Hey good folks at DaniWeb !!!!!!!
I have a Dell Dimension 3100, Windows XP home, SP3
The computer had many trogans and viruses on it and have been cleaned off. Now I can NOT get this computer to recieve internet packets for anything ! It says that my " Local Area Connection" speed is 10 mbps. But that I have "Limited or no connectivity". I have tried Winsockfix.exe, and that didn't help. Local Area Connection is enabled. I've tried hooking the Ethernet cable straight into the computer and I've tried running it into a small hub, where another computer is hooked up and running on the internet just fine. I've tried ipconfig /flushdns, ipconfig /renew & release. I have hit the " REPAIR" button many times. I have tried unplugging the power to the hub for 30 seconds and plugging it back in. I even put a Linksys Network Ethernet card in it and tried using that . All I got was the same results.
Any help out there ? All help is very much appreciated !!!!!
Recommended Answers
Jump to PostLets have a look and see if there's anything lurking in your registry that shouldn't be!
Download a copy of HiJackThis and save it to a folder on your desktop.
Do a scan and save a logfile.
Post your logfile here......Download HJT latest version here:
Jump to PostPlease run HijackThis again and click "Scan".
Place checks next to the following entries in the code below and close all browser and other windows except for HijackThis, and click "Fix Checked".
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Brenna Jones\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing) …
Jump to PostYou can send a new log if you like and as long as your logged in as Admin, nothing else should matter.
I just saw something in your logs that i missed before.....your running AVG8 which is famous for its firewall blocking internet access.
Disable all AVG services …
Jump to PostYour logfile is clean and there's nothing untoward in there that should be stopping us.
Just an old remenant of the AVG8 uninstall that you can have HJT take out if you like
O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)This isnt affecting …
Jump to PostYou say you have tried Winsockfix so that covers that area.
Also say you have run ipconfig/release.....what showed up?
Did it show the usual IP assigned to the ethernet.
Is the ethernet DHCP'd and when you run ipconfig/release with the ethernet cable unplugged does it behave proper on unplug? …
All 32 Replies
Lets have a look and see if there's anything lurking in your registry that shouldn't be!
Download a copy of HiJackThis and save it to a folder on your desktop.
Do a scan and save a logfile.
Post your logfile here......Download HJT latest version here:
Regards
Thanks for your reply !!!!!!! Here is a log file from today....
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:00:52, on 7/27/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R3 - Default URLSearchHook is missing
O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Brenna Jones\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: CarbonPoker - {e4e8c758-34b4-44bb-8ef9-1f0786e81d2d} - C:\Documents and Settings\Brenna Jones\Start Menu\Programs\CarbonPoker\CarbonPoker.lnk (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted IP range: http://195.95.*.*
O15 - Trusted IP range: http://195.225.*.*
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1188231397718
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://games.myspace.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 7105 bytes
Just let me know what to do next.
Please run HijackThis again and click "Scan".
Place checks next to the following entries in the code below and close all browser and other windows except for HijackThis, and click "Fix Checked".
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Brenna Jones\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O15 - Trusted IP range: http://195.95.*.*
O15 - Trusted IP range: http://195.225.*.*
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195
O15 - Trusted IP range: http://216.236.239.193
O15 - Trusted IP range: http://216.236.239.195On completion close HJT and reboot!
Looks as though the pre-existing Malware variants have added some IP ranges to your trusted pages. (Unless you put them there yourself?)
When it says that " Local Area Connection" speed is 10 mbps, this is refering to your network adaptor and has nothing to do with your internet speed contracted with your ISP.
Can you access the WAN (Internet) now?
I haven't paut any addresses in this computer. Must have been a bad guy !
Did you want a new HijackThis log ?
I still can't get on the internet. Limited or no connectivity.
Next ? I'm really tryin to get this computer fixed by tomorrow morning so it can be used when the store opens in the morning.
Would this computer having 3 user accounts have anything to do with it ?
Help !
You can send a new log if you like and as long as your logged in as Admin, nothing else should matter.
I just saw something in your logs that i missed before.....your running AVG8 which is famous for its firewall blocking internet access.
Disable all AVG services (including firewall) from running in the background and see if this helps.
You can send a new log if you like and as long as your logged in as Admin, nothing else should matter.
I just saw something in your logs that i missed before.....your running AVG8 which is famous for its firewall blocking internet access.
Disable all AVG services (including firewall) from running in the background and see if this helps.
