Internet Explorer (port 80) connect problem

[Dick Harrison]

I am running IE V 6.2.2900.2180. IE will not connect (access) a www.xxx or
http sites. It will connect to secure sites (https) and Outlook Express
email works fine. I think this means that port 443 (secure internet) and
21/25 (email) are OK but port 80 (standard internet) is broken.

It worked last night, but not this morning. I am through a Lynksys router,
so I had a log of outgoing messages -- standard internet messages do not
reach the router. I also can look at my cable modem performance - this does
not work - so command is not getting from desktop to the cable mode. I have
a laptop attached to the router and it works OK in all cases. I have taken
the router out of the network (cable modem direct to desktop) -- nothing
changes.

I also shut down my firewall (ZoneAlarm) -- no help. I have tried using the
"ping" command - cannot find the host.

I have XP auto updates downloaded, but not installed -- so no activity re XP
updates.

I use update MS Anti-Spyware, Spybot S&D, Spy Blaster, Ad Aware and SpySweeper.
Virus protection is Norton. Firewall is ZoneAlarm. All are updated frequently - MS Anti-Spyware
and SpySweeper run every day (at 1 and 2 a.m.). They both ran in the time between things
working and not working.

I have run all of the above and no problem identified. I also ran CW Shredder.

Has anyone experience this problem or have guidance on how to correct.

If this is not the correct Newsgroup for this problem - please let me know
where to go.

Thanks, Dick

 

[Ricky]

Try this and see if it helps..

http://www.snapfiles.com/get/winsockxpfix.html

I am running IE V 6.2.2900.2180. IE will not connect (access) a www.xxx
or
http sites. It will connect to secure sites (https) and Outlook Express
email works fine. I think this means that port 443 (secure internet) and
21/25 (email) are OK but port 80 (standard internet) is broken.

It worked last night, but not this morning. I am through a Lynksys router,
so I had a log of outgoing messages -- standard internet messages do not
reach the router. I also can look at my cable modem performance - this does
not work - so command is not getting from desktop to the cable mode. I have
a laptop attached to the router and it works OK in all cases. I have taken
the router out of the network (cable modem direct to desktop) -- nothing
changes.

I also shut down my firewall (ZoneAlarm) -- no help. I have tried using the
"ping" command - cannot find the host.

I have XP auto updates downloaded, but not installed -- so no activity re XP
updates.
I use update MS Anti-Spyware, Spybot S&D, Spy Blaster, Ad Aware and
SpySweeper.
Virus protection is Norton. Firewall is ZoneAlarm. All are updated
frequently - MS Anti-Spyware
and SpySweeper run every day (at 1 and 2 a.m.). They both ran in the time
between things
working and not working.

I have run all of the above and no problem identified. I also ran CW
Shredder.

Has anyone experience this problem or have guidance on how to correct.

If this is not the correct Newsgroup for this problem - please let me know
where to go.

Thanks, Dick

 

[Dick Harrison]

Ricky, I downloaded WinSock XP Fix on my laptop to a memory stick - then to
my desktop and ran it. If found corruption in my network, repaired it,
restarted. When I tried to access the internet -- same results. I run
WinSock again and same corruption is present. I noticed that when I try to
access my homepage the first thing that appears in the lower left of the
screen is 127.0.0.1 - where it would usually have the site address I am
accessing.

I do not know what "spyware" to try -- see below I have not found anything
to delete -- so something is not regenerating itself.

Any advise -- what about Hijack This?

I did not mention, but I do use Norton GoBack -- which I have reverted to a
time when the system was working OK. So the code should be OK -- but the
registers corrupted or ????

Comments??? Suggestions ???

 

[Robert Aldwinckle]

Ricky, I downloaded WinSock XP Fix on my laptop to a memory stick - then to
my desktop and ran it. If found corruption in my network, repaired it,
restarted. When I tried to access the internet -- same results. I run
WinSock again and same corruption is present. I noticed that when I try to
access my homepage the first thing that appears in the lower left of the
screen is 127.0.0.1 - where it would usually have the site address I am
accessing.

You could have that symptom if you have a local proxy defined
(e.g. an http filter) but it isn't running.

Open a cmd window and enter:

netstat -anobv >netstat.txt
notepad netstat.txt

Then do finds in the Notepad window for 127

If you find any the process name should be listed below it in brackets
Or use tasklist /fi "PID eq ppp"
(where ppp is the PID listed on the same line you find the 127)
or just Task Manger's Processes tab with the PID column enabled
to make sure you can identify the program which is using the listed port.


