Can't Get an IP Address

[Vicenarian]

Background:
Dell with Windows XP Home x86 SP3

Symptoms:
Can't get an IP address. Network icon in system tray constantly trying to connect to the network. IPconfig /all shows the adapter but with question marks (?) in the IP address field and also in DNS. However, there seems to be some stuck DNS entries in there too from when the connect last worked (ISP DNS servers)...really strange symptoms. I also noticed that windows won't let me disable the ethernet card.


Things I've tried:
netsh ip reset
winsock reset
flushed dns
windows firewall reset and repair (via d7)
Networking settings are set to get an IP automatically via DHCP, so that's not an issue.
booting into safe mode with networking; same problem
tried connecting to a different network; same problem
tried a wifi adapter; same issue
ran norton removal tool; same problem
Reset IE; check for proxies, etc.
Trying a system restore now...still waiting for it to complete


Anybody have tips on other things I can check? Thanks.

 

[Luis Rodriguez]

I had a similar issue and followed tweaking.com's all in one fixer. I can't pinpoint what the exact issue was since it looks at so many things, but it might be worth a try.

http://www.tweaking.com/content/page/windows_repair_all_in_one.html

 

[EmpireDigitalTech]

check to see if dhcp and dns services are running

 

[cooltech]

Have you check to see if you have a virus,trojons and anyother malware? also might try changing your dns to opendns or google dns

Opendns IP address 208.67.222.222,208.67.220.220
Google dns 8.8.8.8, 8.48.4.4

 

[cooltech]

Have you check to see if you have a virus,trojons and anyother malware? also might try changing your dns to opendns or google dns

Opendns IP address 208.67.222.222,208.67.220.220
Google dns 8.8.8.8, 8.48.4.4

Also try this. http://www.dns-ok.us/ Try this one now http://dcwg.org/ could be dnschanger virus. http://www.dcwg.org/detect/checking-for-dns-changer-on-windows-xp/ look at almost bttom of page.

Have you tried uninstalling the ethernet driver?

Is this ipv4 or ipv6 or both?

Did you reboot modem and router? Also is there two routers or one or any?

 

[drpcfix]

Remove the nic in device manager? (let it reinstall on reboot)

Does a static ip work?

 

[OfficeTechs]

+1 to rebooting the router or whatever is doing the dhcp. Ive had similar issues with a single device on a network not getting IP via dhcp and spent hours convinced it was an issue with the device itself. Turned out rebooting the router sorted it.

 

[kevinjhaag]

I'm surprised nobody hasn't mentioned this one yet. But try seeing if it works in a linux live cd or windows pe. If it works, then we definitively have a windows issue. I would first make sure you don't have any malware on the computer. Then I would use Fabar Service Scanner because it will check numerous parts of a network connection. I would also use D7 to Reset Networking and Repair Lots of Stuff under the Malware tab.
Otherwise you could start from scratch and remove the adapter in device manager and reinstall driver, then check all services are running, check for any missing network files, make sure registry entries are valid, etc..
After all this and I still don't get a working Internet connection. Then I would backup the clients data, reload windows, and then restore clients data.

 

[YeOldeStonecat]

I've seen malware tank the tcp/ip system on Windows XP quite a few times.

More often...the tcpip.sys file is tanked...snag a copy from a clean XP sp3 machine and replace the one on the problematic machine.

 

[technetnerd]

+1 to Linux Live CD, I always throw in puppy linux to see if its a hardware or software issue first. Sometimes talking with the customer helps as well, ask them when the last time the internet worked. Restore the system to a previous date that worked.

 

[Vicenarian]

I had a similar issue and followed tweaking.com's all in one fixer. I can't pinpoint what the exact issue was since it looks at so many things, but it might be worth a try.

http://www.tweaking.com/content/page/windows_repair_all_in_one.html

Gave that a try last night, but it didn't seem to work. Thanks for the tip though; that program will definitely come in handy in the future.

check to see if dhcp and dns services are running

Yes; both services are running

Have you check to see if you have a virus,trojons and anyother malware? also might try changing your dns to opendns or google dns

Opendns IP address 208.67.222.222,208.67.220.220
Google dns 8.8.8.8, 8.48.4.4

I set the DNS manually to Google's servers, and still the same issue.

