Question : Cannot renew IP address on WinXP

Hello:

My Windows XP Pro computer was recently infected with some substantial viruses.  I successfully cleared the viruses with virus removal software, but then the computer did not have access to the Internet.

Here is what I have done:
1.  Ran "netsh int ip reset" command.
2.  Manually removed "winsock" and "winsock2" branches in HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
3.  Removed network adapter driver, rebooted.

Still no Internet access.  I ran "ipconfig /release" from cmd line, but when I attempt "ipconfig /renew", error message says cannot renew IP address / node is unavailable.

When I querry "ipconfig", IP address is 169.254.x.y, with subnet 255.255.0.0.  Microsoft documentation says such an IP address indicates that Automatic Private IP Addressing" (APIPA) is activated.  It suggests that DHCP is not functioning.

Should I run "netsh winsock reset catalog" command?  Please give only procedures that you have known to work, in instances where you have actually experienced this problem.  Please do not simply post suggestions gleaned from the Internet.

Thank you.

Answer : Cannot renew IP address on WinXP

FIXED!!  After many hours, here are the exact steps that I needed to follow to restore Internet web browsing:

1.      Run Avast boot-time scan
2.      Run Malwarebytes in Safe Mode, reboot into Safe Mode, repeat Malwarebytes.  Make sure no malware is found in the second scan.  Otherwise, remove malware and rescan a third time in Safe Mode.
3.      Run SuperAntiSpyware in normal Windows mode.  Reboot.
4.      Uninstall completely Avast anti-virus and any other firewall or anti-virus software that may be installed..

[On Vista, find cmd.exe icon, right-click, then “run as administrator” from the context menu]
5.      Run “netsh int ip reset” from command line
6.      Run “netsh winsock reset catalog” (if this step cannot be completed, don’t worry)
Reboot

. . . if web browsing not working . . .
7.      Run cmd, “ipconfig /release”, then “ipconfig /renew”.
8.      Manually remove "winsock" and "winsock2" branches in regedit, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services.
Remove all network adapter drivers in Device Manager, reboot.

9.      Run “MicrosoftFixit50203.msi” (from MS kb811259, http://support.microsoft.com/kb/811259).  Reboot.
10.      Ensure the existence of DHCP dependency files "afd.sys", "tcpip.sys", and "netbt.sys" in C:\Windows\System32\Drivers folder.
11.      In Device Manager, click “Show hidden devices”, double-click “Non-Plug and Play devices”, double-click AFD, Driver tab, set “Startup Type” to “System” and repeat for both “TCP/IP Protocol Driver” and “NetBios over tcpip”.
12.      Run “MicrosoftFixit50199.msi” (from MS kb299357, http://support.microsoft.com/kb/299357).  Reboot.
13.      Run “WinsockxpFix.exe” (from http://www.snapfiles.com/get/winsockxpfix.html).  Reboot.
14.      Run XP TCP/IP Repair 2.0 ("xptcprep.exe" from http://www.xp-smoker.com/freeware.html).  Click “Repair Winsock” button, then “Reset TCP/IP” button.  Reboot.
15.      Run “LSPFix.exe” (from http://www.cexx.org/lspfix.htm).  Reboot.
16.      Test Internet connectivity:  open cmd window, type “ping –t www.fellows.com”.  You should receive “Reply from [ip address]” many times.  Press Ctrl+c to cancel.
17.      Control Panel, Network Connections, right-click “Local Area Connection,” Properties, select “Internet Protocol (TCP/IP)” in the box, then click “Properties” button, “Advanced…” button, “Options” tab, select “TCP/IP filtering,” then “Properties” button, then change all three columns to “Permit All”, then uncheck “Enable TCP/IP Filtering (All adpaters)” and confirm the dialog.  Click “OK” four times to return to Control Panel, then reboot computer.
18.      Go to Control Panel, Internet Options, “Connections” tab, “LAN settings” button, uncheck “Use a proxy server for your LAN” and the other two boxes, “Automatically detect settings” and “Use automatic configuration script.”  Reboot computer.
19.      Reinstall Avast! free Home Edition anti-virus.







====================================================

Here is some further information which I did NOT have to use:
Step #1
Full uninstall of TCP/IP ... no bullbleep.
----------------------------------------------------------------------
These steps are copied from http://support.microsoft.com/kb/325356
1. Locate the Nettcpip.inf file in %winroot%\inf, and then open the file in Notepad.
2. Locate the [MS_TCPIP.PrimaryInstall] section.
3. Edit the Characteristics = 0xa0 entry and replace 0xa0 with 0x80.
4. Save the file, and then exit Notepad.
5. In Control Panel, double-click Network Connections, right-click Local Area Connection, and then select Properties.
6. On the General tab, click Install, select Protocol, and then click Add.
7. In the Select Network Protocols window, click Have Disk.
8. In the Copy manufacturer's files from: text box, type c:\windows\inf, and then click OK.
9. Select Internet Protocol (TCP/IP), and then click OK.
Note This step will return you to the Local Area Connection Properties screen, but now the Uninstall button is available.
10. Select Internet Protocol (TCP/IP), click Uninstall, and then click Yes.
RESTART

succesfull uninstallation of TCP/IP will remove numerous keys from the registry including
HKLM/system/CurrentControlSet/services/tcpip
HKLM/system/CurrentControlSet/services/dhcp
HKLM/system/CurrentControlSet/services/dnscache
HKLM/system/CurrentControlSet/services/ipsec
HKLM/system/CurrentControlSet/services/policyagent
HKLM/system/CurrentControlSet/services/atmarpc
HKLM/system/CurrentControlSet/services/nla
These represent various interconnected and interdependant services.

For good measure you should delete the following keys before reinstalling TCP/IP in step #2
HKLM/system/CurrentControlSet/services/winsock
HKLM/system/CurrentControlSet/services/winsock2

Step #2
Reinstall of TCP/IP
----------------------------------------------------------------------
Following the above substep #13, replace the 0x80 back to 0xa0, this will eliminate the related "unsigned driver" error that was encountered during the uninstallation phase.

Return to "local area connection"> properties > general tab > install > Protocol > TCP/IP

You may receive an "Extended Error" failure upon trying to reinstall the TCP/IP, this is related to the installer sub-system conflicting with the security database status.

to check the integrity of the security database
esentutl /g c:\windows\security\Database\secedit.sdb

There may be a message saying database is out of date
first try the recovery option
esentutl /r c:\windows\security\Database\secedit.sdb

this did not work for me, I needed the repair option
esentutl /p c:\windows\security\Database\secedit.sdb

rerun the /g option to ensure that integrity is good and database is up to date.

Now return to the "local area network setup"
choose install > protocol > tcp/ip and try again

reboot.

Random Solutions  
 
programming4us programming4us