1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Computer will not connect to the internet

Discussion in 'Windows XP' started by bkilz, Jul 21, 2012.

Thread Status:
Not open for further replies.
Advertisement
  1. bkilz

    bkilz Thread Starter

    Joined:
    Jul 21, 2012
    Messages:
    9
    I boot up my computer and can connect to the internet. After a period of time, it will not connect. I have to reboot to connect.

    Here's my hijackthis log.


    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 6:59:35 PM, on 7/21/2012
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    c:\Program Files\Microsoft Security Client\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AGI\core\4.2.0.10754\AGCoreService.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Microsoft Security Client\msseces.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Documents and Settings\Nikki\Application Data\Dropbox\bin\Dropbox.exe
    C:\PROGRA~1\Webshots\315~1.761\webshots.scr
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Program Files\Intuit\QuickBooks 2010\qbw32.exe
    C:\PROGRA~1\Intuit\QUICKB~3\QBDBMgr.exe
    C:\Program Files\Common Files\Intuit\QuickBooks\axlbridge.exe
    C:\Documents and Settings\Nikki\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
    C:\Documents and Settings\Nikki\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\Nikki\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\Nikki\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\Nikki\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\Nikki\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    R3 - URLSearchHook: agihelper.AGUtils - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - mscoree.dll (file missing)
    O2 - BHO: agihelper.AGUtils - {0bc6e3fa-78ef-4886-842c-5a1258c4455a} - mscoree.dll (file missing)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Nikki\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O4 - Startup: Dropbox.lnk = C:\Documents and Settings\Nikki\Application Data\Dropbox\bin\Dropbox.exe
    O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\3.1.5.7619\Launcher.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O18 - Protocol: intu-help-qb3 - {C5E479EA-0A65-4B05-8C6C-2FC8CC682EB4} - C:\Program Files\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll
    O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: AG Core Services (AGCoreService) - AG Interactive - C:\Program Files\AGI\core\4.2.0.10754\AGCoreService.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    --
    End of file - 4803 bytes
     
  2. pip22

    pip22

    Joined:
    Nov 21, 2004
    Messages:
    2,536
    HJT logs are for the virus/malware experts to look at, bkilz. We can't look at it here (not allowed). You need to post it on the malware/virus forum here: http://forums.techguy.org/54-virus-other-malware-removal/

    If you look at the top of the main forum list page, it clearly says HijackThis logs etc. under Virus & Other Malware Removal
     
  3. flavallee

    flavallee Frank Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    63,685
    bkilz:

    Why hasn't Windows XP SP2 been upgraded to SP3 - which was released over 4 years ago?

    Have you been installing the high priority updates that Microsoft releases on a regular basis?

    ---------------------------------------------------------

    Start HiJackThis.

    Click on the "Open The Misc Tools Section" button.

    Click on the "Open Uninstall Manager" button.

    Click on the "Save List" button.

    Save the "uninstall_list.txt" file somewhere.

    It'll then open in Notepad.

    Return here to your thread, then copy-and-paste the entire file here.

    ---------------------------------------------------------
     
  4. bkilz

    bkilz Thread Starter

    Joined:
    Jul 21, 2012
    Messages:
    9
    Congrats pip22 on Bradley Wiggins. I will update XP.

    Here's the uninstall_list


    Adobe Flash Player 10 Plugin
    Adobe Reader X (10.1.1)
    AVSDK5
    CCleaner
    Dell Resource CD
    High Definition Audio Driver Package - KB888111
    HiJackThis
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows XP (KB935448)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB981793)
    HP PSC & Officejet 4.2 Corporate Edition
    Intel(R) Graphics Media Accelerator Driver
    Intel(R) PRO Network Connections 12.1.12.0
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 4 Client Profile
    Microsoft .NET Framework 4 Client Profile
    Microsoft .NET Framework 4 Extended
    Microsoft .NET Framework 4 Extended
    Microsoft Office 2007 Primary Interop Assemblies
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office File Validation Add-In
    Microsoft Office Home and Student 2007
    Microsoft Office Home and Student 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Security Client
    Microsoft Security Essentials
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual Studio 2005 Tools for Office Runtime
    Microsoft Visual Studio 2005 Tools for Office Runtime
    Mozilla Firefox 14.0.1 (x86 en-US)
    Mozilla Maintenance Service
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MSXML 4.0 SP2 Parser and SDK
    MSXML 6 Service Pack 2 (KB973686)
    QuickBooks
    QuickBooks Premier Edition 2010
    QuickTime
    Realtek High Definition Audio Driver
    Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2598041) 32-Bit Edition
    Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
    Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player (KB978695)
    Security Update for Windows Media Player (KB979402)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB944338-v2)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB958470)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB971961)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979559)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB980195)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB981350)
    Security Update for Windows XP (KB982381)
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Windows XP (KB898461)
    Update for Windows XP (KB914882)
    Update for Windows XP (KB925720)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    Webshots Desktop
    Windows Imaging Component
    Windows Installer 3.1 (KB893803)
    XnView 1.98.2
     
  5. bkilz

    bkilz Thread Starter

    Joined:
    Jul 21, 2012
    Messages:
    9
    PS. In Control Panel, Automatic Updates is checked.
     
  6. Ihatecats

    Ihatecats Banned

    Joined:
    Jun 10, 2012
    Messages:
    359
    Please download FarbarServiceScanner and run it on the computer with the issue.


    Make sure the following options are checked:
    Internet Services
    Windows Firewall
    System Restore
    Security Center/Action Center
    Windows Update

    Press "Scan".
    It will create a log (FSS.txt) in the same directory the tool is run.
    Please Attach the log to your reply.

    Please download MINITOOLBOX and run it.

    Checkmark following boxes:


    Report IE Proxy Settings
    Report FF Proxy Settings
    List content of Hosts
    List IP configuration
    List Winsock Entries
    List last 10 Event Viewer log
    List Installed Programs
    List Users, Partitions and Memory size
    List Devices (problems only)



    Click Go and Attach the result.
     
