1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Kazaa works, Internet doesn't

Discussion in 'Web & Email' started by Airforcedc2, Jul 12, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. Airforcedc2

    Airforcedc2 Thread Starter

    Joined:
    Jul 12, 2003
    Messages:
    22
    I am connected to a network via D-link hub.....wks fine.
    lately, my internet connection is shown in taskbar as "active" allowing Kazaa to connect and stay connected, allowing outlook express to send and receive emails, and my aol im also works.
    However :mad: i can't get anywhere on the internet. when i call up a page, oh, let's say Google (it has always worked for me) my browser shows that it's actively searching (the "e" is spinning) but it'll search for ever without any luck. I have pinged my host comp...wks fine. when i ping a web page from DOS, it times out. I am somewhat knowledgeable regarding computers so this petty problem has got me numb with anger.
    any and all help will be GREATLY appreciated.

    thanks in advance,

    airforce

    p.s. searched the site for a duplicate question, and didn't find one...sorry if this has already been answered
     
  2. Corrosive

    Corrosive

    Joined:
    Jan 9, 2003
    Messages:
    1,058
    At last, a new user who seems to know a bit of netiquette! Welcome!

    It will drastically help the troubleshooting process if you could have a think about approximately when this phenomena began to occur, so that some reasonable conclusions can be drawn. Right now, I have a list of possibilities from an incorrectly configured firewall to a high pollen count.
     
  3. Airforcedc2

    Airforcedc2 Thread Starter

    Joined:
    Jul 12, 2003
    Messages:
    22
    i think it stopped working when i updated my bios.....if not, then it was definately when the host tried to connect to a different computer. the person i live with unplugged stuff and set up new connections and i have no idea what on earth he could have changed....i am pretty sure he's running a firewall though

    thanks for your interest in my problem
     
  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    It's doubtful that it's a BIOS problem. Most often when we see a problem where a usuer successfully establishes an internet connection, but cannot connect to any sites other than, say ftp or ISP related ones, it is a problem with a corrupt Winsock2 vxd which contain what are known as "layered service protocols".

    Kazzaa installs can sometimes do this because certain domain modifying programs like New.net get installed with them. When they get damaged, that problem results. (Look in Add/Remove programs for New.net and remove it if you can).

    If you can manage to post a HijackThis Scanlog for the system it would be helpful:

    http://www.tomcoyote.org/hjt/

    A "quick fix" for a damaged LSP would be to run the program here:

    http://www.cexx.org/lspfix.htm

    You can copy it to a floppy disk.
     
  5. Airforcedc2

    Airforcedc2 Thread Starter

    Joined:
    Jul 12, 2003
    Messages:
    22
    Logfile of HijackThis v1.95.0
    Scan saved at 7:53:53 PM, on 7/12/2003
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    D:\Downloads\wbload.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\ati2evxx.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    C:\Program Files\Common Files\Stardock\TrayServer.exe
    C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\inKline Global\PC Booster\pcbooster.exe
    C:\WINDOWS\System32\atiptaxx.exe
    C:\Program Files\Common Files\CMEII\CMESys.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Documents and Settings\Christa\My Documents\CursorXP.exe
    C:\Program Files\Kontiki\bin\kontiki.exe
    C:\Program Files\Common Files\GMT\GMT.exe
    C:\Program Files\Palm\HOTSYNC.EXE
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
    C:\Program Files\AIM95\aim.exe
    D:\KaZaA Lite\kazaalite.kpp
    \LAMBO\SharedDocs\Shared Stuff\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://search.rub.to
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.searchalot.com/search.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.entertainmentcareers.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://search.rub.to
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.searchalot.com/search.htm
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://www.searchalot.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://www.searchalot.com/search.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\System32\blank.htm
    O2 - BHO: (no name) - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} - C:\Program Files\Kontiki\bin\bh304181.dll
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O2 - BHO: (no name) - {D14641FA-445B-448E-9994-209F7AF15641} - (no file)
    O2 - BHO: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: SearchIt&! - {21301D69-B8F1-46AA-B0B5-09EE2285914C} - C:\WINDOWS\ctb\CustomToolbar.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [1A:Stardock TrayMonitor] "C:\Program Files\Common Files\Stardock\TrayServer.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [PC Booster] C:\Program Files\inKline Global\PC Booster\pcbooster.exe
    O4 - HKLM\..\Run: [ATIPTA] atiptaxx.exe
    O4 - HKLM\..\Run: [CMESys] "C:\Program Files\Common Files\CMEII\CMESys.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [CursorXP] C:\Documents and Settings\Christa\My Documents\CursorXP.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [DesktopX] "C:\Program Files\Object Desktop\DesktopX\DesktopX.exe"
    O4 - HKCU\..\Run: [cnet] "C:\Program Files\Kontiki\bin\kontiki.exe" -s cnet -q
    O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
    O4 - Startup: PowerReg Scheduler.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Get It With Kontiki - res://C:\Program Files\Kontiki\bin\bh304181.dll/201
    O9 - Extra button: AIM (HKLM)
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: Real.com (HKLM)
    O14 - IERESET.INF: SEARCH_PAGE_URL=http://www.searchalot.com/search.htm
    O14 - IERESET.INF: START_PAGE_URL=http://www.searchalot.com
    O14 - IERESET.INF: MS_START_PAGE_URL=http://www.searchalot.com
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {0D4312E2-5E4D-4A27-A9D8-043E43904277} - http://lop.com/dialer/go/zoop.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://simcity.ea.com/patch/EARTPX.cab
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37750.8008796296
    O16 - DPF: {A7532940-DB22-4B10-BE6A-B467E5330745} (CustomToolbar.Setup) - http://mojo.com/toolbar/Customtoolbar.CAB
    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {C36661D7-3590-45B1-80B5-520839E94DAD} (MaxisSimCity4PatcherX Control) - http://simcity.ea.com/patch/MaxisSimCity4PatcherX.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://active.macromedia.com/flash2/cabs/swflash.cab
    O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (YBIOCtrl Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/toolbar/my/yiebio4_0_2_10.cab
    O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://sea1fd.sea1.hotmail.msn.com/activex/HMAtchmt.ocx


