‎HJT for review.....internet problem and think its virus related

Start a discussion

UNSOLVED

CHCarriersLLC

updated

20 years ago

C

CHCarriersLLC

152 Posts

0

4996

December 16th, 2006 22:00

HJT for review.....internet problem and think its virus related

Hi,

I use a Sprint broadband card to connect to the internet and today it would sign on, but then after appx 5 minutes, it would kick me offline for no apparent reason. Sprint has no clue and says everything appears to be ok so I imagine its a virus messing with me. I updated and ran Avast, AdAware and S&D and found just minor things wrong, fixed them all, rebooted and still have the same problem staying online. Figured I'd post a HJT to see if you guys/gals can see anything from it.

As always, thanks for your help,

Jason

Logfile of HijackThis v1.99.1
Scan saved at 7:05:20 PM, on 12/16/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCMUtilityService.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINNT\system32\PRPCUI.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINNT\System32\spool\DRIVERS\W32X86\3\LMPDPSRV.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Lexmark X125\LEX125SU.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\PokerStars\PokerStars.exe
C:\Program Files\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCM3.exe
C:\Documents and Settings\administrator\Desktop\HJT\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LMPDPSRV] C:\WINNT\System32\spool\DRIVERS\W32X86\3\LMPDPSRV.EXE
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Lexmark X125 Settings Utility.lnk = C:\Program Files\Lexmark X125\LEX125SU.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {02CA9974-B6AC-497E-A371-73580432B0F6} (Eyeball Video Message Control) - http://wildmatch.com/ChatSource/hVideoContol.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cab
O16 - DPF: {4B1A4A31-8845-11D5-9769-00B0D071D434} (Avaya ICM Client) - https://chat.choicehotels.com/icm/caller.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by112fd.bay112.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://72.32.179.44/filter/cameraviewer/isetup.cab
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} (JuniperSetupSP1 Control) - https://webaccess.schneiderlogistics.com/dana-cached/setup/JuniperSetupSP1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0EC02A8F-E8C1-4E33-8F08-2CA2AB7BA060}: NameServer = 68.28.250.11 68.28.242.11
O17 - HKLM\System\CS1\Services\Tcpip\..\{0EC02A8F-E8C1-4E33-8F08-2CA2AB7BA060}: NameServer = 68.28.250.11 68.28.242.11
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: OSCM Utility Service - Sprint Spectrum, L.L.C - C:\Program Files\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCMUtilityService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe

R
RKinner
2 Intern
•
5851 Posts
1707
0
Posted December 18th, 2006 19:00
Hi Jason,

This is Ron. I remember working with you many months ago.

Your log looks clean. Let me give you a few tests to run which might isolate the problem.

When you first log on and it's working do this:

Start, Run, cmd, OK to bring up the black cmd screen. Type:

ipconfig /all

(Note the Default Gateway IP (let's call it A.B.C.D) and then DNS IP (E.F.G.H.)

ping A.B.C.D

(Zone alarm will complain the first time you do this so tell it to Allow and to remember)

(do you get Replies or does it time out ?)

tracert -d E.F.G.H

(Zone alarm will complain the first time you do this so tell it to Allow and to remember)

net start

nslookup dell.com

(save the output of the 5 tests. You can rightclick on the blue bar at the top of the cmd window and select Edit then Select All then Edit, Copy and it will copy the text. Then open a notepad by typing)

notepad

(then Edit, Paste and Save the file somewhere like your desktop.)

Then when it fails repeat the 5 tests and post the results of both as a reply.

Ron
C
CHCarriersLLC
152 Posts
1707
0
Posted December 18th, 2006 21:00
Hey Ron! Hope all has been well with you sir.

I ran those tests, but couldnt get one to go thru.. The tracert-d one... I typed it in tracert-d space then the numbers and it failed twice, but I believe its because I didnt put it in correctly. Below is the test results for the others..

In the meantime, let me give you some new info.

When I discovered the problem, I was attempting to play an online flight simulator called Aces High II (HTC) and hadn't tried it without it being on(I'm addicted :smileyvery-happy:). After having more time to play around with this thing, I've discovered that my internet connection is fine until appx 2 minutes after I open that program. I can get into a plane and make it halfway down the runway and bam, it boots me off the game and it kicks my Sprint card off too. The game also has an offline part to it for just practice and even if I just go into that while my intenet conneciton is open, it will still boot me off Sprint but I can still play the game because I'm offline. Any other time the internet is on it works just fine until I open this game.

