BleepingComputer.com: Windows XP - Internet works via IP Address only, no DNS

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Windows XP - Internet works via IP Address only, no DNS

#1 User is offline   mattbirk 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 89
  • Joined: 26-October 09
  • Gender:Male
  • Location:Belleville, IL

Posted 05 January 2012 - 06:30 PM

I have a Windows XP machine, and it will not connect to the LAN via ethernet. It gets a proper IP address from the router, and I can surf the web if I know the IP address, but DNS is not working. I have checked the HOSTS file, and it looks fine. I ran the winsock fix, that didn't solve it. I took the hard drive out and scanned it with Malware Bytes and that found 0 objects. Super Anti Spyware found 7 items, and TDSSKiller found 36 which were removed...

So what would be causing the DNS to not work? Any ideas...I have also reset IE. The proxy box is not checked under LAN settings...

thanks,
Matt

This post has been edited by hamluis: 12 January 2012 - 09:48 AM
Reason for edit: Moved from XP to Am I Infected.

#2 User is offline   noknojon 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 2,725
  • Joined: 13-March 10
  • Gender:Male
  • Location:Victoria Australia

Posted 05 January 2012 - 07:20 PM

Quote

TDSSKiller found 36 which were removed...

This may have been one of the reasons you were having problems.
Please download Farbar Service Scanner and run it on the computer with the issue.
•Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center

•Press "Scan".
•It will create a log (FSS.txt) in the same directory the tool is run.
•Please copy and paste the log to your reply.
XP SP3 Pro Desktop - Windows 7 SP1 Home Premium Toshiba Laptop - Malwarebytes - SUPERAntiSpyware - Microsoft Security Essentials -
HiJack This - SpeedFan - Cannon Printer - ATF Cleaner - TFC Cleaner - ORCA and Internet Explorer Browsers - Secunia PSI - And I Use GOOGLE -

#3 User is offline   mattbirk 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 89
  • Joined: 26-October 09
  • Gender:Male
  • Location:Belleville, IL

Posted 05 January 2012 - 07:51 PM

Thanks, the log is below:

Farbar Service Scanner
Ran by Clubb (administrator) on 05-01-2012 at 18:49:17
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll
[2001-09-08 10:52] - [2008-02-20 00:32] - 0045568 ____N (Microsoft Corporation) AAC8FFBFD61E784FA3BAC851D4A0BD5F

C:\WINDOWS\system32\ipnathlp.dll
[2001-09-08 10:53] - [2004-08-04 00:56] - 0331264 ____N (Microsoft Corporation) 36CC8C01B5E50163037BEF56CB96DEFF

C:\WINDOWS\system32\netman.dll
[2001-09-08 10:53] - [2005-08-22 12:29] - 0197632 ____N (Microsoft Corporation) 36739B39267914BA69AD0610A0299732

C:\WINDOWS\system32\wbem\WMIsvc.dll
[2001-09-08 11:03] - [2004-08-04 00:56] - 0144896 ____N (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

C:\WINDOWS\system32\srsvc.dll
[2001-09-08 11:04] - [2004-08-04 00:56] - 0170496 ____N (Microsoft Corporation) 92BDF74F12D6CBEC43C94D4B7F804838

C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll
[2007-01-26 22:32] - [2004-08-04 00:56] - 0081408 ____A (Microsoft Corporation) 4D59DAA66C60858CDF4F67A900F42D4A

C:\WINDOWS\system32\wbem\WMIsvc.dll
[2001-09-08 11:03] - [2004-08-04 00:56] - 0144896 ____N (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

C:\WINDOWS\system32\svchost.exe
[2001-09-08 10:53] - [2004-08-04 00:56] - 0014336 ____N (Microsoft Corporation) 8F078AE4ED187AAABC0A305146DE6716

C:\WINDOWS\system32\rpcss.dll
[2001-09-08 10:53] - [2009-02-09 04:20] - 0399360 ____N (Microsoft Corporation) 01095FEBF33BEEA00C2A0730B9B3EC28

C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)
0x0700000004000000010000000200000003000000050000000600000007000000
IpSec Tag value is correct.

**** End of log ****

#4 User is offline   noknojon 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 2,725
  • Joined: 13-March 10
  • Gender:Male
  • Location:Victoria Australia

Posted 05 January 2012 - 08:59 PM

We can try to reset / re register your internet settings -

Go Start > Run, type in:
cmd

Click OK .

In Command Prompt window, type in following commands, and hit Enter after each one:
Note the Gaps --

ipconfig /flushdns
ipconfig /registerdns
ipconfig /release
ipconfig /renew
net stop "dns client"
net start "dns client"
XP SP3 Pro Desktop - Windows 7 SP1 Home Premium Toshiba Laptop - Malwarebytes - SUPERAntiSpyware - Microsoft Security Essentials -
HiJack This - SpeedFan - Cannon Printer - ATF Cleaner - TFC Cleaner - ORCA and Internet Explorer Browsers - Secunia PSI - And I Use GOOGLE -

#5 User is offline   mattbirk 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 89
  • Joined: 26-October 09
  • Gender:Male
  • Location:Belleville, IL

Posted 11 January 2012 - 01:36 PM

Thanks for the help, tried that along with a bunch of other things...I'm just going to reformat it, it's old and has a lot of left behind garbage anyways.

Thanks for the help

#6 User is offline   Ryan0661 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 5
  • Joined: 11-January 12
  • Gender:Male
  • Location:california

Posted 12 January 2012 - 01:17 AM

before you do that it sounds like your DNS server provided by your Isp isnt pulling its own weight. You can try unplugging your modem and router for about 30 sec and then let it reconnect to the servers. If you still cant connect you may just want to connect to a free dns service like Open DNS, here are the primary and secondary servers 208.67.222.222 || 208.67.220.220

#7 User is offline   mattbirk 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 89
  • Joined: 26-October 09
  • Gender:Male
  • Location:Belleville, IL

Posted 12 January 2012 - 09:24 AM

It's not the DNS, there are quite a few machines hooked to the same connection and all work properly...I have tried changing it already, it's very odd. But it was heavily infected at one time, and now there are a lot of things that are just broken.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users