Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Lost ability to connect to domain after virus removal


  • This topic is locked This topic is locked
16 replies to this topic

#1 blzbuh

blzbuh

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 12 October 2011 - 12:15 PM

Hello folks,

I was able to revive my computer after a fake anti virus malware infection followed by a nt_authority shutdown loop but now have lost connection to my local network domain.

I have searched for possible fixes and none have worked.

My computer network id and change options are greyed out under the computer name option.

I tried starting the workstation service and it states it is unable to run because of server specific error 2205.

I have also tried cleaning the registry and a chkdsk /r in the recovery console and still cannot seem to reconnect.

Thank you for any help.

Bryan

BC AdBot (Login to Remove)

 


#2 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:12:36 AM

Posted 12 October 2011 - 11:29 PM

Click Start.

In the search bar type devmgmt.msc and hit Enter.

Click the + next to the pane Network Adapters so it expands, showing all installed hardware.

Take a screenshot of this window and attach the file in your next post.

If you have no internet connection on the problem PC, transferring the screenshot via flashdrive or CD to a working computer is possible. If this is not practical for you, a detailed listing of the requested information will suffice, along with reports of any ! ? or X's next to the entries.

-------------------------------------------------------------------------------

Also, what makes you sure the PC is clean?

If you have any suspicion of infection, start a thread in the "Am I Infected? What do I do?" forum.

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#3 blzbuh

blzbuh
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 13 October 2011 - 01:05 PM

Thank you Shooter

Here's the screenshot


I cant tell if it's attaching or not. Do you see it?

Attached Files


Edited by blzbuh, 13 October 2011 - 01:15 PM.


#4 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:12:36 AM

Posted 13 October 2011 - 01:09 PM

Thank you Shooter

Here's the screenshot

I don't see the attached screenshot. :blink:

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#5 blzbuh

blzbuh
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 13 October 2011 - 01:16 PM

Had the attach script blocked :/


Thank you Shooter

Here's the screenshot

I don't see the attached screenshot. :blink:



#6 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:12:36 AM

Posted 13 October 2011 - 01:41 PM

Are you able to connect using Safe Mode With Networking?

How to Access Safe Mode With Networking

While the computer is turning on, tap F8 repeatedly until a black screen with white text appears. Using your arrow keys highlight the option Safe Mode With Networking and hit Enter.

Note: If you're using Windows XP, connect to your modem or router with an Ethernet cable, then follow these directions.

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#7 blzbuh

blzbuh
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 13 October 2011 - 01:48 PM

Same symptoms in Safe Mode with Networking.

#8 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:12:36 AM

Posted 13 October 2011 - 01:58 PM

TCP/IP stack repair options for use with Windows XP with SP2/SP3

Start, Run, CMD to open a command prompt:

In the command prompt window that opens, type the following commands, each followed by the Enter key:

Note: Type only the text in bold for the following commands.

Reset TCP/IP stack to installation defaults, type: netsh int ip reset reset.log

Reset WINSOCK entries to installation defaults, type: netsh winsock reset catalog

Reboot the machine.

Edited by TheShooter93, 13 October 2011 - 01:58 PM.

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#9 blzbuh

blzbuh
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 13 October 2011 - 02:14 PM

OK done.

#10 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:12:36 AM

Posted 13 October 2011 - 02:35 PM

Do you have internet access?

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#11 blzbuh

blzbuh
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 13 October 2011 - 02:37 PM

Yes, I do. My problem is connecting to the domain my computer was on before the infection.

#12 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:12:36 AM

Posted 13 October 2011 - 02:42 PM

The domain your computer was on?

Are you referring to a specific website?

Can you post a screenshot of the specific problem?

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#13 blzbuh

blzbuh
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 13 October 2011 - 02:55 PM

Yes, as explained above, my local network domain. I lost connection to all of my shared folders and printers on the network.

It seems my computer just wont even look for it.

Attached Files



#14 TheShooter93

TheShooter93

    Cody


  • Malware Response Team
  • 4,792 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Orlando, Florida
  • Local time:12:36 AM

Posted 13 October 2011 - 03:05 PM

I obviously misunderstood, sorry about that.

Anyway, here are my further instructions (unless you're absolutely sure your computer is clean):

With the information you have provided I believe you will need help from the malware removal team. I would like you to start a new thread HERE and include a link to this thread.

Please make sure that you read the information about getting started before you start your thread.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.

CCNA R&SCCNA Security | Network+  |  B.S. - Information Technology | Cyber Security Engineer

If I am helping you and have not replied within 48 hours, please send me a private message.

 

 


#15 blzbuh

blzbuh
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 13 October 2011 - 03:12 PM

Hello folks,

I was able to revive my computer after a fake anti virus malware infection followed by a nt_authority shutdown loop but now have lost connection to my local network domain.

I have searched for possible fixes and none have worked.

My computer network id and change options are greyed out under the computer name option.

I tried starting the workstation service and it states it is unable to run because of server specific error 2205.

I have also tried cleaning the registry and a chkdsk /r in the recovery console and still cannot seem to reconnect.

To be clear, I am able to connect to the internet.

Thank you for any help.

Bryan

Edited by Orange Blossom, 13 October 2011 - 09:44 PM.
Merged topics. ~ OB





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users