Windows Legacy OS forum

Resolved Question

Internet connection, but can't access internet (DNS issue)

by passion4muzik / January 7, 2012 12:18 AM PST

I had a virus and during the process of trying to remove it, I lost my internet connection. I tried several things including registry fixes, uninstalling/reinstalling Internet Protocoll, etc. I went to another site to get help and was able to remove the viruses and my computer went from constantly acquiring network connection to being connected, however I can't browse the internet and applications like Yahoo messenger won't log me in. It is some sort of DNS issue because I was able to access google and yahoo by typing in a numeric web address, but not the regular name of the sites. When I ran "diagnose connection problems" the log said that there is DNS failure and says "No DNS servrers". There are also errors in the log saying that there are no connections for HTTP, HTTPS or FTP and errror 12007 connectiong to www.microsoft.com.
Please help!

Discussion is locked
You are posting a reply to: Internet connection, but can't access internet (DNS issue)
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Internet connection, but can't access internet (DNS issue)
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.

All Answers

Best Answer as chosen by passion4muzik

Collapse -
Stumper
by R. Proffitt Forum moderator / January 7, 2012 1:55 AM PST

With no name of the virus, no OS mentioned and no sharing of the current DNS or virus protection or much else I fear that we may have to save our files and reload the OS.
Bob

Collapse -
Internet connection, but can't access internet
by passion4muzik / January 7, 2012 4:38 AM PST
In reply to: Stumper

I don't remember the exact name, but it was one that ran the fake anti-virus software. There was also a process called Ping.exe in the processes that increasingly took up a lot of memory and would reappear after being killed from processes. I'm on XP, as this is the XP forum. I'm using an IBM Thinkpad and have a wired connection. Here is the diagnostic log from internet explorer:
Last diagnostic run time: 01/05/12 18:25:10 DNS Client Diagnostic
DNS - Not a home user scenario
info Using Web Proxy: no
info Resolving name ok for (www.microsoft.com): no
No DNS servers
DNS failure
info Query [www.microsoft.com] against DNS Server 24.217.0.5, (Type = 0x1, Options = 0x10e8) returns 0x2726
info Query [www.microsoft.com] against DNS Server 24.217.201.67, (Type = 0x1, Options = 0x10e8) returns 0x2726
info Query [www.microsoft.com] against DNS Server 24.247.15.53, (Type = 0x1, Options = 0x10e8) returns 0x2726
action Automated repair: Renew IP address
action Releasing the current IP address...
action Successfully released the current IP address
action Renewing the IP address...
action Successfully renewed the current IP address
info Query [www.microsoft.com] against DNS Server 24.217.0.5, (Type = 0x1, Options = 0x10e8) returns 0x2726
info Query [www.microsoft.com] against DNS Server 24.217.201.67, (Type = 0x1, Options = 0x10e8) returns 0x2726
info Query [www.microsoft.com] against DNS Server 24.247.15.53, (Type = 0x1, Options = 0x10e8) returns 0x2726
info Redirecting user to support call

Gateway Diagnostic
Gateway
info The following proxy configuration is being used by IE: Automatically Detect Settings:Enabled Automatic Configuration Script: Proxy Server: Proxy Bypass list:
info Could not get proxy settings via the Automatic Proxy Configuration mechanism
info This computer has the following default gateway entry(ies): 192.168.0.1
info This computer has the following IP address(es): 192.168.0.3
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue
action Automated repair: Renew IP address
action Releasing the current IP address...
action Successfully released the current IP address
action Renewing the IP address...
action Successfully renewed the current IP address
info This computer has the following default gateway entry(ies): 192.168.0.1
info This computer has the following IP address(es): 192.168.0.3
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue
action Automated repair: Reset network connection
action Disabling the network adapter
action Enabling the network adapter
info Network adapter successfully enabled
error Unexpected error from iphlpapi: The pipe is being closed.
error Unexpected error from iphlpapi: The pipe is being closed.
error Unexpected error from iphlpapi: The pipe is being closed.
info This computer has the following default gateway entry(ies): 192.168.0.1
info This computer has the following IP address(es): 192.168.0.3
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue
action Manual repair: Reboot modem
info This computer has the following default gateway entry(ies): 192.168.0.1
info This computer has the following IP address(es): 192.168.0.3
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue
info Waiting some time for the modem/router to stabilize
action Automated repair: Renew IP address
action Releasing the current IP address...
action Successfully released the current IP address
action Renewing the IP address...
action Successfully renewed the current IP address
info This computer has the following default gateway entry(ies): 192.168.0.1
info This computer has the following IP address(es): 192.168.0.3
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue
info Waiting some time for the modem/router to stabilize
action Automated repair: Renew IP address
action Releasing the current IP address...
action Successfully released the current IP address
action Renewing the IP address...
action Successfully renewed the current IP address
info This computer has the following default gateway entry(ies): 192.168.0.1
info This computer has the following IP address(es): 192.168.0.3
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue
info Waiting some time for the modem/router to stabilize
action Automated repair: Renew IP address
action Releasing the current IP address...
action Successfully released the current IP address
action Renewing the IP address...
action Successfully renewed the current IP address
info This computer has the following default gateway entry(ies): 192.168.0.1
info This computer has the following IP address(es): 192.168.0.3
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue
info Waiting some time for the modem/router to stabilize
action Automated repair: Renew IP address
action Releasing the current IP address...
action Successfully released the current IP address
action Renewing the IP address...
action Successfully renewed the current IP address
info This computer has the following default gateway entry(ies): 192.168.0.1
info This computer has the following IP address(es): 192.168.0.3
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
warn Hostname www.microsoft.com could not be resolved (Error code 0x2afc). Could be either gateway or DNS issue

