Hi everyone;

I am connected to internet, have IP address and can ping as well, but
internet explorer would not connect. I have downloaded Mozilla and it didn't
work either. so I figured it could be tcp/ip problem? I have used winsock fix
to fix the tcp/ip stack, but it works for a few minutes and again everything
stops. I am really in need of help, this is an xp system.

--
thanks,
Farshad

This may be caused by spyware/malware that's gotten installed on
your system. Use Ad-Aware and/or Spybot Search & Destroy to remove it.

Ad-Aware: http://www.lavasoftusa.com/
Spybot: http://www.safer-networking.org/en/index.html
Good sites on how to install and use Spybot -
http://www.safer-networking.org/en/tutorial/index.html
http://tomcoyote.com/SPYBOT/index1.php

Also download a winsock repair tool, to have just in case cleaning up
anything found breaks it -

Winsock repair tools:
LSPFix- all versions of Windows http://www.cexx.org/lspfix.zip
Winsock2 Fix- Win98, ME
http://www.bu.edu/pcsc/internetaccess/winsock2fix.html
LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip

More information here:
http://www.spywareinfo.com/
http://inetexplorer.mvps.org/Darnit.htm
http://www.doxdesk.com/parasite/ - runs a little script when loading page to
check for common parasites

If no joy, in IE go to Tools...Internet Options...Advanced tab, Browsing
section, uncheck "Enable third-party browser extensions", click Apply, click
Okay, reboot. If that solves your problem, then more troubleshooting is
needed to find out exactly which program, or Browser Helper Object (BHO) is
causing this problem. You don't want to leave it at that, as some BHOs are
useful or necessary - like Adobe Acrobat for reading .pdf files or an
essential component of Norton AV. Get BHODemon -
http://www.definitivesolutions.com/bhodemon.htm - read all about BHOs.
Disable all items, and then gradually replace one or two at a time to narrow
down the culprit.

Or if you have IE 6 SP-2 you can do this within the browser:
How to manage Internet Explorer add-ons in Windows XP Service Pack 2
http://support.microsoft.com/default...b;en-us;883256

If all the above fails, then the problem could be something new that the
spyware cleaners above don't have in their databases yet. In that case....
HijackThis direct download:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
Tutorial on how to use HijackThis:
http://www.spywareinfo.com/~merijn/htlogtutorial.html
Then post it's output log to the forum here for analysis and feedback by the
parasite experts:
http://www.spywareinfo.com/forums/
Or the other HijackThis Logs forums listed here:
http://www.spywareinfo.com/~merijn/forums.html

Or try this program to get some of the most nasty malware:
CWShredder direct download:
http://aumha.org/downloads/cwshredder.zip

An alternate resource for all of this and more:
http://www.aumha.org/secure.htm


--

Jon R. Kennedy
Charlotte, NC, USA
(E-Mail Removed)

"farshad" <(E-Mail Removed)> wrote in message
news:94FBC1BC-1200-42A5-A24D-(E-Mail Removed)...
> Hi everyone;
>
> I am connected to internet, have IP address and can ping as well, but
> internet explorer would not connect. I have downloaded Mozilla and it
> didn't
> work either. so I figured it could be tcp/ip problem? I have used winsock
> fix
> to fix the tcp/ip stack, but it works for a few minutes and again
> everything
> stops. I am really in need of help, this is an xp system.
>
> --
> thanks,
> Farshad

Hi Jon;

if this is a browser issue, I installed Mozilla and it had exacxtly the
same problems, could it be something else?

thanks,
Farshad

"Jon Kennedy" wrote:

