Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

internet connection


  • Please log in to reply
23 replies to this topic

#1 fritzlesnick

fritzlesnick

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 07 June 2004 - 01:37 AM

I have an old compac - Win98SE - DSL. A while back, my ISP went down. Apparently, the computer tried to connect and couldn't. I have been unable to connect to the internet since. (I am pretty much a novice user.) I was looking and clicking around to see if I could find the solution, got a message that said something to the effect (can't remember exact wording) that Windows had tried twice to connect and failed, and would no longer attempt to try. I have tried reloading my DSL software, both in regular mode and Safe mode, repaired IE, done run-ipconfig (it's ok), run sfc (ok), had my ISP check out my DSL modem (ok), even changed connections from BUS port to ethernet card (and called the ethernet support when I still couldn't get on - it's ok). Any suggestions for me before I have to take it to the shop?

BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:48 AM

Posted 07 June 2004 - 10:15 AM

It is possible the use a piece of software that if it gets damaged or removed improperly can cause your internet access to break. Any chance you can do the following from the broken computer and post it here:

Create a directory on your hardrive to save HijackThis.exe. A directory like c:\hijackthis. If you do not do this, you will not be able to use the backup/restore features.

Download HijackThis from:

HijackThis

Save this file into the directory you made previously and then run the program. Click on the Scan button and when it is finished click on the Save Log button. A Notepad window will open with the contents of this log. Click on Edit then click on Select all. Then click on Edit and then Click on Copy.

Create a reply to this post, and right click in message area and select paste to paste the log into the post.

Someone will reply to you after reading this post. DO NOT fix any entries unless you understand what you are doing.

To see a tutorial on using HijackThis you can click on the link below:

HijackThis - Using HijackThis to Remove Spyware, Browser Hijackers, and Dialers

#3 fritzlesnick

fritzlesnick
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 07 June 2004 - 04:47 PM

Softwares all ok - it's the same as I used for the computer I'm on now - after the old one went down. I can't access the 'net at all - can do everything I'm supposed to off line (word, any games that I downloaded, etc.), but it refuses to even try to connect. (And when I say, "It refuses", that's basically the error message I get.)

#4 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:48 AM

Posted 07 June 2004 - 04:54 PM

Hmm...try this. Open up internet explorer and click on tools, then internet options, then click on the connections tab, and click on Lan settings.

Is use proxy checked off? if so remove the check and try the internet.

If that still is not the problem, please copy hijackthis to a floppy or burned cd, run it on there, save the log to a floppy and post it here from a computer that has internet access

#5 fritzlesnick

fritzlesnick
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 10 June 2004 - 01:46 AM

I've tried all the standard stuff - LAN connections, etc. (our ISP tech dept is extremely helpful, will walk me through all connections, repair of IE, etc.) - even took DSL modem over to them to have it tested - it's fine (same one I'm using right now, btw). The computer is a secondary one - would like to fix it and let my daughter use it (the one she's got is a (I think) 1.5, she can't even go to a chat room). I'm thinking seriously of reformatting and reloading 98 - there's really nothing I'm really worried about losing, I have all my CD's - I have a hunch that that might be the simplest thing to do. I have a site that tells me what to do, have had questions answered on another board (about drivers, etc.) and I figure I can't mess it up much more that it already is - and if I do it right, I'll know how if this comupter ever goes down (and if I mess up, I'll know not to try it until I know more). (The ISP tch said that with DSL, it's not supposed to try to reconnect like it did, that it might be something in the original programming, which was dial-up that may not have been completely uninstalled.)

#6 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:48 AM

Posted 10 June 2004 - 08:08 AM

I would still like you to run hijackthis so I can get an idea of what is happening on your system. You may not have any software causing a problem, but at least I will get a better overview.

#7 dudeman

dudeman

  • Members
  • 38 posts
  • OFFLINE
  •  
  • Location:TX
  • Local time:06:48 AM

Posted 10 June 2004 - 09:17 AM

Did you pay your bill???

#8 fritzlesnick

fritzlesnick
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 10 June 2004 - 01:44 PM

grinler - I'll try - remember, I'm still pretty much a novice.

dudman - if I hadn't, I wouldn't be on this computer - same ISP, same modem.

#9 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:48 AM

Posted 10 June 2004 - 03:07 PM

grinler - I'll try - remember, I'm still pretty much a novice.