IP Layer Diagnostic
Corrupted IP routing table
info The default route is valid
info The loopback route is valid
info The local host route is valid
info The local subnet route is valid
Invalid ARP cache entries
action The ARP cache has been flushed

IP Configuration Diagnostic
Invalid IP address
info Valid IP address detected: 192.168.0.3

Wireless Diagnostic
Wireless - Service disabled
Wireless - User SSID
Wireless - First time setup
Wireless - Radio off
Wireless - Out of range
Wireless - Hardware issue
Wireless - Novice user
Wireless - Ad-hoc network
Wireless - Less preferred
Wireless - 802.1x enabled
Wireless - Configuration mismatch
Wireless - Low SNR

Collapse -
THE ISSUE IS NOT RESOLVED.
by passion4muzik / January 7, 2012 4:49 AM PST

I accidentally pressed resolve and I don't know how to reverse it.

Collapse -
So it appears
by R. Proffitt Forum moderator / January 7, 2012 4:54 AM PST

That you could put in a valid DNS entry? But haven't?

All that and the basics are not told. For example.

"I use a manual IP setup with 192.168.0.3 for my machine.
My Netmask is 255.255.255.0
My gateway entry is 192.168.0.1
My DNS entries are __________ and ___________"

Collapse -
dns entries
by passion4muzik / January 7, 2012 5:26 AM PST
In reply to: So it appears

I'm not well versed in computer technology nor have I had this issue before, so I don't know exactly what anyone would need in order to try to help with the issue. Where am I able to get the DNS entries from?

Collapse -
From?
by R. Proffitt Forum moderator / January 7, 2012 5:32 AM PST
In reply to: dns entries

English has failed us here. I get my DNS entries from Google. I use the Google DNS at 8.8.8.8 and 8.8.4.4 per Google's web pages on same.

Or you could be asking where to see the DNS entries on your XP PC. I have to ask forgiveness here but XP is over a decade old and I'm unsure how a person could avoid using XP for this many years without learning about the control panels. But let's find out how to get the current DNS entries FROM our Windows XP PC.

Read http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ipconfig.mspx?mfr=true

I use the /all command and there it is. There are also GUI interfaces but I like this since I have a DNSFLUSH command there.
Bob

Collapse -
Are you here to help?
by passion4muzik / January 7, 2012 5:46 AM PST
In reply to: From?

I don't know if you're having a bad day or if you hate being a moderator here, but every reply from you has been dripping with condescension, sarcasm and rudeness. People who are seeking help are already in vulnerable positions and do not need to be belittled and insulted by you. Do you want to help me get an internet connection or do you want to continue to tell me my operating system is old and tell me what you think I should know how to do?

Collapse -
Yes.
by R. Proffitt Forum moderator / January 7, 2012 5:50 AM PST
In reply to: Are you here to help?

Sorry that it sounds so bad. English fails us from time to time and you need to keep trying.

I could not tell what "from" you meant. It could be from the ISP or from the PC.

We're very close to finding the DNS but I see you are upset with how technical all this is and how you are expected to become a network guru in 4 minutes.

I make no apologies for the industry that did this to you.
I will try to fix this but it's still your choice to try or not try.
Bob

Collapse -
IP Config
by passion4muzik / January 7, 2012 6:18 AM PST
In reply to: Yes.

