Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Networking Networking
Search Search
Search for:
Tech Support Guy > > >

Solved: Wireless not working after malware removal


(!)

addielleyes's Avatar
addielleyes addielleyes is offline
Junior Member with 9 posts.
THREAD STARTER
 
Join Date: Oct 2010
Location: Maryland, USA
Experience: Beginner
01-Nov-2010, 03:35 PM #1
Unhappy Solved: Wireless not working after malware removal
Hey

So my hp tablet (windows xp) was infected with fake virus alerts which would not allow me to connect to the internet.

The malware has been removed, but I still cannot connect to wireless at any location (others can). Wired ethernet works. Right now my laptop is connected to a wireless router via an ethernet cable.

I can "see" wireless networks. When I try to connect, I am told I am connected, but I can't do anything and become disconnected in about 5 seconds. The connection continues to "connect" and "disconnect" every 5-10 seconds, although I still can't use the internet either way.
When I "repair" connection, I am told the ip address cannot be renewed. I have renewed the ip address manually in command prompt, but that doesn't change anything.

When I run ipconfig/all in command prompt, I get this (minus the host name):

Windows IP Configuration
Host Name . . . . . . . . . . . . :
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Wireless Network Connection:
Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network
Connection
Physical Address. . . . . . . . . : 00-16-6F-94-32-DB
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-16-D4-06-E1-08
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 10.0.0.9
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.0.0.1
DHCP Server . . . . . . . . . . . : 10.0.0.1
DNS Servers . . . . . . . . . . . : 10.0.0.1
Lease Obtained. . . . . . . . . . : Monday, November 01, 2010 3:03:20 PM
Lease Expires . . . . . . . . . . : Tuesday, November 02, 2010 3:03:20 P
M

Help will be very appreciated!
addielleyes's Avatar
addielleyes addielleyes is offline
Junior Member with 9 posts.
THREAD STARTER
 
Join Date: Oct 2010
Location: Maryland, USA
Experience: Beginner
01-Nov-2010, 03:44 PM #2
Update: I have also reset Winsock to defaults and made sure the DNS server is being retrieved automatically.

no differences
etaf's Avatar
etaf   (Wayne) etaf is online now
Computer Specs
Moderator with 52,600 posts.
 
Join Date: Oct 2003
Location: Surrey, UK
01-Nov-2010, 03:45 PM #3
What windows version are you running

there may still be a virus on the PC _ But assuming the PC is clean for the moment

would you post back the following


------------------------------------------------------------------------
{Device Manager}
Post back the results in device manager
If you cannot access the internet with this PC, then you will need to copy the program across to the faulty PC
Start > control Panel {Vista set to classic view}> system > {Vista, device manager on left hand side} {XP hardware Tab, device manager button} >
windows 7
start > control panel> System and Security> Device Manager

network adaptors, click on the + > post back the devices listed there
are there any ! ? or X


post a screen shot of the device manager - network adapters

To post a screen shot of the active window, hold the Alt key and press the PrtScn key. Open the Windows PAINT application and Paste the screen shot. You can then use PAINT to trim to suit, and save it as a JPG format file.
To upload it to the forum, open the full reply window and use the Manage Attachments button to upload it here
------------------------------------------------------------------------


------------------------------------------------------------------------
{run Xirrus Wi-Fi Inspector} Download and install
If you cannot access the internet with this PC, then you will need to copy the program across to the faulty PC

http://www.xirrus.com/library/wifitools.php
Direct link to the program is here http://www.xirrus.com/library/wifi_d...d_redirect.php
Then run and install the program
if you get an error - You need NET Framework installed for the WiFi Inspector to function.

Run the program

post a screen shot of the program running - if there are a lot of networks showing can you click on "networks" top lefthand area - so we can see all the network information, and also post which network "Adapter Name" (1st column) is yours on the list

To post a screen shot of the active window, hold the Alt key and press the PrtScn key. Open the Windows PAINT application and Paste the screen shot. You can then use PAINT to trim to suit, and save it as a JPG format file.
To upload it to the forum, open the full reply window and use the Manage Attachments button to upload it here.
------------------------------------------------------------------------
__________________
Wayne
Please let us know what the final solution was to any problem posted
addielleyes's Avatar
addielleyes addielleyes is offline
Junior Member with 9 posts.
THREAD STARTER
 
Join Date: Oct 2010
Location: Maryland, USA
Experience: Beginner
01-Nov-2010, 04:26 PM #4
As I said, I'm running XP.

