IE 7 problems after lzx32.sys

I think I successfully removed the lzx32.sys trojan. Unfortunately, I am experiencing page errors in IE 7. It seems to be a connection problem becasue it also affects Outlook. It is almost as though my connection isn't present. Not the case though, I have a laptop connected to the router that has no problems with IE. With Diagnose Connection Problems ... , I get the following:

Last diagnostic run time: 01/08/07 16:21:28 WinSock Diagnostic
WinSock status

info Error attmpting to validate the Winsock base providers: 2
error Not all base service provider entries could be found in the winsock catalog. A reset is needed.
info Redirecting user to support call



Network Adapter Diagnostic
Network location detection

info Using home Internet connection
Network adapter identification

info Network connection: Name=Local Area Connection, Device=Intel(R) PRO/100 VE Network Connection, MediaType=LAN, SubMediaType=LAN
info Network connection: Name=adelphia.net, Device=WAN Miniport (PPPOE), MediaType=PPPOE, SubMediaType=NONE
info Network connection: Name=Comcast, Device=WAN Miniport (PPPOE), MediaType=PPPOE, SubMediaType=NONE
info Ethernet connection selected
Network adapter status

info Network connection status: Connected



HTTP, HTTPS, FTP Diagnostic
HTTP, HTTPS, FTP connectivity

warn FTP (Passive): Error 12029 connecting to ftp.microsoft.com: A connection with the server could not be established
warn HTTP: Error 12029 connecting to www.microsoft.com: A connection with the server could not be established
warn HTTPS: Error 12029 connecting to www.microsoft.com: A connection with the server could not be established
warn FTP (Active): Error 12029 connecting to ftp.microsoft.com: A connection with the server could not be established
warn HTTP: Error 12029 connecting to www.hotmail.com: A connection with the server could not be established
warn HTTPS: Error 12029 connecting to www.passport.net: A connection with the server could not be established
error Could not make an HTTP connection.
error Could not make an HTTPS connection.
error Could not make an FTP connection.

 

Does this help?
http://support.microsoft.com/kb/811259

 

Hi,
What I did first to a friends computer recently was the following:
(1) Go to start and in the run box type: cmd
(2) At your next screen, type: netsh winsock reset
(3) In about 30 seconds you will be asked to reboot

IF THAT DOES NOT WORK, READ ON FOR ANOTHER POSSIBILITY

When the FTP and HTTP error messages came up, it was discovered that when the router was reset, and a new password was added that the old password and the new password did not play well with each other. Ended up calling Verizon to help fix and clear it up...

So you can try what I suggested in steps 1 and 2 or if you did reset the router that may also be your problem...Keep us posted.

 

1, The above errors show a winsock catalog error, not a stack error. In these situations:

Start, Run, CMD

netsh winsock reset catalog

This resets the Winsock 2 catalog as well as rebuilds the stack.

2. As to your issue of FTP, HTTP and HTTPS errors, this is an authentication failure unrelated your your virus removal.

Apply this patch:
Authentication fails when you use Outlook or Outlook Express to try to log on to a HTTP-based mail server if you use Internet Explorer version 7.0
http://support.microsoft.com/kb/904942

 

tried all of the above ... went so far as deleting winsock and winsock2 folders in registry \HKEY_LOCAL_MACHINE\SYSTEM\...

after a netsh winsock reset catalog, I reboot. The connection will work for about two minutes, then I will get an 'Internet Explorer cannot display page ...' error. If I try to refresh the page (pressing F5 several times) the page sometimes comes up, most times without graphics just text.

Its not a router problem, as I have a laptop connected as well. The laptop is not experiencing any issues.

Thanks for the help so far ...

 

There is no reason to delete the Winsock2 folder under XP SP2. The earlier advice was mis-advised, you were showing catalog errors, and the netsh.exe command would rebuild the catalog.

Having made the registry edit, please again do:
Start, Run, CMD
netsh winsock reset catalog

This rebuilds the catalog (which is not in the keys you deleted) and restores the Winsock2 stack. A reboot is required.

I am very concerned you removed the Winsock folder as well as Winsock2, so my fingers are crossed.

Two other things to do:
. In IE, Tools, Internet Options, Connections tab
Under "LAN" settings, make sure that no entry is enabled. If you change any setting, exit IE (all instances of IE) and restart IE for this to have any effect.

