Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows XP - Internet works via IP Address only, no DNS


  • Please log in to reply
6 replies to this topic

#1 mattbirk

mattbirk

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, IL
  • Local time:07:10 AM

Posted 05 January 2012 - 06:30 PM

I have a Windows XP machine, and it will not connect to the LAN via ethernet. It gets a proper IP address from the router, and I can surf the web if I know the IP address, but DNS is not working. I have checked the HOSTS file, and it looks fine. I ran the winsock fix, that didn't solve it. I took the hard drive out and scanned it with Malware Bytes and that found 0 objects. Super Anti Spyware found 7 items, and TDSSKiller found 36 which were removed...

So what would be causing the DNS to not work? Any ideas...I have also reset IE. The proxy box is not checked under LAN settings...

thanks,
Matt

Edited by hamluis, 12 January 2012 - 09:48 AM.
Moved from XP to Am I Infected.


BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:10:10 PM

Posted 05 January 2012 - 07:20 PM

TDSSKiller found 36 which were removed...

This may have been one of the reasons you were having problems.
Please download Farbar Service Scanner and run it on the computer with the issue.
•Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
•Press "Scan".
•It will create a log (FSS.txt) in the same directory the tool is run.
•Please copy and paste the log to your reply.

#3 mattbirk

mattbirk
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, IL
  • Local time:07:10 AM

Posted 05 January 2012 - 07:51 PM

Thanks, the log is below:

Farbar Service Scanner
Ran by Clubb (administrator) on 05-01-2012 at 18:49:17
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Yahoo IP is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll
[2001-09-08 10:52] - [2008-02-20 00:32] - 0045568 ____N (Microsoft Corporation) AAC8FFBFD61E784FA3BAC851D4A0BD5F

C:\WINDOWS\system32\ipnathlp.dll
[2001-09-08 10:53] - [2004-08-04 00:56] - 0331264 ____N (Microsoft Corporation) 36CC8C01B5E50163037BEF56CB96DEFF

C:\WINDOWS\system32\netman.dll
[2001-09-08 10:53] - [2005-08-22 12:29] - 0197632 ____N (Microsoft Corporation) 36739B39267914BA69AD0610A0299732

C:\WINDOWS\system32\wbem\WMIsvc.dll
[2001-09-08 11:03] - [2004-08-04 00:56] - 0144896 ____N (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

C:\WINDOWS\system32\srsvc.dll
[2001-09-08 11:04] - [2004-08-04 00:56] - 0170496 ____N (Microsoft Corporation) 92BDF74F12D6CBEC43C94D4B7F804838

C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll
[2007-01-26 22:32] - [2004-08-04 00:56] - 0081408 ____A (Microsoft Corporation) 4D59DAA66C60858CDF4F67A900F42D4A

C:\WINDOWS\system32\wbem\WMIsvc.dll
[2001-09-08 11:03] - [2004-08-04 00:56] - 0144896 ____N (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

C:\WINDOWS\system32\svchost.exe
[2001-09-08 10:53] - [2004-08-04 00:56] - 0014336 ____N (Microsoft Corporation) 8F078AE4ED187AAABC0A305146DE6716

C:\WINDOWS\system32\rpcss.dll
[2001-09-08 10:53] - [2009-02-09 04:20] - 0399360 ____N (Microsoft Corporation) 01095FEBF33BEEA00C2A0730B9B3EC28

C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)
0x0700000004000000010000000200000003000000050000000600000007000000
IpSec Tag value is correct.

**** End of log ****

#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:10:10 PM

Posted 05 January 2012 - 08:59 PM

We can try to reset / re register your internet settings -

Go Start > Run, type in:
cmd

Click OK .

In Command Prompt window, type in following commands, and hit Enter after each one:
Note the Gaps --

ipconfig /flushdns
ipconfig /registerdns
ipconfig /release
ipconfig /renew
net stop "dns client"
net start "dns client"


#5 mattbirk

mattbirk
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, IL
  • Local time:07:10 AM

Posted 11 January 2012 - 01:36 PM

Thanks for the help, tried that along with a bunch of other things...I'm just going to reformat it, it's old and has a lot of left behind garbage anyways.

Thanks for the help

#6 Ryan0661

Ryan0661

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:california
  • Local time:04:10 AM

Posted 12 January 2012 - 01:17 AM

before you do that it sounds like your DNS server provided by your Isp isnt pulling its own weight. You can try unplugging your modem and router for about 30 sec and then let it reconnect to the servers. If you still cant connect you may just want to connect to a free dns service like Open DNS, here are the primary and secondary servers 208.67.222.222 || 208.67.220.220

#7 mattbirk

mattbirk
  • Topic Starter

  • Members
  • 104 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, IL
  • Local time:07:10 AM

Posted 12 January 2012 - 09:24 AM

It's not the DNS, there are quite a few machines hooked to the same connection and all work properly...I have tried changing it already, it's very odd. But it was heavily infected at one time, and now there are a lot of things that are just broken.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users