Network Adapters (see attachment):
-Broadcom NetXtreme Gigabit Ethernet
-Intel(R) PRO/Wireless 2200BG Network Connection

^^ no special icons

I'm connected to internet with the infected laptop using an ethernet cable plugged into a wireless router.

Xirrus:
See attachment
I took the screenshot right when I first started "connecting" (not). After 5-10 seconds everything on top just says N/A.

I'm trying to connect to "BEmore."


Also, the above ipconfig/all was when I was wired/connected.
This is when I am disconnected and attempting to connect to wireless:

Windows IP Configuration
Host Name . . . . . . . . . . . . :
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-16-D4-06-E1-08
Ethernet adapter Wireless Network Connection:
Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network
Connection
Physical Address. . . . . . . . . : 00-16-6F-94-32-DB
Attached Thumbnails
Solved: Wireless not working after malware removal-network-adapters.jpg   Solved: Wireless not working after malware removal-xirrus.jpg  
etaf's Avatar
etaf   (Wayne) etaf is online now
Computer Specs
Moderator with 52,600 posts.
 
Join Date: Oct 2003
Location: Surrey, UK
01-Nov-2010, 04:35 PM #5
At least the adapter can see the wireless networks

try removing wireless profiles - see below
try a tcp /ip repair - see below

take the wireless security off the router and see if it will connect that way

what firewall do you have or have had on the PC ?

Wireless Profiles
http://mgmcc.forumotion.net/networki...ofile-t109.htm
- XP
http://www.tp-link.com/support/showfaq.asp?id=186
- delete the preferred networks
start> control panel> network connections> right click on the wireless connection> listed wireless networks tab in the preferred network list click on each one and - remove button

you will then have to enter the wireless security key for any networks you connect to
------------------------------------------------------------------------

TCP/IP stack repair options for use with Windows XP with SP2/SP3.

Start, Run, CMD to open a command prompt:

In the command prompt window that opens, type type the following commands:

Note: Type only the text in bold for the following commands.

Reset TCP/IP stack to installation defaults, type: netsh int ip reset reset.log

Reset WINSOCK entries to installation defaults, type: netsh winsock reset catalog

Reboot the machine.
------------------------------------------------------------------------
addielleyes's Avatar
addielleyes addielleyes is offline
Junior Member with 9 posts.
THREAD STARTER
 
Join Date: Oct 2010
Location: Maryland, USA
Experience: Beginner
01-Nov-2010, 04:59 PM #6
removing wireless profiles does nothing
tcp/ip repair does nothing (yes, I rebooted)

The router I'm using isn't mine (so I can't mess with it), but I've tried to connect to many wireless networks, protected and unprotected, with no success, and others can connect to this one so I don't think that's the problem.

I've not installed any firewalls, so I just have the Windows Firewall that came with the laptop.
etaf's Avatar
etaf   (Wayne) etaf is online now
Computer Specs
Moderator with 52,600 posts.
 
Join Date: Oct 2003
Location: Surrey, UK
01-Nov-2010, 05:18 PM #7
Did you get demo versions of Norton/Mcafee etc on the Laptop when purchased ?

Quote:
tcp/ip repair does nothing (yes, I rebooted)
and no errors given when entered

Quote:
but I've tried to connect to many wireless networks, protected and unprotected, with no success,
So wireless has never worked - some laptops have a physical switch to turn wireless on/off OR using the Fn + one of the F keys to toggle the wireless on/off

post back
------------------------------------------------------------------------
{Device Manager}
Post back the results in device manager
If you cannot access the internet with this PC, then you will need to copy the program across to the faulty PC
Start > control Panel {Vista set to classic view}> system > {Vista, device manager on left hand side} {XP hardware Tab, device manager button} >
windows 7
start > control panel> System and Security> Device Manager

network adaptors, click on the + > post back the devices listed there
are there any ! ? or X


