[jyoung]

In early December 2005, I registered with GTG and followed the Malware Forums instructions in the 'start here' link. After following these instructions, I posted my first message in the Malware Forum because I still had some problems with my computer. After receiving help from one of the GTG malware experts, all but one of the problems was resolved. This problem was that I was unable to connect to the internet with my usual ISP. The malware expert, greyknight17, suggested that I post a new message in the Internet and Browsers Forum or the Networking Forum to see if we were over looking something.
In case it helps you solve my problem, what follows is a description of my situation and a history of what has already been done. My ISP is MichNet. It is part of the Merit System, a free or inexpensive internet service used by many universities, public schools, and educators. Because my wife and I are both educators, we are able to use this ISP without any cost to us. There is no software to install. I use the windows connection wizard to enter our username, password, and dialup phone number. All of this has worked for many years on several different computers that we have had. We had no problems until late November 2005. This is when I started having “SpySheriff” and other popup boxes telling me that my computer was infected. This is also when I was first unable to connect to MichNet. I suspected that the malware had somehow disabled the dialer of my computer. I used other computers and did a google-search of "SpySheriff". This search lead me to your website, GeeksToGo.com. At your website, I found a link to download a program named WinsockXPFix. I downloaded this program to the computer I was using and transferred the file to my infected computer in hopes that it would fix the problem and enable me to dial up to get on the internet. It did not work. I was still unable to connect.
Because I was still unable to get online, I installed a 50-day free trial copy of America Online to see if it would dial correctly and connect to the internet. I felt that this would tell me if my modem and phone line were working okay. AOL did connect, so I came back to GeeksToGo.com and followed the instructions in the ‘start here’ procedures. I downloaded, installed, updated, and ran:
1. CleanUp
2. Ad-Aware SE (it found and cleaned many files)
3. CWShredder (it did not find any files to fix)
4. Spybot S&D (it found and cleaned many files)
5. Ewido Security Suite (it found and cleaned many files)
6. Trend Housecall (3 programs needed security patches downloaded. I was successful at 2 of the 3)
7. TrojanHunter (it did not find any files to fix)
I have ran my own McAfee AntiVirus and AntiSpyware, rebooted, ran Ad-Aware, CWShredder, Spybot, Ewido, TrojanHunter, rebooted, and re-ran WinsockXPFix many times. My windows dialer still will not connect with MichNet. However, having been convinced I had the malware removed from my computer, I then installed Windows XP Service Pack 2. The installation appeared to have been successful and I had hoped that installing SP2 would have resolved my dialing problem, but it did not.
It was at this point, I posted my first message in the Malware Forum. I included a ‘HighJackThis’ log. Greynight17 replied and I followed his instructions regarding deleting items with ‘HighJackThis’, downloading and running smitrem in safe mode and posting its log, re-running ewido and posting its log, doing an online scan with Panda ActiveScan and posting its log. I have downloaded 'smitfraud' and ran it, downloaded a different WinsockFix and ran it, deleted the settings for the MichNet connection, restarted my computer and tried connecting online again without success. I have downloaded and ran LSPFix. After 26 posts back and forth with greyknight17, he suggested I try the Internet and Browsers Forum or the Networking Forum.
I have tried a couple of other things on my own. First, because I have two phone lines in my home, I tried switching phone lines and trying to connect. No success. Secondly, since my phone line is routed through a surge protector and a fax machine before reaching my computer, I tried hooking the computer directly to the phone jack to see if it made any difference. It did not, I still could not connect.
Please help. I have run out of ideas to try. (I also posted this in the Internet and Browsers Forum)
jyoung

[Advertisements]

Hi jyoung,

Could you please run a few tests to give me a better idea of whats going on:

Goto Start, Run, type CMD, press 'OK' and then type: IPCONFIG /ALL - please post the results here by right-clicking on the Command Prompt window, selecting 'Select All', pressing Ctrl+C, and then posting on this forum.

Test your Network
1. Goto Start, Run, type: NETSH DIAG GUI - press 'OK'. A Command Prompt window will open temporarily; don't touch it, it will disappear in a moment.
2. A Microsoft Help and Support window will then open; select the option 'Scan your system'.
3. Wait for the scan to finish and then scroll down to the heading 'Modems and Network Adapters'. Look at 'Network Adapters' (don't expand it yet). Beside your connection information, you should see a green 'PASSED'; if you do not (if you see a red 'FAILED') then expand 'Network Adapters', scroll down the list until you see the heading with the 'FAILED', expand that option and copy and paste the results here.
In the NETSH DIAG GUI, you should be looking for any red 'FAILED', however the key one is Network Adapters for you. If you see any other red FAILED, expand the component and copy the results.

Please goto Start, Run, type CMD and press 'OK' - now type: netstat -rn and press enter; please post the results here.

Goto Start, Run, type CMD and press 'OK' - now type: PATHPING Your_DNS_Server - please copy and paste the results by right-clicking on the Command Prompt window, selecting 'Select All', and then pressing Ctrl+C. Please post the results here.
*Note: You can find your DNS Server by going to Start, Run, type CMD, press 'OK', then type: ipconfig /all and looking for DNS Server ........... IP (there should be multiple addresses, any of them will do fine)

To create your MSINFO information:
For Windows 2000/Win XP

• Click on the START menu, select RUN and type MSINFO32 and select OK.
• When the Microsoft System Information program opens, select FILE and select EXPORT.
• Save the information as MSINFO.txt to your desktop or other easily found location.
• This is a large file so lets copy only important parts.[1] Copy and paste from [System Information] to [DMA].
  [2] Copy and paste from [IRQs] to [Memory].
  [3] Copy and paste from [Running Tasks], [Services], [System Hooks] and [Windows Error Reporting].

Other Windows

• Click on the START menu, select RUN and type MSINFO32 and select OK.
• When the Microsoft System Information program opens, select FILE and select EXPORT.
• Save the information as MSINFO.txt to your desktop or other easily found location.
• This is a large file so lets copy only important parts.[1] Copy and paste from [System Information] to [DMA].
  [2] Copy and paste from [IRQs] to [Memory].
  [3] Copy and paste from [Running Tasks] to [System Hooks].

Thanks,
Dan.

[Dan]

Hi jyoung,

Could you please run a few tests to give me a better idea of whats going on:

Goto Start, Run, type CMD, press 'OK' and then type: IPCONFIG /ALL - please post the results here by right-clicking on the Command Prompt window, selecting 'Select All', pressing Ctrl+C, and then posting on this forum.

