Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: virus FUBARd my network. XP/Win7

25 Sep 2010   #1
WaxyChicken

Win7 Ultimate x32
 
 
virus FUBARd my network. XP/Win7

I had a bad virus.
i managed to remove it.
but some bad ARP or DHCP or WINS entries are still there.
(it's a WINS/DHCP workgroup network with XP and Win7 machines)

now on my win7 when i ping my xp machine's IP i get: ping 192.168.2.4 success
but when i ping the xp by name i get:
C:\Windows\system32>ping DVR--PRINCESS

Pinging DVR--PRINCESS.DanceHall [72.215.225.9] with 32 bytes of data:
Request timed out.
Request timed out.

The wrong ip!! (which is also out of network!!)

what could the virus of changed to of made this static entry?
how can i remove it so the DHCP will update it?

my arp -a only shows my router.
other machines are showing up fine on my network.
my XP is working fine, but can't talk to this specific Win7 machine - i think it's because this win7 machine is trying to reply to the wrong IP address.

so basicly - since i got the virus - i can't see my xp machine from my win7.
my xp can see my win7 but can't access it.

suggestions?



My System SpecsSystem Spec
.
25 Sep 2010   #2
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

You might try resetting both winsock and tcp/ip. Type the following commands one at a time into your command prompt and hit enter. I'm not sure why you are using WINS, I would go with DNS name resolution unless you have a really good reason to use WINS instead.

netsh winsock reset catalog (reset winsock entries)
netsh int ip reset reset.log hit (reset TCP/IP stack)

Then try these commands> ipconfig /release ipconfig /renew

You might also want to post this at the security center of this forum to get more help with the virus problem.
My System SpecsSystem Spec
26 Sep 2010   #3
WaxyChicken

Win7 Ultimate x32
 
 

The virus i've already taken care of. this is just left-over damage.

and i've found the problem but not how to fix it.
in the adapter settings i've enabled NetBios over TCP/IP - it's checked. (radio buttoned)
but in IPCONFIG /ALL it comes back as disabled.

is there another way to enable netbios over tcp/ip?

also - in the network sharing center:
i do have the network properly set to DANCEHALL but the "Access Type: Internet"- shouldn't that be network?
if so, how do i change it?
My System SpecsSystem Spec
.

26 Sep 2010   #4
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Hard to say what the exact problem is from here with no ipconfig to go from. You can try resetting the TCP/IP stack and winsock which might help. Try the commands below.

netsh winsock reset catalog (reset winsock entries)
netsh int ip reset reset.log hit (reset TCP/IP stack)
Read more: http://windows7themes.net/repair-reset-winsock-windows-7.html#ixzz10eUnQiUw
My System SpecsSystem Spec
26 Sep 2010   #5
WaxyChicken

Win7 Ultimate x32
 
 

didn't work.
i'm currently doing 68 hours a week at my two jobs so responses from me may be slow and i have little net time.

Code:
C:\Windows\system32>ipconfig /allcompartments /all

Windows IP Configuration


==============================================================================
Network Information for Compartment 1 (ACTIVE)
==============================================================================
   Host Name . . . . . . . . . . . . : TableDance
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : DanceHall

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . : DanceHall
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : 40-61-86-99-E8-FF
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::57c:47db:e9e4:d469%11(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.2.4(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Sunday, September 26, 2010 10:29:01 AM
   Lease Expires . . . . . . . . . . : Sunday, October 10, 2010 10:29:01 AM
   Default Gateway . . . . . . . . . : 192.168.2.1
   DHCP Server . . . . . . . . . . . : 192.168.2.1
   DHCPv6 IAID . . . . . . . . . . . : 188768646
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-13-EE-FC-A0-40-61-86-99-E8-FF
   DNS Servers . . . . . . . . . . . : 192.168.2.1
                                       68.105.28.11
                                       68.105.29.11
                                       68.105.28.12
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.DanceHall:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : DanceHall
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e74:1488:287e:bb95:d56f(Preferred)
   Link-local IPv6 Address . . . . . : fe80::1488:287e:bb95:d56f%13(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Windows\system32>
maybe - after the virus - is there anything there that should NOT be there instead of just being wrong?


