Forum - DLL-files.com

That log shows you have a little bit of Norton AV installed. That log shows
that it is not working. Dump Norton and download Avast and do a complete
full scan. http://www.avast.com/eng/download-avast-home.html



--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




"arty21" <arty21.3ta4ja@DoNotSpam.com> wrote in message
news:arty21.3ta4ja@DoNotSpam.com...
>
> Hi all
>
> Today my pc decided not to connect to the internet anymore. I have
> recently recovered from a nasty virus and I have installed one care as
> safety. Tonight I was attempting to get google earth to connect so I
> changed the firewall settings in onecare. I then could not connect to
> the internet. I rebooted and noticed a very slow startup and the windows
> xp screen with the moving blue bar faded in at a very slow rate.
> I have gone through the connection problems and I got problem with
> winsock. I repaired as advised and rebooted. Same problem still there. I
> followed your forums and used winsockfix. Nothing. I then used LSPfix.
> Nothing. From your forum I reset wisock and ip from the command line.
> reboot. Nothing. I have deleted winsock and winsock2 and reinstalled the
> tsp/ip protocols. Still got nothing and the startup screen remains the
> same. I am at a loss as to what to do. I have included a hijack this log
> file if this helps.
>
> thanks in advance
>
> John
>
> Logfile of Trend Micro HijackThis v2.0.2
> Scan saved at 23:39:43, on 04/06/2009
> Platform: Windows XP SP3 (WinNT 5.01.2600)
> MSIE: Internet Explorer v7.00 (7.00.6000.16827)
> Boot mode: Normal
>
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> C:\WINDOWS\system32\svchost.exe
> C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
> C:\WINDOWS\System32\svchost.exe
> C:\WINDOWS\system32\brsvc01a.exe
> C:\WINDOWS\system32\spoolsv.exe
> C:\WINDOWS\system32\brss01a.exe
> C:\Program Files\Common Files\ArcSoft\Connection
> Service\Bin\ACService.exe
> C:\Program Files\Common Files\Apple\Mobile Device
> Support\bin\AppleMobileDeviceService.exe
> C:\Program Files\Bonjour\mDNSResponder.exe
> C:\Program Files\Java\jre6\bin\jqs.exe
> C:\Program Files\Common Files\Symantec
> Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
> C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
> C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
> C:\Program Files\Google\Update\GoogleUpdate.exe
> C:\WINDOWS\system32\nvsvc32.exe
> C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe
> C:\WINDOWS\system32\svchost.exe
> C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
> C:\Program Files\Microsoft Windows OneCare Live\winss.exe
> C:\WINDOWS\Explorer.EXE
> C:\WINDOWS\AGRSMMSG.exe
> C:\WINDOWS\system32\RUNDLL32.EXE
> C:\Program Files\Common Files\ArcSoft\Connection
> Service\Bin\ACDaemon.exe
> C:\Program Files\Java\jre6\bin\jusched.exe
> C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
> C:\Program Files\DNA\btdna.exe
> C:\WINDOWS\system32\ctfmon.exe
> C:\Program Files\Microsoft ActiveSync\wcescomm.exe
> C:\Program
> Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
> C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
> C:\PROGRA~1\MI3AA1~1\rapimgr.exe
> C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
> C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
> C:\WINDOWS\System32\svchost.exe
> C:\Program Files\Internet Explorer\iexplore.exe
> C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
>
> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://www.google.co.uk/webhp?rls=ig
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL
> = http://go.microsoft.com/fwlink/?LinkId=54896
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings,ProxyOverride = *.local
> R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D}
> - (no file)
> O2 - BHO: Adobe PDF Link Helper -
> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common
> Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
> O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -
> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
> O2 - BHO: Ask Search Assistant BHO -
> {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - (no file)
> O2 - BHO: Google Toolbar Helper -
> {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program
> files\google\googletoolbar2.dll
> O2 - BHO: Google Toolbar Notifier BHO -
> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program
> Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
> O2 - BHO: Java(tm) Plug-In 2 SSV Helper -
> {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program
> Files\Java\jre6\bin\jp2ssv.dll
> O2 - BHO: JQSIEStartDetectorImpl Class -
> {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program
> Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
> O2 - BHO: EpsonToolBandKicker Class -
> {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON
> Web-To-Page\EPSON Web-To-Page.dll
> O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} -
> C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
> O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -
> c:\program files\google\googletoolbar2.dll
> O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} -
> C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
> O3 - Toolbar: EPSON Web-To-Page -
> {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON
> Web-To-Page\EPSON Web-To-Page.dll
> O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6}
> - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
> O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
> O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut]
> HDAudPropShortcut.exe
> O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
> O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program
> Files\Logitech\Video\ISStart.exe
