Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot Connect To Internet/winsock Provider Catalog Problem


  • Please log in to reply
8 replies to this topic

#1 TDon

TDon

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:00 PM

Posted 19 January 2008 - 12:27 AM

The problem I have began when a "ConHook.B trojan attempted to install on my machine, but it supposedly was successfully removed at the time, 1/15/2008, according to the Windows Defender history log.
AVG Anti-virus, Ad-aware, Spybot, and Windows Defender scans all report no problems. I have run Registry Mechanic to clean the registry.

However the problem remains that I cannot connect to the internet. I first get a message that I am offline, and then when I try to connect again I get this message:
"Windows has detected a problem with the Winsock Provider Catalog on this computer. Would you like to reset the catalog to the default configuration?" If I click yes and restart the computer it does not change anything. If I click the "View last diagnostic run" I get the following information:

WinSock Diagnostic
WinSock status

info All base service provider entries are present in the Winsock catalog.
info The Winsock Service provider chains are valid.
error Provider entry MSAFD Tcpip [TCP/IP] could not perform simple loopback communication. Error 10050.
error Provider entry MSAFD Tcpip [UDP/IP] could not perform simple loopback communication. Error 10050.
error A connectivity problem exists with an installed LSP.
info The user didn't approve the proposed automated repair attempt: Reset WinSock catalog
info Redirecting user to support call

Network Adapter Diagnostic
Network location detection

info Using home Internet connection
Network adapter identification

info Network connection: Name=Local Area Connection, Device=SiS 900-Based PCI Fast Ethernet Adapter, MediaType=LAN, SubMediaType=LAN
info Ethernet connection selected
Network adapter status

info Network connection status: Connected

HTTP, HTTPS, FTP Diagnostic
HTTP, HTTPS, FTP connectivity

warn HTTPS: Error 12007 connecting to www.microsoft.com: The server name or address could not be resolved
warn FTP (Passive): Error 12007 connecting to ftp.microsoft.com: The server name or address could not be resolved
warn HTTP: Error 12007 connecting to www.microsoft.com: The server name or address could not be resolved
warn HTTPS: Error 12007 connecting to www.passport.net: The server name or address could not be resolved
warn FTP (Active): Error 12007 connecting to ftp.microsoft.com: The server name or address could not be resolved
warn HTTP: Error 12007 connecting to www.hotmail.com: The server name or address could not be resolved
error Could not make an HTTP connection.
error Could not make an HTTPS connection.
error Could not make an FTP connection.


Also I have found that my Windows XP firewall is not connected...it was before. I cannot start it in the services menu; when I right click on "Windows Firewall/Internet Connection Sharing " and press start, I get the following message:
"Could not start Windows Firewall/Internet Connection Sharing on Local Computer. Error 2001: The specified driver is invalid"
I tried to re-install the firewall according to these instructions from a microsoft kb article:

Method 1: Call the "Setup API InstallHinfSection" function to install Windows Firewall
To install Windows Firewall, follow these steps: 1. Click Start, click Run, type cmd, and then click OK.
2. At the command prompt, type the following command line, and then press ENTER:
Rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf
3. Restart Windows,
4. Click Start, click Run, type cmd, and then click OK.
5. At the command prompt, type the following command, and then press ENTER:
Netsh firewall reset
6. Click Start, click Run, type firewall.cpl, and then press ENTER. In the Windows Firewall dialog box, click On (recommended), and then click OK.

It did not help.

I have read several Microsoft Knowledge Base articles and tried many of the things they suggested.
I have reloaded IE7 default settings and cleared temporary files and restricted sites and trusted sites.
I have deleted the Winsock and Winsock2 keys, and then reinstalled TCP/IP as instructed.
I have typed "netsh winsock reset" at the command prompt & rebooted, but this does not help.
I also installed the net diagnostics tool from my XP disk. When I go to command prompt and type netdiag/test:winsock/v, I get this message:
"Failed to get information for a network adapter. The error occurred was: The pipe is being closed
<232> [Fatal] Cannot find the TCP/IP configuration from the registry.