I emailed the support people for the game and they are real helpful.

His reply:"Aces High II cannot terminate the Internet connection in of itself. There
is no mechanism to allow the game to do that. More than likely, the game is stomping on some spyware which is causing it. Just a guess though."

Over the weekend I uninstalled and then reinstalled the game and still have the same problem. Im at a total loss here. Never had anything like this happen to me. Its normally just viruses and spyware for me and so far those have been a breeze to fix with your help.  God knows I'd still have Spy Sherriff if it wasn't for you guys and gals:smileyhappy:

Let me know what you think of my latest problem

Jason

________________________________________________________________________________

Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\administrator>ipconfig/all

Windows 2000 IP Configuration

       Host Name . . . . . . . . . . . . : chcarriers
       Primary DNS Suffix . . . . . . . :
       Node Type . . . . . . . . . . . . : Broadcast
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

       Media State . . . . . . . . . . . : Cable Disconnected
       Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast Ethernet
Controller (3C905C-TX Compatible)
       Physical Address. . . . . . . . . : 00-08-74-9E-C0-80

PPP adapter Sprint PCS Vision - Novatel Wireless:

       Connection-specific DNS Suffix . :
       Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
       Physical Address. . . . . . . . . : 00-53-45-00-00-00
       DHCP Enabled. . . . . . . . . . . : No
       IP Address. . . . . . . . . . . . : 70.10.57.121
       Subnet Mask . . . . . . . . . . . : 255.255.255.255
       Default Gateway . . . . . . . . . : 70.10.57.121
       DNS Servers . . . . . . . . . . . : 68.28.250.11
                                           68.28.242.11
       NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Documents and Settings\administrator>ping 70.10.57.121

Pinging 70.10.57.121 with 32 bytes of data:

Reply from 70.10.57.121: bytes=32 time<10ms TTL=128
Reply from 70.10.57.121: bytes=32 time<10ms TTL=128
Reply from 70.10.57.121: bytes=32 time<10ms TTL=128
Reply from 70.10.57.121: bytes=32 time<10ms TTL=128

Ping statistics for 70.10.57.121:
   Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
   Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Documents and Settings\administrator>tracert-d 60.20.250.11
'tracert-d' is not recognized as an internal or external command,
operable program or batch file.

C:\Documents and Settings\administrator>tracert-60.20.250.11
'tracert-60.20.250.11' is not recognized as an internal or external command,
operable program or batch file.

C:\Documents and Settings\administrator>net start
These Windows 2000 services are started:

  Ati HotKey Poller
  Automatic Updates
  avast! Antivirus
  avast! iAVS4 Control Service
  avast! Mail Scanner
  avast! Web Scanner
  COM+ Event System
  Computer Browser
  DHCP Client
  Distributed Link Tracking Client
  DNS Client
  Event Log
  IPSEC Policy Agent
  Logical Disk Manager
  Network Connections
  OSCM Utility Service
  Plug and Play
  Print Spooler
  Protected Storage
  Remote Access Connection Manager
  Remote Procedure Call (RPC)
  Remote Registry Service
  Removable Storage
  RunAs Service
  Security Accounts Manager
  Server
  Still Image Service
  System Event Notification
  Task Scheduler
  TCP/IP NetBIOS Helper Service
  Telephony
  TrueVector Internet Monitor
  Windows Management Instrumentation
  Windows Management Instrumentation Driver Extensions
  Workstation

The command completed successfully.

C:\Documents and Settings\administrator>nslookup dell.com
Server: atlndns01.spcsdns.net
Address: 68.28.250.11

Non-authoritative answer:
Name:    dell.com
Addresses: 143.166.224.244, 143.166.83.38

C:\Documents and Settings\administrator>
R
RKinner
2 Intern
•
5851 Posts
1707
0
Posted December 19th, 2006 01:00
It should have been tracert SPACE -d SPACE 68.28.250.11.

Now we have a baseline and we know what to expect when it is working. If you can get the same info when it is broken that would help narrow down the problem.

You might also look in the Event Log and see if there are any red errors at the time the link dropped.

Start, Run, eventvwr.msc, OK and select System and look for red marked errors with a time stamp near the time your problem happened. Then also look under Application. Open an event and copy it with the bottom of the 3 buttons then move to a reply and Edit, Paste. I'm thinking the program could trigger the antiworm software that will pull the plug on a connection if too many outgoing connections are made at the same time.