> O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
> C:\WINDOWS\system32\NvCpl.dll,NvStartup
> O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE
> C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
> O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common
> Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
> O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common
> Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
> O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program
> Files\Java\jre6\bin\jusched.exe"
> O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows
> OneCare Live\winssnotify.exe"
> O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common
> Files\Ahead\Lib\NeroCheck.exe
> O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
> O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
> O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft
> ActiveSync\wcescomm.exe"
> O4 - HKCU\..\Run: [swg] C:\Program
> Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
> O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
> "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
> O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
> (User 'SYSTEM')
> O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
> (User 'Default user')
> O8 - Extra context menu item: E&xport to Microsoft Excel -
> res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
> O9 - Extra button: Create Mobile Favorite -
> {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} -
> C:\PROGRA~1\MI3AA1~1\INetRepl.dll
> O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} -
> C:\PROGRA~1\MI3AA1~1\INetRepl.dll
> O9 - Extra 'Tools' menuitem: Create Mobile Favorite... -
> {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} -
> C:\PROGRA~1\MI3AA1~1\INetRepl.dll
> O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
> C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
> O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
> O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
> {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network
> Diagnostic\xpnetdiag.exe
> O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
> C:\Program Files\Messenger\msmsgs.exe
> O9 - Extra 'Tools' menuitem: Windows Messenger -
> {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
> Files\Messenger\msmsgs.exe
> O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo
> Uploader 5 Control) -
> http://upload.facebook.com/controls/200 ... oader5.cab
> O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety
> Center Base Module) -
> http://cdn.scan.onecare.live.com/resour ... se5483.cab
> O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class)
> -
> http://v5.windowsupdate.microsoft.com/v ... 7593749703
> O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection
> Class) -
> http://h20270.www2.hp.com/ediags/gmn2/i ... ection.cab
> O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class)
> -
> http://www.update.microsoft.com/microso ... 4997909359
> O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) -
> http://h20270.www2.hp.com/ediags/gmn2/i ... ction2.cab
> O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash
> Object) -
> http://fpdownload2.macromedia.com/get/s ... wflash.cab
> O20 - Winlogon Notify: !SASWinLogon - C:\Program
> Files\SUPERAntiSpyware\SASWINLO.dll
> O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. -
> C:\Program Files\Common Files\ArcSoft\Connection
> Service\Bin\ACService.exe
> O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program
> Files\Common Files\Apple\Mobile Device
> Support\bin\AppleMobileDeviceService.exe
> O23 - Service: Bonjour Service - Apple Inc. - C:\Program
> Files\Bonjour\mDNSResponder.exe
> O23 - Service: BrSplService (Brother XP spl Service) - brother
> Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
> O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) -
> Unknown owner - C:\Program Files\Common Files\Symantec
> Shared\ccSvcHst.exe (file missing)
> O23 - Service: Google Update Service (gupdate1c9cff7178fbcdc)
> (gupdate1c9cff7178fbcdc) - Google Inc. - C:\Program
> Files\Google\Update\GoogleUpdate.exe
> O23 - Service: Google Updater Service (gusvc) - Google - C:\Program
> Files\Google\Common\Google Updater\GoogleUpdaterService.exe
> O23 - Service: iPod Service - Apple Inc. - C:\Program
> Files\iPod\bin\iPodService.exe
> O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun
> Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
> O23 - Service: LiveUpdate - Symantec Corporation -
> C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
> O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) -
> Unknown owner - C:\Program Files\Common Files\Symantec
> Shared\ccSvcHst.exe (file missing)
> O23 - Service: LiveUpdate Notice Service - Symantec Corporation -
> C:\Program Files\Common Files\Symantec
> Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
> O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero
> BackItUp\NBService.exe
> O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program
> Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
> O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common
> Files\Ahead\Lib\NMIndexingService.exe
> O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA
> Corporation - C:\WINDOWS\system32\nvsvc32.exe
> O23 - Service: X10 Device Network Service (x10nets) - X10 -
> C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
>
> --
> End of file - 10633 bytes
>
>
> --
> arty21
> ------------------------------------------------------------------------
> arty21's Profile: http://forums.techarena.in/members/103475.htm
> View this thread:
> http://forums.techarena.in/windows-xp-s ... 192227.htm
>
> http://forums.techarena.in
>

