Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

My pc has no internet access

Started by CatBee , May 09 2014 04:08 PM

  • Please log in to reply

#61
RKinner
Posted 14 May 2014 - 09:26 AM

RKinner

    Malware Expert

  • Expert
  • 24,711 posts
  • MVP

go in to regedit and see if the two keys exist.  If they do then right click and export

 

Also try

 

net start tcpip

 

in an elevated command prompt.

 


Please attach the exported .reg files.

 

Go to Control Panel, Windows Firewall.  It should look something like this:

 

[attachment=70545:firewall2.jpg]

 

See if

 

(in an Elevated Command Prompt)

net  start  NlaSvc   

Says:

  The requested service has already been started.  

More help is available by typing NET HELPMSG 2182.   

 

same for:

net  start  MpsSvc

  • 0

Advertisements

#62
CatBee
Posted 14 May 2014 - 10:22 AM

CatBee

    Member

  • Topic Starter
  • Member
  • PipPip
  • 65 posts

How do i attach the .reg files. ?

 

I had my windows firewall off actually since using Combofix But now its on now with recommended settings and it looks exactly like that picture just only Public Network is Connected and Home or Work networks not connected.

 

and i get the same message for both: Net start NlaSvc and Net start MpsSvc


  • 0

#63
RKinner
Posted 14 May 2014 - 11:08 AM

RKinner

    Malware Expert

  • Expert
  • 24,711 posts
  • MVP

Probably have to either rename them from .reg to .txt or zip them up using 7-zip.


  • 0

#64
CatBee
Posted 14 May 2014 - 12:08 PM

CatBee

    Member

  • Topic Starter
  • Member
  • PipPip
  • 65 posts

This?

 

 

Windows Registry Editor Version 5.00

 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TCPIP]
"NextInstance"=dword:00000001
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TCPIP\0000]
"Service"="Tcpip"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000400
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="@%SystemRoot%\\system32\\tcpipcfg.dll,-50003"
"Capabilities"=dword:00000000
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TCPIP\0000\Control]
"ActiveService"="Tcpip"

 

and:

 

 

