Windows 7 workstation randomly drops from network

[MotzTech]

I'm having a weird problem with a Windows 7 workstation. It seems to just randomly drop off the network. I can't even ping any IP address (internal or external), just get a destination host unreachable. If I try to renew the IP, it gets the 169 address instead of a network address. Rebooting normally gets it back online, but not always.

I've tried the following with no success
Reloaded network driver
Ran winsockfix
Switched network ports and cables
Ran full virus and malware scans
Changed anti-virus software
Replaced integrated network card with dedicated one (This seemed to work for a while, then the issue came back)

The event logs are completely clean. The only entries related are dns lookup failures that happen after the fact.

Additional info:
Computer is Windows 7 Pro 64 bit, fully updated
It is part of a domain
There are no fancy policies or anything like that is place, it's your basic office network.
Av is Vipre business
Also has Malwarebytes Pro installed


I'm honestly about ready to just nuke and pave it. Wanted to see if anyone else had any ideas before I did that.

 

[Martyn]

Just a test, configure it manually with a fixed ip, mask, gateway, dns etc and see what happens.

 

[BrentfromZulu]

My first thought when I read this was the Nic might go into power saving mode. I would check there.

 

[Markverhyden]

Switched network ports and cables

Did this include moving the computer to a different location so a different cable run/wall jack is being used?

 

[nlinecomputers]

Did this include moving the computer to a different location so a different cable run/wall jack is being used?

That is my thought to. Bad run in the wall.

 

[MotzTech]

Just a test, configure it manually with a fixed ip, mask, gateway, dns etc and see what happens.

That's a good idea, I will try that.

My first thought when I read this was the Nic might go into power saving mode. I would check there.

I doubt this is the problem, as it is very sporadic, and sometimes a reboot does not fix it. This system is sometimes left alone for days and it stays online the whole time. Those seem to eliminate it going into sleep mode.

Did this include moving the computer to a different location so a different cable run/wall jack is being used?

Yes, the user and her computer moved into a new office (in the same building) and it's still happening.

 

[Encrypted Existence]

My first thought is a possible IP address conflict. Martyn's suggestion should confirm whether that is the case. If you can reproduce the issue while on site then as soon as the network connection breaks try pinging whatever the workstation's IP was to see if you get a reply, which would indicate that another device has been assigned that address. Has anyone or any other devices in the office been having connectivity issues lately? Just a long shot, but I would also try a wireless USB NIC if there is wifi in the office.

 

[Moltuae]

Try changing the NIC's MAC. Just change one of the least significant digits at the end.

I've had issues like this before. It's probably a DHCP assignment issue but changing the MAC is a quick an easy fix or at least a good way to diagnose things further if necessary.

 

[YeOldeStonecat]

Try changing the NIC's MAC. Just change one of the least significant digits at the end.

He replaced the network card....which effectively did this.

OP...further troubleshooting may yield itself to be too time consuming...only next step I'd try is replacing the network stack files....which winsock repair and installing a new NIC doens't do. Copying over a fresh copy of tcpip.sys for a for example. I've seen malware nuke these files.

 

[MotzTech]

Static settings did not help. I'm going to try Stonecats suggestion and if that does not work, I'm going to try a Windows repair install.

 

[Majestic]

I'm having a weird problem with a Windows 7 workstation. It seems to just randomly drop off the network. I can't even ping any IP address (internal or external), just get a destination host unreachable. If I try to renew the IP, it gets the 169 address instead of a network address. Rebooting normally gets it back online, but not always.

I've tried the following with no success
Reloaded network driver
Ran winsockfix
Switched network ports and cables
Ran full virus and malware scans
Changed anti-virus software
Replaced integrated network card with dedicated one (This seemed to work for a while, then the issue came back)

The event logs are completely clean. The only entries related are dns lookup failures that happen after the fact.

Additional info:
Computer is Windows 7 Pro 64 bit, fully updated
It is part of a domain
There are no fancy policies or anything like that is place, it's your basic office network.
Av is Vipre business
Also has Malwarebytes Pro installed


I'm honestly about ready to just nuke and pave it. Wanted to see if anyone else had any ideas before I did that.

I've had a similar issue with a Tp-Link gigabit card where it downloaded the drivers automatically from Microsoft and showed trendnet. Once I got the latest drivers off the website the problem went away (and it showed tp-link properly as well).

Majestic

 

[MotzTech]

I ended up doing a repair install and it fixed the issue. I'm thinking stonecat was right and something git borked up by a previous infection.