Weird Network Issue

TheGreatNate · 04-01-2009, 08:38 AM

I've been having some trouble with my network for the last week and after exhausting nearly almost all of my ideas, I've decided to look for some more help.

First, my setup: I have a Linksys WRT54GC Wireless G Router, which is connected to my cable modem. The router has one desktop directly connected to it (to make reading this easier, I will call this PC1), and also goes to a switch which has a desktop (PC2) and Xbox 360 wired to it. I also have a laptop and iPod Touch which I use wirelessly.This aforementioned setup has been working flawlessly for me for well over two years.

However, last Wednesday, my internet quit working on all but PC1. The iPod and laptop will connect wirelessly to the router but will not access the internet. The Xbox and PC2 will also connect to the network but will not access the internet.

Now, I have tried several things trying to determine the root cause of this problem these are as follows:
1. Connected PC2 directly (bypassing the switch) to the modem, in which case the internet works.
2. Connected PC2 directly (again bypassing the switch) to the router port that PC1 was originally plugged into, which did not work.
3. Bought a new router thinking it may be a hardware issue with the router, but this yielded the same problem as the old router. i.e. PCs will connect as before with PC1 accessing the internet, PC2/laptop/Xbox not accessing the internet.
4. Updated drivers on the machines I was able to do so, also to no avail.
5. Called Time Warner to have them check the modem to see if it's the problem, they said it was good over the phone. But I'm not convinced and plan to exchange it tomorrow.

So, I am basically out of ideas and still baffled at the cause of this problem. It's really becoming quite a frustration for me so any help would be GREATLY appreciated.

Thank you,
Nate

snw35 · 04-01-2009, 09:55 AM

Hi,

At first glance it seems like you have NAT disabled, or not working. Your ISP will only give one MAC (physical) address on your network an IP address at any one time. Either your modem or your router should mask the presence of multiple devices using NAT, allowing them all to have internet access, but this doesn’t seem to be happening.

How does the modem connect to the router, and how did you connect PC2 directly to the modem (USB, Ethernet?)

Can you give some more information from PC1 (the one that still works?)
If you click the start button,
Click ‘run’
Type 'cmd' into the run box,
Click 'OK' to bring up the command prompt,
Type ‘ipconfig/all’,
Right-click and ‘select all’

Then paste the contents into your next reply.

TheGreatNate · 04-01-2009, 10:07 AM

The modem connects to the router with Cat5 cables and that is how I've connected the computers when trying the various things.

This is what the ipconfig showed:

Windows IP Configuration

Host Name . . . . . . . . . . . . : sininger-203c43
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Trendnet

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : Trendnet
Description . . . . . . . . . . . : Realtek RTL8169/8110 Family Gigabit
Ethernet NIC
Physical Address. . . . . . . . . : 00-16-17-17-D6-E2
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.10.101
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.10.1
DHCP Server . . . . . . . . . . . : 192.168.10.1
DNS Servers . . . . . . . . . . . : 85.255.112.173
85.255.112.122
Lease Obtained. . . . . . . . . . : Tuesday, March 31, 2009 9:17:45 PM
Lease Expires . . . . . . . . . . : Tuesday, April 07, 2009 9:17:45 PM

SilverDwn · 04-01-2009, 10:29 AM

Are you able to access your router via a web browser?
Try typing 192.168.10.1 into internet explorer or whatever you use.
I suspect the router is struggling to identify itself to the modem.

snw35 · 04-01-2009, 10:49 AM

I can see that the computer you ran ipconfig on is using local addresses for its IP address, gateway, and DHCP, which would indicate that NAT is not the problem.

Could you disconnect PC1 from the network, and run inside the command prompt on PC2:

Ipconfig/release

Then when that finishes,

Ipconfig/renew

Then post the results that come up.