post a screen shot of the device manager - network adapters

To post a screen shot of the active window, hold the Alt key and press the PrtScn key. Open the Windows PAINT application and Paste the screen shot. You can then use PAINT to trim to suit, and save it as a JPG format file.
To upload it to the forum, open the full reply window and use the Manage Attachments button to upload it here
------------------------------------------------------------------------
------------------------------------------------------------------------
{run Xirrus Wi-Fi Inspector} Download and install
If you cannot access the internet with this PC, then you will need to copy the program across to the faulty PC

http://www.xirrus.com/library/wifitools.php
Direct link to the program is here http://www.xirrus.com/library/wifi_d...d_redirect.php
Then run and install the program
if you get an error - You need NET Framework installed for the WiFi Inspector to function.

Run the program

post a screen shot of the program running - if there are a lot of networks showing can you click on "networks" top lefthand area - so we can see all the network information, and also post which network "Adapter Name" (1st column) is yours on the list

To post a screen shot of the active window, hold the Alt key and press the PrtScn key. Open the Windows PAINT application and Paste the screen shot. You can then use PAINT to trim to suit, and save it as a JPG format file.
To upload it to the forum, open the full reply window and use the Manage Attachments button to upload it here.
------------------------------------------------------------------------

------------------------------------------------------------------------
{ipconfig /all}
If you cannot access the internet with this PC, then you will need to paste the results into something like notepad and then copy onto a machine that can access the internet and post results here
We would like to see the results from ipconfig /all post back the results here
-> Start
-> (XP - enter the following in the RUN box)
cmd /k ipconfig /all
-> (Vista or Windows 7 - enter the following in the Search box)
cmd /k ipconfig /all

A black box will appear on the screen -
rightclick in the box
select all
enter
control key + C key - to copy

then reply here and
control key + V to paste
------------------------------------------------------------------------
addielleyes's Avatar
addielleyes addielleyes is offline
Junior Member with 9 posts.
THREAD STARTER
 
Join Date: Oct 2010
Location: Maryland, USA
Experience: Beginner
01-Nov-2010, 08:20 PM #8
Quote:
Originally Posted by etaf View Post
Did you get demo versions of Norton/Mcafee etc on the Laptop when purchased ?
My laptop is 4 years old and was reloaded in May, so any remnants of a demo version would be gone.


The tcp/ip repair in command prompt yielded no errors.

Quote:
Originally Posted by etaf View Post
So wireless has never worked - some laptops have a physical switch to turn wireless on/off OR using the Fn + one of the F keys to toggle the wireless on/off
The wireless worked fine prior to the malware infection.
The wireless is definitely on, as indicated by a bright blue light.


The 3 things you asked me to do after that I have already done and posted above.

Thanks
etaf's Avatar
etaf   (Wayne) etaf is online now
Computer Specs
Moderator with 52,600 posts.
 
Join Date: Oct 2003
Location: Surrey, UK
02-Nov-2010, 05:28 AM #9
post back the services running


From a Johnwill post

post back the status - started/stopped and automatic/manual
Check your Services are Started on all PCs:
  • COM+ Event System (for WZC issues)
  • Computer Browser
  • DHCP Client
  • DNS Client
  • Network Connections
  • Network Location Awareness
  • Remote Procedure Call (RPC)
  • Server
  • TCP/IP Netbios helper
  • Wireless Zero Configuration (XP wireless configurations only)
  • WLAN AutoConfig (Vista wireless configurations only)
  • Workstation

Note: You can check the services in Control Panel, Administrative Tools, Services.

All of these services should be started, and their startup type should be automatic (or perhaps manual).

If a service is not running, open it's properties and check the dependencies. Check each of the dependencies and see which one is preventing the service from running. Checking the event log is also a good idea here, there may be clues to what is failing.

