DNS Error - Options Running Out

[Guest]

I read many posts and done most of what’s been recommended. Below is a brief
list of what I’ve done (i.e. remember). Waiting for analysis of my
HijackThis log file and ISP investigation. If anybody has a suggestion and
in the order that it should be done please let me know

The problems is IE SP2 “Page cannot be displayed†errors occur 99% of the
time. Note: many of the references in the posts and MS-Knowledge base don’t
apply to SP2

1. I deleted IE Cookies, Files and History
2. Updated and ran Norton, Ad-Aware, CWShredder, Win. Washer, TrendMicro
and Spybot. Trying Registry Mechanic next.
3. & 4. Google as a home page opens O’K but, can't move away from that
page. I can see Google Cached data.
5. Reregistered recommended ddl's
6. Reset Internet Protocol
7. Reset home based network router (Unpluged it )
8. Uninstalled/reinstalled SP2
9. My ISP now recommends running - tracert on sites
10. Firefox same problems
11. Unchecking IE default browser - doesn't ask me question
12. Can't downloaded AOL file or various downloadeds programs from web
sites. IE browser on 2nd machine has similar problems (including AOL browser)
13. Ping'ed 198. ... & 128. ...
14. Lspfix, cexx and Winsock seemed to help
15. ran ipconfig /flushdns

I think it’s something stupid or something the spyware removed. Had no real
problems before spyware install

Steve

 

[Frank Saunders, MS-MVP IE/OE]

I read many posts and done most of what’s been recommended. Below is a
brief
list of what I’ve done (i.e. remember). Waiting for analysis of my
HijackThis log file and ISP investigation. If anybody has a suggestion
and
in the order that it should be done please let me know

The problems is IE SP2 “Page cannot be displayed†errors occur 99% of the
time. Note: many of the references in the posts and MS-Knowledge base don’t
apply to SP2

1. I deleted IE Cookies, Files and History
2. Updated and ran Norton, Ad-Aware, CWShredder, Win. Washer, TrendMicro
and Spybot. Trying Registry Mechanic next.
3. & 4. Google as a home page opens O’K but, can't move away from that
page. I can see Google Cached data.
5. Reregistered recommended ddl's
6. Reset Internet Protocol
7. Reset home based network router (Unpluged it )
8. Uninstalled/reinstalled SP2
9. My ISP now recommends running - tracert on sites
10. Firefox same problems
11. Unchecking IE default browser - doesn't ask me question
12. Can't downloaded AOL file or various downloadeds programs from web
sites. IE browser on 2nd machine has similar problems (including AOL
browser)
13. Ping'ed 198. ... & 128. ...
14. Lspfix, cexx and Winsock seemed to help
15. ran ipconfig /flushdns

I think it’s something stupid or something the spyware removed. Had no
real
problems before spyware install

Steve

Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic" and post a description of your symptoms. If they need to
see your log they will ask for it.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx

 

[Jim Byrd]

Hi Steve - I would suspect corruption of your Winsock2 stack given those
symptoms and what you've done. Two approaches. Be sure that you use the OS
specific fixes appropriate to your machine:

1. Download both a copy of LSPFIX here:

http://www.cexx.org/lspfix.htm

AND a copy of Winsockfix for W95, W98, and ME
http://www.tacktech.com/pub/winsockfix/WinsockFix.zip
Directions here: http://www.tacktech.com/display.cfm?ttid=257

or here for Win2k/XP http://files.webattack.com/localdl834/WinsockxpFix.exe
Info here: http://www.spychecker.com/program/winsockxpfix.html
Directions here: http://www.iup.edu/house/resnet/winfix.shtm

The process of removing certain malware may kill your internet connection.
If this should occur, these programs, LSPFIX and WINSOCKFIX, will enable you
to regain your connection.

NOTE: It is reported that in XP SP2, the Run command netsh winsock reset
will fix this problem without the need for these programs. (You can also
try this if you're on XP SP1. There has also been one, as yet unconfirmed,
report that this also works there.) Also, one MS technician suggested the
following sequence:

netsh int reset all
ipconfig /flushdns

See also: http://windowsxp.mvps.org/winsock.htm for additional XPSP2
info/approaches using the netsh command.