SilverDwn · 04-01-2009, 11:29 AM

Another thing you should try is see if you can at least ping an internet address. You can find an address by going on a known working computer (PC1 in your case) opening a dos prompt and do as follows:

C:\>ping www.google.com

Pinging www.l.google.com [209.85.227.103] with 32 bytes of data:

Reply from 209.85.227.103: bytes=32 time=43ms TTL=239
Reply from 209.85.227.103: bytes=32 time=32ms TTL=239
Reply from 209.85.227.103: bytes=32 time=30ms TTL=239
Reply from 209.85.227.103: bytes=32 time=31ms TTL=239

Ping statistics for 209.85.227.103:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 30ms, Maximum = 43ms, Average = 34ms

Get that address in bold (209.85.227.103) and see if one of the PC's you are having problems with can ping the address. If it can, your issues lies with the DNS server entries on your hosts.

If you cant ping the address, something else is wrong. You could narrow this down with the command:

tracert 209.85.227.103

This will show you where the communcation fails, thats if the data even leaves your PC in the first place.

TheGreatNate · 04-01-2009, 11:51 AM

Quote:

Originally Posted by SilverDwn

Are you able to access your router via a web browser?
Try typing 192.168.10.1 into internet explorer or whatever you use.
I suspect the router is struggling to identify itself to the modem.

I am able to access the router through the web browser. However, I don't know what to look for to determine if the router can identify itself to the modem.

TheGreatNate · 04-01-2009, 11:56 AM

Quote:

Originally Posted by snw35

I can see that the computer you ran ipconfig on is using local addresses for its IP address, gateway, and DHCP, which would indicate that NAT is not the problem.

Could you disconnect PC1 from the network, and run inside the command prompt on PC2:

Ipconfig/release

Then when that finishes,

Ipconfig/renew

Then post the results that come up.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Nathan>ipconfig/release

Windows IP Configuration

No operation can be performed on Wireless Network Connection while it has its me
dia disconnected.

Ethernet adapter Wireless Network Connection:

Media State . . . . . . . . . . . : Media disconnected

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 0.0.0.0
Subnet Mask . . . . . . . . . . . : 0.0.0.0
Default Gateway . . . . . . . . . :

C:\Documents and Settings\Nathan>ipconfig/renew

Windows IP Configuration

No operation can be performed on Wireless Network Connection while it has its me
dia disconnected.

Ethernet adapter Wireless Network Connection:

Media State . . . . . . . . . . . : Media disconnected

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : Trendnet
IP Address. . . . . . . . . . . . : 192.168.10.102
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.10.1

C:\Documents and Settings\Nathan>

This is the result of your suggestion from my laptop. For some reason the internet will work intermittently on it (Edit: For example, it's letting me post this, but keeps disconnecting from AIM at somewhat random intervals). I can't try on my desktop at the moment as there seems to be an issue with the computer.

snw35 · 04-01-2009, 05:43 PM

The DNS servers in your original reply, 85.255.112.173 and 85.255.112.122, seem odd to me. When you released and renewed the connection, with PC1 disconnected from the network, do these DNS severs appear on your other device as well?

192.168.10.1 is the IP of your router, and I would normally expect this to be your DNS server.

Try manually assigning the DNS information on any computers that cannot connect. To do this on XP;
Go to the control panel,
Go to network connections ,
Right-click 'local area connection',
Scroll to 'Internet protocol tcp/ip' and highlight it,
Click properties

You should get a window with the option 'obtain a DNS server automatically' selected. Change it to 'use the following DNS sever addresses' and put '192.168.10.1' into the topmost box; you can leave the lower one blank.

Click OK then close, and open a web browser to check if the machine can now access the web. If it can then great, if not then could you please post the output of ipconfig/all on the machine you tried it on.

TheGreatNate · 04-01-2009, 06:38 PM

Quote:

Originally Posted by snw35

The DNS servers in your original reply, 85.255.112.173 and 85.255.112.122, seem odd to me. When you released and renewed the connection, with PC1 disconnected from the network, do these DNS severs appear on your other device as well?