Use my Remove-it software. Choose yes for all options when prompted.
Download it here http://www.ms-mvp.org/ After running that open a command
prompt and see if you can ping the loop back address of 127.0.0.1



--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




"arty21" <arty21.3tblbd@DoNotSpam.com> wrote in message
news:arty21.3tblbd@DoNotSpam.com...
>
> since last posting I have tried to connect to my router modem through
> the user interface (10.0.0.2). I am even unable to connect to this. I do
> know that it is still working as I can connect wirelesly through my
> access port as I am doing now. Thought this might be relevant info.
>
> John
>
>
> --
> arty21
> ------------------------------------------------------------------------
> arty21's Profile: http://forums.techarena.in/members/103475.htm
> View this thread:
> http://forums.techarena.in/windows-xp-s ... 192227.htm
>
> http://forums.techarena.in
>

Don't be fooled by that phony website. It's not affiliated with
Microsoft and "The Real Truth" is not an MVP. The software he pushes is
not his own, either.

Many times in this newsgroup you will receive advice to download this or
that software. In every case, you must be certain that you obtain the
software from the original source. Only then can you be assured that you
are getting the genuine article.
---
Leonard Grey
Errare humanum est

The Real Truth MVP wrote:
> Use my Remove-it software. Choose yes for all options when prompted.
> Download it here http://www.ms-mvp.org/ After running that open a
> command prompt and see if you can ping the loop back address of 127.0.0.1
>
>
>

Leonard Grey is a troll who cannot fix your system. He is jealous of the
fact that I can. He can't prove what he says about me and my software
because it is not true. The guy is an idiot. If you tell him the sky is
purple he will believe it because he is too stupid to look up and see it for
himself.

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




"Leonard Grey" <l.grey@invalid.invalid> wrote in message
news:e%23pmNpk5JHA.1528@TK2MSFTNGP05.phx.gbl...
> Don't be fooled by that phony website. It's not affiliated with Microsoft
> and "The Real Truth" is not an MVP. The software he pushes is not his own,
> either.
>
> Many times in this newsgroup you will receive advice to download this or
> that software. In every case, you must be certain that you obtain the
> software from the original source. Only then can you be assured that you
> are getting the genuine article.
> ---
> Leonard Grey
> Errare humanum est
>
> The Real Truth MVP wrote:
>> Use my Remove-it software. Choose yes for all options when prompted.
>> Download it here http://www.ms-mvp.org/ After running that open a command
>> prompt and see if you can ping the loop back address of 127.0.0.1
>>
>>

Personaly I dont care who did what. I am just gratefull for someone
helping me sort out my pc. I realy dont want to get caught in a software
techs war. The real truth answered my original post and more since. So I
will stick with him/her. Thanks guys for all the advice but best to
follow one path at a time.

John


--
arty21
------------------------------------------------------------------------
arty21's Profile: http://forums.techarena.in/members/103475.htm
View this thread: http://forums.techarena.in/windows-xp-s ... 192227.htm

http://forums.techarena.in

Does running IPCONFIG /ALL bring up an IP address from your router? If it
does not then try resetting your router. If it does then try to ping the
local ip address given and the default gateway. If those work then your
network is working Try pining www.google.com. If those don't work then run
my diagnostic tool called whatslivern. That file after a few seconds, when
complete, will generate a log file. That log file will be saved in the same
directory you ran the program from, using the email link at the bottom of my
page send me a copy of that log file. http://www.ms-mvp.org/

Ignore those other posters who are not offering you any help, they are
trolls.

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




"arty21" <arty21.3tco7f@DoNotSpam.com> wrote in message
news:arty21.3tco7f@DoNotSpam.com...
>
> Good morning.
>
> Have downloaded your software and run it in safe mode. The log came up
> clean.
> ran a ping test from command 127.0.0.1 and it worked ok.
> Tried 10.0.0.2 to connect to router and it wouldnt do it:-( and
> internet still down.
>
>
> --
> arty21
> ------------------------------------------------------------------------
> arty21's Profile: http://forums.techarena.in/members/103475.htm
> View this thread:
> http://forums.techarena.in/windows-xp-s ... 192227.htm
>
> http://forums.techarena.in
>

In article <arty21.3tcwjc@DoNotSpam.com>, arty21.3tcwjc@DoNotSpam.com
says...
>
> Personaly I dont care who did what. I am just gratefull for someone
> helping me sort out my pc. I realy dont want to get caught in a software
> techs war. The real truth answered my original post and more since. So I
> will stick with him/her. Thanks guys for all the advice but best to
> follow one path at a time.
>
> John

Following the advice of a pirate can do more harm to your system than
you can imagine - just because a shunned person is nice enough to give
you advice, it does not make them worth listening to.

--
You can't trust your best friends, your five senses, only the little
voice inside you that most civilians don't even hear -- Listen to that.
Trust yourself.
spam999free@rrohio.com (remove 999 for proper email address)

Up to you. Patrick is well-known around here for pretending to be what
he's not, plagiarizing other people's software and posting filthy images
on his websites. He has harmed many who have followed his advice.
---
Leonard Grey
Errare humanum est

arty21 wrote:
> Personaly I dont care who did what. I am just gratefull for someone
> helping me sort out my pc. I realy dont want to get caught in a software
> techs war. The real truth answered my original post and more since. So I
> will stick with him/her. Thanks guys for all the advice but best to
> follow one path at a time.
>
> John
>
>

Best to follow the CORRECT one path at a time.
"arty21" <arty21.3tcwjc@DoNotSpam.com> wrote in message
news:arty21.3tcwjc@DoNotSpam.com...
>
> Personaly I dont care who did what. I am just gratefull for someone
> helping me sort out my pc. I realy dont want to get caught in a software
> techs war. The real truth answered my original post and more since. So I
> will stick with him/her. Thanks guys for all the advice but best to
> follow one path at a time.
>
> John
>
>
> --
> arty21
> ------------------------------------------------------------------------
> arty21's Profile: http://forums.techarena.in/members/103475.htm
> View this thread:
> http://forums.techarena.in/windows-xp-s ... 192227.htm
>
> http://forums.techarena.in
>