Windows Regedit (TCPIP/Parameters/Interfaces/ folders are missing out)

[Davidness]

Hello folks, well like the title says, I have been dealing with some regedit issues with the TCPIP.

(HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces)

 

For some reason the folders in "Interfaces" are getting delete when I reboot my computer or when I change the dns of the internet protocol (IPv4), this is causing connection and ping issues, I just recently restore my whole computer (like 10 times, no joking) but the problem is still there.

 

Now I have 3 folders but my connection is still really bad, any thoughts? or did I miss something?

[sc302 Veteran]

What exactly is your issue?  You have gone about trying something without really explaining your issue

[+BudMan MVC]

so your playing around in the reg why exactly??  Because your interface disappears on reboot, it gets no IP, gets the wrong IP??  Your wanting to set its dns different then what your handing out via dhcp?

[Davidness]

Just now, sc302 said:

What exactly is your issue?  You have gone about trying something without really explaining your issue

 

Just now, BudMan said:

so your playing around in the reg why exactly??  Because your interface disappears on reboot, it gets no IP, gets the wrong IP??  Your wanting to set its dns different then what your handing out via dhcp?

My internet is getting worse because of this. What I'm trying to say is when I change the dns of the internet protocol IPv4 (or reboot, log-off the computer), the folders on "Interfaces" just automatically disappears, and like I said before,  I use a lot of restore points so I can get the folders back, but sometimes it just keeps disappearing

[sc302 Veteran]

Mucking around the reg is the last thing to do. Did you run the repair tool?  Did you reset the ip stack and winsock with the cli tools?  

 

Almost sound rootkit ish. How did you reinstall Windows?

 

 

i have repaired many issues like this and never went mucking around in the area of the registry you are. 

[Daedroth]

 

18 minutes ago, Davidness said:

 

My internet is getting worse because of this. What I'm trying to say is when I change the dns of the internet protocol IPv4 (or reboot, log-off the computer), the folders on "Interfaces" just automatically disappears, and like I said before,  I use a lot of restore points so I can get the folders back, but sometimes it just keeps disappearing

Your Internet is getting worse how? Is it getting slower? Is it disconnecting? Is it intermittent?

[+Gary7 Subscriber²]

http://www.majorgeeks.com/news/story/dhcp_console_for_windows_10_retrieves_the_dhcp_console_missing_from_windows_10.html

 

Maybe the above will work for you.

[Davidness]

Just now, Gary7 said:

http://www.majorgeeks.com/news/story/dhcp_console_for_windows_10_retrieves_the_dhcp_console_missing_from_windows_10.html

 

Maybe the above will work for you.

Actually I'm using windows 7 ultimate.

 

Just now, Daedroth said:

 

Your Internet is getting worse how? Is it getting slower? Is it disconnecting? Is it intermittent?

Yeah, this has been getting slower for the last 3 weeks.

 

Just now, sc302 said:

Mucking around the reg is the last thing to do. Did you run the repair tool?  Did you reset the ip stack and winsock with the cli tools?  

 

Almost sound rootkit ish. How did you reinstall Windows?

 

 

i have repaired many issues like this and never went mucking around in the area of the registry you are. 

I use the default repair tool from windows to get my folders back, gonna try the reset ip stack and winsock with the cli tools btw I don't think it is a rootkit.

[sc302 Veteran]

If the issue comes back after a reinstall and you didn't wipe the drive fully, it could be a root kit.  You would need to remove all partitions with the windows installer and have the installer recreate the drive partitions.  Another option would be to dban the drive prior to reinstall. 

 

If using ultimate and utilizing an illegal source (most ultimate installs are) you should have checked the md5 hash to verify it was a actual ms release or someone could have installed/slipstreamed a nice present for you.  Yes it very well could be a root kit. I have seen it where they do weird things to your network properties including what you are experiencing. 

[Davidness]

Just now, sc302 said:

If the issue comes back after a reinstall and you didn't wipe the drive fully, it could be a root kit.  You would need to remove all partitions with the windows installer and have the installer recreate the drive partitions.  Another option would be to dban the drive prior to reinstall. 

 

If using ultimate and utilizing an illegal source (most ultimate installs are) you should have checked the md5 hash to verify it was a actual ms release or someone could have installed/slipstreamed a nice present for you.  Yes it very well could be a root kit. I have seen it where they do weird things to your network properties including what you are experiencing. 

Is it normal to have 3 folders on Interfaces? I just check other computers and they have like 4-5 folders or the reg just creates a randomly number of folders on the TCPIP? 

[sc302 Veteran]

I have to check my clean test vms.  

[sc302 Veteran]

It has to do with the networks you connect to.  Looked carefully at the tcpip entries it seems as if there is an entry for each network that I have connected to.  In one of my test machines I have 8 entries there. 

