Member Avatar for beebee

I'm running Windows 2000 on a Compaq E500 laptop. I ran Adaware and Spybot Search and Destroy. Ithen installed Firefox and tried to connect to the internet. The connection is there but I cannot access any pages. I uninstalled Firefox and tried again with Internet Explorer with the same result.

The error message is : Page cannot be displayed DNS error

I've run HiJack this and here is the log file.
I notice an entry "010 Broken Internet access because of LSP provider 'c:\winnt\newdot~1.dll' missing"
Is there a fix ? and is there anything else in the log file I should take action on?

Thanks for any assistance ( please don't be TOO technical in any reply - it's a fix for dummies I need) :)

Logfile of HijackThis v1.97.7
Scan saved at 14:44:20, on 26/11/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Altiris\AClient\AClient.exe
C:\WINNT\System32\ati2plab.exe
C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe
C:\PROGRA~1\Compaq\COMPAQ~2\CPQWEB~1\WebDmi.exe
C:\WINNT\System32\NALNTSRV.EXE
C:\WINNT\system32\regsvc.exe
C:\Program Files\Sophos SWEEP for NT\SWNETSUP.EXE
C:\Program Files\Sophos SWEEP for NT\SWEEPSRV.SYS
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\wm.exe
C:\WINNT\system32\svchost.exe
C:\PROGRA~1\Compaq\COMPAQ~2\cpqdmi.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\Atiptaxx.exe
C:\WINNT\system32\Promon.exe
C:\WINNT\system32\ltmsg.exe
C:\Program Files\Compaq\HotKey Software\hkss.exe
C:\WINNT\system32\PRPCUI.exe
C:\PROGRA~1\Compaq\COMPAQ~2\CHKADMIN.EXE
C:\PROGRA~1\Compaq\Security\Secure32.exe
C:\Program Files\Compaq\PowerCon Enhancements\CPQAcDc.Exe
C:\Program Files\Compaq\EasyAccessButtons\cpqek.exe
C:\WINNT\System32\dpmw32.exe
C:\WINNT\system32\NWTRAY.EXE
C:\Program Files\Winamp3\winampa.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Sophos SWEEP for NT\ICMON.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Program Files\PGP\PGP55\PGPtray.exe
D:\Documents and Settings\Administrator\My Documents\MyStuff\Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BTopenworld
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {9527D42F-D666-11D3-B8DD-00600838CD5F} - C:\WINNT\system32\IETie.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [Promon.exe] Promon.exe
O4 - HKLM\..\Run: [LTWinModem1] ltmsg.exe 9
O4 - HKLM\..\Run: [hkss] C:\Program Files\Compaq\HotKey Software\hkss.exe
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [ChkAdmin] C:\PROGRA~1\Compaq\COMPAQ~2\CHKADMIN.EXE
O4 - HKLM\..\Run: [Compaq Computer Security] C:\PROGRA~1\Compaq\Security\Secure32.exe
O4 - HKLM\..\Run: [CPQAcDc] C:\Program Files\Compaq\PowerCon Enhancements\CPQAcDc.Exe
O4 - HKLM\..\Run: [cpqek] C:\Program Files\Compaq\EasyAccessButtons\cpqek.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [NDPS] C:\WINNT\System32\dpmw32.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp3\winampa.exe"
O4 - HKLM\..\Run: [BTopenworld] "c:\program files\bt yahoo! internet\DialBTYahoo.exe" /ReInstallAutoDial
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - Startup: PGPtray.lnk = C:\Program Files\PGP\PGP55\PGPtray.exe
O4 - Global Startup: InterCheck Monitor.LNK = C:\Program Files\Sophos SWEEP for NT\ICMON.EXE
O4 - Global Startup: Microsoft Office.lnk = D:\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O9 - Extra button: ICQ (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O10 - Broken Internet access because of LSP provider 'c:\winnt\newdot~1.dll' missing
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) -
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) -
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} -
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! WebCam Viewer Wrapper) -
O16 - DPF: {EC5A4E7B-02EB-451D-B310-D5F2E0A4D8C3} (webhelper Class) -
O16 - DPF: {F5820AD3-9B20-423E-B2AA-7AF2B4055746} (CRegistryDownload Class) -
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{36413D9A-F918-462C-872C-DDA71D89FFD5}: NameServer = ,
O17 - HKLM\System\CS1\Services\Tcpip\..\{36413D9A-F918-462C-872C-DDA71D89FFD5}: NameServer = ,
O17 - HKLM\System\CS2\Services\Tcpip\..\{36413D9A-F918-462C-872C-DDA71D89FFD5}: NameServer = ,