192.168.10.1 is the IP of your router, and I would normally expect this to be your DNS server.

Try manually assigning the DNS information on any computers that cannot connect. To do this on XP;
Go to the control panel,
Go to network connections ,
Right-click 'local area connection',
Scroll to 'Internet protocol tcp/ip' and highlight it,
Click properties

You should get a window with the option 'obtain a DNS server automatically' selected. Change it to 'use the following DNS sever addresses' and put '192.168.10.1' into the topmost box; you can leave the lower one blank.

Click OK then close, and open a web browser to check if the machine can now access the web. If it can then great, if not then could you please post the output of ipconfig/all on the machine you tried it on.

I think this may have been part of the problem right here. PC1, which is my roommate's computer, had the DNS server number manually input to those values you mentioned. He had those input from the network he had been on before he moved in (why this problem hasn't arisen in the 6 months he's lived here is still a mystery to me though). I had him change it to automatic and now my laptop and ipod are wirelessly and my xbox was online as well. However i'm still having some issues it would seem... My xbox won't reconnect and my ipod is not connecting anymore either, but both have DNS addresses of 64.86.133.51. I'm going to see if it will work if I manually input the router number.

EDIT: Changing the iPod DNS to 192.168.10.1 seems to have fixed that, still not having any luck with my xbox though.

snw35 · 04-01-2009, 07:53 PM

Ok, I think I know what your problem is now, I have seen that DNS address (64.86.133.51) before.

It is set up by a virus called 'Flush.M' which creates a fake DHCP server on the computer it infects. Long story short, it will sit on that computer and tell all the other machines on your network to use those other DNS addresses, disrupting their access to the internet.

You need to identify which of your machines is causing this by unplugging them one at a time, and typing:

ipconfig/release

Then,

ipconfig/renew

On one of the others, and checking the DNS addresses it receives by running 'ipconfig/all'. Your router should automatically assign itself (192.168.10.1) as the only DNS server, if it does not, then unplug a different computer and try again.

The two addresses that your roommate had appear to be registered in the Ukraine, and are in an IP pool that is associated with malware activity. I would be inclined to give that machine a full virus scan with an up-to-date antivirus package.

I know it will take a while to do, but I would recommend the further step of scanning the rest of your computers with an antivirus package just to be sure. If you don't have any antivirus installed then I could suggest some good free ones.

TheGreatNate · 04-02-2009, 11:38 AM

Ok, unhooked my roommate's computer and ran ipconfig/all after releasing and renewing my IP address and this was the result:
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Nathan>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : NSLaptop
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : cinci.rr.com

Ethernet adapter Wireless Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network
Connection
Physical Address. . . . . . . . . : 00-16-6F-0B-1F-86

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : cinci.rr.com
Description . . . . . . . . . . . : Marvell Yukon 88E8036 PCI-E Fast Eth
ernet Controller
Physical Address. . . . . . . . . : 00-A0-D1-2D-E9-CA
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 65.24.7.10
65.24.7.11
Lease Obtained. . . . . . . . . . : Thursday, April 02, 2009 1:34:31 PM
Lease Expires . . . . . . . . . . : Friday, April 03, 2009 1:34:31 PM

C:\Documents and Settings\Nathan>

Would those DNS servers indicate the problem is with my computer? The only other thing connected is my Xbox. If that is the problem, I don't really know how to fix a virus on that if it can even get one...

snw35 · 04-02-2009, 12:49 PM

The information your laptop has picked up seems to be different from your room-mates:

He got 192.168.10.1 as his DHCP server, which I would expect,
Your laptop got 192.168.1.1, which seems strange.

Try disconnecting your own machine, then running release and renew on your laptop again. You should see your router's IP (192.168.10.1) come up as the DNS if your own desktop is the problem. Please post the output of ipconfig/all once you've done that.

Make sure nothing is connected wirelessly as well when you try this to eliminate any other possible sources.

