Forum Home
Press F1
 
Thread ID: 61767 2005-09-15 22:53:00 Can't access websites Lizard (2409) Press F1
Post ID Timestamp Content User
388631 2005-09-15 22:53:00 Hi everyone,

Just last night I had trouble with the Internet. I can dial-up without any troubles, but when I go to access a webpage, it goes to 127.0.0.1 and say's "Internet Explorer cannot open the search page. It then returns a 404 error. This happens with any page, except (for some reason) secure pages (beginning with https://).

Modem is just a bog-standard winmodem - haven't installed any software recently.

What I've tried so far:
1. Spyware scan
2. System restore
3. restore Internet security settings to default

None of it has fixed the problem. Any ideas on how to fix this?
Lizard (2409)
388632 2005-09-15 23:32:00 Post a hijackthis log here. Sounds like something has put ip's in your host file. Speedy Gonzales (78)
388633 2005-09-15 23:47:00 Thanks for the suggestion. I don't have hijackthis on my computer - I'll have a look on some coverdisks when I get home to see if there's a version I can use. Lizard (2409)
388634 2005-09-15 23:50:00 See if u can download this

www.merijn.org

Unzip it first, then run it and scan/copy and paste the log here.
Speedy Gonzales (78)
388635 2005-09-16 00:03:00 I'll give it a try when I get home. Thanks. Lizard (2409)
388636 2005-09-16 20:55:00 See if u can download this

www.merijn.org

Unzip it first, then run it and scan/copy and paste the log here.

At first I couldn't download the file because the page wouldn't load. In the end, I system restored to a date about 2 weeks ago, and I could access the web again. I downloaded HijackThis, system restored back to the date when it wouldn't access the websites, ran, scanned, and here's the log:

Logfile of HijackThis v1.99.1
Scan saved at 7:44:52 AM, on 17-Sep-05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\PROGRA~1\AVG7\avgamsvr.exe
D:\PROGRA~1\AVG7\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
D:\PROGRA~1\AVG7\avgcc.exe
D:\PROGRA~1\AVG7\avgemc.exe
C:\Program Files\QuickTime\qttask.exe
D:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\SOUNDMAN.EXE
D:\PROGRA~1\DAP\DAP.EXE
C:\Program Files\Radeon Omega Drivers\v2.6.53\ATI Tray Tools\atitray.exe
F:\ipodmini\bin\iPodService.exe
D:\Program Files\Propel Accelerator\propelac.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Program Files\winrar\WinRAR.exe
C:\DOCUME~1\Peter\LOCALS~1\Temp\Rar$EX00.640\Hijac kThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.nz/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = http=localhost:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\AcrobatReader\Reader\ActiveX\AcroIEHelper.dl l
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\Spybot\SDHelper.dll
O2 - BHO: IE_PopupBlocker Class - {656EC4B7-072B-4698-B504-2A414C1F0037} - D:\Program Files\Propel Accelerator\prpl_IePopupBlocker.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - D:\Program Files\DAP\DAPIEBar.dll
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~1\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] D:\PROGRA~1\AVG7\avgemc.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] D:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [DownloadAccelerator] D:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKLM\..\Run: [Propel Accelerator] "D:\Program Files\Propel Accelerator\trayctl.exe" /STARTUPLAUNCH
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AtiTrayTools] C:\Program Files\Radeon Omega Drivers\v2.6.53\ATI Tray Tools\atitray.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Allow pop-ups from this site - D:\Program Files\Propel Accelerator\pac-addwl.html
O8 - Extra context menu item: Download &all with DAP - D:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Refresh Pa&ge with Full Quality - D:\Program Files\Propel Accelerator\pac-page.html
O8 - Extra context menu item: Refresh Pi&cture with Full Quality - D:\Program Files\Propel Accelerator\pac-image.html
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - D:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - sib1.od2.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{8E7A1D46-7550-4B79-B01C-5686BD8CC7F3}: NameServer = 203.109.252.42 203.109.252.43
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~1\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~1\AVG7\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - F:\ipodmini\bin\iPodService.exe
O23 - Service: RadClock - Unknown owner - C:\WINDOWS\system32\RadClock.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

Hoping this reveals something.

Cheers

lizard
Lizard (2409)
388637 2005-09-16 21:00:00 Cluttered but nothing nasty jumps out.
Possibly your system restore to 2 weeks ago fixed it. Must have if you could download. That means you were able to get a webpage.
Do a thorough spyware scan anyway, and keep doing them.
I guess you have had the accelerators for a while without them causing a problem?
I would go into msconfig and take some of the clutter out of your startup though - not related but its awfully messy.
pctek (84)
388638 2005-09-16 21:24:00 I would tick these in HJT and click on fixed checked. Close all browsers first.

Then reboot.

D:\PROGRA~1\DAP\DAP.EXE - Uninstall this / tick this entry.

It MAY contain Spyware

O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - D:\Program Files\DAP\DAPIEBar.dll

Belongs to the above.

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

Not nasty, but not needed on startup.

O4 - HKLM\..\Run: [DownloadAccelerator] D:\PROGRA~1\DAP\DAP.EXE /STARTUP

Part of Download accelerator.

O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u

Not nasty, but not needed in startup

O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie.htm

Part of Download accelerator

O8 - Extra context menu item: Download &all with DAP - D:\PROGRA~1\DAP\dapextie2.htm

Part of Download accelerator

O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - D:\PROGRA~1\DAP\DAP.EXE

Part of Download accelerator
Speedy Gonzales (78)
388639 2005-09-16 21:43:00 I would tick these in HJT and click on fixed checked . Close all browsers first .

Then reboot .

D:\PROGRA~1\DAP\DAP . EXE - Uninstall this / tick this entry .

It MAY contain Spyware

O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - D:\Program Files\DAP\DAPIEBar . dll

Belongs to the above .

O4 - HKLM\ . . \Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask . exe" -atboottime

Not nasty, but not needed on startup .

O4 - HKLM\ . . \Run: [DownloadAccelerator] D:\PROGRA~1\DAP\DAP . EXE /STARTUP

Part of Download accelerator .

O4 - HKLM\ . . \Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u

Not nasty, but not needed in startup

O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie . htm

Part of Download accelerator

O8 - Extra context menu item: Download &all with DAP - D:\PROGRA~1\DAP\dapextie2 . htm

Part of Download accelerator

O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - D:\PROGRA~1\DAP\DAP . EXE

Part of Download accelerator

Will give it a go, but I doubt whether DAP is the problem - I've used it for years, and never had a problem . It seems odd that it would just decide to start causing trouble out of the blue .
Lizard (2409)
388640 2005-09-16 22:00:00 Will give it a go, but I doubt whether DAP is the problem - I've used it for years, and never had a problem. It seems odd that it would just decide to start causing trouble out of the blue.

Nope, didn't work. Never mind, the system restore from two weeks ago is working - I was just hoping to find out what caused the problem.

Thanks for all your help, Speedy

lizard
Lizard (2409)
1 2