  7. bkilz

    bkilz Thread Starter

    Joined:
    Jul 21, 2012
    Messages:
    9
    Here are both files.

    Farbar Service Scanner Version: 19-07-2012
    Ran by Nikki (administrator) on 22-07-2012 at 12:06:47
    Running from "C:\Documents and Settings\Nikki\My Documents\Downloads"
    Microsoft Windows XP Home Edition Service Pack 2 (X86)
    Boot Mode: Normal
    ****************************************************************

    Internet Services:
    ============

    Connection Status:
    ==============
    Localhost is accessible.
    LAN connected.
    Google IP is accessible.
    Google.com is accessible.
    Yahoo IP is accessible.
    Yahoo.com is accessible.


    Windows Firewall:
    =============

    Firewall Disabled Policy:
    ==================
    ATTENTION!=====> Unable to retrieve HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\\EnableFirewall value. The value does not exist.
    ATTENTION!=====> Unable to retrieve HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall value. The value does not exist.


    System Restore:
    ============

    System Restore Disabled Policy:
    ========================


    Security Center:
    ============

    Windows Update:
    ============

    Windows Autoupdate Disabled Policy:
    ============================


    File Check:
    ========
    C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
    C:\WINDOWS\system32\Drivers\afd.sys
    [2004-08-04 03:00] - [2008-08-14 02:51] - 0138368 ____A (Microsoft Corporation) 55E6E1C51B6D30E54335750955453702

    C:\WINDOWS\system32\Drivers\netbt.sys
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0162816 ____A (Microsoft Corporation) 0C80E410CD2F47134407EE7DD19CC86B

    C:\WINDOWS\system32\Drivers\tcpip.sys
    [2004-08-04 03:00] - [2008-06-20 03:45] - 0360320 ____A (Microsoft Corporation) 2A5554FC5B1E04E131230E3CE035C3F9

    C:\WINDOWS\system32\Drivers\ipsec.sys
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0074752 ____A (Microsoft Corporation) 64537AA5C003A6AFEEE1DF819062D0D1

    C:\WINDOWS\system32\dnsrslvr.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0045568 ____A (Microsoft Corporation) 7379DE06FD196E396A00AA97B990C00D

    C:\WINDOWS\system32\ipnathlp.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0331264 ____A (Microsoft Corporation) 36CC8C01B5E50163037BEF56CB96DEFF

    C:\WINDOWS\system32\netman.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0198144 ____A (Microsoft Corporation) DAB9E6C7105D2EF49876FE92C524F565

    C:\WINDOWS\system32\wbem\WMIsvc.dll
    [2011-09-03 11:51] - [2004-08-04 03:00] - 0144896 ____A (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

    C:\WINDOWS\system32\srsvc.dll
    [2011-09-03 11:53] - [2004-08-04 03:00] - 0170496 ____A (Microsoft Corporation) 92BDF74F12D6CBEC43C94D4B7F804838

    C:\WINDOWS\system32\Drivers\sr.sys
    [2011-09-03 11:53] - [2004-08-04 03:00] - 0073472 ____A (Microsoft Corporation) E41B6D037D6CD08461470AF04500DC24

    C:\WINDOWS\system32\wscsvc.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0081408 ____A (Microsoft Corporation) 4D59DAA66C60858CDF4F67A900F42D4A

    C:\WINDOWS\system32\wbem\WMIsvc.dll
    [2011-09-03 11:51] - [2004-08-04 03:00] - 0144896 ____A (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

    C:\WINDOWS\system32\wuauserv.dll
    [2011-09-03 11:53] - [2004-08-04 03:00] - 0006656 ____A (Microsoft Corporation) 13D72740963CBA12D9FF76A7F218BCD8

    C:\WINDOWS\system32\qmgr.dll
    [2011-09-03 11:53] - [2004-08-04 03:00] - 0382464 ____A (Microsoft Corporation) 2C69EC7E5A311334D10DD95F338FCCEA

    C:\WINDOWS\system32\es.dll
    [2004-08-04 03:00] - [2008-07-07 13:32] - 0253952 ____A (Microsoft Corporation) 60D1A6342238378BFB7545C81EE3606C

    C:\WINDOWS\system32\cryptsvc.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0060416 ____A (Microsoft Corporation) 10654F9DDCEA9C46CFB77554231BE73B

    C:\WINDOWS\system32\svchost.exe
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0014336 ____A (Microsoft Corporation) 8F078AE4ED187AAABC0A305146DE6716

    C:\WINDOWS\system32\rpcss.dll
    [2004-08-04 03:00] - [2009-02-09 03:01] - 0401408 ____A (Microsoft Corporation) 24B5D53B9ACCC1E2EDCF0A878D6659D4

    C:\WINDOWS\system32\services.exe
    [2004-08-04 03:00] - [2009-02-06 03:22] - 0110592 ____A (Microsoft Corporation) 4712531AB7A01B7EE059853CA17D39BD


    Extra List:
    =======
    Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4)
    0x080000000500000001000000020000000300000004000000080000000600000007000000
    IpSec Tag value is correct.

    **** End of log ****

    MiniToolBox by Farbar Version: 22-07-2012
    Ran by Nikki (administrator) on 22-07-2012 at 12:10:24
    Microsoft Windows XP Home Edition Service Pack 2 (X86)
    Boot Mode: Normal
    ***************************************************************************

    ========================= IE Proxy Settings: ==============================

    Proxy is not enabled.
    No Proxy Server is set.

    ========================= FF Proxy Settings: ==============================

    ========================= Hosts content: =================================


    127.0.0.1 localhost

    ========================= IP Configuration: ================================

    Intel(R) 82562V-2 10/100 Network Connection = Local Area Connection (Connected)


    # ----------------------------------
    # Interface IP Configuration
    # ----------------------------------
    pushd interface ip


    # Interface IP Configuration for "Local Area Connection"

    set address name="Local Area Connection" source=dhcp
    set dns name="Local Area Connection" source=dhcp register=PRIMARY
    set wins name="Local Area Connection" source=dhcp


    popd
    # End of interface IP configuration




    Windows IP Configuration



    Host Name . . . . . . . . . . . . : homenikki

    Primary Dns Suffix . . . . . . . :

    Node Type . . . . . . . . . . . . : Unknown

    IP Routing Enabled. . . . . . . . : No

    WINS Proxy Enabled. . . . . . . . : No



    Ethernet adapter Local Area Connection:



    Connection-specific DNS Suffix . :

    Description . . . . . . . . . . . : Intel(R) 82562V-2 10/100 Network Connection

    Physical Address. . . . . . . . . : 00-1D-09-97-4B-FA

    Dhcp Enabled. . . . . . . . . . . : Yes

    Autoconfiguration Enabled . . . . : Yes

    IP Address. . . . . . . . . . . . : 192.168.1.2

    Subnet Mask . . . . . . . . . . . : 255.255.255.0

    Default Gateway . . . . . . . . . : 192.168.1.1

    DHCP Server . . . . . . . . . . . : 192.168.1.1

    DNS Servers . . . . . . . . . . . : 192.168.1.1

    Lease Obtained. . . . . . . . . . : Sunday, July 22, 2012 10:19:53 AM

    Lease Expires . . . . . . . . . . : Monday, July 23, 2012 10:19:53 AM

    Server: UnKnown
    Address: 192.168.1.1

    Name: google.com
    Addresses: 74.125.224.104, 74.125.224.102, 74.125.224.97, 74.125.224.101
    74.125.224.103, 74.125.224.110, 74.125.224.100, 74.125.224.96, 74.125.224.98
    74.125.224.105, 74.125.224.99



    Pinging google.com [74.125.224.40] with 32 bytes of data:



    Reply from 74.125.224.40: bytes=32 time=16ms TTL=55

    Reply from 74.125.224.40: bytes=32 time=16ms TTL=55



    Ping statistics for 74.125.224.40:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

    Approximate round trip times in milli-seconds:

    Minimum = 16ms, Maximum = 16ms, Average = 16ms

    Server: UnKnown
    Address: 192.168.1.1

    Name: yahoo.com
    Addresses: 209.191.122.70, 72.30.38.140, 98.139.183.24



    Pinging yahoo.com [72.30.38.140] with 32 bytes of data:



    Reply from 72.30.38.140: bytes=32 time=39ms TTL=53

    Reply from 72.30.38.140: bytes=32 time=56ms TTL=53



    Ping statistics for 72.30.38.140:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

    Approximate round trip times in milli-seconds:

    Minimum = 39ms, Maximum = 56ms, Average = 47ms

    Server: UnKnown
    Address: 192.168.1.1

    Name: bleepingcomputer.com
    Address: 208.43.87.2



    Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:



    Reply from 208.43.87.2: Destination host unreachable.

    Reply from 208.43.87.2: Destination host unreachable.



    Ping statistics for 208.43.87.2:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

    Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms



    Pinging 127.0.0.1 with 32 bytes of data:



    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



    Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

    Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

    ===========================================================================
    Interface List
    0x1 ........................... MS TCP Loopback interface
    0x10003 ...00 1d 09 97 4b fa ...... Intel(R) 82562V-2 10/100 Network Connection
    ===========================================================================
    ===========================================================================
    Active Routes:
    Network Destination Netmask Gateway Interface Metric
    0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.2 20
    127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
    192.168.1.0 255.255.255.0 192.168.1.2 192.168.1.2 20
    192.168.1.2 255.255.255.255 127.0.0.1 127.0.0.1 20
    192.168.1.255 255.255.255.255 192.168.1.2 192.168.1.2 20
    224.0.0.0 240.0.0.0 192.168.1.2 192.168.1.2 20
    255.255.255.255 255.255.255.255 192.168.1.2 192.168.1.2 1
    Default Gateway: 192.168.1.1
    ===========================================================================
    Persistent Routes:
    None
    ========================= Winsock entries =====================================

    Catalog5 01 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
    Catalog5 03 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 01 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 02 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 03 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 04 C:\Windows\system32\rsvpsp.dll [90112] (Microsoft Corporation)
    Catalog9 05 C:\Windows\system32\rsvpsp.dll [90112] (Microsoft Corporation)
    Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 10 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 11 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)

    ========================= Event log errors: ===============================

    Application errors:
    ==================
    Error: (07/21/2012 05:31:19 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks Premier Edition 2010":
    An attempt to LogOff without a logon.

    Error: (07/21/2012 05:22:34 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks":
    Returning NULL QBWinInstance Handle

    Error: (07/21/2012 05:22:34 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks":
    Returning NULL QBWinInstance Handle

    Error: (07/21/2012 05:22:34 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks":
    Returning NULL QBWinInstance Handle

    Error: (07/21/2012 05:22:34 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks":
    Returning NULL QBWinInstance Handle

    Error: (07/21/2012 02:12:07 PM) (Source: MPSampleSubmission) (User: )
    Description: EventType mptelemetry, P1 0x80070003, P2 moac, P3 cachereset, P4 4.0.1526.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 mptelemetry0, P10 mptelemetry1.

    Error: (07/21/2012 02:02:22 PM) (Source: crypt32) (User: )
    Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

    Error: (07/21/2012 02:02:22 PM) (Source: crypt32) (User: )
    Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

    Error: (07/21/2012 11:53:18 AM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks Premier Edition 2010":
    An attempt to LogOff without a logon.

    Error: (07/21/2012 10:23:14 AM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks":
    Returning NULL QBWinInstance Handle


    System errors:
    =============
    Error: (07/22/2012 02:25:15 AM) (Source: Microsoft Antimalware) (User: )
    Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

    New Signature Version:

    Previous Signature Version: 1.131.405.0

    Update Source: %NT AUTHORITY59

    Update Stage: 4.0.1526.00

    Source Path: 4.0.1526.01

    Signature Type: %NT AUTHORITY602

    Update Type: %NT AUTHORITY604

    User: NT AUTHORITY\SYSTEM

    Current Engine Version: %NT AUTHORITY605

    Previous Engine Version: %NT AUTHORITY606

    Error code: %NT AUTHORITY607

    Error description: %NT AUTHORITY608

    Error: (07/20/2012 09:56:52 PM) (Source: Windows Update Agent) (User: )
    Description: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

    Error: (07/18/2012 10:04:31 PM) (Source: DCOM) (User: NT AUTHORITY)
    Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

    Error: (07/18/2012 07:41:43 PM) (Source: Windows Update Agent) (User: )
    Description: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

    Error: (07/16/2012 03:11:35 PM) (Source: Windows Update Agent) (User: )
    Description: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

    Error: (07/15/2012 06:20:15 PM) (Source: W32Time) (User: )
    Description: The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently accessible.
    No attempt to contact a source will be made for 59 minutes.
    NtpClient has no source of accurate time.

    Error: (07/15/2012 06:20:15 PM) (Source: W32Time) (User: )
    Description: Time Provider NtpClient: An error occurred during DNS lookup of the manually
    configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 60
    minutes.
    The error was: A socket operation was attempted to an unreachable host. (0x80072751)

    Error: (07/15/2012 05:50:15 PM) (Source: W32Time) (User: )
    Description: The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently accessible.
    No attempt to contact a source will be made for 29 minutes.
    NtpClient has no source of accurate time.

    Error: (07/15/2012 05:50:15 PM) (Source: W32Time) (User: )
    Description: Time Provider NtpClient: An error occurred during DNS lookup of the manually
    configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 30
    minutes.
    The error was: A socket operation was attempted to an unreachable host. (0x80072751)

    Error: (07/15/2012 05:35:15 PM) (Source: W32Time) (User: )
    Description: The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently accessible.
    No attempt to contact a source will be made for 14 minutes.
    NtpClient has no source of accurate time.


    Microsoft Office Sessions:
    =========================

    =========================== Installed Programs ============================

    Adobe Flash Player 10 Plugin (Version: 10.3.183.7)
    Adobe Reader X (10.1.1) (Version: 10.1.1)
    AiO_Scan (Version: 43.0.217.000)
    AVSDK5 (Version: 5.2.9)
    CCleaner (Version: 3.20)
    Dell Resource CD (Version: 1.00.0000)
    Dropbox (Version: 1.4.7)
    Enterprise (Version: 43.0.217.000)
    Google Chrome (Version: 20.0.1132.57)
    High Definition Audio Driver Package - KB888111 (Version: 20040219.000000)
    HiJackThis (Version: 1.0.0)
    HP PSC & Officejet 4.2 Corporate Edition
    Intel(R) Graphics Media Accelerator Driver
    Intel(R) PRO Network Connections 12.1.12.0 (Version: )
    Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
    Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
    Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
    Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
    Microsoft Application Error Reporting (Version: 12.0.6012.5000)
    Microsoft Office 2007 Primary Interop Assemblies (Version: 12.0.4518.1014)
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
    Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
    Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Security Client (Version: 4.0.1526.0)
    Microsoft Security Essentials (Version: 4.0.1526.0)
    Microsoft Software Update for Web Folders (English) 12 (Version: 12.0.6612.1000)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
    Microsoft Visual Studio 2005 Tools for Office Runtime
    Microsoft Visual Studio 2005 Tools for Office Runtime (Version: 8.0.60940.0)
    Mozilla Firefox 14.0.1 (x86 en-US) (Version: 14.0.1)
    Mozilla Maintenance Service (Version: 14.0.1)
    MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
    MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
    MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
    MSXML 6 Service Pack 2 (KB973686) (Version: 6.20.2003.0)
    QFolder (Version: 1.00.0000)
    QuickBooks (Version: 20.0.4001.807)
    QuickBooks Premier Edition 2010 (Version: 20.0.4001.807)
    QuickTime (Version: 7.71.80.42)
    Realtek High Definition Audio Driver (Version: 5.10.0.5408)
    Scan (Version: 4.1.0.0)
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
    Update for Windows XP (KB898461) (Version: 1)
    Update for Windows XP (KB914882) (Version: 1)
    Update for Windows XP (KB925720) (Version: 1)
    Update for Windows XP (KB955759) (Version: 1)
    Update for Windows XP (KB967715) (Version: 1)
    Update for Windows XP (KB968389) (Version: 1)
    Update for Windows XP (KB971737) (Version: 1)
    Update for Windows XP (KB973687) (Version: 1)
    Update for Windows XP (KB973815) (Version: 1)
    WebFldrs XP (Version: 9.50.7523)
    Webshots Desktop (Version: 3.1.5.7619)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
    Windows Imaging Component (Version: 3.0.0.0)
    Windows Installer 3.1 (KB893803) (Version: 3.1)
    Windows XP Hotfix - KB839210 (Version: 1)
    XnView 1.98.2 (Version: 1.98.2)

    ========================= Devices: ================================


    ========================= Memory info: ===================================

    Percentage of memory in use: 65%
    Total physical RAM: 1013.1 MB
    Available physical RAM: 353.7 MB
    Total Pagefile: 2440.29 MB
    Available Pagefile: 1465.43 MB
    Total Virtual: 2047.88 MB
    Available Virtual: 1979.63 MB

    ========================= Partitions: =====================================

    1 Drive c: () (Fixed) (Total:74.45 GB) (Free:46.09 GB) NTFS
    3 Drive z: (USB_Storage) (Network) (Total:186.31 GB) (Free:76.9 GB) NTFS

    ========================= Users: ========================================

    User accounts for \\HOMENIKKI

    Administrator ASPNET Guest
    HelpAssistant Nikki SUPPORT_388945a0


    **** End of log ****
     
  8. Ihatecats

    Ihatecats Banned

    Joined:
    Jun 10, 2012
    Messages:
    359
    Uninstall the two programs below.