Windows Registry Editor Version 5.00

 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip]
"BootFlags"=dword:00000001
"DisplayName"="@%SystemRoot%\\system32\\tcpipcfg.dll,-50003"
"Group"="PNP_TDI"
"ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
  72,00,69,00,76,00,65,00,72,00,73,00,5c,00,74,00,63,00,70,00,69,00,70,00,2e,\
  00,73,00,79,00,73,00,00,00
"ErrorControl"=dword:00000001
"Start"=dword:00000000
"Tag"=dword:00000003
"Type"=dword:00000001
"NdisMajorVersion"=dword:00000006
"NdisMinorVersion"=dword:00000014
"Description"="@%SystemRoot%\\system32\\tcpipcfg.dll,-50003"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Linkage]
"Bind"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,7b,00,35,00,46,\
  00,31,00,35,00,34,00,46,00,38,00,44,00,2d,00,32,00,42,00,33,00,37,00,2d,00,\
  34,00,43,00,30,00,35,00,2d,00,38,00,37,00,41,00,33,00,2d,00,43,00,39,00,46,\
  00,39,00,41,00,32,00,43,00,36,00,43,00,33,00,45,00,46,00,7d,00,00,00,5c,00,\
  44,00,65,00,76,00,69,00,63,00,65,00,5c,00,7b,00,44,00,38,00,35,00,41,00,46,\
  00,35,00,34,00,33,00,2d,00,37,00,33,00,38,00,32,00,2d,00,34,00,45,00,34,00,\
  35,00,2d,00,41,00,42,00,42,00,39,00,2d,00,42,00,30,00,34,00,35,00,37,00,42,\
  00,33,00,42,00,31,00,30,00,36,00,32,00,7d,00,00,00,5c,00,44,00,65,00,76,00,\
  69,00,63,00,65,00,5c,00,7b,00,43,00,35,00,44,00,41,00,30,00,36,00,34,00,41,\
  00,2d,00,38,00,42,00,39,00,42,00,2d,00,34,00,46,00,31,00,39,00,2d,00,42,00,\
  46,00,30,00,36,00,2d,00,43,00,31,00,44,00,33,00,30,00,41,00,30,00,41,00,31,\
  00,42,00,45,00,34,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,\
  5c,00,7b,00,30,00,35,00,41,00,43,00,46,00,38,00,30,00,32,00,2d,00,33,00,38,\
  00,38,00,37,00,2d,00,34,00,46,00,33,00,42,00,2d,00,39,00,38,00,43,00,42,00,\
  2d,00,34,00,32,00,39,00,44,00,38,00,41,00,39,00,46,00,34,00,45,00,37,00,38,\
  00,7d,00,00,00,00,00
"Route"=hex(7):22,00,7b,00,35,00,46,00,31,00,35,00,34,00,46,00,38,00,44,00,2d,\
  00,32,00,42,00,33,00,37,00,2d,00,34,00,43,00,30,00,35,00,2d,00,38,00,37,00,\
  41,00,33,00,2d,00,43,00,39,00,46,00,39,00,41,00,32,00,43,00,36,00,43,00,33,\
  00,45,00,46,00,7d,00,22,00,00,00,22,00,7b,00,44,00,38,00,35,00,41,00,46,00,\
  35,00,34,00,33,00,2d,00,37,00,33,00,38,00,32,00,2d,00,34,00,45,00,34,00,35,\
  00,2d,00,41,00,42,00,42,00,39,00,2d,00,42,00,30,00,34,00,35,00,37,00,42,00,\
  33,00,42,00,31,00,30,00,36,00,32,00,7d,00,22,00,00,00,22,00,7b,00,43,00,35,\
  00,44,00,41,00,30,00,36,00,34,00,41,00,2d,00,38,00,42,00,39,00,42,00,2d,00,\
  34,00,46,00,31,00,39,00,2d,00,42,00,46,00,30,00,36,00,2d,00,43,00,31,00,44,\
  00,33,00,30,00,41,00,30,00,41,00,31,00,42,00,45,00,34,00,7d,00,22,00,00,00,\
  22,00,7b,00,30,00,35,00,41,00,43,00,46,00,38,00,30,00,32,00,2d,00,33,00,38,\
  00,38,00,37,00,2d,00,34,00,46,00,33,00,42,00,2d,00,39,00,38,00,43,00,42,00,\
  2d,00,34,00,32,00,39,00,44,00,38,00,41,00,39,00,46,00,34,00,45,00,37,00,38,\
  00,7d,00,22,00,00,00,00,00
"Export"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,\
  00,69,00,70,00,5f,00,7b,00,35,00,46,00,31,00,35,00,34,00,46,00,38,00,44,00,\
  2d,00,32,00,42,00,33,00,37,00,2d,00,34,00,43,00,30,00,35,00,2d,00,38,00,37,\
  00,41,00,33,00,2d,00,43,00,39,00,46,00,39,00,41,00,32,00,43,00,36,00,43,00,\
  33,00,45,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,\
  00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,44,00,38,00,35,00,41,00,46,00,\
  35,00,34,00,33,00,2d,00,37,00,33,00,38,00,32,00,2d,00,34,00,45,00,34,00,35,\
  00,2d,00,41,00,42,00,42,00,39,00,2d,00,42,00,30,00,34,00,35,00,37,00,42,00,\
  33,00,42,00,31,00,30,00,36,00,32,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,\
  00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,43,00,35,00,\
  44,00,41,00,30,00,36,00,34,00,41,00,2d,00,38,00,42,00,39,00,42,00,2d,00,34,\
