I have reset everything... I have tried browsing with Maxthon, Opera, Firefox, etc... and I get the same problem. As soon as I type a url and hit enter, a pop up immediately tells me that the page cannot be found.
Main Topics
Browse All Topics
Loading Advertisement...
Question
Internet Browsers not working but internet connection is okay.
hello all, please can someone help me? I have a computer with WinXP... I can't access the internet from ANY browser but Yahoo messenger connects alright and from DOS (command prompt), a ping to any url gets a reply alright.... also, Network places doesn't display computers on the network and the computer is not seen by others... but a search for computers would be successful, I don't know what else to do... please help, thanks.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Subscribe now for full access to Experts Exchange and get
Instant Access to this Solution
- Plus...
- 30 Day FREE access, no risk, no obligation
- Collaborate with the world's top tech experts
- Unlimited access to our exclusive solution database
- Never be left without tech help again
Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.
- "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
- "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
- "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.
See what Experts Exchange can do for you.
Got a question?
We've got the answer.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
Need individual assistance?
Our experts are ready to help.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Want to learn from the best?
Read articles from industry experts.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Working on a long term project?
Store your work and research.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
What Makes Experts Exchange Unique?
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Trusted by the world's most respected brands.
Faithfully serving IT professionals since 1996.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Free Tech Articles
-
WARNING: 5 Reasons why you should NEVER fix a computer for free.
It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
-
SCCM OSD Basic troubleshooting
SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
-
Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
-
Create a Win7 Gadget
This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
-
Outlook continually prompting for username and password
There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
-
Backup Exchange 2010 Information Store using Windows Backup
There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...
Cloud Class Webinars
- Avoiding Bugs in Microsoft Access
Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
- Top 10 Best New Features in Visio 2010
Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
- IT Consultant Business Secrets Revealed
Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
- Disaster Recovery and Business Continuity
Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
- Organize Your Visio Diagrams with Containers and Lists
Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
- How to Us Objects, Properties, Events and Methods in Microsoft Access
Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...
Join the Community
Give a Little. Get a Lot.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Answers
In the IE options menu, click the connection tab, and ensure proxy is *not* selected.
Have you tried running this script to fix your connection? It will reinstall winsock, the TCP/IP stack, and the HOSTS file.
http://downloads.subratam.
Also ensure your antivirus and other Security programs are not preventing website access.
I ran the script and svchost.exe:ntdll.dll crashed on two reboots, after that I rebooted to safe mode with networking and realized that while there, everything works just fine. I boot back to normal mode and was back to square one... problem still there... Please any more leads would be appreciated... Thanks so far.
>>safe mode with networking and .... everything works just fine<<
Have you thoroughly checked for Malware & viruses?
If in any doubt at all try Trend Micro's free online virus scanner, ideal for scanning online using "Safe Mode with networking":
http://housecall.trendmicr
Also the Kaspersky free online virus scanner.
http://www.kaspersky.co.uk
For Malware i recommend downloading then updating Malwarebytes' Anti-Malware:
http://www.malwarebytes.or
When updated, reboot into Safe Mode by selecting F8 at bootup & run a scan.
Tutorial available, if you require >
http://www.bleepingcompute
Also please select Start > control panel > Display properties > Desktop > Customize Desktop .... then select the 'Web' tab.
Apart from the "My current Home page" box, which should be checked (ticked),
and the "Lock Desktop Items" box, are there any other entries or boxes?
Also remove the checkmark from the the "Lock Desktop Items" box, *if it is checked*.
Apply, then Exit the Display properties.
[You may have to delete 'unwanted entries' later, but leave them untouched for the present].
There is just "My Current Home Page".
I have had great trouble running the online scans 'cos they say I need java 1.5 or higher which cannot be installed in safe mode. By the way, any antivirus including the java runtime which I downloaded from another PC fail to run properly. They either assume the square white icon with a blue top bar OR they report an error upon double clicks. But the Malwarebyte found and removed 932 infections which somehow eluded all the other programs I had tried before. But then I still cannot access the network or internet. Please keep helping... Thanks.
>>There is just "My Current Home Page"<< <--good!
Ok, well the symptoms are certainly those of an infected machine.
Can you run Trend HijackThis 2.02 again please:
http://majorgeeks.com/Tren
Create a folder where you would like the HijackThis file to reside and run it from there, not from the Desktop or a temporary folder.
Run the scan & save the logfile. This time click the "Attach Code Snippet" box, paste the logfile into the "Code Snippet" page and then i can get it analysed.