> This may be caused by spyware/malware that's gotten installed on
> your system. Use Ad-Aware and/or Spybot Search & Destroy to remove it.
>
> Ad-Aware: http://www.lavasoftusa.com/
> Spybot: http://www.safer-networking.org/en/index.html
> Good sites on how to install and use Spybot -
> http://www.safer-networking.org/en/tutorial/index.html
> http://tomcoyote.com/SPYBOT/index1.php
>
> Also download a winsock repair tool, to have just in case cleaning up
> anything found breaks it -
>
> Winsock repair tools:
> LSPFix- all versions of Windows http://www.cexx.org/lspfix.zip
> Winsock2 Fix- Win98, ME
> http://www.bu.edu/pcsc/internetaccess/winsock2fix.html
> LavaSoft- all versions of Windows-
> http://digital-solutions.co.uk/lavasoft/whndnfix.zip
>
> More information here:
> http://www.spywareinfo.com/
> http://inetexplorer.mvps.org/Darnit.htm
> http://www.doxdesk.com/parasite/ - runs a little script when loading page to
> check for common parasites
>
> If no joy, in IE go to Tools...Internet Options...Advanced tab, Browsing
> section, uncheck "Enable third-party browser extensions", click Apply, click
> Okay, reboot. If that solves your problem, then more troubleshooting is
> needed to find out exactly which program, or Browser Helper Object (BHO) is
> causing this problem. You don't want to leave it at that, as some BHOs are
> useful or necessary - like Adobe Acrobat for reading .pdf files or an
> essential component of Norton AV. Get BHODemon -
> http://www.definitivesolutions.com/bhodemon.htm - read all about BHOs.
> Disable all items, and then gradually replace one or two at a time to narrow
> down the culprit.
>
> Or if you have IE 6 SP-2 you can do this within the browser:
> How to manage Internet Explorer add-ons in Windows XP Service Pack 2
> http://support.microsoft.com/default...b;en-us;883256
>
> If all the above fails, then the problem could be something new that the
> spyware cleaners above don't have in their databases yet. In that case....
> HijackThis direct download:
> http://www.spywareinfo.com/~merijn/files/hijackthis.zip
> Tutorial on how to use HijackThis:
> http://www.spywareinfo.com/~merijn/htlogtutorial.html
> Then post it's output log to the forum here for analysis and feedback by the
> parasite experts:
> http://www.spywareinfo.com/forums/
> Or the other HijackThis Logs forums listed here:
> http://www.spywareinfo.com/~merijn/forums.html
>
> Or try this program to get some of the most nasty malware:
> CWShredder direct download:
> http://aumha.org/downloads/cwshredder.zip
>
> An alternate resource for all of this and more:
> http://www.aumha.org/secure.htm
>
>
> --
>
> Jon R. Kennedy
> Charlotte, NC, USA
> (E-Mail Removed)
>
> "farshad" <(E-Mail Removed)> wrote in message
> news:94FBC1BC-1200-42A5-A24D-(E-Mail Removed)...
> > Hi everyone;
> >
> > I am connected to internet, have IP address and can ping as well, but
> > internet explorer would not connect. I have downloaded Mozilla and it
> > didn't
> > work either. so I figured it could be tcp/ip problem? I have used winsock
> > fix
> > to fix the tcp/ip stack, but it works for a few minutes and again
> > everything
> > stops. I am really in need of help, this is an xp system.
> >
> > --
> > thanks,
> > Farshad
>
>

It doesn't sound like a browser error, it sounds like a malware problem. If
something like that is running on your system, and messing with your winsock
TCP/IP stack, it wouldn't matter what browser you are running - as you have
seen. You've said you've run a winsock repair tool - maybe one I've
mentioned in my previous post - and all is fine for awhile, then your
problem returns, possibly when the malware activates again. I'd go through
what I previously posted to make sure your system is clean of malware.

--

Jon R. Kennedy
Charlotte, NC, USA
(E-Mail Removed)

"farshad" <(E-Mail Removed)> wrote in message
news:85A5BF81-8FAB-481C-9F89-(E-Mail Removed)...
> Hi Jon;
>
> if this is a browser issue, I installed Mozilla and it had exacxtly the
> same problems, could it be something else?
>
> thanks,
> Farshad
>
> "Jon Kennedy" wrote:
>
>> This may be caused by spyware/malware that's gotten installed on
>> your system. Use Ad-Aware and/or Spybot Search & Destroy to remove it.
>>
>> Ad-Aware: http://www.lavasoftusa.com/
>> Spybot: http://www.safer-networking.org/en/index.html
>> Good sites on how to install and use Spybot -
>> http://www.safer-networking.org/en/tutorial/index.html
>> http://tomcoyote.com/SPYBOT/index1.php
>>
>> Also download a winsock repair tool, to have just in case cleaning up
>> anything found breaks it -
>>
>> Winsock repair tools:
>> LSPFix- all versions of Windows http://www.cexx.org/lspfix.zip
>> Winsock2 Fix- Win98, ME
>> http://www.bu.edu/pcsc/internetaccess/winsock2fix.html
>> LavaSoft- all versions of Windows-
>> http://digital-solutions.co.uk/lavasoft/whndnfix.zip
>>
>> More information here:
>> http://www.spywareinfo.com/
>> http://inetexplorer.mvps.org/Darnit.htm
>> http://www.doxdesk.com/parasite/ - runs a little script when loading page
>> to
>> check for common parasites
>>
>> If no joy, in IE go to Tools...Internet Options...Advanced tab, Browsing
>> section, uncheck "Enable third-party browser extensions", click Apply,
>> click
>> Okay, reboot. If that solves your problem, then more troubleshooting is
>> needed to find out exactly which program, or Browser Helper Object (BHO)
>> is
>> causing this problem. You don't want to leave it at that, as some BHOs
>> are
>> useful or necessary - like Adobe Acrobat for reading .pdf files or an
>> essential component of Norton AV. Get BHODemon -
>> http://www.definitivesolutions.com/bhodemon.htm - read all about BHOs.
>> Disable all items, and then gradually replace one or two at a time to
>> narrow
>> down the culprit.
>>
>> Or if you have IE 6 SP-2 you can do this within the browser:
>> How to manage Internet Explorer add-ons in Windows XP Service Pack 2
>> http://support.microsoft.com/default...b;en-us;883256
>>
>> If all the above fails, then the problem could be something new that the
>> spyware cleaners above don't have in their databases yet. In that
>> case....
>> HijackThis direct download:
>> http://www.spywareinfo.com/~merijn/files/hijackthis.zip
>> Tutorial on how to use HijackThis:
>> http://www.spywareinfo.com/~merijn/htlogtutorial.html
>> Then post it's output log to the forum here for analysis and feedback by
>> the
>> parasite experts:
>> http://www.spywareinfo.com/forums/
>> Or the other HijackThis Logs forums listed here:
>> http://www.spywareinfo.com/~merijn/forums.html
>>
>> Or try this program to get some of the most nasty malware:
>> CWShredder direct download:
>> http://aumha.org/downloads/cwshredder.zip
>>
>> An alternate resource for all of this and more:
>> http://www.aumha.org/secure.htm
>>
>>
>> --
>>
>> Jon R. Kennedy
>> Charlotte, NC, USA
>> (E-Mail Removed)
>>
>> "farshad" <(E-Mail Removed)> wrote in message
>> news:94FBC1BC-1200-42A5-A24D-(E-Mail Removed)...
>> > Hi everyone;
>> >
>> > I am connected to internet, have IP address and can ping as well, but
>> > internet explorer would not connect. I have downloaded Mozilla and it
>> > didn't
>> > work either. so I figured it could be tcp/ip problem? I have used
>> > winsock
>> > fix
>> > to fix the tcp/ip stack, but it works for a few minutes and again
>> > everything
>> > stops. I am really in need of help, this is an xp system.
>> >
>> > --
>> > thanks,
>> > Farshad
>>
>>

"farshad" <(E-Mail Removed)> wrote in message
news:85A5BF81-8FAB-481C-9F89-(E-Mail Removed)
> Hi Jon;
>
> if this is a browser issue, I installed Mozilla and it had exacxtly the
> same problems, could it be something else?
>
> thanks,
> Farshad
>
> "Jon Kennedy" wrote:
>
>> This may be caused by spyware/malware that's gotten installed on
>> your system. Use Ad-Aware and/or Spybot Search & Destroy to remove it.
>>
>> Ad-Aware: http://www.lavasoftusa.com/
>> Spybot: http://www.safer-networking.org/en/index.html
>> Good sites on how to install and use Spybot -
>> http://www.safer-networking.org/en/tutorial/index.html
>> http://tomcoyote.com/SPYBOT/index1.php
>>
>> Also download a winsock repair tool, to have just in case cleaning up
>> anything found breaks it -
>>
>> Winsock repair tools:
>> LSPFix- all versions of Windows http://www.cexx.org/lspfix.zip
>> Winsock2 Fix- Win98, ME
>> http://www.bu.edu/pcsc/internetaccess/winsock2fix.html
>> LavaSoft- all versions of Windows-
>> http://digital-solutions.co.uk/lavasoft/whndnfix.zip
>>
>> More information here:
>> http://www.spywareinfo.com/
>> http://inetexplorer.mvps.org/Darnit.htm
>> http://www.doxdesk.com/parasite/ - runs a little script when loading page
>> to
>> check for common parasites
>>
>> If no joy, in IE go to Tools...Internet Options...Advanced tab, Browsing
>> section, uncheck "Enable third-party browser extensions", click Apply,
>> click
>> Okay, reboot. If that solves your problem, then more troubleshooting is
>> needed to find out exactly which program, or Browser Helper Object (BHO)
>> is
>> causing this problem. You don't want to leave it at that, as some BHOs
>> are
>> useful or necessary - like Adobe Acrobat for reading .pdf files or an
>> essential component of Norton AV. Get BHODemon -
>> http://www.definitivesolutions.com/bhodemon.htm - read all about BHOs.
>> Disable all items, and then gradually replace one or two at a time to
>> narrow
>> down the culprit.
>>
>> Or if you have IE 6 SP-2 you can do this within the browser:
>> How to manage Internet Explorer add-ons in Windows XP Service Pack 2
>> http://support.microsoft.com/default...b;en-us;883256
>>
>> If all the above fails, then the problem could be something new that the
>> spyware cleaners above don't have in their databases yet. In that
>> case....
>> HijackThis direct download:
>> http://www.spywareinfo.com/~merijn/files/hijackthis.zip
>> Tutorial on how to use HijackThis:
>> http://www.spywareinfo.com/~merijn/htlogtutorial.html
>> Then post it's output log to the forum here for analysis and feedback by
>> the
>> parasite experts:
>> http://www.spywareinfo.com/forums/
>> Or the other HijackThis Logs forums listed here:
>> http://www.spywareinfo.com/~merijn/forums.html
>>
>> Or try this program to get some of the most nasty malware:
>> CWShredder direct download:
>> http://aumha.org/downloads/cwshredder.zip
>>
>> An alternate resource for all of this and more:
>> http://www.aumha.org/secure.htm
>>
>>
>> --
>>
>> Jon R. Kennedy
>> Charlotte, NC, USA
>> (E-Mail Removed)
>>
>> "farshad" <(E-Mail Removed)> wrote in message
>> news:94FBC1BC-1200-42A5-A24D-(E-Mail Removed)...
>>> Hi everyone;
>>>
>>> I am connected to internet, have IP address and can ping as well, but
>>> internet explorer would not connect. I have downloaded Mozilla and it
>>> didn't
>>> work either. so I figured it could be tcp/ip problem? I have used
>>> winsock
>>> fix
>>> to fix the tcp/ip stack, but it works for a few minutes and again
>>> everything
>>> stops. I am really in need of help, this is an xp system.
>>>
>>> --
>>> thanks,
>>> Farshad

Get LSP-Fix - a free program to repair damaged Winsock 2 stacks (all Windows
versions)
http://www.cexx.org/lspfix.htm
Winsockfix for W95, W98, ME, NT, 2000, XP
http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
Directions here: http://www.tacktech.com/display.cfm?ttid=257
WinXP:
Get WinSockxpFix
http://www.spychecker.com/program/winsockxpfix.html
How to Reset Internet Protocol (TCP/IP) in Windows XP
http://support.microsoft.com/kb/299357
WinXP SP2: You can go to Start | Run and type
CMD
In the command window type
netsh winsock reset

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/sec...t/default.aspx
http://defendingyourmachine.blogspot.com/

