Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

IP Address hijacked?


  • This topic is locked This topic is locked

#1
upc1

upc1

    New Member

  • Member
  • Pip
  • 2 posts
My pc running XP home will only reg a "169.254.x" IP address. I tried everything, including all permutations of ipconfig, winsockfix.exe, reformatting the drive (both quick, and full) and installing XP again from scratch. My ISP (Verizon) told me to reload the drivers for my ethernet card. I uninstalled the card in the device manager, and then ran a detect new hardware. It found the card immediately, but then loaded drivers on its own, rather than allow me to choose them manually. Is it possible that even after loading XP again, something is lurking that is causing the card to only go to 169.254? There is another hard drive in the tower, but it is only for storage, and all system-related stuff is on the C drive. Right now I've hooked-up my dsl modem the slow way, via usb, but i need to get back on the ethernet card for work. This is mind-boggling, especially since I have no idea about these things, only what I've learned in the last 24 hrs from Verizon and Dell.

What next? Should i disconnect all power to everything, including the PC? Yank the ethernet card? Re-install XP? Yank the storage drive? Really, this is beyond my tech level of comfort.

Here is my Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 6:45:33 PM, on 4/6/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\devldr32.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\GORDON JOHNSON\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1112826554417
O17 - HKLM\System\CCS\Services\Tcpip\..\{52DBC8CB-A0D1-4473-B993-FBD0946ED1D7}: NameServer = 151.203.0.84 151.203.0.85
O23 - Service: Hardware Clock Driver (hwclock) - Unknown owner - C:\WINDOWS\System32\hwclock.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe




ANYTHING ANYONE CAN RECCOMMEND IS MUCH APPRECIATED!
  • 0

Advertisements


#2
upc1

upc1

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Here is my updated hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 8:23:46 PM, on 4/6/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\GORDON JOHNSON\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1112826554417
O17 - HKLM\System\CCS\Services\Tcpip\..\{52DBC8CB-A0D1-4473-B993-FBD0946ED1D7}: NameServer = 151.203.0.84 151.203.0.85
O23 - Service: Hardware Clock Driver (hwclock) - Unknown owner - C:\WINDOWS\System32\hwclock.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

  • 0

#3
zywex

zywex

    Member

  • Member
  • PipPip
  • 49 posts
as far as the hijack log goes; im not sure. but as far as verizon goes i would be curious as to what modem we gave you and what state you're in. since you may be suposed to be pulling a 169.254 until other criteria are met.
  • 0

#4
Guest_thatman_*

Guest_thatman_*
  • Guest
Hi

If you are still in need of help post a new HJT.log

Kc :tazz:
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP