[kris74745]

Hello,

I have recently removed a router from our computer. We don't have more than one computer at home. The person who worked on our computer has been charged with fraud, and has been fired as a computer technician... I have used you guys before, and you helped me to get rid of Nail.exe! Thanks for that! Now, I don't really feel that we need some of the things (router) that were put on our computer before. Our technician even had our firewall disabled(this showed being disabled since he touched our computer including when we got infected with nail, and it showed someone else connected to our system. Anyway, after we removed the router, I tried to install the d-link that went with our SBC connection. I don't know exactly how the hardware and local area connection works, but I have to use a separate SBC DSL connection in order to connect to the internet. Our local area connection shows limited or no connectivity, and I need to know what to do to get this connection established. If I try to repair the problem, the IP address is not found. But, like I said, we can still connect through a separate connection...If I disable the Local area connection, then the SBC DSL connection doesn't work. I have talked to SBC plenty of times, and they don't seem to know what the problem is and don't get back with me when they are stuck. Also, I have tried to reinstall the SBC DSL disk, because SBC had me do this, but it doesn't help anything. Please let me know what I need to do to get this straightened out.

Thank you,

Kristi

P.S. Our technician was selling his house, and we inserted a CD of pictures from him because we are interested in his house. It is on a nice 80 acres and I was worried about even putting the CD in the computer. This was last night, and I shut the computer down. This morning, my Windows XP was in Classic style, and I had trouble connecting with the SBC DSL connection. I found the "missing link" in the luna file online, and have XP back to normal, but the rest is beyond me. I appreciate any help you can give!

[Advertisements]

Hello kris74745 and Welcome BACK to G2G,

With your firewalls being disabled and someone else connecting to your computer I would reccomend that you first seek help in the Malware removal forum, just as a precaution to make sure you don't still have any nasties on your computer. Once they give you a "Clean Bill of Health" Post back here and we will get your Connectivity problem resolved.

Edited by SpaceCowboy706, 26 November 2005 - 04:15 PM.

[SpaceCowboy706]

Hello kris74745 and Welcome BACK to G2G,

With your firewalls being disabled and someone else connecting to your computer I would reccomend that you first seek help in the Malware removal forum, just as a precaution to make sure you don't still have any nasties on your computer. Once they give you a "Clean Bill of Health" Post back here and we will get your Connectivity problem resolved.

Edited by SpaceCowboy706, 26 November 2005 - 04:15 PM.

[kris74745]

Hello!

Thanks for the reply. I have done everything on the malware section, and my computer is clean. Here is my hijack log just in case:

Logfile of HijackThis v1.99.1
Scan saved at 3:45:13 PM, on 11/26/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Lexmark 6200 Series\lxbumon.exe
C:\Program Files\Lexmark 6200 Series\ezprint.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\WINDOWS\system32\lxbucoms.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/.../search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://rd.yahoo.com/...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://rd.yahoo.com/...hoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://rd.yahoo.com/...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/.../search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://rd.yahoo.com/...//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://rd.yahoo.com/...hoo.sbc.com/dsl
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://rd.yahoo.com/...//www.yahoo.com
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [VTPreset] VTPreset.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LXBUCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBUtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [lxbumon.exe] "C:\Program Files\Lexmark 6200 Series\lxbumon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 6200 Series\ezprint.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll (file missing)
O16 - DPF: Yahoo! Dice - http://download.game...ts/y/dct4_x.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec....trl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec....trl/tgctlsr.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.t...all/xscan60.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnote...ad/mnviewer.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec....rl/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.c...ntr_current.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1096042541221
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1129054415671
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/s...nfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://photo.walmart...ploadClient.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsec...scan/axscan.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcaf...,21/mcgdmgr.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec....rl/SymAData.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcaf...529/mcfscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AB1C8502-AFF1-4ABA-AD30-369CAF813FEE}: NameServer = 68.94.156.1 68.94.157.1
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: lxbu_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxbucoms.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe

Thank you!

Kristi

[SpaceCowboy706]

Waiting for Malware Tech to clear your log... then we will proceed.

[Buckeye_Sam]

That log looks clean to me. No signs of malware that I can see.

[kris74745]

Good deal! So now how do I go about fixing the connection problems?

Thanks,

Kristi

[kris74745]

One thing I do want to let you know is that ever since I used you guys the first time, I have had no trouble with malware. I was infected with nail.exe when I first got in touch with you, and I am thankful to have it fixed. But shortly after this, my connection messed up. I have been able to log on using a SBC DSL connection, but I don't know exactly how this works. I installed the d-link that came w/DSL, and it still gives me problems. After removing the router, our ebay account was stolen (Paypal), and our "tech", that has been in trouble, made the mistake of telling us he knew about it. I don't know if he has had anything to do with this or if this was just our mistake, but I appreciate any help from you guys!!!!

Thank you,

Kristi

[SpaceCowboy706]

First off we need the following information so I can give you instructions on how to setup you connections.

1. What operating System's do you have on the PC's in question, Please include any Windows Updates or Patches (Example... XP PRO SP1 or SP2)?

2. What is the model of the Dlink?

3. What IP Configuration does the DSL company you subscribe to use (Example.. DHCP, PPoE / Static, Automatic

[kris74745]

Hello,

We use Windows XP Home Edition SP2.

The D-Link is D-Link DFE-530TX+ PCI Adapter.

The LAN shows DCHP, and the DSL connection that I am having to use is going through PPPoE.

Thanks,

Kristi

[SpaceCowboy706]

You may have already performed some or all of these steps in your own troubleshooting, or in your troubleshooting over the phone with your internet subscriber and I am aware of this. But I need you to follow these exact steps again to ensure we are not missing anything.

1st off lets verify that the correct drivers are loaded for your network card (Dlink). Heres how:

1. Click on START
2. Position your mouse over "MY COMPUTER" and "RIGHT" click on it to select "PROPERTIES"
3. Click on the "HARDWARE" tab
4. Click on the "DEVICE MANAGER" button
5. Scroll down to "NETWORK ADAPTERS"
6. Without selecting it or clicking on it, Is there a "+" or "-" sign next to it? <REPLY 1>
7. On the "D-Link DFE-530TX" is there a red x or yellow exclamation point over it? <REPLY 2>
8. Select the "D-Link DFE-530TX" by LEFT clicking on it... then RIGHT click on it and select "PROPERTIES"
9. Select the "GENERAL" tab.
10. Look in the "DEVICE STATUS" box and copy down exactly what it says? <REPLY 3>
11. Cancel out of all these screens until you are back at your desktop again.
12. Post back replies 1,2 and 3.

2nd, lets verify the physical connections are correct and do a soft boot. Heres How:

1. Verify that your Phone line is plugged into your DSL Modem.
2. Unplug the cat5 connection. (Unplug any other internet connections also)
3. Unplug power from the modem wait a few seconds then plug power back in. Wait for the modem to sync all the way back up.
4. Turn the computer off. (Do not do a Restart)
5. Turn the computer on. (Do not do a restart)
6. Reconnect the Cat5 line from the modem to the Network card on the back of the computer.
7. Click on START
8. Click on RUN
9. Type in IPCONFIG and hit enter.
10. Copy down the results. <REPLY 4>
11. Type in EXIT and hit enter.
12. Load the Self install / Setup disk Disk that came from your ISP.
13. After that process is done RESTART the PC.
14. Wait for the PC to boot up then Click on START.
15. Click on RUN
16. Type in IPCONFIG and hit enter.
17. Copy down the results. <REPLY 5>
18. Type in EXIT and hit enter.
19. Post back your results for replies 4 and 5.

[kris74745]

1. There is a - beside the network adapters
2. There isn't anything over the Dlink, but there is another adapter called VIA Rhine II Fast Ethernet Adapter, and it has a red x over it.
3. This device is working properly.