  00,46,00,31,00,39,00,2d,00,42,00,46,00,30,00,36,00,2d,00,43,00,31,00,44,00,\
  33,00,30,00,41,00,30,00,41,00,31,00,42,00,45,00,34,00,7d,00,00,00,5c,00,44,\
  00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,5f,00,\
  7b,00,30,00,35,00,41,00,43,00,46,00,38,00,30,00,32,00,2d,00,33,00,38,00,38,\
  00,37,00,2d,00,34,00,46,00,33,00,42,00,2d,00,39,00,38,00,43,00,42,00,2d,00,\
  34,00,32,00,39,00,44,00,38,00,41,00,39,00,46,00,34,00,45,00,37,00,38,00,7d,\
  00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters]
"ICSDomain"="mshome.net"
"SyncDomainWithMembership"=dword:00000001
"NV Hostname"="hpsusyrobin"
"DataBasePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  64,00,72,00,69,00,76,00,65,00,72,00,73,00,5c,00,65,00,74,00,63,00,00,00
"ForwardBroadcasts"=dword:00000000
"Domain"=""
"Hostname"="hpsusyrobin"
"SearchList"=""
"UseDomainNameDevolution"=dword:00000001
"DeadGWDetectDefault"=dword:00000001
"DontAddDefaultGatewayDefault"=dword:00000000
"EnableWsd"=dword:00000001
"QualifyingDestinationThreshold"=dword:00000003
"EnableIPAutoConfigurationLimits"=dword:00000001
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Adapters]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Adapters\{05ACF802-3887-4F3B-98CB-429D8A9F4E78}]
"LLInterface"=""
"IpConfig"=hex(7):54,00,63,00,70,00,69,00,70,00,5c,00,50,00,61,00,72,00,61,00,\
  6d,00,65,00,74,00,65,00,72,00,73,00,5c,00,49,00,6e,00,74,00,65,00,72,00,66,\
  00,61,00,63,00,65,00,73,00,5c,00,7b,00,30,00,35,00,41,00,43,00,46,00,38,00,\
  30,00,32,00,2d,00,33,00,38,00,38,00,37,00,2d,00,34,00,46,00,33,00,42,00,2d,\
  00,39,00,38,00,43,00,42,00,2d,00,34,00,32,00,39,00,44,00,38,00,41,00,39,00,\
  46,00,34,00,45,00,37,00,38,00,7d,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Adapters\{5F154F8D-2B37-4C05-87A3-C9F9A2C6C3EF}]
"LLInterface"=""
"IpConfig"=hex(7):54,00,63,00,70,00,69,00,70,00,5c,00,50,00,61,00,72,00,61,00,\
  6d,00,65,00,74,00,65,00,72,00,73,00,5c,00,49,00,6e,00,74,00,65,00,72,00,66,\
  00,61,00,63,00,65,00,73,00,5c,00,7b,00,35,00,46,00,31,00,35,00,34,00,46,00,\
  38,00,44,00,2d,00,32,00,42,00,33,00,37,00,2d,00,34,00,43,00,30,00,35,00,2d,\
  00,38,00,37,00,41,00,33,00,2d,00,43,00,39,00,46,00,39,00,41,00,32,00,43,00,\
  36,00,43,00,33,00,45,00,46,00,7d,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Adapters\{C5DA064A-8B9B-4F19-BF06-C1D30A0A1BE4}]
"LLInterface"=""
"IpConfig"=hex(7):54,00,63,00,70,00,69,00,70,00,5c,00,50,00,61,00,72,00,61,00,\
  6d,00,65,00,74,00,65,00,72,00,73,00,5c,00,49,00,6e,00,74,00,65,00,72,00,66,\
  00,61,00,63,00,65,00,73,00,5c,00,7b,00,43,00,35,00,44,00,41,00,30,00,36,00,\
  34,00,41,00,2d,00,38,00,42,00,39,00,42,00,2d,00,34,00,46,00,31,00,39,00,2d,\
  00,42,00,46,00,30,00,36,00,2d,00,43,00,31,00,44,00,33,00,30,00,41,00,30,00,\
  41,00,31,00,42,00,45,00,34,00,7d,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Adapters\{D85AF543-7382-4E45-ABB9-B0457B3B1062}]
"LLInterface"=""
"IpConfig"=hex(7):54,00,63,00,70,00,69,00,70,00,5c,00,50,00,61,00,72,00,61,00,\
  6d,00,65,00,74,00,65,00,72,00,73,00,5c,00,49,00,6e,00,74,00,65,00,72,00,66,\
  00,61,00,63,00,65,00,73,00,5c,00,7b,00,44,00,38,00,35,00,41,00,46,00,35,00,\
  34,00,33,00,2d,00,37,00,33,00,38,00,32,00,2d,00,34,00,45,00,34,00,35,00,2d,\
  00,41,00,42,00,42,00,39,00,2d,00,42,00,30,00,34,00,35,00,37,00,42,00,33,00,\
  42,00,31,00,30,00,36,00,32,00,7d,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\DNSRegisteredAdapters]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{05ACF802-3887-4F3B-98CB-429D8A9F4E78}]
"EnableDeadGWDetect"=dword:00000001
"EnableDHCP"=dword:00000001
"NameServer"=""
"Domain"=""
"RegistrationEnabled"=dword:00000001
"RegisterAdapterName"=dword:00000000
"DhcpServer"="255.255.255.255"
"Lease"=dword:00000000
"LeaseObtainedTime"=dword:00000000
"T1"=dword:00000000
"T2"=dword:00000000
"LeaseTerminatesTime"=dword:00000000
"AddressType"=dword:00000000
"IsServerNapAware"=dword:00000000
"DhcpConnForceBroadcastFlag"=dword:00000000
"DhcpIPAddress"="0.0.0.0"
"DhcpSubnetMask"="255.0.0.0"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{5F154F8D-2B37-4C05-87A3-C9F9A2C6C3EF}]
"EnableDeadGWDetect"=dword:00000001
"EnableDHCP"=dword:00000001
"NameServer"=""
"Domain"=""
"RegistrationEnabled"=dword:00000001
"RegisterAdapterName"=dword:00000000
"DhcpServer"="255.255.255.255"
"Lease"=dword:00000000
"LeaseObtainedTime"=dword:00000000
"T1"=dword:00000000
"T2"=dword:00000000
"LeaseTerminatesTime"=dword:00000000
"AddressType"=dword:00000000
"IsServerNapAware"=dword:00000000
"DhcpConnForceBroadcastFlag"=dword:00000001
"DhcpGatewayHardware"=hex:c0,a8,00,01,06,00,00,00,2c,b0,5d,e9,a7,0e
"DhcpGatewayHardwareCount"=dword:00000001
"DhcpIPAddress"="0.0.0.0"
"DhcpSubnetMask"="255.0.0.0"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{C5DA064A-8B9B-4F19-BF06-C1D30A0A1BE4}]
"EnableDeadGWDetect"=dword:00000001
"EnableDHCP"=dword:00000001
"NameServer"=""
"Domain"=""
"RegistrationEnabled"=dword:00000001
"RegisterAdapterName"=dword:00000000
"DhcpServer"="255.255.255.255"
"Lease"=dword:00000000
"LeaseObtainedTime"=dword:00000000
"T1"=dword:00000000
"T2"=dword:00000000
"LeaseTerminatesTime"=dword:00000000
"AddressType"=dword:00000000
"IsServerNapAware"=dword:00000000
"DhcpConnForceBroadcastFlag"=dword:00000000
"DhcpNetworkHint"="34F6D68456D6C3549314730314E3"
"DhcpIPAddress"="0.0.0.0"
"DhcpSubnetMask"="255.0.0.0"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{D85AF543-7382-4E45-ABB9-B0457B3B1062}]
"EnableDeadGWDetect"=dword:00000001
"EnableDHCP"=dword:00000001
"NameServer"=""
"Domain"=""
"RegistrationEnabled"=dword:00000001
"RegisterAdapterName"=dword:00000000
"DhcpServer"="255.255.255.255"
"Lease"=dword:00000000
"LeaseObtainedTime"=dword:00000000
"T1"=dword:00000000
"T2"=dword:00000000
"LeaseTerminatesTime"=dword:00000000
"AddressType"=dword:00000000
"IsServerNapAware"=dword:00000000
"DhcpConnForceBroadcastFlag"=dword:00000000
"DhcpIPAddress"="0.0.0.0"
"DhcpSubnetMask"="255.0.0.0"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\PersistentRoutes]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Winsock]
"UseDelayedAcceptance"=dword:00000000
"HelperDllName"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
  00,77,00,73,00,68,00,74,00,63,00,70,00,69,00,70,00,2e,00,64,00,6c,00,6c,00,\
  00,00
"MaxSockAddrLength"=dword:00000010
"MinSockAddrLength"=dword:00000010
"Mapping"=hex:08,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,06,00,00,00,02,\
  00,00,00,01,00,00,00,00,00,00,00,02,00,00,00,00,00,00,00,06,00,00,00,02,00,\
  00,00,02,00,00,00,11,00,00,00,02,00,00,00,02,00,00,00,00,00,00,00,02,00,00,\
  00,00,00,00,00,11,00,00,00,02,00,00,00,03,00,00,00,ff,00,00,00,02,00,00,00,\
  03,00,00,00,00,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Performance]
"Close"="CloseTcpIpPerformanceData"
"Collect"="CollectTcpIpPerformanceData"
"Library"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,50,\
  00,65,00,72,00,66,00,63,00,74,00,72,00,73,00,2e,00,64,00,6c,00,6c,00,00,00
"Open"="OpenTcpIpPerformanceData"
"Object List"="502 510 546 548 582 638 658 1530 1532 1534"
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\ServiceProvider]
"Class"=dword:00000008
"DnsPriority"=dword:000007d0
"HostsPriority"=dword:000001f4
"LocalPriority"=dword:000001f3
"Name"="TCP/IP"
"NetbtPriority"=dword:000007d1
"ProviderPath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  77,00,73,00,6f,00,63,00,6b,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Enum]
"0"="Root\\LEGACY_TCPIP\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
 