I tried to disable AVG 8 but taskmanager wouldn't do it, so, I uninstalled it. Restarted and turned ZoneAlarm off. None of that helped. I have installed AVG7.5 for now untill we get this thing fixed.
Let me know what ya want me to do, please.
new log
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:32:23, on 7/27/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R3 - Default URLSearchHook is missing
O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: CarbonPoker - {e4e8c758-34b4-44bb-8ef9-1f0786e81d2d} - C:\Documents and Settings\Brenna Jones\Start Menu\Programs\CarbonPoker\CarbonPoker.lnk (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1188231397718
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://games.myspace.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 6445 bytes
Your logfile is clean and there's nothing untoward in there that should be stopping us.
Just an old remenant of the AVG8 uninstall that you can have HJT take out if you like
O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)This isnt affecting the current concerns though.
Dang this.....We must be missing something easy.
AVG7.5pro also has its own firewall built in, are you sure you have disabled it and ZA before attempting connection?
Personally, i would ditch AVG and use Avast Free edition available here:
http://www.majorgeeks.com/Avast_Home_Edition_d1968.html
I guess were not that concerned about an AV just yet as we cant even access the internet to get infected....lol
I think youve tried everything that comes to mind at the moment.....I gotta go to bed but ill think some more on this.
Try uninstalling AVG and ZA without installing anything else, Run CCleaner after the uninstalls and then attempt connection again.
http://www.majorgeeks.com/CCleaner_With_Yahoo_Toolbar_d5125.html
Dont install the crappy Yahoo toolbar though (unless you want it)
I assume your bypassing all routers etc and connecting the cat5e directly to your pute from modem(ie using the same physical setup connection that works on another system)
Uninstalled AVG & Zone. Ran CCleaner.....no Yahoo crap for me !!! I have been running the Cat5 straight in to computer and also tried my little simple hub that I have. I also now have tried to go into Safe Mode w/networking and connect that way. Didn't help at all !
I also did RUN, cmd and then ipconfig /renew and got the results that said " No operation can be performed on Local Area Connection 3 while it has it's media disconnected." Then I tried ipconfig /release and got these results under Local Area Connection 3: Media State.........: Media disconeccted
I'm lost.
I restarted, and that didn't help. Hit repair, that didn't help. I unplugged the Cat5 and plugged it right into another computer( computer #2), sitting beside this other computer and computer #2 got onto the internet within 6 seconds. So I know it's not the Cat5 cable.
HELP , please. When I went into Safemode I went into the Admin. account. When in normal mode, the 3 accounts that are listed are ALL labled as Administrator accounts. I'm lost .
Any more help ?
You say you have tried Winsockfix so that covers that area.
Also say you have run ipconfig/release.....what showed up?
Did it show the usual IP assigned to the ethernet.
Is the ethernet DHCP'd and when you run ipconfig/release with the ethernet cable unplugged does it behave proper on unplug? (ie. IP goes to 0.0.0.0.)
Have you also tried deleting the Local Area Connection and renewing the network connection....
Please also run through these TCP/IP stack repair options for XP with SP2.
Open a cmmd prompt with admin priv's again
Reset WINSOCK entries to installation defaults by running: netsh winsock reset catalog
Reset TCP/IP stack to installation defaults: netsh int ip reset reset.log
Reboot the machine.
before I run the CMD, ipconfig /release again, please tell me how to copy my results so that I may post all the info to you.
and how do I delete the Local Area Connection and renewing the network connection....
Here's what I did. Here's my results from running ipconfig /release , with the Cat5 plugged in.
C:\Documents and Settings\Brenna Jones>ipconfig /release
Windows IP Configuration
No operation can be performed on Local Area Connection 2 while it has its media
disconnected.
Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 0.0.0.0
Subnet Mask . . . . . . . . . . . : 0.0.0.0
IP Address. . . . . . . . . . . . : ?
Default Gateway . . . . . . . . . :
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : ?
Default Gateway . . . . . . . . . :
Here is when I run "release" when Cat5 is unplugged...
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\Brenna Jones>ipconfig /release
Windows IP Configuration
No operation can be performed on Local Area Connection 3 while it has its media
disconnected.
No operation can be performed on Local Area Connection 2 while it has its media
disconnected.
Here is the results from running netsh winsock reset catalog.
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\Brenna Jones>netsh winsock reset catalog
Sucessfully reset the Winsock Catalog.
You must restart the machine in order to complete the reset.
and here is the results from running netsh int ip reset reset.log
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\Brenna Jones>netsh int ip reset reset.log
C:\Documents and Settings\Brenna Jones>netsh int ip reset.log
The following command was not found: int ip reset.log.