2. I've also had the following work for some users when the above failed or
only partially fixed the problem:

Courtesy of: http://www.onecomputerguy.com/ie_tips.htm#winsock_fix

If no Internet application like IE, Outlook Express or other browsers are
working, it may be due to corrupted Winsock registry entries. First make
sure you can connect to the Internet. Ping a web site by name (e.g. ping
www.yahoo.com) If you get a response back, then you can connect to the
Internet.

The basic steps are to:

Delete the corrupted Winsock registry entries
Import clean ones
Reboot the computer

For Win98:

Remove the old registry entries - Download Registry Entry
http://www.onecomputerguy.com/reg/xp_del_winsock.reg
Import the correct registry entries - Download Registry Entry
http://www.onecomputerguy.com/reg/win98_winsock.reg

For WindowsXP:

Remove the old registry entries - Download Reg file
http://www.onecomputerguy.com/reg/xp_del_winsock.reg
Import the correct registry entries - Download Reg file
http://www.onecomputerguy.com/reg/xp_winsock.reg

For Windows2000

Remove the old registry entries - Download Reg file
http://www.onecomputerguy.com/reg/xp_del_winsock.reg
Import the correct registry entries - Download Reg file
http://www.onecomputerguy.com/reg/winsock_2k.reg



--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Guest]

Frank,

I did that and indicated that in my post here. The problem is they look
buried (I had to add a reminder post after 3 days). The other problem is I
can't get to the forum section of spywareinfo, once I hit that forum's button
- DNS Error. Im adding AOL now maybe....

I reviewed most of the last 7 days of posts. Tried almost everything you
and others posted. Considering starting over again. Do you have something
to follow again step by step. Maybe I missed something. Note: The
HijackThis log file I sent to spyware looked pretty clean. I now have my ISP
involved using tracert.

//also links/buttons in web pages or google hyperlinks don't work
//some home pages O"K
C:\WINDOWS\system32>tracert www.spywareinfo.com
Unable to resolve target system name www.spywareinfo.com.

//certificate problem??
C:\WINDOWS\system32>tracert www.dcma.mil
Unable to resolve target system name www.dcma.mil.





Steve

I read many posts and done most of what’s been recommended. Below is a
brief
list of what I’ve done (i.e. remember). Waiting for analysis of my
HijackThis log file and ISP investigation. If anybody has a suggestion
and
in the order that it should be done please let me know

The problems is IE SP2 “Page cannot be displayed†errors occur 99% of the
time. Note: many of the references in the posts and MS-Knowledge base don’t
apply to SP2

1. I deleted IE Cookies, Files and History
2. Updated and ran Norton, Ad-Aware, CWShredder, Win. Washer, TrendMicro
and Spybot. Trying Registry Mechanic next.
3. & 4. Google as a home page opens O’K but, can't move away from that
page. I can see Google Cached data.
5. Reregistered recommended ddl's
6. Reset Internet Protocol
7. Reset home based network router (Unpluged it )
8. Uninstalled/reinstalled SP2
9. My ISP now recommends running - tracert on sites
10. Firefox same problems
11. Unchecking IE default browser - doesn't ask me question
12. Can't downloaded AOL file or various downloadeds programs from web
sites. IE browser on 2nd machine has similar problems (including AOL
browser)
13. Ping'ed 198. ... & 128. ...
14. Lspfix, cexx and Winsock seemed to help
15. ran ipconfig /flushdns

I think it’s something stupid or something the spyware removed. Had no
real
problems before spyware install

Steve

Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic" and post a description of your symptoms. If they need to
see your log they will ask for it.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx

 

[Guest]

Thanks Jim

I think I'm falling under condition 2. It did get better when I ran the
winsock filles earlier. Will let you know. (XP SP2) - Steve

*********************************

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Daddy>ping www.yahoo.com

Pinging www.yahoo.akadns.net [66.94.230.33] with 32 bytes of data:

Reply from 66.94.230.33: bytes=32 time=84ms TTL=48
Reply from 66.94.230.33: bytes=32 time=84ms TTL=48
Reply from 66.94.230.33: bytes=32 time=85ms TTL=48
Reply from 66.94.230.33: bytes=32 time=85ms TTL=48

Ping statistics for 66.94.230.33:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 84ms, Maximum = 85ms, Average = 84ms

C:\Documents and Settings\Daddy>ping www.spywareinfo.com
Ping request could not find host www.spywareinfo.com. Please check the name
and
try again.

C:\Documents and Settings\Daddy>ping www.dcma.mil
Ping request could not find host www.dcma.mil. Please check the name and try
aga
in.

