Prev: SBS 2008 POP3 Connector will not start, is misconfigured
Next: SBS2008 R2 ?? / Exchange 2010 ?? / SBS2010 ??
From: Pabs on 6 Apr 2010 11:16 Hi, one of our workstations recently had a computer virus/spyware on it for which I was able to remove. Now for some reason I can't RDC to the workstation. Also what I find strange is that I tried to ping the ip address of the workstation and I get no reply. The workstation is able to access the Internet, send / receive Outlook email and access shared network drives, though. Any ideas? Thanks.
From: Cris Hanna [SBS - MVP] on 6 Apr 2010 11:29 When ever a computer behaves badly after an attempt at virus/spyware removal...it's obvious that the effects have not been removed Save anything on the workstation (run it through a malware scanner on another PC) then format and reinstall. It's the only safe bet -- Cris Hanna [SBS - MVP] (since 1997) Co-Contributor, Windows Small Business Server 2008 Unleashed http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1 Owner, CPU Services, Belleville, IL A Microsoft Registered Partner ------------------------------------ MVPs do not work for Microsoft Please do not submit questions directly to me. "Pabs" <pberg(a)yahoo.com> wrote in message news:2bd3355b-4708-4237-b858-744ec6ecc0b3(a)x42g2000vbb.googlegroups.com... Hi, one of our workstations recently had a computer virus/spyware on it for which I was able to remove. Now for some reason I can't RDC to the workstation. Also what I find strange is that I tried to ping the ip address of the workstation and I get no reply. The workstation is able to access the Internet, send / receive Outlook email and access shared network drives, though. Any ideas? Thanks.
From: Duncan McC on 6 Apr 2010 20:36 In article <2bd3355b-4708-4237-b858-744ec6ecc0b3 @x42g2000vbb.googlegroups.com>, pberg(a)yahoo.com says... > > Hi, one of our workstations recently had a computer virus/spyware on > it for which I was able to remove. Now for some reason I can't RDC to > the workstation. Also what I find strange is that I tried to ping the > ip address of the workstation and I get no reply. The workstation is > able to access the Internet, send / receive Outlook email and access > shared network drives, though. Any ideas? Thanks. DNS info corrupted or changed? Find the PC's IP addy. Can you ping that? If so, you have name resolution problems - check the DNS and DHCP entries for the PC. You may need to delete the DNS server entry for the PC, and then get that re-entered, by forcing an update from the PC... ipconfig /registerdns -- Duncan.
From: Duncan McC on 6 Apr 2010 23:12
In article <MPG.26269ac83a16458c989b4f(a)news.microsoft.com>, hard(a)work.ok says... > > In article <2bd3355b-4708-4237-b858-744ec6ecc0b3 > @x42g2000vbb.googlegroups.com>, pberg(a)yahoo.com says... > > > > Hi, one of our workstations recently had a computer virus/spyware on > > it for which I was able to remove. Now for some reason I can't RDC to > > the workstation. Also what I find strange is that I tried to ping the > > ip address of the workstation and I get no reply. The workstation is > > able to access the Internet, send / receive Outlook email and access > > shared network drives, though. Any ideas? Thanks. > > DNS info corrupted or changed? > > Find the PC's IP addy. Can you ping that? If so, you have name > resolution problems - check the DNS and DHCP entries for the PC. > > You may need to delete the DNS server entry for the PC, and then get > that re-entered, by forcing an update from the PC... > ipconfig /registerdns And another thing you may want to perform, before the above, is a tcp stack reset (DNS hijacking is quite common w' virii, and removing the virus won't fix the damage already done)... Unfortunately you fail to mention the workstation OS - but assuming XP. From: http://support.microsoft.com/kb/299357 At the command prompt, copy and paste (or type) the following command and then press ENTER: netsh int ip reset c:\resetlog.txt Note If you do not want to specify a directory path for the log file, use the following command: netsh int ip reset resetlog.txt -- Duncan. |