Help, sporadic internet access

  • Thread starter Thread starter Lost in XP
  • Start date Start date
L

Lost in XP

I apologize in advance for the length of this post...
I've been battling spyware & hijackers. I cleared lots of
spyware from my home computer (Home XP) over the weekend
using spybot & semantec. Thereafter, I could access the
internet, the other users (really angry daughters) would
get "file not found" when using both IE and Netscape.

So, I did a system restore to last Friday. We all had
internet access, but all the bad stuff was back on the
machine. So, I undid the system restore and then no one
had internet access. All I would see was file not
found.

So, I spent an hour on the phone with our DSL tech
support. They had me enter a static IP address, which got
me internet access, but still file not found for all other
users. I downloaded ad aware and hyjack this and ran them
both. But, same problem.

So, tech support recommended a reinstall of the OS. I
reinstalled last night and... same problem: no internet
access for anyone. When I entered the static IP address,
I had internet, but no other users do.

Any suggestions?? My daughters are threatening my life if
they don't get internet access soon!
 
I apologize in advance for the length of this post...
I've been battling spyware & hijackers. I cleared lots of
spyware from my home computer (Home XP) over the weekend
using spybot & semantec. Thereafter, I could access the
internet, the other users (really angry daughters) would
get "file not found" when using both IE and Netscape.

So, I did a system restore to last Friday. We all had
internet access, but all the bad stuff was back on the
machine. So, I undid the system restore and then no one
had internet access. All I would see was file not
found.

So, I spent an hour on the phone with our DSL tech
support. They had me enter a static IP address, which got
me internet access, but still file not found for all other
users. I downloaded ad aware and hyjack this and ran them
both. But, same problem.

So, tech support recommended a reinstall of the OS. I
reinstalled last night and... same problem: no internet
access for anyone. When I entered the static IP address,
I had internet, but no other users do.

Any suggestions?? My daughters are threatening my life if
they don't get internet access soon!

How does the other users internet access relate to this computer? Are you
running ICS or a proxy server?

Please provide ipconfig information for each computer.
Start - Run - "ipconfig /all >c:\ipconfig.txt" - Open c:\ipconfig.txt in
Notepad, copy and paste into your next post.

Now, download LSP-Fix from <http://www.cexx.org/lspfix.htm>, and a couple
similar products listed on that page also which you may want to try. All free.

Start by restoring the system so you can access the internet from all computers.

Then, download and run CWShredder from
<http://www.majorgeeks.com/download4086.html>. Have it fix all variants.

Now check for, and remove, spyware. Get HijackThis
<http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<http://security.kolla.de/index.php?lang=en&page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
HJT Log.
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it here):
<http://forums.net-integration.net/>
<http://www.spywareinfo.com/forums/>
<http://forums.tomcoyote.org/>
<http://www.wilderssecurity.com/>

If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and the similar products.

Harden your browser. There are various websites which will check for
vulnerabilities, here are three which I use.
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/

Harden your operating system. Check at least monthly for security updates.
http://windowsupdate.microsoft.com/

Block possibly dangerous websites with a Hosts file. Three Hosts file sources I
use:
http://www.accs-net.com/hosts/get_hosts.html
http://www.mvps.org/winhelp2002/hosts.htm
(The third is included, and updated, with Spybot (see above)).

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Thanks for the advice. I'll do my best to carry out your
suggestions.

My lack of knowledge is showing here. When I say other
users, what I mean is we have one computer and 4 of us
each have separate windows user accounts. What I mean is,
for example, I log on and when daughter #1 wants to use
the computer, I log off and she logs on. When daughter #2
wants the computer daughter #1 logs off and #2 logs on, ad
nauseum. This is what particularly baffled our DSL
support guy. He couldn't understand how one user could
have internet access, when the other users on the same
computer and using the same IP configuration (I think)
could not.

Does that change your advice?
-----Original Message-----


How does the other users internet access relate to this computer? Are you
running ICS or a proxy server?

Please provide ipconfig information for each computer.
Start - Run - "ipconfig /all >c:\ipconfig.txt" - Open c:\ipconfig.txt in
Notepad, copy and paste into your next post.

Now, download LSP-Fix from
similar products listed on that page also which you may want to try. All free.

Start by restoring the system so you can access the internet from all computers.

Then, download and run CWShredder from
<http://www.majorgeeks.com/download4086.html>. Have it fix all variants.

Now check for, and remove, spyware. Get HijackThis
<http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<http://security.kolla.de/index.php?
lang=en&page=download>. Both free.
 
Thanks for the advice. I'll do my best to carry out your
suggestions.

My lack of knowledge is showing here. When I say other
users, what I mean is we have one computer and 4 of us
each have separate windows user accounts. What I mean is,
for example, I log on and when daughter #1 wants to use
the computer, I log off and she logs on. When daughter #2
wants the computer daughter #1 logs off and #2 logs on, ad
nauseum. This is what particularly baffled our DSL
support guy. He couldn't understand how one user could
have internet access, when the other users on the same
computer and using the same IP configuration (I think)
could not.

Does that change your advice?

Aha. So we're talking about one computer with shared use. Are you using Fast
User Switching, or simply logging off (first user) then on (second user)?

I think the LSP repair sounds better and better.

Continue with cleaning as instructed please. And please post a link to where
you post your HijackThis log. HJT, and possibly CWShredder, are key tools here.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Logging off and on.

I downloaded and tried the LSPfix once from the website
you suggest, and it didn't seem to do much good.
Nevertheless, I'll try everything you suggest and repost
outcomes.