  • 0

#65
RKinner
Posted 14 May 2014 - 01:45 PM

RKinner

    Malware Expert

  • Expert
  • 24,711 posts
  • MVP

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters]

 

Should have something like:

 

DhcpNameServer

 

and DHCPDomain

 

but they are not in yours.  This means DHCP is somehow not working.  

 

I assume you have a second PC on the same router that you are using to post with so we need to look into DHCP a bit more closely.

 

I think back when we started I asked you to verify that

net start dhcp

said it was already started.  Is that still the case?

 

 

Also:  Now that you have turned the Firewall on is it now possible to change your network from Public to Home?


  • 0

#66
CatBee
Posted 14 May 2014 - 02:39 PM

CatBee

    Member

  • Topic Starter
  • Member
  • PipPip
  • 65 posts

I opened the reg files with Open With > Notepad

 

and yes i'm using a second pc using the same router.

 

Net start dhcp

it still says that it already has started.


  • 0

#67
RKinner
Posted 14 May 2014 - 02:59 PM

RKinner

    Malware Expert

  • Expert
  • 24,711 posts
  • MVP

What make and model is the router?  Is it possible that someone has played with its security settings so that it only allows certain mac addresses?  How is it connected to the ISP?  Is there a separate cable or DSL modem?

 

Also:  Now that you have turned the Firewall on is it now possible to change your network from Public to Home?

