Weird problem with Norton AntiVirus and TCP/IP on XP system...

Posted on 2004-11-03
Last Modified: 2013-11-13
I know a lot of you hate Norton, but I'm stuck with it so here goes ...

I've been working for the last several days fixing my niece's XP system ... it was loaded with all  kinds of adware and spyware (they should shoot those people!!!). I used AdAware, SpyBot, and SpyWareBlaster to remove all threats. All three programs now run cleanly with no errors reported.

Windows is totally up to date EXCEPT for SP2.

She has Norton Antivirus 2005, and I downloaded all the latest updates for it, then ran a full system scan. Norton reported 11 "threats" ... not viruses, per se ... they looked to all be adware. I told Norton to delete them ... some things it could not delete. So I manually unregistered some dlls and deleted some dll and exe files and registry stuff ... all clearly related to adware (I googled the names first).

I then rebooted ... and now Norton reports:
"Symantec Email Proxy error … TCP/IP is not installed. Disable email scanning in your Symantec Product options or install TCP/IP"
I've done everything on the Symantec site to check to be sure that TCP/IP is indeed installed and there are no other programs interfering with Norton. (There's really nothing else running other than Microsoft stuff.) The final suggestion from Symantec is to uninstall and reinstall Norton Antivirus but I'm holding off on that for now.

Everything was working beautifully before I ran Norton, corrected the threats, and rebooted.

I now can no longer access the internet, and the PC does not show up on my internal network (whereas before it did).

The really weird thing is this: I went in to Control Panel / Add Remove Programs ... to see if there was a "fix" option for Windows. There wasn't, but under Windows Components, Networking, I found that "Simple TCP/IP Services" was NOT checked! (Even tho in Control Panel / Networking ... LAN properties, it does appear.) So I checked it and clicked ok. After a few minutes, I got this message:

"One or more services for Simple TCP/IP Services component took more than their allotted time to start. Installation will continue, but services will not be available until they have started completely. "

So I'm thinking that Norton is reporting the TCP/IP error because maybe a TCP/IP service has not started properly.

Note: in "Services" ... "Simple TCP/IP Services" has "Start Mode" set to "Auto", but it's "State" is "Stopped". When I try to start it, I get:
"Could not start the Simple TCP/IP Services service on Local Computer". Error 10093: Either the application has not called WSAStartup, or WSAStartup failed."

WSAStartup is not in the services list (I don't know what it is).

Any ideas on how to get my TCP/IP service started again, and why it stopped? (Please don't tell me to reload XP!!!)

Question by:alicia1234
    LVL 9

    Accepted Solution

    This sounds familiar - I believe when this has happened to others, they have needed to do the winsock fix and/or the TCP\IP reinstall:

    Check out the answer to Q_20966809 (link below), which covers the details for diagnosing a winsock problem, the winsock fix and the reinstall of TCP/IP using the nettcpip.inf file (usually located in the c:\windows\inf directory)

    reinstall of TCP/IP previously covered  by

    Author Comment

    More info:

    I checked Event Log ... no errors in it until this problem surfaced. The error I can relate to this problem (because it gets logged every time I boot) is:

    "Error (Red X): The description for Event ID (0) in Source (SENS) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE=flag to retrieve this description; see Help and Support for details. The following information is part of the event: Event System Win32 Error: No service is operating at the destination network endpoint on the remote system. ServiceStart(); SensInitialize() failed."

    I have no idea what "use the /AUXSOURCE=flag ..." thing means!

    Author Comment

    SirtenKen: Thank you! Thank you! Thank you! I've always known there is a reason why I pay $10/month to belong to this site ... I have received so much help here! Which is great since I work by myself in a home office.
    Anyways ... I followed advice of the referenced post ... I got WinsockXPFix.exe from here:
    (the link on the post no longer works; I posted this one there too).
    Ran it, rebooted the pc ... VOILA!!!!   It all works again!
    And the message that comes up when you run WinsockXPFix.exe also helped to explain what happened ... it said:
    “This Utility restores registry keys that may become corrupt after removing the host program that modified them” ... so now I do believe that either I or Norton removed something that should not have been removed.
    Thank you SO much!
    LVL 9

    Expert Comment

    ...and thanks like yours are why we keep on helping!


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Suggested Solutions

    It is only natural that we all want our PCs to be in good working order, improved system performance, so that is exactly how programs are advertised to entice. They say things like:            •      PC crashes? Get registry cleaner to repair it!    …
    How to remove superseded packages in windows w60 or w61 installation media (.wim) or online system to prevent unnecessary space. w60 means Windows Vista or Windows Server 2008. w61 means Windows 7 or Windows Server 2008 R2. There are various …
    This tutorial will introduce the viewer to VisualVM for the Java platform application. This video explains an example program and covers the Overview, Monitor, and Heap Dump tabs.
    The viewer will learn how to clear a vector as well as how to detect empty vectors in C++.

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now