I am in contact with Microsoft support by email, but it takes 1 to 2 days for a response each time, so it does not seem that they will be able to help me very quickly. My next step may be to re-install XP, but my disk is so old that it would take me many hours to re-install all the windows updates.
Any help is greatly appreciated. I have already seen a lot of great information on this forum.

Don

BC AdBot (Login to Remove)

 


m

#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:09:00 PM

Posted 19 January 2008 - 11:10 AM

Information here might help you
http://windowsxp.mvps.org/winsock.htm
Mark
Forgot to add: Welcome to BC

Edited by garmanma, 19 January 2008 - 11:10 AM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:06:00 PM

Posted 19 January 2008 - 12:47 PM

Hi TDon,

After trying garmanma's suggestion, give this little fix a go:

Go into the Properties for the Local Area Connection and uncheck TCP/IP, click Okay. Reboot and then go back and check TCP/IP again. Reboot.
This must reset the settings for the TCP/IP protocol on that network interface.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

#4 TDon

TDon
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:00 PM

Posted 19 January 2008 - 02:10 PM

Thanks garmanma and TMack. I tried all of the things you suggested but still no luck. Downloaded the winsockxpfix tool and no help there either. I wonder if the main problem has more to do with the fact I cannot re-enable the XP firewall?
I think the two problems are definitely related.
Do you think I should go ahead and try re-installing windows xp?

Below is what is in the Winsock provider catalog. I wanted to just attach it as a text file but I don't see that option. Am I missing it?

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD Tcpip [TCP/IP]
Provider ID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1001
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD Tcpip [UDP/IP]
Provider ID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1002
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD Tcpip [RAW/IP]
Provider ID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1003
Version: 2
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 3
Protocol: 0
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: RSVP UDP Service Provider
Provider ID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Provider Path: %SystemRoot%\system32\rsvpsp.dll
Catalog Entry ID: 1004
Version: 6
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 2
Protocol: 17
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: RSVP TCP Service Provider
Provider ID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Provider Path: %SystemRoot%\system32\rsvpsp.dll
Catalog Entry ID: 1005
Version: 6
Address Family: 2
Max Address Length: 16
Min Address Length: 16
Socket Type: 1
Protocol: 6
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD nwlnkipx [IPX]
Provider ID: {11058240-BE47-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1012
Version: 2
Address Family: 6
Max Address Length: 16
Min Address Length: 14
Socket Type: 2
Protocol: 1000
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD nwlnkspx [SPX]
Provider ID: {11058241-BE47-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1013
Version: 2
Address Family: 6
Max Address Length: 16
Min Address Length: 14
Socket Type: 5
Protocol: 1256
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD nwlnkspx [SPX] [Pseudo Stream]
Provider ID: {11058241-BE47-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1014
Version: 2
Address Family: 6
Max Address Length: 16
Min Address Length: 14
Socket Type: 1
Protocol: 1256
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD nwlnkspx [SPX II]
Provider ID: {11058241-BE47-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1015
Version: 2
Address Family: 6
Max Address Length: 16
Min Address Length: 14
Socket Type: 5
Protocol: 1257
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD nwlnkspx [SPX II] [Pseudo Stream]
Provider ID: {11058241-BE47-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1016
Version: 2
Address Family: 6
Max Address Length: 16
Min Address Length: 14
Socket Type: 1
Protocol: 1257
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NwlnkNb] SEQPACKET 3
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1017
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -3
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NwlnkNb] DATAGRAM 3
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1018
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -3
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3BBF674C-1113-41D3-B7DF-E12A5AB9EF53}] SEQPACKET 0
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1019
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -2147483648
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3BBF674C-1113-41D3-B7DF-E12A5AB9EF53}] DATAGRAM 0
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1020
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -2147483648
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{FB458613-4778-4C16-92F4-0450C437C848}] SEQPACKET 1
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1021
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -1
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{FB458613-4778-4C16-92F4-0450C437C848}] DATAGRAM 1
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1022
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -1
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{74046427-157B-460E-8CF1-35C9520B9896}] SEQPACKET 2
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1023
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 5
Protocol: -2
Protocol Chain Length: 1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type: Base Service Provider
Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{74046427-157B-460E-8CF1-35C9520B9896}] DATAGRAM 2
Provider ID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path: %SystemRoot%\system32\mswsock.dll
Catalog Entry ID: 1024
Version: 2
Address Family: 17
Max Address Length: 20
Min Address Length: 20
Socket Type: 2
Protocol: -2
Protocol Chain Length: 1

