Unsolved
This post is more than 5 years old
41 Posts
0
16250
December 28th, 2005 02:00
NIC can receive but not send
Hello,
This problem is on a Dell GX260 running Win2K pro and McAfee Anti-virus enterprise edition with a 10/100 Ethernet nic.
Being very foolish, I tried to help someone at work by installing all the Win2K updates as well as McAfee's anti-virus. Before I did this all was well. After I did this, I cannot ping anything but the nic status window shows I am receiving info.
I have tried uninstalling McAfee and using End it All to stop all processes. I have verified the cable is ok. I ran Ad-Aware to remove the few minor spyware stuff.
The computer connects through an SMC router with DHCP. The other computers connected to this router are all fine. There is no software firewall on the computer.
I have rebooted the computer several times. When it starts up, it takes a long time to display the network connection on the system tray.
I ran Winsockfix and that didn't change anything.
I believe that either the dreaded Win updates or McAfee broke something.
I'd appreciate any suggestions as I have never seen anything like this before.
Thank you,
Jim
This problem is on a Dell GX260 running Win2K pro and McAfee Anti-virus enterprise edition with a 10/100 Ethernet nic.
Being very foolish, I tried to help someone at work by installing all the Win2K updates as well as McAfee's anti-virus. Before I did this all was well. After I did this, I cannot ping anything but the nic status window shows I am receiving info.
I have tried uninstalling McAfee and using End it All to stop all processes. I have verified the cable is ok. I ran Ad-Aware to remove the few minor spyware stuff.
The computer connects through an SMC router with DHCP. The other computers connected to this router are all fine. There is no software firewall on the computer.
I have rebooted the computer several times. When it starts up, it takes a long time to display the network connection on the system tray.
I ran Winsockfix and that didn't change anything.
I believe that either the dreaded Win updates or McAfee broke something.
I'd appreciate any suggestions as I have never seen anything like this before.
Thank you,
Jim
0 events found
No Events found!


speedstep
11 Legend
•
47K Posts
0
December 29th, 2005 02:00
LSPFIX
Download the LSPFix utility from http://www.cexx.org/lspfix.htm
Antivirus may have deleted winsock hijacker and now you cannot get it back.
http://www.cit.cornell.edu/computer/security/spyware/lspfix/
Yobubba
41 Posts
0
December 31st, 2005 01:00
BBraxton
2 Intern
•
2K Posts
0
January 6th, 2006 12:00
Speedstep,
Would either of your links (above) pertain to mine
http://forums.us.dell.com/supportforums/board/message?board.id=oplex_network&message.id=6303
?
Jbirk
339 Posts
0
January 6th, 2006 22:00
LSP fix essentially re-numbers the Layered Service Providers chain if it is broken. It also has the ability to remove an entry from the registry if you check, "I Know what I am doing"
Their are two that are super critical and one that is important and should never be removed.
Winsock Fix deletes the entire LSP Chain in the registry and creates a brand new one by using the default Widnows Chain. Essentially it deletes then imports some registry entries.
LSP fix will not help you if WinsockXPFix didn't help.
________________
LSP Fix is a better program, IMO because it does not reset you 100% to defaults. For instance, if you are on a Novell Network or run Google Desktop for some reason, LSP fix won't hose you up by removing all non-default entries.
Jbirk
339 Posts
0
January 6th, 2006 22:00
It should be easy to fix. Quite simply, remove McAfee and turn off all windows firewalls and go to add/remove programs and uninstall any drivers in there then delete through device manager and reboot.
They should be auto detected or you may hae to install them. At any rate install known good NIC drivers and Windows will install clients... protocols...
Yobubba
41 Posts
0
January 7th, 2006 17:00
Hi,
LSP didn't change anything.
I had already removed McAfee (most likely the problem in the first place - Whay is AV softwae so buggy???).
I physically removed the nic, deleted the driver and rebooted. I shut down, physically reinstalled teh nic and loaded the newest driver.
No help.
I'm just going to reformat the drive and move on to XP.
Thanks for all the advice.
Jim
Jbirk
339 Posts
0
January 8th, 2006 03:00
Typically, I troubleshoot Adapter, Protocol, Clients, then services in that order.
I work my way up the OSI model
Application
Presentation
Session
Transfer
Network
Data-Link
Physical
Essentially, this is the blueprint for networking. It dictates if you start at the botom Physical you should first check cabling, link lights, network card hardware, and NIC Drivers to make the hardware work.
Next, you should move up a notch to see if Ethernet itself works by verifying ARP is working correctly with Media Access Lists Addresses.
Next, we check TCP/IP by pinging an IP address typically. This also verifies ARP and Ehthernet... Obviously, if we have a failure here, we re-install TCP/IP and possibly rebuild the winsock if corrupt. We need to get Internet Protocol (TCP/IP) working at this point. Obviously, the next step is to ping by name wheather that be a computername or hostname (NetBIOS DNS). We want to ensure we are able to convert names to ips. I.e. if you have a webserver named "bob" and it has an ip of 10.1.2.25 on a local intranet and you can ping its ip but not the name bob, then DNS needs to be checked out. If DNS is malfuctioning, a lot of things won't work. For instance, DNS may have the wrong DNS Suffix, it may have the worng IP addresses for DNS servers...DHCP may be configureing the clients wrong...
Next, we check the upper layers by testing the Networking Client itself. Typically this is "The Client for Microsoft Networks." A really simple test is to use a UNC path or test an application.
It should work.
-Justin
Yobubba
41 Posts
0
January 10th, 2006 09:00
You got me thinking. I didn't check ARP. I forget what the command sequence is to stop and restart ARP. Can you remind me?
Thanks,
Jim
Jbirk
339 Posts
0
January 10th, 2006 23:00
I am nearly certain it is working. I have yet to see it fail. Anyway, the command is arp to check out your arp tables...