Test your Network
1. Goto Start, Run, type: NETSH DIAG GUI - press 'OK'. A Command Prompt window will open temporarily; don't touch it, it will disappear in a moment.
2. A Microsoft Help and Support window will then open; select the option 'Scan your system'.
3. Wait for the scan to finish and then scroll down to the heading 'Modems and Network Adapters'. Look at 'Network Adapters' (don't expand it yet). Beside your connection information, you should see a green 'PASSED'; if you do not (if you see a red 'FAILED') then expand 'Network Adapters', scroll down the list until you see the heading with the 'FAILED', expand that option and copy and paste the results here.
In the NETSH DIAG GUI, you should be looking for any red 'FAILED', however the key one is Network Adapters for you. If you see any other red FAILED, expand the component and copy the results.

Please goto Start, Run, type CMD and press 'OK' - now type: netstat -rn and press enter; please post the results here.

Goto Start, Run, type CMD and press 'OK' - now type: PATHPING Your_DNS_Server - please copy and paste the results by right-clicking on the Command Prompt window, selecting 'Select All', and then pressing Ctrl+C. Please post the results here.
*Note: You can find your DNS Server by going to Start, Run, type CMD, press 'OK', then type: ipconfig /all and looking for DNS Server ........... IP (there should be multiple addresses, any of them will do fine)

To create your MSINFO information:
For Windows 2000/Win XP

• Click on the START menu, select RUN and type MSINFO32 and select OK.
• When the Microsoft System Information program opens, select FILE and select EXPORT.
• Save the information as MSINFO.txt to your desktop or other easily found location.
• This is a large file so lets copy only important parts.[1] Copy and paste from [System Information] to [DMA].
  [2] Copy and paste from [IRQs] to [Memory].
  [3] Copy and paste from [Running Tasks], [Services], [System Hooks] and [Windows Error Reporting].

Other Windows

• Click on the START menu, select RUN and type MSINFO32 and select OK.
• When the Microsoft System Information program opens, select FILE and select EXPORT.
• Save the information as MSINFO.txt to your desktop or other easily found location.
• This is a large file so lets copy only important parts.[1] Copy and paste from [System Information] to [DMA].
  [2] Copy and paste from [IRQs] to [Memory].
  [3] Copy and paste from [Running Tasks] to [System Hooks].

Thanks,
Dan.

[jyoung]

Hi Dan,
Thanks for the replies.
To answer austin o's question regarding dialing the ISP phone number directly from a phone. Yes, I have done that before and I did so again today. I hear modem style noises when I call.

To answer your question regarding whether I have tried resetting up the connection. Yes, many time over the past month. I have tried both before and after rebooting, after running the first GtoG WinsockXPFix program, after running the second WinsockFix program, and after running the LSPFix program. Altogether, I estimate that I have re-setup the connection 15 or 20 times.

I have been following your instructions in your first post. When I fist ran CMD: IPCONFIG/ALL, Ctrl+C would not work to copy, but ENTER did here are the results:

Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Young Family>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DF75FW41
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel® PRO/100 VE Network Connection
Physical Address. . . . . . . . . : 00-11-11-02-38-45


When I ran NETSH DIAG GUI and chose ‘Scan your system”, results came on, but there were neither green ‘PASSED’s nor red ‘FAILED’s. I expanded Network Adapters anyway and here are the results:

Network Adapters
[00000001] Intel® PRO/100 VE Network Connection
Caption = [00000001] Intel® PRO/100 VE Network Connection
DatabasePath = %SystemRoot%\System32\drivers\etc
Description = Intel® PRO/100 VE Network Connection
DHCPEnabled = TRUE
DNSEnabledForWINSResolution = FALSE
DNSHostName = DF75FW41
DomainDNSRegistrationEnabled = FALSE
FullDNSRegistrationEnabled = TRUE
Index = 1
IPConnectionMetric = 1
IPEnabled = TRUE
IPFilterSecurityEnabled = FALSE
IPXEnabled = FALSE
MACAddress = 00:11:11:02:38:45
ServiceName = E100B
SettingID = {7F236949-0FD5-4850-B5C8-889521232622}
TcpipNetbiosOptions = 0
TcpMaxDataRetransmissions = 5
WINSEnableLMHostsLookup = FALSE



Here are the results for CMD netstat -rn:
Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Young Family>netstat -rn

Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 11 11 02 38 45 ...... Intel® PRO/100 VE Network Connection
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
255.255.255.255 255.255.255.255 255.255.255.255 10003 1
===========================================================================
Persistent Routes:
None

C:\Documents and Settings\Young Family>



Then I got to a step where I did not know what to do. In trying to follow your instructions for running CMD PATHPING, your instructions said to enter the DNS Server I found in the CMD ipconfig/all. Your instructions said I sould find several. I did not find any. At that point, I stop following your instructions and began this post. Please advise. Thanks again for the help.

jyoung

[jyoung]

Hi again,
I was not online when following your instructions. I was copying and pasteing to a MS Word file. Then I connected and pasted into my post. It dawned on me that maybe I should be online when I did the steps. Here is a new CMD ipconfig/all and CMD PATHPING while I was online.
Results of new CMD ipconfig/all while being online.
Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Young Family>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : DF75FW41
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel® PRO/100 VE Network Connecti
on
Physical Address. . . . . . . . . : 00-11-11-02-38-45

PPP adapter {31954DF2-6B59-4DE4-9683-902BBB0633AA}:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 172.168.44.66
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 172.168.44.66
DNS Servers . . . . . . . . . . . : 205.188.146.145
NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Documents and Settings\Young Family>


Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Young Family>PATHPING 205.188.146.145

Tracing route to nstot.proxy.aol.com [205.188.146.145]
over a maximum of 30 hops:
0 DF75FW41 [172.168.44.66]
1 ipt-mtcd13.dial.aol.com [64.12.7.237]
2 nstot.proxy.aol.com [205.188.146.145]

Computing statistics for 50 seconds...
Source to Here This Node/Link
Hop RTT Lost/Sent = Pct Lost/Sent = Pct Address
0 DF75FW41 [172.168.44.66]
0/ 100 = 0% |
1 218ms 0/ 100 = 0% 0/ 100 = 0% ipt-mtcd13.dial.aol.com [64.12.7.2
37]
0/ 100 = 0% |
2 254ms 0/ 100 = 0% 0/ 100 = 0% nstot.proxy.aol.com [205.188.146.1
45]

thanks, jyoung

[Dan]

jyoung,
Could you please also re-try the NETSH DIAG GUI whilst online.