    Microsoft Security Client (Version: 4.0.1526.0)
    Microsoft Security Essentials (Version: 4.0.1526.0)

    Then run the MSE removal tool.
    http://go.microsoft.com/?linkid=9748340

    Reboot your machine and continue below.

    Install Avast free.
    http://files.avast.com/iavs5x/avast_free_antivirus_setup.exe

    Update your ethernet driver.

    http://www.pcpitstop.com/drivers/download/Intel%28R%29~82562V-2~10%252F100~Network~Connection.html

    Run the intel Auto update utility.You will need to use internet explorer to use the update utility.
    http://www.intel.com/p/en_US/support/detect/



    Download the internet repair tool and run it with all boxes checked.
    http://majorgeeks.com/downloadget.php?id=7183&file=9&evp=d487f47a4ec64ed8e3f942b034a8b48c

    Reboot your machine.

    Please post a fresh farbar service scanner log so that I can see if the firewall issue is resolved.



    Edit: Go here and install the hot fix.
    http://support.microsoft.com/kb/830092
     
  9. flavallee

    flavallee Frank Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    63,685
    Ihatecats:

    Why are you advising bkilz to uninstall Microsoft Security Essential 4.0.1526.0 and replace it with Avast 7.0.1456 - which is not as user-friendly and is known to be problematic?

    Why are you advising bkilz to download and install the Intel PRO Network Connections driver from the PC PitStop site - which is not a reliable driver download site?
    The driver should be downloaded and installed from here. Select the "PROWin32.exe" file.

    -----------------------------------------------------
     
  10. Ihatecats

    Ihatecats Banned

    Joined:
    Jun 10, 2012
    Messages:
    359
    Avast is just flat out a better antivirus..

    And I have never had any issues with downloading a driver from PC pitstop. :)
     
  11. Ihatecats

    Ihatecats Banned

    Joined:
    Jun 10, 2012
    Messages:
    359
  12. bkilz

    bkilz Thread Starter

    Joined:
    Jul 21, 2012
    Messages:
    9
    PC pitstop said all drivers were up to date.

    Here are the logs...it's been difficult day dealing with this. May be time to take this puter behind the barn and shoot it.

    Farbar Service Scanner Version: 22-07-2012
    Ran by Nikki (administrator) on 22-07-2012 at 18:15:50
    Running from "C:\Documents and Settings\Nikki\My Documents\Downloads"
    Microsoft Windows XP Home Edition Service Pack 2 (X86)
    Boot Mode: Normal
    ****************************************************************

    Internet Services:
    ============

    Connection Status:
    ==============
    Localhost is accessible.
    LAN connected.
    Google IP is accessible.
    Google.com is accessible.
    Yahoo IP is accessible.
    Yahoo.com is accessible.


    Windows Firewall:
    =============

    Firewall Disabled Policy:
    ==================
    ATTENTION!=====> Unable to retrieve HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\\EnableFirewall value. The value does not exist.
    ATTENTION!=====> Unable to retrieve HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall value. The value does not exist.


    System Restore:
    ============

    System Restore Disabled Policy:
    ========================


    Security Center:
    ============

    Windows Update:
    ============
    wuauserv Service is not running. Checking service configuration:
    The start type of wuauserv service is OK.
    The ImagePath of wuauserv service is OK.
    The ServiceDll of wuauserv: "C:\WINDOWS\system32\wuauserv.dll".


    Windows Autoupdate Disabled Policy:
    ============================


    File Check:
    ========
    C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
    C:\WINDOWS\system32\Drivers\afd.sys
    [2004-08-04 03:00] - [2008-08-14 02:51] - 0138368 ____A (Microsoft Corporation) 55E6E1C51B6D30E54335750955453702

    C:\WINDOWS\system32\Drivers\netbt.sys
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0162816 ____A (Microsoft Corporation) 0C80E410CD2F47134407EE7DD19CC86B

    C:\WINDOWS\system32\Drivers\tcpip.sys
    [2004-08-04 03:00] - [2008-06-20 03:45] - 0360320 ____A (Microsoft Corporation) 2A5554FC5B1E04E131230E3CE035C3F9

    C:\WINDOWS\system32\Drivers\ipsec.sys
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0074752 ____A (Microsoft Corporation) 64537AA5C003A6AFEEE1DF819062D0D1

    C:\WINDOWS\system32\dnsrslvr.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0045568 ____A (Microsoft Corporation) 7379DE06FD196E396A00AA97B990C00D

    C:\WINDOWS\system32\ipnathlp.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0331264 ____A (Microsoft Corporation) 36CC8C01B5E50163037BEF56CB96DEFF

    C:\WINDOWS\system32\netman.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0198144 ____A (Microsoft Corporation) DAB9E6C7105D2EF49876FE92C524F565

    C:\WINDOWS\system32\wbem\WMIsvc.dll
    [2011-09-03 11:51] - [2004-08-04 03:00] - 0144896 ____A (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

    C:\WINDOWS\system32\srsvc.dll
    [2011-09-03 11:53] - [2004-08-04 03:00] - 0170496 ____A (Microsoft Corporation) 92BDF74F12D6CBEC43C94D4B7F804838

    C:\WINDOWS\system32\Drivers\sr.sys
    [2011-09-03 11:53] - [2004-08-04 03:00] - 0073472 ____A (Microsoft Corporation) E41B6D037D6CD08461470AF04500DC24

    C:\WINDOWS\system32\wscsvc.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0081408 ____A (Microsoft Corporation) 4D59DAA66C60858CDF4F67A900F42D4A

    C:\WINDOWS\system32\wbem\WMIsvc.dll
    [2011-09-03 11:51] - [2004-08-04 03:00] - 0144896 ____A (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

