No DHCP after virus infection

  • Thread starter Thread starter BG250
  • Start date Start date
B

BG250

We had a virus infection from a new and rare virus. It was a msnmsg.exe, a
file named similar to real Windows files. Infects through network shares. I
had to manually clean it no scanners could clear it off. It seems to be gone
because my router doesn't max out on sessions any more.

Some computers now use the autoconfguration 169.254.x.x addresses. I
uninstalled TCP/IP rebooted and reloaded and it does not work. I moved one
of these PCs to a known good port with no effect.

DHCP is enabled in TCPIP settings.

There must be a registry setting that is controls this.

I have to manually assign an IP and reboot (ugh) to get the network
connected.

These are Windows 2000 sp4 and one XP sp1a box.

Any ideas?
Thanks
 
Perhaps a stupid question, but did you verify that your DHCP server is still
running? Are there any systems that get an IP address, perhaps you can test
with an uninfected one?
 
Jeroen van Bemmel said:
Perhaps a stupid question, but did you verify that your DHCP server is still
running? Are there any systems that get an IP address, perhaps you can test
with an uninfected one?
Click to expand...

No, Not a stupid question at all. It helped me to think in another
direction. I went to a computer that was still using the DHCP assigned
address and IPCONFIG /RELEASED and then renewed it. It did not renew. Okay,
something is wrong on the server side. The DHCP service was started. I
checked all the settings and it looked fine. I rebooted the server and DHCP
is now assigning addresses. I don't know why it had stopped assigning
addresses even though it was running. Of course, rebooting seems to be a
cure all.

Thanks, BG
 
Back
Top