Internet Woes

[JigglyJam]

Okay, I'm having a problem connecting to the internet on my desktop and I'm hoping somebody can help me out.

Two days ago I was browsing/surfing on the internet just fine; nothing out of the ordinary. The next day I can't connect to anything.

I can still recieve an IP address from the service provider (RESNET, dorm provider). I can ping their DNS servers fine. I can ping Google (my homepage) fine as well. However, the browsers (firefox, IE) will not connect to anything besides the university's servers. (www.****.unt.edu for example) Also, I can't ping the university's servers. (timeout wtf?) I've released/renewed ip address multiple times, restarted PC several times, flushed DNS, and reset winsock and reset TCP/IP stack. I've also updated my network adapter's drivers still nothing.

Any ideas?

[Mafai]

try going to a site by IP address..

Google = 209.85.171.100

[JigglyJam]

try going to a site by IP address..

Google = 209.85.171.100

Tried it, same thing happens as if I typed in www.google.com; not working still.

EDIT: I should clarify, currently it's trying to connect but no error has popped up for 5 minutes. Still trying to connect. I'm not sure how long it takes for the browser report a timeout or anything like that.

[Mafai]

So you can ping google, but your browser doesn't open the page? It seems like you maybe have a firewall issue on the PC.

[JigglyJam]

No firewall on, windows firewall service is turned off.

This whole situation is really bizarre.

[Mafai]

I know you said you repaired winsock but try this:

1) open regedit
2) HKEYLOCALMACHINE\System\CurrentControlSet\Services
3) rename WinSock2 folder to OldWinsock2.
4) close regedit and restart windows.
5) delete all network devices in device manager (so they reinstall on reboot) and restart machine. This reinstalls your network drivers.
6) reconfigured my TCP/IP.
7) restart machine, open browser and pray it works

[Mafai]

if that doesnt work, post a hijackthis log of the PC (ill check back after lunch).

if you dont know how to do that, check this out, sounds like you will know how tho.

How to post your Hijackthis log-file as an ATTACHMENT - TechSpot OpenBoards

[The Stig]

It seems like your proxy/whatever is set to go through the university's network before it can go anywhere else? Have you looked in the proxy settings. Also, since you're in a dorm, is it part of the university or do you have to change your settings when going to the university to browse the web?

[Cephius]

Sounds like you have some sort of malware or virus that is enabling a proxy on your web browsers and making every site time out. Have you run the standard virus/malware scans?

[JigglyJam]

I know you said you repaired winsock but try this:

1) open regedit
2) HKEYLOCALMACHINE\System\CurrentControlSet\Services
3) rename WinSock2 folder to OldWinsock2.
4) close regedit and restart windows.
5) delete all network devices in device manager (so they reinstall on reboot) and restart machine. This reinstalls your network drivers.
6) reconfigured my TCP/IP.
7) restart machine, open browser and pray it works

Nope, that fucked up something lol. Can't release/renew ip address now, going to rename winsock2 back.

[Mafai]

yea rename it back then reboot. posts your hijackthis log after that. and as above poster said, check your proxy settings in your browser.

sorry that didnt work, thats just how i remember to rebuild winsock completely, not just repair.

[JigglyJam]

Okay here are the results:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:46:41 AM, on 3/27/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\AASP\1.00.59\aaCenter.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundTray] "C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\program files (x86)\winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspn et_state.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7671 bytes

[Mafai]

there are a lot of file missings and no file in there, first you should check all those and fix checked. proxy settings would show in here, so that looks good. also include this one.

O1 - Hosts: ::1 localhost

reboot and repost after (seriously lunch time now so ill be back in an hour)

[JigglyJam]

Tried to fix them, but hijackthis can't fix them. (i have a few services disabled from default vista)

Also hijackthis gives an error when I try to fix the:

O1 - host: :: 1 localhost

Going to install and run AVG.


EDIT: googling it, looks like if i disable ipv6 it will go away
EDIT2: nvm it didn't, but it's normal, the default hosts file is supposed to have that line in it. I'm stumped.

[Mafai]

by any chance do you think windows applied an update when this happened?

[JigglyJam]

I have automatic updates disabled.

[Mafai]

well, it is said that KB944533 for MS that can break IE 7 in Vista Home. You could try uninstalling that and see how it goes for you.

Also, try to do windowsupdates and see if it connects for you. Some people post that while experiencing this problem they are able to do windows updates.

[Mafai]

I am out of ideas after that update recommendation.

Two days ago I was browsing/surfing on the internet just fine; nothing out of the ordinary. The next day I can't connect to anything.

do a system restore to 3 days ago to see if it works.

[JigglyJam]

Nah that didn't work.

Maybe a reformat?

EDIT: Ah didn't see the other posts. They didn't provide me with any proxy information and it didn't look like I was using any proxy settings in the browsers. And I've been running anti-spyware crap all day with no hits. I wasn't doing anything different than normal so I'm not sure why the next day it crapped out. What happens is when you attempt to connect to their network for the first time it loads up a webpage and that the only thing you can get to in a browser. From the webpage you create an account, select the service you want and fill out some information. You wait about 30 minutes and then you're free to use the internet normally like with other services. I've never had to visit that initial page again.

I called the RESNET people yesterday and they said they'd put out a work order. They were trying to disconnect me from their network so I'd have to visit that initial page again and set up but I couldn't get to the page. Guess I'll wait until they call or something.

[Mafai]

reformat will definately help it but who wants do to that. u tried the update and a system restore?

try this (i know your obtaining an IP but some were saying it fixed this problem)

Windows Vista cannot obtain an IP address from certain routers or from certain non-Microsoft DHCP servers