Can Send but Not Receive

Running Windows XP SP2. Did the Spybot, Adaware, ewido stuff. Have cleaned up all I know how. Have reinstlled Windows, um, twice... didn't even have a connection before that. Know the modem & router are working cause I'm on a wireless laptop as I type. Really at my wits end.



Please Please Please help.

Thanks in advance, Ann

 

can not send what?

 

Data.

 

Sorry, didn't realize logs were only in that one area. I posted here because I think this is a connectivity issue.

 

Actually, this started about 6-8 weeks ago after my husband, who is a road warrior, used the home desktop on one of his weekends at home. Because I was/am tired of fixing problems he creates on that machine, I left it alone... but the laptop is old & I want to use the desktop so I started trying to fix it. When I looked at it, there was no connectivity at all... no local connection, nada. I did the usual cleaning (cache, cookies, spybot, adaware, hjt, system restore and defrag as well as anything else I could think of). Still nothing. So I reloaded Windows... nothing. Reloaded Windows again... finally had the local connection. BUT it only sends packets, will not receive.

I can't do any online scans cause I can't get online. All the 'fix-it' software I download to my laptop, move to my flash drive, load to the desktop & run.

No new programs added, that I am aware of. I'm gonna do that to-do list you gave me the link for tomorrow... hope I can get it all done tomorrow.... that's alot of stuff! ;-)

Thanks for your response. Sure am open to about anything. Ann

 

Good morning.

Here is the info from local connection / properties.

Physical address 00-00-00-00-00-00
IP address 169.254.0.0
Subnet mask 255.255.0.0
Default Gateway
DNS Server
WINS Server


Hope this gives you a clue. And thanks again. Ann

 

how do you know you can send?

 

"how do you know you can send?"

When I attempt to load a browser, packets are being sent, but not received. 'Send' in this instance doesn't mean that anyone is receiving the packets, but they are being sent from my machine.

I know the cable modem and router work because I'm using them right now, wirelessly on my laptop. And can get online directly with the laptop too. And can get online directly w/o the router with the laptop. Why, you might ask, don't I just use the laptop? Wish I could... it's pretty dated & the cd drive doesn't work. But I'm pretty darned glad it's here right about now... lol.

Thanks! Ann

 

ok, lets start from the bottom and work up.

go to start - control panel - admin tools - comp. management
click on device manager
click on network adaptors
is there anything listed here and if so does it have an "!" in yellow
if there is nothing listed your network adaptor is missing a driver.

in device manager look for a device with "!" beside it. it may have a general desc. of network adapter. once you find it or not you need to figure out what brand and model it is and download the driver for it. if it is a known computer brand you can usually call the man. give them the serial number and they can tell you where to go to get the driver. if not you post back and i can tell you how to figure out which nic it is.

is it build on to the motherboard or an add-in card

 

Network Adapters
1394 Network Adapter #2 (disabled)
NVIDIA nForce Networking Controller

is what I see. No yellow triange with ! inside. All devices are shown as working. I disable the 1394 because we don't use firewire, and it doesn't change anything when it is enabled.

I *believe* it's a stand-alone card, not on the m'board, but I'm gonna check to make sure. There may be an updated driver & I'll check on that too.

Get back to you soon, Ann (and TY!)

 

sart - run - type "cmd"
type "ipconfig /all"

post output

 

sure

 

OK, here it is for the desktop:

Host name ann
Primary dns suffix
Node type unknown
IP Routing enabled no
WINS proxy enabled no​

Ethernet adapter local area connection 4

Connection-specific DNS suffix
Description NVIDIA nForce network controller
Physical address 00-00-00-00-00-00
DHCP enabled Yes
Autoconfiguration enabled Yes
Autoconfiguration IP address 169.254.0.0
Subnet mask 255.255.0.0
Default Gateway​

Tunnel Adapter Teredo Tunneling Pseudo-Interface

Connection-specific DNS suffix
Description Teredo Tunneling Pseudo-Interface
Physical address FF-FF-FF-FF-FF-FF-FF-FF
DHCP enabled No
IP address ?
Default Gateway
NetBIOS over TCP/IP Disabled​

And here is the laptop:

Windows IP Configuration

Host Name . . . . . . . . . . . . : LLT
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : hsd1.tx.comcast.net.

Ethernet adapter Wireless Network Connection 10:

Connection-specific DNS Suffix . : hsd1.tx.comcast.net.
Description . . . . . . . . . . . : Wireless-G Notebook Adapter v.2.0
Physical Address. . . . . . . . . : 00-12-17-2C-B2-DE
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.100
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 68.87.85.98
68.87.69.146
Lease Obtained. . . . . . . . . . : Monday, September 25, 2006 10:12:53
AM
Lease Expires . . . . . . . . . . : Tuesday, September 26, 2006 10:12:53
AM

Ethernet adapter Local Area Connection 9:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : SiS 900 PCI Fast Ethernet Adapter #2

Physical Address. . . . . . . . . : 00-50-EB-0F-3B-39

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : FF-FF-FF-FF-FF-FF-FF-FF
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::5445:5245:444f%5
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Automatic Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . : hsd1.tx.comcast.net.
Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface

Physical Address. . . . . . . . . : C0-A8-01-64
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::5efe:192.168.1.100%2
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Disabled

Whatcha think?

Ann

 

ok, I was wrong. The network adapter is on the mb, NVIDIA is the software we use. This stuff just confuses me so... sigh.

Thanks, Ann

 

OK, did all the rebooting in the order described. Nothing changed.

Ya know, there is another problem, but I don't think the two are related. Upon booting there is a svchost that takes up 98-99% of the CPU. I kill it & the cpu usage drops to normal. Just an FYI.

Do I need to redo all the ipconfig thingies?

I truly appreciate your help.

Ann

 

I don't know how to see what folder it is in. I see it when I use Task Manager.

 

there is more to the problem.. if you notice the physical address "MAC Address" of the local area conn. 4 is all "0"

 

There are 6 svchost.exe in task manager, but only 2 showed up in a search after enabling hidden files & folders. The paths are:

C:WINDOWS\system32\dllcache\
C:WINDOWS\system32\

Does this mean something? Ann

 

In XP you can use the regedit to edit the registry from a GUI or the reg command to edit it from the console. Information on all your NICs can be found in the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\ . Under this key you will find a bunch of sub keys labeled as 0000, 00001, 0002 and so forth. We can assume any MAC address we want by finding the key that controls the NIC we want to change, putting in a string value called “NetworkAddress” and setting it to the MAC address we want to use formatted as a twelve digit hex number (example: 000000000001). To find out which key is which we can search through them for the value “DriverDesc” until we find the one that matches the NIC we wish to alter. After you set “NetworkAddress” to the address you want just restart the NIC by disabling it then enabling it. You can confirm the MAC address change by using the “getmac” or “ipconfig /all” commands.

 

you can also use this GUI program

http://www.gorlani.com/publicprj/macmakeup/macmakeup.asp

 

Following that link I found this command 'Tasklist /SVC', ran it & this is what it gave me:

C:\>tasklist /svc

Image Name PID Services
========================= ====== =============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 412 N/A
csrss.exe 472 N/A
winlogon.exe 500 N/A
services.exe 544 Eventlog, PlugPlay
lsass.exe 556 ProtectedStorage, SamSs
ati2evxx.exe 704 Ati HotKey Poller
svchost.exe 716 DcomLaunch, TermService
svchost.exe 780 RpcSs
svchost.exe 840 AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, Iprip, lanmanserver,
lanmanworkstation, Netman, Nla, RasMan,
Schedule, seclogon, SENS, SharedAccess,
ShellHWDetection, srservice, TapiSrv,
Themes, TrkWks, W32Time, winmgmt, wscsvc,
WZCSVC
InCDsrv.exe 868 InCDsrv
svchost.exe 1000 Dnscache
svchost.exe 1140 LmHosts, RemoteRegistry, SSDPSRV, WebClient
spoolsv.exe 1276 Spooler
explorer.exe 1420 N/A
point32.exe 1488 N/A
ctfmon.exe 1524 N/A
aswUpdSv.exe 1700 aswUpdSv
ATKKBService.exe 1728 ATKKeyboardService
ashServ.exe 1744 avast! Antivirus
guard.exe 1800 ewido anti-spyware 4.0 guard
inetinfo.exe 1864 IISADMIN
MDM.EXE 1912 MDM
nSvcIp.exe 1976 nSvcIp
nSvcLog.exe 156 nSvcLog
pctspk.exe 232 Pctspk
svchost.exe 820 stisvc
nSvcAppFlt.exe 1172 ForceWare Intelligent Application Manager (IA
M)
ashMaiSv.exe 2532 avast! Mail Scanner
alg.exe 2872 ALG
cmd.exe 1736 N/A
tasklist.exe 2012 N/A
wmiprvse.exe 2868 N/A

Are the services listed besided each svchost valid or do you see a bad thing anywhere?

