RE: renew IP fails after system restore

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



I advise you to run a Full scan with malwarebytes.

registry cleaner
http://www.malwarebytes.org/malwarenet.php?name=Rogue.RegSweep

Then download this tool and run it.
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Download this WinsockFix and execute it:
http://www.nasstec.co.uk/downloads/winsockfix.exe

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting or you can send it to me on my email
provided at the bottom:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)

Can you please send me a copy at to_you_rossREMOVETHISCAPS@xxxxxxxxxxx
,remove the obvious to email me.


"Aqueous" wrote:

resetting winsock did not help, but thanks for the suggestion.

got this from malwarebytes scan, perhaps you can help me interpret it- to my
inexpert eye nothing here would explain the problems, they seem old and
benign, but would you advise i remove these items anyway?

i realize you said to do a complete scan, but this is a quick one as a first
pass. would you still advise a complete scan? I would do that overnight if
so. in the meantime i am still looking for solutions...

Malwarebytes' Anti-Malware 1.36
Database version: 1945
Windows 5.1.2600 Service Pack 2

4/12/2009 6:38:00 AM
mbam-log-2009-04-12 (06-37-50).txt

Scan type: Quick Scan
Objects scanned: 97976
Time elapsed: 39 minute(s), 44 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 5
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify
(Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Folders Infected:
C:\Program Files\RegSweep (Rogue.RegSweep) -> No action taken.
C:\Program Files\RegSweep\Microsoft.VC80.MFC (Rogue.RegSweep) -> No action
taken.
C:\Documents and Settings\HP_Owner\Application Data\RegSweep
(Rogue.RegSweep) -> No action taken.
C:\Documents and Settings\HP_Owner\Application Data\RegSweep\Log
(Rogue.RegSweep) -> No action taken.
C:\Documents and Settings\HP_Owner\Application Data\RegSweep\Registry
Backups (Rogue.RegSweep) -> No action taken.

Files Infected:
C:\Documents and Settings\HP_Owner\Application Data\RegSweep\Log\2007 Aug 22
- 08_37_56 AM_921.log (Rogue.RegSweep) -> No action taken.
C:\Documents and Settings\HP_Owner\Application Data\RegSweep\Log\2007 Aug 22
- 08_38_12 AM_562.log (Rogue.RegSweep) -> No action taken.
C:\Documents and Settings\HP_Owner\Application Data\RegSweep\Registry
Backups\2007-08-21_18-38-47.reg (Rogue.RegSweep) -> No action taken.
C:\WINDOWS\Tasks\RegSweep Scheduled Scan.job (Rogue.RegSweep) -> No action
taken.


"nass" wrote:



Try to make NIS allow the network/Ethernet connection by opening the NIS
firewall and assign the connection as trusted.

Open a run command and type these commands:
ipconfig /flushdns click [OK]
ipconfig /renew click [OK]
netsh winsock reset click [OK]
Reboot your system. Does it help.

Download this software on USB stick or CD and install it, run a complete scan.
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Let us know your progress.

Also. as per "Bob" instructions, can you provide us the Ipconfig /all output
if the above didn't help.

"Aqueous" wrote:

Thank you nass,
the properties were originally as you described them, but at suggestion of
Bob i changed to static IP, which resulted in the broken icon disappearing
but still limited or no connection. I just did as you suggested and switched
back to DHCP, which returned the broken sign. I returned to the static IP and
broken sign disappeared.
I attempted to re-install software from ISP, which switched settings to DHCP
but failed to find connection and offers no further tips. broken sign is
back.

i know the connection is good as i can plug the ethernet into my mac and it
works.
I await further thoughts.


"nass" wrote:



"Aqueous" wrote:

I cannot renew my IP address, i cannot get a default gateway or DNS server. I
have broadband, ethernet from the cable modem, which works fine on the mac i
hooked it to so i can write this. The IP is in range of 169.254.xxx. I
think that is not what it is supposed to be?
Background: XP crashed with a bad kernel32, gdi32 driver, and maybe others
after running chkdsk for routine maintenance. This is an OEM machine but i
got a set of system restore disks from HP and ran standard system restore
which brought back data files and allowed XP to boot. I uninstalled Norton
2005 which is what showed up after the restore, and installed NIS2009,
plugged in the ethernet, and tried to run live update when i found no
internet connection. I dont see how any files could already be corrupted as
this is supposed to be like a new install. but something is wrong. I am
trying to get help from HP but perhaps someone here has insight.
I need help getting to the Internet so I can download updates etc, and maybe
find out the source of the whole problem if there was something got past
NIS...

Adding to Bob good advice, you said a restore disks. I will take it as
Destructive Restore procedure.

what you are getting now is Automatic Private IP Addressing (APIPA) , it
means you don't have connection set up or the PC doesn't talk to the Modem.

So, you need to set up the Broadband or treat it as a new installation , by
installing the software and follow the wizard. Also if your ISP given you the
setting like User name/Password...etc.

But can you do this before trying the set up wizard. Right click the LAN
connection and select Properties, select TCP/IP inertnet protocol and click
on the properties button.

Under general Tab make sure the check Radio button for the following is
checked:

(*) Obtain an IP address automatically


(*) Obtain DNS server address automatically.

Then Click on Alternate Configuration Tab and make sure this Radio button
checked:
(*) Automatic private IP address

Click [OK] and reboot your machine.

Do you get a connection.



.

Relevant Pages

  • RE: renew IP fails after system restore
    ... Full scan with malwarebytes produced no new entities. ... Then download this tool and run it. ... Registry Keys Infected: 0 ... Try to make NIS allow the network/Ethernet connection by opening the NIS ...
    (microsoft.public.windowsxp.network_web)
  • Re: Lag Problems after receiving new zone files
    ... I did a registry restoration previously, and went back to the day before ... > Programs, Accessories, and there's a CMD icon (iirc.. ... > use System Restore to go back to a date before the download. ...
    (microsoft.public.games.zone)
  • Re: Creating New User Accounts without carrying over any old progr
    ... To edit the registry, first create a new restore point with System ... Next download regseeker and start it. ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: renew IP fails after system restore
    ... Registry Values Infected: 0 ... Try to make NIS allow the network/Ethernet connection by opening the NIS ... Download this software on USB stick or CD and install it, ... got a set of system restore disks from HP and ran standard system restore ...
    (microsoft.public.windowsxp.network_web)
  • RE: renew IP fails after system restore
    ... Then download this tool and run it. ... Registry Keys Infected: 0 ... Try to make NIS allow the network/Ethernet connection by opening the NIS ... got a set of system restore disks from HP and ran standard system restore ...
    (microsoft.public.windowsxp.network_web)