Dancehall home network
access type: internet
homegroup: joined
connections: local area connection

home or work profile:
Sharing all libraries and printers.
not sharing streaming media.

network discovery: on
file and print sharing: on
Public Sharing: on
enabled for 40 or 56 bit encryptions
password protected sharing: off
allow windows to manage home group
My System SpecsSystem Spec
27 Sep 2010   #6
WaxyChicken

Win7 Ultimate x32
 
 

suggestions?
My System SpecsSystem Spec
27 Sep 2010   #7
WindowsStar

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)
 
 

Is the sevice started??

Have you tried starting it form a Command Line (Run as Administrator)

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted

Does it work now?
My System SpecsSystem Spec
28 Sep 2010   #8
Mercurial

Windows 7 32bit RTM
 
 

also try ipconfig /flushdns and /release and /renew see if that helps
My System SpecsSystem Spec
28 Sep 2010   #9
jimbo45

Linux CENTOS 7 / various Windows OS'es and servers
 
 

Hi there
in these situations IMO only a COMPETE OS IMAGE restore from a clean image will be any good.

I'd NEVER trust a computer again that had been infected with a Virus -- no matter how good the AV software is supposed to be.

This also amply illustrates the IMPORTANT point of MAKING REGULAR IMAGE BACKUPS OF YOUR OS.

Cheers
jimbo
My System SpecsSystem Spec
28 Sep 2010   #10
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by jimbo45 View Post
Hi there
in these situations IMO only a COMPETE OS IMAGE restore from a clean image will be any good.

I'd NEVER trust a computer again that had been infected with a Virus -- no matter how good the AV software is supposed to be.

This also amply illustrates the IMPORTANT point of MAKING REGULAR IMAGE BACKUPS OF YOUR OS.

Cheers
jimbo
I just can't tell you how much I agree with your statements here Jimbo, although I hesitate to tell this to the OP because they usually get upset LOL.
My System SpecsSystem Spec
Reply

 virus FUBARd my network. XP/Win7




Thread Tools




Similar help and support threads
Thread Forum
How can I Access a Child Network From a Parent Network in Win7 64bit
I use a Comcast broadband gateway, say that this network is called 'Home'. Connected to the 'Home' LAN I have multiple PC's, a Wii, and a Linksys E2500 Router. Connected to the Linksys routers LAN I have 1 PC and 1 network storage device. I would like to map a network drive from a PC on the...
Network & Sharing
Virus.exe in network
When I woke up this morning I found an odd network named Virus.exe in the Internet connections I have no idea what it is but I'm worried that it really is a virus anyone have any info/advice on what to do with this? This is a new network I have never seen one like this before In my life.
Network & Sharing
Virus.exe showing as a wireless network
So my computer is a Windows 7 computer, with NO wifi. I have it plugged into my media link wireless router (which is plugged into my motorola surfboard modem) And somehow there is a wireless network showing here or there called "virus.exe" It has about two bars. and occasionally it...
System Security
Fresh install of Win7 *unidentified network/no network access*
I've freshly installed Windows 7 Enterprise 64 bit on my system that previously had Ubuntu installed, and prior to ubuntu had win7 ultimate installed. With the fresh install of win7, I receive an unidentified network/no network access issue. Heres a list of things ive tried: - reset the...
Network & Sharing
How to restore network and LAN configuration after virus infection?
Hello, Some times I have got any computer that´s infected by some virus and internet is not working. Booting Linux, Internet is working, but in Windows it is not. I am sure it´s virus problem, because IP, and others adjust are OK. Sometimes after scanning Windows with some antivirus system,...
Network & Sharing
win7 virus cant remove
On my dads laptop he downloaded this win7 antivirus, a little after he started having some computer problems. so i looked at it and soon realized that it was a fake antivirus, but it has been harming the computer now i cant even connect to the internet on it. ive tried everything, i uploaded norton...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 12:43.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App