Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

O10 - Broken Internet access because of LSP provider


  • This topic is locked This topic is locked
8 replies to this topic

#1 harlequeen

harlequeen

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:06:44 PM

Posted 30 June 2005 - 07:40 PM

My neighbour's computer cannot view web pages, even thought he can connect to the internet. I have logged with HJT as can be seen below. Would anyone be kind enough to help me with this?

thanks in advance

harlequeen


Logfile of HijackThis v1.99.1
Scan saved at 20:18:20, on 30/06/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\DOCUME~1\Me\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ntlworld.com
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [EPF] C:\Program Files\CoolEagle\CoolEagle Personal Firewall\CoolEagle.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\program files\cooleagle\cooleagle personal firewall\epf.dll' missing
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.ntlworld.com
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

BC AdBot (Login to Remove)

 


#2 groovicus

groovicus

  • Security Colleague
  • 9,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Centerville, SD
  • Local time:05:44 PM

Posted 01 July 2005 - 08:27 PM

If you still need help, could you post a fresh log please?

The title of your thread says "Broken Internet access because of LSP provider', can you tell me what you mean by that? Did you try and fix anything on your own?

#3 harlequeen

harlequeen
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:06:44 PM

Posted 02 July 2005 - 05:09 AM

Hi

No, I didn't try to fix things at all, just saved the log file. The title of the post comes from one of the entries in the log file (010 in the log file sequence) I did a search on the net and decided it would be good to ask for expert help.

The log file above is the most up to date as I haven't done anything.

Cheers
Harlequeen

#4 groovicus

groovicus

  • Security Colleague
  • 9,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Centerville, SD
  • Local time:05:44 PM

Posted 02 July 2005 - 10:03 AM

The log looks fine. I have a feeling the firewall is blocking access. Try disabling that first.
There is nothing in the log that indicates a real problem.

The message the HJT is giving you concerning the 010 entry needs to be taken with a grain of salt...it's not that it is missing, it is that it isn't the default entry that should be there.

#5 harlequeen

harlequeen
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:06:44 PM

Posted 02 July 2005 - 10:31 AM

Thanks for you input.

There is no firewall turned on as far as I can see. The WinXP firewall is off and I am not able to turn it on. It looks like a program called Cool Eagel has at some stage been installed, but I can't find any signs of it now. Cool Eagle is a firewall, but I don't know anything abot it.

Cheers

#6 groovicus

groovicus

  • Security Colleague
  • 9,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Centerville, SD
  • Local time:05:44 PM

Posted 02 July 2005 - 10:44 AM

Can you see if it shows up in the add/remove programs?

#7 harlequeen

harlequeen
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:06:44 PM

Posted 02 July 2005 - 11:13 AM

No, its not there...!!

#8 groovicus

groovicus

  • Security Colleague
  • 9,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Centerville, SD
  • Local time:05:44 PM

Posted 02 July 2005 - 11:26 AM

Ok, we'll just gae to run the LSP fix application. You will need to download the following program, and transfer it to the other computer:


http://www.majorgeeks.com/download4372.html

Follow the directions, and let me know if there are any problems. I have not used this tool...the tool I usually recomend can no longer be found. That ,means it would be a good idea to create a sytem restor point just in case things go horribly wrong. With that said, I have seen it recommended by others that I trust, so it should be just fine.

#9 harlequeen

harlequeen
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:06:44 PM

Posted 14 July 2005 - 09:59 AM

Finally got it fixed using winsockfix which was really easy. Can be downloaded here

Thanks for the help and input everyone.

Cheers
Harlequeen




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users