However, your connnection seems fine. Everything looks in order for a direct Dial-up connection. The fact that you can connect through the AOL account means that this isn't a winsock or LSP problem (therefore LSPFix.exe and WinsockFix would not do anything).

What are the steps required to setup your MichNet connection? Do you need to install anything, etc?

Have you tried doing what dsenette recommended in the other post?

1. Start Control Panel, select Network and Internet Connections. Select 'Set up..' This will open the Internet Properties window.
2. Choose 'Connect to the Internet'.
3. Select 'Set up my connection manually'.
4. Choose 'Connect using a Dial-up modem'
5. Enter your DNS' name.
6. Enter the phone number of your modem.
7. Enter your Username, Password (confirm password), and check the options below confirm password.
8. Select 'Add a short-cut to my Desktop'.

Now try to connect through this new connection.

[jyoung]

Dan,
I do not recall reading a post from a dsenette. Their suggestions sound similar to the way I usally set up the connection, but I will try again following these steps. Thanks again.

Here is the new NETSH DIAG GUI and the MSINFO. However, I could not find the [SYSTEM HOOKS].

Internet Service
Default Outlook Express Mail http://services.msn....il/httpmail.asp


Default Outlook Express News Not Configured
Internet Explorer Web Proxy Not Configured
Computer Information
Computer System
DF75FW41


Operating System
Microsoft Windows XP Professional


Version
5.1.2600


Modems and Network Adapters
Modems



Network Adapters
PASSED


Network Clients





System Information report written at: 01/12/06 20:16:30
System Name: DF75FW41
[System Summary]

Item Value
OS Name Microsoft Windows XP Professional
Version 5.1.2600 Service Pack 2 Build 2600
OS Manufacturer Microsoft Corporation
System Name DF75FW41
System Manufacturer Dell Computer Corporation
System Model Dimension 8300
System Type X86-based PC
Processor x86 Family 15 Model 2 Stepping 9 GenuineIntel ~2992 Mhz
Processor x86 Family 15 Model 2 Stepping 9 GenuineIntel ~2992 Mhz
BIOS Version/Date Dell Computer Corporation A05, 2/23/2004
SMBIOS Version 2.3
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume2
Locale United States
Hardware Abstraction Layer Version = "5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)"
User Name DF75FW41\Young Family
Time Zone Eastern Standard Time
Total Physical Memory 512.00 MB
Available Physical Memory 282.36 MB
Total Virtual Memory 2.00 GB
Available Virtual Memory 1.96 GB
Page File Space 1.22 GB
Page File C:\pagefile.sys

[Hardware Resources]



[Conflicts/Sharing]

Resource Device
Memory Address 0xF0000000-0xF7FFFFFF Intel® 82875P Processor to AGP Controller - 2579
Memory Address 0xF0000000-0xF7FFFFFF NVIDIA GeForce FX 5200

I/O Port 0x00000000-0x00000CF7 PCI bus
I/O Port 0x00000000-0x00000CF7 Direct memory access controller

I/O Port 0x000003C0-0x000003DF Intel® 82875P Processor to AGP Controller - 2579
I/O Port 0x000003C0-0x000003DF NVIDIA GeForce FX 5200

Memory Address 0xFD000000-0xFEAFFFFF Intel® 82875P Processor to AGP Controller - 2579
Memory Address 0xFD000000-0xFEAFFFFF NVIDIA GeForce FX 5200

IRQ 16 NVIDIA GeForce FX 5200
IRQ 16 Intel® 82801EB USB Universal Host Controller - 24D2
IRQ 16 Intel® 82801EB USB Universal Host Controller - 24DE

IRQ 18 Intel® 82801EB USB Universal Host Controller - 24D7
IRQ 18 Intel® 82801EB Ultra ATA Storage Controllers

IRQ 19 Intel® 82801EB USB Universal Host Controller - 24D4
IRQ 19 Pinnacle DV/AV
IRQ 19 OHCI Compliant IEEE 1394 Host Controller

Memory Address 0xA0000-0xBFFFF PCI bus
Memory Address 0xA0000-0xBFFFF Intel® 82875P Processor to AGP Controller - 2579
Memory Address 0xA0000-0xBFFFF NVIDIA GeForce FX 5200

I/O Port 0x000003B0-0x000003BB Intel® 82875P Processor to AGP Controller - 2579
I/O Port 0x000003B0-0x000003BB NVIDIA GeForce FX 5200


[DMA]

[IRQs]

Resource Device Status
IRQ 9 Microsoft ACPI-Compliant System OK
IRQ 16 NVIDIA GeForce FX 5200 OK
IRQ 16 Intel® 82801EB USB Universal Host Controller - 24D2 OK
IRQ 16 Intel® 82801EB USB Universal Host Controller - 24DE OK
IRQ 19 Intel® 82801EB USB Universal Host Controller - 24D4 OK
IRQ 19 Pinnacle DV/AV OK
IRQ 19 OHCI Compliant IEEE 1394 Host Controller OK
IRQ 18 Intel® 82801EB USB Universal Host Controller - 24D7 OK
IRQ 18 Intel® 82801EB Ultra ATA Storage Controllers OK
IRQ 23 Standard Enhanced PCI to USB Host Controller OK
IRQ 22 Conexant D850 56K V.9x DFVc Modem OK
IRQ 17 Creative SB Live! Series (WDM) OK
IRQ 20 Intel® PRO/100 VE Network Connection OK
IRQ 13 Numeric data processor OK
IRQ 8 System CMOS/real time clock OK
IRQ 0 System timer OK
IRQ 6 Standard floppy disk controller OK
IRQ 1 Standard 101/102-Key or Microsoft Natural PS/2 Keyboard OK
IRQ 12 PS/2 Compatible Mouse OK
IRQ 4 Communications Port (COM1) OK
IRQ 15 Secondary IDE Channel OK
IRQ 3 Intel® 82801EB SMBus Controller - 24D3 OK

[Memory]

[Running Tasks]

Name Path Process ID Priority Min Working Set Max Working Set Start Time Version Size File Date
system idle process Not Available 0 0 Not Available Not Available Not Available Not Available Not Available Not Available
system Not Available 4 8 0 1413120 Not Available Not Available Not Available Not Available
smss.exe c:\windows\system32\smss.exe 416 11 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 49.50 KB (50,688 bytes) 8/29/2002 6:00 AM
csrss.exe c:\windows\system32\csrss.exe 464 13 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 6.00 KB (6,144 bytes) 8/29/2002 6:00 AM
winlogon.exe c:\windows\system32\winlogon.exe 488 13 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 490.50 KB (502,272 bytes) 8/29/2002 6:00 AM
services.exe c:\windows\system32\services.exe 532 9 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 105.50 KB (108,032 bytes) 8/29/2002 6:00 AM
lsass.exe c:\windows\system32\lsass.exe 544 9 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 13.00 KB (13,312 bytes) 8/29/2002 6:00 AM
svchost.exe c:\windows\system32\svchost.exe 732 8 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.00 KB (14,336 bytes) 8/29/2002 6:00 AM
svchost.exe c:\windows\system32\svchost.exe 780 8 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.00 KB (14,336 bytes) 8/29/2002 6:00 AM
svchost.exe c:\windows\system32\svchost.exe 820 8 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.00 KB (14,336 bytes) 8/29/2002 6:00 AM
svchost.exe c:\windows\system32\svchost.exe 900 8 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.00 KB (14,336 bytes) 8/29/2002 6:00 AM
svchost.exe c:\windows\system32\svchost.exe 932 8 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.00 KB (14,336 bytes) 8/29/2002 6:00 AM
spoolsv.exe c:\windows\system32\spoolsv.exe 1096 8 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519) 56.50 KB (57,856 bytes) 6/10/2005 7:55 PM
aolacsd.exe c:\program files\common files\aol\acs\aolacsd.exe 1196 8 204800 1413120 1/12/2006 4:38 PM 3.0.0.1 10.09 KB (10,328 bytes) 10/20/2004 10:40 AM
aoltsmon.exe c:\program files\common files\aol\topspeed\2.0\aoltsmon.exe 1208 8 204800 1413120 1/12/2006 4:38 PM 2, 0, 0, 0 97.67 KB (100,016 bytes) 10/15/2004 4:54 PM
cisvc.exe c:\windows\system32\cisvc.exe 1228 8 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 5.50 KB (5,632 bytes) 8/29/2002 6:00 AM
ctsvccda.exe c:\windows\system32\ctsvccda.exe 1256 8 204800 1413120 1/12/2006 4:38 PM 1.0.1.0 43.00 KB (44,032 bytes) 5/11/2004 10:33 PM
aoltpspd.exe c:\program files\common files\aol\topspeed\2.0\aoltpspd.exe 1264 8 204800 1413120 1/12/2006 4:38 PM 2, 0, 0, 0 45.67 KB (46,768 bytes) 10/15/2004 4:54 PM
ewidoctrl.exe c:\program files\ewido\security suite\ewidoctrl.exe 1300 8 204800 1413120 1/12/2006 4:38 PM 3, 0, 0, 1 13.56 KB (13,888 bytes) 11/30/2005 4:47 AM
msssrv.exe c:\progra~1\mcafee\mcafee~1\msssrv.exe 1336 8 204800 1413120 1/12/2006 4:38 PM 1.10.163.0 144.12 KB (147,575 bytes) 7/18/2005 7:58 PM
mcdetect.exe c:\program files\mcafee.com\agent\mcdetect.exe 1352 8 204800 1413120 1/12/2006 4:38 PM 6, 0, 0, 19 124.00 KB (126,976 bytes) 12/9/2005 9:19 AM
mcshield.exe c:\progra~1\mcafee.com\vso\mcshield.exe 1368 13 204800 1413120 1/12/2006 4:38 PM 11.0.0.151 216.00 KB (221,184 bytes) 4/20/2005 9:11 PM
mctskshd.exe c:\progra~1\mcafee.com\agent\mctskshd.exe 1428 8 204800 1413120 1/12/2006 4:38 PM 6, 0, 0, 13 119.50 KB (122,368 bytes) 12/9/2005 9:19 AM
mdm.exe c:\program files\common files\microsoft shared\vs7debug\mdm.exe 1468 8 204800 1413120 1/12/2006 4:38 PM 7.00.9466 308.00 KB (315,392 bytes) 1/5/2002 11:00 AM
nvsvc32.exe c:\windows\system32\nvsvc32.exe 1484 8 204800 1413120 1/12/2006 4:38 PM 6.14.10.4502 72.00 KB (73,728 bytes) 1/1/1980 12:00 AM
svchost.exe c:\windows\system32\svchost.exe 1532 8 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.00 KB (14,336 bytes) 8/29/2002 6:00 AM
mspmspsv.exe c:\windows\system32\mspmspsv.exe 1572 8 204800 1413120 1/12/2006 4:38 PM 7.00.00.1954 52.27 KB (53,520 bytes) 6/26/2000 8:44 AM
svchost.exe c:\windows\system32\svchost.exe 1616 8 204800 1413120 1/12/2006 4:38 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.00 KB (14,336 bytes) 8/29/2002 6:00 AM
explorer.exe c:\windows\explorer.exe 344 8 204800 1413120 1/12/2006 4:39 PM 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) 1,008.00 KB (1,032,192 bytes) 8/29/2002 6:00 AM
tfswctrl.exe c:\windows\system32\dla\tfswctrl.exe 456 8 204800 1413120 1/12/2006 4:39 PM 1.04.05b 112.05 KB (114,741 bytes) 5/11/2004 10:32 PM
dsentry.exe c:\windows\system32\dsentry.exe 468 8 204800 1413120 1/12/2006 4:39 PM 1, 0, 5, 0 28.00 KB (28,672 bytes) 8/13/2003 11:27 AM
pcmservice.exe c:\program files\dell\media experience\pcmservice.exe 132 8 204800 1413120 1/12/2006 4:39 PM 1.0.0826 200.00 KB (204,800 bytes) 5/11/2004 10:32 PM
diagent.exe c:\program files\creative\sblive\diagnostics\diagent.exe 1044 8 204800 1413120 1/12/2006 4:39 PM 1, 1, 4, 0 132.09 KB (135,264 bytes) 5/11/2004 10:33 PM
realplay.exe c:\program files\real\realplayer\realplay.exe 1180 8 204800 1413120 1/12/2006 4:39 PM 6.0.9.584 25.50 KB (26,112 bytes) 5/11/2004 10:34 PM
mmtask.exe c:\program files\musicmatch\musicmatch jukebox\mmtask.exe 1288 8 204800 1413120 1/12/2006 4:39 PM 1.0.0.1 52.00 KB (53,248 bytes) 5/11/2004 10:38 PM
