|
|
|
| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
#1
|
|||
|
|||
|
I'm having a few problems accessing sites from my home PC and i keep getting the above error, but its not consistent - i dont get it on the same sites all the time, and the sites i get it on vary (it can be any site as far as i can tell)
I have run my virus scanner (Sophos), no joy, also several spyware programs (SpyHunter, Adaware, online virus checkers) and the only thing i really found was a homepagehijacker under a different profile (im using Windows XP by the way). I removed the hijacker using cwshredder but this hasnt solved my problem. My connection still shows up as being active, and i can access some websites but i have no idea why some work and others dont, then another time they'll work fine. Its definitely not a problem with the sites, im sure its something my end. Anyone know what might be causing the problem? I am stumped, while im not too computer literate im not clueless either but i havent been able to find mention of this problem anywhere on the net. I also ran hijackthis and my log is as follows:- Logfile of HijackThis v1.97.7 Scan saved at 12:17:52, on 11/04/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Sophos SWEEP for NT\SWNETSUP.EXE C:\Program Files\Sophos SWEEP for NT\SWEEPSRV.SYS C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\System32\RunDll32.exe C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe C:\WINDOWS\System32\ctfmon.exe C:\PROGRA~1\PANICW~1\POP-UP~2\PSFree.exe C:\Program Files\Sophos SWEEP for NT\ICMON.EXE C:\Program Files\Logitech\MouseWare\system\em_exec.exe C:\WINDOWS\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HijackThis.exe C:\WINDOWS\Downloaded Program Files\SWNInstaller.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = URL R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = URL R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by ntl:home O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program Files\Panicware\Pop-Up Stopper Pro\CCHelper.dll O2 - BHO: (no name) - {3ADE5454-F5BA-451F-A75A-7F580ACFD7D5} - C:\WINDOWS\system32\kbvkg.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Pa&nicware Pop-Up Stopper Pro - {B1E741E7-1E77-40D4-9FD8-51949B9CCBD0} - C:\Program Files\Panicware\Pop-Up Stopper Pro\popuppro.dll O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [SpyHunter] C:\Program Files\SpyHunter\SpyHunter.exe O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~2\PSFree.exe" O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe O4 - Global Startup: InterCheck Monitor.LNK = C:\Program Files\Sophos SWEEP for NT\ICMON.EXE O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: Real.com (HKLM) O14 - IERESET.INF: START_PAGE_URL=http://www.ntlworld.com/ O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - URL O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - URL O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} - URL O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - URL O17 - HKLM\System\CCS\Services\Tcpip\..\{00FF6D14-5C1D-4B66-B985-3ADF68A8D434}: NameServer = 194.168.4.100 194.168.8.100 O17 - HKLM\System\CS1\Services\Tcpip\..\{00FF6D14-5C1D-4B66-B985-3ADF68A8D434}: NameServer = 194.168.4.100 194.168.8.100 Someone please help! |
|
#2
|
||||
|
||||
|
This is more of a windows problem than a dns problem. However, I've ripped up a couple IE hijackers in my time that spy/ad removal software didn't catch. Unfortunately, I have no desire to do such difficult investigative processes by proxy (through somebody else). I'm most effective when I'm at the computer.
However, I will ask this of you and if there's no gold, I'm leaving this topic alone. First, tell me if the file "webcheck.dll" exists on your harddrive. Make sure you are able to see hidden files. Also tell me if there's any files called "xpacket.dll" or "packetx.dll" (I can't remember which). I also STRONGLY recommend that you go to www.sysinternals.com and download autoruns.exe. All it does is display the EXE's and DLL's and other objects that are fired up with the computer. Remove anything suspicious. If the files don't exist, I can't help you. Good luck.
__________________
Send me a private message if you would like me to setup your DNS for you for a price of your choosing. This is the preferred method if your DNS needs to be fixed/setup fast and you don't have the time to bounce messages back and forth on a forum. Also, check out these links: Whois Direct | DNS Crawler | NS Trace | Compare Free DNS Hosts |
|
#3
|
|||
|
|||
|
the webcheck file was present but not the other two.. i'll download the autorun app and give that a shot. Thanks for the help though, i know its a nightmare trying to help people when you dont have the pc in front of you to work with, hopefully ill spot something suspicous now!
|
|
#4
|
||||
|
||||
|
webcheck.dll is very evil. I want you to shut down all internet explorer windows and fire these commands at the dos prompt:
C:\>regsvr32 -u C:\WINDOWS\SYSTEM32\webcheck.dll You should get a pop up message saying something like "dll unregister succeeded" C:\>del C:\WINDOWS\SYSTEM32\webcheck.dll You should get no response with errors. There could also be a .reg file that you need to delete. It changes your home page and stuff. I forget what it's called, but if you showed me all .reg files listed in your WINDOWS... directory and subdirectories I can advise what to delete. |
|
#5
|
|||
|
|||
|
OK i've unregistered the DLL but it wont let me delete it (Access is denied message)
I also have another webcheck.dll file under : C:\WINDOWS\ServicePackFiles\i386 shall i unregister this one as well? |
|
#6
|
||||
|
||||
|
humph, I did a bit of research, and I guess webcheck.dll is a valid dll that comes with IE. Go ahead and reregister the dll by executing the same command except don't have the -u in there. No harm done. Although I've always removed it and nothing bit me cause of it. So nevermind, I don't know what I'm talking about. There's a reason why I'm not helping in a windows forum.
so instead search this forum for a topic that talks about fixing winsock registry. That also seems related to your problem. It mentions a little utility that you can download and it will attempt to fix all your problems. |
|
#7
|
|||
|
|||
|
Thanks for your help anyway dude, greatly appreciated. If it wasnt for people like you people like me would routinely run up huge bills getting pc's fixed, when with a little help and patience there is normally someone out there who can help us learn to fix things ourselves!
![]() |
|
#8
|
|||
|
|||
|
Hiyah...I'm having exactly the same problem on my PC.
Some of the websites I access, google and some bulleten boards would not work but others work fine. The problem comes and goes but the same web sites are affected. Just curious are you using NTL dial-up?.....because I am and I suspected it might be a problem at their end. |
![]() |
| Viewing: Dev Shed Forums > System Administration > DNS > Cannot find server or DNS Error problem |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|