If the log indicates a number of infections you can try running Combofix (details to follow, after we've viewed your HijackThis log, and if you need them)
While I run HijackThis, I thought I should tell you: some of the infections MalwareByte found are: nmdfgds0.dll, nmdfgds1.dll, q9.cmd, olhrwef.exe.
Also, I keep getting a generic host error since the first time I ran winsockfix yesterday and each time it happens, If I click "don't send", the mouse pointer still moves as usual but nothing else responds. BUT if I just leave the dialog box without clicking anything (send or don't end) on it, I can still work as usual.
Yes, looks like infections of Malware.
Here's one example>
NMDFGDS0.DLL:
http://www.spywareremovalb
Will report on your HijackThis log later ...
Your HJT logfile certainly looks clean, although this is no *absolute guarantee* that it is. But it gives us a much better idea of your computer's status.
Pretty certain that these two entries are good, perhaps you would confirm that you recognise them >>
O23 - Service: UDisk Monitor - Unknown owner - C:\Program Files\Multi-links Telkom\bin\MonServiceUDisk
C:\Program Files\Multi-links Telkom\bin\MonServiceUDisk
Have you had the opportunity to run Kaspersky yet please ?
Ok, well for now you could see if these two scanners will function and improve the situation ...
First the 'Stinger' which is a utility that cleans the system of viruses, that block anti virus software.
http://vil.nai.com/vil/sti
and ...
a-squared Free:
http://www.emsisoft.com/en
Cannot see anything significant in the HJT Startup list.
Have you tried to uninstall your current version of Java first?
Then try to download and install the "offline" version (15.50 MB), from here>
http://www.java.com/en/dow
Sorry, a-squaredFree did find what I think is the culprit... a group of viruses that use nmdgds{random number}.dll and olhrwef.exe to perpetrate their evil. But removal has been impossible with all the tools I have. Couldn't install kaspersky, installed ESET's NOD32 but haven't completed a full scan.
I googled up a site with a removal tool but yet to try that as I am home now and the affected PC is in the office, si I guess I'd try it out on Monday. I also found a manual removal instruction. If neither of these works, I'd let you know so that we can proceed. If either works, I'd post it here... nevertheless, thanks a great deal for your help and please get some rest till Monday when I am likely to bother you again.
Good night sir.
Assuming for the moment that you may not be familiar with Combofix, please download it and save to your Desktop >
http://download.bleepingco
Before using ComboFix please disable any realtime Anti-virus, Anti-spyware, Shields, etc. that you may have running, and remember to re-enable them later, upon completion. Physically disconnect from the internet.
Also it may be necessary to rename ComboFix.exe to Combo-Fix.exe (for example), before saving it to your desktop.
If you have difficulties downloading it, try downloading to another machine, then into a USB memory stick (or equivalent). Rename it and connect to the problematic machine.
Double click "combofix.exe" and follow the prompts.
When it's finished it will have produced a Logfile, probably at C:\ComboFix.txt.
You could post that log together with a HijackThis log, in a reply for me.
Please do not mouseclick Combofix's window while it is running, because it may stall. It is absolutely normal for you to see a blue screen with flashing cursor, and this can last for up to 30 mins. Just let it run.
Ideally ComboFix should be run in normal mode, although it will work in safe mode if you're unable to reach normal mode.
Combofix will also disconnect your internet connection while it is scanning, but will restore your connection upon completion. If for some reason ComboFix is interrupted and completes prematurely, your internet connection can be restored with a computer restart.
On Monday if you're unable to run ComboFix initially, don't worry, it's just important to remember that you may have to rename ComboFix.exe BEFORE saving it to your desktop ... that's why i mentioned the alternative of downloading & renaming on another computer. You're probably aware that some viruses will disable a scanner, and this is probably the reason why you were unable to run Kaspersky.
Good luck .. will await your next posting ...
Sorry for the long delay, I have had very full hands since this week. I somehow manually removed the suspect files but still can't access the internet in normal mode. Combofix was reported to be a virus by my antivirus and deleted but after reading your last two posts, I now know I should disable the AV's and I try again. I'd get back to you after that. Kaspersky is currently running an update on the system before the online scanning. I'd try combofix again and then get back t you. Thanks.
Kaspersky is excellent at detection and provides us with information that allows us to choose the next appropriate scanner.
You may like to post the names of any viruses or Malware found so that i can view them, but as you're unable to update Kaspersky it's beginning to look as though the neatest way of resolving this is to run ComboFix, as described earlier.
Please post any generated ComboFix log so that we can see whether a Script is needed on a re-run of ComboFix.
