1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Win 7 wired - no net connect, no ipconfig, works w/linux only

Discussion in 'Networking' started by expat007, Apr 12, 2012.

Thread Status:
Not open for further replies.
Advertisement
  1. expat007

    expat007 Thread Starter

    Joined:
    Apr 12, 2012
    Messages:
    13
    My machine is dual boot Win 7 x32/ Linux. I'm using a wired Broadcom ethernet card and a cable modem.
    Only one computer is connected and I have no router. In the middle of surfing on the Win OS, my connection dropped.
    I rebooted to windows and got a red X in the sys tray. No connection, no network connectivity.
    I booted again, into Linux this time, and it works fine. So this is a software issue for sure (I would think). At least it's not a problem with the wires or my ISP or anything. I also downloaded and ran the broadcom diagnostic utility for my NIC and all the tests passed.

    The "Network and Sharing" screen shows no connection, (just diagram of computer=>X=>Globe) but the properties screen in the device manager shows it's connected with no problem, although it shows 0 packets transferred. It also reports no problem with the driver, but I re-installed it anyway.

    Most mysterious of all is that running ipconfig/all doesn't show the card at all. It's completely missing. The only thing it returns is the Teredo Tunneling Pseudo Interface and a 6to4 adapter. Both are reported "Media Disconnected" and neither has a DNS suffix, IP address or Default Gateway listed.

    The property screen that comes up when you right-click the Local Area Connection on the "Network and Sharing" screen and double click the IPV4 line returns the message "Windows couldn't automatically bind the IP protocol stack to the network adapter".
    IPV4 and IPV6 show no connectivity.
    That's the best and only hint I've gotten so far as to what is going wrong, but I can't find a clue of how to correct it.

    The network troubleshooter acts like it is resolving the problem but is useless in the end and just reports that my network card is "experiencing problems"....Duh!

    This is what I've done so far:

    Installed newest drivers I could find.
    Power off/on the modem and rebooted (warm and cold) multiple times.
    Did full virus and malware scans
    Reset winsock
    Reset IPV4 and IPV6 TCP/IP stacks to installation defaults
    Cleared and registered DNS cache
    Release and renew current IP address
    Checked Hosts file for any strange entries.
    Checked all services and process lists for any remnants of any possibly interfering process.
    Repeatedly boot into safe mode with network connectivity.
    Uninstalled network card in device manager and reboot, cold and warm.
    Unchecked IPV6 and both topographical protocols, one at a time, and rebooted after each change.
    Uninstalled AVG, Comodo Firewall, Open VPN and Wireshark, all of which were present for a week or more when everything was running just fine.
    Spit, cursed, rendered my clothes and tore at my hair. [​IMG]
    Spent 7 hours on google trying to figure this out. (Running Linux)

    PLEASE!!! If anyone has any idea what's going on here, please chime in. I have wore out my google finger and have not found anything like what I'm experiencing here. At least most people get something reported in their ipconfig window.
    I can't use a system restore because, evidently, the VSS shadow service has been turned off lately.

    TIA
     
  2. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,252
    First Name:
    Wayne
    you seem to have covered most

    can we see the results from a tcp/ip reset again and also re services - can we see a fabar log


    ------------------------------------------------------------------------

    TCP/IP stack repair options for use with Vista/Windows 7

    Start, Programs\Accessories and right click on Command Prompt, select "Run as Administrator" to open a command prompt.

    Note: Type only the text in bold for the following commands.

    Reset WINSOCK entries to installation defaults: netsh winsock reset catalog

    Reset IPv4 TCP/IP stack to installation defaults. netsh int ipv4 reset reset.log
    and press enter

    Reset IPv6 TCP/IP stack to installation defaults. netsh int ipv6 reset reset.log
    and press enter

    Reboot the machine.

    If you receive the message
    The requested operation requires elevation.
    Then please open the command prompt as administrator - as requested above
    Start, Programs\Accessories and right click on Command Prompt, select "Run as Administrator" to open a command prompt.

    Please note and post back - if you receive the message
    Access is Denied

    Post back the results here - we need to know these commands worked correctly
    rightclick in the box
    select all
    enter
    control key + C key - to copy
    then reply here and
    control key + V to paste

    ------------------------------------------------------------------------

    ------------------------------------------------------------------------

    ------------------------------------------------------------------------
    Services - Fabar Service Scanner, free

    We would like to see some status information for each of the services on the PC goto

    http://www.technibble.com/fabar-service-scanner/

    and download the free scanner tool

    Theres a Direct link to the program here
    http://download.bleepingcomputer.com/farbar/FSS.exe

    Now "double click" on the downloaded file to run the scanner , the scanner program will now open

    tick all the options. and then click on scan

    the scan results will open automatically in a seperate window in the notepad program.

