DNS not found after virus removal

[elzmo]

Hi I started to clean viruses from my nieces netbook using ad-aware and spybot and seemed to be going fine then on startup I get messages telling me delldock has a problem and dsca.exe is missing. I thought I coud fix these by going to dell support online but the internet would not connect. I called my isp and they confirmed that the netbook was showing on my network. (My desktop and laptop are both on same network and working fine) They tried all the usual stuff, making me try to ping in cmd and changing settings but none worked.

This is a refurbished dell netbook running XP.

I have tried running the usual suspects ie combofix and hijack this but nothing.
As I cant get any internet connection via IE or firefox, I have to download to usb and run. I then save any info to usb.

Please can someone help.

[Techmonkey]

Hi Elzmo, Welcome to Techmonkeys.

Let me check a few things

1) The netbook is showing as connected to your network but your not getting internet?

If so can do the following on both machines on your network:

Click START > RUN > cmd > OK

In the black screen thats comes up type: ipconfig /all > c:\ipconfig.txt then press ENTER.

Now look on the C: drive of the machine and you will find a file called ipconfig.txt

Can you copy and paste the contents to your next reply

[elzmo]

Thanks for getting back to me.

Here is the report you asked for.

Windows IP Configuration



Host Name . . . . . . . . . . . . : owner

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : cable.virginmedia.net



Ethernet adapter Local Area Connection:



Media State . . . . . . . . . . . : Media disconnected

Description . . . . . . . . . . . : Realtek RTL8102E/RTL8103E Family PCI-E Fast Ethernet NIC

Physical Address. . . . . . . . . : 00-24-E8-CE-18-4C



Ethernet adapter Wireless Network Connection:



Connection-specific DNS Suffix . : cable.virginmedia.net

Description . . . . . . . . . . . : Dell Wireless 1397 WLAN Mini-Card

Physical Address. . . . . . . . . : 00-26-5E-3A-BE-AB

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.0.104

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.0.1

DHCP Server . . . . . . . . . . . : 192.168.0.1

DNS Servers . . . . . . . . . . . : 192.168.0.1

Lease Obtained. . . . . . . . . . : Monday, March 21, 2011 6:36:21 PM

Lease Expires . . . . . . . . . . : Monday, March 28, 2011 6:36:21 PM

[elzmo]

Hi,

Excuse my stupidity please, I just noticed that you asked for the log from both machines on my network.

The log sent previously was from the netbook that wont connect to the internet.

The following log is from my laptop on the same wireless network.

Windows IP Configuration

Host Name . . . . . . . . . . . . : morag-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Belkin

Wireless LAN adapter Wireless Network Connection 3:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
Physical Address. . . . . . . . . : 70-1A-04-2B-EB-F9
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wireless Network Connection 2:

Connection-specific DNS Suffix . : Belkin
Description . . . . . . . . . . . : Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter #2
Physical Address. . . . . . . . . : 70-1A-04-2B-EB-F9
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::894d:e86e:b3c0:694b%13(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.2.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 22 March 2011 15:43:43
Lease Expires . . . . . . . . . . : 28 April 2147 22:20:36
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.1
DHCPv6 IAID . . . . . . . . . . . : 335553119
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-C8-01-05-00-03-0D-DC-B7-C0
DNS Servers . . . . . . . . . . . : 192.168.2.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : Belkin
Description . . . . . . . . . . . : SiS191 Ethernet Controller
Physical Address. . . . . . . . . : 00-03-0D-DC-B7-C0
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:14cb:3456:3f57:fdfc(Preferred)
Link-local IPv6 Address . . . . . : fe80::14cb:3456:3f57:fdfc%16(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.Belkin:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : Belkin
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #6
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes



I dont know if you need it but I have also pasted below the log taken from my desktop which is connected via ethernet to the router.

Windows IP Configuration



Host Name . . . . . . . . . . . . : kids-275639abb0

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : cable.virginmedia.net



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . : cable.virginmedia.net

Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast Ethernet NIC

Physical Address. . . . . . . . . : 00-20-ED-B4-8B-EA

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.0.101

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.0.1

DHCP Server . . . . . . . . . . . : 192.168.0.1

DNS Servers . . . . . . . . . . . : 192.168.0.1

Lease Obtained. . . . . . . . . . : Tuesday, March 22, 2011 4:03:32 PM

Lease Expires . . . . . . . . . . : Tuesday, March 29, 2011 4:03:32 PM

[mjack547]

OK Elzmo

Just a head up I see the issue and Techmonkey will have you up and running in no time.

