1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: Network problems after virus removal

Discussion in 'Networking' started by rrrich, May 14, 2010.

Thread Status:
Not open for further replies.
Advertisement
  1. rrrich

    rrrich Thread Starter

    Joined:
    May 14, 2010
    Messages:
    3
    Hi all,

    I recently removed a lots of viruses/spyware from my friend's PC using numerous tools such as AdAware, Spybot and Microsoft Security Essentials. Everything seemed fine and the computer was able to connect to the internet without problems. When they got it home they could not get on the internet and it turns out it was a problem with their network drivers.

    I have read (almost) every forum post out there on this and still can't seem to fix the problem.

    The first thing I noticed was the ndis.sys was missing from C:\Windows\system32\drivers. I used extract to copy ndis.sy_ to the folder but since I have done that I get a bluescreen error on boot saying about IRQ_NOT_LESS_OR_EQUAL. After trying lots of different drivers I now just get a bluescreen with a stop command and no error message.

    If I delete ndis.sys from the c:\windows\system32\drivers folder then Windows is able to boot in normal mode but if it is in there then I am able only to boot in Safe Mode (without Networking).

    In device manager I have a lot of items with yellow exclamation marks:

    Direct Parallel
    Packet Scheduler Miniport #3
    SiS 900-Based PCI Faster Ethernet Adapter - Packet Scheduler Miniport
    WAN Miniport (IP)
    WAN Miniport (IP) - Packet Scheduler Miniport
    WAN Miniport (L2TP)
    WAN Miniport (PPPOE)
    WAN Miniport (PPTP)

    and also if I select show hidden devices I have yellow exlamation marks next to

    AFD
    IPSEC driver
    NDIS Usermode I/O Protocol
    Netbois over Tcpip
    TCP/IP Protocol Driver

    I have no firewall installer and the Windows Firewall is not able to function anyway. The motherboard is a WinFast/Foxconn 760GXK8MC and I have downloaded the LAN drivers directly from their site and updated them manually. Even with every network device disabled and the ndis.sys file in the drivers folder it still will not boot. I've checked to make sure that the ndis.sys is from the correct version of operating system too.

    Spec

    Microsoft Windows XP Professional + SP3
    Built-in NIC on the motherboard (disabling it in the BIOS doesn't do anything)

    Not sure if I've missed anything off but let me know and I'll re-post.

    Thanks in advance for any help!

    Rich.
     
  2. pedroguy

    pedroguy

    Joined:
    Jan 28, 2001
    Messages:
    6,523
    Hi:You might consider doing this:
    Go to pc makers web site and download(if available)
    Chipset driver.Do this one first.
    Then the wan miniport.
    I would investigate the hidden devices and record the error code listed
    You may have to Google the code to see what it really means,but if driver related,do the same as above.
    Also,for the hidden devices I would check status of those system services.Like so

    Check your Services are Started on all PCs:
    • COM+ Event System (for WZC issues)
    • Computer Browser
    • DHCP Client
    • DNS Client
    • Network Connections
    • Network Location Awareness
    • Remote Procedure Call (RPC)
    • Server
    • TCP/IP Netbios helper
    • Wireless Zero Configuration (XP wireless configurations)
    • WLAN AutoConfig (Vista wireless configurations)
    • Workstation

    Note: You can check the services in Control Panel, Administrative Tools, Services.

    All of these services should be started, and their startup type should be automatic (or perhaps manual).

    If a service is not running, open it's properties and check the dependencies. Check each of the dependencies and see which one is preventing the service from running. Checking the event log is also a good idea here, there may be clues to what is failing.
    __________________
     
  3. JohnWill

    JohnWill Retired Moderator

    Joined:
    Oct 19, 2002
    Messages:
    106,418
    TCP/IP stack repair options for use with Windows XP with SP2/SP3.

    Start, Run, CMD to open a command prompt:

    In the command prompt window that opens, type type the following commands, each followed by the Enter key:

    Note: Type only the text in bold for the following commands.

    Reset TCP/IP stack to installation defaults, type: netsh int ip reset reset.log

    Reset WINSOCK entries to installation defaults, type: netsh winsock reset catalog

    Reboot the machine.
     
  4. rrrich

    rrrich Thread Starter

    Joined:
    May 14, 2010
    Messages:
    3
    Thanks for both of your replies.

    I managed to fix the problem by adding a registry key which had been deleted.

    -----

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDIS]
    "DisplayName"="NDIS"
    "Description"="NDIS"
    "ErrorControl"=dword:00000001
    "Start"=dword:00000000
    "Type"=dword:00000001
    "ImagePath"="system32\\drivers\\ndis.sys"
    "Group"="NDIS Wrapper"
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDIS\Enum]
    "0"="Root\\\\LEGACY_NDIS\\\\0000"
    "Count"=dword:00000002
    "NextInstance"=dword:00000002
    "1"="Root\\LEGACY_NDIS\\0000"
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NDIS\Parameters]
    "ProcessorAffinityMask"=dword:ffffffff
    -----

    I did this for ControlSet002 and ControlSet003 (I'm not sure if I had to do this but I did!)

    Hope this helps others.
     
  5. JohnWill

    JohnWill Retired Moderator

    Joined:
    Oct 19, 2002
    Messages:
    106,418
    You only need to change CurrentControlSet, the others are backups that only get used when you boot to the last known good configuration.
     
  6. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/922991

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice