[imfeelinglucky]

Hello,

After installing and uninstalling a special-purpose software (ABB) I am having trouble getting connected to the Internet. Usually when the windows starts it connects as usual but as soon as another application tries to get to the net everything collapses. But recently it wont work even after a fresh restart!!
Furthermore it takes ages to restart. (network properties before login)

Any help is appreciated,
Ben

here`s the highjackthis file:

Logfile of HijackThis v1.99.1
Scan saved at 05:17:03, on 2005/07/02
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\SYSTEM32\THOTKEY.EXE
C:\Programme\TOSHIBA\TME3\Tmesbs3.exe
C:\Programme\TOSHIBA\TME3\Tmesrv3.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINNT\Explorer.EXE
C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\Dokumente und Einstellungen\John Smith\Desktop\short cuts\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\McAfee.com\Agent\McAgent.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Programme\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Programme\Google\GoogleToolbar1.dll/cmtrans.html
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = PEG
O17 - HKLM\System\CCS\Services\Tcpip\..\{9BD6AFDD-714B-4C22-9AE5-B4A2CC4C9B6E}: NameServer = 199.172.0.1,199.172.0.2
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = PEG
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = PEG
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: ABB MMS Server for AC 800M/C (MMSService) - Unknown owner - C:\Program Files\ABB Industrial IT\Control IT\Common Files\MMSServer\MMSService.exe (file missing)
O23 - Service: ABB RNRP Service (RnrpSvc) - Unknown owner - C:\WINNT\system32\RNRPSvc.exe (file missing)
O23 - Service: THotkey (THOTKEY) - TOSHIBA Corp. - C:\WINNT\SYSTEM32\THOTKEY.EXE
O23 - Service: Tmesbs3 (Tmesbs) - Toshiba Corporation - C:\Programme\TOSHIBA\TME3\Tmesbs3.exe
O23 - Service: Tmesrv3 (Tmesrv) - Toshiba - C:\Programme\TOSHIBA\TME3\Tmesrv3.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe

[Advertisements]

Hi,

1.) What was the software you uninstalled for? Also, what was it called?
2.) What kind of internet connection do you have?
3.) Have you tried resetting your modem? (if you have dsl or cable) unplug the power cord for like 30 seconds, plug it back in, and reboot.
4.) Does this happen with any program or just a certain one?

B

[Besttechie]

Hi,

1.) What was the software you uninstalled for? Also, what was it called?
2.) What kind of internet connection do you have?
3.) Have you tried resetting your modem? (if you have dsl or cable) unplug the power cord for like 30 seconds, plug it back in, and reboot.
4.) Does this happen with any program or just a certain one?

B

[imfeelinglucky]

1)ABB MMS Server ( a programming software)
2) I have 2 LANs
3)The modem is fine with other computers...
4)No Internet browser works (niether ping) at this moment but other computers are listed in "my network places"

[Besttechie]

Ok, download Winsockfix, burn it to a CD, make sure you burn it as a data cd. Then copy the exe over to the PC without an internet connection and run it.

Winsockfix download:
http://www.tacktech....ay.cfm?ttid=257

Make sure to follow the directions on the page.

Good luck!

B

[imfeelinglucky]

I did as you said but everything still seems to be the same. It wonders me why it takes such a long time before the login screen (preparing network connection).

Ben

[Besttechie]

Ok, lets try doing this:

Close all windows except HijackThis and have HijackThis fix the following.

O23 - Service: ABB MMS Server for AC 800M/C (MMSService) - Unknown owner - C:\Program Files\ABB Industrial IT\Control IT\Common Files\MMSServer\MMSService.exe (file missing)
O23 - Service: ABB RNRP Service (RnrpSvc) - Unknown owner - C:\WINNT\system32\RNRPSvc.exe (file missing)

Next, right click your connection, and choose Repair.

Then reboot, and post a new HijackThis log in your next post as well as how that went.

B

[imfeelinglucky]

Thank you,

Nothing has changed. See the new logfile below.

Let me give you a better overview of the current situation. As I said I have access to 2 networks, one with cable and the other
with USB modem. Right now things are running only with the cable connection(LAN). USB ports are good as I am using USB memory sticks and so is the USB modem (tested with another pc).
But the network doesn`t run on the USB modem.


Ben

Logfile of HijackThis v1.99.1
Scan saved at 03:58:37, on 2005/07/04
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\SYSTEM32\THOTKEY.EXE
C:\Programme\TOSHIBA\TME3\Tmesbs3.exe
C:\Programme\TOSHIBA\TME3\Tmesrv3.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
C:\PROGRA~1\McAfee.com\Agent\McAgent.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\WINNT\system32\wuauclt.exe
C:\Dokumente und Einstellungen\John Smith\Desktop\short cuts\HijackThis.exe
c:\programme\mcafee.com\shared\mcinfo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\McAfee.com\Agent\McAgent.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Programme\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Programme\Google\GoogleToolbar1.dll/cmtrans.html
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = PEG
O17 - HKLM\System\CCS\Services\Tcpip\..\{9BD6AFDD-714B-4C22-9AE5-B4A2CC4C9B6E}: NameServer = 199.172.0.1,
199.172.0.2

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = PEG
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = PEG
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: ABB MMS Server for AC 800M/C (MMSService) - Unknown owner - C:\Program Files\ABB Industrial IT\Control IT\Common Files\MMSServer\MMSService.exe (file missing)
O23 - Service: ABB RNRP Service (RnrpSvc) - Unknown owner - C:\WINNT\system32\RNRPSvc.exe (file missing)
O23 - Service: THotkey (THOTKEY) - TOSHIBA Corp. - C:\WINNT\SYSTEM32\THOTKEY.EXE
O23 - Service: Tmesbs3 (Tmesbs) - Toshiba Corporation - C:\Programme\TOSHIBA\TME3\Tmesbs3.exe
O23 - Service: Tmesrv3 (Tmesrv) - Toshiba - C:\Programme\TOSHIBA\TME3\Tmesrv3.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe

[Besttechie]

Ok, I just want to clear some things up here, so I'm sure I understand you.

1.) You have two cable connections? One via USB and one via what?
2.) How many PC's are on this network?
3.) All the PC's except one can connect to the internet, correct?
4.) Does the PC that can't connect have any firewall software installed?
5.) What browsers have you tried to connect with? IE? Have you tried Firefox or something as well?
6.) Maybe try doing an ipconfig /flushdns from the command prompt. (notice the space)
7.) What happens when you open your browser? Do you get a 404? A blank page? Or what?
8.) How are they networked? Via router?
9.) Does the PC have internet access if it's directly connected to the modem?
10.) If you're using the USB modem, does any PC connect to the internet?

B

[imfeelinglucky]

1)Yes two connections. one via USB and the other is a LAN which is connected to a local network
2)Around 7 PCs are on the network
3)No, I have no problem with the local network. The trouble is with the USB connection
4)I have disabled the firewall
5)I have tried IE, Mozilla
6)OK
7)"the page cannot be displayed....cannot find server or DNS Error" but the connection logo on the tray shows that the PC is connected and netstat says there are actually connections to the IP
8)I am not sure about the local network but there is a server
9)As I said the internet connection works without any problem in the LAN network but I have no connection whatsoever with the USB modem (The USB modem works with other PCs and the USB ports are OK. I even tried installing the modem again...)
10)I am the only user which is connected to the USB modem

Ben

[Besttechie]

Hmm, Ok. Check out this link:

Look under the page cannot be displayed part.
http://www.kellys-ko...xp.com/xp_p.htm

B

[imfeelinglucky]

Hi B,

It's working now. I have no idea what the problem might be. I will post a message when it stops!

Thanks,
Ben

[Besttechie]

Ok, sounds good! Let's hope it keeps working!

B

[imfeelinglucky]

I am still having the same problem. some times it works and some times it doesn't. I thought it was IE but I can't get connected with Mozilla either. It's now working only with proxy. Skype is OK!
Netstat show that TCP is in "sync_sent" with a lot of unknown ip addresses with different ports.

[gerryf]

could we back up....

the usb modem is connected to the Internet, and the network interface card (assumption), is connected to a LAN of multiple workstations.

These workstations are connected to the Interent through some other means, or not at all (or through your PC using ICS)?

[imfeelinglucky]

Not exactly, I work at 2 places with the PC so I have two different connections. First one is the LAN and the local network which works all right. My second internet connection which I am having trouble with is a broadband connection and uses a USB modem. So it's a stand alone PC with an external USB modem and a broadband cable.