Despite what your helpful support people said you might look and see if there is a forum that discusses the game somewhere. Someone else may have the same problem.

Ron
C
CHCarriersLLC
152 Posts
1707
0
Posted December 19th, 2006 03:00
ok, i did the tracert thing. i went thru all the steps in your first post and came up with different numbers than you posted for me to run this time so the 1st and 2nd are the numbers that showed up this time when i did ipconfig/all and the 3rd set is the numbers you posted for me to run in your last post. i didnt think about it and arent really sure, but i was online when i did these tests.. didnt know if i was supposed to sign off.

im gonna post this then reply in a new post to the other stuff you asked.

C:\Documents and Settings\administrator>ipconfig/all

Windows 2000 IP Configuration

       Host Name . . . . . . . . . . . . : chcarriers
       Primary DNS Suffix . . . . . . . :
       Node Type . . . . . . . . . . . . : Broadcast
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

       Media State . . . . . . . . . . . : Cable Disconnected
       Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast Ethernet
Controller (3C905C-TX Compatible)
       Physical Address. . . . . . . . . : 00-08-74-9E-C0-80

PPP adapter Sprint PCS Vision - Novatel Wireless:

       Connection-specific DNS Suffix . :
       Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
       Physical Address. . . . . . . . . : 00-53-45-00-00-00
       DHCP Enabled. . . . . . . . . . . : No
       IP Address. . . . . . . . . . . . : 70.10.255.234
       Subnet Mask . . . . . . . . . . . : 255.255.255.255
       Default Gateway . . . . . . . . . : 70.10.255.234
       DNS Servers . . . . . . . . . . . : 68.28.154.11
                                           68.28.146.11
       NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Documents and Settings\administrator>tracert -d 68.28.154.11

Tracing route to 68.28.154.11 over a maximum of 30 hops

1   322 ms   300 ms   300 ms 68.28.153.69
2     *        *        *     Request timed out.
3   441 ms   580 ms   438 ms 68.28.13.242
4   430 ms   438 ms   439 ms 68.28.0.130
5   457 ms   439 ms   579 ms 68.28.13.218
6     *        *        *     Request timed out.
7     *        *        *     Request timed out.
8     *        *        *     Request timed out.
9     *        *        *     Request timed out.
10     *        *        *     Request timed out.
11     *        *        *     Request timed out.
12     *        *        *     Request timed out.
13     *        *        *     Request timed out.
14     *        *        *     Request timed out.
15     *        *        *     Request timed out.
16     *        *        *     Request timed out.
17     *        *        *     Request timed out.
18     *        *        *     Request timed out.
19     *        *        *     Request timed out.
20     *        *        *     Request timed out.
21     *        *        *     Request timed out.
22     *        *        *     Request timed out.
23     *        *        *     Request timed out.
24     *        *        *     Request timed out.
25     *        *        *     Request timed out.
26     *        *        *     Request timed out.
27     *        *        *     Request timed out.
28     *        *        *     Request timed out.
29     *        *        *     Request timed out.
30     *        *        *     Request timed out.

Trace complete.

C:\Documents and Settings\administrator>tracert -d 68.28.146.11

Tracing route to 68.28.146.11 over a maximum of 30 hops

1     *     1042 ms   339 ms 68.28.153.69
2     *        *        *     Request timed out.
3   447 ms   459 ms   459 ms 68.28.28.114
4   478 ms   475 ms   659 ms 68.28.27.130
5     *        *        *     Request timed out.
6     *        *        *     Request timed out.
7     *        *        *     Request timed out.
8     *        *        *     Request timed out.
9     *        *        *     Request timed out.
10     *        *        *     Request timed out.
11     *        *        *     Request timed out.
12     *        *        *     Request timed out.
13     *        *        *     Request timed out.
14     *        *        *     Request timed out.
15     *        *        *     Request timed out.
16     *        *        *     Request timed out.
17     *        *        *     Request timed out.
18     *        *        *     Request timed out.
19     *        *        *     Request timed out.
20     *        *        *     Request timed out.
21     *        *        *     Request timed out.
22     *        *        *     Request timed out.
23     *        *        *     Request timed out.
24     *        *        *     Request timed out.
25     *        *        *     Request timed out.
26     *        *        *     Request timed out.
27     *        *        *     Request timed out.
28     *        *        *     Request timed out.
29     *        *        *     Request timed out.
30     *        *        *     Request timed out.

Trace complete.

C:\Documents and Settings\administrator>tracert -d 68.28.250.11

Tracing route to 68.28.250.11 over a maximum of 30 hops

1   334 ms   339 ms   339 ms 68.28.153.69
2     *        *        *     Request timed out.
3   407 ms   557 ms   399 ms 68.28.243.55
4   414 ms   419 ms   419 ms 68.28.240.126
5     *        *        *     Request timed out.
6     *        *        *     Request timed out.
7     *        *        *     Request timed out.
8     *        *        *     Request timed out.
9     *        *        *     Request timed out.
10     *        *        *     Request timed out.
11     *        *        *     Request timed out.
12     *        *        *     Request timed out.
13     *        *        *     Request timed out.
14     *        *        *     Request timed out.
15     *        *        *     Request timed out.
16     *        *        *     Request timed out.
17     *        *        *     Request timed out.
18     *        *        *     Request timed out.
19     *        *        *     Request timed out.
20     *        *        *     Request timed out.
21     *        *        *     Request timed out.
22     *        *        *     Request timed out.
23     *        *        *     Request timed out.
24     *        *        *     Request timed out.
25     *        *        *     Request timed out.
26     *        *        *     Request timed out.
27     *        *        *     Request timed out.
28     *        *        *     Request timed out.
29     *        *        *     Request timed out.
30     *        *        *     Request timed out.

Trace complete.

C:\Documents and Settings\administrator>
C
CHCarriersLLC
152 Posts
1707
0
Posted December 19th, 2006 03:00
ok, when you say if i can get the same info while its broken, that would help? want me to be online, go into the game, get booted and then do ipconfig/all and post it, or something else..

these are out of the system log

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date:  12/18/2006
Time:  1:46:46 PM
User:  N/A
Computer: CHCARRIERS
Description:
The following boot-start or system-start driver(s) failed to load:
Aavmker4
aswTdi
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip
vsdatant

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date:  12/18/2006
Time:  5:06:25 PM
User:  N/A
Computer: CHCARRIERS
Description:
The Remote Access Connection Manager service depends on the Telephony service which failed to start because of the following error:
No attempts to start the service have been made since the last boot.

These below are from the app log.   For some reason, I have a bunch of errors in it. An average of I'd guess 1 per day from 12-18-06 back to 8-10-06.   and some of those days have a couple per day... not sure what that means, but keep in mind this particular problem is only 3 or 4 days old. the 2 posted below and the 2 above from the system log are all from 12-18-06.

Event Type: Error
Event Source: rasctrs
Event Category: None
Event ID: 2001
Date:  12/18/2006
Time:  1:47:11 PM
User:  N/A
Computer: CHCARRIERS
Description:
The description for Event ID ( 2001 ) in Source ( rasctrs ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: The event log file is corrupt..

Event Type: Error
Event Source: PerfDisk
Event Category: None
Event ID: 1000
Date:  12/18/2006
Time:  1:47:11 PM
User:  N/A
Computer: CHCARRIERS
Description:
Unable to open the Disk performance object. Status code returned is data DWORD 0.
Data:
0000: 70 10 00 00               p...

When I said those guys were helpful, I was being sarcastic. To me, his reply looks like he doesn't give a hoot if I get it fixed or not.   I did post this morning on their board just to see if anyone else was having a similar problem, but haven't had any replies yet. If anybody does, I will let you know asap.

Have a good night,

Jason
R
RKinner
2 Intern
•
5851 Posts
1707
0
Posted December 19th, 2006 12:00

Right. Next time it stops working run the same tests and that will help me isolate the problem.

The first set of errors are odd. Looks like nothing wanted to work on that boot. AVAST didn't load, neither did Zone Alarm and neither did the TCPIP so I don't see how you could have gotten on line that time. Do you get this error often?

You might check with Avast and Zone Alarm and see if they have updated programs just to rule them out. Also check with Microsoft to see if they have any new drivers. (Go to the update site update.microsoft.com then do the Custom (I think that's right. Not the Express option anyway. At this company I do not have Admin rights so can't see the options.) Then look to see if they have anything that looks like a new driver or a fix to XP and install it.