    C:\WINDOWS\system32\wuauserv.dll
    [2011-09-03 11:53] - [2004-08-04 03:00] - 0006656 ____A (Microsoft Corporation) 13D72740963CBA12D9FF76A7F218BCD8

    C:\WINDOWS\system32\qmgr.dll
    [2011-09-03 11:53] - [2004-08-04 03:00] - 0382464 ____A (Microsoft Corporation) 2C69EC7E5A311334D10DD95F338FCCEA

    C:\WINDOWS\system32\es.dll
    [2004-08-04 03:00] - [2008-07-07 13:32] - 0253952 ____A (Microsoft Corporation) 60D1A6342238378BFB7545C81EE3606C

    C:\WINDOWS\system32\cryptsvc.dll
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0060416 ____A (Microsoft Corporation) 10654F9DDCEA9C46CFB77554231BE73B

    C:\WINDOWS\system32\svchost.exe
    [2004-08-04 03:00] - [2004-08-04 03:00] - 0014336 ____A (Microsoft Corporation) 8F078AE4ED187AAABC0A305146DE6716

    C:\WINDOWS\system32\rpcss.dll
    [2004-08-04 03:00] - [2009-02-09 03:01] - 0401408 ____A (Microsoft Corporation) 24B5D53B9ACCC1E2EDCF0A878D6659D4

    C:\WINDOWS\system32\services.exe
    [2004-08-04 03:00] - [2009-02-06 03:22] - 0110592 ____A (Microsoft Corporation) 4712531AB7A01B7EE059853CA17D39BD


    Extra List:
    =======
    aswTdi(9) Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4)
    0x09000000050000000100000002000000030000000400000009000000080000000600000007000000
    IpSec Tag value is correct.

    **** End of log ****

    MiniToolBox by Farbar Version: 22-07-2012
    Ran by Nikki (administrator) on 22-07-2012 at 18:18:31
    Microsoft Windows XP Home Edition Service Pack 2 (X86)
    Boot Mode: Normal
    ***************************************************************************

    ========================= IE Proxy Settings: ==============================

    Proxy is not enabled.
    No Proxy Server is set.

    ========================= FF Proxy Settings: ==============================

    ========================= Hosts content: =================================


    127.0.0.1 localhost

    ========================= IP Configuration: ================================

    Intel(R) 82562V-2 10/100 Network Connection = Local Area Connection (Connected)


    # ----------------------------------
    # Interface IP Configuration
    # ----------------------------------
    pushd interface ip


    # Interface IP Configuration for "Local Area Connection"

    set address name="Local Area Connection" source=dhcp
    set dns name="Local Area Connection" source=dhcp register=PRIMARY
    set wins name="Local Area Connection" source=dhcp


    popd
    # End of interface IP configuration




    Windows IP Configuration



    Host Name . . . . . . . . . . . . : homenikki

    Primary Dns Suffix . . . . . . . :

    Node Type . . . . . . . . . . . . : Unknown

    IP Routing Enabled. . . . . . . . : No

    WINS Proxy Enabled. . . . . . . . : No



    Ethernet adapter Local Area Connection:



    Connection-specific DNS Suffix . :

    Description . . . . . . . . . . . : Intel(R) 82562V-2 10/100 Network Connection

    Physical Address. . . . . . . . . : 00-1D-09-97-4B-FA

    Dhcp Enabled. . . . . . . . . . . : Yes

    Autoconfiguration Enabled . . . . : Yes

    IP Address. . . . . . . . . . . . : 192.168.1.2

    Subnet Mask . . . . . . . . . . . : 255.255.255.0

    Default Gateway . . . . . . . . . : 192.168.1.1

    DHCP Server . . . . . . . . . . . : 192.168.1.1

    DNS Servers . . . . . . . . . . . : 192.168.1.1

    Lease Obtained. . . . . . . . . . : Sunday, July 22, 2012 6:11:43 PM

    Lease Expires . . . . . . . . . . : Monday, July 23, 2012 6:11:43 PM

    Server: UnKnown
    Address: 192.168.1.1

    Name: google.com
    Addresses: 74.125.224.130, 74.125.224.129, 74.125.224.131, 74.125.224.136
    74.125.224.132, 74.125.224.128, 74.125.224.134, 74.125.224.135, 74.125.224.133
    74.125.224.142, 74.125.224.137



    Pinging google.com [74.125.224.98] with 32 bytes of data:



    Reply from 74.125.224.98: bytes=32 time=17ms TTL=55

    Reply from 74.125.224.98: bytes=32 time=18ms TTL=55



    Ping statistics for 74.125.224.98:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

    Approximate round trip times in milli-seconds:

    Minimum = 17ms, Maximum = 18ms, Average = 17ms

    Server: UnKnown
    Address: 192.168.1.1

    Name: yahoo.com
    Addresses: 72.30.38.140, 98.139.183.24, 209.191.122.70



    Pinging yahoo.com [72.30.38.140] with 32 bytes of data:



    Reply from 72.30.38.140: bytes=32 time=20ms TTL=53

    Reply from 72.30.38.140: bytes=32 time=30ms TTL=53



    Ping statistics for 72.30.38.140:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

    Approximate round trip times in milli-seconds:

    Minimum = 20ms, Maximum = 30ms, Average = 25ms

    Server: UnKnown
    Address: 192.168.1.1

    Name: bleepingcomputer.com
    Address: 208.43.87.2



    Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:



    Reply from 208.43.87.2: Destination host unreachable.

    Reply from 208.43.87.2: Destination host unreachable.