. Use this little registry file to increase connection limits:
http://www.enhanceie.com/dl/fixHTTPMax.reg
Reboot.

. if this is true of some sites but not all, access the sites under the IE 6 User Agent Utility: http://www.microsoft.com/downloads/...9c-3c0d-47fe-bd04-fad82a9aac9f&DisplayLang=en

. Instead of clicking the IE 7 desktop icon, right-click and select 'Start in no-add on mode' and test in this mode.

 

thanks for the crossed fingers, I do backup my registry before I make changes. The winsock registry folders were rebuilt upon reboot.

I've already tried the fixHTTPmax.reg as well with no results.

If I start IE (google as homepage), open new tabs and/or windows, my connection is fine for about 2 minutes. After 2 mins or so, I will click on a link or open a new site, and I get the 'IE cannot display ... ' error. I click on Diagnose Connection Problems, it gives me the same result as first post. I will close all windows and reopen IE and even google page will have the same IE error.

This also affects my email through Outlook, can't send or receive. Its as though I've lost connection, but not the case because my laptop is still up.

I even tried a USB wireless connection, thinking it might be my NIC, same results. So I assume its a 'software' issue.

 

IE 7 can expose some TCP/IP connection issues that IE 6 does not.

. How old are those Intel drivers you are using?

. Since your connection is PPoE, the default MTU setting may be incorrect. Generally for PPoE it should be 1492, set at both client and router. This is not, however, universally true.

The only reasonable way to find out is to test it:
http://www.broadbandreports.com/tweaks

If the report shows any recommended MTU of other than 1500, you need to adjust this. Use the BroadBandReports freeware utility DrTCP to do so, and reboot after making changes: http://www.broadbandreports.com/faq/toolquestion/DoctorTCP

Since the test will make RWIN recommendations, set the recommended RWIN value as well as the MTU.

. Then set the router to the same MTU.

For email errors:

Apply the Authentication hotfix linked earlier. (Remember that the use of System Restore will remove this until it is captured by a new restore point.)

Make sure your firewall does not restrict remote router registration. Under the XP firewall, Advanced, ICMP settings, this is called 'allow incoming router requests'

Check the settings on your email client. You should under Account, Mail, Connections adjust the time-out value.

 

As a test, I navigated to same sites on my laptop as well as 'troubled' PC both w/ IE7 at the same time. PC gets errors, laptop doesn't. I'll try your recommendations though.

Already did the tweak test too. When the connection is up the tweak test shows no problems found. Even did a speed test ...

http://www.dslreports.com/speedtests/21387166/9912

I updated the drivers through Intel.support but it seemed Windows update downloaded older drivers than Intel (HCL?). I'll have to check the rev on the drivers when I get home. But as I said before, I test the same PC with a wireless connection and get the same results.

netdiag /test:winsock shows passed for all test even when I can't get to google.

I'll check the firewall settings when I get home as well. If the firewall wasn't set correctly, why would it work for a bit, then die?

 

Drivers aren't critical updates in Windows Updates. You have to select them to get them. Just like the other ones that are there. It is up to your discretion. If you are sitting on Automatic updates, I don't think that you will see anything but Critical. You have to go Manually and get them.

 

I tried the firewall settings with no results.

The Intel Pro VE 100 drivers are 8.0.43.0. If I do choose manual updates, which I usually do, (I like to see what MS thinks they need to update)Microsoft chooses different drivers. Neither are any different with this particular problem.

Here's a kicker, when I boot in safe mode w/ networking, my connection never drops, and is quite fast. Is there a way I can find what the difference is from safe mode to 'no work' mode?

 

It has been a while, but I read someplace that the Driver updates that are at MS are usually the updates that you would get from the Manufacture of the device and that they are provided to (supposedly) make the device perform better with that particular version of Windows. I am assuming that MS must when doing the scan, be able to see devices like Monitors, Modems, NIC cards etc. and now offer these updates. I read that probably 5 or 6 years ago. I like others sometimes believe that if it ain't broke, don't fix it.

 

I too believe if it aint broke don't fix it!

But it's broke, so I need to explore all avenues. Troubleshooting 101 - elimainate all possibilities of problems.

 

What I was refering to was downloading drivers from MS just because they said you need it and/or have it listed.

 

What happens in "no add-on mode "?