Thanks, Ann

 

I'm not sure I understand what I need to do, tho I sorta grasp what you're saying. Would I need to contact my ISP if I change the MAC? I know we had to do that when we bought a new cable modem.

 

your isp can see your mac address and allow it on there network. if you change it to something new they may have to allow it. at any rate your computer is swnding out an invalid mac address. it could have been changed due to a trojan or other spyware. that is not my area of expertease. i do know if the mac address is not a valid address the computer will not work on a network. didn't you say you formatted the copmuter and re-installed xp?

 

No, I didn't reformat... trying to avoid that. Did try the 'repair' of Windows - did nothing, tho after the 2nd reinstall of Windows XP there was at least a local service connection where there hadn't been.

Should I compare the NIC info in the registry of the laptop to what is/isn't there in the desktop?

 

I have done all that at least once, will do it again. Even changed cables, to see if that was it. If I wasn't able to get online wirelessly I would be suspicious of all that too, but since I can.... well, I dunno, ya'll are the bright ones in this conversation. ;-)

I'll be back in a bit after i check it all out and search for svchost.com.

Thanks! Ann

 

Nope.

C:\>ping 192.168.1.100

Pinging °ÿ with 32 bytes of data:

Destination host unreachable.
Destination host unreachable.
Destination host unreachable.
Destination host unreachable.

Ping statistics for :
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\>​

and the svchost.* search results are:

svchost.exe 14,336 8/4/2004 7:00 AMc a C:\WINDOWS\system32\dllcache\
svchost.exe 14,336 8/4/2004 7:00 AM a C:\WINDOWS\system32\
SVCHOST.EXE-3530F672.pf 14,308 9/25/2006 3:15 PM a C:\WINDOWS\Prefetch\​

and the new ipconfig results are:

C:\>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : ann
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 4:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NVIDIA nForce Networking Controller
Physical Address. . . . . . . . . : 00-00-00-00-00-00
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IP Address. . . : 169.254.0.0
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : FF-FF-FF-FF-FF-FF-FF-FF
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : ?
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

C:\>​

And I uninstalled the ethernet card & rebooted. Still nothing new.

I so appreciate both of your attention to this. What would be the next step that you would recommend?

Thanks, Ann

 

well, you have a few issues
1. not pulling an ip address
2. not pulling a subnet mask
3. not pulling a default gateway
4. invalid mac address
thats just what we know of

i would say set the mac address and see if the others correct once that is done.

 

if you have a best buy close you can purchase a new card. it is possible the one in your computer is bad. network cards are not that expensive

 

I don't know how ya'll do this all day... just dealing with this one is wearing me out! I am going to step away from it for the rest of today, kinda let it all gel in my brain & go at it again tomorrow morning.

Thanks again, Ann

 

OK, here's an update... just to see what would happen, I used the ip info that the laptop had this morning into the local area connection for the desktop. And guess what... it gets online! I realize this isn't a solution, I was just trying to see if the hardware was the problem. It doesn't seem to be.

While online, I downloaded the latest drivers for my ethernet adapter that is on the motherboard, so that is all up-to-date now.

Then I called my isp to see if they could help get me connected without using the static ip info.... nope. Did all the disconnect, reconnect, off/on & stand on your head stuff. Just got nowhere.

How does all of that affect what I need to do? Ann

 

Not a guru at this, but it sounds to me like you DHCP service may not be running.

Go to start, run, type "services.msc" (no quotes), hit enter. Doubleclick on the "DHCP Client" service, make sure it is set to "automatic" and started.

Probably worth checking to make sure the "DNS Client" service is set to automatic and is running at the same time.

Be sure to let us know if either of the services won't start or kick back any error messages, hope this helps.

 

OK, I'll see about the router update thingie. And, no I used the same ip that the laptop had, just disabled it so it would work on the desktop. Would one-up work?

I did the services.msc and both DHCP Client and DNS Client were already set on automatic and running. And no messages that I could tell.

Ann

Just realized that, while the router stuff may need to be updated, that can't be the basic problem because it happens when the cable modem is directly plugged into the desktop.... sigh.

 

Along with Tims very good advice,

I would reboot and tap F8 to bring up the advanced options menu and go into safe mode with networking. See if it does the same thing in safe mode with networking. If no, it is probably a background software problem- probably a firewall of some sort.

If it does the same thing in safe mode with networking, it might be worth try a reseting the winsock keys. If you have Service Pack 2 for windows XP, you can do it simply by typing "netsh winsock reset" (no quotes) into a command prompt (a reboot is required for it to take effect), or if you don't have Service Pack 2, you can use the winsock fix available here: http://www.majorgeeks.com/download.php?det=4372