Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

No wireless internet connection, IP not assigned


  • This topic is locked This topic is locked
11 replies to this topic

#1 LPMA

LPMA

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:07:12 PM

Posted 31 October 2011 - 08:08 AM

Hello,

I started having this issue yesterday. I have a Dell mini 10v computer using XP that I use mainly around the house when I don't feel like being tied down to a desktop. Yesterday, it was having a particularly slow day and I decided to reboot, since I tend to leave it on for extended periods of time. After the restart, the services took an extremely long time to start up and also wouldn't show a "user name" under Task Manager for a while. Once my internet icons showed up in the task bar, I noticed that my wireless connection was detected but somehow my computer couldn't receive information from it. I also noticed no IP address seems to be assigned to that connection.

I have traced back this error to the DHCP service not starting (dependency issue error 1068). This in turn seems to be caused but the TCP/IP driver also not starting, which in turn is said to be because of a nonexistant "IPSec Service". I have verified, and ipsec.sys is still present. Manually starting any of these has only resulted in failures.

Since the error has started, I have also noticed that whenever I shut down or reboot the computer, this unknown program hangs and I need to end it manually. The window shows a long string of alphanumeric characters {E236BEBA-0915... I have not been able to locate that program either through my startup applications or on the hard drive.

I have tried the following so far (in no particular order):

-Updated and ran Malaware (both in regular and safe mode)
-Ran TDSSKiller (both in regular and safe mode)
-Used system restore, tried various system checkpoint in the past month but none were successfully restore (both in regular and safe mode)
-Replaced ipsec.sys with a fresh copy
-Ran the Windows utility that verifies the integrity of system files (forgot its name)
-Ran avast (although the definitions haven't been updated)
-ipconfig /all returns no results
-Ran HiJackThis, nothing seemed out of the ordinary
-Haven't identified any potential viruses in Startup applications or services

I was prepared to format and reinstall XP, but would very much like to save myself the trouble if possible. Any help is appreciated!

ETA: I also noticed yesterday that manually closing my computer (folding the screen over the keyboard) does not prompt it to go into Standby mode as usual.

Edited by LPMA, 01 November 2011 - 07:40 AM.
Moved from XP to Am I Infected.


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:12 PM

Posted 01 November 2011 - 11:38 AM

Let's try some thing.

For the connection try these...

Please click Start > Run, type inetcpl.cpl in the runbox and press enter.
Click the Connections tab and click the LAN settings option.
Verify if "Use a proxy..." is checked, if so, UNcheck it and click OK/OK to exit.
Now check if the internet is working again.

OR

Go to Start ... Run and type in cmd
A dos Window will appear.
Type in the dos window: netsh winsock reset
Click on the enter key.

Reboot your system to complete the process.

If needed : type these one line at a time, press enter after each line. See if it works after each.


netsh interface ipv4 reset
netsh interface ipv6 reset
ipconfig /flushdns




Note ,this can run off a Flash or CD drive..
Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
  • List Minidump Files
Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

Edited by boopme, 01 November 2011 - 11:39 AM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 LPMA

LPMA
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:07:12 PM

Posted 01 November 2011 - 04:15 PM

Hello,

First of all, thanks for the help!

Use a proxy was already unchecked

netsh winsock reset successfully reset
netsh interface ipv4 reset command was not found
netsh interface ipv6 reset ipv6 is not installed
ipconfig /flushdns the request is not supported (unable to query host name)

At this point I rebooted the computer, and still had to use "End Now" on that pesky unknown program. When everything came back, nothing seemed to have changed.

Here are the results after running MiniToolBox:

MiniToolBox by Farbar
Ran by LPMA (administrator) on 01-11-2011 at 17:11:50
Microsoft Windows XP Service Pack 3 (X86)

***************************************************************************

========================= Flush DNS: ===================================


Windows IP Configuration



An internal error occurred: The request is not supported.



Please contact Microsoft Product Support Services for further help.



Additional information: Unable to query host name.


