ID: 35701764
another note....  when i try to remote desktop into it, it will connect to the machine and open up a remote desktop window but it just sits there with a blue background and never actually loads the logon prompt.  It eventually times out and gives an error which I am currently waiting on.
0
 

Author Comment

by:danielwebb
ID: 35702031
when i try and go run -->  \\servername it says "no network provider can access the given path"
0
 

Accepted Solution

by:
danielwebb earned 0 total points
ID: 35702363
posted by thur6165:

Check your dns settings if your running a local dns server.  Can you ping the computer by name and not just ip?  Also under the tcp/ip properties make sure there is no WINS configured and that NetBIOS over tcp/ip is enabled.  Services to check.  workstation, tcp/ip netbios helper, server.  Make sure they are started on both machines.  Also, have a look in the event viewer for any errors.  Last, reboot both machines.
0
 

Author Closing Comment

by:danielwebb
ID: 35726959
found this comment in another thread.  It ended up being the netbios helper service that was disabled.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will show how Aten was able to supply easy management and control for Artear's video walls and wide range display configurations of their newsroom.
This article will show you step-by-step instructions to build your own NTP CentOS server.  The network diagram shows the best practice to setup the NTP server farm for redundancy.  This article also serves as your NTP server documentation.
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question