HOME | SERVICES | CONTACT | PORTFOLIO | MUSIC

Virus caused TCP/IP Problems

Ok... Your PC was FULL of viruses and spyware. Boo!!! But, You've managed to successfully remove them... Hurrahhh!!! Well, upon reboot you now can no longer get to the internet.. Boooo!!!

Dropping to a command prompt and doing an ipconfig returns this wonderfully cryptic information:


Windows IP Configuration
An Internal error occured: The request is not supported.
Please contact Microsoft Product Support Services for further help.
Additional information: Unable to query host name.
This looks like the TCP/IP stack has been killed... if you are using XP you can use the "netsh" command to "reset" the TCP/IP settings but, if this does not work you may need to take more drastic action.

I found this solution from: http://forums.scotsnewsletter.com/lofiversion/index.php/t9743.html This worked very well for me when I gave it a try.

To fix the problem, you have to replace TCPIP.SYS with a good copy. Reinstalling Windows will not allow you to replace it. Starting in Safe Mode Command Prompt won't give you the ability to rename or delete TCPIP.SYS. Starting Windows from the CD and using the Repair Console will also fail unless you follow this set of steps.

  1. Get a copy of TCPIP.SYS by searching "TCPIP.SYS" on your machine, looking in hidden files and folders. You'll get a bunch of hits. Right click the files and check the preferences to get the most recent version that has Revision data from Microsoft. The one in C:\windows\system32\drivers is not gonna have any file data associated with it, even though it is exactly the same size as the good file.
  2. Put the copy of TCPIP.SYS on the root of your C: drive. I had a problem when I made a folder for it, so I recommend just copying it directly to root.
  3. Restart your computer with a Windows XP CD (WIN2000 would also work, I think) and select the Repair console function. Log in as Administrator (better know your administrator password!).
  4. Navigate to C:\windows\system32\drivers. You will be able to see the TCPIP.SYS file there is you type in DIR, but you won't be able to delete or rename it.
  5. Type in "CHKDSK /P". This runs a disk check on your hard drive and fixes errors whether the System thinks you need it or not.
  6. Type "del TCPIP.SYS" and press Return.
  7. Type in "CHKDSK /P" and run the disk check again (yes, I tried to do do this without this step the first time and it didn't work).
  8. Type in "copy C:\TCPIP.SYS". You should get a message that this completed correctly.
  9. Type in "CHKDSK /P" one last time just to be sure (I didn't confirm that this was required, but why waste all the previous effort?)
  10. Type in "Exit" and let the computer restart. Your internet access should be restored, the Windows Firewall will work, and ipconfig should be able to config IP.

Good luck, I hope this helps if any of you run into this problem.

Related Blog Entries

Comments (Comment Moderation is enabled. Your comment will not appear until approved.)
Yes, this can be caused by a virus, but recently, this issue has to do with Microsoft Windows Updates. I am not sure which ones are causing this, but I know it is not virus related because I have had this issue 3 times this week and all three times have been on systems that are very secure (as in no users on them, they only thing that changes is that they receive updates).
# Posted By Isotech Support | 8/21/07 9:38 AM
Interesting... I have not run into this as an update caused problem. The couple of times I've seen it happen was while working with infected machines. In the last case the TCPIP.SYS file was completely gone. Looking at the scan logs showed it being deleted by the virus scanner. If you track down the updates that caused your problem... Mind sharing?
# Posted By Robert Owen | 8/21/07 9:45 AM
I ran a complete virus scan and found nothing. I did install updates prior to this occuring on my system. My tcpip.sys file was missing entirely, so I am replaced it, using
the directions in this thread. You, Mr Owen, are a godsend. Thanks for posting this fix, it worked like a charm.
# Posted By Bret Whitton | 8/21/07 9:13 PM
Ahhh Shucks.... ;) No problemo... I'm glad these directions worked for you too!!! I am curious, do you know what updates were installed prior to the loss?
# Posted By Robert Owen | 8/21/07 9:35 PM
Has worked on four customer computers so far.... not sure if it matters.... but i tried once with a "compressed/backed up" tcpip.sys (blue in explorer) and that didn't work... then in safe mode with out networking i was able to replace..

seems more like an update.... only on of the computer i have worked on had virii.... and it didn't affect tcpip.sys...
# Posted By James Craig | 8/30/07 8:52 AM
thanks for posting
interesting site
# Posted By newsworldjournal | 4/9/08 7:40 AM
Hi ... nice information ... however I have read and read and I am a little nervous about the delete part as to where i am in step four and five, you see at step four I am to be in the "Navigate to C:\windows\system32\drivers" directory according to your directions, which is fine and I see file ... but here is where I need a little help, it does not say to stay in this directory and go back to C: directory? ... and if i stay in this directory it does not allow the command "CHKDSK /P" ... but it does allow it if you are in the C: directory ... thus not knowing where to be at step four and five ... then I am not sure as which directory I should be in when I delete the tcpip.sys

please can you help as I have done all else ...everything rebuild tcpip stack manually etc etc, and I really think this is the fixed as the drivers cannot bind and or worked with the tcpip.sys in the driver directory ...

Please help with some fine tuning some of those steps ...

Thank you so much
# Posted By trying to understand | 6/12/08 10:52 AM
Hi.. try returning to the root (C:) to run the Chkdsk /p then go back to the directory in step 4 and continue with step 6. That should work. Good Luck!
# Posted By Robert A. Owen | 6/12/08 11:06 AM
Content Copyright © 2005 Owen Consulting - All Rights Reserved | This Blog Powered by BlogCFC version 5.9.1.002.