Note that Combo has already removed a number of "Other Deletions", and here's one example (a worm) >>
"AUTO.EXE":
http://www.prevx.com/filen
It's going to take me anything up to 45 mins (without interuptions)to checkout the remainder ... will get back to you asap :)
Hmm, got delayed ...
Meanwhile, as you are unable to browse the internet, try going to http://64.233.187.99 This is Google.com. If you can access Google by IP, then it could be a DNS issue.
To resolve a DNS issue, try running "ipconfig /flushdns" from the command prompt.
This will remove your cached DNS entries.
If no improvement you could try re-running this script to fix your connection >
http://downloads.subratam.
Okay, if the problems are still unresolved, please run a second ComboFix scan, but this time follow these instructions to launch a Script. This is to remove the list of infections(various)still remaining >>
1. Open Notepad.
2. Copy & paste all text between the lines below, into Notepad window:
==========================
File::
c:\windows\system32\olhrwe
c:\windows\system32\nmdfgd
c:\windows\system32\nmdfgd
C:\nkbd1v.exe
c:\cygwin\bin\cygrunsrv.ex
Driver::
c:\windows\system32\driver
Folder::
c:\windows\system32\driver
==========================
3. Now Save the above as CFScript.txt on your desktop.
4. Then drag the CFScript.txt just created into ComboFix.exe. This will re-start ComboFix, & hopefully the problems are removed.
5. Finally, please attach the newComboFix logfile.
If you'd like to see the "drag the CFScript.txt" method in action, it should be demonstrated quite well here>
http://www.bleepingcompute
I ran combofix again like you suggested (dragging the text file) but like the first time I did, this was done in safe mode with networking. I have attached the log here. Then for the first time, I was able to run combofix in normal mode and I have also attached the log for that (CFlog.txt). Please check them out.
As soon as convenient could you run Malwarebytes again please. If unsuccessful, try downloading a fresh copy of MBAM, and rename it BEFORE saving to your desktop.
Incidently, you were able to run ComboFix in Normal mode for the first time probably because it had already removed Malware in Safe mode .. looks like we're winning!
Another option later worth checking, is to repair any possible damage that Malware may have caused by uninstalling the NIC in your Device Manager.
Then reboot to allow Windows to reload a driver, to hopefully re-establish a connection.
Sure we are winning... cos I could also open some more computers in normal mode BUT ONLY after SEARCHING them out. The 2 combofix logs are different (you could confirm by checking their creation times).
I'd try you last suggestions and get back to you... meanwhile sorry for the long delays... I am under pressure to format and get the system working but I prefer KNOWING what the problem really is and what fixes work for it.
Thanks.
Yes, agreed, although i'd be inclined to run ComboFix one more time ~before~ the repair install:
http://www.michaelstevenst
I ran combofix again and then I did a repair install all to no avail. However, I recently discovered that there is a service called TEREDO on PORT 3544 running the system and the same service runs on the ONLY two other computers that are visible to the problem PC on the network. I know teredo is a microsoft service but I am suspecting that it has been exploited by some trojan or something, is that likely? Anyway, I uninstalled it along with IPv6, Novell Netware services and still with no luck. What next?
Okay, will take a look and get back to you later ..
TEREDO exploited by a Trojan i guess is possible, although it's now uninstalled anyway. May interest you sometime .. going to read it myself later, as Toredo gets a mention>
http://bluecollarpc.wordpr
Admittedly it was a quick look, but i can see nothing nasty in the latest Combo log ...
A repair install i believe, should have taken care of this >
How to reset Internet Protocol (TCP/IP):
http://support.microsoft.c
netsh winsock reset
netsh int ip reset c:\reset.txt
Hmm, beginning to run out of ideas ..
Then this may be of further interest>
"Remove Downadup from infected computers":
http://www.bdtools.net/
cedlinx, thanks again.
Having no new ideas right now, had you considered posting your question in more than one zone? You could click on this link to select "Asking Questions", then see Step 3: Select One or More Zones >
http://www.experts-exchang
Here you are able to select or deselect any zone. Most questions can be posted in three zones. Recommend including this one>
http://www.experts-exchang
Will be investigating further, & sticking around ..
Glad to help .. but let's get your problem resolved first, one way or another, and think about points later if appropriate .. i'll take another look at it this evening.
Incidently if or when you post to the HijackThis TA, please make a reference to this thread:
http://www.experts-exchang
cedlinx,
Please download and run a new version of Combofix, this is an older version. Just delete the old one(do not uninstall). There are some bad services still left there.
Please download ComboFix by sUBs:
http://download.bleep
You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log and attach it in your next reply by pasting it in the "Code Snippet" or "Attach File" window.
Re-enable all the programs that were disabled during the running of ComboFix..
Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
If needed, here's the Combofix tutorial which includes the installation of the Recovery Console:
http://www.bleepin
Thanks for the log.
Maybe try uninsalling some of the programs that you don't really need. You only need one anti-malware with realtime protection, though you can also keep another one as an on-demand scanner, but not a good idea to have too many of them.
Select which one with realtime protection you want to keep and uninstall the others.
MalwareBytes
Spyware Doctor
NoAdware3
Spy Sweeper
XoftSpySE
What Symantec product is still installed in the system? there are Symantec/Norton entries still in there, you could either run the symantec removal tool or let Combofix remove them along with other bad entries.
If Symantec programs are no longer installed then do these:
Fix these entries in Hijackthis:
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-F
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.e
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
Run combofix again using this script.
1. Open Notepad.
2. Now copy/paste the text between the lines below into the Notepad window:
--------------------------
File::
c:\windows\system32\olhrwe
c:\windows\system32\nmdfgd
c:\windows\system32\nmdfgd
C:\mb9x.exe
C:\nkbd1v.exe
c:\windows\system32\driver
c:\windows\system32\driver
c:\windows\Tasks\Symantec NetDetect.job
Folder::
c:\program files\Common Files\Symantec Shared
c:\program files\Symantec
Driver::
recluzej
fnsaawq
COH_Mon
--------------------------
3. Save the above as CFScript.txt on your desktop.
4. Then drag the CFScript.txt into ComboFix.exe. This will start ComboFix again.
I have done all you suggested and for the first time since this problem started (over one year ago), the computer displayed and opened other network computers in the workgroup computers folder.
That is definitely one huge leap. However, I still cannot access the internet. Same problem as ever.
Thanks very much.
Driver::
LiveUpdate Notice
Still one Symantec service left, you can either run another Combofix script(above).
Or use sc.exe to delete it(below)
Delete this service --> LiveUpdate Notice
Go to Start Menu > Run > type
cmd
Press OK then type or copy and paste these commands onto the cmd screen pressing Enter after each line:
sc stop "LiveUpdate Notice"
sc delete "LiveUpdate Notice"
exit
Have you also run the Winsock fix as already been suggested?
Or use this LSPFix.
http://www.cexx.org
Run the LSPFix.exe.
Check the "I know what I'm doing" box.
And click Finish>>.
Did you save the scan for Kaspersky, if so please attach it here. Kaspersky scanner doesn't remove any threats that are found so it's good to save the log.
Hello all, I had a power outage two days ago and the software hive of my registry got corrupt. I did a repair by replacing it with a copy from C:\windows\repair and the problem is solved. I am a bit surprised because I had done a repair reinstall of windows before without success.
Anyway thanks for all your troubles and insight given to me.
By the way, when you run ComboFix by dragging a text file, what exactly is that supposed to mean?
And finally I would close this question and split the points between rpggamergirl and jonvee. I hope there is no objection to that.
Thanks once again.
Hi cedlinx, thanks for the update .. i'm certainly glad you've resolved the problem!
If you take a look at this Tutorial you can see a 'visual display' of ComboFix and 'dragging a text file' >>
"A guide and tutorial on using ComboFix":
http://www.bleepingcompute
Following the repair install, and ~IF~ you still have ComboFix installed, it would be prudent to uninstall it as follows>
Start > Run > then type "ComboFix /u" (with no quotes, and space between x and / )
Then hit enter. This will uninstall ComboFix, reset your clock settings, re-hide system hidden files, re-hide the file extensions and reset System Restore.
<<<"By the way, when you run ComboFix by dragging a text file, what exactly is that supposed to mean?">>>
Well, that's how you run a CFScript using Combofix script function, by doing so will make Combofix run using the script and delete what's in the script.
Here's an animation of the 'dragging and dropping' of CFScript.txt into Combofix.exe
http://forums.
I
I hope the link visual image will help.
3 Ways to Join
Business Accounts
- Perfect for organizations
- Multiple users
- Save over 36%
- Create a Business Account
Answer for Membership
- Earn free access
- Showcase your knowledge
- No credit card required
- Sign Up to Answer
Loading Advertisement...
by: hopeleoniePosted on 2009-07-16 at 01:46:02ID: 24867501
did you try to reset Internet Explorer settings?
how to: http://support.microsoft.c
Source: MS KB