Edit: Your xbox won't be vulnerable to this virus, so you don't need to worry about it.

TheGreatNate · 04-02-2009, 01:31 PM

Well, I changed the router back to the original one (the original was the Linksys, the replacement was a TRENDnet) between getting the values off of my computer and my roommates, which is I think the reason that mine has .1.1 while his is .10.1. I figured that if the problem is with a virus then I purchased the second router unnecessarily and will take that one back. I'm still not sure why I'm getting a different number for the DNS than the router IP though:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Nathan>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : NSLaptop
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : cinci.rr.com

Ethernet adapter Wireless Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network
Connection
Physical Address. . . . . . . . . : 00-16-6F-0B-1F-86

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : cinci.rr.com
Description . . . . . . . . . . . : Marvell Yukon 88E8036 PCI-E Fast Eth
ernet Controller
Physical Address. . . . . . . . . : 00-A0-D1-2D-E9-CA
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 65.24.7.10
65.24.7.11
Lease Obtained. . . . . . . . . . : Thursday, April 02, 2009 3:27:29 PM
Lease Expires . . . . . . . . . . : Friday, April 03, 2009 3:27:29 PM

C:\Documents and Settings\Nathan>

snw35 · 04-02-2009, 02:47 PM

Ah right, that would explain allot; those DNS addresses are perfectly fine in that case, as your original device must be a gateway, and those addresses seem to belong to your ISP.

Check the DNS addresses of your other computers; they should all be the same as that.

Do all of them work now, or are some still unable to connect to the internet?

TheGreatNate · 04-02-2009, 07:29 PM

I was able to connect everything to the internet that I was having trouble with. It seems that the virus is on my roommates computer but his antivirus hasn't found it last time I checked.

snw35 · 04-02-2009, 08:44 PM

I'm glad to hear that all your own devices are working again.

When your xbox and ipod both received the DNS address of 64.86.133.51, was your room-mates computer connected and on? If it was, then I suspect it that you are right, and that it is infected with the virus I mentioned earlier.

Tell him to update his antivirus, then reboot in safe mode by re-staring the machine, and pressing 'F8' repeatedly during boot-up. A menu should appear where you can select 'safe mode', but make sure to choose only safe mode, and not safe mode with networking.

Give the computer a full scan, it will take a while, but wait for it to finish. If nothing is detected then tell him to try a different virus scanner, such as

AVG: http://free.avg.com/

Which is free for personal use.

04-01-2009, 08:38 AM	#1 (permalink)
TheGreatNate Registered User Join Date: Apr 2009 Location: Ohio Posts: 8 OS: Windows XP, SP3	Weird Network Issue I've been having some trouble with my network for the last week and after exhausting nearly almost all of my ideas, I've decided to look for some more help. First, my setup: I have a Linksys WRT54GC Wireless G Router, which is connected to my cable modem. The router has one desktop directly connected to it (to make reading this easier, I will call this PC1), and also goes to a switch which has a desktop (PC2) and Xbox 360 wired to it. I also have a laptop and iPod Touch which I use wirelessly.This aforementioned setup has been working flawlessly for me for well over two years. However, last Wednesday, my internet quit working on all but PC1. The iPod and laptop will connect wirelessly to the router but will not access the internet. The Xbox and PC2 will also connect to the network but will not access the internet. Now, I have tried several things trying to determine the root cause of this problem these are as follows: 1. Connected PC2 directly (bypassing the switch) to the modem, in which case the internet works. 2. Connected PC2 directly (again bypassing the switch) to the router port that PC1 was originally plugged into, which did not work. 3. Bought a new router thinking it may be a hardware issue with the router, but this yielded the same problem as the old router. i.e. PCs will connect as before with PC1 accessing the internet, PC2/laptop/Xbox not accessing the internet. 4. Updated drivers on the machines I was able to do so, also to no avail. 5. Called Time Warner to have them check the modem to see if it's the problem, they said it was good over the phone. But I'm not convinced and plan to exchange it tomorrow. So, I am basically out of ideas and still baffled at the cause of this problem. It's really becoming quite a frustration for me so any help would be GREATLY appreciated. Thank you, Nate