Good luck

Robert Aldwinckle
---

 

[Dick Harrison]

Robert, I am not real sure what you are asking me to do -- here is what
I did and what I got.

I went to Start, Run, Cmd, Enter and I think this take to what you called a
"cmd window".

I then entered: netstat -anobv >netstat.txt notepad netstat.txt and
Enter

I got -- Display Protocol Statistic and Current TCP/IP Network
Connections

and a long formula explanation under it -- NETSTAT [-a] [-b] . . . . .
[interval]

then the definition of each element of the formula: -a definition etc.
-b
definition etc.

The find -- I did a right click in the notepad window, got a Find popup ---
the entry area would not accept data.

Net is I tried to do what you indicated -- but am not technical enough to
understand exactly what you mean.

Would like to try again if you can delta from what I have done and tell me
where to go.

Thanks, Dick

 

[Charlie Tame]

Hi Dick, what you need to type in the command window is just the word
netstat then a single space and the rest as Robert mentioned.

You should get something like this

UDP 127.0.0.1:1027 *:* 1816
IAS
[svchost.exe]

UDP 127.0.0.1:1029 *:* 184
WINS
[wins.exe]


It tells you what program is trying to access what using which "Port" on the
machine - some programs as you can see from mine are supposed to access
127.0.0.1 which is the IP address reserved for your machine, my machine,
everybody's machine. 127.0.0.1 always is the machine talking to itself.

The > Robert used in the next part of the line simply redirects the output
from Netstat to a file called whatever name.txt you put after the > else it
will all shoot up the screen too fast to read.

Another thing you can do is try this link.

http://207.46.225.60/

It should take you to the same page as thins link

http://www.microsoft.com/

If the first link works but the second doesn't there could be a problem with
your "Hosts" file or something else left over from spyware which is what
often breaks the XP "Sockets" that you fixed. By default there's only one
demonstration entry in the hosts file so if you can do a search for a file
called "HOSTS" with no extension and there's more than the obvious example
maybe that is the trouble and you can rename it HOSTS.OLD or something and
try again.

(Not trying to interfere, just trying to help out in case Robert's gone to
bed for the night

Charlie

Robert, I am not real sure what you are asking me to do -- here is
what I did and what I got.

I went to Start, Run, Cmd, Enter and I think this take to what you called
a "cmd window".

I then entered: netstat -anobv >netstat.txt notepad netstat.txt
and Enter

I got -- Display Protocol Statistic and Current TCP/IP Network
Connections

and a long formula explanation under it -- NETSTAT [-a] [-b] . . . . .
[interval]

then the definition of each element of the formula: -a definition etc.
-b
definition etc.

The find -- I did a right click in the notepad window, got a Find
popup --- the entry area would not accept data.

Net is I tried to do what you indicated -- but am not technical enough to
understand exactly what you mean.

Would like to try again if you can delta from what I have done and tell me
where to go.

Thanks, Dick

You could have that symptom if you have a local proxy defined
(e.g. an http filter) but it isn't running.

Open a cmd window and enter:

netstat -anobv >netstat.txt
notepad netstat.txt

Then do finds in the Notepad window for 127

If you find any the process name should be listed below it in brackets
Or use tasklist /fi "PID eq ppp"
(where ppp is the PID listed on the same line you find the 127)
or just Task Manger's Processes tab with the PID column enabled
to make sure you can identify the program which is using the listed port.


Good luck

Robert Aldwinckle

 

[Dick Harrison]

Guys, I am trying. How do I get to the "command window"? Do I then type:*
netstat -anobv >netstat.txt notepad netstat.txt * Is this typed all as
one line or is the *notepad netstat.txt* on a second line? What next?
Enter or ?

I tried http://207.46.225.60/ and http://www.microsoft.com/ - neither go
to the a web site - I get
The page cannot be displayed
The page you are looking for is currently unavailable. The Web site
might be experiencing technical difficulties, or you may need to adjust your
browser settings.

for both. In the lower left of the screen - the correct URL is displayed
for a fraction of a second -- then DONE and the above appears.

Re the HOST file -- I am familiar with this -- and it has no entries in it.
(just 127.0.0.1 local host)

Thanks for you time and patients with me,

Dick

Hi Dick, what you need to type in the command window is just the word
netstat then a single space and the rest as Robert mentioned.

You should get something like this

UDP 127.0.0.1:1027 *:* 1816
IAS
[svchost.exe]

UDP 127.0.0.1:1029 *:* 184
WINS
[wins.exe]


It tells you what program is trying to access what using which "Port" on
the machine - some programs as you can see from mine are supposed to
access 127.0.0.1 which is the IP address reserved for your machine, my
machine, everybody's machine. 127.0.0.1 always is the machine talking to
itself.