 

In an elevated command prompt on your good PC type:

arp  -av

You should get something like this:

 

Interface: 127.0.0.1 --- 0x1
  Internet Address      Physical Address      Type
  224.0.0.22                                  static
  239.255.255.250                             static

Interface: 192.168.11.44 --- 0xb
  Internet Address      Physical Address      Type
  192.168.11.1          00-18-3a-12-88-50     dynamic
  192.168.11.38         00-19-d2-3a-13-07     dynamic
  192.168.11.39         28-18-78-c8-66-a5     dynamic
  192.168.11.42         00-24-2b-80-00-10     dynamic
  192.168.11.46         00-1e-58-97-ae-8f     dynamic
  192.168.11.255        ff-ff-ff-ff-ff-ff     static
  224.0.0.22            01-00-5e-00-00-16     static
  224.0.0.252           01-00-5e-00-00-fc     static
  239.255.255.250       01-00-5e-7f-ff-fa     static
  255.255.255.255       ff-ff-ff-ff-ff-ff     static

Interface: 0.0.0.0 --- 0xffffffff
  Internet Address      Physical Address      Type
  224.0.0.22            01-00-5e-00-00-16     static
 

 

Then do the same thing on your sick PC.  The static stuff should be the same on both.  The dynamic is showing you who else is on the network.


  • 0

#68
CatBee
Posted 14 May 2014 - 04:10 PM

CatBee

    Member

  • Topic Starter
  • Member
  • PipPip
  • 65 posts

My modem is a NetGear CG3100. It's a Cable modem with Wireless connection.

and the router hasn't got touched since the day it got installed so its been a year.

but i'm pretty sure its not the router because i even tried to connect to my iPhone wifi to make sure it wasn't the router's problem and it said the same when connected to my iPhone: Unknown Network with no internet Access. (when something is connected to my IPhone, My iPhone disconnects itself from Wifi Connection and uses its own 3G network.)

 

And i'm not able to change it to Home Network or anything, it doesn't even let me change the name: Unknown Network to something else.

I think i can only change the type of network when the pc has it as Identified Network.

 

 

 

My second computer says:

 

Interface: 127.0.0.1 --- 0x1
  Internet Address      Physical Address      Type
  224.0.0.22                                  static
  239.255.255.250                             static

 

Interface: 0.0.0.0 --- 0xffffffff

  Internet Address      Physical Address      Type

  224.0.0.22          01-00-5e-00-00-16      static

Interface: 192.168.0.15 --- 0xb

  Internet Address      Physical Address      Type
  192.168.0.1          2c-b0-5d-e9-a7-0e   dynamic  
  192.168.11.255        ff-ff-ff-ff-ff-ff     static
  224.0.0.22            01-00-5e-00-00-16     static
  224.0.0.252           01-00-5e-00-00-fc     static
  239.255.255.250       01-00-5e-7f-ff-fa     static
  255.255.255.255       ff-ff-ff-ff-ff-ff     static

 

And my sick pc says only:

 

Interface: 169.254.54.224 --- 0x12

  Internet Address      Physical Address      Type
  192.168.0.1          2c-b0-5d-e9-a7-0e   dynamic


  • 0

#69
RKinner
Posted 14 May 2014 - 04:25 PM

RKinner

    Malware Expert

  • Expert
  • 24,711 posts
  • MVP

The interesting thing is that the sick PC does see your router.  Can you manually give it an IP address of 192.168.0.100 Mask 255.255.255.0 and default gateway of 192.168.0.1 ?  Then try to ping 192.168.0.1  and also run the arp -av command

 

http://www.howtogeek...a-or-windows-7/


  • 0

#70
CatBee
Posted 15 May 2014 - 09:22 AM

CatBee

    Member

  • Topic Starter
  • Member
  • PipPip
  • 65 posts
I didn't type anything in Prefered DNS-Server or Alternative DNS-server.
 
After giving it a manual IP address, The Network and Sharing Center 
went from this:
 
to:
So now the Unknown Network changed to the routers name and i have now that blue-clickable text.
 
but it still says this:
 

Interface: 192.168.0.100 --- 0x12

  Internet Address      Physical Address      Type
  192.168.0.1          2c-b0-5d-e9-a7-0e   dynamic

 
and 
 
Pinging 192.168.0.1 with 32 bytes of data:
General error.
General error.
General error.
General error.
 
Ping statistics for 192.168.0.1:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Edited by CatBee, 15 May 2014 - 11:45 AM.

