[shmob]

Hey, I am not sure if this is a connection or malware question but I am running vista and I just had a trojan (vundo i think) and it played up with my internet connection and general use of my laptop. Now that i have removed it everything works fine except I cannot browse the internet. I am connected through my own wireless network and it states it has limited connectivity and cannot identify the network. When i select diagnose it says things like "plug a cable into..." "try moving the computer" and "automatically get new ip" all of which were fine and still should be before i had the virus.

Did i not get rid of the virus completely?? Or has it screwed with my internet settings??? PLZ help i've searched 100s of forums and no one has had the same thing happen!!!

[avisitor]

Limited connectivity generally means that you've got the encryption key/passphrase typed wrong on the laptop. Usually, it means that the key doesn't match what's in the router. However, I'd like to see this just to make sure. Also, what's the make and model of the router.

Hit Windows + R and type "cmd /K ipconfig /all" without quotes.

Right click in the black box and click select all. Hit enter. Then paste the results here. (Ctrl + V). If that machine doesn't have internet access, use a flash drive and a text file to copy the information so you can post it here.

[shmob]

Fingers crossed i did it right

Router:
Belkin Wireless Pre-N Router
model # F5D8230-4
Version 1002
Windows IP Configuration
Host Name . . . . . . . . . . . . : Borris
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Bluetooth Network Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
Physical Address. . . . . . . . . : 00-19-7D-FD-D2-3C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 3945ABG Network Con
nection
Physical Address. . . . . . . . . : 00-19-D2-7A-87-5C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::3db5:a4c0:244:cfd0%10(Preferred)
Autoconfiguration IPv4 Address. . : 169.254.207.208(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 167778770
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controlle
r
Physical Address. . . . . . . . . : 00-19-B9-57-70-12
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 6:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 7:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{6818918F-8599-4731-8707-67345AA52
9DD}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 12:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{6133343B-98DB-49A8-88A0-0E0F80464
BF2}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 16:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{3B138E59-66FD-41CB-B581-53E18BFAA
C0A}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::5efe:169.254.207.208%20(Preferred)
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Disabled
C:\Users\David Chamberlain>

[avisitor]

Ok, yes as expected, you have an APIPA address. Please plug into the router via cable and go to http://192.168.2.1

Click on the link on the left under Wireless that says Security.

[shmob]

I plugged my laptop (the one that isn't working) directly into the router and I got the same message that it couldn't open the page when i tried to go to http://192.168.2.1 but my other computer although not directly linked to the router came up with the page (they are using the same router) is this good enough?? what now??

[JohnWill]

TCP/IP stack repair options for use with Windows Vista.

Start, Programs\Accessories and right click on Command Prompt, select "Run as Administrator" to open a command prompt.

In the command prompt window that opens, type type the following commands:

Reset WINSOCK entries to installation defaults: netsh winsock reset catalog

Reset IPv4 TCP/IP stack to installation defaults. netsh int ipv4 reset reset.log

Reset IPv6 TCP/IP stack to installation defaults. netsh int ipv6 reset reset.log

Reboot the machine.

[shmob]

Ive tried this before.. I did it again and im not sure if this showed last time but when typing netsh int ipv4 reset reset.log and the ipv6 one aswell it came up with:

reset echo request failed
access denied

The second bit of the command was successful though. After reboot still no browsing.

[JohnWill]

Make sure you did this correctly to open the command prompt and do it again:

Start, Programs\Accessories and right click on Command Prompt, select "Run as Administrator" to open a command prompt.

[shmob]

Im running it as admin and thats what I get. I tried again just to be sure and the same response came up????

[JohnWill]

That's not good...

Check your Services are Started on all PCs:

• Computer Browser
• DHCP Client
• DNS Client
• Network Connections
• Network Location Awareness
• Remote Procedure Call (RPC)
• Server
• TCP/IP Netbios helper
• Workstation

Note: You can check the services in Control Panel, Administrative Tools, Services.

All of these services should be started, and their startup type should be automatic (or perhaps manual).

[shmob]

all of them are started. I noticed the one under remote procedure call wasn't started called remote procedure call locator?? dnt know if that helps. could the virus i had still be around and just be making it seem like nothhing is wrong??

[JohnWill]

Nope, my RPC Locater is set to manual and is not started.

[shmob]

What do you suppose i do now?

[shmob]

i need help please

[SigVicious]

I had a similar problem with a co-workers laptop. I could ping public IP's but couldn't surf websites. However, it would get a legit IP from whatever network I plugged it into. The problem ended up being Zone Alarm. He was also running 3 other anti this or that as well.