From: Pabs on
Hi, one of our workstations recently had a computer virus/spyware on
it for which I was able to remove. Now for some reason I can't RDC to
the workstation. Also what I find strange is that I tried to ping the
ip address of the workstation and I get no reply. The workstation is
able to access the Internet, send / receive Outlook email and access
shared network drives, though. Any ideas? Thanks.
From: Cris Hanna [SBS - MVP] on
When ever a computer behaves badly after an attempt at virus/spyware removal...it's obvious that the effects have not been removed

Save anything on the workstation (run it through a malware scanner on another PC) then format and reinstall. It's the only safe bet

--
Cris Hanna [SBS - MVP] (since 1997)
Co-Contributor, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
Owner, CPU Services, Belleville, IL
A Microsoft Registered Partner
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"Pabs" <pberg(a)yahoo.com> wrote in message news:2bd3355b-4708-4237-b858-744ec6ecc0b3(a)x42g2000vbb.googlegroups.com...
Hi, one of our workstations recently had a computer virus/spyware on
it for which I was able to remove. Now for some reason I can't RDC to
the workstation. Also what I find strange is that I tried to ping the
ip address of the workstation and I get no reply. The workstation is
able to access the Internet, send / receive Outlook email and access
shared network drives, though. Any ideas? Thanks.
From: Duncan McC on
In article <2bd3355b-4708-4237-b858-744ec6ecc0b3
@x42g2000vbb.googlegroups.com>, pberg(a)yahoo.com says...
>
> Hi, one of our workstations recently had a computer virus/spyware on
> it for which I was able to remove. Now for some reason I can't RDC to
> the workstation. Also what I find strange is that I tried to ping the
> ip address of the workstation and I get no reply. The workstation is
> able to access the Internet, send / receive Outlook email and access
> shared network drives, though. Any ideas? Thanks.

DNS info corrupted or changed?

Find the PC's IP addy. Can you ping that? If so, you have name
resolution problems - check the DNS and DHCP entries for the PC.

You may need to delete the DNS server entry for the PC, and then get
that re-entered, by forcing an update from the PC...
ipconfig /registerdns

--
Duncan.
From: Duncan McC on
In article <MPG.26269ac83a16458c989b4f(a)news.microsoft.com>, hard(a)work.ok
says...
>
> In article <2bd3355b-4708-4237-b858-744ec6ecc0b3
> @x42g2000vbb.googlegroups.com>, pberg(a)yahoo.com says...
> >
> > Hi, one of our workstations recently had a computer virus/spyware on
> > it for which I was able to remove. Now for some reason I can't RDC to
> > the workstation. Also what I find strange is that I tried to ping the
> > ip address of the workstation and I get no reply. The workstation is
> > able to access the Internet, send / receive Outlook email and access
> > shared network drives, though. Any ideas? Thanks.
>
> DNS info corrupted or changed?
>
> Find the PC's IP addy. Can you ping that? If so, you have name
> resolution problems - check the DNS and DHCP entries for the PC.
>
> You may need to delete the DNS server entry for the PC, and then get
> that re-entered, by forcing an update from the PC...
> ipconfig /registerdns

And another thing you may want to perform, before the above, is a tcp
stack reset (DNS hijacking is quite common w' virii, and removing the
virus won't fix the damage already done)...

Unfortunately you fail to mention the workstation OS - but assuming XP.

From: http://support.microsoft.com/kb/299357

At the command prompt, copy and paste (or type) the following command
and then press ENTER:
netsh int ip reset c:\resetlog.txt
Note If you do not want to specify a directory path for the log file,
use the following command:
netsh int ip reset resetlog.txt


--
Duncan.