I also reran Winsockfix , first and nothing helps. I'm lost !!!
I don't know how to delete the Local Area Connection and renew the network connection ?
Any more idea's ?
No IP addy allocated for Local area connection3? DHCP is not enabled.
Are you supposed to be recieving your IP addy dynamically or statically?
From the control panel:
Open "network Connections"
Right click on your local area connection3 and select "properties"
Scroll down and highlight "Internet Protocol TCP/IP"
Click on Properties
Is "obtain IP address automatically" checked, or is "use the following ip address" checked?
Can you also Open device manager and expand 'Network Adaptors'.
Hit the 'Print Screen' key on your keyboard.
Open Windows 'Paint' / click the 'Edit' tab on the top menu display and select 'paste'.
On the 'file' tab select 'Save As' and save the image to your desktop.
Open your browser, get on a free uploading site and upload the image.....
http://www.imageshack.us/
Copy and paste the 'hotlink for forums1' URL code into your post so i can have a look.
Ok, first off, here is your link, of the pic.
[IMG]http://img70.imageshack.us/img70/2097/picofhardwareok3.th.png[/IMG]
I don't know if I'm supposed to be recieving your IP addy dynamically or statically? I don't know how to check that ?
![[IMG]](http://img70.imageshack.us/my.php?image=picofhardwareok3.png){kind=link}
"obtain IP address automatically" was already checked.
Any more idea's , just let me know. Thanks for working with me for so long !!!
Do I need to remove the Ethernet card I put in this machine ? I put it in there just to see if I could get hooked to the internet . It is made by Linksys.
Yeah, shutdown, remove the Linksys NC100 fast ethernet adaptor and reboot.
We will use the Intel pro 100 ve for attempted connection.
Go to the control panel again - network connections.
Disable all the local area connections you dont need (there are too many icons in your system tray as it looks like you have run through the connection wizard a few times) just keeping one.
Open properties for that Local Area Connection
Select Internet Protocol(TCP/IP) and select properties
make sure that "obtain IP address automatically" (as you said) and "obtain DNS server address automatically" are checked, and click OK.
Go back to device manager and right click the Intel adaptor and select properties and confirm the device is working correctly.
Right click again and Disable the device and then re-enable.
Also, unplug the power to the cable modem and let it sit for a few seconds and re-power it.
Wait about 2 minutes before trying to connect after that.
If this dont help then unplug all power sources to the puter, remove keyboard / monitor cables etc, open nearest window and dispose of unit with 2 hands (only kidding dude.....not. lol).
See how ya go with the above~!
Progress !!!!!!!!!!!!!!!!!
It says I'm "connected" now. No limited connectivity anymore !!!!!!!!!! But , when I tried to get on the net, by way of Google.com, I couldn't. I also tried Microsoft.com and that din't work either.
But it says that I'm connected ! The little monitors in the tray at the bottom show one blue screen.......and thats a first :)
Any suggestions on how to surf the net again ?
I'm going ahead and putting "protection " back on here here when we get it "SURFING".
Progress !!!!!!!!!!!!!!!!!
It says I'm "connected" now. No limited connectivity anymore !!!!!!!!!! But , when I tried to get on the net, by way of Google.com, I couldn't. I also tried Microsoft.com and that din't work either.
But it says that I'm connected ! The little monitors in the tray at the bottom show one blue screen.......and thats a first :)
Any suggestions on how to surf the net again ?
I'm going ahead and putting "protection " back on here here when we get it "SURFING".
Forgot to tell ya that right after I got all the viruses off this computer, I updated it to Service Pack 3. Could that be why I can't get on the Internet just yet ?
Wooot! Great News.....At least we have a connection now!
What exactly do you mean by 'It didnt work'?
When you open your browser (IE7) do you get an error message, and does the same thing occur with another browser......try firefox 3 and see what happens.
Download: http://www.geekpolice.net/freeware-downloads-f14/firefox-3-t2063.htm
Wooot! Great News.....At least we have a connection now!
What exactly do you mean by 'It didnt work'?
When you open your browser (IE7) do you get an error message, and does the same thing occur with another browser......try firefox 3 and see what happens.
Download: http://www.geekpolice.net/freeware-downloads-f14/firefox-3-t2063.htm
Hey Brother....
This computer in not completely mine so I can't put FireFox on it, sorry.
When I try to get on the web with Internet Explorer, all I get is ...." Internet Explorer cannont display the webpage". No matter what page I try to bring up, thats all I get.
Hey Brother....
This computer in not completely mine so I can't put FireFox on it, sorry.
When I try to get on the web with Internet Explorer, all I get is ...." Internet Explorer cannont display the webpage". No matter what page I try to bring up, thats all I get.
I see something that may be the issue, but I don't know how to change it. When I pull up the Local Area Connection status, by double clicking the 2 monitor screens in the task bar, and selecting " SUPPORT",my computer says that the "ADDRESS TYPE is "ASSIGNED BY DHCP". When I click on the DDRESS TYPE, on the computer that you and I have been working on, it says "AUTOMATIC PRIVATE ADDRESS". I don't know what either of those means but could that be our problem ?
Nah.....this just means that your computers IP addy is assigned dynamically by DHCP.
If connection is established, but IE wont display the web page, its an issue with the embedded browser itself or a windows setting somewhere thats most likely been altered by the Malware you once had.
Because IE is embedded with all windows OS's, its not possible to uninstall and reinstall the app as it stands without rebuilding the great wall of china.....This is why i ask that we can test this theory by using a 'third party' browser such as firefox etc.
Geesh....your really makin me work here Tumbleweedracef!
Haven't used XP or IE7 for a few years now.
Vista Rocks in 64 bit and have been using mostly x86 since beta 1 testing for MS.
I love FF3 at the moment cause IE8 beta kept crashing during testing for the first version.
I'll have a look around my sons XP machine and get back to you!
Get permission for a browser install if you can.
Ok, I will install FF3 for a test. If ya hear of a man in TN who was skinned alive, just remember me as a Brother !
LMAO!
You'll be doing a favour for whoever owns it.
I Have your back Bro!
Well Bro. I downloaded and installed FF3 and I get the same results......"ADDRESS NOT FOUND". I tried google and I tried microsoft.com, and got nothing !
What next ?
I tried ipconfig /release and then "renew, and here is my results from "renew"
C:\Documents and Settings\Justin>ipconfig /renew
Windows IP Configuration
An error occurred while renewing interface Local Area Connection 3 : unable to c
ontact your DHCP server. Request has timed out.
Does this help ?
....and my Brother , may I ask a small favor. Is there anyway I can get ya to respond a little quicker, I have to get this thing working so this small business can resume. I need ya and if your having issues there, I understand. Help as you can. Thanks !!!!!!
Its got me buggered...If you have tried to reinstall the drivers, have tried to remove the winsock & winsock2 from the registry and reinstalled the tcp/ip protocol using the
nettcpip.ini file.
Downloaded the winsock fix and all to no result then the only other thing i can think of would be the possibility that your network card or cable may be
bad?
It cant be anything else that i know of???
You could try assigning a static IP i guess as the issue seems to be related to DHCP.
Maybe a format and clean install of the OS to ensure that the malware you had has not corrupted anything, although your logfile looks ok to me this doesnt mean that something might be amiss.
Sorry dude.....these above suggestions are all i have.
I just talked with Dell and they had me test" ipconfig" and when I told her the results, she said that the answer is for me to put in a new operating system. So, with you saying that and her too, I guess thats what I need to do. The only thing I haven't done is assigning a static IP, because I don't know to. If ya want to try that, let me know, if not, I'll just pull all the files off and reformat it. Let me know.
Format and clean install Windows dude......I know I sound like an ISP tech support guy, but this is often the best way to achieve results as a last resort, and i think we need to pull our 'last resort' into play, do you?
Some info on assigning a static IP in case your wondering:
http://www.hotcomm.com/FAQ/FAQ_staticIPXP.asp
Good Luck with the format.....ahhh, nothing like the smell of burning drive clusters in the morning. Lol
Format and clean install Windows dude......I know I sound like an ISP tech support guy, but this is often the best way to achieve results as a last resort, and i think we need to pull our 'last resort' into play, do you?
Some info on assigning a static IP in case your wondering:
http://www.hotcomm.com/FAQ/FAQ_staticIPXP.aspGood Luck with the format.....ahhh, nothing like the smell of burning drive clusters in the morning. Lol
LOL.....I hope I don't smell anything burning, LOL ! I will just go ahead and do THE DEED ! I may try to get into the link ya sent tomorrow but, I'm goin to bed now.:yawn:
Thanks a million for working with me for soo long !!!!!! I really appreciate all you've done !!!! Thanks for keeping it real also and not being all "stuffy" !!!! Later BRO. !
We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.