    Now all you need to do is copy and paste those results to a reply here
    to do that:
    From the notepad menu - choose Edit - Select all
    all the text will be highlighted
    Next
    From the notepad menu - choose Edit - Copy
    Now go back to the forum - reply and then right click in the reply box and paste

    if you have any issues. A log file called FSS.txt will be created in the same directory as the program is run from.

    ------------------------------------------------------------------------
     
  3. expat007

    expat007 Thread Starter

    Joined:
    Apr 12, 2012
    Messages:
    13
    Here's the Farbar Log. I have to boot back and forth between Linux and Win7 to get the other stuff.
    I already did the resets, etc. Once manually and once with another Repair Uitlity (CIntRep.exe).

    I also ran sfc /scannow. No integrity problems were reported.
    The logs from the 2 programs I ran are below.
    The ipconfig /all will have to wait for a reboot, since I have to boot in and out of Linux to get a connection, but I can pretty much recreate it from memory.
    It had two items.

    Tunnel adapter Teredo Tunneling Pseudo-Interface
    Media State...................................: Media disconnected
    Connection-specific DNS suffix..........:

    Tunnel adapter 6TO4 Adapter:
    Connection-specific DNS Suffix..........:
    IPV6 Address...................................:
    Default Gateway...............................:

    That's it. That's all there was other than a small header section that is standard and contained nothing.

    I see Fabar is reporting that Google and Yahoo are accessible. Not sure how that helps, but it explains why the device manager is reporting the NIC is working.

    =====================================================================

    Farbar Service Scanner Version: 01-03-2012
    Ran by User (administrator) on 12-04-2012 at 10:03:37
    Running from "C:\Users\User\Desktop"
    Microsoft Windows 7 Professional Service Pack 1 (X86)
    Boot Mode: Normal
    ****************************************************************

    Internet Services:
    ============

    Connection Status:
    ==============
    Localhost is accessible.
    There is no connection to network.
    Google IP is accessible.
    Yahoo IP is accessible.


    Windows Update:
    ============

    File Check:
    ========
    C:\Windows\system32\nsisvc.dll => MD5 is legit
    C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
    C:\Windows\system32\dhcpcore.dll => MD5 is legit
    C:\Windows\system32\Drivers\afd.sys => MD5 is legit
    C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
    C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
    C:\Windows\system32\dnsrslvr.dll => MD5 is legit
    C:\Windows\system32\wuaueng.dll => MD5 is legit
    C:\Windows\system32\qmgr.dll => MD5 is legit
    C:\Windows\system32\es.dll => MD5 is legit
    C:\Windows\system32\cryptsvc.dll => MD5 is legit
    C:\Windows\system32\svchost.exe => MD5 is legit
    C:\Windows\system32\rpcss.dll => MD5 is legit


    **** End of log ****

    ===================================================

    Here's a log from CIntRep. I ran this twice because I had missed a function the first time.

    (o o)
    --------------------------------------oOOo-(_)-oOOo--------------------------------------
    [12/04/2012 09:49:44] Resetting all TCP/IP Interfaces, Please wait.....
    -----------------------------------------------------------------------------------------
    [12/04/2012 09:49:45] TCP/IP interfaces reset successful.
    [12/04/2012 09:49:45] TCP/IP v6 interfaces reset successful.
    [12/04/2012 09:49:46] You may need to restart your computer for the settings to take effect.
    [12/04/2012 09:49:46] Finished resetting the Internet Protocol (TCP/IP).

    -----------------------------------------------------------------------------------------
    [12/04/2012 09:49:54] Resetting all TCP/IP Interfaces, Please wait.....
    -----------------------------------------------------------------------------------------
    [12/04/2012 09:49:54] TCP/IP interfaces reset successful.
    [12/04/2012 09:49:54] TCP/IP v6 interfaces reset successful.
    [12/04/2012 09:49:54] You may need to restart your computer for the settings to take effect.
    [12/04/2012 09:49:54] Finished resetting the Internet Protocol (TCP/IP).

    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:13] Resetting all TCP/IP Interfaces, Please wait.....
    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:14] TCP/IP interfaces reset successful.
    [12/04/2012 09:50:14] TCP/IP v6 interfaces reset successful.
    [12/04/2012 09:50:14] You may need to restart your computer for the settings to take effect.
    [12/04/2012 09:50:14] Finished resetting the Internet Protocol (TCP/IP).

    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:14] Attempting to reset Winsock catalog, Please wait.....
    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:14] Successfully reset the Winsock Catalog.
    [12/04/2012 09:50:14] Finished repairing Winsock

    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:14] Releasing TCP/IP connections, Please wait.....
    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:15] Successfully released TCP/IP connections.