  • 4 Contributors
  • 5 Replies
  • 276 Views
  • 3 Years Discussion Span
  • Latest Post Latest Post by crunchie

Dani AI

Generated

This thread shows a textbook LSP (Layered Service Provider) failure: the Winsock chain referenced a missing NewDotNet provider and name resolution stopped working. As noted, removing the broken LSP entry restored normal browsing for , which fits the common pattern where a missing DLL in the Winsock chain causes a “DNS error” even though the underlying IP connectivity is still present.

Short, plain explanation: LSPs are small DLLs that sit between applications and the TCP/IP stack. If one is left in the chain but its file is gone, applications that perform DNS lookups can fail and report a DNS error. Removing the dead entry (or repairing the Winsock stack) restores the normal order and allows hostname resolution to work again.

Recommended follow-ups and checks (sensible, low-risk steps to do after the LSP has been removed):

  • Confirm name resolution and basic connectivity with these commands from a Command Prompt:
    ipconfig /all
ipconfig /flushdns
ping 8.8.8.8
ping google.com
  • Inspect the hosts file at C:\WINNT\system32\drivers\etc\hosts for unexpected entries and remove anything malicious (save a copy first).
  • Run updated anti-malware and rootkit scans to remove remnants that installed the LSP in the first place.
  • Back up the registry before making edits: export the WinSock/WinSock2 branch (the keys under HKLM\SYSTEM\CurrentControlSet\Services that mention WinSock or WinSock2). Windows 2000 does not have a built-in “restore point” like later Windows releases, so an exported registry branch is the safest rollback option.
  • Avoid blind removals with HijackThis — tools that are purpose-built to fix LSPs are safer than deleting random entries.

Note: the “shdoclc.dll/dnserror.htm” complaint posted later by is a different symptom and, as suggested, is best handled in its own thread since it may have a separate root cause.

Recommended Answers

All 5 Replies

Member Avatar for caperjack

This {O10 - Broken Internet access because of LSP provider 'c:\winnt\newdot~1.dll' missing}they say indicates the NewDot net wasn't uninstalle correctly ,this item can't be fixed with hijackthis as it may cause you to loose your internet connection ,
The problem is discused in this fourm ,HERE I think you should try this as suggested in above link .

,,,,,,,,,,,,,,,,,,,,,,
Download LSPfix here: http://www.cexx.org/lspfix.htm

Launch the application, and click the "I know what I'm doing" checkbox.

Check all instances of newdotnet1.dll' if its there ,(and nothing else), and move them to the "Remove" pane.
Then click Finish.

Member Avatar for beebee

caperjack,

there's a pint of the best guinness in Ireland in the best pub in ireland awaiting you :)

thanks a lot .. the lspfix did the trick !

bb

Member Avatar for caperjack

caperjack,

there's a pint of the best guinness in Ireland in the best pub in ireland awaiting you :)

thanks a lot .. the lspfix did the trick !

bb

Thanks Glad i could help .
Me Being From Cape Breton ,Nova Scotia ,Canada .I can pretend I drank the Guinness,Actuall I think its imported as a specutally Beet here .just send me a fiver and I go out and buy one ,!:)LOL

Member Avatar for tayebwatom

Hi there,
Am frustrated by thi message,
WINNT32\system32\shdoclc.dll/dnserror.htm.
This fuckin message display comes every time i try to open aweb page.
Please help
Thanks

Member Avatar for crunchie

Hi tayebwatom.

First of all- welcome to Daniweb :).

We ask that members not piggy-back questions on to a thread previously started by another member here in the Viruses, Spyware & other Nasties forum, (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/forums/faq.php?faq=daniweb_policies


Thanks for understanding.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.