Lost Internet Connectivity

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Environment: Windows XP (Home), SP2, HP a320n, 2.08 GHz AMD. Windows
Firewall (off), McAfee Personal Firewall, VS, two-PC network, Motorola modem,
LinkSys router, Comcast Cable. PCI 10/100 Ethernet Connection.

Incident: McAfee detected malware, option: remove, result: Firewall
disabled, Internet connectivity lost. Error: Network Cable Unplugged.

1. Initial Fix: Reboot, re-establish network, trouble shoot modem,
connection, etc. Swapped cables, end-to-end, replace cable. Result: No
Change. Connection to second PC Maintained. Direct connect to modem, retry.
Result: No Change

2. Un-installed McAfee with McAfee utility. Reboot, etc. Result: No Change

3. Hardware Fix: Disabled PCI 10/100, installed D-Link 10/100 Fast Ethernet
Card. Installation recognized, Connection listed, re-installed network.
Result: No Change. Un-installed NIC (PCI 10/100), reinstalled. Result: No
Change

4. Trouble-shooting finds: Windows Firewall/ICS Service not running, cannot
start. ipconfig tool not available due “Internal error, request not
supported – Unable to query Host Name.†DHCP Client – not running, cannot
start, error 1068. Attempted manual start of Windows Firewall/ICS Service
returns Error 2 – System cannot find file specified. PING returns null result

5. Run services.msc cannot manually start Firewall. Attempted fix with
NETSH FIREWALL RESET after loading rundll32 setupapi,InstallHinfSection
Ndi-Steelhead 132 %windir%\inf\netrass.inf NETSH FIREWALL RESET returns “OKâ€
but Firewall/ICS start continues to return “error 2: Windows cannot find the
file specified.â€

6. Device Manager indicates that the PCI 10/100 is working properly and that
there are no conflicts.

7. WMI is started (automatic) Cmd /k sc qc sharedaccess returns:

SERVICE_NAME: sharedaccess
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Firewall/Internet Connection Sharing
(ICS)
DEPENDENCIES : Netman
: WinMgmt
SERVICE_START_NAME : LocalSystem

It would appear that the crux of the problem is No. 4 above in that some
file that is required for the service to run is missing from C:\Documents and
Settings\Owner> What file? Where to obtain? Comments/Suggestions
appreciated. Thanks.

Bob57
 
Bob57 said:
Environment: Windows XP (Home), SP2, HP a320n, 2.08 GHz AMD. Windows
Firewall (off), McAfee Personal Firewall, VS, two-PC network, Motorola modem,
LinkSys router, Comcast Cable. PCI 10/100 Ethernet Connection.

Incident: McAfee detected malware, option: remove, result: Firewall
disabled, Internet connectivity lost. Error: Network Cable Unplugged.

1. Initial Fix: Reboot, re-establish network, trouble shoot modem,
connection, etc. Swapped cables, end-to-end, replace cable. Result: No
Change. Connection to second PC Maintained. Direct connect to modem, retry.
Result: No Change

2. Un-installed McAfee with McAfee utility. Reboot, etc. Result: No Change

3. Hardware Fix: Disabled PCI 10/100, installed D-Link 10/100 Fast Ethernet
Card. Installation recognized, Connection listed, re-installed network.
Result: No Change. Un-installed NIC (PCI 10/100), reinstalled. Result: No
Change

4. Trouble-shooting finds: Windows Firewall/ICS Service not running, cannot
start. ipconfig tool not available due “Internal error, request not
supported – Unable to query Host Name.†DHCP Client – not running, cannot
start, error 1068. Attempted manual start of Windows Firewall/ICS Service
returns Error 2 – System cannot find file specified. PING returns null result

5. Run services.msc cannot manually start Firewall. Attempted fix with
NETSH FIREWALL RESET after loading rundll32 setupapi,InstallHinfSection
Ndi-Steelhead 132 %windir%\inf\netrass.inf NETSH FIREWALL RESET returns “OKâ€
but Firewall/ICS start continues to return “error 2: Windows cannot find the
file specified.â€

6. Device Manager indicates that the PCI 10/100 is working properly and that
there are no conflicts.

7. WMI is started (automatic) Cmd /k sc qc sharedaccess returns:

SERVICE_NAME: sharedaccess
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Firewall/Internet Connection Sharing
(ICS)
DEPENDENCIES : Netman
: WinMgmt
SERVICE_START_NAME : LocalSystem

It would appear that the crux of the problem is No. 4 above in that some
file that is required for the service to run is missing from C:\Documents and
Settings\Owner> What file? Where to obtain? Comments/Suggestions
appreciated. Thanks.

Bob57
Click to expand...

I think your machine (s) are infected, since removing the Malware which my
guess is more than this.
You need to isolate these machines, disconnect all machines turn the Router
OFF wait for a minute or so, plug the Router to the Power then Turn the
computer (one computer for testing leave the rest disconnected)., does the
Connection establish itself, also are you able to access the Router web page
from this machine by entering the IP address for the router: 192.168.0.1?.
Do you implement an encryption method to secure this network, also do you
select the right network (SSID) which you created when you set up the Network
connection?.
- Are you using Static or Auto IP address, check your TCP/IP settings for
IP, DNS.
How to troubleshoot TCP/IP connectivity with Windows XP
http://support.microsoft.com/kb/314067
TCP/IP Fundamentals for Microsoft Windows
http://www.microsoft.com/technet/network/evaluate/technol/tcpipfund/tcpipfund_ch16.mspx
Limited or no Conictivity:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
Open a run command and type in:
ipconfig /flushdns click [OK]
ipconfig /renew click [OK]
netsh winsock reset click [OK]
Reboot your machine, do you have connection and stable one?.
 
Hi Tom,
I think you have bad Hardware, either the Modem which is my guess given up
the ghost and you can confirm that by taking a machine to another connection
and test to see the machine NIC is okay.
If it did connect after adjusting the settings ( you may or may not need to
adjust the settings) that mean the Modem or one of your hardware
(Modem/Router/Line cable is bad).
Sometimes the ISP test confirm the Line good or bad according to when it end
into the first Phone Plug on the wall and the reset is your priority to
confirm is good or bad.
How long this was going On, if it for a couple of days try system restore to
a week before this happened.
HTH.
nass
 
nass -

Thanks for the suggestion(s). I had forgotten that I had previously
"successfully" reset the winsock catalog. Having done it (once again) the
result is the same: Network Cable Unplugged. One aspect is the inability to
use network diagnostic tools, i.e. ipconfig, ping, etc.

I have un-installed and re-installed the 10/100 PCI Ethernet device several
times, with the same result. I cannot raise the router at 192.168.0.1, nor
does it help switching from auto to manual (and back again). It still
appears to me that the problem lies with the Win Firewall/ICS service not
started, and unable to be started manually.

I have isolated the PC and tried a direct connection from the modem to the
PCI, with the same result. While the trouble-shooting sequence indicates
that the PCI is present and functioning correctly, it doesn't seem as if
windows recognizes that there is a PCI Ethernet adapter installed at all!
For example, I went back and tried to "start over" with the install CD for
Comcast and received an immediate error to the effect that no Ethernet
hardware was recognized with the admonition that I shouild install same. It
seems that I'm caught in a loop.

Can you point me in another direction?

Bob57

nass said:
Bob57 said:
Environment: Windows XP (Home), SP2, HP a320n, 2.08 GHz AMD. Windows
Firewall (off), McAfee Personal Firewall, VS, two-PC network, Motorola modem,
LinkSys router, Comcast Cable. PCI 10/100 Ethernet Connection.

Incident: McAfee detected malware, option: remove, result: Firewall
disabled, Internet connectivity lost. Error: Network Cable Unplugged.

1. Initial Fix: Reboot, re-establish network, trouble shoot modem,
connection, etc. Swapped cables, end-to-end, replace cable. Result: No
Change. Connection to second PC Maintained. Direct connect to modem, retry.
Result: No Change

2. Un-installed McAfee with McAfee utility. Reboot, etc. Result: No Change

3. Hardware Fix: Disabled PCI 10/100, installed D-Link 10/100 Fast Ethernet
Card. Installation recognized, Connection listed, re-installed network.
Result: No Change. Un-installed NIC (PCI 10/100), reinstalled. Result: No
Change

4. Trouble-shooting finds: Windows Firewall/ICS Service not running, cannot
start. ipconfig tool not available due “Internal error, request not
supported – Unable to query Host Name.†DHCP Client – not running, cannot
start, error 1068. Attempted manual start of Windows Firewall/ICS Service
returns Error 2 – System cannot find file specified. PING returns null result

5. Run services.msc cannot manually start Firewall. Attempted fix with
NETSH FIREWALL RESET after loading rundll32 setupapi,InstallHinfSection
Ndi-Steelhead 132 %windir%\inf\netrass.inf NETSH FIREWALL RESET returns “OKâ€
but Firewall/ICS start continues to return “error 2: Windows cannot find the
file specified.â€

6. Device Manager indicates that the PCI 10/100 is working properly and that
there are no conflicts.

7. WMI is started (automatic) Cmd /k sc qc sharedaccess returns:

SERVICE_NAME: sharedaccess
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k netsvcs
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Firewall/Internet Connection Sharing
(ICS)
DEPENDENCIES : Netman
: WinMgmt
SERVICE_START_NAME : LocalSystem

It would appear that the crux of the problem is No. 4 above in that some
file that is required for the service to run is missing from C:\Documents and
Settings\Owner> What file? Where to obtain? Comments/Suggestions
appreciated. Thanks.

Bob57
Click to expand...