Just wanted to let you know you will be ok in a few hours since it is about 3am where Techmonkey is located at.

I'm losing my connection in about 5 minutes and I will not be back online till tomorrow other wise I be happy to jump in and give a helping hand :-)

[elzmo]

Thanks mjack347

You appear to be about 2 hours ahead of me. I will be online until approx 11a.m my time and then wont be back till 4p.m. so if I dont reply that will be the reason.

I hope you can help me get this fixed as my poor niece keeps asking if she can use her computer yet.

[Techmonkey]

Hi again,

So instead of helping those logs have confused matters more

The logs you gave us show your computes and their network addresses (IP addresses). These tell the computers how to talk to each other and how to talk to the internet. IP addresses should all be within the same range on all machines to allow them to all talk to each other.

So here's the issue as I see from your logs:

Non working Netbook (connected wireless)
IP Address. . . . . . . . . . . . : 192.168.0.104
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1

Working Laptop (Connected by Wireless)
IPv4 Address. . . . . . . . . . . : 192.168.2.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.1
DNS Servers . . . . . . . . . . . : 192.168.2.1

Straight away you can see that while both those laptops are on the same network (allegedly) they dont have addresses within the same range.

The non working laptop has and IP address in the range 192.168.0.X with a gateway and dns server of 192.168.0.1.

Whereas the working laptop has an IP in the rang of 192.168.2.X and a DNS/Gateway of 192.168.2.1.

So at this point I would have said to update the settings on the non-working laptop to match the working one, however the confusion is that on the desktop that is working, connected by cable you have:

Working Desktop
IP Address. . . . . . . . . . . . : 192.168.0.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1

This is in the same range and has the same DNS/gateway as the non-working laptop, but not the working laptop. So something is definitely mis-configured but what?

So from looking through the rest of the information it looks like the working laptop is connected to a different wireless router/access point to the non working one.

The Working ones is connected to a belkin router/access point whereas the non working one is connected directly to your VirginMedia Cable router, as is the desktop.

So putting aside the fact that the 2 laptops seem to be on different networks, can you do the following on the netbook and on the desktop (not working laptop).

1 - Click START > RUN > cmd > OK
2 - Type: tracert http://www.google.com > c:\tracert.txt and press ENTER


Again look on the C: of both the netbook and the desktop and copy the contents of the tracert.txt file back here.

Also can you let us know whether you have a Belkin wireless box as well as you VirginMedia router.

Thanks

[elzmo]

Hi Techmonkey

I have a motorola modem and a D-Link router. I used to have a netgear router but this was replaced. The working laptop was the first wireless item that I had and was set up with a disk from virgin on the netgear. I then named my network and connected printer and other laptops. When the router was replaced the desktop was configured by the virgin guy and I then reset the laptop. Could be that has caused the different details.

Here is the log you asked for.

Non working netbook

Unable to resolve target system name http://www.google.com.


Working desktop

Unable to resolve target system name http://www.google.com.


Don't know if this will help.
When these both came up with unable to resolve target I checked my working laptop and it has the exact same log so I hope this is the result you wanted.

Thanks

[Techmonkey]

Sorry Elzmo my fault, for some reason the site is putting http before the address

Can you try the above again, but without the http on the google address

[elzmo]

Hiya

Did the same leaving off the http.

Non working netbook gave the same unable to resolve message but the desktop gave the following.

Tracing route to http://www.l.google.com [74.125.230.146]

over a maximum of 30 hops:



1 7 ms 10 ms 9 ms 10.125.0.1

2 9 ms 7 ms 10 ms sgyl-core-1b-v11.network.virginmedia.net [62.31.64.41]

3 14 ms 14 ms 19 ms sgyl-core-1a-v99.network.virginmedia.net [195.182.179.73]

4 17 ms 14 ms 13 ms manc-bb-1c-ae3-0.network.virginmedia.net [195.182.178.90]

5 30 ms 15 ms 12 ms manc-bb-1b-ae6-0.network.virginmedia.net [213.105.159.89]

6 22 ms 21 ms 25 ms tele-ic-3-ae0-0.network.virginmedia.net [212.43.163.70]

7 31 ms 23 ms 23 ms 158-14-250-212.static.virginmedia.com [212.250.14.158]

8 27 ms 24 ms 23 ms 209.85.252.76

9 20 ms 19 ms 21 ms 209.85.251.58

10 30 ms 19 ms 18 ms 74.125.230.146



Trace complete.