DNS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationDNS

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old April 11th, 2004, 06:33 AM
Hovis Hovis is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Apr 2004
Posts: 4 Hovis User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Angry Cannot find server or DNS Error problem

I'm having a few problems accessing sites from my home PC and i keep getting the above error, but its not consistent - i dont get it on the same sites all the time, and the sites i get it on vary (it can be any site as far as i can tell)

I have run my virus scanner (Sophos), no joy, also several spyware programs (SpyHunter, Adaware, online virus checkers) and the only thing i really found was a homepagehijacker under a different profile (im using Windows XP by the way). I removed the hijacker using cwshredder but this hasnt solved my problem.

My connection still shows up as being active, and i can access some websites but i have no idea why some work and others dont, then another time they'll work fine. Its definitely not a problem with the sites, im sure its something my end.

Anyone know what might be causing the problem? I am stumped, while im not too computer literate im not clueless either but i havent been able to find mention of this problem anywhere on the net.

I also ran hijackthis and my log is as follows:-

Logfile of HijackThis v1.97.7
Scan saved at 12:17:52, on 11/04/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Sophos SWEEP for NT\SWNETSUP.EXE
C:\Program Files\Sophos SWEEP for NT\SWEEPSRV.SYS
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\RunDll32.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\PROGRA~1\PANICW~1\POP-UP~2\PSFree.exe
C:\Program Files\Sophos SWEEP for NT\ICMON.EXE
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis.exe
C:\WINDOWS\Downloaded Program Files\SWNInstaller.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = URL
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = URL
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by ntl:home
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program Files\Panicware\Pop-Up Stopper Pro\CCHelper.dll
O2 - BHO: (no name) - {3ADE5454-F5BA-451F-A75A-7F580ACFD7D5} - C:\WINDOWS\system32\kbvkg.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Pa&nicware Pop-Up Stopper Pro - {B1E741E7-1E77-40D4-9FD8-51949B9CCBD0} - C:\Program Files\Panicware\Pop-Up Stopper Pro\popuppro.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SpyHunter] C:\Program Files\SpyHunter\SpyHunter.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~2\PSFree.exe"
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - Global Startup: InterCheck Monitor.LNK = C:\Program Files\Sophos SWEEP for NT\ICMON.EXE
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Real.com (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://www.ntlworld.com/
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - URL
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - URL
O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} - URL
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - URL
O17 - HKLM\System\CCS\Services\Tcpip\..\{00FF6D14-5C1D-4B66-B985-3ADF68A8D434}: NameServer = 194.168.4.100 194.168.8.100
O17 - HKLM\System\CS1\Services\Tcpip\..\{00FF6D14-5C1D-4B66-B985-3ADF68A8D434}: NameServer = 194.168.4.100 194.168.8.100

Someone please help!

Reply With Quote
  #2  
Old April 11th, 2004, 08:12 AM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,195 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 15 h 53 m 4 sec
Reputation Power: 77
This is more of a windows problem than a dns problem. However, I've ripped up a couple IE hijackers in my time that spy/ad removal software didn't catch. Unfortunately, I have no desire to do such difficult investigative processes by proxy (through somebody else). I'm most effective when I'm at the computer.

However, I will ask this of you and if there's no gold, I'm leaving this topic alone. First, tell me if the file "webcheck.dll" exists on your harddrive. Make sure you are able to see hidden files. Also tell me if there's any files called "xpacket.dll" or "packetx.dll" (I can't remember which). I also STRONGLY recommend that you go to www.sysinternals.com and download autoruns.exe. All it does is display the EXE's and DLL's and other objects that are fired up with the computer. Remove anything suspicious.

If the files don't exist, I can't help you. Good luck.
__________________
Send me a private message if you would like me to setup your DNS for you for a price of your choosing. This is the preferred method if your DNS needs to be fixed/setup fast and you don't have the time to bounce messages back and forth on a forum. Also, check out these links:

Whois Direct | DNS Crawler | NS Trace | Compare Free DNS Hosts

Reply With Quote
  #3  
Old April 11th, 2004, 09:26 AM
Hovis Hovis is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Apr 2004
Posts: 4 Hovis User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
the webcheck file was present but not the other two.. i'll download the autorun app and give that a shot. Thanks for the help though, i know its a nightmare trying to help people when you dont have the pc in front of you to work with, hopefully ill spot something suspicous now!

Reply With Quote
  #4  
Old April 11th, 2004, 10:09 AM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,195 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 15 h 53 m 4 sec
Reputation Power: 77
webcheck.dll is very evil. I want you to shut down all internet explorer windows and fire these commands at the dos prompt:

C:\>regsvr32 -u C:\WINDOWS\SYSTEM32\webcheck.dll

You should get a pop up message saying something like "dll unregister succeeded"

C:\>del C:\WINDOWS\SYSTEM32\webcheck.dll

You should get no response with errors.

There could also be a .reg file that you need to delete. It changes your home page and stuff. I forget what it's called, but if you showed me all .reg files listed in your WINDOWS... directory and subdirectories I can advise what to delete.

Reply With Quote
  #5  
Old April 12th, 2004, 04:36 AM
Hovis Hovis is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Apr 2004
Posts: 4 Hovis User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
OK i've unregistered the DLL but it wont let me delete it (Access is denied message)

I also have another webcheck.dll file under :
C:\WINDOWS\ServicePackFiles\i386

shall i unregister this one as well?

Reply With Quote
  #6  
Old April 12th, 2004, 05:41 AM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,195 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 15 h 53 m 4 sec
Reputation Power: 77
humph, I did a bit of research, and I guess webcheck.dll is a valid dll that comes with IE. Go ahead and reregister the dll by executing the same command except don't have the -u in there. No harm done. Although I've always removed it and nothing bit me cause of it. So nevermind, I don't know what I'm talking about. There's a reason why I'm not helping in a windows forum.

so instead search this forum for a topic that talks about fixing winsock registry. That also seems related to your problem. It mentions a little utility that you can download and it will attempt to fix all your problems.

Reply With Quote
  #7  
Old April 13th, 2004, 02:32 PM
Hovis Hovis is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Apr 2004
Posts: 4 Hovis User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Thanks for your help anyway dude, greatly appreciated. If it wasnt for people like you people like me would routinely run up huge bills getting pc's fixed, when with a little help and patience there is normally someone out there who can help us learn to fix things ourselves!

Reply With Quote
  #8  
Old April 27th, 2004, 06:24 PM
tetsuko tetsuko is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Apr 2004
Posts: 1 tetsuko User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Unhappy Same problem on my PC

Hiyah...I'm having exactly the same problem on my PC.

Some of the websites I access, google and some bulleten boards would not work but others work fine. The problem comes and goes but the same web sites are affected.

Just curious are you using NTL dial-up?.....because I am and I suspected it might be a problem at their end.

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationDNS > Cannot find server or DNS Error problem


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 1 hosted by Hostway
Stay green...Green IT