I think your machine (s) are infected, since removing the Malware which my
guess is more than this.
You need to isolate these machines, disconnect all machines turn the Router
OFF wait for a minute or so, plug the Router to the Power then Turn the
computer (one computer for testing leave the rest disconnected)., does the
Connection establish itself, also are you able to access the Router web page
from this machine by entering the IP address for the router: 192.168.0.1?.
Do you implement an encryption method to secure this network, also do you
select the right network (SSID) which you created when you set up the Network
connection?.
- Are you using Static or Auto IP address, check your TCP/IP settings for
IP, DNS.
How to troubleshoot TCP/IP connectivity with Windows XP
http://support.microsoft.com/kb/314067
TCP/IP Fundamentals for Microsoft Windows
http://www.microsoft.com/technet/network/evaluate/technol/tcpipfund/tcpipfund_ch16.mspx
Limited or no Conictivity:
http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
Open a run command and type in:
ipconfig /flushdns click [OK]
ipconfig /renew click [OK]
netsh winsock reset click [OK]
Reboot your machine, do you have connection and stable one?.
Click to expand...
 
The modem is obviously working correctly - or I wouldn't be able to connect
to the 'Net and participate in this forum. All throughout this week-long
nightmare, the second network PC has continued to function with its Internet
connection. As stated previously, cables have been both swapped and
replaced, so I believe the issue is not hardware related, especially as I
replaced the PCI 10/100 with a fast ethernet card.

I ran the winsock repair utility (this is the third such utility) without
any change. The persistent problem has been the inability to start the Win
Firewall/ICS service and the inability of Windows to recognize the PCI
ethernet connection, along with the ipconfig, ping, etc returning null
results.
 
:
The modem is obviously working correctly - or I wouldn't be able to connect
to the 'Net and participate in this forum. All throughout this week-long
nightmare, the second network PC has continued to function with its Internet
connection. As stated previously, cables have been both swapped and
replaced, so I believe the issue is not hardware related, especially as I
replaced the PCI 10/100 with a fast ethernet card.

I ran the winsock repair utility (this is the third such utility) without
any change. The persistent problem has been the inability to start the Win
Firewall/ICS service and the inability of Windows to recognize the PCI
ethernet connection, along with the ipconfig, ping, etc returning null
results.
Click to expand...

Bob,

If your problem is related to LSP / Winsock corruption, as previously stated,
there are multiple repair tools, none of which is more effective than any other.
Depending upon what your problem is, you are advised to run each one, one at a
time. If any one makes a change, you should run each one again. And reset
TCP/IP too (IP and Winsock are not the same component).
<http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html>
http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html

If the problem originates from the Windows Firewall service, which does fail
open (ie if its stopped, no traffic is passed), you may have to check Event
Viewer for clues. And ensure that Remote Procedure Call service is running.
<http://nitecruzr.blogspot.com/2005/05/using-event-viewer-to-get-details.html>
http://nitecruzr.blogspot.com/2005/05/using-event-viewer-to-get-details.html
<http://nitecruzr.blogspot.com/2006/12/controlling-and-watching-services.html>
http://nitecruzr.blogspot.com/2006/12/controlling-and-watching-services.html

--
Cheers,
Chuck, MS-MVP 2005-2007 [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
 
Regarding your Error 2 on the Firewall Service, do you have the
registry key called ServiceDll, Type Reg_Expand_SZ, value of
%SystemRoot%\System32\ipnathlp.dll found in HKLM\System
\CurrentControlSet\Services\SharedAccess\Paramaters\

I had the missing and the firewall service didn't start, after adding,
it worked.

The modem is obviously working correctly - or I wouldn't be able to connect
to the 'Net and participate in this forum. All throughout this week-long
nightmare, the second network PC has continued to function with its Internet
connection. As stated previously, cables have been both swapped and
replaced, so I believe the issue is not hardware related, especially as I
replaced the PCI 10/100 with a fast ethernet card.
Click to expand...
I ran the winsock repair utility (this is the third such utility) without
any change. The persistent problem has been the inability to start the Win
Firewall/ICSservice and the inability of Windows to recognize the PCI
ethernet connection, along with the ipconfig, ping, etc returning null
results.
Click to expand...

Bob,

If your problem is related to LSP / Winsock corruption, as previously stated,
there are multiple repair tools, none of which is more effective than any other.
Depending upon what your problem is, you are advised to run each one, one at a
time. If any one makes a change, you should run each one again. And reset
TCP/IP too (IP and Winsock are not the same component).
<http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer...>http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer...

If the problem originates from the Windows Firewall service, which does fail
open (ie if its stopped, no traffic is passed), you may have to check Event
Viewer for clues. And ensure that Remote Procedure Call service is running.
<http://nitecruzr.blogspot.com/2005/05/using-event-viewer-to-get-detai...>http://nitecruzr.blogspot.com/2005/05/using-event-viewer-to-get-detai...
<http://nitecruzr.blogspot.com/2006/12/controlling-and-watching-servic...>http://nitecruzr.blogspot.com/2006/12/controlling-and-watching-servic...

--
Cheers,
Chuck, MS-MVP 2005-2007 [Windows - Networking]http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.- Hide quoted text -

- Show quoted text -
Click to expand...
 
Back
Top