 

[Guest]

Well after 3 days I think it's fixed.

I think what happened was when I ran the spy ware or, "something else", and
it removed the IE LAN Setting for the proxy server (I sure didn't).
Anyways I found this site referenced at the botom of the lspfix web site,
looked around a bit and found IE6 configuration

http://support.shaw.ca
http://support.shaw.ca/browsers/ie6configure.htm

Is this configuration correct quote correct? http://proxy 8080
Frank of Jan should maybe add a IE configuration remark to their posts

Now I have to explain myself to the ISP and spywareinfo

Steve

 

[Guest]

No spoke to soon - never mind

Well after 3 days I think it's fixed.

I think what happened was when I ran the spy ware or, "something else", and
it removed the IE LAN Setting for the proxy server (I sure didn't).
Anyways I found this site referenced at the botom of the lspfix web site,
looked around a bit and found IE6 configuration

http://support.shaw.ca
http://support.shaw.ca/browsers/ie6configure.htm

Is this configuration correct quote correct? http://proxy 8080
Frank of Jan should maybe add a IE configuration remark to their posts

Now I have to explain myself to the ISP and spywareinfo

Steve

 

[Guest]

Jim,

Before I start deleting and recreating winsock files I think I'll wait to
see what my ISP says.

I thought it was working but AOL was running in the background. Please keep
thread open

Steve

 

[Frank Saunders, MS-MVP IE/OE]

Sorry. I got trapped in the numbered list.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx

Frank,

I did that and indicated that in my post here. The problem is they look
buried (I had to add a reminder post after 3 days). The other problem is
I
can't get to the forum section of spywareinfo, once I hit that forum's
button
- DNS Error. Im adding AOL now maybe....

I reviewed most of the last 7 days of posts. Tried almost everything you
and others posted. Considering starting over again. Do you have
something
to follow again step by step. Maybe I missed something. Note: The
HijackThis log file I sent to spyware looked pretty clean. I now have my
ISP
involved using tracert.

//also links/buttons in web pages or google hyperlinks don't work
//some home pages O"K
C:\WINDOWS\system32>tracert www.spywareinfo.com
Unable to resolve target system name www.spywareinfo.com.

//certificate problem??
C:\WINDOWS\system32>tracert www.dcma.mil
Unable to resolve target system name www.dcma.mil.

Steve

I read many posts and done most of what’s been recommended. Below is a
brief
list of what I’ve done (i.e. remember). Waiting for analysis of my
HijackThis log file and ISP investigation. If anybody has a suggestion
and
in the order that it should be done please let me know

The problems is IE SP2 “Page cannot be displayed†errors occur 99% of
the
time. Note: many of the references in the posts and MS-Knowledge base
don’t
apply to SP2

1. I deleted IE Cookies, Files and History
2. Updated and ran Norton, Ad-Aware, CWShredder, Win. Washer,
TrendMicro
and Spybot. Trying Registry Mechanic next.
3. & 4. Google as a home page opens O’K but, can't move away from that
page. I can see Google Cached data.
5. Reregistered recommended ddl's
6. Reset Internet Protocol
7. Reset home based network router (Unpluged it )
8. Uninstalled/reinstalled SP2
9. My ISP now recommends running - tracert on sites
10. Firefox same problems
11. Unchecking IE default browser - doesn't ask me question
12. Can't downloaded AOL file or various downloadeds programs from web
sites. IE browser on 2nd machine has similar problems (including AOL
browser)
13. Ping'ed 198. ... & 128. ...
14. Lspfix, cexx and Winsock seemed to help
15. ran ipconfig /flushdns

I think it’s something stupid or something the spyware removed. Had no
real
problems before spyware install

Steve

Go to: http://mvps.org/winhelp2002/unwanted.htm
Download "Hijack This!" [freeware]

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save
Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic" and post a description of your symptoms. If they need
to
see your log they will ask for it.

 

[Guest]

Jim,

Ran registry downloads recommended and followed instructions in KB article
811259 for winsock corruption (I have 17 entries (see method 2))

Still 98% of the sites don't work. Have not heard from spywareinfo. I
think because that log file is pretty clean. Haven't heard from ISP yet.
AOL is saving the day.

What's a index.dat file and can I delete them all?

 

[Jim Byrd]

Hi Steve - www.it-mate.co.uk/support/idsuite.asp - Pretty safe, but be a
little careful.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In