04-01-2009, 09:55 AM	#2 (permalink)
snw35 Registered User Join Date: Apr 2009 Posts: 12 OS: Vista 64bit	Re: Weird Network Issue Hi, At first glance it seems like you have NAT disabled, or not working. Your ISP will only give one MAC (physical) address on your network an IP address at any one time. Either your modem or your router should mask the presence of multiple devices using NAT, allowing them all to have internet access, but this doesn’t seem to be happening. How does the modem connect to the router, and how did you connect PC2 directly to the modem (USB, Ethernet?) Can you give some more information from PC1 (the one that still works?) If you click the start button, Click ‘run’ Type 'cmd' into the run box, Click 'OK' to bring up the command prompt, Type ‘ipconfig/all’, Right-click and ‘select all’ Then paste the contents into your next reply.

04-01-2009, 10:07 AM	#3 (permalink)
TheGreatNate Registered User Join Date: Apr 2009 Location: Ohio Posts: 8 OS: Windows XP, SP3	Re: Weird Network Issue The modem connects to the router with Cat5 cables and that is how I've connected the computers when trying the various things. This is what the ipconfig showed: Windows IP Configuration Host Name . . . . . . . . . . . . : sininger-203c43 Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : Trendnet Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Trendnet Description . . . . . . . . . . . : Realtek RTL8169/8110 Family Gigabit Ethernet NIC Physical Address. . . . . . . . . : 00-16-17-17-D6-E2 Dhcp Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IP Address. . . . . . . . . . . . : 192.168.10.101 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.10.1 DHCP Server . . . . . . . . . . . : 192.168.10.1 DNS Servers . . . . . . . . . . . : 85.255.112.173 85.255.112.122 Lease Obtained. . . . . . . . . . : Tuesday, March 31, 2009 9:17:45 PM Lease Expires . . . . . . . . . . : Tuesday, April 07, 2009 9:17:45 PM

04-01-2009, 10:29 AM	#4 (permalink)
SilverDwn Registered User Join Date: Mar 2009 Posts: 30 OS: XP SP2	Re: Weird Network Issue Are you able to access your router via a web browser? Try typing 192.168.10.1 into internet explorer or whatever you use. I suspect the router is struggling to identify itself to the modem.

04-01-2009, 10:49 AM	#5 (permalink)
snw35 Registered User Join Date: Apr 2009 Posts: 12 OS: Vista 64bit	Re: Weird Network Issue I can see that the computer you ran ipconfig on is using local addresses for its IP address, gateway, and DHCP, which would indicate that NAT is not the problem. Could you disconnect PC1 from the network, and run inside the command prompt on PC2: Ipconfig/release Then when that finishes, Ipconfig/renew Then post the results that come up.

04-01-2009, 11:29 AM	#6 (permalink)
SilverDwn Registered User Join Date: Mar 2009 Posts: 30 OS: XP SP2	Re: Weird Network Issue Another thing you should try is see if you can at least ping an internet address. You can find an address by going on a known working computer (PC1 in your case) opening a dos prompt and do as follows: C:\>ping www.google.com Pinging www.l.google.com [209.85.227.103] with 32 bytes of data: Reply from 209.85.227.103: bytes=32 time=43ms TTL=239 Reply from 209.85.227.103: bytes=32 time=32ms TTL=239 Reply from 209.85.227.103: bytes=32 time=30ms TTL=239 Reply from 209.85.227.103: bytes=32 time=31ms TTL=239 Ping statistics for 209.85.227.103: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 30ms, Maximum = 43ms, Average = 34ms Get that address in bold (209.85.227.103) and see if one of the PC's you are having problems with can ping the address. If it can, your issues lies with the DNS server entries on your hosts. If you cant ping the address, something else is wrong. You could narrow this down with the command: tracert 209.85.227.103 This will show you where the communcation fails, thats if the data even leaves your PC in the first place.