If you are having problems with this device, click Troubleshoot to start the troubleshooter.


I will try the 2nd half of the post now!

Thank you,

Kristi

[kris74745]

Okay...

I have had a hard time trying to establish a connection...I could not get into IPCONFIG. I followed directions completely. The screen blinked at me... After one time when my computer had rebooted and I tried to run IPCONFIG, the screen froze. All I could make out of the black screen was DNS server, and below that was a short list. What was beside the list was all zeros. When I tried to install my SBC DSL CD, the connection couldn't be established. The connection to the internet was immediately lost, and this has happened repeatedly after speaking with SBC. After playing with the connections for EVER I figured out how to insert our password, and that seemed to allow a connection. Only now am I able to reply back...Just to let you know...as soon as I boot up, the local area connection tries to connect, and it shows limited or no connectivity and has a yellow warning sign in fron of it. Also, I had contacted SBC (a few times), and they could not help me...I can't update any of the SBC features, and SBC DSL will not let me use the new programs to which I subscribe (e.g. antivirus, login, etc.) Recently, they would not reply back to me. I am truly thankful for people like you that will help others on their spare time. Just let me know what else there is to do in my case.


Thanks,

Kristi


It is time for bed, and I have class tomorrow morning...I hope to hear from you soon!!!!

Edited by kris74745, 01 December 2005 - 01:14 PM.

[SpaceCowboy706]

WOw... No IP CONFIG..... THATS ODDDDDDDDD....

Lets try swapping connections, please complete the following:

1. Click on START
2. Position your mouse over "MY COMPUTER" and "RIGHT" click on it to select "PROPERTIES"
3. Click on the "HARDWARE" tab
4. Click on the "DEVICE MANAGER" button
5. Scroll down to "NETWORK ADAPTERS"
6. Select the "VIA Rhine II Fast Ethernet Adapter" by LEFT clicking on it... then RIGHT click on it and select "ENABLE". Wait for the list to refresh.
7. On the "VIA Rhine II Fast Ethernet Adapter" is there a red x or yellow exclamation point over it? <REPLY 1>
8. Select the "VIA Rhine II Fast Ethernet Adapter" by LEFT clicking on it... then RIGHT click on it and select "Properties".
9. Select the "GENERAL" tab.
10. Look in the "DEVICE STATUS" box and copy down exactly what it says? <REPLY 2>
11. Cancel out of all these screens until you are back at your desktop again.
12. Post back replies 1 and 2.


Now lets REPEAT these following steps:

1. Verify that your Phone line is plugged into your DSL Modem.
2. Unplug the cat5 connection from the computer. (Unplug any other internet connections also)
3. Unplug power from the modem wait a few seconds then plug power back in. Wait for the modem to sync all the way back up.
4. Turn the computer off. (Do not do a Restart)
5. Turn the computer on. (Do not do a restart)
6. After the computer boots up, reconnect the Cat5 line from the modem to the Network card on the back of the computer.
7. Click on START
8. Click on RUN
9. Type in IPCONFIG and hit enter.
10. Copy down the results. <REPLY 3>
11. Type in EXIT and hit enter.
12. Load the Self install / Setup disk Disk that came from your ISP.
13. After that process is done RESTART the PC.
14. Wait for the PC to boot up then Click on START.
15. Click on RUN
16. Type in IPCONFIG and hit enter.
17. Copy down the results. <REPLY 4>
18. Type in EXIT and hit enter.
19. Post back your results for replies 3 and 4.

[kris74745]

When I clicked on the VIA it says adapter #2, and it opens a different connection after I enable it. There isn't a red x on it anymore. The device is working properly.

[kris74745]

I tried the IP config, and it still flashed and wouldn't stay up long enough for me to read it. I tried it more than once, and I saw zeros again. I am still using the separate DSL connection. The local area connection has a yellow warning sign in front, and the connection from VIA has a red X over it.

Thanks,

Kristi