mm_tray.exe c:\program files\musicmatch\musicmatch jukebox\mm_tray.exe 1308 8 204800 1413120 1/12/2006 4:39 PM 8.10.1006 116.00 KB (118,784 bytes) 5/11/2004 10:38 PM
hpgs2wnd.exe c:\program files\hewlett-packard\hp share-to-web\hpgs2wnd.exe 1076 8 204800 1413120 1/12/2006 4:39 PM 2,4,0,26 56.00 KB (57,344 bytes) 8/11/2004 11:41 PM
mcvsshld.exe c:\program files\mcafee.com\vso\mcvsshld.exe 2000 8 204800 1413120 1/12/2006 4:39 PM 10, 0, 0, 22 160.00 KB (163,840 bytes) 9/28/2005 4:09 PM
hpgs2wnf.exe c:\progra~1\hewlet~1\hpshar~1\hpgs2wnf.exe 2060 8 204800 1413120 1/12/2006 4:39 PM 2,4,0,26 64.00 KB (65,536 bytes) 8/11/2004 11:41 PM
mcagent.exe c:\progra~1\mcafee.com\agent\mcagent.exe 2088 8 204800 1413120 1/12/2006 4:39 PM 6, 0, 0, 16 296.00 KB (303,104 bytes) 12/9/2005 9:19 AM
mcvsescn.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe 2096 8 204800 1413120 1/12/2006 4:39 PM 10, 0, 0, 20 472.00 KB (483,328 bytes) 4/20/2005 9:11 PM
hpwuschd2.exe c:\program files\hewlett-packard\hp software update\hpwuschd2.exe 2136 8 204800 1413120 1/12/2006 4:39 PM 5, 0, 0, 0 48.00 KB (49,152 bytes) 9/13/2004 4:49 PM
msscli.exe c:\progra~1\mcafee\mcafee~1\msscli.exe 2164 8 204800 1413120 1/12/2006 4:39 PM 1.10.163.0 160.12 KB (163,959 bytes) 7/18/2005 7:58 PM
aoldial.exe c:\program files\common files\aol\acs\aoldial.exe 2304 8 204800 1413120 1/12/2006 4:39 PM 3.0.0.1 34.09 KB (34,904 bytes) 10/20/2004 10:40 AM
qttask.exe c:\program files\quicktime\qttask.exe 2328 8 204800 1413120 1/12/2006 4:39 PM 6.5 96.00 KB (98,304 bytes) 5/11/2004 10:35 PM
thguard.exe c:\program files\trojanhunter 4.2\thguard.exe 2388 8 204800 1413120 1/12/2006 4:39 PM 3.8.0.275 1.04 MB (1,089,024 bytes) 2/19/2005 4:36 PM
oasclnt.exe c:\program files\mcafee.com\vso\oasclnt.exe 2408 8 204800 1413120 1/12/2006 4:39 PM 10, 0, 0, 24 52.00 KB (53,248 bytes) 1/9/2006 9:11 PM
dsagnt.exe c:\program files\dell support\dsagnt.exe 2448 6 204800 1413120 1/12/2006 4:39 PM 1, 1, 0, 73 299.50 KB (306,688 bytes) 5/25/2005 4:13 PM
dlg.exe c:\program files\digital line detect\dlg.exe 2528 8 204800 1413120 1/12/2006 4:39 PM 1, 0, 0, 1 24.00 KB (24,576 bytes) 5/11/2004 10:30 PM
getright.exe c:\program files\getright\getright.exe 2544 8 204800 1413120 1/12/2006 4:39 PM 5.1 2.02 MB (2,121,728 bytes) 7/22/2004 11:31 AM
getright.exe c:\program files\getright\getright.exe 2552 8 204800 1413120 1/12/2006 4:39 PM 5.1 2.02 MB (2,121,728 bytes) 7/22/2004 11:31 AM
hpoavn07.exe c:\program files\hewlett-packard\aio\hp officejet g series\bin\hpoavn07.exe 2596 8 204800 1413120 1/12/2006 4:39 PM 2.00 148.00 KB (151,552 bytes) 11/20/2002 4:15 PM
sonytray.exe c:\program files\sony corporation\image transfer\sonytray.exe 2656 8 204800 1413120 1/12/2006 4:39 PM Not Available 72.00 KB (73,728 bytes) 5/22/2004 10:25 PM
wmiprvse.exe c:\windows\system32\wbem\wmiprvse.exe 2664 8 204800 1413120 1/12/2006 4:39 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 213.00 KB (218,112 bytes) 8/29/2002 6:00 AM
msnladmin.exe c:\program files\msn toolbar suite\ds\02.00.0001.1203\en-us\bin\msnladmin.exe 2960 8 204800 1413120 1/12/2006 4:39 PM 02.00.0001.1203 167.00 KB (171,008 bytes) 1/26/2005 11:36 AM
hpoevm07.exe c:\progra~1\hewlet~1\aio\shared\bin\hpoevm07.exe 3120 8 204800 1413120 1/12/2006 4:39 PM 1.00 292.00 KB (299,008 bytes) 11/20/2002 4:48 PM
hposts07.exe c:\program files\hewlett-packard\aio\shared\bin\hposts07.exe 3248 8 204800 1413120 1/12/2006 4:39 PM 1.00 288.00 KB (294,912 bytes) 11/20/2002 5:09 PM
hpofxm07.exe c:\program files\hewlett-packard\aio\shared\bin\hpofxm07.exe 3268 8 204800 1413120 1/12/2006 4:39 PM 1.00 184.00 KB (188,416 bytes) 11/20/2002 5:37 PM
msnindex.exe c:\program files\msn toolbar suite\ds\02.00.0001.1203\en-us\bin\msnindex.exe 1128 8 204800 1413120 1/12/2006 4:42 PM 2.0.1.1203 110.50 KB (113,152 bytes) 1/26/2005 11:35 AM
cidaemon.exe c:\windows\system32\cidaemon.exe 2680 4 204800 1413120 1/12/2006 4:46 PM 5.1.2600.0 (xpclient.010817-1148) 8.00 KB (8,192 bytes) 8/29/2002 6:00 AM
winword.exe c:\program files\microsoft office\office10\winword.exe 1524 8 204800 1413120 1/12/2006 5:06 PM 10.0.2627 10.09 MB (10,577,312 bytes) 3/7/2001 9:11 AM
waol.exe c:\program files\america online 9.0a\waol.exe 2804 8 204800 1413120 1/12/2006 6:24 PM 9.02.000 36.59 KB (37,464 bytes) 11/19/2004 12:54 PM
shellmon.exe c:\program files\america online 9.0a\shellmon.exe 1020 4 204800 1413120 1/12/2006 6:24 PM 9.02.000 53.59 KB (54,872 bytes) 11/19/2004 12:54 PM
iexplore.exe c:\program files\internet explorer\iexplore.exe 3744 8 204800 1413120 1/12/2006 8:04 PM 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) 91.00 KB (93,184 bytes) 8/29/2002 6:00 AM
helpctr.exe c:\windows\pchealth\helpctr\binaries\helpctr.exe 3096 8 204800 1413120 1/12/2006 8:13 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 750.50 KB (768,512 bytes) 4/14/2004 5:50 PM
helpsvc.exe c:\windows\pchealth\helpctr\binaries\helpsvc.exe 1364 8 204800 1413120 1/12/2006 8:13 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 726.50 KB (743,936 bytes) 8/29/2002 6:00 AM
wmiprvse.exe c:\windows\system32\wbem\wmiprvse.exe 2800 8 204800 1413120 1/12/2006 8:15 PM 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 213.00 KB (218,112 bytes) 8/29/2002 6:00 AM