========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================


127.0.0.1 localhost
127.0.0.1 serial.alcohol-soft.com
127.0.0.1 www.alcohol-soft.com
127.0.0.1 images.alcohol-soft.com
127.0.0.1 trial.alcohol-soft.com
127.0.0.1 alcohol-soft.com

========================= IP Configuration: ================================

# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip



popd
# End of interface IP configuration




Windows IP Configuration



An internal error occurred: The request is not supported.



Please contact Microsoft Product Support Services for further help.



Additional information: Unable to query host name.

Server: UnKnown
Address: 127.0.0.1

Ping request could not find host google.com. Please check the name and try again.

Server: UnKnown
Address: 127.0.0.1

Ping request could not find host yahoo.com. Please check the name and try again.

Unable to contact IP driver, error code 2,

========================= Winsock entries =====================================

Catalog5 01 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (11/01/2011 05:09:51 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (11/01/2011 05:01:32 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (10/31/2011 09:05:25 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (10/31/2011 09:00:26 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (10/31/2011 05:08:05 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (10/30/2011 11:37:52 PM) (Source: Windows Search Service) (User: )
Description: The application cannot be initialized.

Context: Windows Application

Details:
The content index cannot be read. (0xc0041800)

Error: (10/30/2011 11:37:52 PM) (Source: Windows Search Service) (User: )
Description: The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
The content index cannot be read. (0xc0041800)

Error: (10/30/2011 11:37:52 PM) (Source: Windows Search Service) (User: )
Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
The content index cannot be read. (0xc0041800)

Error: (10/30/2011 11:37:51 PM) (Source: Windows Search Service) (User: )
Description: The search service has detected corrupted data files in the index. The service will attempt to automatically correct this problem by rebuilding the index.

Context: Windows Application, SystemIndex Catalog

Details:
0xc0041801 (0xc0041801)

Error: (10/30/2011 11:37:39 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)


System errors:
=============
Error: (11/01/2011 05:10:15 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
%%1075

Error: (11/01/2011 05:10:15 PM) (Source: Service Control Manager) (User: )
Description: The TCP/IP Protocol Driver service depends on the following nonexistent service: IPSec

Error: (11/01/2011 05:10:15 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
%%1075

Error: (11/01/2011 05:10:15 PM) (Source: Service Control Manager) (User: )
Description: The TCP/IP Protocol Driver service depends on the following nonexistent service: IPSec

Error: (11/01/2011 05:10:14 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
%%1075

Error: (11/01/2011 05:10:14 PM) (Source: Service Control Manager) (User: )
Description: The TCP/IP Protocol Driver service depends on the following nonexistent service: IPSec

Error: (11/01/2011 05:10:14 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
%%1075

Error: (11/01/2011 05:10:14 PM) (Source: Service Control Manager) (User: )
Description: The TCP/IP Protocol Driver service depends on the following nonexistent service: IPSec

Error: (11/01/2011 05:10:14 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:
%%1075

Error: (11/01/2011 05:10:14 PM) (Source: Service Control Manager) (User: )
Description: The TCP/IP Protocol Driver service depends on the following nonexistent service: IPSec