    Ping statistics for 208.43.87.2:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

    Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms



    Pinging 127.0.0.1 with 32 bytes of data:



    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



    Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

    Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

    ===========================================================================
    Interface List
    0x1 ........................... MS TCP Loopback interface
    0x10003 ...00 1d 09 97 4b fa ...... Intel(R) 82562V-2 10/100 Network Connection
    ===========================================================================
    ===========================================================================
    Active Routes:
    Network Destination Netmask Gateway Interface Metric
    0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.2 20
    127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
    192.168.1.0 255.255.255.0 192.168.1.2 192.168.1.2 20
    192.168.1.2 255.255.255.255 127.0.0.1 127.0.0.1 20
    192.168.1.255 255.255.255.255 192.168.1.2 192.168.1.2 20
    224.0.0.0 240.0.0.0 192.168.1.2 192.168.1.2 20
    255.255.255.255 255.255.255.255 192.168.1.2 192.168.1.2 1
    Default Gateway: 192.168.1.1
    ===========================================================================
    Persistent Routes:
    None
    ========================= Winsock entries =====================================

    Catalog5 01 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
    Catalog5 03 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 01 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 02 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 03 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 04 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 05 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
    Catalog9 10 C:\Windows\system32\rsvpsp.dll [90112] (Microsoft Corporation)
    Catalog9 11 C:\Windows\system32\rsvpsp.dll [90112] (Microsoft Corporation)

    ========================= Event log errors: ===============================

    Application errors:
    ==================
    Error: (07/22/2012 06:01:49 PM) (Source: MsiInstaller) (User: HOMENIKKI)HOMENIKKI
    Description: Product: Intel(R) Network Connections -- The installed version of Intel(R) Network Connections is not supported for upgrades. You must uninstall it before installing this version.

    Error: (07/22/2012 05:04:30 PM) (Source: Application Hang) (User: )
    Description: Hanging application msseces.exe, version 4.0.1526.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

    Error: (07/22/2012 05:04:29 PM) (Source: Application Hang) (User: )
    Description: Hanging application msseces.exe, version 4.0.1526.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

    Error: (07/21/2012 05:31:19 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks Premier Edition 2010":
    An attempt to LogOff without a logon.

    Error: (07/21/2012 05:22:34 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks":
    Returning NULL QBWinInstance Handle

    Error: (07/21/2012 05:22:34 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks":
    Returning NULL QBWinInstance Handle

    Error: (07/21/2012 05:22:34 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks":
    Returning NULL QBWinInstance Handle

    Error: (07/21/2012 05:22:34 PM) (Source: QuickBooks) (User: )
    Description: An unexpected error has occured in "QuickBooks":
    Returning NULL QBWinInstance Handle

    Error: (07/21/2012 02:12:07 PM) (Source: MPSampleSubmission) (User: )
    Description: EventType mptelemetry, P1 0x80070003, P2 moac, P3 cachereset, P4 4.0.1526.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 mptelemetry0, P10 mptelemetry1.

    Error: (07/21/2012 02:02:22 PM) (Source: crypt32) (User: )
    Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.


    System errors:
    =============
    Error: (07/22/2012 04:44:12 PM) (Source: Microsoft Antimalware) (User: )
    Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

    New Signature Version:

    Previous Signature Version: 1.131.405.0

    Update Source: %NT AUTHORITY59

    Update Stage: 4.0.1526.00

    Source Path: 4.0.1526.01

    Signature Type: %NT AUTHORITY602

    Update Type: %NT AUTHORITY604

    User: NT AUTHORITY\SYSTEM

    Current Engine Version: %NT AUTHORITY605

    Previous Engine Version: %NT AUTHORITY606

    Error code: %NT AUTHORITY607

    Error description: %NT AUTHORITY608

    Error: (07/22/2012 04:44:12 PM) (Source: Microsoft Antimalware) (User: )
    Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

    New Signature Version:

    Previous Signature Version: 1.131.405.0

    Update Source: %NT AUTHORITY59

    Update Stage: 4.0.1526.00

    Source Path: 4.0.1526.01

    Signature Type: %NT AUTHORITY602

    Update Type: %NT AUTHORITY604

    User: NT AUTHORITY\SYSTEM

    Current Engine Version: %NT AUTHORITY605

    Previous Engine Version: %NT AUTHORITY606

    Error code: %NT AUTHORITY607

    Error description: %NT AUTHORITY608

    Error: (07/22/2012 02:25:15 AM) (Source: Microsoft Antimalware) (User: )
    Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

    New Signature Version:

    Previous Signature Version: 1.131.405.0

    Update Source: %NT AUTHORITY59

    Update Stage: 4.0.1526.00

    Source Path: 4.0.1526.01

    Signature Type: %NT AUTHORITY602

    Update Type: %NT AUTHORITY604

    User: NT AUTHORITY\SYSTEM

    Current Engine Version: %NT AUTHORITY605

    Previous Engine Version: %NT AUTHORITY606

    Error code: %NT AUTHORITY607

    Error description: %NT AUTHORITY608

    Error: (07/20/2012 09:56:52 PM) (Source: Windows Update Agent) (User: )
    Description: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

    Error: (07/18/2012 10:04:31 PM) (Source: DCOM) (User: NT AUTHORITY)
    Description: The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.

    Error: (07/18/2012 07:41:43 PM) (Source: Windows Update Agent) (User: )
    Description: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

    Error: (07/16/2012 03:11:35 PM) (Source: Windows Update Agent) (User: )
    Description: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

    Error: (07/15/2012 06:20:15 PM) (Source: W32Time) (User: )
    Description: The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently accessible.
    No attempt to contact a source will be made for 59 minutes.
    NtpClient has no source of accurate time.

    Error: (07/15/2012 06:20:15 PM) (Source: W32Time) (User: )
    Description: Time Provider NtpClient: An error occurred during DNS lookup of the manually
    configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 60
    minutes.
    The error was: A socket operation was attempted to an unreachable host. (0x80072751)

    Error: (07/15/2012 05:50:15 PM) (Source: W32Time) (User: )
    Description: The time provider NtpClient is configured to acquire time from one or more
    time sources, however none of the sources are currently accessible.
    No attempt to contact a source will be made for 29 minutes.
    NtpClient has no source of accurate time.


    Microsoft Office Sessions:
    =========================

    =========================== Installed Programs ============================

    Adobe Flash Player 10 Plugin (Version: 10.3.183.7)
    Adobe Reader X (10.1.1) (Version: 10.1.1)
    AiO_Scan (Version: 43.0.217.000)
    Ask Toolbar (Version: 1.15.2.0)
    Ask Toolbar Updater (Version: 1.2.1.23037)
    avast! Free Antivirus (Version: 7.0.1456.0)
    AVSDK5 (Version: 5.2.9)
    CCleaner (Version: 3.20)
    Dell Resource CD (Version: 1.00.0000)
    Dropbox (Version: 1.4.7)
    Enterprise (Version: 43.0.217.000)
    Google Chrome (Version: 20.0.1132.57)
    High Definition Audio Driver Package - KB888111 (Version: 20040219.000000)
    HiJackThis (Version: 1.0.0)
    HP PSC & Officejet 4.2 Corporate Edition
    Intel(R) Graphics Media Accelerator Driver
    Intel(R) PRO Network Connections 12.1.12.0 (Version: )
    Java Auto Updater (Version: 2.1.6.0)
    Java(TM) 7 Update 5 (Version: 7.0.50)
    JavaFX 2.1.1 (Version: 2.1.1)
    Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
    Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
    Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
    Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
    Microsoft Office 2007 Primary Interop Assemblies (Version: 12.0.4518.1014)
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
    Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
    Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
    Microsoft Security Client (Version: 4.0.1526.0)
    Microsoft Software Update for Web Folders (English) 12 (Version: 12.0.6612.1000)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
    Microsoft Visual Studio 2005 Tools for Office Runtime
    Microsoft Visual Studio 2005 Tools for Office Runtime (Version: 8.0.60940.0)
    Mozilla Firefox 14.0.1 (x86 en-US) (Version: 14.0.1)
    Mozilla Maintenance Service (Version: 14.0.1)
    MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
    MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
    MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
    MSXML 6 Service Pack 2 (KB973686) (Version: 6.20.2003.0)
    QFolder (Version: 1.00.0000)
    QuickBooks (Version: 20.0.4001.807)
    QuickBooks Premier Edition 2010 (Version: 20.0.4001.807)
    QuickTime (Version: 7.71.80.42)
    Realtek High Definition Audio Driver (Version: 5.10.0.5408)
    Scan (Version: 4.1.0.0)
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
    Update for Windows XP (KB898461) (Version: 1)
    Update for Windows XP (KB914882) (Version: 1)
    Update for Windows XP (KB925720) (Version: 1)
    Update for Windows XP (KB955759) (Version: 1)
    Update for Windows XP (KB967715) (Version: 1)
    Update for Windows XP (KB968389) (Version: 1)
    Update for Windows XP (KB971737) (Version: 1)
    Update for Windows XP (KB973687) (Version: 1)
    Update for Windows XP (KB973815) (Version: 1)
    WebFldrs XP (Version: 9.50.7523)
    Webshots Desktop (Version: 3.1.5.7619)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
    Windows Imaging Component (Version: 3.0.0.0)
    Windows Installer 3.1 (KB893803) (Version: 3.1)
    Windows XP Hotfix - KB839210 (Version: 1)
    XnView 1.98.2 (Version: 1.98.2)

    ========================= Devices: ================================


    ========================= Memory info: ===================================

    Percentage of memory in use: 78%
    Total physical RAM: 1013.1 MB
    Available physical RAM: 212.82 MB
    Total Pagefile: 2440.29 MB
    Available Pagefile: 1709.85 MB
    Total Virtual: 2047.88 MB
    Available Virtual: 1979.19 MB

    ========================= Partitions: =====================================

    1 Drive c: () (Fixed) (Total:74.45 GB) (Free:45.66 GB) NTFS

    ========================= Users: ========================================

    User accounts for \\HOMENIKKI

    Administrator ASPNET Guest
    HelpAssistant Nikki SUPPORT_388945a0


    **** End of log ****
     
  13. Ihatecats

    Ihatecats Banned

    Joined:
    Jun 10, 2012
    Messages:
    359
    Download the driver for xp 32 bit the middle one and confirm that you have done everything else that I have laid out for you.

    Also change your dns server.



    Instructions in link below for changing DNs server.
    http://www.computerhope.com/issues/ch001161.htm
    Change your dns to the below.

    Preferred DNs 208.67.222.222

    Alternate dns 208.67.220.220

    Reboot your machine..
     
  14. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,715
    That is not for you to decide. The issue is connecting to the Internet. it's not your place to instruct users to uninstall their current anti-virus program in favour of another so please refrain from this practice in the future and focus on the issue at hand.

    Also, why are you telling them to download an old hotfix (prior to the release of SP3) for W32time time synching? The fact that they are only running SP2 does not justify this. It's more important that they update to SP3 which will correct a lot of problems (although it's not recommended to do so while infected, as is probably the case here as it's been left wide open and vulnerable to attack). Did it not occur to you that the computer is not able to connect to the Internet to synch the time?

    In the future, please do not recommend a series of potentially unnecessary "fixes". It's best to troubleshoot by the process of elimination. :)
     
  15. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,715
    Before we go any further we need to determine if the operating system is genuine.

    Please run the MGA Diagnostic Tool and post back the report it creates:
    • Download MGADiag to your desktop.
    • Double-click on MGADiag.exe to launch the program
    • Click "Continue"
    • Ensure that the "Windows" tab is selected (it should be by default).
    • Click the "Copy" button to copy the MGA Diagnostic Report to the Windows clipboard.
    • Paste the MGA Diagnostic Report back here in your next reply.


    Also please do this:

    Please download WVCheck and save it to your desktop.

    • Double click WVCheck.exe to run it. (If you downloaded the zipped version you will need to extract it first.)
    • As indicated by the prompt, this program can take a while depending on your hard drive space.
    • Once the program is done, copy the contents of the notepad file as a reply.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1062073