[Services]

Display Name Name State Start Mode Service Type Path Error Control Start Name Tag ID
Alerter Alerter Stopped Disabled Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0
Application Layer Gateway Service ALG Stopped Manual Own Process c:\windows\system32\alg.exe Normal NT AUTHORITY\LocalService 0
AOL Connectivity Service AOL ACS Running Auto Own Process "c:\program files\common files\aol\acs\aolacsd.exe" Normal LocalSystem 0
AOL TopSpeed Monitor AOL TopSpeedMonitor Running Auto Own Process c:\program files\common files\aol\topspeed\2.0\aoltsmon.exe Ignore LocalSystem 0
Application Management AppMgmt Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
ASP.NET State Service aspnet_state Stopped Manual Own Process c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe Normal NT AUTHORITY\NetworkService 0
Windows Audio AudioSrv Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Background Intelligent Transfer Service BITS Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Computer Browser Browser Stopped Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Indexing Service CiSvc Running Auto Share Process c:\windows\system32\cisvc.exe Normal LocalSystem 0
ClipBook ClipSrv Stopped Disabled Own Process c:\windows\system32\clipsrv.exe Normal LocalSystem 0
COM+ System Application COMSysApp Stopped Manual Own Process c:\windows\system32\dllhost.exe /processid:{02d4b3f1-fd88-11d1-960d-00805fc79235} Normal LocalSystem 0
Creative Service for CDROM Access Creative Service for CDROM Access Running Auto Own Process c:\windows\system32\ctsvccda.exe Normal LocalSystem 0
Cryptographic Services CryptSvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
DCOM Server Process Launcher DcomLaunch Running Auto Share Process c:\windows\system32\svchost -k dcomlaunch Normal LocalSystem 0
DHCP Client Dhcp Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Logical Disk Manager Administrative Service dmadmin Stopped Manual Share Process c:\windows\system32\dmadmin.exe /com Normal LocalSystem 0
Logical Disk Manager dmserver Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
DNS Client Dnscache Running Auto Share Process c:\windows\system32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0
Error Reporting Service ERSvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Ignore LocalSystem 0
Event Log Eventlog Running Auto Share Process c:\windows\system32\services.exe Normal LocalSystem 0
COM+ Event System EventSystem Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
ewido security suite control ewido security suite control Running Auto Own Process c:\program files\ewido\security suite\ewidoctrl.exe Ignore LocalSystem 0
ewido security suite guard ewido security suite guard Stopped Disabled Own Process c:\program files\ewido\security suite\ewidoguard.exe Ignore LocalSystem 0
Fast User Switching Compatibility FastUserSwitchingCompatibility Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Help and Support helpsvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Human Interface Device Access HidServ Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
HTTP SSL HTTPFilter Stopped Manual Share Process c:\windows\system32\svchost.exe -k httpfilter Normal LocalSystem 0
IMAPI CD-Burning COM Service ImapiService Stopped Manual Own Process c:\windows\system32\imapi.exe Normal LocalSystem 0
Server lanmanserver Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Workstation lanmanworkstation Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
TCP/IP NetBIOS Helper LmHosts Running Auto Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0
McAfee AntiSpyware Real-Time Scanner McAfeeAntiSpyware Running Auto Own Process c:\progra~1\mcafee\mcafee~1\msssrv.exe Ignore LocalSystem 0
McAfee WSC Integration McDetect.exe Running Auto Own Process c:\program files\mcafee.com\agent\mcdetect.exe Normal LocalSystem 0
McAfee.com McShield McShield Running Auto Own Process c:\progra~1\mcafee.com\vso\mcshield.exe Normal LocalSystem 0
McAfee Task Scheduler McTskshd.exe Running Auto Own Process c:\progra~1\mcafee.com\agent\mctskshd.exe Normal LocalSystem 0
McAfee SecurityCenter Update Manager mcupdmgr.exe Stopped Manual Own Process c:\progra~1\mcafee.com\agent\mcupdmgr.exe Normal LocalSystem 0
Machine Debug Manager MDM Running Auto Own Process "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" Normal LocalSystem 0
Messenger Messenger Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
NetMeeting Remote Desktop Sharing mnmsrvc Stopped Manual Own Process c:\windows\system32\mnmsrvc.exe Normal LocalSystem 0
Distributed Transaction Coordinator MSDTC Stopped Manual Own Process c:\windows\system32\msdtc.exe Normal NT Authority\NetworkService 0
Windows Installer MSIServer Stopped Manual Share Process c:\windows\system32\msiexec.exe /v Normal LocalSystem 0
Network DDE NetDDE Stopped Disabled Share Process c:\windows\system32\netdde.exe Normal LocalSystem 0
Network DDE DSDM NetDDEdsdm Stopped Disabled Share Process c:\windows\system32\netdde.exe Normal LocalSystem 0
Net Logon Netlogon Stopped Manual Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0
Network Connections Netman Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Intel NCS NetService NetSvc Stopped Manual Own Process c:\program files\intel\ncs\sync\netsvc.exe Normal LocalSystem 0
Network Location Awareness (NLA) Nla Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
NT LM Security Support Provider NtLmSsp Stopped Manual Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0
Removable Storage NtmsSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
NVIDIA Driver Helper Service NVSvc Running Auto Own Process c:\windows\system32\nvsvc32.exe Normal LocalSystem 0
Plug and Play PlugPlay Running Auto Share Process c:\windows\system32\services.exe Normal LocalSystem 0
IPSEC Services PolicyAgent Running Auto Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0
Protected Storage ProtectedStorage Running Auto Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0
Remote Access Auto Connection Manager RasAuto Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Remote Access Connection Manager RasMan Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Remote Desktop Help Session Manager RDSessMgr Stopped Manual Own Process c:\windows\system32\sessmgr.exe Normal LocalSystem 0
Routing and Remote Access RemoteAccess Stopped Disabled Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Remote Registry RemoteRegistry Running Auto Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0
Remote Procedure Call (RPC) Locator RpcLocator Stopped Manual Own Process c:\windows\system32\locator.exe Normal NT AUTHORITY\NetworkService 0
Remote Procedure Call (RPC) RpcSs Running Auto Share Process c:\windows\system32\svchost -k rpcss Normal NT Authority\NetworkService 0
QoS RSVP RSVP Stopped Manual Own Process c:\windows\system32\rsvp.exe Normal LocalSystem 0
Security Accounts Manager SamSs Running Auto Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0
Smart Card SCardSvr Stopped Manual Share Process c:\windows\system32\scardsvr.exe Ignore NT AUTHORITY\LocalService 0
Task Scheduler Schedule Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Secondary Logon seclogon Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Ignore LocalSystem 0
System Event Notification SENS Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Shell Hardware Detection ShellHWDetection Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Ignore LocalSystem 0
Print Spooler Spooler Running Auto Own Process c:\windows\system32\spoolsv.exe Normal LocalSystem 0
System Restore Service srservice Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
SSDP Discovery Service SSDPSRV Running Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0
Windows Image Acquisition (WIA) stisvc Running Auto Share Process c:\windows\system32\svchost.exe -k imgsvc Normal LocalSystem 0
MS Software Shadow Copy Provider SwPrv Stopped Manual Own Process c:\windows\system32\dllhost.exe /processid:{261ff5d6-55b3-4d28-8348-7dbc93e219f0} Ignore LocalSystem 0
Performance Logs and Alerts SysmonLog Stopped Manual Own Process c:\windows\system32\smlogsvc.exe Normal NT Authority\NetworkService 0
Telephony TapiSrv Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Terminal Services TermService Running Manual Share Process c:\windows\system32\svchost -k dcomlaunch Normal LocalSystem 0
Themes Themes Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Telnet TlntSvr Stopped Disabled Own Process c:\windows\system32\tlntsvr.exe Normal LocalSystem 0
Distributed Link Tracking Client TrkWks Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Universal Plug and Play Device Host upnphost Stopped Manual Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0
Uninterruptible Power Supply UPS Stopped Manual Own Process c:\windows\system32\ups.exe Normal NT AUTHORITY\LocalService 0
Volume Shadow Copy VSS Stopped Manual Own Process c:\windows\system32\vssvc.exe Normal LocalSystem 0
Windows Time w32time Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
WebClient WebClient Running Auto Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0
Windows Management Instrumentation winmgmt Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Ignore LocalSystem 0
WMDM PMSP Service WMDM PMSP Service Running Auto Own Process c:\windows\system32\mspmspsv.exe Normal LocalSystem 0
Portable Media Serial Number Service WmdmPmSN Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Windows Management Instrumentation Driver Extensions Wmi Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
WMI Performance Adapter WmiApSrv Stopped Manual Own Process c:\windows\system32\wbem\wmiapsrv.exe Normal LocalSystem 0
Security Center wscsvc Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Automatic Updates wuauserv Running Auto Own Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Wireless Zero Configuration WZCSVC Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0
Network Provisioning Service xmlprov Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0