I have run Adaware SE and Spybot S&D and have used Hijackthis to clean up
everything possible, before that I used Sysclean in safe mode to clean the
system. also, I have done this command as well, "netsh winsock reset
catalog", no use at all, but when I boot into safe mode and dot the
Winsockxpfix software it would fix the problem for a short period of time. on
this system, someone had installed zone alarm(zonelabs) and tried to get rid
of it. I have cleaned up all the possible entries in the registry as well,
but I haven't used Lspfix yet. I will do whatever you guys have recommended
tomorrow morning and see if the problem would go away.

thanks again
Farshad

"Frank Saunders, MS-MVP IE/OE" wrote:

> "farshad" <(E-Mail Removed)> wrote in message
> news:85A5BF81-8FAB-481C-9F89-(E-Mail Removed)
> > Hi Jon;
> >
> > if this is a browser issue, I installed Mozilla and it had exacxtly the
> > same problems, could it be something else?
> >
> > thanks,
> > Farshad
> >
> > "Jon Kennedy" wrote:
> >
> >> This may be caused by spyware/malware that's gotten installed on
> >> your system. Use Ad-Aware and/or Spybot Search & Destroy to remove it.
> >>
> >> Ad-Aware: http://www.lavasoftusa.com/
> >> Spybot: http://www.safer-networking.org/en/index.html
> >> Good sites on how to install and use Spybot -
> >> http://www.safer-networking.org/en/tutorial/index.html
> >> http://tomcoyote.com/SPYBOT/index1.php
> >>
> >> Also download a winsock repair tool, to have just in case cleaning up
> >> anything found breaks it -
> >>
> >> Winsock repair tools:
> >> LSPFix- all versions of Windows http://www.cexx.org/lspfix.zip
> >> Winsock2 Fix- Win98, ME
> >> http://www.bu.edu/pcsc/internetaccess/winsock2fix.html
> >> LavaSoft- all versions of Windows-
> >> http://digital-solutions.co.uk/lavasoft/whndnfix.zip
> >>
> >> More information here:
> >> http://www.spywareinfo.com/
> >> http://inetexplorer.mvps.org/Darnit.htm
> >> http://www.doxdesk.com/parasite/ - runs a little script when loading page
> >> to
> >> check for common parasites
> >>
> >> If no joy, in IE go to Tools...Internet Options...Advanced tab, Browsing
> >> section, uncheck "Enable third-party browser extensions", click Apply,
> >> click
> >> Okay, reboot. If that solves your problem, then more troubleshooting is
> >> needed to find out exactly which program, or Browser Helper Object (BHO)
> >> is
> >> causing this problem. You don't want to leave it at that, as some BHOs
> >> are
> >> useful or necessary - like Adobe Acrobat for reading .pdf files or an
> >> essential component of Norton AV. Get BHODemon -
> >> http://www.definitivesolutions.com/bhodemon.htm - read all about BHOs.
> >> Disable all items, and then gradually replace one or two at a time to
> >> narrow
> >> down the culprit.
> >>
> >> Or if you have IE 6 SP-2 you can do this within the browser:
> >> How to manage Internet Explorer add-ons in Windows XP Service Pack 2
> >> http://support.microsoft.com/default...b;en-us;883256
> >>
> >> If all the above fails, then the problem could be something new that the
> >> spyware cleaners above don't have in their databases yet. In that
> >> case....
> >> HijackThis direct download:
> >> http://www.spywareinfo.com/~merijn/files/hijackthis.zip
> >> Tutorial on how to use HijackThis:
> >> http://www.spywareinfo.com/~merijn/htlogtutorial.html
> >> Then post it's output log to the forum here for analysis and feedback by
> >> the
> >> parasite experts:
> >> http://www.spywareinfo.com/forums/
> >> Or the other HijackThis Logs forums listed here:
> >> http://www.spywareinfo.com/~merijn/forums.html
> >>
> >> Or try this program to get some of the most nasty malware:
> >> CWShredder direct download:
> >> http://aumha.org/downloads/cwshredder.zip
> >>
> >> An alternate resource for all of this and more:
> >> http://www.aumha.org/secure.htm
> >>
> >>
> >> --
> >>
> >> Jon R. Kennedy
> >> Charlotte, NC, USA
> >> (E-Mail Removed)
> >>
> >> "farshad" <(E-Mail Removed)> wrote in message
> >> news:94FBC1BC-1200-42A5-A24D-(E-Mail Removed)...
> >>> Hi everyone;
> >>>
> >>> I am connected to internet, have IP address and can ping as well, but
> >>> internet explorer would not connect. I have downloaded Mozilla and it
> >>> didn't
> >>> work either. so I figured it could be tcp/ip problem? I have used
> >>> winsock
> >>> fix
> >>> to fix the tcp/ip stack, but it works for a few minutes and again
> >>> everything
> >>> stops. I am really in need of help, this is an xp system.
> >>>
> >>> --
> >>> thanks,
> >>> Farshad
>
> Get LSP-Fix - a free program to repair damaged Winsock 2 stacks (all Windows
> versions)
> http://www.cexx.org/lspfix.htm
> Winsockfix for W95, W98, ME, NT, 2000, XP
> http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
> Directions here: http://www.tacktech.com/display.cfm?ttid=257
> WinXP:
> Get WinSockxpFix
> http://www.spychecker.com/program/winsockxpfix.html
> How to Reset Internet Protocol (TCP/IP) in Windows XP
> http://support.microsoft.com/kb/299357
> WinXP SP2: You can go to Start | Run and type
> CMD
> In the command window type
> netsh winsock reset
>
> --
> Frank Saunders, MS-MVP, IE/OE
> Please respond in Newsgroup only. Do not send email
> http://www.fjsmjs.com
> Protect your PC
> http://www.microsoft.com./athome/sec...t/default.aspx
> http://defendingyourmachine.blogspot.com/
>
>
>