    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:15] Renewing TCP/IP connections, Please wait.....
    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:15] Successfully renewed TCP/IP adapters.

    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:15] Configuring the Windows Event Log Service, Please wait.....
    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:19] Windows Event Log Service Configured.
    [12/04/2012 09:50:19] Starting the Windows Event Log Service.....
    [12/04/2012 09:50:19] Windows Event Log Service Started Successfully.

    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:19] Flushing DNS Resolver Cache, Please wait.....
    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:19] Successfully flushed DNS Resolver Cache.
    [12/04/2012 09:50:19] Refreshing all DHCP leases and re-registering DNS names, Please wait.....
    [12/04/2012 09:50:22] Registration of the DNS resource records has been initiated.
    [12/04/2012 09:50:22] Note: Any errors will be reported in the 'Event Viewer' in about 15 minutes.
    [12/04/2012 09:50:22] Note: Click on 'File' and then 'Event Viewer...' to open the Event Viewer.

    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:22] You will need to reboot your computer before the settings will take effect.
    -----------------------------------------------------------------------------------------
    [12/04/2012 09:50:34] Your computer is restarting now.....
     
  4. expat007

    expat007 Thread Starter

    Joined:
    Apr 12, 2012
    Messages:
    13
    Well, it looks like there were a couple more lines in the ipconfig text. Still nothing exciting.

    *******************************************************************

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\Users\User>ipconfig /all

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : User-PC
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No

    Tunnel adapter Teredo Tunneling Pseudo-Interface:

    Media State . . . . . . . . . . . : Media disconnected
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter 6TO4 Adapter:

    Media State . . . . . . . . . . . : Media disconnected
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Microsoft 6to4 Adapter
    Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
     
  5. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,252
    First Name:
    Wayne
    thats an interesting tool not seen that before - looks good

    and now running out of ideas

    seen this before , but cant remember if we managed to fix it here

    lets just check these services

    ------------------------------------------------------------------------
    Services

    We would like to see some status information for each of the services listed below to do this goto

    Start> {Run in XP} {Search box in Vista/W7}> CMD to open a DOS window and type:
    SERVICES.MSC
    OR
    Control Panel>
    Administrative Tools>
    Services>

    then for each of the servies listed below - Please post back the following status information -
    If the service is Started/Stopped
    and
    If the service is Automatic/Manual

    • COM+ Event System (for WZC issues)
    • Computer Browser
    • DHCP Client
    • DNS Client
    • Network Connections
    • Network Location Awareness
    • Remote Procedure Call (RPC)
    • Server
    • TCP/IP Netbios helper
    • Wireless Zero Configuration (XP wireless configurations only)
    • WLAN AutoConfig (Windows 7 & Vista wireless configurations only)
    • Workstation


    If a service is not running,
    right click on the service
    then click on properties and now check the dependencies.

    Check each of the dependencies and see which one is preventing the service from running.
     
  6. expat007

    expat007 Thread Starter

    Joined:
    Apr 12, 2012
    Messages:
    13
    • COM+ Event System (for WZC issues) S/A
    • Computer Browser S/M
    • DHCP Client S/A
    • DNS Client S/A
    • Network Connections S/M
    • Network Location Awareness S/M
    • Remote Procedure Call (RPC) STOPPED/MANUAL.
    • Server S/A
    • TCP/IP Netbios helper S/A
    • Wireless Zero Configuration (XP wireless configurations only) N/A
    • WLAN AutoConfig (Windows 7 & Vista wireless configurations only) N/A
    • Workstation S/A
    O.K., They were all started except RPC which, according to windows, provides no functionality and has no dependencies.


    S= Started. A=Automatic. M=Manual. N/A=Not Applicable.
     
  7. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,252
    First Name:
    Wayne
    what happens when you start Remote Procedure Call
     
  8. expat007

    expat007 Thread Starter

    Joined:
    Apr 12, 2012
    Messages:
    13

    As far as I can discern, nothing.
     
  9. expat007

    expat007 Thread Starter

    Joined:
    Apr 12, 2012
    Messages:
    13
    Is this event log any help?
    I just found it in the Event Manager.
    It was logged right about the time my connection crashed.
    Could it be a matter of editing the registry?
    I'm fairly clueless about doing interpreting this stuff, but I can edit or revise the registry if I know just what to find and delete and/or revise.
    But hey! According to this, it should only take 70 seconds, right? :)


    **************************************************************

    + System

    - Provider

    [ Name] Microsoft-Windows-Diagnostics-Networking
    [ Guid] {36C23E18-0E66-11D9-BBEB-505054503030}