Microsoft Office Sessions:
=========================

=========================== Installed Programs ============================

µTorrent (Version: 1.8.5)
7-Zip 9.20
Acrobat.com (Version: 0.0.0)
Acrobat.com (Version: 1.1.377)
Acronis Disk Director Suite (Version: 10.0.2239)
Ad-Aware (Version: 9.0.1)
Adobe AIR (Version: 1.0.4990)
Adobe AIR (Version: 1.0.8.4990)
Adobe Audition 3.0 (Version: 3.0)
Adobe Bridge 1.0 (Version: 001.000.000)
Adobe Common File Installer (Version: 1.00.0000)
Adobe Flash Player 10 ActiveX (Version: 10.2.159.1)
Adobe Flash Player 10 Plugin (Version: 10.2.152.32)
Adobe Help Center 1.0 (Version: 001.000.000)
Adobe Photoshop CS2 (Version: 9.0)
Adobe Reader 9.2 (Version: 9.2.0)
Adobe Stock Photos 1.0 (Version: 001.000.000)
Advanced Audio FX Engine (Version: 1.12.05)
All My Movies 6.4
AoA Audio Extractor
Apple Application Support (Version: 2.1.5)
Apple Mobile Device Support (Version: 4.0.0.96)
Apple Software Update (Version: 2.1.3.127)
AutoHotkey 1.0.48.05 (Version: 1.0.48.05)
avast! Free Antivirus (Version: 6.0.1000.0)
Back Orifice 2000
Battery Meter (Version: 0.0.0.10C)
BitZipper 2010
Bonjour (Version: 3.0.0.10)
Bullzip PDF Printer 7.1.0.1218 (Version: 7.1.0.1218)
calibre (Version: 0.8.22)
CamStudio
CapsLKNotify (Version: 0.1.0.1)
CDisplay 1.8
Compatibility Pack for the 2007 Office system (Version: 12.0.6425.1000)
Conduit Engine (Version: )
CutList Plus 2009 (Version: 9.7.5.0)
CyberLink PowerDVD 11 (Version: 11.0.1620.51)
Dell Support Center (Version: 3.1.5907.12)
Dell System Restore (Version: 2.00.0000)
Dell Touchpad (Version: 12.2.8.0)
Dell Webcam Central (Version: 1.03.04)
Dell Wireless WLAN Card Utility (Version: 5.10.38.30)
DiskCheckup V2.1 (Version: 2.1)
DivX Setup (Version: 2.5.0.15)
DVD Profiler Version 3.7.2
EASEUS Data Recovery Wizard Free Edition 5.0.1
EASEUS Partition Master 5.8.1 Home Edition
EMSC (Version: 0.0.0.20C)
eMule
FAST Defrag Professional 2.25 [final] (Version: 2.25)
foobar2000 v1.0.3 (Version: 1.0.3)
Free Music Zilla
Freecorder 5 (Version: 5.05)
Freecorder Toolbar (Version: 6.3.3.3)
FreeUndelete 2.0.35248.1 (Version: 2.0.35248.1)
Function Keys (Version: 0.1.0.6)
Google Gmail Notifier
GPL Ghostscript Lite 8.70
Gsenger Uninstall
HijackThis 2.0.2 (Version: 2.0.2)
iCopyExpert 3.1.2
iGadget 4.6.0.0 (Version: 4.6.0.0)
Integrated Webcam Driver (1.05.01.0820) (Version: 1.05.01.0820)
Intel® Graphics Media Accelerator Driver
iPhoneBrowser (Version: 1.9.3)
iPod Access for Windows v4.3
iRip (Version: 1.0.1.24)
iTunes (Version: 10.5.0.142)
iTunes DB Cloner (Version: 0.9.1.0)
Java Auto Updater (Version: 2.0.2.4)
Java™ 6 Update 21 (Version: 6.0.210)
JDownloader 0.9 (Version: 0.9)
Junk Mail filter update (Version: 14.0.8117.416)
Live! Cam Avatar Creator (Version: 4.6.2919.1)
Malwarebytes' Anti-Malware version 1.51.2.1300 (Version: 1.51.2.1300)
Messenger Plus! Live (Version: 4.83.0.380)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Home and Student 2007 (Version: 12.0.6425.1000)
Microsoft Office Live Add-in 1.3 (Version: 2.0.2313.0)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office PowerPoint Viewer 2007 (English) (Version: 12.0.6425.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6425.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6425.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Office Suite Activation Assistant (Version: 1.2.1)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6425.1000)
Microsoft Search Enhancement Pack (Version: 1.2.123.0)
Microsoft Silverlight (Version: 4.0.60129.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Works (Version: 9.7.0621)
mIRC (Version: 7.1)
MixMeister BPM Analyzer 1.0
MobileMe Control Panel (Version: 3.1.6.0)
Movie Collector
Mozilla Firefox (3.6.23) (Version: 3.6.23 (en-US))
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 6.0 Parser (KB927977) (Version: 6.00.3890.0)
Naviextras Toolbox (Version: 3.1.0.25401)
Naviextras Toolbox Prerequesities (Version: 1.0.0)
Nitro PDF Professional (Version: 6.1.4.1)
Orbit Downloader
QuickTax 2009 (Version: 1.00.0000)
QuickTime (Version: 7.69.80.9)
RapidLeecher (Version: 5.1)
RealPlayer
Realtek High Definition Audio Driver
RealUpgrade 1.0 (Version: 1.0.0)
Segoe UI (Version: 14.0.4327.805)
Skype Toolbars (Version: 1.0.4051)
Skype™ 4.2 (Version: 4.2.169)
Textile Vision [Print Design Generator]
TightVNC 2.0.2 (Version: 2.0.2)
TurboTax 2010 (Version: 1.00.0000)
uTorrentBar Toolbar (Version: 6.6.0.19)
VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0)
VLC media player 1.1.0 (Version: 1.1.0)
WBFS Manager 3.0 (Version: 3.0)
WebFldrs XP (Version: 9.50.7523)
Windows Driver Package - OEM (cxbu1wdm) SmartCardReader (08/28/2009 1.2.1.2) (Version: 08/28/2009 1.2.1.2)
Windows Driver Package - SCM Microsystems Inc. (SCR3XX2K) SmartCardReader (05/21/2009 4.45) (Version: 05/21/2009 4.45)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Live Call (Version: 14.0.8117.0416)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Family Safety (Version: 14.0.8118.427)
Windows Live Mail (Version: 14.0.8117.0416)
Windows Live Messenger (Version: 14.0.8117.0416)
Windows Live Photo Gallery (Version: 14.0.8117.416)
Windows Live Sign-in Assistant (Version: 5.000.818.5)
Windows Live Sync (Version: 14.0.8117.416)
Windows Live Toolbar (Version: 14.0.8117.416)
Windows Live Upload Tool (Version: 14.0.8014.1029)
Windows Live Writer (Version: 14.0.8117.0416)
Windows Media Format Runtime
Windows Presentation Foundation (Version: 3.0.6920.0)
Windows Search 4.0 (Version: 04.00.6001.503)
WinRAR 4.00 (32-bit) (Version: 4.00.0)
WSED (Version: 0.1.0.15)
XML Paper Specification Shared Components Pack 1.0
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
You Don't Know Jack 6 - The Lost Gold (Version: )

