[wangler]

Hi there, Thanks for replying

I started in safemode and went to the files but i wasnt sure as to which file to change.

The first folder C:\Windows\system32\drivers to TCPIP.SYS.OLD.

I found 3 files TCPIP.sys.ORIGINAL
tcpip6
tcpip

I guess that the .sys one needed changing to old which was fine

When looking in the next folder though in i386

I only found 2
TCPIP
tcpip6

All cases are exactly the same as what i saw

when i tried to copy paste the file tried to overwrite tcpip in the first folder and i wasnt sure if this was right or not so i thought i best consult you first before making the change.

[JohnWill]

I would rename the one in C:\Windows\system32\drivers to TCPIP.SYS.OLD_NO2, to make sure you still have it.

Then copy the new one from i386 into C:\Windows\system32\drivers, and make SURE you leave it in i386, don't move it, but rather copy it.

[wangler]

Sorry to be a pain. And thankyou for all your help so far.


I would rename the one in C:\Windows\system32\drivers to TCPIP.SYS.OLD_NO2, to make sure you still have it.

Then copy the new one from i386 into C:\Windows\system32\drivers, and make SURE you leave it in i386, don't move it, but rather copy it.

So i rename the one in drivers like i did before but this time call it old no 2. Then i copy paste the TCPIP from i386.

Does it matter that the TCPIP in i386 doesnt have any .sys extension after it?

Just to clarify
In drivers at the moment i have In i386
TCPIP.SYS.ORIGINAL TCPIP
tcpip tcpip6
tcpip6

After changes i should have
TCPIP.SYS.old2
tcpip
tcpip 6

Copy paste TCPIP from i386 and copy over tcpip in drivers?

Thanks for your patience!

[JohnWill]

It should be TCPIP.SYS from the i386 folder, not a file named TCPIP with no extension. Make sure you have not hidden file extensions to be sure of what you're doing here.

FWIW, here's what I find when I do a search for files named TCPIP*.* in the C:\Windows folder tree. This is XP-SP3, I believe that's why there's a TCPIP6.SYS there.

[wangler]

Hi there, sorry for the delay ive been busy hope your well. Okay so ive revealed all hidden extensions and this is what i saw in the drivers section

tcpip.sys
TCPIP.SYS.ORIGINAL
tcpip6.sys

I renamed tcpip.sys.original to tcpip.old1 and tcpip.sys to tcpip.old2

Before this i saved them on the desktop in a folder as well just to be careful.
I then copy pasted the TCPIP.SYS from the i386 folder

I did all this in safe mode then rebooted then did the ping tests i left the firewall on first then turned it off but still i didnt get any joy. Ive posted the results here along with the hijack this read out also ive posted all of the tcpips on the pc too.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\Annie>ipconfig/all
Windows IP Configuration
Host Name . . . . . . . . . . . . : Flani
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : GlobeSpan
USB ADSL LAN Modem
Physical Address. . . . . . . . . :
00-11-F5-69-C1-56
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IP Address. . . :
169.254.210.239
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
PPP adapter DialBB:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN
(PPP/SLIP) Interface
Physical Address. . . . . . . . . :
00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . :
92.16.138.139
Subnet Mask . . . . . . . . . . . :
255.255.255.255
Default Gateway . . . . . . . . . :
92.16.138.139
DNS Servers . . . . . . . . . . . : 92.31.241.20
92.31.241.21
NetBIOS over Tcpip. . . . . . . . : Disabled
C:\Documents and Settings\Annie>ping 92.16.138.139
Pinging 92.16.138.139 with 32 bytes of data:
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
Ping statistics for 92.16.138.139:
Packets: Sent = 4, Received = 0, Lost = 4 (100%
loss),
C:\Documents and Settings\Annie>ping 92.31.241.20
Pinging 92.31.241.20 with 32 bytes of data:
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
Ping statistics for 92.31.241.20:
Packets: Sent = 4, Received = 0, Lost = 4 (100%
loss),
C:\Documents and Settings\Annie>ping 92.16.138.139
Pinging 92.16.138.139 with 32 bytes of data:
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
Ping statistics for 92.16.138.139:
Packets: Sent = 4, Received = 0, Lost = 4 (100%
loss),
C:\Documents and Settings\Annie>ping 92.31.241.20
Pinging 92.31.241.20 with 32 bytes of data:
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
Ping statistics for 92.31.241.20:
Packets: Sent = 4, Received = 0, Lost = 4 (100%
loss),
C:\Documents and Settings\Annie>