The > Robert used in the next part of the line simply redirects the output
from Netstat to a file called whatever name.txt you put after the > else
it will all shoot up the screen too fast to read.

Another thing you can do is try this link.

http://207.46.225.60/

It should take you to the same page as thins link

http://www.microsoft.com/

If the first link works but the second doesn't there could be a problem
with your "Hosts" file or something else left over from spyware which is
what often breaks the XP "Sockets" that you fixed. By default there's only
one demonstration entry in the hosts file so if you can do a search for a
file called "HOSTS" with no extension and there's more than the obvious
example maybe that is the trouble and you can rename it HOSTS.OLD or
something and try again.

(Not trying to interfere, just trying to help out in case Robert's gone to
bed for the night

Charlie

Robert, I am not real sure what you are asking me to do -- here is
what I did and what I got.

I went to Start, Run, Cmd, Enter and I think this take to what you called
a "cmd window".

I then entered: netstat -anobv >netstat.txt notepad netstat.txt
and Enter

I got -- Display Protocol Statistic and Current TCP/IP Network
Connections

and a long formula explanation under it -- NETSTAT [-a] [-b] . . . . .
[interval]

then the definition of each element of the formula: -a definition etc.

-b definition etc.

The find -- I did a right click in the notepad window, got a Find
popup --- the entry area would not accept data.

Net is I tried to do what you indicated -- but am not technical enough to
understand exactly what you mean.

Would like to try again if you can delta from what I have done and tell
me where to go.

Thanks, Dick

Ricky, I downloaded WinSock XP Fix on my laptop to a memory stick -
then to
my desktop and ran it. If found corruption in my network, repaired it,
restarted. When I tried to access the internet -- same results. I run
WinSock again and same corruption is present. I noticed that when I
try to
access my homepage the first thing that appears in the lower left of
the
screen is 127.0.0.1 - where it would usually have the site address I am
accessing.


You could have that symptom if you have a local proxy defined
(e.g. an http filter) but it isn't running.

Open a cmd window and enter:

netstat -anobv >netstat.txt
notepad netstat.txt

Then do finds in the Notepad window for 127

If you find any the process name should be listed below it in brackets
Or use tasklist /fi "PID eq ppp"
(where ppp is the PID listed on the same line you find the 127)
or just Task Manger's Processes tab with the PID column enabled
to make sure you can identify the program which is using the listed
port.


Good luck

Robert Aldwinckle
---



I do not know what "spyware" to try -- see below I have not found
anything
to delete -- so something is not regenerating itself.

Any advise -- what about Hijack This?

I did not mention, but I do use Norton GoBack -- which I have reverted
to a
time when the system was working OK. So the code should be OK -- but
the
registers corrupted or ????

Comments??? Suggestions ???

Try this and see if it helps..

http://www.snapfiles.com/get/winsockxpfix.html

I am running IE V 6.2.2900.2180. IE will not connect (access) a
www.xxx or
http sites. It will connect to secure sites (https) and Outlook
Express
email works fine. I think this means that port 443 (secure internet)
and
21/25 (email) are OK but port 80 (standard internet) is broken.

It worked last night, but not this morning. I am through a Lynksys
router,
so I had a log of outgoing messages -- standard internet messages do
not
reach the router. I also can look at my cable modem performance -
this does
not work - so command is not getting from desktop to the cable mode.
I have
a laptop attached to the router and it works OK in all cases. I have
taken
the router out of the network (cable modem direct to desktop) --
nothing
changes.

I also shut down my firewall (ZoneAlarm) -- no help. I have tried
using the
"ping" command - cannot find the host.

I have XP auto updates downloaded, but not installed -- so no activity
re XP
updates.
I use update MS Anti-Spyware, Spybot S&D, Spy Blaster, Ad Aware and
SpySweeper.
Virus protection is Norton. Firewall is ZoneAlarm. All are updated
frequently - MS Anti-Spyware
and SpySweeper run every day (at 1 and 2 a.m.). They both ran in the
time between things
working and not working.

I have run all of the above and no problem identified. I also ran CW
Shredder.

Has anyone experience this problem or have guidance on how to correct.

If this is not the correct Newsgroup for this problem - please let me
know
where to go.

Thanks, Dick

 

[Robert Aldwinckle]

Robert, I am not real sure what you are asking me to do -- here is what
I did and what I got.

I went to Start, Run, Cmd, Enter and I think this take to what you called a
"cmd window".

