Re: Unable to connect to Internet.

From: Jan Il (abuse_at_localhost.com)
Date: 01/18/05 

Date: Tue, 18 Jan 2005 15:10:04 -0500

Hi amt7565 :-)

> Hi Jan-
> Currently I have uninstalled the firewalls. This PC has not been used in a
> few months. The person who used it was using dialup. I did a thourough
> cleanup and using AdAware and Spybot I have removed about 350 viruses,
> malware etc.
>
> This is the first time this PC is being connected through cable to the
> internet.
>
> -Proxy settings are un-checked.
> -no firewall
> -No error messages.
> -There is MSN messenger, but I don't have it on the tray. I will uninstall
> that when I get home tonight.
> -I did run SYSTEM MECHANIC to clean up the system(but did not use the
> 'delete duplicate files' option).
> -LAN connections seems to be active if I connect my cable modem. It just
> won't connect to the internet(page unavailable).
>
> Will reinstalling IE help?

It may be the last straw, but, let's hope not, and try a few other things
first that may help. Now that I know you have removed some spyware and
malware, it may be that your connection has been breached with that removal,
which sometimes happens with some types of warez. I'd like you to first run
following program and see if it helps with the connection. It is a small
utility program and there are instructions at the site on how to use it. I
can fit on a floppy disk so you can download the file to the floppy from the
website and then load and install it on the other machine.

LSPFix - Free

http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

Also, often some nastier variants of malware are very hard difficult to get
rid of, and can replicate themselves repeatedly if not fully cleaned from
the system. While being very good programs, AdAware and SpyBot alone can not
guarantee that your system is fully cleaned, only that it may be free of
adware and spyware. There are numerous types of malware, Trojans, Worms and
parasites that can still be on the system that AdAware, SpyBot and even the
best AV can not detect, as they do not have the definitions to do so. I
would also like to recommend that you download HiJackThis from a computer
that can burn it to a CD to be loaded and installed on the infected machine.
Once installed according to the instructions at the site, run the log, and
then copy it to a floppy. Then post the log from another machine to the
following and allow the experts there to review it and tell you what you
need to do, if anything is found that needs removal or correction.

Merely repairing or reinstalling IE will not remove any scumware that is on
the system, and any problems it is causing will still be there. Thus, we
will need to be sure that the system is fully clean before you do that.

Please follow all instructions carefully, and the ones at the forums. Be
sure to explain in your post that you will not be able to run the QuickFix
and other diagnostic programs they require as for the affected machine as
you can not connect to the Internet to do so, and are posting the log from
another machine. Also, be sure to let them know that you were referred from
here, and all the steps you have already tried, including the AdAware and
SpyBot. Make sure you run the HJT from Safe Mode, which will be explained
in the instructions. Please post a link here to where you have posted the
log so that we can keep track of the progress there and can help on this end
if needed. :-)

HiJackThis

How to download and install HiJackThis:

http://www.bleepingcomputer.com/forums/topict309.html

Please DO NOT post your log to this newsgroup, but to the HiJackThis Support
Forums below:
http://www.hijackthis.de/forum/forumdisplay.php?f=10&guestlanguageid=4
the Aumha HiJackThis Forum
http://forum.aumha.org/viewforum.php?f=30

or Bleeping Computer Forum

http://www.bleepingcomputer.com/forums/forum22.html

to allow the experts there to evaluate your log and advise you of any
necessary steps to clean your system.

(Note: You will have to Register before posting on these Forums. Please
follow all posting instructions carefully to avoid having your log deleted
or ignored.)

We'll be here if you have questions or need further assistance. ;-)

Hope this helps

Jan :)
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

>
> Thanks :)
> AMT-
>
>
> "Jan Il" wrote:
>
> > Hi amt7565 :-)
> >
> > You may have to do a repair of your IE. Some files may have become
damaged
> > or corrupted, but, there are a few things to check first.
> >
> > What firewall are you using? Some firewalls can prevent connection.
> > Check your LAN settings to be sure the Proxy Server is UNChecked.
> > If you have Yahoo Companion or other 3rd party program(s), uninstall
them.
> > What, if anything, did you change, install or remove at the time the
problem
> > started?
> > Are you getting any error messages, if so, what do they say?
> > Please give as much detail about the above as possible.
> >
> > Hope this helps
> >
> > Jan :)
> > Smiles are meant to be shared,
> > that's why they're so contagious.
> >
> > Replies are posted only to the newsgroup for the benefit or other
readers.
> > How to make a good newsgroup post:
> > http://www.dts-l.org/goodpost.htm
> >
> >
> > > Hi-
> > > I tried running LSPFIX, but I am still unable to connect to the
internet.
> > > When I clicked on the 'finish' button I did not see any errors. The
small
> > box
> > > which popped up showed 4 processes with '0' in all 4 entries at the
first
> > > column.
> > > Any further help is appreciated.
> > > Thanks :)
> > > ======================================================
> > >
> > > "Jan Il" wrote:
> > >
> > > > Hi amt7565 :-)
> > > >
> > > > Try the following and see if it helps:
> > > >
> > > > Download and run the program below:
> > > >
> > > >
> > > > http://www.cexx.org/lspfix.htm
> > > > (if your OS is Win2k or XP) The process of removing certain malware
may
> > kill
> > > > your internet connection. If this should occur, this program,
LSPFIX,
> > will
> > > > enable you to regain your connection.
> > > >
> > > >
> > > >
> > > > If these steps do not resolve your problem, or you need help with
the
> > above,
> > > > please post back to this thread with the details and any error
messages.
> > > >
> > > > Hope this helps
> > > >
> > > > Jan :)
> > > > Smiles are meant to be shared,
> > > > that's why they're so contagious.
> > > >
> > > > Replies are posted only to the newsgroup for the benefit or other
> > readers.
> > > > How to make a good newsgroup post:
> > > > http://www.dts-l.org/goodpost.htm
> > > >
> > > >
> > > >
> > > > "> I did run the 'winsockxpfix' program.
> > > > > I also ran this command: netsh ip reset resetlog.txt
> > > > >
> > > > > Thanks :)
> > > > > ================================================
> > > > >
> > > > > "amt7565" wrote:
> > > > >
> > > > > > Hello-
> > > > > > My friend has given me his PC to be repaired. It has now been
fixed
> > with
> > > > > > various issues it had- mostly viruses anad malware.
> > > > > >
> > > > > > I am trying to connect to the internet, but it won't connect. It
> > opens
> > > > IE
> > > > > > but gives the usual "the page can not be displayed" message. My
own
> > PC
> > > > is
> > > > > > using cable modem. I disconnected it for a few minutes and
plugged
> > it
> > > > into
> > > > > > the broken PC, but no internet connection is possible yet.
> > > > > >
> > > > > > I checked the network card. It seems to be connected. On DOS, I
ran
> > > > ipconfig
> > > > > > /all and I see 2 IP addresses- but no default gateway.
> > > > > >
> > > > > > My service provider is comcast.
> > > > > > (My own PC works fine on the modem. I am just trying to connect
the
> > > > broken
> > > > > > PC now).
> > > > > >
> > > > > > Any advise on how to check this is appreciated.
> > > > > > Thanks. :)
> > > >
> > > >
> > > >
> >
> >
> >