1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Homepage Problems

Discussion in 'Malware and Virus Removal Archive' started by Phyllis, 2004/03/23.

Thread Status:
Not open for further replies.
  1. 2004/03/26
    Phyllis

    Phyllis Inactive Thread Starter

    Joined:
    2003/03/11
    Messages:
    150
    Likes Received:
    0
    I don't have a copy option no matter what I do! As soon as I highlight the results and as soon as I right click again, the results are de-selected.:confused: :confused:
     
  2. 2004/03/26
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Are you right clicking within the highlighted area? Doesn't matter. What are the highest and lowest numbers? Did you get any 'request timed out'?
     

  3. to hide this advert.

  4. 2004/03/26
    Phyllis

    Phyllis Inactive Thread Starter

    Joined:
    2003/03/11
    Messages:
    150
    Likes Received:
    0
    I've clicked left, right, in and out - the copy command is not an option. No timed out #'s.

    High and low numbers that look like ip addresses? Am I impressing you now:D
     
  5. 2004/03/26
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Phyllis - run the command but force the output to a text file rather than the screen. Then you can open the text file, copy the contents (it should work fine there) and paste them here. So (and note that you will not see anything to the screen but will know it's finished when you get a command prompt back):

    tracert windowsbbs.com > c:\tracert.txt (and there is a space before and after the > symbol)
     
  6. 2004/03/27
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Sorry Phyllis. tried it just now and found I had to do the right click on the window header, next to where it says command prompt. It should look like this


    Tracing route to windowsbbs.com [64.246.42.33]
    over a maximum of 30 hops:

    1 * * * Request timed out.
    2 11 ms 11 ms 11 ms 68.87.250.65
    3 12 ms 16 ms 11 ms 12.118.239.137
    4 13 ms 20 ms 14 ms tbr1-p012301.cgcil.ip.att.net [12.123.6.9]
    5 12 ms 11 ms 13 ms ggr2-p300.cgcil.ip.att.net [12.123.6.33]
    6 13 ms 13 ms 14 ms att-gw.chi.verio.net [192.205.32.194]
    7 13 ms 41 ms 17 ms p16-1-0-0.r01.chcgil06.us.bb.verio.net [129.250.
    5.77]
    8 36 ms 34 ms 36 ms p16-1-1-0.r21.dllstx09.us.bb.verio.net [129.250.
    5.85]
    9 49 ms 59 ms 49 ms p16-6-0-0.r02.hstntx01.us.bb.verio.net [129.250.
    5.101]
    10 45 ms 47 ms 45 ms ge-0.ev1.hstntx01.us.bb.verio.net [129.250.10.66
    ]
    11 48 ms 46 ms 43 ms ivhou-207-218-245-37.ev1.net [207.218.245.37]
    12 46 ms 46 ms 44 ms infinisource.com [64.246.42.33]

    Trace complete.

    The numbers I'm referring to are the hops, the ones with ms beside them. The lower those hops, the faster your surf speed. Anything under 50 is considered good.
     
  7. 2004/03/27
    Phyllis

    Phyllis Inactive Thread Starter

    Joined:
    2003/03/11
    Messages:
    150
    Likes Received:
    0
    FINALLY!! right click on the header

    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.

    C:\Documents and Settings\Owner>tracert windowsbbs.com

    Tracing route to windowsbbs.com [64.246.42.33]
    over a maximum of 30 hops:

    1 1 ms 1 ms <1 ms 192.168.2.1
    2 * * * Request timed out.
    3 11 ms 9 ms 9 ms ge-4-3-ar01.ivyland.pa.pa02.comcast.net [68.87.4
    4.201]
    4 13 ms 16 ms 16 ms pos-7-3-cr01.plainfield.nj.core.comcast.net [68.
    87.19.241]
    5 14 ms 13 ms 14 ms 12.118.149.17
    6 14 ms 18 ms 15 ms tbr1-p010501.n54ny.ip.att.net [12.123.3.10]
    7 14 ms 13 ms 14 ms ggr1-p330.n54ny.ip.att.net [12.122.11.214]
    8 24 ms 21 ms 20 ms nycmny2wcx2-pos6-3.wcg.net [64.200.68.41]
    9 22 ms 22 ms 23 ms hrndva1wcx2-pos5-0.wcg.net [64.200.210.97]
    10 24 ms 23 ms 23 ms hrndva1wcx3-oc48.wcg.net [64.200.95.74]
    11 32 ms 33 ms 33 ms drvlga1wcx2-pos4-0.wcg.net [64.200.232.125]
    12 32 ms 33 ms 33 ms drvlga1wcx1-oc48.wcg.net [64.200.127.29]
    13 50 ms 52 ms 50 ms dllstx1wcx3-pos6-0.wcg.net [64.200.240.21]
    14 50 ms 52 ms 49 ms dllstx1wcx2-oc48.wcg.net [64.200.110.73]
    15 58 ms 58 ms 56 ms hstntx1wce2-pos4-0.wcg.net [64.200.240.74]
    16 55 ms 62 ms 55 ms hstntx1wce2-everyonesinternet-gige.wcg.net [65.7
    7.93.54]
    17 49 ms 50 ms 49 ms ivhou-207-218-245-37.ev1.net [207.218.245.37]
    18 53 ms 54 ms 50 ms infinisource.com [64.246.42.33]

    Trace complete.

    C:\Documents and Settings\Owner>
     
  8. 2004/03/27
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Those numbers look good, but I've seldom seen it go over 15 entries. Feel like doing a test? Do another HJT scan and fix these, closing all browsers first;

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.2.24:80
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

    See how things act. Should you lose connectivity, open HJT, click the config. button, then backup button and restore those entries.
    If everything works OK after fixing them, do another tracert, maybe even to something close to you. Your ISP or something. Sometimes it's best to put the www. in front of the location also. www.comcast.com
     
  9. 2004/03/27
    Lonny Jones

    Lonny Jones Inactive Alumni

    Joined:
    2002/12/16
    Messages:
    2,252
    Likes Received:
    0
    Thread's so long ive lost it :) remind us
    This pc is a
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    and the problem is the games wont work now ?

    Are the two PC's using the same connection ?
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)

    Whicherver one does the actual connection to the internet needs the Games re-installed so the (best done with all programs that show in the taskbar closed)
    O10 - Unknown file in Winsock LSP: c:\~~~~\system32\ua_lsp.dll
    Gets put back,, its a good guy, unless connectivity is again lost.
     
  10. 2004/03/27
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Lonny,

    This one is the HP with XP and games are running a bit slower. Boys mentioned lag. I'm thinking maybe the proxy entries causing rerouting unnecessarily. The Athlon is the one the 010 entries were removed on and games seem to be running fine. Only a shared printer problem now, which is being addressed in networking.
     
  11. 2004/03/28
    Phyllis

    Phyllis Inactive Thread Starter

    Joined:
    2003/03/11
    Messages:
    150
    Likes Received:
    0
    Ok Sunday morning we could not get the hp on the internet. I ran a HJT and this is what I got. I did install the winsock fix and ran it.

    Thus far I have these programs installed for protection:

    Adware (which by the way when I ran first thing this am it came up with alot of New.net---WHY??)
    spybot
    iespy
    hijackthis
    cwshredder
    spywareblaster

    What order should I run these and how often?

    I have McAfee firewall, virus scan and guardian. This am the firewall was not loaded and running. Why?

    The HP is running battlefield 1942 & vietnam with no log or problems--today.

    Here's the log before I used winsock from the HP. Thank you.

    Logfile of HijackThis v1.97.7
    Scan saved at 8:02:34 AM, on 3/28/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Saitek\Software\Profiler.exe
    C:\Program Files\Saitek\Software\SaiSmart.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe
    C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe
    C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe
    C:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe
    C:\Program Files\McAfee\McAfee Firewall\CPD.EXE
    C:\Program Files\McAfee\McAfee Firewall\CPD.EXE
    C:\Program Files\McAfee\McAfee VirusScan\Avconsol.exe
    C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
    C:\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.2.24:80
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {85810C93-C14C-11D5-BC4B-0050BA28E4FE} - C:\WINDOWS\System32\popkill.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: McAfee VirusScan - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - C:\Program Files\McAfee\McAfee VirusScan\VSCShellExtension.dll
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [Xerox WorkCentre 480cx Monitor] RUNDLL32.EXE C:\WINDOWS\System32\X480SHLL.DLL,AutoUpdatePnPValue
    O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
    O4 - HKLM\..\Run: [SaiSmart] C:\Program Files\Saitek\Software\SaiSmart.exe
    O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HPINST~1\plugin\bin\PCHButton.exe
    O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe "
    O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 - Extra button: MoneySide (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Messenger (HKLM)
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
    O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
     
  12. 2004/03/28
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    I was getting worried that you fixed the proxy entries like I suggested and couldn't get back online,and feeling bad. Is that what happened? I see they are still in your log. Is the HP still unable to access the internet? Did you see this from the athlon thread about new.net?

