Forum Home
Press F1
 
Thread ID: 66005 2006-02-07 23:33:00 Internet DSL won't connect ZonerDude (9419) Press F1
Post ID Timestamp Content User
428180 2006-02-07 23:33:00 Hi there,

I will try to explain my problem as thoroughly as possible and hope that someone out there has a solution. I have a computer that uses Windows XP Prof w/ SP2, and I'm on the Xtra 2mb plan with 10gb cap. Now for some reason no programs were able to access the internet except for Internet Explorer. So programs like Google Earth/ICQ wouldn't work. Now not even Internet explorer will work. When I went to use MSN Messenger it came up with a repair tool that told me it had something to do with the Default Gateway not working. I'm afraid this is all new to me so I'm not sure which way to go. I have two computers connected to DSL using a D-Link Wireless Router G604T, and the computer that isn't working, is plugged directly into the Router, while the second one uses a D-Link Wireless USB adapter. The second computer is fine and have never had any problems with it. But the first one has always had problems. My suspicion is that it is nothing to do with the router, but with some internal settings or problem with XP Pro or SP2. I hope someone out there has an idea of what I could do. Any help or direction would be appreciated.
ZonerDude (9419)
428181 2006-02-07 23:51:00 I doubt it'll be XP or SP2, if you managed to install SP2 on it. (On the PC that doesnt work properly).

BUT, it could have spyware, or something on it.

I would get Hijackthis (www.merijn.org) from here (www.spywareinfo.com)

Unzip this file into its own folder, and then run it, and click on scan and save the log. Copy and paste the log here.
Speedy Gonzales (78)
428182 2006-02-08 00:02:00 Before I post the HijackThis log, I'm not sure if this is relevant or not, but whenever Internet Explorer boots up it says finding 1.0.0.0
Don't know if it means anything, but thought it might be worth mentioning. TCP/IP are set to automatic. Anyway, here is the log, I hope you can make some sense of it.

Logfile of HijackThis v1.99.1
Scan saved at 12:56:17 PM, on 2/8/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ps2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Documents and Settings\Sid\My Documents\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://xtramsn.co.nz/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: CDLPObj Object - {BE2ED590-CA49-46B5-8CCE-244FB2E0D1AA} - C:\WINDOWS\DLP.dll
O2 - BHO: IEPlugin Class - {CF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\Advanced System Optimizer\IEHelper.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Reset.lnk = C:\WINDOWS\repair\reset.bat
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - go.microsoft.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - www.crucial.com
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - messenger.msn.com
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - zone.msn.com
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - runonce.msn.com
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
ZonerDude (9419)
428183 2006-02-08 00:16:00 Boot into safe mode, run hijackthis again, and tick these entries and tick fix checked .

O2 - BHO: CDLPObj Object - {BE2ED590-CA49-46B5-8CCE-244FB2E0D1AA} - C:\WINDOWS\DLP . dll - This may belong to this ( . symantec . com/avcenter/venc/data/adware . webdir . html" target="_blank">www . symantec . com)

This may have been installed as part of some program you installed .

Follow this site ( . spyany . com/program/article_adw_rm_WebDir . html" target="_blank">www . spyany . com) to unregister the file for Webdir .

Follow these removal steps to remove this hijacker from your computer:

Reboot the computer to safe mode (Press F8 key when windows start . ) .

Open a DOS command prompt window ( Start > Run , type 'cmd' (on

Windows NT/2000/XP ) or 'command' (on Windows 95/98/Me)) and enter the following commands,

cd %windir%
regsvr32 /u webdir . dll
Reboot your computer .

Delete the file webdir . dll from %Windir% directory (Note: %WinDir% is a variable, by deffault this is "C:\Winnt" or "C:\Windows") .

O4 - HKLM\ . . \Run: [AlcxMonitor] ALCXMNTR . EXE - This is part of the soundcard drivers, but isnt needed in startup .

I dont know what this entry belongs to

O4 - Global Startup: Reset . lnk = C:\WINDOWS\repair\reset . bat - This maybe causing you probs .

Then reboot . See if the PC is any better then .
Speedy Gonzales (78)
428184 2006-02-08 01:00:00 I did everything you mentioned, unfortunately to no avail. Here is an updated log.

Logfile of HijackThis v1.99.1
Scan saved at 1:56:36 PM, on 2/8/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ps2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Documents and Settings\Sid\My Documents\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://xtramsn.co.nz/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IEPlugin Class - {CF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\Advanced System Optimizer\IEHelper.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - go.microsoft.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - www.crucial.com
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - messenger.msn.com
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - zone.msn.com
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - runonce.msn.com
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
ZonerDude (9419)
428185 2006-02-08 02:53:00 The log looks fine.

Might be a prob with hardware somewhere. I doubt its the router if the other pc is going thru it and it can get on the net.

You can tick these entries in hijackthis

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

I think this belongs to the mouse?


O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe



Try this (www.simplysup.com) install it, run it, click on scan.

Then go to the utilities menu and select the 3-7th option.
Speedy Gonzales (78)
428186 2006-02-08 03:01:00 Yes, that last entry you mentioned is for the mouse. I doubt the problem is the router either, since this problem precedes it. When I just had one DSL modem, the one that came with Xtra, I used to just have the computer that isn't working now on it. And it worked at first, and then I think it might have been when I upgraded to SP2 that only IE worked from then on. And now nothing works. The weird thing is, I can see the network connection thing in the corner, by the clock, and it seems ok. But it's just nothing can connect to the net. Not IE, Google Earth, iTunes, anything. I even tried a repair install, but it didn't work. I thought it might be something to do with the TCP/IP, but I tried that ipconfig /all thing and everything seemed in order. I'm really just stumped as to where to begin. I'll try those fixes you mentioned above and see if they help. Thanks for taking the time to look at this too. ZonerDude (9419)
428187 2006-02-08 03:06:00 No worries, yup try trojan remover, it'll reset the hosts file and a few other things if something has mucked something up. Speedy Gonzales (78)
428188 2006-02-08 03:10:00 Those changes didn't help either, but at least they won't bog down the computer. The other reason I don't think it's hardware is because I can connect to the router fine. Like when I type in 10.1.1.1 to access the router and make changes, etc, it can talk to it fine. I think I might have mentioned this before, but when Internet Explorer boots up, it says 'connecting to site 1.0.0.0' down the bottom. Is that right? ZonerDude (9419)
428189 2006-02-08 03:11:00 Ok, I just got your post about the trojan remover, so I'll try that now. Does it matter which one I use? ZonerDude (9419)
1 2 3 4