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:09:38, on 7/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Common
Files\AOL\1214585333\ee\AOLSoftware.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
C:\Program Files\VoyagerTest\fts.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\lxcecoms.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and
Settings\Annie\Desktop\Tools\HijackThis.exe
C:\WINDOWS\SoftwareDistribution\Download\88aa16c08992a22
2297cc493fc329b20\update\update.exe
C:\WINDOWS\system32\wuauclt.exe
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet
Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet
Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet
Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet
Explorer\SearchURL,(Default) =
http://search.aol.co.uk/web?isinit=true&query=%s
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,First Home Page =
http://go.microsoft.com/fwlink/?LinkId=54843
F2 - REG:system.ini:
UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program
Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program
Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class -
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program
Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [SiSPower] "Rundll32.exe"
SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [RAM Idle Professional] C:\Program
Files\RAM Idle\RAM_XP.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program
Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common
Files\AOL\1214585333\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AVG8_TRAY]
C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program
Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [LXCECATS] rundll32
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCEtime.dll,
_RunDLLEntry@16
O4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\BT
Voyager 105 ADSL Modem\dslstat.exe icon
O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\BT
Voyager 105 ADSL Modem\dslagent.exe
O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program
Files\VoyagerTest\fts.exe"
O4 - HKLM\..\Run: [MPFExe]
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKCU\..\Run: [ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE]
C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE]
C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE]
C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE]
C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: PokerStars -
{3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program
Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: PartyPoker.com -
{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} -
C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com -
{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} -
C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: BitComet -
{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} -
res://C:\Program
Files\BitComet\tools\BitCometBHO_1.1.11.30.dll/206 (file
missing)
O9 - Extra button: (no name) -
{e2e2dd38-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\WINDOWS\System32\shdocvw.dll
O10 - Unknown file in Winsock LSP:
c:\windows\system32\nwprovau.dll
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533}
(Microsoft Data Collection Control) -
https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83}
(Facebook Photo Uploader 5) -
http://upload.facebook.com/controls/...okPhotoUploade
r5.cab
O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125}
(mhLabel Class) - http://www.pcpitstop.com/mhLbl.cab
O17 -
HKLM\System\CCS\Services\Tcpip\..\{C4857DE7-630E-4F7E-BC
85-14B81405C557}: NameServer = 92.31.241.20 92.31.241.21
O18 - Protocol: linkscanner -
{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program
Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) -
Lavasoft - C:\Program Files\Lavasoft\Ad-Aware
2007\aawservice.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG
Technologies CZ, s.r.o. -
C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies
CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) -
Macrovision Corporation - C:\Program Files\Common
Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: lxce_device - Lexmark International, Inc.
- C:\WINDOWS\system32\lxcecoms.exe
O23 - Service: McAfee Services (mcmscsvc) - Lexmark
International, Inc. - (no file)
O23 - Service: McAfee Network Agent (McNASvc) - Lexmark
International, Inc. - (no file)
O23 - Service: McAfee Scanner (McODS) - Lexmark
International, Inc. - (no file)
O23 - Service: McAfee Proxy Service (McProxy) - Lexmark
International, Inc. - (no file)
O23 - Service: McAfee Real-time Scanner (McShield) -
Lexmark International, Inc. - (no file)
O23 - Service: McAfee SystemGuards (McSysmon) - Lexmark
International, Inc. - (no file)
O23 - Service: McAfee.com VirusScan Online Realtime
Engine (MCVSRte) - Lexmark International, Inc. - (no
file)
O23 - Service: McAfee Personal Firewall Service
(MpfService) - McAfee Corporation -
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: MSCSPTISRV - Sony Corporation -
C:\Program Files\Common Files\Sony
Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program
Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel,
Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Cyberlink RichVideo Service(CRVS)
(RichVideo) - Unknown owner - C:\Program
Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SiSoftware Database Agent Service
(SandraDataSrv) - SiSoftware - C:\Program
Files\SiSoftware\SiSoftware Sandra Lite
XI.SP3\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service
(SandraTheSrv) - SiSoftware - C:\Program
Files\SiSoftware\SiSoftware Sandra Lite
XI.SP3\RpcSandraSrv.exe
O23 - Service: SonicStage Back-End Service - Sony
Corporation - C:\Program Files\Common Files\Sony
Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony
Corporation - C:\Program Files\Common Files\Sony
Shared\AVLib\SPTISRV.exe
O23 - Service: Spyware Terminator Realtime Shield
Service (sp_rssrv) - Crawler.com - C:\Program
Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony
Corporation - C:\Program Files\Common Files\Sony
Shared\AVLib\SSScsiSV.exe
O23 - Service: StarWind iSCSI Service (StarWindService)
- Rocket Division Software - C:\Program Files\Alcohol
Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 9002 bytes

http://img508.imageshack.us/img508/8141/74846799yz5.png

Thanks again for your time

[JohnWill]

I'd do the same with TCPIP6.SYS, since I think that's one that was added last.

[wangler]

Hi again, sorry for delay ive been very busy this week.

I just changed the tcpip6.sys file again no joy. I turned off the firewall etc and did the ping tests again here are the results. Ive added the whole of the tcpip files on the computer again too.