    THANK YOU for doing my dirty work(y)
     
  6. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    You do have a number of Hijack issues there, although not what I was expecting to see -- unless you ran the lsp fix program or removed new.net before posting.

    Here are some things to "check and fix" with HijackThis (close IE first):

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://search.rub.to
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.searchalot.com/search.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.entertainmentcareers.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://search.rub.to
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.searchalot.com/search.htm
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://www.searchalot.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://www.searchalot.com/search.htm

    O2 - BHO: (no name) - {D14641FA-445B-448E-9994-209F7AF15641} - (no file)

    O2 - BHO: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    ^^^ this is associated with Yahoo Companion which otherwise appears removed

    O3 - Toolbar: SearchIt&! - {21301D69-B8F1-46AA-B0B5-09EE2285914C} - C:\WINDOWS\ctb\CustomToolbar.dll

    O4 - HKLM\..\Run: [CMESys] "C:\Program Files\Common Files\CMEII\CMESys.exe"

    ^^ advertising/spyware

    O14 - IERESET.INF: SEARCH_PAGE_URL=http://www.searchalot.com/search.htm
    O14 - IERESET.INF: START_PAGE_URL=http://www.searchalot.com
    O14 - IERESET.INF: MS_START_PAGE_URL=http://www.searchalot.com

    O16 - DPF: {0D4312E2-5E4D-4A27-A9D8-043E43904277} - http://lop.com/dialer/go/zoop.cab

    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/...n/bin/cabsa.cab

    ^^^ http://www.symantec.com/avcenter/security/Content/2003.06.25.html

    ==================

    These are probably all unrelated to your connectivity problem but should be fixed.

    When you can, I would recommend installing, Updating and running Spybot. You may be able to install and run without updating if you can copy the setup file over.

    http://tomcoyote.org/SPYBOT/

    --===================

    Now you have some "questionable", in my opinion, startups which could be affecting connectivity issues, one of which is:

    HKLM\..\Run: [PC Booster] C:\Program Files\inKline Global\PC Booster\pcbooster.exe

    What I would recommend is you run msconfig -- the System Configuration utility -- and do a "clean boot" by unchecking the entire startup group.

    Then you can test to see if any remaining problems are being caused by startups under the startup tab and selectively disable/enable to isolate them.

    Finally, if no success, how about doing a System Restore to a date prior to the Kazaa install. You may have to remove some entries using HijackThis or Spybot again, depending on what might have existed prior.
     
  7. Airforcedc2

    Airforcedc2 Thread Starter

    Joined:
    Jul 12, 2003
    Messages:
    22
    thanks, i'll try that and post a response shortly
     
  8. Airforcedc2

    Airforcedc2 Thread Starter

    Joined:
    Jul 12, 2003
    Messages:
    22
    Logfile of HijackThis v1.95.0
    Scan saved at 9:58:29 AM, on 7/13/2003
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    D:\Downloads\wbload.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Stardock\TrayServer.exe
    C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\System32\atiptaxx.exe
    C:\Documents and Settings\Christa\My Documents\CursorXP.exe
    C:\Program Files\Common Files\GMT\GMT.exe
    C:\Program Files\Palm\HOTSYNC.EXE
    C:\Program Files\Common Files\CMEII\CMESys.exe
    C:\WINDOWS\System32\ati2evxx.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
    \LAMBO\SharedDocs\Shared Stuff\hijackthis\HijackThis.exe
    \LAMBO\SharedDocs\Shared Stuff\spybotsd12.exe
    C:\DOCUME~1\Christa\LOCALS~1\Temp\INS4.tmp

