Member Avatar for tnkwilli

I have Win ME. Everything appears to be connected normally. I am connected through a wireless connection. My IP address releases and renews fine. I can ping the IP address (ex. ) but not the name (www.yahho.com). I think it may be spyware, virus related. Here is my Hijack This Log. Thanks for your help.

Tom

Logfile of HijackThis v1.98.2
Scan saved at 3:14:56 PM, on 10/3/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\WZCBDL SERVICE\WZCBDL9X.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\D-LINK\AIR USB UTILITY\AIRCFG.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://desktop.presario.net/scripts/redirectors/presario/deskredir.dll?c=3c00&s=consumer&LC=0409
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=3c00&s=searchbar&LC=0409
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_16_0.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet3_88.dll (file missing)
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_16_0.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [D-Link Air USB Utility] C:\Program Files\D-Link\Air USB Utility\AirCFG.exe
O4 - HKLM\..\RunServices: [WZCBDLService] C:\Program Files\WZCBDL Service\WZCBDL9X.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=avbabelfish&c=3c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV &Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=avbabelfish&c=3c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=avlinksearch&c=3c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=avlinksearch&c=3c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=avhostsearch&c=3c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=avhostsearch&c=3c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=altavista&c=3c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV Live - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirectors/presario/srchredir.dll?s=altavista&c=3c00&LC=0409 (file missing)
O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet3_88.dll' missing
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.

  • 4 Contributors
  • 4 Replies
  • 335 Views
  • 4 Years Discussion Span
  • Latest Post Latest Post by raji85

Dani AI

Generated

A short, practical diagnosis and repair checklist for the exact symptom in this thread (can ping an IP but not a hostname). This usually means name resolution or a system-level network filter is failing — the connection to the remote host works, but the step that turns names into IPs (DNS/hosts/Winsock) is broken. The HijackThis output that posted and the community suggestions from and point in the same direction: start with simple, repeatable checks, then move to safer repairs. (learn.microsoft.com)

Quick triage (run these from a command prompt or the appropriate GUI on very old Windows installs):

ping 8.8.8.8
ping www.example.com
nslookup www.example.com

If the first ping succeeds and the second fails, DNS or a local override is the problem. Check the local hosts file (Win9x/ME location is typically C:\windows\hosts) and ensure no unwanted entries or redirects exist. Also check Internet Explorer (or system) proxy settings and any filtering/parental-control software. (webhostinghub.com)

Notes for Windows 95/98/ME: use winipcfg to view or release/renew addresses and the Network control panel to remove/reinstall TCP/IP if the Winsock/TCP stack seems corrupted. Microsoft documented procedures for repairing TCP/IP on those older systems — record settings before you remove components. Back up important files and the registry before making changes. (ftp.zx.net.nz)

If a layered network hook/LSP is involved (third‑party network filters, VPNs, adware, etc.), uninstall the responsible software first. On modern Windows, netsh winsock reset is a supported, low-risk repair; on legacy 9x/ME machines follow the reinstall steps above. After any repair, reboot and re-run the simple tests, then rescan with updated AV/anti‑malware. For background on LSPs and why they can break name lookups see Microsoft’s Winsock/LSP documentation. (support.microsoft.com)

This covers safe, repeatable steps so someone arriving here later can triage the issue without repeating guesses; the thread’s posts and ’s pointer to online lookup tools are useful supplements but the local checks above normally find the root cause.

Member Avatar for rbk25

maybe you just typed it wrong in the forum but try
"ping www.yahoo.com" or "ping "


Otherwise what seems to be your actual problem.

Member Avatar for LoafOfBread34

That sounds like a DNS error to me. Try another site just to be sure. (Google is a good one.) Try unplugging your cable modem (Or DSL) so it can get new DNS servers from the ISP server.

Member Avatar for tnkwilli

Actually I didn't type the actual IP address in the forum. I was just making a distinction between the IP address using "numbers" vs the "name". I came to the solution on my own after looking at the HIjackThis log. The "newdotnet" that was in the log was the problem. I was able to find the removal instructions at their website http://www.newdotnet.com/removal.html
Once I did that everything was back to normal.
Thanks for the input.

Tom

Member Avatar for raji85

You can get this for the PING the ip... Here i got this site for the Domain name to search the IP address details @ free of costs... Also with the PING search, DNS query from here.. i think this site will help to recover the IP address informations

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.