Posted on

Windows XP – Resolving Aquiring Network Address Problems

We need your help!


Cyber Sprocket is looking to qualify for a small business grant so we can continue our development efforts. We are working on a custom application builder platform so you can build custom mobile apps for your business. If we reach our 250-person goal have a better chance of being selected.

It is free and takes less than 2 minutes!

Go to www.missionsmallbusiness.com.
Click on the “Login and Vote” button.
Put “Cyber Sprocket” in the search box and click search.
When our name comes up click on the vote button.

 

And now on to our article…

After spending nearly a week on & off removing a virus from a notebook computer, we are down to one last task… getting the network services back online.   Here are some notes about how to get around this problem and the ever-present “acquiring network address” that never is acquired.

Resetting Windows Network Stacks

  • To reset the Windows/XP TCP/IP stack use this command from the command shell:
    netsh int ip reset reset.log
  • To reset the Windows/XP Socket layer, use this command from the command shell:
    netsh winsock reset catalog

Check For Rootkits

Turns out the virus installed a rootkit.  These are special files hidden by the operating system that change how the base OS works.  That makes them hard to detect & remove with normal spyware.  TDSS rootkit by Kapersky Labs helps fix that:

In our case the file c:\WINDOWS\system32\DRIVERS\isapnp.sys was compromised.  You can repair this with a Windows XP recovery (sometimes) by following these instructions : http://support.microsoft.com/kb/315311.

In our case Combo-Fix also found problems with:

  • c:\windows\bootstat.ocx
  • c:\windows\Copy of notepad.exe
  • c:\windows\system32\drivers
    pf.sys
  • c:\windows\system32\drivers\Packet.dll
  • c:\windows\system32\drivers\Thumbs.db
  • c:\windows\system32\drivers\wpcap.dll