04-01-2009, 05:43 PM	#9 (permalink)
snw35 Registered User Join Date: Apr 2009 Posts: 12 OS: Vista 64bit	Re: Weird Network Issue The DNS servers in your original reply, 85.255.112.173 and 85.255.112.122, seem odd to me. When you released and renewed the connection, with PC1 disconnected from the network, do these DNS severs appear on your other device as well? 192.168.10.1 is the IP of your router, and I would normally expect this to be your DNS server. Try manually assigning the DNS information on any computers that cannot connect. To do this on XP; Go to the control panel, Go to network connections , Right-click 'local area connection', Scroll to 'Internet protocol tcp/ip' and highlight it, Click properties You should get a window with the option 'obtain a DNS server automatically' selected. Change it to 'use the following DNS sever addresses' and put '192.168.10.1' into the topmost box; you can leave the lower one blank. Click OK then close, and open a web browser to check if the machine can now access the web. If it can then great, if not then could you please post the output of ipconfig/all on the machine you tried it on.

04-01-2009, 07:53 PM	#11 (permalink)
snw35 Registered User Join Date: Apr 2009 Posts: 12 OS: Vista 64bit	Re: Weird Network Issue Ok, I think I know what your problem is now, I have seen that DNS address (64.86.133.51) before. It is set up by a virus called 'Flush.M' which creates a fake DHCP server on the computer it infects. Long story short, it will sit on that computer and tell all the other machines on your network to use those other DNS addresses, disrupting their access to the internet. You need to identify which of your machines is causing this by unplugging them one at a time, and typing: ipconfig/release Then, ipconfig/renew On one of the others, and checking the DNS addresses it receives by running 'ipconfig/all'. Your router should automatically assign itself (192.168.10.1) as the only DNS server, if it does not, then unplug a different computer and try again. The two addresses that your roommate had appear to be registered in the Ukraine, and are in an IP pool that is associated with malware activity. I would be inclined to give that machine a full virus scan with an up-to-date antivirus package. I know it will take a while to do, but I would recommend the further step of scanning the rest of your computers with an antivirus package just to be sure. If you don't have any antivirus installed then I could suggest some good free ones.

04-02-2009, 11:38 AM	#12 (permalink)
TheGreatNate Registered User Join Date: Apr 2009 Location: Ohio Posts: 8 OS: Windows XP, SP3	Re: Weird Network Issue Ok, unhooked my roommate's computer and ran ipconfig/all after releasing and renewing my IP address and this was the result: Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp. C:\Documents and Settings\Nathan>ipconfig/all Windows IP Configuration Host Name . . . . . . . . . . . . : NSLaptop Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Mixed IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : cinci.rr.com Ethernet adapter Wireless Network Connection: Media State . . . . . . . . . . . : Media disconnected Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network Connection Physical Address. . . . . . . . . : 00-16-6F-0B-1F-86 Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : cinci.rr.com Description . . . . . . . . . . . : Marvell Yukon 88E8036 PCI-E Fast Eth ernet Controller Physical Address. . . . . . . . . : 00-A0-D1-2D-E9-CA Dhcp Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IP Address. . . . . . . . . . . . : 192.168.1.100 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 DHCP Server . . . . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . : 65.24.7.10 65.24.7.11 Lease Obtained. . . . . . . . . . : Thursday, April 02, 2009 1:34:31 PM Lease Expires . . . . . . . . . . : Friday, April 03, 2009 1:34:31 PM C:\Documents and Settings\Nathan> Would those DNS servers indicate the problem is with my computer? The only other thing connected is my Xbox. If that is the problem, I don't really know how to fix a virus on that if it can even get one...