[Windows Error Reporting]

Time Type Details
1/11/2006 10:17 PM Application Hang Fault bucket 244906577.

1/11/2006 9:50 PM Application Hang Fault bucket 244906577.

1/4/2006 7:36 PM Application Hang Fault bucket 01880210.

12/9/2005 11:31 AM Application Hang Fault bucket 21955421.

1/11/2006 10:17 PM Application Hang Hanging application updatemgr.exe, version 2005.7.0.11, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

1/11/2006 9:50 PM Application Hang Hanging application updatemgr.exe, version 2005.7.0.11, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

1/4/2006 7:37 PM Application Hang Hanging application WINWORD.EXE, version 10.0.2627.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

1/4/2006 7:35 PM Application Hang Hanging application WINWORD.EXE, version 10.0.2627.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

12/9/2005 11:30 AM Application Hang Hanging application IEXPLORE.EXE, version 6.0.2800.1106, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

12/4/2005 8:15 PM Application Hang Hanging application AOLServiceHost.exe, version 1.3.6.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.


[Dan]

jyoung,

Since, in the other post, you said that you could connect the first time, then I would suggest you restart your computer in 'Safe Mode With Networking', and then repeat the steps you took to create a new connection, and then attempt to connect via that newly made connection; can you connect repeatedly?

[jyoung]

Dan,
Thanks for the idea, however when I entered into ‘Safe Mode with Networking’ and followed the same connection steps as before, almost all was the same except after the ‘Set up my connection manually’, on the next screen the radio button for ‘Connect Using a Broadband connection that is always on’ was the default choice. It did not allow me to change it to ‘Connect using a dialup modem’. I was not able to complete the rest of your suggestion. Please advise.
Thanks again, jyoung

[Dan]

jyoung,

If you make a new connection, can you connect the first time, every time? And then after the first time, does it no longer work? So, try make a new connection, connect then if it works, disconnect and try to re-connect; repeat this process three times and see if the same thing happens every time.

Edited by Dan G, 16 January 2006 - 07:23 PM.