I then entered: netstat -anobv >netstat.txt notepad netstat.txt and
Enter

Dick,

That was meant to be two lines to represent two commands
entered one at a time, the second after the first.

E.g. in your cmd window command line
(beside the > prompt character) type:

netstat -anobv >netstat.txt

then press Enter. As Charlie mentioned the output filter creates
a text file out of the output from the command.

An alternative to saving the output and examining it via Notepad
would be to just issue the netstat command with its switches:

netstat -anobv

but then your cmd window would have to be large enough to contain
all the output the command would generate and you would have to know
about the cmd window's right-click, Find... command. So I thought
that saving the output and examining it more conventionally might be
easier for you to understand.


The second line executes notepad.exe and gives it a command line
operand of the same filename that was just created by the first command.
An alternative would be just to use Notepad (or any text browser) any
way that you normally would look at a particular text file.


An alternative which I considered giving you would execute both commands
in one command line expression. The ampersand character (&) in the
cmd language represents command concatentation:

netstat -anobv >netstat.txt & notepad.exe netstat.txt

I thought the ampersand might be more confusing than the two lines
but perhaps not. In retrospect I guess I should have separated them
both by a non-indented "and" (on a separate line.) Sometimes I do do that.

;}


HTH

Robert
---

 

[myintmgmg]

my IE problem

Dear

My IE 6 gave me a problem, when I go to IE it starts download something from yahoo file as of my default homepage is www.yahoo.com and also can not change the default homepage. It will automatically restore the www.yahoo.com when i changed to defaults as blank.

I have checked with Adaware Se and norton antivirus, nothing has found.

Kindly answer to me how can I fix the problem

Thanks you very much in advance.
Mg Mg

 

[Dick Harrison]

I am running XP Home SP2 and IE 6.2.2900.2180 - both are kept up to date.

My problem is the IE will not connect to most internet
sites - www.xxx (http sites) it will not connect to - but it will connect to
https (secure) sites. Also email works fine (Outlook Express). I have
found out that email port ?? and secure internet (https) port 443 work ok
but the "standard" http internet port 80 does not.

So it seems the problem is isolated to port 80.

Below is what I have done to try and correct the problem.

1) I have a Lynksys router. I cabled my desktop directly to the cable (I
run RoadRunner) modem. Problem still existed
2) I ran Norton GoBack to a point in time where the internet was working
correctly. Problem still existed.
3) I have installed and up-to date the following: Zone Alarm, Norton Virus,
MS Antispyware, Spybot S&D, Ad-Aware, Spyblaster, SpySweeper and CWShredder.
I checked for updates on all and ran them. Nothing identified for any product. MS Antispyware and SpySweeper run automatically early every morning.
They had run between the time the internet was working and when it was not - nothing reported.
4) I checked my Hosts file - it has no entries
5) Ran Winsock XP Fix and it identified "corruption" in the network. I
repaired it and restarted as instructed. I tried the internet - problem
still existed. I ran Winsock XP Fix again and the corruption has returned.

When I try and access a non secure internet site in the lower left of the screen sometimes I get the "opening page site URL" will flash and then DONE appears; and sometime only the redirect 127.0.0.1 The page I get is - as follows

The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings. ETC. ETC.


I do have my laptop - which works fine through the same router - so I can
access the Internet. I am sending this via the laptop as I cannot get to your site with the problem system.

This is my first post to this Newsgroup. Hopefully is followed your request to do diagnostics prior to sending the HiJackThis log.

If I need to do more -- let me know what to do and I will. Look forward to your guidance on how to repair my problem

Thank, Dick

Logfile of HijackThis v1.99.1
Scan saved at 10:02:02 AM, on 10/7/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\DELLMMKB.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Cloudmark\SpamNet\OE\snoe.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
C:\Program Files\Pyrenean\eDexter\eDexter.exe
C:\WINDOWS\Nhksrv.exe
C:\Program Files\MSWorks\Calendar\WKCALREM.EXE
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
C:\Program Files\Netropa\OSD.exe
C:\PROGRA~1\NORTON~1\NORTON~3\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
C:\PROGRA~1\NORTON~1\NORTON~3\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Documents and Settings\Dick\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by AT&T WorldNet Service
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Program Files\E-Book Systems\FlipViewer\fplaunch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IE_PopupBlocker Class - {656EC4B7-072B-4698-B504-2A414C1F0037} - C:\Program Files\AT&T Worldnet Accelerator\prpl_IePopupBlocker.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\downloaded program files\googletoolbar_en_1.1.70-deleon.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\downloaded program files\googletoolbar_en_1.1.70-deleon.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\DELLMMKB.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [AHQInit] C:\Program Files\Creative\SBLive\Program\AHQInit.exe
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Startup: eDexter.lnk = C:\Program Files\Pyrenean\eDexter\eDexter.exe
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\MSWorks\Calendar\WKCALREM.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Camio Viewer 2000.lnk = C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
O4 - Global Startup: Cloudmark Desktop for Outlook Express.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Norton GoBack.lnk = C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\windows\downloaded program files\GoogleToolbar_en_1.1.70-deleon.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://c:\windows\downloaded program files\GoogleToolbar_en_1.1.70-deleon.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\windows\downloaded program files\GoogleToolbar_en_1.1.70-deleon.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Refresh Pa&ge with Full Quality - C:\Program Files\AT&T Worldnet Accelerator\pac-page.html
O8 - Extra context menu item: Refresh Pi&cture with Full Quality - C:\Program Files\AT&T Worldnet Accelerator\pac-image.html
O8 - Extra context menu item: Si&milar Pages - res://c:\windows\downloaded program files\GoogleToolbar_en_1.1.70-deleon.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page - res://c:\windows\downloaded program files\GoogleToolbar_en_1.1.70-deleon.dll/cmtrans.html
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.worldnet.att.net
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (sys Class) - http://www.pcpitstop.com/dell/site/PCPitStop.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://64.124.45.181/downloads/ccpm_0237.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {34805D32-AD89-469E-8503-A5666AEE4333} - http://207.188.7.150/233228f7274160b29d03/netzip/RdxIE.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {67085ECE-F45C-482A-B47B-30B5214EA18E} (AtlFlip Class) - http://www.flipviewer.com/exe/fvlite.cab
O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/en/deleon/1.1.56-deleon/GoogleNav.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1123683833968
O16 - DPF: {71CA4411-45EC-4608-B9D7-6D4B6A9D1BB4} (Attenza System Profiler) - http://service.dell.com/dell/SystemProfiler.cab
O16 - DPF: {72C23FEC-3AF9-48FC-9597-241A8EBDFE0A} (InstallShield International Setup Player) - http://ftp.hp.com/pub/automatic/player/isetupML.cab
O16 - DPF: {76D90D08-EAB7-46D8-BF99-87445BF59E72} (SystemInfo Class) - http://directv.direcway.com/dwayready/dpcsysinfo.cab
O16 - DPF: {8E28B3A9-FE83-45D1-B657-D5426B81A121} (CustomerCtrl Class) - http://cs5b.instantservice.com/jars/customerxsigned33.cab
O16 - DPF: {99B6E512-3893-4155-9964-8EB8E06099CB} (WebSpyWareKiller Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/WebSWK.cab
O16 - DPF: {AECD14A8-F662-11D1-A395-00805F535788} (Plotwon Control) - http://www.investors.com/member/ocx/plotwon.ocx
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://knightridderdigital.webex.com/client/latest/webex/ieatgpc.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} -
O16 - DPF: {FA945BB6-9D37-43FC-9B2A-AF09F56CBBF0} (moDiagCollectionActiveX Object) - http://www.musicmatch.com/form/support/tech/diagnostics/cabs/DiagCollectionControl.cab
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: GBPoll - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~3\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~3\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
END

I am running IE V 6.2.2900.2180. IE will not connect (access) a www.xxx or
http sites. It will connect to secure sites (https) and Outlook Express
email works fine. I think this means that port 443 (secure internet) and
21/25 (email) are OK but port 80 (standard internet) is broken.

It worked last night, but not this morning. I am through a Lynksys router,
so I had a log of outgoing messages -- standard internet messages do not
reach the router. I also can look at my cable modem performance - this does
not work - so command is not getting from desktop to the cable mode. I have
a laptop attached to the router and it works OK in all cases. I have taken
the router out of the network (cable modem direct to desktop) -- nothing
changes.

I also shut down my firewall (ZoneAlarm) -- no help. I have tried using the
"ping" command - cannot find the host.

I have XP auto updates downloaded, but not installed -- so no activity re XP
updates.

I use update MS Anti-Spyware, Spybot S&D, Spy Blaster, Ad Aware and SpySweeper.
Virus protection is Norton. Firewall is ZoneAlarm. All are updated frequently - MS Anti-Spyware
and SpySweeper run every day (at 1 and 2 a.m.). They both ran in the time between things
working and not working.

I have run all of the above and no problem identified. I also ran CW Shredder.

Has anyone experience this problem or have guidance on how to correct.

If this is not the correct Newsgroup for this problem - please let me know
where to go.

Thanks, Dick