04-02-2009, 12:49 PM	#13 (permalink)
snw35 Registered User Join Date: Apr 2009 Posts: 12 OS: Vista 64bit	Re: Weird Network Issue The information your laptop has picked up seems to be different from your room-mates: He got 192.168.10.1 as his DHCP server, which I would expect, Your laptop got 192.168.1.1, which seems strange. Try disconnecting your own machine, then running release and renew on your laptop again. You should see your router's IP (192.168.10.1) come up as the DNS if your own desktop is the problem. Please post the output of ipconfig/all once you've done that. Make sure nothing is connected wirelessly as well when you try this to eliminate any other possible sources. Edit: Your xbox won't be vulnerable to this virus, so you don't need to worry about it. Last edited by snw35; 04-02-2009 at 12:58 PM.

04-02-2009, 01:31 PM	#14 (permalink)
TheGreatNate Registered User Join Date: Apr 2009 Location: Ohio Posts: 8 OS: Windows XP, SP3	Re: Weird Network Issue Well, I changed the router back to the original one (the original was the Linksys, the replacement was a TRENDnet) between getting the values off of my computer and my roommates, which is I think the reason that mine has .1.1 while his is .10.1. I figured that if the problem is with a virus then I purchased the second router unnecessarily and will take that one back. I'm still not sure why I'm getting a different number for the DNS than the router IP though: Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp. C:\Documents and Settings\Nathan>ipconfig/all Windows IP Configuration Host Name . . . . . . . . . . . . : NSLaptop Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Mixed IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : cinci.rr.com Ethernet adapter Wireless Network Connection: Media State . . . . . . . . . . . : Media disconnected Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network Connection Physical Address. . . . . . . . . : 00-16-6F-0B-1F-86 Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : cinci.rr.com Description . . . . . . . . . . . : Marvell Yukon 88E8036 PCI-E Fast Eth ernet Controller Physical Address. . . . . . . . . : 00-A0-D1-2D-E9-CA Dhcp Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IP Address. . . . . . . . . . . . : 192.168.1.100 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 DHCP Server . . . . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . : 65.24.7.10 65.24.7.11 Lease Obtained. . . . . . . . . . : Thursday, April 02, 2009 3:27:29 PM Lease Expires . . . . . . . . . . : Friday, April 03, 2009 3:27:29 PM C:\Documents and Settings\Nathan> Last edited by TheGreatNate; 04-02-2009 at 01:39 PM.

04-02-2009, 02:47 PM	#15 (permalink)
snw35 Registered User Join Date: Apr 2009 Posts: 12 OS: Vista 64bit	Re: Weird Network Issue Ah right, that would explain allot; those DNS addresses are perfectly fine in that case, as your original device must be a gateway, and those addresses seem to belong to your ISP. Check the DNS addresses of your other computers; they should all be the same as that. Do all of them work now, or are some still unable to connect to the internet?

04-02-2009, 07:29 PM	#16 (permalink)
TheGreatNate Registered User Join Date: Apr 2009 Location: Ohio Posts: 8 OS: Windows XP, SP3	Re: Weird Network Issue I was able to connect everything to the internet that I was having trouble with. It seems that the virus is on my roommates computer but his antivirus hasn't found it last time I checked.

04-02-2009, 08:44 PM	#17 (permalink)
snw35 Registered User Join Date: Apr 2009 Posts: 12 OS: Vista 64bit	Re: Weird Network Issue I'm glad to hear that all your own devices are working again. When your xbox and ipod both received the DNS address of 64.86.133.51, was your room-mates computer connected and on? If it was, then I suspect it that you are right, and that it is infected with the virus I mentioned earlier. Tell him to update his antivirus, then reboot in safe mode by re-staring the machine, and pressing 'F8' repeatedly during boot-up. A menu should appear where you can select 'safe mode', but make sure to choose only safe mode, and not safe mode with networking. Give the computer a full scan, it will take a while, but wait for it to finish. If nothing is detected then tell him to try a different virus scanner, such as AVG: http://free.avg.com/ Which is free for personal use.