Thanks again, Chuck, for all your kind assistance.
-----Original Message-----


Aha. So we're talking about one computer with shared use. Are you using Fast
User Switching, or simply logging off (first user) then on (second user)?

I think the LSP repair sounds better and better.

Continue with cleaning as instructed please. And please post a link to where
you post your HijackThis log. HJT, and possibly
CWShredder, are key tools here.
 
Logging off and on.

I downloaded and tried the LSPfix once from the website
you suggest, and it didn't seem to do much good.
Nevertheless, I'll try everything you suggest and repost
outcomes.

Thanks again, Chuck, for all your kind assistance.

Glad to help, though gladder when my help accomplishes something. So now into
deep diagnostic mode. Be patient and persistent.

How about a bit more detail about your installation? You're running DSL. What
type service - static, dynamic, PPPoE? DSL modem connecting directly to your
single computer?

Where are you entering this "static ip address"?

Can you describe the "file not found" error more precisely? By content and
format?

Any errors in the Event Log (Control Panel - Administrative Tools - Event
Viewer) when this error is seen?

Please provide ipconfig information while logged in as yourself, and as your
daughter.
Start - Run - "ipconfig /all >c:\ipconfig.txt" - Open c:\ipconfig.txt in
Notepad, copy and paste into your next post.

You may need to run HijackThis 3 times - once as yourself, once as your
daughter, once in Safe Mode. To start the computer in safe mode:
1) Click Start, click Shut Down, and then, in the drop-down list, click Shut
down.
2) In the Shut Down Windows dialog box, click Restart, and then click OK.
3) When you see the message Please select the operating system to start, press
F8.
4) Use the arrow keys to highlight the appropriate safe mode option, and then
press ENTER.
5) If you have a dual-boot or multiple-boot system, choose the installation
that you need to access using the arrow keys, and then press ENTER.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
-----Original Message-----

Glad to help, though gladder when my help accomplishes something. So now into
deep diagnostic mode. Be patient and persistent.

How about a bit more detail about your installation? You're running DSL. What
type service - static, dynamic, PPPoE? DSL modem connecting directly to your
single computer?
I don't know what type of service. I assume I can find
out. The DSL provider provided us with a modem which I
connect to ur computer through a DSL port (Efficient
Networks Spreedstream DSL modem 5200).
Where are you entering this "static ip address"?
IN network connection/properties/Internet Protocol
(TCP/IP)
Can you describe the "file not found" error more precisely? By content and
format?
Sorry, I was sloppy. It actually says "The page cannot
be displayed please try the following", then has the
usual list. AT the bottom is "cannot find server or DNS
error"
Any errors in the Event Log (Control Panel - Administrative Tools - Event
Viewer) when this error is seen?
I don't see any
Please provide ipconfig information while logged in as yourself, and as your
daughter.
Start - Run - "ipconfig /all >c:\ipconfig.txt" - Open c:\ipconfig.txt in
Notepad, copy and paste into your next post.
Here is ipconfig for me...

Windows IP Configuration



Host Name . . . . . . . . . . . . : dellhannon1

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Speedstream
Ethernet USB Adapter

Physical Address. . . . . . . . . : 00-20-EA-F1-
F3-B1

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 66.244.86.143

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 66.244.86.1

DNS Servers . . . . . . . . . . . : 204.89.253.1

204.89.253.2

Here is ipconfig for daughter

Windows IP Configuration



Host Name . . . . . . . . . . . . : dellhannon1

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Speedstream
Ethernet USB Adapter

Physical Address. . . . . . . . . : 00-20-EA-F1-
F3-B1

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 66.244.86.143

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 66.244.86.1

DNS Servers . . . . . . . . . . . : 204.89.253.1

204.89.253.2

I'm going to try and finish the other stuff you
recommended and set the HJT logs later. WISH ME LUCK!
 
I don't know what type of service. I assume I can find
out. The DSL provider provided us with a modem which I
connect to ur computer through a DSL port (Efficient
Networks Spreedstream DSL modem 5200).

IN network connection/properties/Internet Protocol
(TCP/IP)
Sorry, I was sloppy. It actually says "The page cannot
be displayed please try the following", then has the
usual list. AT the bottom is "cannot find server or DNS
error"

I don't see any

Here is ipconfig for me...

Windows IP Configuration



Host Name . . . . . . . . . . . . : dellhannon1

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Speedstream
Ethernet USB Adapter

Physical Address. . . . . . . . . : 00-20-EA-F1-
F3-B1

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 66.244.86.143

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 66.244.86.1

DNS Servers . . . . . . . . . . . : 204.89.253.1

204.89.253.2

Here is ipconfig for daughter

Windows IP Configuration



Host Name . . . . . . . . . . . . : dellhannon1

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Speedstream
Ethernet USB Adapter

Physical Address. . . . . . . . . : 00-20-EA-F1-
F3-B1

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 66.244.86.143

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 66.244.86.1

DNS Servers . . . . . . . . . . . : 204.89.253.1

204.89.253.2

<SNIP>

Maynard,

Let's see what HijackThis shows. I still suspect a browser or dns hijack.
HijackThis frequently identifies that when Ad-Aware and Spybot don't.

Have you enabled ICF on the Speedstream connection (Speedstream Connection -
Properties - Advanced - "Protect my computer..."?

Re enable DHCP, and rerun ipconfig please. Then:
1) Ping www.yahoo.com.
2) Ping 66.94.230.33.
Report error messages.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Back
Top