    These two entries from your log,
    C:\Program Files\McAfee\McAfee Firewall\CPD.EXE
    C:\Program Files\McAfee\McAfee Firewall\CPD.EXE
    show the firewall is running. Why do you think it isn't? Missing icon?

    Alot of 010 entries in the log that were never there before on this machine. Did you install a game?
     
  13. 2004/03/28
    Phyllis

    Phyllis Inactive Thread Starter

    Joined:
    2003/03/11
    Messages:
    150
    Likes Received:
    0
    My icon is missing so I went to my program file, mcafee and clicked on firewall. It said it wasn't running so I clicked on it to run and it said it couldn't. Let me try again now that I am on line. I got a clean bill of health from cwshredder. I'm feeling better!! I might even be able to get some baking done today ;)

    Those 010 winsocks. I saw that and used the winsock fix. I had my son uninstall battlefield & vietnam on Friday I think. He reinstalled them. Had some lag problems but, they are now working well for him.

    About all those security programs. Which order should I run them and how often. I notice the iespy gets installed, but you does not run it like the other programs? If so, how does it get updated? I'll go to the athlon thread now and read about the new net now.
     
  14. 2004/03/28
    Phyllis

    Phyllis Inactive Thread Starter

    Joined:
    2003/03/11
    Messages:
    150
    Likes Received:
    0
    McAfee firewall is not running. It states McAfee firewall error encountered an error wait opeation timed out.
     
  15. 2004/03/28
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Somewhere, I think at the McAfee site, I found where this entry was not needed at startup;

    O4 - HKLM\..\Run: [McAfee Guardian] "C:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe" /SU

    and told you it was safe to uncheck in msconfig. Apparently the information I found was wrong, and thus your firewall not working. Recheck it in msconfig and reboot. If you removed that entry with HJT, reinstall it from the backup and reboot.

    HJT and CWShredder are utilities for finding and fixing only. Not to be run on a regular basis. Keep a fresh copy of CWS, overwriting the one you have. The coolwebsearch people are always trying to stop folks from getting a download of it to remove their junk, and are sometimes successful. Having an updated version can get you out of hot water. I run Spybot before Ad-aware, but I don't think it really matters. Each one finds things the other doesn't. I don't use the other two, so no comment there.

    I've got a feeling that the new.net is getting installed along with a game, and the reason for the enries Ad-aware found that were not present before. It should be removed from the add/remove programs only. Let me know what you're able to find out after reading the MSKB.
     
  16. 2004/03/28
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    I did a little research on this 'ua_lsp.dll', and it seem to be installed with a gamers chat program named Xfire. I found this quote from this page.
    Look at this page and you will see those two games listed, battlefield 1942 & vietnam, as part of the network.
     
  17. 2004/03/28
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Good find Markp62! :)
     
  18. 2004/03/28
    dobhar Lifetime Subscription

    dobhar Inactive

    Joined:
    2002/05/24
    Messages:
    924
    Likes Received:
    3
    Lonny can you tell me why you recommend unchecking all. I've been recommending Spybot and Ad-Aware to all my friends, family, and co-workers. I tell them to fix all in "RED ". Should I be changing my story?
     
  19. 2004/03/28
    Lonny Jones

    Lonny Jones Inactive Alumni

    Joined:
    2002/12/16
    Messages:
    2,252
    Likes Received:
    0
    "fix all in "RED "

    Yes I recomend it also and to fix anything it finds, and let it if prompted to restart with windows always let it. Love the program.
    Adware's a great progy to.
    Just dont use any automation, or at least if your system has any problems with them dont use them, since sometimes updating the programs freezes imagine what happens if that person has check for updates a program start .

    I dont care to use automation for almost all our programs, and never let anything update itself not even windows. to many problems on this system to compound them.(just an opinion)
    But we have a crawl up 56k connection type.

    I hear 1.3 will when opened be set at a random mirror, or hopefully set where users prefer it .
     
  20. 2004/03/29
    Phyllis

    Phyllis Inactive Thread Starter

    Joined:
    2003/03/11
    Messages:
    150
    Likes Received:
    0
    Thank you my HEROS!!! The HP seem to be A-okay. Your assistance and patience was invaluable. As much as I hated to, I learned alot.

    I'll move on to tweeking the Athlon and get my printer problem straightened out. Hopefully, that won't be as stressful.
     
  21. 2004/03/29
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    YEAH Phyllis! Congratulations. :D Glad you got it all cleaned up.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.