Weird problem with Norton AntiVirus and TCP/IP on XP system...
I know a lot of you hate Norton, but I'm stuck with it so here goes ...
I've been working for the last several days fixing my niece's XP system ... it was loaded with all kinds of adware and spyware (they should shoot those people!!!). I used AdAware, SpyBot, and SpyWareBlaster to remove all threats. All three programs now run cleanly with no errors reported.
Windows is totally up to date EXCEPT for SP2.
She has Norton Antivirus 2005, and I downloaded all the latest updates for it, then ran a full system scan. Norton reported 11 "threats" ... not viruses, per se ... they looked to all be adware. I told Norton to delete them ... some things it could not delete. So I manually unregistered some dlls and deleted some dll and exe files and registry stuff ... all clearly related to adware (I googled the names first).
I then rebooted ... and now Norton reports:
"Symantec Email Proxy error … TCP/IP is not installed. Disable email scanning in your Symantec Product options or install TCP/IP"
I've done everything on the Symantec site to check to be sure that TCP/IP is indeed installed and there are no other programs interfering with Norton. (There's really nothing else running other than Microsoft stuff.) The final suggestion from Symantec is to uninstall and reinstall Norton Antivirus but I'm holding off on that for now.
Everything was working beautifully before I ran Norton, corrected the threats, and rebooted.
I now can no longer access the internet, and the PC does not show up on my internal network (whereas before it did).
The really weird thing is this: I went in to Control Panel / Add Remove Programs ... to see if there was a "fix" option for Windows. There wasn't, but under Windows Components, Networking, I found that "Simple TCP/IP Services" was NOT checked! (Even tho in Control Panel / Networking ... LAN properties, it does appear.) So I checked it and clicked ok. After a few minutes, I got this message:
"One or more services for Simple TCP/IP Services component took more than their allotted time to start. Installation will continue, but services will not be available until they have started completely. "
So I'm thinking that Norton is reporting the TCP/IP error because maybe a TCP/IP service has not started properly.
Note: in "Services" ... "Simple TCP/IP Services" has "Start Mode" set to "Auto", but it's "State" is "Stopped". When I try to start it, I get:
"Could not start the Simple TCP/IP Services service on Local Computer". Error 10093: Either the application has not called WSAStartup, or WSAStartup failed."
WSAStartup is not in the services list (I don't know what it is).
Any ideas on how to get my TCP/IP service started again, and why it stopped? (Please don't tell me to reload XP!!!)
I've been working for the last several days fixing my niece's XP system ... it was loaded with all kinds of adware and spyware (they should shoot those people!!!). I used AdAware, SpyBot, and SpyWareBlaster to remove all threats. All three programs now run cleanly with no errors reported.
Windows is totally up to date EXCEPT for SP2.
She has Norton Antivirus 2005, and I downloaded all the latest updates for it, then ran a full system scan. Norton reported 11 "threats" ... not viruses, per se ... they looked to all be adware. I told Norton to delete them ... some things it could not delete. So I manually unregistered some dlls and deleted some dll and exe files and registry stuff ... all clearly related to adware (I googled the names first).
I then rebooted ... and now Norton reports:
"Symantec Email Proxy error … TCP/IP is not installed. Disable email scanning in your Symantec Product options or install TCP/IP"
I've done everything on the Symantec site to check to be sure that TCP/IP is indeed installed and there are no other programs interfering with Norton. (There's really nothing else running other than Microsoft stuff.) The final suggestion from Symantec is to uninstall and reinstall Norton Antivirus but I'm holding off on that for now.
Everything was working beautifully before I ran Norton, corrected the threats, and rebooted.
I now can no longer access the internet, and the PC does not show up on my internal network (whereas before it did).
The really weird thing is this: I went in to Control Panel / Add Remove Programs ... to see if there was a "fix" option for Windows. There wasn't, but under Windows Components, Networking, I found that "Simple TCP/IP Services" was NOT checked! (Even tho in Control Panel / Networking ... LAN properties, it does appear.) So I checked it and clicked ok. After a few minutes, I got this message:
"One or more services for Simple TCP/IP Services component took more than their allotted time to start. Installation will continue, but services will not be available until they have started completely. "
So I'm thinking that Norton is reporting the TCP/IP error because maybe a TCP/IP service has not started properly.
Note: in "Services" ... "Simple TCP/IP Services" has "Start Mode" set to "Auto", but it's "State" is "Stopped". When I try to start it, I get:
"Could not start the Simple TCP/IP Services service on Local Computer". Error 10093: Either the application has not called WSAStartup, or WSAStartup failed."
WSAStartup is not in the services list (I don't know what it is).
Any ideas on how to get my TCP/IP service started again, and why it stopped? (Please don't tell me to reload XP!!!)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
SirtenKen: Thank you! Thank you! Thank you! I've always known there is a reason why I pay $10/month to belong to this site ... I have received so much help here! Which is great since I work by myself in a home office.
Anyways ... I followed advice of the referenced post ... I got WinsockXPFix.exe from here:
http://www.spychecker.com/download/download_winsockxpfix.html
(the link on the post no longer works; I posted this one there too).
Ran it, rebooted the pc ... VOILA!!!! It all works again!
And the message that comes up when you run WinsockXPFix.exe also helped to explain what happened ... it said:
“This Utility restores registry keys that may become corrupt after removing the host program that modified them” ... so now I do believe that either I or Norton removed something that should not have been removed.
Thank you SO much!
Anyways ... I followed advice of the referenced post ... I got WinsockXPFix.exe from here:
http://www.spychecker.com/download/download_winsockxpfix.html
(the link on the post no longer works; I posted this one there too).
Ran it, rebooted the pc ... VOILA!!!! It all works again!
And the message that comes up when you run WinsockXPFix.exe also helped to explain what happened ... it said:
“This Utility restores registry keys that may become corrupt after removing the host program that modified them” ... so now I do believe that either I or Norton removed something that should not have been removed.
Thank you SO much!
...and thanks like yours are why we keep on helping!
:)
:)
ASKER
I checked Event Log ... no errors in it until this problem surfaced. The error I can relate to this problem (because it gets logged every time I boot) is:
"Error (Red X): The description for Event ID (0) in Source (SENS) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE=flag to retrieve this description; see Help and Support for details. The following information is part of the event: Event System Win32 Error: No service is operating at the destination network endpoint on the remote system. ServiceStart(); SensInitialize() failed."
I have no idea what "use the /AUXSOURCE=flag ..." thing means!