Please follow the instructions above to download and post a hijackthis log

#10 fritzlesnick

fritzlesnick
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 10 June 2004 - 03:23 PM

Logfile of HijackThis v1.97.7
Scan saved at 12:50:36 AM, on 1/1/98
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
A:\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;127.0.0.1;<local>
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://my.netscape.com/index2.psp"); (C:\WINDOWS\Application Data\Mozilla\Profiles\default\7dyy9d4o.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CPROGRAM%20FILES%5CNETSCAPE%5CNETSCAPE%5Csearchplugins%5CSBWeb_01.src"); (C:\WINDOWS\Application Data\Mozilla\Profiles\default\7dyy9d4o.slt\prefs.js)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.aol.com
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/...7871.9398726852
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) -
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwa...ector/swdir.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shock...ash/swflash.cab
O16 - DPF: {4C226336-4032-489F-9674-67E74225979B} (OTXMovie Class) - http://otx.ifilm.com/OTXMedia/OTXMedia.dll
O16 - DPF: {92CA8ACC-4E99-4A2A-93F1-B2C5CADC8613} (NMInstall Control) - http://a14.g.akamai.net/f/14/7141/1d/www.n....0_SILENT_2.cab
O16 - DPF: {CD89AB62-B70C-43CF-AC83-C7BB55C3DA43} - http://www.sirsearch.com/toolbar/partner/s...ndle_tdp047.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {97C5191E-BDB1-4267-8665-9D9C7DC1E093} - http://www.erationalnews.com/splash.cab

#11 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:48 AM

Posted 10 June 2004 - 03:33 PM

I want you to fix some of those entries. Please do the following:

Please make sure that you can view all hidden files. Instructions on how to do this can be found here:

How to see hidden files in Windows

Run Hijackthis again, click scan, and Put a checkmark next to each of these. Then click the Fix button
O16 - DPF: {92CA8ACC-4E99-4A2A-93F1-B2C5CADC8613} (NMInstall Control) - http://a14.g.akamai.net/f/14/7141/1d/www.n....0_SILENT_2.cab
O16 - DPF: {CD89AB62-B70C-43CF-AC83-C7BB55C3DA43} - http://www.sirsearch.com/toolbar/partner/s...ndle_tdp047.cab
O16 - DPF: {97C5191E-BDB1-4267-8665-9D9C7DC1E093} - http://www.erationalnews.com/splash.cab


Then please Download LSPFix from http://www.cexx.org/lspfix.htm and Run the Program. Disconnect from the Internet and close all Internet Explorer Windows. Check the "I know what I'm doing" Button and remove all traces of nmtracer.dll. Then Reboot.

To see a tutorial on how to use this program click the link below:

Using LSP-Fix to remove unwanted LSPs from your computer..

When you are done post a new log

#12 dudeman

dudeman

  • Members
  • 38 posts
  • OFFLINE
  •  
  • Location:TX
  • Local time:06:48 AM

Posted 10 June 2004 - 03:56 PM

I was just messin' with ya! :thumbsup:

#13 raw

raw

    Bleeping Hacker


  • Members
  • 2,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Texas
  • Local time:06:48 AM

Posted 10 June 2004 - 05:52 PM

To see a tutorial on how to use this program click the link below:

Using LSP-Fix to remove unwanted LSPs from your computer..


Grinler, in your above post there is no link just text. I wanted to read that :thumbsup:

rawsig.png

 rawcreations.net          @raw_creations


Current systems: WHAT OS, BackTrack-raw, PCLinuxOS, Peppermint OS 6, Kali Linux

and a custom Linux From Scratch server hosting a bunch of top secret stuff.


#14 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,675 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:48 AM

Posted 10 June 2004 - 06:20 PM

Ack. Thanks for letting me know about that.

The tutorial is here:


LSP-Fix - Using LSP-Fix to remove unwanted LSPs from your computer.

#15 fritzlesnick

fritzlesnick
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 10 June 2004 - 08:07 PM

Logfile of HijackThis v1.97.7
Scan saved at 12:50:36 AM, on 1/1/98
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
A:\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;127.0.0.1;<local>
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://my.netscape.com/index2.psp"); (C:\WINDOWS\Application Data\Mozilla\Profiles\default\7dyy9d4o.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CPROGRAM%20FILES%5CNETSCAPE%5CNETSCAPE%5Csearchplugins%5CSBWeb_01.src"); (C:\WINDOWS\Application Data\Mozilla\Profiles\default\7dyy9d4o.slt\prefs.js)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O10 - Unknown file in Winsock LSP: c:\windows\system\nmtracer.dll
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.aol.com
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/...7871.9398726852
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) -
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwa...ector/swdir.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shock...ash/swflash.cab
O16 - DPF: {4C226336-4032-489F-9674-67E74225979B} (OTXMovie Class) - http://otx.ifilm.com/OTXMedia/OTXMedia.dll
O16 - DPF: {92CA8ACC-4E99-4A2A-93F1-B2C5CADC8613} (NMInstall Control) - http://a14.g.akamai.net/f/14/7141/1d/www.n....0_SILENT_2.cab
O16 - DPF: {CD89AB62-B70C-43CF-AC83-C7BB55C3DA43} - http://www.sirsearch.com/toolbar/partner/s...ndle_tdp047.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {97C5191E-BDB1-4267-8665-9D9C7DC1E093} - http://www.erationalnews.com/splash.cab




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users