    EventID 4000

    Version 1

    Level 4

    Task 4

    Opcode 0

    Keywords 0x4000400000000001

    - TimeCreated

    [ SystemTime] 2012-04-12T01:52:23.662353000Z

    EventRecordID 3923908

    - Correlation

    [ ActivityID] {2FD171E5-DC3B-47BE-8465-CF94C0BE1DC9}

    - Execution

    [ ProcessID] 1692
    [ ThreadID] 1716

    Channel System

    Computer User-PC

    - Security

    [ UserID] S-1-5-19


    - EventData

    RootCause There might be a problem with the driver for the Local Area Connection adapter Windows couldn't automatically bind the IP protocol stack to the network adapter.
    RootCauseGUID {46EC1E49-CA70-4561-9AB7-009F6B1B3709}
    RepairOption Set up the 'Local Area Connection' adapter Set up the network adapter to communicate with this network. This ensures that both Internet Protocol Version 4 (TCP/IPv4) and Internet Protocol Version 6 (TCP/IPv6) can be used on the network adapter.
    RepairGUID {4406F2CC-9CBD-4098-A03A-E5C9810E4895}
    SecondsRequired 70
    SIDTypeRequired 37
    HelperClassName NdisHC
    InterfaceDesc Local Area Connection
    InterfaceGUID {E87B74C6-1D82-41F3-A792-3CA9360CB0A6}
     
  10. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,252
    First Name:
    Wayne
    Thats the problem I suspected.

    Hence the tcp/ip reset - which you have done a few times now
    and
    which was on my list to do
    and
    make and model of PC - download a driver from manufacturers website

    next would be the
    sfc /scannow

    pretty much out of ideas
    other than
    restore
    or
    recovery
     
  11. expat007

    expat007 Thread Starter

    Joined:
    Apr 12, 2012
    Messages:
    13
    I already did a sfc /scannow early on. I'm starting to think this is something to do with leftover AVG or Comodo security software. I've scoured the machine to eliminate any remnants of either of them, but AVG is particularly difficult to remove entirely, only second to ZoneAlarm. I'm thinking one of them may have modified or corrupted the registry.

    So the event log is no help? I mean, I already knew the issue with binding the protocol stack. I determined that right in the "network & sharing" section. The question is how to repair it and I was hoping that the event log, particularly this section, may shed some light.

    RootCause There might be a problem with the driver for the Local Area Connection adapter Windows couldn't automatically bind the IP protocol stack to the network adapter.
    RootCauseGUID {46EC1E49-CA70-4561-9AB7-009F6B1B3709}
    RepairOption Set up the 'Local Area Connection' adapter Set up the network adapter to communicate with this network. This ensures that both Internet Protocol Version 4 (TCP/IPv4) and Internet Protocol Version 6 (TCP/IPv6) can be used on the network adapter.
    RepairGUID {4406F2CC-9CBD-4098-A03A-E5C9810E4895}
    SecondsRequired 70

    SIDTypeRequired 37
    HelperClassName NdisHC
    InterfaceDesc Local Area Connection
    InterfaceGUID {E87B74C6-1D82-41F3-A792-3CA9360CB0A6}

    When I located the Root Cause GUID number in PC-Tools registry editor, it reported 3 instances under the same key. On all of them it reported that the D-values were invalid (2 bytes). I wonder what would happen if I deleted those values, or replaced them with the "RepairGUID"s.

    There were no instances of the "RepairGUID" in the registry. Do you know what that means, why those are even listed or why they say 70 seconds are required from someone with Security ID (SID) of 37?

    I cannot do a restore/recovery because my VSS was turned off and there are no restore points. I can't even do a re-install because the rinky-dink place I got this machine from never gave me a disk.
     
  12. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,252
    First Name:
    Wayne
  13. expat007

    expat007 Thread Starter

    Joined:
    Apr 12, 2012
    Messages:
    13
    No, I used Revo uninstaller on both of them. I wonder if they'll hunt down remnants from already uninstalled programs? I'll check them out. Thanks for the links.
     
  14. etaf

    etaf Moderator

    Joined:
    Oct 2, 2003
    Messages:
    65,252
    First Name:
    Wayne
    be interested to know the results of that - Revo often used here - so if the removal tools do find something, then that would be useful to others here
     
  15. expat007

    expat007 Thread Starter

    Joined:
    Apr 12, 2012
    Messages:
    13
    The Comodo link was just an old FAQ. I didn't see anything on it. I had manually searched all the directories and the registry for any remnants anyway and didn't find anything but some innocuous directories, so Revo did a good job with that.

    I ended up using the AVG removal tool and it didn't seem to find much, although I couldn't tell because it runs in a DOS window and everything scrolls by very fast. I can say that it warns you that a couple of reboots could be necessary, but it didn't ask for one, so I assume it didn't find anything too important. But who knows?
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1049018

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice