Random Programs Not Connecting to the Internet

[NonOffensiveNameHere]

All of a sudden the other day a bunch of programs I use wont connect to the internet. The list is very sporatic and I don't know if it will help.

Programs that will connect.
AOL 8.0
Kazaa
IE

Programs that wont connect.
AOL 9.0
MIrc
Grokster
EMule
AIM **Fixed by having it scan for other hosts to connect to**
CounterStrike **Had to find a new host to get a server list but can't connect to any games**
I also Use AvantGo to sync my Ipaq with news sites and it won't connect either. IT uses port 80.

I have cable internet, no router, no Firewall, and Windows XP. The only thing I can think of is the other day I spent 2 hours getting rid of all the spyware/adware that was on my computer. I used SpyBot, Ad-Aware, and HiJack. I went on DSL reports and did a port scan and it rejected every packet and said my computer was very good. Somhow it got too secure.

I tried restarting the modem and computer and went into the LAN settings and made sure the built in "firewall" wasn't set weird.

I am using AVG which is up to date.

Any Help appreciated.

 

[yhelothar]

Do you have a router?

 

[Slikkster]

He said he doesn't have a router.

Now, how about this: Do you remember Spybot saying something about "Fixing Network Drivers"? Some people have been having a problem with it removing a needed network file thinking it's spyware.

Since you have XP, what I would do is use the "SFC" program to reinstall your needed system files, for starters.
SFC (System File Checker) takes into account all your hotfixes/service packs, so no worries there.

Put your XP CD in the CD Drive. Exit out of the install program if it pops up.

Click the Start Button. Click Run. In the Run box, type in (without quotes) "sfc /scannow". Make sure there's a space between sfc and /scannow. You should see a little rectangular box come up telling you that it's checking system files. It won't really tell you what's being fixed, and you know it's done when it disappears off the desktop. In other words, don't expect too much in the way of info from it! But it will make sure all your normal system files are back in place.

Reboot.

Try internet access.

Another thing: In this day and age, I'm not sure I'd be going on record saying I use Kazaa and Grokster, LOL.

If the sfc /scannow doesn't work for you, run HiJackThis and post the log here.

 

[NonOffensiveNameHere]

Ok I tried the scannow and it went through and all the programs still don't work. I don't have a XP cd because the way HP does it is that they give you a 40Gig hard drive and take up 8Gigs with an image of how it was shipped to you so if you need to back it up it justs copies over the image and leaves you with 32Gigs. It went through allright though.

Here is my HiJack Log. I see somthing called Bargain Buddy. That looks a little fishy.

Logfile of HijackThis v1.97.6
Scan saved at 5:14:31 PM, on 3/2/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\Smc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\PackethSvc.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\LXSUPMON.EXE
C:\PROGRA~1\INSTAN~1\INSTAN~1\IWCTRL.EXE
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\msbb.exe
C:\Program Files\Bargain Buddy\bin\bargains.exe
C:\WINDOWS\System32\lexpps.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\eMule\emule.exe
C:\Program Files\Microsoft ActiveSync\WCESMgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner 2\Desktop\hjtlog.exe
c:\hijackthis\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast High-Speed Internet
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: (no name) - {00000EF1-0786-4633-87C6-1AA7A44296DA} - C:\WINDOWS\System32\w1p3rp.dll
O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program Files\Panicware\Pop-Up Stopper Pro\CCHelper.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Url Catcher - {CE31A1F7-3D90-4874-8FBE-A5D97F8BC8F1} - C:\PROGRA~1\BARGAI~1\bin\apuc.dll
O3 - Toolbar: Pa&nicware Pop-Up Stopper Pro - {B1E741E7-1E77-40D4-9FD8-51949B9CCBD0} - C:\Program Files\Panicware\Pop-Up Stopper Pro\popuppro.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\System32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [IW Controlcenter] C:\PROGRA~1\INSTAN~1\INSTAN~1\IWCTRL.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\sisUSBrg.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Service] C:\WINDOWS\System32\IEXPLORE.EXE
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [checktime] c:\program files\HPSelect\Frontend\ct.exe
O4 - HKLM\..\Run: [DOS Manager] C:\MSDOS.PIF
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [TB_setup] C:\DOCUME~1\OWNER2~1\LOCALS~1\Temp\tb_setup.exe /dcheck
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [updater] C:\Program Files\Common files\updater\wupdater.exe
O4 - HKLM\..\Run: [msbb] C:\WINDOWS\System32\msbb.exe
O4 - HKLM\..\Run: [Bargains] C:\Program Files\Bargain Buddy\bin\bargains.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HPINST~1\plugin\bin\PCHButton.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Exif Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar3.dll/cmtrans.html
O9 - Extra button: MktBrowser (HKLM)
O9 - Extra 'Tools' menuitem: MarketBrowser (HKLM)
O9 - Extra button: Create Mobile Favorite (HKLM)
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: MoneySide (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} - http://streamp.babenet.com/cabs/videox.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/SmileyCentralInitialSetup1.0.0.6.cab
O16 - DPF: {1DF36010-E276-11D4-A7C0-00C04F0453DD} (Stamps.com Secure Postal Account Registration) - https://secure.stamps.com/download/us/registration/2_0_0_755/sdcregie.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v43/yacscom.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?
O16 - DPF: {4C226336-4032-489F-9674-67E74225979B} (OTXMovie Class) - http://www.otxresearch.com/OTXMedia/OTXMedia.dll
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cab
O16 - DPF: {5763F8E8-0DD7-4A0F-ADB0-9F64C8F2C349} (Pixami/Snapfish Upload UI Control) - http://www.snapfish.com/SnapfishUploader.cab
O16 - DPF: {6BF35011-3AE5-44D3-A8BB-73ED462A0BC0} (EZUploader Control) - http://www.ezprints.com/software/ezuploader.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.ofoto.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemplates/ActiveSecurity.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildtangent.com/hitthepros03/shockwave/wtinst.cab
O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} - http://dload.ipbill.com/del/loader.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundler/CAB/RealArcadeRdxIE.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://media.toontown.com/toontown/sv1.0.6.12/ttinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

 

[Slikkster]

You ran all that spyware software (spybot, etc.) and it didn't pick up Bargain Buddy and WeatherBug?

 

[Kelemvor]

You can try the LSPFix program which seems to help for lots of random "Can't get to the Internet" type errors.

As for ad programs, we use a combination of SpyBot and AdAware and those two wworking together get most everything off.

 

[NonOffensiveNameHere]

You see my little sister is computer stupid and clicks yes on anything that pop-ups on the screen. Im sure it's new since it's been a fewe days. And I like weatherBug I had to tell adaware to not delete it.

**Edit** I went to the site for the LSPFix and read this

"There is a known issue with using this software in combination with obsolete versions of Lavasoft's popular AD-Aware utility. A known issue in some versions of AD-Aware results in improper removal of pests such as New.Net, CommonName, and WebHancer, resulting in lost Internet access"

I think I got rid of WebHancer. THey give you directions for how to fix it but not for XP.

 

[Slikkster]

from webhancer's site:

After removing the software, I lost my Internet connectivity. How can I fix it?

If you've lost your Internet connectivity after removing Customer Companion, the software was not uninstalled properly.
To resolve the problem, you'll need to reinstall the software and remove it properly. Follow these steps:

Go to our Install page to download Customer Companion and follow the installation steps. When the installation is complete, restart your computer.

Once your computer has restarted, go to Start / Settings / Control Panel and double-click on the "Add/Remove Programs" icon.

Select the program called "webHancer Customer Companion" and click the Add/Remove button.

Once the program has been uninstalled, restart your computer.

Connect with the Internet and confirm that your programs are now working properly.

 

[NonOffensiveNameHere]

Nope. I installed and ran HiJack and made sure it was running and tried connecting and it didn't work. I then went through the un-install and restarted and it didn't work.

Grrrrr.

 

[Slikkster]

Ok, you said XP. I should have caught this before. Have you tried system restore? It's an easy way to take your pc "back in time" via a calendar to a date before the trouble began. You don't lose any documents or email that's current, either. It just deals with installed programs and system settings. This is the first and easiest thing you could have tried to fix this problem.

How? Start/Programs/Accessories/System Tools/System Restore. Follow the instructions and pick a date that's available as a "restore point" on the calendar it shows that's before this occurred. If you don't go back far enough (like as in the problem is still there), "undo" that restore by going back to System restore and pick another date further back in time.

You WILL have to reinstall any software you actually WANT installed that occured AFTER the restore point you choose to go back to. The same can be said for hardware drivers, as Windows will not have any record of new drivers if you've installed something after the restore date you're going back to. Give it a shot.

Hint: Try to go back not only to a point before you ran the anti-spyware stuff, but also before the spyware was even installed, so long as it wasn't too long ago.

 

[NonOffensiveNameHere]

I GOT IT!!!!!!!!!

So I opened up starter to poke around and I went into processes and saw SMC.EXE and more importantly the icon next to I recognized for....SYGATE PERSONAL FIREWALL!!!! It wasn't going to be that easy though. I tried to end process but it woulden't end. I brought up task manager, still woulden't go away, did add remove programs and found it still there. Got rid of it there and now the process is still running but is invalid or somthing like that. Right after the add remove programs ended I looked down and saw EMule full with color. (That means it is connected)

I Add/Removed programed it before but it must not of gotton rid of it all. I just don't understand why it all of a sudden started causing problems recently. Oh WEll

Thanks for all the help.

That SFC /scannow is good to know anyway