C:\Documents and Settings\Annie>ipconfig/all
Windows IP Configuration
Host Name . . . . . . . . . . . . : Flani
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : GlobeSpan USB ADSL LAN Modem
Physical Address. . . . . . . . . : 00-11-F5-69-C1-56
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IP Address. . . : 169.254.210.239
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
PPP adapter DialBB:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 92.0.97.112
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 92.0.97.112
DNS Servers . . . . . . . . . . . : 92.31.241.20
92.31.241.21
NetBIOS over Tcpip. . . . . . . . : Disabled
C:\Documents and Settings\Annie>ping 92.097.112
Ping request could not find host 92.097.112. Please check the name and try again
.
C:\Documents and Settings\Annie>ping 92.0.97.112
Pinging 92.0.97.112 with 32 bytes of data:
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
Ping statistics for 92.0.97.112:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
C:\Documents and Settings\Annie>ping 92.0.97.112
Pinging 92.0.97.112 with 32 bytes of data:
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
Ping statistics for 92.0.97.112:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
C:\Documents and Settings\Annie>ping 92.0.97.112
Pinging 92.0.97.112 with 32 bytes of data:
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
PING: transmit failed, error code 5.
Ping statistics for 92.0.97.112:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
C:\Documents and Settings\Annie>
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:17:35, on 7/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\AOL\1214585333\ee\AOLSoftware.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
C:\Program Files\VoyagerTest\fts.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\lxcecoms.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\McAfee.com\Personal Firewall\MpfConsole.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\Documents and Settings\Annie\Desktop\Tools\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.aol.co.uk/web?isinit=true&query=%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [SiSPower] "Rundll32.exe" SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [RAM Idle Professional] C:\Program Files\RAM Idle\RAM_XP.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1214585333\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [LXCECATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCEtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe icon
O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\VoyagerTest\fts.exe"
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\System32\shdocvw.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://www.pcpitstop.com/mhLbl.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: lxce_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcecoms.exe
O23 - Service: McAfee Services (mcmscsvc) - Lexmark International, Inc. - (no file)
O23 - Service: McAfee Network Agent (McNASvc) - Lexmark International, Inc. - (no file)
O23 - Service: McAfee Scanner (McODS) - Lexmark International, Inc. - (no file)
O23 - Service: McAfee Proxy Service (McProxy) - Lexmark International, Inc. - (no file)
O23 - Service: McAfee Real-time Scanner (McShield) - Lexmark International, Inc. - (no file)
O23 - Service: McAfee SystemGuards (McSysmon) - Lexmark International, Inc. - (no file)
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Lexmark International, Inc. - (no file)
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP3\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP3\RpcSandraSrv.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 8958 bytes

http://img58.imageshack.us/img58/9522/27244233uq4.png

2nd part

http://img253.imageshack.us/img253/1411/97315460rx3.jpg


Thanks for your time and help!

[JohnWill]

I'm running out of rope on this one.

When booted in Safe Mode with Networking, do you still get the PING errors?

[wangler]

Hi there, i restarted in safe mode with networking.

This connection had vanished!

PPP adapter DialBB:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 92.0.97.112
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 92.0.97.112
DNS Servers . . . . . . . . . . . : 92.31.241.20
92.31.241.21

But the other one was still there

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : GlobeSpan USB ADSL LAN Modem
Physical Address. . . . . . . . . : 00-11-F5-69-C1-56
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IP Address. . . : 169.254.210.239
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :

i tried to ping the Ip but again no joy.

Thanks again

[JohnWill]

Let's see the whole IPCONFIG /ALL output

[!DSeva]

That thing do not solve ur prob.
ur prob. solve when first ip is like that 192.168.12.1

Remove usb cable interface.
use LAN cable RJ-45 interface.
Otherwise ur modem may be in warranty change it.
100% prob. is ur modem.

[wangler]

Hi there again sorry for the delay.

I turned off the firewall and ran in safemode with networking

This is the ip config

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\Annie>ipconfig/all
Windows IP Configuration
Host Name . . . . . . . . . . . . : Flani
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : GlobeSpan USB ADSL LAN Modem
Physical Address. . . . . . . . . : 00-11-F5-69-C1-56
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IP Address. . . : 169.254.210.239
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
C:\Documents and Settings\Annie>

[wangler]

Thankyou Dseva i will try that too.

[JohnWill]

Well, that's not good, I guess it's not going to work in safe mode. What is the second ADSL LAN modem in your configuration?

[wangler]

Hi there,
I only have 1 modem in my config and thats the BT Voyager ADSL one. The other connection is something called dialbb and works on wan miniport its PPPOE. The other connection is the one that vanishes when i start up in safe mode. Im sure i have a dial up modem in the pc too but i believe that is disabled.
Thanks