My son's laptop has stopped connecting to the internet.

[bartonq]

It connects to many different wifi's without a problem, but doesn't find the internet. It stopped working while he was away at college, and now doesn't work at home anymore (It used to).

I manually edited this from my own because I cannot get to his on the network.
C:\Users\barto>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DESKTOP-17M2KSR
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hsd1.ca.comcast.net

Wireless LAN adapter Local Area Connection* 9:

Media State . . . . . . . . . . . . . . . . . : Media Disconnected
Connection Specific DNS Suffix . :
Description . . . . . . . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
Physical Address . . . . . . . . . . . . : AC-2B-xx-xx-17-xx
DHCP Enabled . . . . . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . . : Yes

Wireless Lan Adapter Wi-Fi:

Connection-specific DNS Suffix . : hsd1.ca.comcast.net
Description . . . . . . . . . . . . . . . . . . : Intle(R) Dual Band Wireless-AC 3165
Physical Address. . . . . . . . . : AC-2B-xx-xx-17-xx
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2601:646:xxxx:xxxx::471b(Preferred)
Lease Obtained. . . . . . . . . . : Sunday, June 25, 2017 1:26:21 PM
Lease Expires . . . . . . . . . . : Saturday, July 1, 2017 12:33:18 PM
Link-local IPv6 Address . . . . . : fe80::b096:xxxx:xxxx:3a3b%8(Preferred)
IPv4 Address. . . . . . . . . . . : 10.0.0.120(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Sunday, June 25, 2017 1:26:20 PM
Lease Expires . . . . . . . . . . : Wednesday, July 5, 2017 8:12:20 PM
Default Gateway . . . . . . . . . : 10.0.0.1
DHCP Server . . . . . . . . . . . : 10.0.0.1
DHCPv6 IAID . . . . . . . . . . . : 95169390
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-xx-xx-xx-03-AC-2B-xx-xx-17-xx
DNS Servers . . . . . . . . . . . : 2001:558:feed::1
2001:558:feed::2
75.75.75.75
75.75.76.76
75.75.76.76
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

C:\Users\barto>route PRINT
===========================================================================
Interface List
2...ac 2b xx-xx-17-xx ......Microsoft Wi-Fi Direct Virtual Adapter
8...ac 2b xx-xx-17-xx ......Intel(R) Dual Band Wireless-AC 3165
1...........................Software Loopback Interface 1
35...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.0.1 10.0.0.120 50
10.0.0.0 255.255.255.0 On-link 10.0.0.120 306
10.0.0.120 255.255.255.255 On-link 10.0.0.120 306
10.0.0.255 255.255.255.255 On-link 10.0.0.120 306
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 10.0.0.120 306
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 10.0.0.120 306
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 331 ::1/128 On-link
8 306 2601:646:xxxx:xxxx::471b/128
On-link
8 306 fe80:64 On-link
3 306 fe80::b096:xxxx:xxxx:3a3b/128
On-link
1 331 ff00:8 On-link
8 306 ff00:8 On-link
===========================================================================
Persistent Routes:
None

C:\Users\barto>


My computer has this as the first entry in the IPv6 Route Table
2 281 :0 fe80::250:xxxx:xxxx:0


I think he either has a virus or somehow the default route is being redirected. I have tried Malware Bytes and Panda, but they find nothing.

Barton

 

[Cloudy1]

Throwing a few things out there in no particular order:

1) Flush the DNS cache and release/renew IP

Open Admin Command Prompt -> type iconfig /flushdns -> ipconfig /release -> ipconfig /renew -> reboot -> check

2) Check the hosts file for any irregularities and reset to default if required:

What your hosts file should look like and how to reset if need be: https/support.microsoft.com/en-au/help/972034/how-to-reset-the-hosts-file-back-to-the-default

3) Check the default opening page (Home page) of the chosen browser:

I'll let you investigate this one but basically check the browsers settings to see what page is set to open in case of a redirect occuring

4) Check the registry as this can often be the location a virus will set an entry in to recur at boot time

See this guide for startup locations: https/www.bleepingcomputer.com/tutorials/windows-program-automatic-startup-locations/

To enter the registry hold Windows key + R and type regedit -> Enter -> Yes

Good Luck

 

[bartonq]

First, Thanks for the reply.

Throwing a few things out there in no particular order:

1) Flush the DNS cache and release/renew IP

Open Admin Command Prompt -> type iconfig /flushdns -> ipconfig /release -> ipconfig /renew -> reboot -> check
BQ: Got the same IP Address again.

2) Check the hosts file for any irregularities and reset to default if required:

What your hosts file should look like and how to reset if need be: https/support.microsoft.com/en-au/help/972034/how-to-reset-the-hosts-file-back-to-the-default
BQ: Done: Nothing untoward there (looks normal with everything commented out

3) Check the default opening page (Home page) of the chosen browser:

I'll let you investigate this one but basically check the browsers settings to see what page is set to open in case of a redirect occuring
BQ: Again, nothing untoward (good thought though). Chrome is trying to load google.com IE is trying to load with its start page (but I think it looks for msn.com)

4) Check the registry as this can often be the location a virus will set an entry in to recur at boot time

See this guide for startup locations: https/www.bleepingcomputer.com/tutorials/windows-program-automatic-startup-locations/
BQ: Wow, there are alot of things in there and I cannot really recognize whats "good" and what might be "bad". all the bad guy needs to do is give it some official sounding name like "apci_interface", and I won't be able to tell. Now if were to name it something like "yourmine" or "YourScrewed", then I might have a chance.

To enter the registry hold Windows key + R and type regedit -> Enter -> Yes

Good Luck

I probably should mention another of several tries:
ping 10.0.0.1 (my router) works
ping yahoo.com fails with a "timed out" and "General Failure" (succeeds from my computer)
ping 206.190.36.45 (yahoo) also fails (succeeds from my computer)
ping 10.0.0.133 (another device on my network) works

His laptop shows up in my list of connected devices on my router, pinging windows boxes (his or mine) fails, so I suspect Windows 10 firewall disables ping.

Is must be possible to get a virus scanner on a USB key or something to safely diagnose it. Any suggestions? I obviously cannot download something. Panda was installed, but it doesn't detect anything (and cannot get to the internet to get new definitions).

Barton

 

[Cloudy1]

Well this would be a good start:

http/www.hirensbootcd.org/download/

And via the same site:

http/www.hirensbootcd.org/usb-booting/

By the way - can I also suggest that you remove the MAC address info from your original post - never know where them hackers might source there addresses from for their MAC spoofing shenanigans.