Also try this. http://www.dns-ok.us/ Try this one now http://dcwg.org/ could be dnschanger virus. http://www.dcwg.org/detect/checking-for-dns-changer-on-windows-xp/ look at almost bttom of page.

Have you tried uninstalling the ethernet driver?

Is this ipv4 or ipv6 or both?

Did you reboot modem and router? Also is there two routers or one or any?

Uninstalled/installed the ethernet driver; same issue. (also tried a usb wifi card, same problem). Tried disabling IPv6 and the problem persisted. Tried with my own router, and it still has the same problem.

Remove the nic in device manager? (let it reinstall on reboot)

Does a static ip work?

Tried a static IP, etc. but the problem persisted.

+1 to rebooting the router or whatever is doing the dhcp. Ive had similar issues with a single device on a network not getting IP via dhcp and spent hours convinced it was an issue with the device itself. Turned out rebooting the router sorted it.

Tried it, but the problem persists.

I'm surprised nobody hasn't mentioned this one yet. But try seeing if it works in a linux live cd or windows pe. If it works, then we definitively have a windows issue. I would first make sure you don't have any malware on the computer. Then I would use Fabar Service Scanner because it will check numerous parts of a network connection. I would also use D7 to Reset Networking and Repair Lots of Stuff under the Malware tab.
Otherwise you could start from scratch and remove the adapter in device manager and reinstall driver, then check all services are running, check for any missing network files, make sure registry entries are valid, etc..
After all this and I still don't get a working Internet connection. Then I would backup the clients data, reload windows, and then restore clients data.

I'm getting to the point where a reload sounds like a good solution, lol.

I've seen malware tank the tcp/ip system on Windows XP quite a few times.

More often...the tcpip.sys file is tanked...snag a copy from a clean XP sp3 machine and replace the one on the problematic machine.

Replaced tcpip.sys (and the ipv6 file too) and now when I run an ipconfig /all, all I get are the words

"Windows IP Configuration"

At the top, and nothing below (except for the command prompt to enter a new command)

+1 to Linux Live CD, I always throw in puppy linux to see if its a hardware or software issue first. Sometimes talking with the customer helps as well, ask them when the last time the internet worked. Restore the system to a previous date that worked.

Never tried a linux CD (because I assumed using a usb wifi adapter would rule out the same problems), but yeah. Tried multiple system restores to different dates, and none of them would complete...strange?




So, I'm guessing either something is messed up in the registry (less likely) or a windows networking driver/file is screwed up (more likely)

Other than tcpip.sys, what other files could I replace with known-good copies? Or should I just reload?

 

[cooltech]

Gave that a try last night, but it didn't seem to work. Thanks for the tip though; that program will definitely come in handy in the future.




Yes; both services are running



I set the DNS manually to Google's servers, and still the same issue.



Uninstalled/installed the ethernet driver; same issue. (also tried a usb wifi card, same problem). Tried disabling IPv6 and the problem persisted. Tried with my own router, and it still has the same problem.



Tried a static IP, etc. but the problem persisted.



Tried it, but the problem persists.



I'm getting to the point where a reload sounds like a good solution, lol.



Replaced tcpip.sys (and the ipv6 file too) and now when I run an ipconfig /all, all I get are the words

"Windows IP Configuration"

At the top, and nothing below (except for the command prompt to enter a new command)




Never tried a linux CD (because I assumed using a usb wifi adapter would rule out the same problems), but yeah. Tried multiple system restores to different dates, and none of them would complete...strange?



So, I'm guessing either something is messed up in the registry (less likely) or a windows networking driver/file is screwed up (more likely)

Other than tcpip.sys, what other files could I replace with known-good copies? Or should I just reload?

"Never tried a linux CD (because I assumed using a usb wifi adapter would rule out the same problems)"

Not always true because it could be the software that is corrupt but by boot up with linux cd (ie Ubuntu,Zorin os) then you can see If you do get an ip address with linux and this is to rule out if you can get ip address if at all. Then the only other thing it could be is the software may have virus or a defective network card.

 

[Vicenarian]

"Never tried a linux CD (because I assumed using a usb wifi adapter would rule out the same problems)"

Not always true because it could be the software that is corrupt but by boot up with linux cd (ie Ubuntu,Zorin os) then you can see If you do get an ip address with linux and this is to rule out if you can get ip address if at all. Then the only other thing it could be is the software may have virus or a defective network card.

But the USB wifi adapter is using its own driver and IP configuration (IP config is per adapter). So, if it also doesn't work, that sort of rules the network card out of the equation, and points to the problem being with Windows itself, more specifically Windows networking components/network stack.




Ok, so I've replaced tcpip.sys and it didn't really help. Are there any other Windows network system files I should replace (with known-good copies)?

 

[cooltech]

But the USB wifi adapter is using its own driver and IP configuration (IP config is per adapter). So, if it also doesn't work, that sort of rules the network card out of the equation, and points to the problem being with Windows itself, more specifically Windows networking components/network stack.




Ok, so I've replaced tcpip.sys and it didn't really help. Are there any other Windows network system files I should replace (with known-good copies)?

Haven't heard of a usb wifi adapter having it's own ip address. But drivers yes. That is what the software does for handling wifi ip address's. Unless you are talking about mini wifi router or mini modem usb than yes it would have its own ip address and the driver. I don't know if any one else would disagree? But I could be wrong. Not the first time for me.

 

[YeOldeStonecat]

B
Ok, so I've replaced tcpip.sys and it didn't really help. Are there any other Windows network system files I should replace (with known-good copies)?

There's a couple of threads in these forums revolving around similar issues, if you do a search for "tcpip.sys" you'll find a couple of extra steps. There was one malware recently which hosed the files similar to the symptoms you see which normally copying over a fresh tcpip.sys fixes...but there are a few extra steps...I believe the answer is in one of the threads on the subject.

 

[kevinjhaag]

I also forgot... Remove any Internet Security Suites, AntiViruses etc.. You may need to use the removal tools for each brand that was on there.

I'd also run Fabar Service Scanner because it will check numerous parts of a network connection and log whats working and whats not working. If you need help ciphering the log, just send it to me in a PM or post it here for everyone else to see and comment on. I would be curious to see if Fabar finds something; it usually does in my case most times.

Otherwise.... Nuke and Pave with Backup. Or you could try a install repair which works 50/50 for me.

 

[Boston Pro Comp Serv LLC]

Sfc /scannow should take care of the system files. What about downloading sp3 on another rig and updating it first?

 

[Vicenarian]

Update:
I was wrong, the DHCP service wasn't started (and couldn't start)
Also, I did do a sfc /scannow initially, just forgot to mention it. Didn't find/fix anything. Even did one offline. Didn't fix the issue.

Now on to the new stuff;
Got desperate; replaced pretty much all drivers under system32/drivers with known-good copies. Merged a bunch of Windows XP network settings registry files; no dice

Manually uninstalled and then reinstalled IPv4 via editing config files and stuff, etc.. YAY! Internet! Finally!


Now I find out that MSE services won't start and any page IE tries to load goes into an unending loop (and won't allow me to reset it, etc). Ok. Tried to uninstall Microsoft Security Essentials, won't let me. Try to install new version, won't install. Installed Avast, and its services can't start. *ANGRY FACE*

So, even though I have network access now, I'm pretty much sold on the idea of just reinstalling. Too tired of messing around with this stupid machine any longer.

 

[kevinjhaag]

So, even though I have network access now, I'm pretty much sold on the idea of just reinstalling. Too tired of messing around with this stupid machine any longer.

No offense, But I would've done that hours ago. My time is very limited and valuable. I give myself a time limit sort of speak on residential computers. If I don't then I get behind on other work. If I can't figure out a problem within 2 hrs then I Reload Windows with a Backup of their data of course. Their are some exceptions for some customers of course too depending whats on the computer, etc.. Also business computers are handled differently too due to whats on the computers to, like special configurations, unavailable 3rd party software, etc..
But I also image/backup almost every computer I work on before I work on it depending on time and the problem. This is so I can always back out of a job and start over if need too. Or if I want to later figure out the problem on my own in a virtual machine or something, then I can.
As for your situation I think the computer got hit by a good rootkit/malware by the sounds of it or it developed some file system corruption. Its really the only thing that causes the same problem for me...more leaning towards caused by Malware. Well good luck and have fun my friend.