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.entertainmentcareers.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.searchalot.com/search.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\System32\blank.htm
    O2 - BHO: (no name) - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} - C:\Program Files\Kontiki\bin\bh304181.dll
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [1A:Stardock TrayMonitor] "C:\Program Files\Common Files\Stardock\TrayServer.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [mmtask] C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [ATIPTA] atiptaxx.exe
    O4 - HKLM\..\Run: [CMESys] "C:\Program Files\Common Files\CMEII\CMESys.exe"
    O4 - HKCU\..\Run: [CursorXP] C:\Documents and Settings\Christa\My Documents\CursorXP.exe
    O4 - HKCU\..\Run: [DesktopX] "C:\Program Files\Object Desktop\DesktopX\DesktopX.exe"
    O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
    O4 - Startup: PowerReg Scheduler.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: AIM (HKLM)
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://simcity.ea.com/patch/EARTPX.cab
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37750.8008796296
    O16 - DPF: {A7532940-DB22-4B10-BE6A-B467E5330745} (CustomToolbar.Setup) - http://mojo.com/toolbar/Customtoolbar.CAB
    O16 - DPF: {C36661D7-3590-45B1-80B5-520839E94DAD} (MaxisSimCity4PatcherX Control) - http://simcity.ea.com/patch/MaxisSimCity4PatcherX.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://active.macromedia.com/flash2/cabs/swflash.cab
    O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - http://us.dl1.yimg.com/download.yahoo.com/dl/toolbar/my/yiebio4_0_2_10.cab
    O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://sea1fd.sea1.hotmail.msn.com/activex/HMAtchmt.ocx
     
  9. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    The continued presence of these startups suggests either you haven't run Spybot yet, or they are being reinstalled by Kazaa. You may need to uninstall Kazaa and switch to the spyware free version "kazaalite". In fact this is a necessity if you want to use Kazaaa without spyware:

    O4 - HKLM\..\Run: [CMESys] "C:\Program Files\Common Files\CMEII\CMESys.exe"

    O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe

    Also, what exactly did you do to accomplish the "partial" resolution?

    And I'm not sure why this should be a running process, it is not a standard startup service in XP:

    C:\WINDOWS\System32\tcpsvcs.exe

    It might have come with the internet booster and not been removed on uninstall. It is associated with remote install server software from what I can gather.

    Services can be disabled though Administrative Tools > Services. Look for that, double click on it and set it to disabled. If something you need stops functioning (perhaps Kontiki), try setting it to manual.

    And though not related to your problem, I would recommend removing this with HijackThis:

    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

    If it continues to reappear, see below:



    Dumprep
    DumpRep.exe
    (Microsoft)
    Windows Error Reporting Dump Reporting Tool._ Found on Windows XP/2003._ It shows as a startup item whose execution line usually reads as "KernelFaultCheck" %systemroot%\system32\dumprep 0 ?k. _DUMPREP creates memory dump reports that you can send to Microsoft if you answer "Yes" when prompted to send such reports._ In our experience this entry only shows up for the first time after your PC has experienced a Windows XP "dump" crash, or an Office XP or Internet Explorer 6 crash where you were prompted about sending the crash results to Microsoft.
    Recommendation_:
    It is our experience that having Error Reporting set to ON only causes more crashes._ The mind boggles at this_:_ in both Netscape and Internet Explorer our experience shows that if you turn error reporting ON, you will crash often in either browser, if not sometimes always_!!_ You?ve guessed it, avoid Error Reporting like the plague. In both Windows_XP and Windows_2003 turn it OFF by opening the SYSTEM icon in the Control Panel, choosing the ADVANCED tab, and then clicking on Error_Reporting.

    http://www.answersthatwork.com/Tasklist_pages/tasklist_d.htm
     
  10. Airforcedc2

    Airforcedc2 Thread Starter

    Joined:
    Jul 12, 2003
    Messages:
    22
    ok,
    i ran hijack again, and got rid of the necessary fields. then i went into my administrative section and saw that the c:\windows\system32\tcpsvcs was already disabled.....i tried running spybot, it caught and cleaned about 100 things.

    when i check out the the "host files" in spybot hoping to find www.google.com, it's not there....so there's no reason (that i can fathom) as to why google shouldn't work.

    that tcpsvcs isn't stock as you said, it's something about quote of the day (never signing up for that garbage again) and i don't plan on keeping it once you give the go-ahead to delete it. i am always weary of system 32 files

    thanks

    p.s. i am already running kazaalite, not kazaa
     
  11. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Can you give me some examples of sites you are having problems with, and what exact error message you encounter? Is Google the only one?

    you say tcpsvcs.exe was already disabled. Is it still showing as a Running Process?

    If so, something else is starting it up. If you run msconfig and click on the Services tab, is it listed there with a check in it? There really should be no need to delete it and it might get reinstalled by system file protection anyway. It's in my system32 directory as well but it doesn't start up, in fact I don't see it at all in Administrative Tools > Services

    Do the problems persist with all startups disabled doing a clean boot?

    Finally, one issue I've seen with XP repeatedly is when these search hijacks occurs when other User Profiles are installed on the system. You must review Scanlogs while logged on under each profile. Spybot must be run under each as well.
     
  12. Airforcedc2

    Airforcedc2 Thread Starter

    Joined:
    Jul 12, 2003
    Messages:
    22
    google isn't the only one
     
  13. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/146352

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice