[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 476
  • Last Modified:

Vista won't obtain an IP address after virus removal

After removing virus infections from a Vista PC, I can’t obtain an IP address nor can I set a static address that will ping anything, when I do an IPCONFIG I get 169.254.174.102.  I'm happy the infections have been removed, but I guess this is the damage that is left.  I think the infection may have installed a proxy that is now screwing this up.
0
grsg
Asked:
grsg
  • 5
  • 5
  • 3
  • +6
1 Solution
 
John HurstBusiness Consultant (Owner)Commented:
I suggest you try a TCP/IP Reset.

Open cmd.exe with Run as Administrator
Then  netsh int ip reset c:\resetlog.txt
Restart the computer

Try this and let us know.
0
 
Neil RussellTechnical Development LeadCommented:
Try the Microsoft FixMe for resetting the TCP/IP Stack.

http://support.microsoft.com/kb/299357
0
 
Sikhumbuzo NtsadaCommented:
I would re-install the network card drivers as well.
0
Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

 
John HurstBusiness Consultant (Owner)Commented:
If the network was working before, then a TCP/IP Reset should suffice. Please let us know.
0
 
jerseysamCommented:
netsh winsock reset

reboot PC.

Try again

If not, give manual IP to see if you can get connection.
0
 
Neil RussellTechnical Development LeadCommented:
When asking questions related to Virus removal and their effects it is always handy to at least mention what the viurs was and what method you used to remove it.
0
 
jerseysamCommented:
Check in Internet Options under connections and LAN settings there is no proxy set.

However, with a virus it could of changed many settings and so although the threat may have been removed there could be multiple issues still not "fixed".

Are you able to run a repair on Vista or maybe a reinstall to be sure?
0
 
grsgAuthor Commented:
Thanks for your replies.  I ran netsh int ip reset c:\resetlog.txt, rebooted and its not made any difference.
0
 
grsgAuthor Commented:
Have just run netsh winsock reset and no difference.  The infections were Iminent, Wajan, MySearchDial and Searchqu.  I ran Malware bytes and I created a boot disk with AdAware which finally removed them.  Have rebooted and rescanned and it's clear now.  No proxy server listed in LAN settings.  I'm hoping to avoid a reinstall if at all possible.
0
 
jerseysamCommented:
Is the machine wireless or wired?

If wireless then maybe give the wireless router a reboot and then try.

Uninstall network cards, reboot and reinstall and then try.

otherwise maybe a repair install or reinstall may be the safer and cleaner option in the end.
0
 
John HurstBusiness Consultant (Owner)Commented:
Viruses and attempts to clean out the viruses can wreck operating systems. If you have the Windows Vista CD (DVD) you can attempt a Repair Install as jerseysam noted above. Otherwise, you need to re-install Vista.

As Vista has been orphaned and abandoned, now is a good time to move to Windows 7 or beyond.
0
 
☠ MASQ ☠Commented:
You might also want to try a network services scanner like FSS

Download and run as Administrator, just check Internet Services and Windows Firewall then hit the  'Scan' button.
See if it reports and errors or missing/replaced files.
0
 
grsgAuthor Commented:
The machine has both a wired and wireless connection, at the moment I'm just using the wired.  Both are affected in the same way.  I've Just uninstalled the network card and reinstalled the driver and still can't get or assign an address.
0
 
John HurstBusiness Consultant (Owner)Commented:
There isn't much you can do short of Repair Install or format, fresh install. I really think any investment should be in a newer operating system.
0
 
DIIRECommented:
As a last resort before reinstalling Windows or upgrading I would try running Conbofix and a rootkit remover like Kaspersky TDSSKiller or McAfee Rootkit Remover.

Make sure you disable your antivirus before running them.

http://www.bleepingcomputer.com/download/combofix/

http://usa.kaspersky.com/downloads/TDSSKiller

http://www.mcafee.com/au/downloads/free-tools/rootkitremover.aspx

You should also run RKill to kill off any processes that may be running in the background before running the above.
0
 
grsgAuthor Commented:
I've run FSS and it reports, 'Attempt to access local IP returned error: Localhost is blocked: Destination is unreachable.  There is no connection to network. ' It also lists that it can't connect to Google.  I'll try Combofix etc and will report back shortly.
0
 
☠ MASQ ☠Commented:
You may already be using combofix by now but do you still have System Restore enabled?  If so can you load a point prior to the clean-up?
0
 
Natty GregIn Theory (IT)Commented:
OK, the other day I was presented with a laptop filled with viruses, I do not sleep well when people say they have remove the virus, but that's just me. So I always do a fresh install for a peace of mind. So I know everything is taken care of.

I'm just saying.
0
 
nobusCommented:
most virus scanners have a restore option - you can try that
or a system restore to a date it was working
then remove virus with caution!
0
 
grsgAuthor Commented:
Thanks to everyone who has commented, I have tried everything that's been suggested and still no network connection, so I'm forced to format and start again.  John has suggested a fresh install from the start, so awarding points to him.  Thanks
0
 
John HurstBusiness Consultant (Owner)Commented:
@grsg  - Thank you. I do understand the inconvenience of reinstalling, but I hope this will solve your problems.
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot has fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

  • 5
  • 5
  • 3
  • +6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now