Check the Device Manager for problems: (Start) then rightclick on My Computer and select Manage. Then Device Driver

click on each of the + marks to open each item. Look for red marked items and uninstall them or delete them and reboot. Do they come back with red marks?

The App errors are just a bug. You can fix it:

Start, Run, services.msc, OK to bring up the Services window. Select Standard then look to see if the following services are set to manual.

Telephony,

Remote Access Connection Manager,

Remote Access Auto Connection Manager

If they are set to Manual then:

1.Click Start, click Run, type regedit in the Open box, and then click OK.2.Click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services \RemoteAccess\Performance
3.On the Edit menu, point to New, and then click DWORD Value.4.In the New Value #1 box, type Disable Performance Counters, and then press ENTER.5.Right-click Disable Performance Counters, and then click Modify.6.In the Value data box, type 1, and then click OK.
Quit Registry Editor, and then restart the computer.

A few other generic checks to do:

A Disk Check:

Run a disk error check and see if your harddrive has problems. Start, My Computer then right click on Local Drive C and select Properties (verify that it shows you have at least 15% free) then Tools, Error-Checking => Check Now. Check the 2 boxes then Start. It will tell you it can't do it now but will be glad to schedule it for your next boot. Tell it OK. When you reboot it will check your drive which usually takes 30-60 minutes. Sometimes it will even fix your problems while it is at it.

Memory Check:

Verify that you still have the same amount of memory as you did originally. (Start) then Open My Computer and select Help then about Windows. Is the physical memory about what you bought? Sometimes a single chip will fail and drop your memory in half.

Run a memory test.

http://oca.microsoft.com/en/windiag.asp

When it is running slow: rightclick on the clock and select Task Manager then select Processes. Click once or twice on the CPU column heading until you get the numbers at the top in that column. What are the top three processes and what % do they each take.

Ron

Message Edited by RKinner on 12-19-200608:09 AM
C
CHCarriersLLC
152 Posts
1707
0
Posted December 19th, 2006 13:00
When you said that zone alarm and avast didnt load, i had no idea. I never get start up errors(or any really) and as far as I know, everytime I've turned this on, everything has started up fine. Do any of those tests need to be done while conntected to the internet, or offline, or does it even matter?

Before I posted originally, I updated and then ran Avast, AdAware and S&D so they are all current.

I'm Win2k and I do the auto updates. Do I need to check the Windows website for drivers still? I checked the device driver thing and the only red mark was a Universal Serial Bus Controller--NEC PCI to USB Open Host Controller...I right clicked and was going to uninstall, but clicked enable and the red went away... Will reboot in a sec and see if it comes back.

All 3 of those app errors were set to manua. Going to do those after I post this but have a question first. Is it possible to use one's IP address to block them from something(like the flight sim)? If it is possible, can I change my ip address, or would I have to buy a new computer.

Gonna to the add fix, disk check, memory check and test and will post back in a few hours.

Jason
R
RKinner
2 Intern
•
5851 Posts
1707
0
Posted December 19th, 2006 13:00

This is the error that shows they didn't load.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date:  12/18/2006
Time:  1:46:46 PM
User:  N/A
Computer: CHCARRIERS
Description:
The following boot-start or system-start driver(s) failed to load:
Aavmker4
aswTdi
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip
vsdatant

Does it come at every load? It might be normal because you are no longer using the Ethernet connection. Don't know.

You should check for new software and drivers from Microsoft even with Win2000. They may tell you it is end of life and is no longer being supported but check anyway.

Not sure what you mean here:

" Is it possible to use one's IP address to block them from something(like the flight sim)? If it is possible, can I change my ip address, or would I have to buy a new computer."

Your IP address is assigned by the service provider in this case Sprint so it's not something you can control and it wouldn't make any difference if you got a new computer.

If you want to stop Flight sim from going to the internet then you could open Zone Alarm then under Programs (? I think that's right. Going by memory here) you can change the permissions from checks to X's. That will stop it from going out.

Ron
C
CHCarriersLLC
152 Posts
892
0
Posted December 19th, 2006 17:00
This is all taken after I got into the game and then got booted right back off. I did not re-connect to the internet before I did these.

Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\administrator>ipconfig/all

Windows 2000 IP Configuration

       Host Name . . . . . . . . . . . . : chcarriers
       Primary DNS Suffix . . . . . . . :
       Node Type . . . . . . . . . . . . : Broadcast
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

       Media State . . . . . . . . . . . : Cable Disconnected
       Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast Ethernet
Controller (3C905C-TX Compatible)
       Physical Address. . . . . . . . . : 00-08-74-9E-C0-80

C:\Documents and Settings\administrator>ping 70.10.255.234

Pinging 70.10.255.234 with 32 bytes of data:

Destination host unreachable.
Destination host unreachable.
Destination host unreachable.
Destination host unreachable.

Ping statistics for 70.10.255.234:
   Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
   Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Documents and Settings\administrator>tracert -d 68.28.154.11

Tracing route to 68.28.154.11 over a maximum of 30 hops

1 Destination host unreachable.

Trace complete.

C:\Documents and Settings\administrator>net start
These Windows 2000 services are started:

  Ati HotKey Poller
  Automatic Updates
  avast! Antivirus
  avast! iAVS4 Control Service
  avast! Mail Scanner
  avast! Web Scanner
  COM+ Event System
  Computer Browser
  DHCP Client
  Distributed Link Tracking Client
  DNS Client
  Event Log
  IPSEC Policy Agent
  Logical Disk Manager
  Network Connections
  OSCM Utility Service
  Plug and Play
  Print Spooler
  Protected Storage
  Remote Access Connection Manager
  Remote Procedure Call (RPC)
  Remote Registry Service
  Removable Storage
  RunAs Service
  Security Accounts Manager
  Server
  Still Image Service
  System Event Notification
  Task Scheduler
  TCP/IP NetBIOS Helper Service
  Telephony
  TrueVector Internet Monitor
  Windows Management Instrumentation
  Windows Management Instrumentation Driver Extensions
  Workstation

The command completed successfully.

C:\Documents and Settings\administrator>nslookup dell.com
*** Default servers are not available
Server: UnKnown
Address: 127.0.0.1

*** UnKnown can't find dell.com: No response from server

C:\Documents and Settings\administrator>

***********************************************************************************************************

Here is my system errors for today: (the same 3 below are on there 11 total times for today)

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date:  12/19/2006
Time:  12:59:35 PM
User:  N/A
Computer: CHCARRIERS
Description:
The TrueVector Internet Monitor service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7009
Date:  12/19/2006
Time:  10:18:51 AM
User:  N/A
Computer: CHCARRIERS
Description:
Timeout (30000 milliseconds) waiting for the TrueVector Internet Monitor service to connect.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date:  12/19/2006
Time:  10:18:11 AM
User:  N/A
Computer: CHCARRIERS
Description:
The DgiVecp service failed to start due to the following error:
The system cannot find the file specified.

Below is the app which is on there 4 times total today:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date:  12/19/2006
Time:  10:41:32 AM
User:  NT AUTHORITY\SYSTEM
Computer: CHCARRIERS
Description:
Windows cannot unload your registry file. If you have a roaming profile, your settings are not replicated. Contact your administrator.

DETAIL - Access is denied. , Build number ((2195)).

Jason
R
RKinner
2 Intern
•
5851 Posts
887
0
Posted December 19th, 2006 17:00
OK. The PPP adapter disappears between working and nonworking.

PPP adapter Sprint PCS Vision - Novatel Wireless:

       Connection-specific DNS Suffix . :
       Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
       Physical Address. . . . . . . . . : 00-53-45-00-00-00
       DHCP Enabled. . . . . . . . . . . : No
       IP Address. . . . . . . . . . . . : 70.10.57.121
       Subnet Mask . . . . . . . . . . . : 255.255.255.255
       Default Gateway . . . . . . . . . : 70.10.57.121
       DNS Servers . . . . . . . . . . . : 68.28.250.11
                                           68.28.242.11
       NetBIOS over Tcpip. . . . . . . . : Disabled

This may just mean that the link to Spint is down. This is not something I've ever really worked with.

How does it connect to your PC? Is this a USB connection or a does it plug into a PCMCIA slot?

Can you break it with something else? Let's try the download and upload tests on this page and see if it the link survives.

http://pcpitstop.com/internet/

Ron

HJT for review.....internet problem and think its virus related

Dell Support Resources

Latest Solutions

Upgrade Raid Drives in T430

Aurora R11, update BIOS via USB Flash Drive?

Dell U2723QE no longer works on latest Mac OS update 27.2.1 Golden Gate

OneDrive legacy folder still being used

How Much Practical Experience with SRDF and TimeFinder SnapVX Is Needed for the D-PVM-DS-01 Exam?