  • 0

Advertisements

#71
RKinner
Posted 15 May 2014 - 09:33 AM

RKinner

    Malware Expert

  • Expert
  • 24,711 posts
  • MVP

Can you plug in the PC directly again and try it there?


  • 0

#72
CatBee
Posted 15 May 2014 - 12:01 PM

CatBee

    Member

  • Topic Starter
  • Member
  • PipPip
  • 65 posts

With Ethernet-cable:

 

Pinging 192.168.0.1 with 32 bytes of data:
General error.
General error.
General error.
General error.
 
Ping statistics for 192.168.0.1:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)
 
And arp -av:
 

Interface: 127.0.0.1 --- 0x1

  Internet Address      Physical Address      Type
  224.0.0.252                                          static

 

Interface: 192.168.0.100 --- 0xa

  Internet Address      Physical Address      Type
  192.168.0.1          2c-b0-5d-e9-a7-0e   dynamic

  224.0.0.252          01-00-5e-00-00-fc   static

 

Interface: 0.0.0.0 --- 0xffffffff

  Internet Address      Physical Address      Type
  224.0.0.252          01-00-5e-00-00-fc   static

 

Interface: 0.0.0.0 --- 0xffffffff

  Internet Address      Physical Address      Type
  192.168.0.1          2c-b0-5d-e9-a7-0e   dynamic

  224.0.0.252          01-00-5e-00-00-fc   static

 

Interface: 0.0.0.0 --- 0xffffffff

  Internet Address      Physical Address      Type
  224.0.0.252          01-00-5e-00-00-fc   static

 

Thats what i got using Ethernet-cable.


Edited by CatBee, 15 May 2014 - 12:02 PM.

  • 0

#73
RKinner
Posted 15 May 2014 - 12:57 PM

RKinner

    Malware Expert

  • Expert
  • 24,711 posts
  • MVP

Can you do screenshots like the following? for both the wired and the wireless when connected:

 

[attachment=70588:prop.jpg]

 

Click on the connection as shown by the arrow and then hit the Properties button.


  • 0

#74
CatBee
Posted 15 May 2014 - 01:43 PM

CatBee

    Member

  • Topic Starter
  • Member
  • PipPip
  • 65 posts

Wired:

http://imgur.com/U4mL9dl

 

Wireless:

http://imgur.com/EaCuTex


  • 0

#75
RKinner
Posted 15 May 2014 - 02:18 PM

RKinner

    Malware Expert

  • Expert
  • 24,711 posts
  • MVP

If you do

 

arp -a

 

after it has been on for a while does it have more entries?

 

apr -d 

 

clears the arp cache and when I do it on mine then it looks sort of like yours:

 

C:\Windows\system32>arp -d
 
C:\Windows\system32>arp -a
 
Interface: 192.168.11.44 --- 0xb
  Internet Address      Physical Address      Type
  192.168.11.1          00-18-3a-12-88-50     dynamic
 
 
 
Copy the text in the code box:
 
DRIVES
nnetsvcs
%SYSTEMDRIVE%\*.exe
%systemroot%\assembly\GAC_32\*.ini
%systemroot%\assembly\GAC_64\*.ini
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.exe
%APPDATA%\*.
/md5start
rsvpsp.dll
pnrpnsp.dll 
nwprovau.dll
nlaapi.dll
napinsp.dll
mswsock.dll
winrnr.dll
wshelper.dll
services.exe
atapi.sys
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
csrss.exe
PrintIsolationHost.exe
consrv.dll
user32.dll
/md5stop
C:\Windows\assembly\tmp\U\*.* /s
%systemroot%\*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%ProgramFiles%\WINDOWS NT\*.* /s
%systemroot%\system32\drivers\*.sys /lockedfiles
CREATERESTOREPOINT
 
Run OTL (Vista or Win 7 => right click and Run As Administrator)
 
Paste (Ctrl + v) the copied text in the box where it says Custom Scan/Fixes
 
Select the All option in the Extra Registry group then Run Scan.
 
You should get two logs.  Please copy and paste both of them.

  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP