[phpBB Debug] PHP Warning: in file [ROOT]/phpbb/session.php on line 574: sizeof(): Parameter must be an array or an object that implements Countable
[phpBB Debug] PHP Warning: in file [ROOT]/phpbb/session.php on line 630: sizeof(): Parameter must be an array or an object that implements Countable
WeWeWeb .NET • After remove malware, XP cannot get IP
Page 1 of 1

After remove malware, XP cannot get IP

Posted: Fri Nov 11, 2011 12:10 am
by willy
Step by step instructions after using malware bytes to remove malware (antivirus2009 or whatever the flavor is now.)

After you have destroyed the Malware - sometimes the winsock gets corrupted and sometimes the ip stack, and then other times the lan connection settings get changed, so i run through all the following steps to correct a clients PC.

This is if you can not get an internet connection after reboot.

Uninstall your network driver, restart pc, reinstall driver, START, RUN, CMD, enter these:

1. ipconfig /flushdns

2. Repair\rebuild the winsock
run from command line . netsh winsock reset

Reboot - if no connectivity continue

3. Repair\rebuild the IP Stack
run from command line netsh int ip reset c:\resetlog.txt

Reboot - if no connectivity continue

4. Check the Internet Explorer LAN settings, make sure there are no check marks in the connection options - don't know why this makes a difference, but it did on one of the machines I was working on.

If no luck, try a Windows Repair Install:

XP Repair install

Please read carefully and make sure you followed the warning links before initiating the Repair Install. You can print a text version for reference. repair.txt

1. Boot the computer using the XP CD. You may need to change the boot order in the system BIOS so the CD boots before the hard drive. Check your system documentation for steps to access the BIOS and change the boot order.

2. When you see the "Welcome To Setup" screen, you will see the options below

This portion of the Setup program prepares Microsoft Windows XP to run on your computer:

To setup Windows XP now, press ENTER.

To repair a Windows XP installation using Recovery Console, press R.

To quit Setup without installing Windows XP, press F3.

3. Press Enter to start the Windows Setup.Do not choose "To repair a Windows XP installation using the Recovery Console, press R", (you Do Not want to load Recovery Console). I repeat, do not choose "To repair a Windows XP installation using the Recovery Console, press R".

4. Accept the License Agreement and Windows will search for existing Windows installations.

5. Select the XP installation you want to repair from the list and press R to start the repair. If Repair is not one of the options, END setup. After the reboot read Warning#2!

6. Setup will copy the necessary files to the hard drive and reboot. Do not press any key to boot from CD when the message appears. Setup will continue as if it were doing a clean install, but your applications and settings will remain intact.

If you get files not found during the copying stage.

Blaster worm warning: Do not immediately activate over the internet when asked, enable the XP firewall before connecting to the internet. You can activate after the firewall is enabled. Control Panel - Network Connections. Right click the connection you use, Properties and there is a check box on the Advanced page.

KB 833330u Blaster removal

What You Should Know About the Sasser Worm and Its Variants

Microsoft Security Bulletin MS04-011

7. Reapply updates or service packs applied since initial Windows XP installation. Please note that a Repair Install using an Original pre service pack 1 or 2 XP CD used as the install media will remove SP1/SP2 respectively and service packs plus updates issued after the service packs will need to be reapplied.

Here are some other ref. http://www.wikihow.com/Repair-Winsock-and-TCP/IP
http://windowsxp.mvps.org/winsock.htm
http://support.microsoft.com/?kbid=8...ItMyselfAlways
http://www.michaelstevenstech.com/XPrepairinstall.htm