========================= Memory info: ===================================

Percentage of memory in use: 48%
Total physical RAM: 1014.36 MB
Available physical RAM: 519.72 MB
Total Pagefile: 2441.21 MB
Available Pagefile: 2066.12 MB
Total Virtual: 2047.88 MB
Available Virtual: 1993.96 MB

========================= Partitions: =====================================

1 Drive c: (OS) (Fixed) (Total:139.24 GB) (Free:20.73 GB) NTFS
2 Drive e: (LP'S USB) (Removable) (Total:14.99 GB) (Free:14.34 GB) FAT32

========================= Users: ========================================

User accounts for \\D503S2L1

Administrator Guest HelpAssistant
Impots LPMA SUPPORT_388945a0

========================= Minidump Files ==================================

C:\WINDOWS\Minidump\Mini092611-01.dmp
C:\WINDOWS\Minidump\Mini102211-01.dmp

**** End of log ****



Thanks again!

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:12 PM

Posted 01 November 2011 - 07:54 PM

Ran the Windows utility that verifies the integrity of system files (forgot its name)
>>> would that be SFC (System File Checker)

Are you running alcohol-software?


I see you have 5 Toolbars installed. I would remove them from yhe Control Panel..Add/Remove Programs.

See if you can find and stop it with Process Explorer,
Process Explorer Download Link

You can see how it works looking at steps 3-6 HERE
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 LPMA

LPMA
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:07:12 PM

Posted 01 November 2011 - 08:59 PM

I did run SFC (cmd sfc /scannow). It ran all the way through and nothing came up.

Alcohol: I had no idea I even had this, so I probably installed it for something at one point and forgot it was there.

Toolbars: I tried removing them but the computer is running too slow.

Process Explorer: I didn't identify anything out of the ordinary. Here's a screencap of what it found:

Posted Image

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:12 PM

Posted 03 November 2011 - 01:01 PM

Sorry about the delay.. I am having difficulty determining the connection issue.

1. Click Start>Run (Start>"Start search" in Vista).

2. Type in (or copy and paste):

cmd /c ping google.com>%temp%\$.$&notepad %temp%\$.$

and press Enter.

3. Notepad will open.

4. Copy all text in Notepad ([Ctrl-A], then [Ctrl-C]), and then post it (paste = [Ctrl-V]) in your next reply.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 LPMA

LPMA
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:07:12 PM

Posted 03 November 2011 - 04:14 PM

Hello again,

I just ran it, and got this:

Ping request could not find host google.com. Please check the name and try again.



#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:12 PM

Posted 03 November 2011 - 08:05 PM

Ok you will need to go thru the steps here.. Start at post 5

http://www.bleepingcomputer.com/forums/topic336194.html
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 LPMA

LPMA
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:07:12 PM

Posted 03 November 2011 - 09:26 PM

Alright, I went through all the steps:

-Obtain IP automatically was already checked
-Router went through a power cycle, no changes
-Also connected the computer directly, no changes either (not surprising since my desktop computer is connected through wire and manages to connect, and my cell phone has no problem connecting wirelessly)
-In Command prompt, I got the following errors:
-For all 4 ipconfig steps: An internal error occured: The request is not supported. Additional information: unable to query host name.
-int ip reset.log: The following command line was not found: int ip reset.log
-winsock reset: Successful
-Dial-A-Fix ran all the way through, however, when I tried to back up the registry beforehand it failed because of security errors.
-Hammerhead ran all the way through group 5 with no issue, then I got a bunch of error messages:
-Dial-a-fix was unable to determine your version of Internet Explorer. Certain DLL registrations will be skipped.
-Error 127: C:\\WINDOWS\system32\iesetup.dll is not registerable or the file is corrupted (version 8.00.6001.18702)
-Error 127: C:\\WINDOWS\system32\iesetup.dll is not DLLInstall-able or the file is corrupted.
-Error 127... imgutil.dll is not registerable or the file is corrupted (version 8.00.6001.18702)
-Error 127... inseng.dll is not registerable or the file is corrupted (version 8.00.6001.18702)
-Error 127... inseng.dll is not DLLInstall-able or the file is corrupted.
-Error 127... mshtml.dll is not registerable or the file is corrupted (version 8.00.6001.19019)
-Error 127... mshtml.dll is not DLLInstall-able or the file is corrupted.
-Error 127... msrating.dll is not registerable or the file is corrupted (version 8.00.6001.18702)
-Error 127... occache.dll is not registerable or the file is corrupted (version 8.00.6001.19019)
-Error 127... occache.dll is not DLLInstall-able or the file is corrupted.
-Error 127... pngfilt.dll is not registerable or the file is corrupted (version 8.00.6001.18702)
-Error 127... webcheck.dll is not registerable or the file is corrupted (version 8.00.6001.18702)
-Error 127... webcheck.dll is not DLLInstall-able or the file is corrupted.
-The second part of Hammerhead went fine, however the bottom window said I seemed to be missing secedit.exe

I'm fairly convinced from what I've been noticing that the problem isn't strictly an internet connection issue. The computer is being incredibly slow to start, the services in Task Manager don't get assigned a user name for a while when the computer starts. Auto-run for my USB key doesn't seem to be happening anymore. Finally, there's always that unidentified program I have to force to end whenever I shut the computer down.

#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:12 PM

Posted 04 November 2011 - 10:17 AM

I think it's better if we get a deeper look. Please go here....
Preparation Guide ,do steps 6 - 9.

Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If Gmer won't run,skip it and move on.
Include a link back to this topic.

Let me know if that went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#11 LPMA

LPMA
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Local time:07:12 PM

Posted 04 November 2011 - 05:35 PM

Will do, thanks again!

#12 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,857 posts
  • ONLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:08:12 PM

Posted 05 November 2011 - 12:49 AM

Hello,

Now that you have posted a log here: http://www.bleepingcomputer.com/forums/topic426377.html you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

To avoid confusion, I am closing this topic. Good luck with your log.

Orange Blossom :cherry:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users