------------------------------------------------------------------------
addielleyes's Avatar
addielleyes addielleyes is offline
Junior Member with 9 posts.
THREAD STARTER
 
Join Date: Oct 2010
Location: Maryland, USA
Experience: Beginner
02-Nov-2010, 12:58 PM #10
COM+ Event System: started, manual
Computer Browser: (blank), automatic
DHCP Client: started, automatic
DNS Client: started, automatic
Network Connections: started, manual
Network Location Awareness: started, manual
Remote Procedure Call: started, automatic
Server: started , automatic
TCP/IP NetBIOS Helper: started, automatic
Wireless Zero Configuration: started, automatic
Workstation: started, automatic

The only one not started is "Computer Browser."
It depends on "Server" and "Workstation," which are both started and automatic. I looked at the event log, but there is a lot of data there and I really don't know what to look for.

I started "Computer Browser" and got the following message: "The Computer Browser service on Local Computer started and then stopped. Some services stop automatically if they have no work to do, for example, the Performance Logs and Alerts services."
etaf's Avatar
etaf   (Wayne) etaf is online now
Computer Specs
Moderator with 52,600 posts.
 
Join Date: Oct 2003
Location: Surrey, UK
02-Nov-2010, 01:52 PM #11
running out of ideas now
Quote:
The wireless worked fine prior to the malware infection.
it maybe worth reloading the wireless driver from the PC manufacturers website

Do you know what malware / Virus you had
addielleyes's Avatar
addielleyes addielleyes is offline
Junior Member with 9 posts.
THREAD STARTER
 
Join Date: Oct 2010
Location: Maryland, USA
Experience: Beginner
22-Nov-2010, 12:15 AM #12
I tried reloading the wireless driver, and unfortunately nothing has changed!

The virus was a fake Microsoft Security Essentials alert. It prevented every other program from running, including the Task Manager.

(Sorry for the long delay, I just switched jobs.)
Thank you again for your help!
etaf's Avatar
etaf   (Wayne) etaf is online now
Computer Specs
Moderator with 52,600 posts.
 
Join Date: Oct 2003
Location: Surrey, UK
22-Nov-2010, 04:33 AM #13
Quote:
The router I'm using isn't mine (so I can't mess with it)
would explain further

I suspect this is a malware issue

Can you connect to your modem/router by cable and see if it works by cable and post back an ipconfig /all
addielleyes's Avatar
addielleyes addielleyes is offline
Junior Member with 9 posts.
THREAD STARTER
 
Join Date: Oct 2010
Location: Maryland, USA
Experience: Beginner
05-Dec-2010, 11:45 AM #14
WOW

The problem has been solved.

I haven't posted in a while because something similar to the aforementioned malware issue happened to my computer again. This time it was a fake infection alert system called "Antivirus Action." It would not allow me to open any programs whatsoever except for itself, claiming that the items I was attempting to open were infected.
I followed all the steps on bleepingcomputer to remove it.
http://www.bleepingcomputer.com/viru...tivirus-action

Steps 18-20 give instructions to replace the windows HOSTS file (in order to return to default settings), which is located by default in this folder C:\Windows\System32\Drivers\etc

I followed exactly and now the wireless works perfectly!

Thanks for trying to help.
It seems this could be recommended to anyone using windows (for personal use) who has connection problems following malware removal.
etaf's Avatar
etaf   (Wayne) etaf is online now
Computer Specs
Moderator with 52,600 posts.
 
Join Date: Oct 2003
Location: Surrey, UK
05-Dec-2010, 11:56 AM #15
thanks for letting us know
Quote:
It seems this could be recommended to anyone using windows (for personal use) who has connection problems following malware removal.
No , each machine needs to be reviewed by the Malware gurus on our site - we do not put any generic virus removal advice as that could actually make the PC unusable
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


Tags
ip addrees renewal fails, ipconfig, windows xp, wireless

(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


Similar Threads
Title Thread Starter Forum Replies Last Post
My system is unstable after scareware/malware removal xc1023 Virus & Other Malware Removal 0 25-Aug-2010 10:27 AM
user switching not working after malware clean up alq2k1 Virus & Other Malware Removal 1 02-Aug-2010 09:57 AM
Internet not working after Malware Infection (HijackThis) plastic_propet Virus & Other Malware Removal 0 10-May-2010 10:37 PM
Problems with Wireless Internet Connectivity after Malware Removal HTH Virus & Other Malware Removal 4 03-Aug-2009 07:25 PM
Solved: can't connect wirelessly to internet after malware removal danxp Networking 19 21-Apr-2008 07:50 PM

WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