I would not utilize this at all for troubleshooting issues. 

 

use ipconfig or netsh to get the information you need.  If it is not there with these commands, it won't be in the registry...if it is there with these commands, it will be in the registry.  Please stick with traditional tools vs mucking around the registry and trying to deduce things that can change from computer to computer, network to network, interface to interface. 

 

Just an fyi, running one or two different antivirus/antirootkit utlities does not equal a clean machine....running 10-15 also does not, but probability is good that it is clean.  What 7 miss, one can pick up...and it will drive you crazy if you don't have a very good understanding as to what these things can and will do to your computer.....I have had computers take 45 minutes to boot and have no dns entries while the other ip entries exist...i have had some where they wouldn't take any dhcp'd address but manual addressing worked.  I had some that would only let you configure via netsh, the gui was useless.  I have had others too, but those are some of the more common ones.  Scanning with a clean machine first by taking the drive out of the infected machine with malwarebytes, trend micro, then reinserting the drive into the host machine and scanning with some rootkit scanners (tdsskiller, gmer, hitmanpro, combofix, malwarebytes rootkit remover) followed by more traditional scans from malwarebytes, superantispyware, trend micro, symantec, mcafee, bitdefender, eset seem to remove the issue.  But you can spend days scanning, which is why in most cases a reinstall would fix the issues....however in your case, I am not sure that I would trust the drive or trust the install media (but know I am uncertain how exactly you reinstalled windows and I am also uncertain about your media). 

[Davidness]

Just now, sc302 said:

It has to do with the networks you connect to.  Looked carefully at the tcpip entries it seems as if there is an entry for each network that I have connected to.  In one of my test machines I have 8 entries there. 

I would not utilize this at all for troubleshooting issues. 

 

use ipconfig or netsh to get the information you need.  If it is not there with these commands, it won't be in the registry...if it is there with these commands, it will be in the registry.  Please stick with traditional tools vs mucking around the registry and trying to deduce things that can change from computer to computer, network to network, interface to interface. 

 

Just an fyi, running one or two different antivirus/antirootkit utlities does not equal a clean machine....running 10-15 also does not, but probability is good that it is clean.  What 7 miss, one can pick up...and it will drive you crazy if you don't have a very good understanding as to what these things can and will do to your computer.....I have had computers take 45 minutes to boot and have no dns entries while the other ip entries exist...i have had some where they wouldn't take any dhcp'd address but manual addressing worked.  I had some that would only let you configure via netsh, the gui was useless.  I have had others too, but those are some of the more common ones.  Scanning with a clean machine first by taking the drive out of the infected machine with malwarebytes, trend micro, then reinserting the drive into the host machine and scanning with some rootkit scanners (tdsskiller, gmer, hitmanpro, combofix, malwarebytes rootkit remover) followed by more traditional scans from malwarebytes, superantispyware, trend micro, symantec, mcafee, bitdefender, eset seem to remove the issue.  But you can spend days scanning, which is why in most cases a reinstall would fix the issues....however in your case, I am not sure that I would trust the drive or trust the install media (but know I am uncertain how exactly you reinstalled windows and I am also uncertain about your media). 

I just noticed that the folders aren't getting removed after a reboot or log-off which is ok but my internet is still really bad I mean after a certain time is good I can open webs, games & stuff however after a few hours it returns the issue/lag, maybe its just my ISP? the only thing that is causing this problem are the folders because I never had any issues with my ISP (in my opinion)

[T3X4S]

OP - 

Did you just jump straight to regedit, and in some website you read to focus on folder count ?  Or did you try ALL of the obvious ?

This thread doesnt make sense.

 

[devHead]

I'm curious as to what prompted you to look at these folders in the registry.   Was it that your Internet connection was running slow, so that was where you ended up looking?  I've never in my life thought to go there when my Internet was flaky.  So, after you would reboot, those registry entries would not be there?  Did you recreate them?  Did Windows recreate them after a certain time?  Did you re-import them in from an exported reg file that you created?  What are you changing your DNS to?  Are you doing it through your router, or through your IPv4 adaptor settings?  Seems odd that you would be poking around in there when your Internet is laggy.

 

FWIW, I have only 3 folders also.

[Obi-Wan Kenobi]

17 minutes ago, Davidness said:

I just noticed that the folders aren't getting removed after a reboot or log-off which is ok but my internet is still really bad I mean after a certain time is good I can open webs, games & stuff however after a few hours it returns the issue/lag, maybe its just my ISP? the only thing that is causing this problem are the folders because I never had any issues with my ISP (in my opinion)

yeah? just wait until you're greeted with a BSOD Registry error! Sure, it can be fixed, but if data and time is precious, why bother even messing with it in the first place? Sc302 pretty much summed that up. And, not to mention, it's absurd to even go messing around with the registry in the first place. This has been proven time and time again. Maybe try, and this is a guess, open an elevated command prompt and do an ipconfig /flushdns and then a reboot? Worth a shot.....also, try to reboot your cable modem/router/however you are connected.....also, delete any unused access points. Ones that you've connected to perhaps a long time ago....but no longer do. Personally, though, I'd not touch the registry. Unless it's absolutely necessary.

 

Edit: Also, check the cables coming into and out of your entire network. Make sure they are snug, and there is no corrosion. Tighten every connection. I mean every cable. Sounds like an ISP/Poor Signal problem more than the registry, however. At least to me, I could be wrong. If that doesn't do the trick, and you're sure you aren't infected, then the last resort I could tell you is to nuke it as stated above, delete all partitions, and install Windows all over again from scratch.

[sc302 Veteran]

13 minutes ago, Davidness said:

I just noticed that the folders aren't getting removed after a reboot or log-off which is ok but my internet is still really bad I mean after a certain time is good I can open webs, games & stuff however after a few hours it returns the issue/lag, maybe its just my ISP? the only thing that is causing this problem are the folders because I never had any issues with my ISP (in my opinion)

Do you have any other devices?  Are they having the same issue?

[+BudMan MVC]

What exactly is the problem here??  Your internet gets slower 3 weeks later??

 

Can you please explain what your problem is??  Why are you looking in the registry because your internet is slow??  What exactly does that mean even??  Your downloads use to be  2MBps and now their 1????  There is no way anyone can help you without actually explaining what your problem actually is..

[Jim K Global Moderator]

Have you tried any other computer to rule out your internet connection.

 

Regarding your registry images ... do you know what you're looking at?  If not ...

 

look at HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards > ##

For example....

 

 

 

That ServiceName will be the GUID in HKLM\ControlSet001\services\Tcpip\Parameters\Interfaces that you're looking at.

 

Anyway...could help you keep track of what exactly you're looking at.  I'm sure there is probably an easier way ... I just can not think of one off hand.

 

Though, I'm not sure why you're in there anyway.

 

Edit:  For the record.  I have three interfaces listed under networkcards...12,13,20 (#13 is a duplicate of my wireless for some reason...though inactive).  

The wired and active wireless (#12 not #13) are listed under the Parameters\Interfaces along with 5 additional GUIDs (7 total).  No idea what the 5 other GUIDs are ... I probably could figure them out if I cared...which I don't.   

[Daedroth]

6 hours ago, Davidness said:

Yeah, this has been getting slower for the last 3 weeks.

What specifically made you think it is the registry causing the issue, as opposed to the usual problems, which can include; if wireless; poor wireless signal, poor router signal, poor router position, sub-optimal SSID channel. Or if wired, loosely connected Ethernet cables, broken/damaged Ethernet cables. If using powerline/home plugs; poor quality homeplugs, poor electrical system. 

[Davidness]

Sorry for the lack response, after reading all the posts I knew that regedit wasn't the problem however I'm still trying to fix this, I just re-install windows again and it's all good and the regedit folders are ok, my bad for don't understand the problem and the thing is that I just noticed that my ping/connection is really slow during the day, but in the night I'm having a good internet connection, regular ping. (It doenst matter if I use wifi or ethernet they both have this problem.)

[Mando]

5 hours ago, Davidness said:

Sorry for the lack response, after reading all the posts I knew that regedit wasn't the problem however I'm still trying to fix this, I just re-install windows again and it's all good and the regedit folders are ok, my bad for don't understand the problem and the thing is that I just noticed that my ping/connection is really slow during the day, but in the night I'm having a good internet connection, regular ping. (It doenst matter if I use wifi or ethernet they both have this problem.)

Does your ISP traffic shape in peak times?

That could explain what your seeing, in what way is the ping worse?

 What is a good ping at night versus one through the day for example?

 

You could test at both times with Pingtest.net for line quality and speedtest.net for example.

 

 

[+BudMan MVC]

slow ping means what??  So in the day you have 20ms to what are you pinging and and night you get 18???

 

You do understand maybe where your pinging is busier during the day?  What to you is slow ping and then regular ping?

 

 

[sc302 Veteran]

What I would suggest is to call the Isp and complain. 

[Davidness]

It only starts increasing my ping at around 9:00 a.m and returns to normal at around 2:00 p.m. Idk what could be causing it, and my ISP has been very unhelpful
At night I can watch any videos at 720p, play with good ping (80-90ms) on different games, the speed of download is fast, etc. At the day every video on youtube is 240p and the ping on games are like 500+ms. My ping on the day wasn't that bad

 

NOTE: There's no packet loss while pinging on cmd.

Going to post the ping and speed test soon.