[jyoung]

Dan,
Thanks again for your continuing help. Sorry for the long delay in my responding to your last post. In an attempt to help you help me, I have been doing some experimenting for the last several days. But before I get into all of that, I should answer the question you asked in your most recent post. You asked if I was always able to connect on the first try after re-setting up the connection. The answer is definitely not. In only about three cases out of the 25 or 30 times I have re-set up the connection, have I actually been successful. In fact, I have not been successful in any of my attempts since your post.
I also have a couple of questions for you regarding our earlier posts. After you suggested that I try re-setting up my ISP connection while in “Safe Mode with Networking”, I replied that I was unable to follow the steps because I wasn’t able to change a default choice to the one you said. Did I do something incorrectly? Is there something incorrect in my computer’s settings? In a post going back even further, you asked for information from some things with names like NETSH DIAG GUI, ipconfig/all, PATHPING, MSINFO, etc. Did these indicate any problems?
Now to the experimenting I’ve been doing for the past few days. Because you had not indicated any trouble with my computer settings, I had started to suspect a problem with my phone cords, phone jacks, interior phone line wiring, or exterior phone line wiring. Because I have 2 computers and 2 phone lines within my home, I have been switching some things around in an attempt to narrow down the source of my connection problem. One of my phone lines, lets call it line A, is used as a voice line for normal phone calls. The other phone line, line B, is mainly used by the two computers (one at a time) to use the internet. Line B sometimes gets used as a voice line when line A is being used by someone else in the family. My newer computer, running Windows XP, is the one with the connection problem. My older computer, running Windows 98, has been able to connect all throughout the same time period that the newer computer has had trouble. However, it seems to connect at a slower baud rate than it did previously. Here is the conundrum of my own that I have been trying to solve.
1. Even though my newer computer had been successfully connecting to my ISP (MichNet) for over a year, it can now only very rarely connect. However, using AOL software, this same computer, phone line, and phone jacks connects successfully on a regular basis.
2. My older computer can connect regularly on this same line B using the same type of connection set up with Windows Connection Wizard.
3. To see if there might have been an intermittent problem with the phone jack (or interior phone line wiring), I purchased a 50 ft long phone cord and plugged my newer computer into the phone jack that the older computer usually uses. This did not result in success so I switched thing back.
4. To see if there was some sort of problem with the part of line B that was outside of my home, I went to the phone box attached to the back of my house and reversed the to lines so that the interior wiring of line B was now attached to the exterior wiring of line A. This did not result in success so I switched thing back.
5. I then used the 50 ft long cord to attach the newer computer to a line A phone jack. I was able to immediately connect to my old ISP(MichNet) using a connection set up with Windows Connection Wizard. I was able to disconnect and reconnect repeatedly.
Here are the questions I am hoping you can now help with: Why would one computer be able to connect using AOL, but not a connection set up with Windows Connection Wizard (that it had been previously using for a year)? Why would my older computer be able to connect using the same line B that my newer computer isn’t successful on? Why might the newer computer be able to connect on line A, but not line B? Do you have any ideas? Sorry for being so long winded, but I thought that the more information I provided you with the more likely you would be to be able to help.
I sincerely appreciate the time and effort you are putting into this. It really has me puzzled. Thanks again. jyoung

[Dan]

Hi jyoung,
I'm glad to hear you managed to solve your problem, and thanks for letting us know

I also have a couple of questions for you regarding our earlier posts. After you suggested that I try re-setting up my ISP connection while in “Safe Mode with Networking”, I replied that I was unable to follow the steps because I wasn’t able to change a default choice to the one you said. Did I do something incorrectly? Is there something incorrect in my computer’s settings?

No, you did not do anything incorrectly -- I have never tried to setup a connection whilst in Safe Mode with Networking -- I am therefore not sure what restrictions are in place. However, I will try it a little later on today and let you know.

In a post going back even further, you asked for information from some things with names like NETSH DIAG GUI, ipconfig/all, PATHPING, MSINFO, etc. Did these indicate any problems?

The reason why I asked for the MSINFO was to see if all of your Network-related devices were properly installed, and were not conflicting. Your post showed that everything was fine. The ipconfig /all showed that you had a connection to the Internet, however since your problem was an intermittent connection issue, it couldn't really be relied on too heavily -- all it showed was that sometimes you could actually get a connection, and when you did, it was a complete connection. The Pathping showed that, when you had a connection, you weren't losing packets anywhere, this simply reaffirmed that you did indeed have a complete connection when you had Internet access. The NETSH DIAG GUI wasn't overly useful in your situation.

Here are the questions I am hoping you can now help with: Why would one computer be able to connect using AOL, but not a connection set up with Windows Connection Wizard (that it had been previously using for a year)? Why would my older computer be able to connect using the same line B that my newer computer isn’t successful on? Why might the newer computer be able to connect on line A, but not line B? Do you have any ideas? Sorry for being so long winded, but I thought that the more information I provided you with the more likely you would be to be able to help.
I sincerely appreciate the time and effort you are putting into this. It really has me puzzled. Thanks again. jyoung

I can honestly say that I have absolutely no idea why this would happen. I can't phathom any reason why the cable would work for one computer, and not the other. The only question I can put to you is this -- does your older computer use the same Protocols as the newer computer? I'm sorry I can't be of more help, but when it comes to Hardware, I'm not overly-knowledgeable. However, I could ask some of the more Hardware-savvy Staff to have a look at this post, if you so wish.

Once again, I'm glad that you solved your problem
Very good initiative

[jyoung]

Dan,
Thanks, I would appreciate your asking some of the more Hardware-savvy Staff to have a look at this post, because now that I feel this is a phone line issue, I am still not sure where to start. Do I complain to my phone company? Do I replace my phone jacks? Do I rip the phone wiring out of my house walls and replace it? I would be interested in any ideas they may have as to where to start. Thanks again. jyoung

[SpaceCowboy706]

DanG,

Have him check the duplexing set for the dialup porotocols. By switching the Lines he must be switching to Yellow/Black tip and ring configuration for line 2 wich would not work for red/green tip and ring configuration for line 1.

By changing the duplexing you can change what active tip and ring( Y/B or R/G - referred to as Half Duplex or full duplex) is used for a phone line that is physically connected.

If you need a step-by-step setup for this let me know?

[jyoung]

SpaceCowboy706,
I can't speak for Dan, but I know I would need a step-by-step for this. I am aware that each of my phone lines each contain four wires. Other than that, I did not understand what you said. jyoung