Name Space Provider Entry
------------------------------------------------------
Description: Tcpip
Provider ID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
Name Space: 12
Active: 1
Version: 0


Name Space Provider Entry
------------------------------------------------------
Description: NTDS
Provider ID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
Name Space: 32
Active: 1
Version: 0


Name Space Provider Entry
------------------------------------------------------
Description: Network Location Awareness (NLA) Namespace
Provider ID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
Name Space: 15
Active: 1
Version: 0


Name Space Provider Entry
------------------------------------------------------
Description: NWLink IPX/SPX/NetBIOS Compatible Transport Protocol
Provider ID: {E02DAAF0-7E9F-11CF-AE5A-00AA00A7112B}
Name Space: 1
Active: 1
Version: 1

#5 TDon

TDon
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:00 PM

Posted 20 January 2008 - 12:53 AM

I have re-installed Windows XP and that has solved two problems, but I still cannot connect to the internet. One problem solved is that the Windows Firewall is now back ON. The other problem solved is that there don't seem to be any Winsock Catalog errors.

The problem now is that I have "limited or no connectivity" on the LAN connection, and the computer is connected directly to the router (Verizon). The computer I am typing on now is connected wirelessly to the same router and it has no problem. The network adapter on the wired computer shows to be connected and working properly. When I type ipconfig, the address is 169.xxx.xxx.xx and there is no default gateway address. The connection is configured to obtain the IP address from the DHCP server automatically. I have talked to Verizon, my ISP, and they cannot tell me what the problem is but thought that there might be a problem with my network adapter (I don't think so though). They also thought that I may have registry problems, and maybe I do.

Any suggestions? Oh yeah, one more thing. I have moved a suspicious file again out of my windows/system32 directory. I moved the same file out before. The name is 610jz4j4h7go.exe

thanks

#6 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:09:00 PM

Posted 20 January 2008 - 09:30 AM

Any suggestions? Oh yeah, one more thing. I have moved a suspicious file again out of my windows/system32 directory. I moved the same file out before. The name is 610jz4j4h7go.exe

That's more than likely your problem. I believe you should read and follow this then post a log here.
Typing in "610jz4j4h7go.exe" in Google shows no results. That's a bad sign
Mark

Edited by garmanma, 20 January 2008 - 09:31 AM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#7 TDon

TDon
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:00 PM

Posted 20 January 2008 - 11:22 AM

I see a line in the hijack this log that says:
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\vetredir.dll' missing
I did a search on this computer and that file does exist in that directory, so maybe I should just copy it to the problem computer and see it fixes my problem.

thx
Don

#8 TDon

TDon
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:00 PM

Posted 20 January 2008 - 12:13 PM

It worked!
I'm on the internet on that computer now.

Can't find anything from google search that says vetredir.dll is a critical file, but it worked.

Thanks, garmanma, for having me post hijackthis log. That is a nice program.

Don

#9 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:06:00 PM

Posted 20 January 2008 - 12:25 PM

Hi TDon,

I have split off your Hijackthis log and moved it Here.
However, it appears that your problem is now solved, and no longer need our HJT team to look at your Log.

I will close your HJT Log, but if you still need help, please file a new HJT Log in the HijackThis Logs and Malware Removal forum.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users