After using the command "ipconfig" in the Command Prompt this is what displays:
Connection-specific DNS Sufix . :
IP Addres . . . . . . . . . . . . . . . . . . . : 192.168.0.3
Subnet Mask .................................: 255.255.255.0
IP Address .....................................: ?
Default Gaeway .............................: 192.168.0.1
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix ..:
IP Address ...................................: ?
Default Gateway ..........................:

Collapse -
I use the /all command and there it is.
by R. Proffitt Forum moderator / January 7, 2012 6:25 AM PST
In reply to: IP Config
Collapse -
It didn't work
by passion4muzik / January 7, 2012 6:37 AM PST

I changed the settings to a google DNS and I was still unable to browse. When I type in a web address such as www.yahoo.com , http:/// appears in the address bar and the message on the webpage says "The address is not valid"

Collapse -
A few more things.
by R. Proffitt Forum moderator / January 7, 2012 6:43 AM PST
In reply to: It didn't work

1. I'm not there so I can't tell if you rebooted the machine.

2. Notice the third slash in the http:/// That's broken so let's try to fix that. IE has a RESET DEFAULTS button so go do that now. Link about? Sure but first.

3. RESEARCH THESE THINGS. Here's my research.
https://www.google.com/search?q=three+slashes+in+http

Notice the second hit at http://www.joewein.de/sw/ie-http-three-slashes.htm

I wonder if the trojan is still there?

Here's a link to the IE reset -> http://blogs.msdn.com/b/ie/archive/2006/06/12/628499.aspx

Hope this helps. It appears the damage is still there or the trojan is still there. If all the above is not helping, it's time for our friend Grif to offer what to scan with. Grif tells at at this link.
-> Then Please Try This.. - CNET Spyware, viruses, & security Forums

Bob

Collapse -
No viruses
by passion4muzik / January 7, 2012 8:14 AM PST
In reply to: A few more things.

I ran all of those programs previously and I'm virus free. I reset IE, still no connection. I can't log into Yahoo messenger either.

Collapse -
Re: DNS error
by Kees_B Forum moderator / January 7, 2012 6:02 AM PST
In reply to: Are you here to help?

What Bob asked you is to tell him something like this:

"I use a manual IP setup with 192.168.0.3 for my machine.
My Netmask is 255.255.255.0
My gateway entry is 192.168.0.1
My DNS entries are __________ and ___________"

More likely than not, your IP isn't manual but automatic from DHCP, but that would show up also when you run IPCONFIG. And Bob gave a link for that also.

So why not answer his question in stead of starting a discussion about his posting habits.

Kees

Collapse -
Answer
Sorry I can't see the screens.
by R. Proffitt Forum moderator / January 7, 2012 9:29 AM PST

I hear you ran all the scans yet the TRIPLE SLASH on the HTTP is a big clue there is some damage. Until you fix that TRIPLE SLASH nothing else matters. We could have a good DNS and more but with the TRIPLE SLASH the damage or rogue is still there.

We can focus on this now.
Bob

Collapse -
Okay
by passion4muzik / January 7, 2012 12:27 PM PST

So what do you suggest next?

Collapse -
I think
by R. Proffitt Forum moderator / January 7, 2012 12:50 PM PST
In reply to: Okay

I want to read more details. I can't tell when or if you rebooted and never got the full IPCONFIG /ALL output.

I feel we are getting close to the solution but a little more detail from the machine would be nice. The output of a HIJACKTHIS LOG would tell me if there are some addons to the Internet Explorer we need to turf too.

I think we are going to have to wait for some more clues from the ipconfig and log to see what to do next.

If you paste that into the reply, be sure to click the button to the right of the smiley face first or it will be hard to read in the forum.
Bob

Collapse -
Ipconfig/all
by passion4muzik / January 7, 2012 3:30 PM PST
In reply to: I think

I have the result from ipconfig/all from CMD followed by the hijack this log:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Muzik>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : IBM-EE1D0E584D1
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 8:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connecti
on #2
Physical Address. . . . . . . . . : 00-0A-E4-37-D5-DE
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : ?
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 24.217.0.5
24.217.201.67
24.247.15.53
?
?
?
Lease Obtained. . . . . . . . . . : Sunday, January 08, 2012 1:09:27 AM
Lease Expires . . . . . . . . . . : Sunday, January 08, 2012 2:09:27 AM

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : FF-FF-FF-FF-FF-FF-FF-FF
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : ?
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Documents and Settings\Muzik>

Collapse -
That shows that Charter DNS.
by R. Proffitt Forum moderator / January 8, 2012 2:09 AM PST
In reply to: Ipconfig/all
Collapse -
I have a modem/router combo
by passion4muzik / January 8, 2012 2:26 AM PST

I have a modem/router combo, so if it were Charter then wouldn't it affect both computers? I'm using a relative's computer to access the internet and it's plugged into the same modem.

Collapse -
Sorry but what am I to do now?
by R. Proffitt Forum moderator / January 8, 2012 2:36 AM PST

As my advice is upsetting you and can't be used I have unsubscribed from this discussion.

Good luck and hope it's that hosts entry and the trojan triple slash issue is resolved.
Bob

Collapse -
I'm not upset
by passion4muzik / January 8, 2012 2:44 AM PST

I can't even imagine how you concluded I was upset based on anything I typed in that post. I was asking you if a DNS could affect one computer plugged into a modem but not another.

Collapse -
Neither am I
by R. Proffitt Forum moderator / January 8, 2012 3:07 AM PST
In reply to: I'm not upset

But I work as if the machine is using the Google DNS and you didn't tell me you changed it back. We can start a conversation about affect one computer or the other OR we can focus on the machine that is not working.

You have 3 open issues that any or all could be it. It may something else but let's list them.

1. What looks to be some corrupt entry in the HOSTS file.
2. The TRIPLE SLASH on the HTTP line.
3. The former DNS missing issue might have been cleared up but I would have stayed with Google DNS since this gives me a way to check a DNS lookup. Since you changed back to Charter I can't check on the lookups and why I can't help you.
Bob

Collapse -
Hiack This log
by passion4muzik / January 7, 2012 4:06 PM PST
In reply to: I think

When I tried to paste the log, I got a message stating only characters on English keyboards will be accepted, so I had to upload the txt file to a file sharing site. I hope that's acceptable unless there's another way I can share the log.
http://www.sendspace.com/file/xb5twr

Collapse -
Do you see the trash on the HOSTS line?
by R. Proffitt Forum moderator / January 8, 2012 2:17 AM PST
In reply to: Hiack This log

It's the line about hosts. The usual 127.0.0.1 has some trash just before the 127. This could cause some strange issues.

We have a recent discussion about editing the hosts file (rather long) but since I may offend you, do you want to research how to edit it or would you be OK with a link?
Bob

Collapse -
That's fine
by passion4muzik / January 8, 2012 2:27 AM PST

Yes, I'm fine with a link -- anything to get my internet connection back.

Collapse -
The same thing happened to me in the past...
by fjord_fox / January 7, 2012 2:10 PM PST
In reply to: Okay

When I had the same problem you're having, nothing worked. On MSN Messenger, I got an error code of 80072ee7. Is that what you get when you try to log onto MSN? I searched webpage after webpage concerning that error number, and even did the same steps found in this thread, but nothing worked.
The solution that I ended up using was to use System Restore to go back to a time before this happened. That was the only thing that worked.

Incidentally, my problem began after using Revo Uninstaller to uninstall a program, with advanced settings, and deleting some registry settings that it turned out, were needed. I was removing "Microsoft Security Essentials" from the person's computer and what popped up were security settings in the registry, but I have since found out that they were the Windows XP and Internet Explorer security settings. Without those in the registry, Windows XP didn't know how to connect to the Internet.

Try System Restore. Better yet, if you have a recent backup, use that.
~ Barry

Collapse -
Thank you
by passion4muzik / January 7, 2012 4:07 PM PST

Thanks for the response. Unfortunately, my system restore was turned off so I am unable to go back to a point before the loss of the internet connection.

Collapse -
Since this is WinXP
by lacsr / January 7, 2012 8:21 PM PST
In reply to: Thank you

And you are considering a complete reinstall of the OS, it could be possible to do a "repair install" first. Of course, if the unwanted intruder is still on the system, then it will reappear. A "repair install" will allow all of the installed programs to remain. If you are positive the intruder is gone, then try this method. Of course you will need a CD of the original WinXP to accomplish this.

Collapse -
Thank you
by passion4muzik / January 8, 2012 1:27 AM PST
In reply to: Since this is WinXP

Unfortunately, the computer was given to me by a relative and I don't have in instillation disc.

Popular Forums
icon
Computer Help 47,885 discussions
icon
Computer Newbies 10,322 discussions
icon
iPhones, iPods, & iPads 3,188 discussions
icon
Security 30,333 discussions
icon
TVs & Home Theaters 20,177 discussions
icon
HDTV Picture Setting 1,932 discussions
icon
Phones 15,713 discussions
icon
Windows 7 6,210 discussions
icon
Networking & Wireless 14,510 discussions

Big stars on small screens

Smosh tells CNET what it took to make it big online

Internet sensations Ian Hecox and Anthony Padilla discuss how YouTube has changed and why among all their goals, "real TV" isn't an ambition.