"farshad" <(E-Mail Removed)> wrote in message
news:C341E2E1-18C2-4DB7-B400-(E-Mail Removed)
> I have run Adaware SE and Spybot S&D and have used Hijackthis to clean up
> everything possible, before that I used Sysclean in safe mode to clean the
> system. also, I have done this command as well, "netsh winsock reset
> catalog", no use at all, but when I boot into safe mode and dot the
> Winsockxpfix software it would fix the problem for a short period of time.
> on
> this system, someone had installed zone alarm(zonelabs) and tried to get
> rid
> of it. I have cleaned up all the possible entries in the registry as well,
> but I haven't used Lspfix yet. I will do whatever you guys have
> recommended
> tomorrow morning and see if the problem would go away.
>
> thanks again
> Farshad

If Winsockxpfix only works for a while, then you have not successfully
removed the spyware. Have you tried running the removal tools in Safe Mode?

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/sec...t/default.aspx
http://defendingyourmachine.blogspot.com/

Did you post your HJT log to a forum for experts to have a look-see? It can
be dicey to use HJT by ones self to clean up a system. Best to have another
set of eyes to take a look at it - in case you've missed something.

You also mentioned that ZoneAlarm had been installed - check this site for
manual removal info, just to make sure you've cleaned it all out:
http://nh2.nohold.net/noHoldCust25/P...tallNonNT.html
--

Jon R. Kennedy
Charlotte, NC, USA
(E-Mail Removed)

"farshad" <(E-Mail Removed)> wrote in message
news:C341E2E1-18C2-4DB7-B400-(E-Mail Removed)...
>I have run Adaware SE and Spybot S&D and have used Hijackthis to clean up
> everything possible, before that I used Sysclean in safe mode to clean the
> system. also, I have done this command as well, "netsh winsock reset
> catalog", no use at all, but when I boot into safe mode and dot the
> Winsockxpfix software it would fix the problem for a short period of time.
> on
> this system, someone had installed zone alarm(zonelabs) and tried to get
> rid
> of it. I have cleaned up all the possible entries in the registry as well,
> but I haven't used Lspfix yet. I will do whatever you guys have
> recommended
> tomorrow morning and see if the problem would go away.
>
> thanks again
> Farshad
>