Bizarro Net Access Problem

[maharito]

Yeah, I hate SP-2. Always have, always will. I don't even have to be an advocate of DOS or maintaining old program functionality to have a serious bone with this behemoth.

I'm working on my grandma's comp (on-site, many miles from home). (Hey, I get free food out of it! So shove off! XD) Her comp is a rather new Compaq (Crap-paq?) Presario SR1403WM. The ISP is Charter (Michigan). They were using a Linksys router, but I straight-wired the Ethernet link to this comp from the cable modem (which has no brand markings on it ANYWHERE). And yes, I unplugged and replugged the modem after rearranging the network. The problem remains.

- All services involving the .NET Passport (MSN, Hotmail, MSNM, probably some others too) do not work at all. When trying to log into my Hotmail using the Web, I get an instant 'Page cannot be displayed' error. However, I can successfully access my Hotmail using Outlook Express.

- My trusty net issues checker, the P2P program eMule, not only refuses to pass the TCP/UDP test (even after using the program's own 'enable ports on internal firewall' button), but I cannot connect AT ALL, even using a LowID.

- AOL Instant Messenger still works completely, file transfers, Direct Connects and all.

Running Network Setup Wizard, replugging the modem, and changing the Windows Firewall settings (adding/removing programs and ports in Exceptions, disabling firewall) have had no effect at all on this issue. This problem seems vaguely familiar, and I squarely blame SP-2. However, this program was originally set up with SP-2, and I have reason to believe MSN Messenger worked at one point in time on it. I cannot remove the ah heck. I may be off-base, but it seems like I've dealt with this sort of thing before in my repairman experience... Maybe my running 30 hours straight is making me weak to find the solution...

Help?

Also worth noting--I lack Windows Update (Web) functionality on this computer, receiving a 'Cannot display the page necessary' error or something of the like.

The other computer that was on the network (when I was using the router to hook them both up) had no problems using the Windows Update. Deduction would put the problem within the computer, and not in the modem or the router.

(Note: The MSN Messenger's Troubleshoot function hangs on the process 'Key ports.' Yes, I know this would seem to point to Windows Firewall, but I already checked that out.)

 

[maharito]

 

[mechBgon]

Why did you remove the router? There goes a valuable outer line of defense. Anyway, see if it's a DNS issue. ipconfig /all and then ping the DNS servers. Might want to do the full "repair connection" thing in Windows. If that doesn't work, then do an actual RESET of the modem (assuming it's got a recessed RESET button) and repair connection again.

But the first thing I'd be doing for Grandma is to get that router back in place and create custom rules to block all the unnecessary ports in both directions. If it were me.

 

[maharito]

It's bare basics, brother. Take away all things that could be restraining network activity, BEFORE putting them back. Besides, she uses so few things online that she is at minimal risk--as long as she heeds my request not to check her e-mail till I'm done here u.u

Anyway, more info:

- Tried the 'Hotmail login fixer' someone made to fix a problem--no success.

- Using Spybot S&D didn't really help as I could not use the update feature. I get an 'Error #10061--Connection refused' error.

- Using all the tools in Spybot S&D did not have anything interesting to reveal, but at least she has (thank golly!) a normal LSP setup.

- Terminating opened processes also made no difference, as did trying to remove any oddball programs. She is miraculously clean of spyware at the moment. SP-2 cannot be uninstalled from her computer. u.u;;;;

STILL LOOKING FOR SOLUTION!

 

[mechBgon]

I hope I would be fired if I exposed my systems directly to the Internet, regardless of SP2, software firewalls, etc. But what would I know... :evil:

So you're saying that it was not working with OR without the router, is that correct? Tried the stuff I suggested already? Is the system able to get an IP and DNS info from the modem?

Also try these two links as a test:

http://vil.nai.com/vil/virus-4d.asp
http://67.97.80.71/vil/virus-4d.asp

Same link, one skips DNS and goes directly by IP. Incidentally, if you can reach the second link, then go ahead and download win_betaengdat.zip and unzip it to C:\McAfee, then execute the following command, which is all one line (despite it wrapping to two lines, it really is all one command):

C:\McAfee\scan.exe /adl /all /allole /analyze /del /dohsm /mailbox /manalyze /mime /html C:\report.html /panalyze /program /streams /unzip /winmem

Whee, full McAfee virus scan in progress

 

[maharito]

Hm, I believe you're onto something. (And yes, I know the dangers of exposing the computer to the Internet--I was merely simplifying the situation for someone who would not normally be at risk for anything.)

I think I have encountered this problem enough times before... Yes, the 'Repair' function habitually does not work. There must be something in this computer's internal configuration that's preventing it from seeing eye-to-eye with the modem. I will try setting up static local IP and see if there is any improvement in the performance.

Networking has always been my weak point *sigh* but thank you... Any further info on how to get the computer to do proper DNS activity or whatever is hampered, would be much appreciated!

The DNS servers ping just fine. I'm fairly convinced that this is a software issue. Like I said, I have encountered this exact problem before, and uninstalling SP-2 fixed it. Apparently, the problem first appeared (according to Grandma) when one of her friends came over and tried to fix her computer problems. Unfortunately, Grandma can't tell me much other than that.

 

[mechBgon]

You might try WinsockFix next, just for the heck of it... WinsockFix download at Major Geeks if you got a thumb drive you can transfer it with.

 

[maharito]

Hm, thanks a lot. I'll check this out. I highly suspected that the removal of some spyware Grandma had before I came (I can't find any now, but there are sure enough traces, and I know she had e-mail viruses at one point)...would've damaged her WinSock. I don't know enough about WinSock to even try anything with it.

*tries it*

 

[maharito]

*sigh* Nope. The program ran its course and reset the computer, but nothing changed.

For the heck of it, I switched to using the USB hookup to the Net instead of the Ethernet hookup. This, I hoped, would give me more information about the cable modem. Instead, all I got was a new device called 'USB Cable Modem 351000' with a manufacturer called 'brand'. Otherwise, absolutely no change in performance.

*grumble* Like I said, it's not a damaged LSP issue, as far as I can tell, but I'll go run the fixLSP program anyway...

STILL looking for solution.

 

[maharito]

Foo, nothing working so far. I'll try the anti-virus program just for the heck of it, and look at an HJT log.

 

[maharito]

Originally posted by: mechBgon
I hope I would be fired if I exposed my systems directly to the Internet, regardless of SP2, software firewalls, etc. But what would I know... :evil:

So you're saying that it was not working with OR without the router, is that correct? Tried the stuff I suggested already? Is the system able to get an IP and DNS info from the modem?

Also try these two links as a test:

http://vil.nai.com/vil/virus-4d.asp
http://67.97.80.71/vil/virus-4d.asp

Same link, one skips DNS and goes directly by IP. Incidentally, if you can reach the second link, then go ahead and download win_betaengdat.zip and unzip it to C:\McAfee, then execute the following command, which is all one line (despite it wrapping to two lines, it really is all one command):

C:\McAfee\scan.exe /adl /all /allole /analyze /del /dohsm /mailbox /manalyze /mime /html C:\report.html /panalyze /program /streams /unzip /winmem

Whee, full McAfee virus scan in progress

The links to the zip files on that site do not work. Though I can get to the site, something suggests that the ZIP files themselves are not there or the download server for that site is temporarily out of order.

STILL LOOKING.

 

[maharito]

For novelty's sake, the error number I get when trying to use Windows Update (Web) is Error number: 0x80072EFD. Running the solutions offered by Microsoft related to 'This error may occur if your Internet connection or configuration is preventing access to the Update site' (two solutions available) produced no success and did not produce any interesting discoveries or results.

 

[maharito]

AHA!!

Their Norton Internet Security is TOTALLY botched up. I'll have to reinstall it entirely. It was so botched up that you couldn't even tell that it was installed on the computer. Either a novice repairperson or an expert hacker was responsible for this.

 

[maharito]

Turns out that Grandma herself had tried to remove Norton because she hates it. That makes this decision pretty easy for me--AVG and Router from now on! XD

 

[RBBRMADE]

hehe...If you would have mentioned Norton Internet Security in the first post I would have helped you last nite!
I see more issues with NIS. The worst thing is that the issues can be unrelated to the internet connection.
I spent a few days recently troubleshooting a remote system that would not print to a HP AIO printer after a reboot. Printer properties would lockup, you name it. I finally uninstalled NIS and all is well.
That is one aggravating piece of software!

Glad you got it going!

Ron

 

[compso]

Bring another PC over to Granny's house and connect it to the internet. Try using the cable modem and router 1st then eliminate the router if you must but make sure you have a software based firewall enabled.

BTW, SP2 is usually fine. It's an unstable and cluttered OS environment that makes for a screwy SP2 install.

Oops late info!