Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

The Problem is back


  • Please log in to reply
17 replies to this topic

#1 The Trip

The Trip

  • Members
  • 244 posts
  • OFFLINE
  •  
  • Local time:04:06 AM

Posted 27 March 2005 - 10:49 PM

The problem is back, (actually It only went away for a while after I thought I fixed it, then it came back)... Heres the problem, the other topic was locked so I had to make a new one.

Numerous websites wont load and I get an error saying that they cannot be found.
After trying it many times, clickin on a link over and over again, then it will finally load the page. Bleepingcomputer.com alone took like 3 tries.
I also noticed that I cannot just type google.com it seems I have to type www.google.com in order for firefox to go there.

I tried to see if was the same with IE, but it is not, so that leads me to believe that it is not a HOST file problem, but something else, that only firefox does.

I have a hunch that it might be that I have some conflicting extensions, but I dont know which ones would be conflicting.
Does anyone else have any Ideas as to what the problem is?

BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:04:06 AM

Posted 29 March 2005 - 07:50 PM

Are your computer's tcp/ip settings EXACTLY (other than the ip address) the same as your other computers?

#3 The Trip

The Trip
  • Topic Starter

  • Members
  • 244 posts
  • OFFLINE
  •  
  • Local time:04:06 AM

Posted 29 March 2005 - 09:38 PM

Well i switched the wireless and the modem around, so this one is directly connected to the modem. So it shouldnt matter, but yes it is.
It only does in firefox and it seems to be getting worse and worse.
I scanned with all my progs and have no crud-ware (all the bad stuff).
I guess I should have tried this before, but I am just going to re-install after uninstalling.

#4 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:04:06 AM

Posted 30 March 2005 - 12:34 AM

Post a log for me to see

#5 The Trip

The Trip
  • Topic Starter

  • Members
  • 244 posts
  • OFFLINE
  •  
  • Local time:04:06 AM

Posted 04 April 2005 - 06:49 PM

Everytime I try to post a hijack log firefox says. No data in document, and the page stays the same, (the reply form), except that the Add Reply button is greyed out. I tried it in IE, and it gives me the "cannot find server" page, but it seems only when I try to post a log.

#6 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:04:06 AM

Posted 04 April 2005 - 07:34 PM

Disable your virus scan and try again

#7 The Trip

The Trip
  • Topic Starter

  • Members
  • 244 posts
  • OFFLINE
  •  
  • Local time:04:06 AM

Posted 06 April 2005 - 05:02 PM

Logfile of HijackThis v1.99.1
Scan saved at 3:01:37 PM, on 4/6/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
E:\Sygate\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
E:\AVGFRE~1\avgamsvr.exe
E:\AVGFRE~1\avgupsvc.exe
E:\Diskeeper\DkService.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\MSTask.exe
E:\Belkin Bulldog\upsd.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
E:\Microsoft AntiSpyware\gcasServ.exe
E:\ATI Technologies\ATI.ACE\cli.exe
E:\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINNT\system32\LXSUPMON.EXE
E:\Java\jre1.5.0_01\bin\jusched.exe
E:\D-Tools\daemon.exe
E:\PowerDVD\PDVDServ.exe
E:\ATI Technologies\ATI.ACE\CLI.exe
E:\Belkin Bulldog\MUPS.exe
E:\SpywareGuard\sgmain.exe
E:\Trillian\trillian.exe
E:\SpywareGuard\sgbhp.exe
E:\Mozilla\Firefox\firefox.exe
C:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = I bow down to Firefox
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Adobe\Adobe Reader\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - E:\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [gcasServ] "E:\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "E:\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [LXSUPMON] C:\WINNT\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [RemoteControl] E:\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [SmcService] E:\Sygate\smc.exe -startgui
O4 - HKLM\..\Run: [DiskeeperSystray] "E:\Diskeeper\DkIcon.exe"
O4 - Startup: SpywareGuard.lnk = E:\SpywareGuard\sgmain.exe
O4 - Startup: Trillian.lnk = E:\Trillian\trillian.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = E:\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: MUPS.lnk = E:\Belkin Bulldog\MUPS.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Open Link Target in Firefox - file://C:\Documents and Settings\Marcus Rogers\Application Data\Mozilla\Firefox\Profiles\cz2ebk6a.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewlink.html
O8 - Extra context menu item: View This Page in Firefox - file://C:\Documents and Settings\Marcus Rogers\Application Data\Mozilla\Firefox\Profiles\cz2ebk6a.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewpage.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Java\jre1.5.0_01\bin\npjpi150_01.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\AVGFRE~1\avgupsvc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - E:\Diskeeper\DkService.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE
O23 - Service: O&O Defrag 2000 (OOD2000) - O&O Software GmbH - C:\WINNT\system32\OOD2000.exe
O23 - Service: RadClock - Unknown owner - C:\WINNT\system32\RadClock.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - E:\Sygate\smc.exe
O23 - Service: UPS - UPSentry Service (UPSentry_Smart) - Delta - E:\Belkin Bulldog\upsd.exe

#8 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:04:06 AM

Posted 06 April 2005 - 09:42 PM

Everything looks good here.

Not sure whats going on there

#9 The Trip

The Trip
  • Topic Starter

  • Members
  • 244 posts
  • OFFLINE
  •  
  • Local time:04:06 AM

Posted 11 April 2005 - 11:02 PM

I payed more attention to it recenly and have concluded that it happens in spurts, every 5 minutes or so, I cannot visit any webpages.
I also found out that it is also doing it in IE, not just Firefox.

#10 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:04:06 AM

Posted 12 April 2005 - 12:30 AM

Could it be your wireless connection?

#11 The Trip

The Trip
  • Topic Starter

  • Members
  • 244 posts
  • OFFLINE
  •  
  • Local time:04:06 AM

Posted 12 April 2005 - 02:26 PM

No, its running of the modem right now.
When I play games online and stuff there is no problems.
It just seems to be browsing the net.
Even with the firewall disabled, it still does it.

#12 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:04:06 AM

Posted 12 April 2005 - 07:27 PM

You got me stumped on this .. i am not sure what else to try.

#13 sen5241

sen5241

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:04:06 AM

Posted 13 April 2005 - 01:11 PM

The command 'ipconfig /flushdns' seems to temporaily fix this browser problem. I've been getting the same thing.

#14 sen5241

sen5241

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:04:06 AM

Posted 13 April 2005 - 01:14 PM

I wonder if the recent DNS problems on the Internet are related to this?

http://isc.sans.org/diary.php?date=2005-04-10

#15 The Trip

The Trip
  • Topic Starter

  • Members
  • 244 posts
  • OFFLINE
  •  
  • Local time:04:06 AM

Posted 13 April 2005 - 06:45 PM

I typed that in on the command prompt, nothing happend other than it saying
Windows 2000 IP Configuration, then I was black, and I couldnt type anything else.
I went and checked, and I still have the same problem.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users