Saturday, March 21, 2009

Unable to Ping or Be Pinged

In some situations this can be caused by a corrupted IPNAT.sys file and you would either be required to expand it from the I386 dump or get an updated version from Microsoft.

However in this case. The issue occurred after McAfee was updated. This is caused by the McAfee Firewall driver located in the System32\Drivers directory. Filename : Mpfp.sys

Uninstall the McAfee software. Reboot the machine. If this does not resolve your issue. Do the following:

Move the Mpfp.sys file to any desired folder, then locate the following key in registry.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MPFP

Backup the registry key. Then delete it. The key will look something like the image below

Once you have done this reboot the machine and you issue is resolved.

The Exported Key is below

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MPFP]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000001
"Tag"=dword:0000000a
"ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
72,00,69,00,76,00,65,00,72,00,73,00,5c,00,4d,00,70,00,66,00,70,00,2e,00,73,\
00,79,00,73,00,00,00
"DisplayName"="MPFP"
"Group"="PNP_TDI"
"DependOnService"=hex(7):54,00,63,00,70,00,49,00,70,00,00,00,00,00
"DependOnGroup"=hex(7):00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MPFP\Security]
"Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,00,01,\
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,fd,01,02,00,01,02,00,\
00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\
01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MPFP\Enum]
"0"="Root\\LEGACY_MPFP\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

No comments:

Post a Comment