WinINet corruption

Doug… Please see the reply above your last post .. Hopefully I've got it right Regards, Mick

Yep. That's it. While you are at it, please do the same with the Startups(tab). (post the report as Startups April04.html) I will be away for about 2 hours. There is also a bit of research I need to complete regarding your problem. I'll post back when I have additional information for you. Doug

Hopefully..I'm getting the 'hang of it' now !!!..lol and this is the log you requested.. Best Regards & Thanks…. Mick

Mickhart,

Another thing, that may help pin down what is wrong, is if I click on the windows update it goes to MS site, scans and says its unable to update!

When you experience this failure, do you receive any Error Messages?

For instance, do you see either 0x80070002 or 0x80070003 error ?

How about when updating your AV fails…. do you receive any error message?

Hi… Yes I get quite a few of those error message, with those numbers (I think it says module in front of them), when on the internet. You have the option to debug or cancel. For the first time today, when I logged in, one of those messages popped up before I has actually logged in (user name & password), and its only ever done that before when I'm using the browser. 'The connection with the update server has failed' is the message show from AVG. As you know I reinstalled it yesterday so when I first got it to go off and update I got the zone alarm message up asking if it could access to the internet (which I of course said yes to), so it is reaching out and then failing to connect. Last night the machine automatically downloaded a Microsoft update (which it is set to do), but as I said yesterday you can't do it by going to the windows update button. Hope this helps?… Best Regards, Mick

Give this a shot….

http://update.microsoft.com/windowsupdate/…&IsMu=False

Hi Doug…

I just had another error message come up, to I wrote it down this time so I quote it to you exactly, it read:

avgnsx.exe - Application error

The memory could not be 'read'

The instruction '0x001e39' referenced memory at '0x049ab000'

The memory could not be read

Click ok to terminate programme

Click on cancel to debug programme

This is the error message that has randomly appearing. There is no error message shown on the windows update just a general message on the sites window saying its unable to connect to the server (thats after its check the machine for latest DivX and any available updates).

Best Regards …

Mick

Hi… Just got the same error message up (word for word), except the numbers shown were different this time: 0x10001e39 and 0x09672000 I'm not sure if this helping you or just confusing us both even more Best Regards, Mick

Hi Doug…. Just further update the machine just stopped all connections to the internet (browser, outlook express etc), if you tried to use them it said server not found. Shutting down and booting up restored everything again.The signal from the wireless router was showing good, so it wasn't caused by a loss of signal etc. The issues seems to be all about connectivity …well the consistent lack of it with two AV programmes!! and the intermittent loss of it with the browsers (and the error faults), and even outlook express. Seems strange, other than the AV, its so inconsistent…. I'm also getting more regular 'Firefox has experienced a problem and need to close' messages and I'm sure that's linked to the overall problem/s … I'm hoping this is all starting to paint a picture that may give a pointer to whats actually wrong .. Regards, Mick

Doug.. Its been a few days since I heard from you. I'm still having the AV failing to update problem, and unstable internet browsers. I'm considering just formatting the drive and reinstalling everything …but I would hate to do that and loose so much if there is a possible fix. Are you or anyone else on here able to help?…. Best Regards, Mick

Hi Mick

There are some things you need to clarify for me.

well the consistent lack of it with two AV programmes!!

Just how many AV programs do you have currently installed? By two, do you mean
AVG and Avira? I ask because your service list, the one you posted earlier, shows
that there is also a F-Secure Backweb service going on, and that is the update
client for F-Secure AV. Could F-Secure be the one used on the machine at your
former job?

You need to only run one AV, and no more than that. Same goes for anti-spyware
applications in real-time protection. Its ok to have more than one anti-spyware, as
long as only one is running real-time. One firewall also.

What Firewall do you have currently installed? If you have any third party firewalls, be
sure that windows firewall is turned off.

To turn off windows Firewall, go to control panel either through start or "My Computer".
then windows firewall.

I would like you to download a tool, named Ccleaner.
http://www.filehippo.com/download_ccleaner/

We are not going to use it just yet, but I would like you to make a install list with it. More about
that, after the install.

When you install Ccleaner, be sure to uncheck / untick the option to install Yahoo Toolbar as well.
No need to get that clutter on the machine.

Open Ccleaner, click on tools. No need to touch anything else yet.

You will now see a uninstall list (Functions as add/remove programs). At the bottom right, there is
a radio button option, that lets you save the list as a text file. Please do so, and Copy/paste the content
in this thread. The text file is easiest to find if you save it to your desktop. If you like, or if the list is going
to be very long, please make it as a attachment.

————————————————————————-

One thing I also saw in the service list, is this one: Novell ZENworks Remote Management Agent

Now thats a thing for operating on your PC remotely. I believe it must have been installed when it
was a company PC, can you verify this? If not, is it a program known to you?

Heres some more info on that: http://www.novell.com/documentation/zdpr/z…ta/af8ib4i.html

It may be irrelevant, and I don't know the software in questions. It can be addressed later.


Lastly, we need to shut down the F-Secure service, if the program is not installed anymore.

Go to start, choose RUN, type: Services.msc

Find the entry with: F-Secure Backweb plugin
Now right-click it, choose properties.

Two things here. If it is running, press the stop button. Next activate the drop-down menu for startup-type and choose
deactivated.

Long post and we won't be finished here, but keep us posted and we take it from there.


Regards

Hi Abydos… Thanks for the reply. I try and keep this short and to the point!: There is only one AV on the machine AVG. The malware forum suggest downloading and trying Avira to see if that worked (having also downloaded a AVG removal just to be sure if was all off!), when it didn't wotk (i.e. failed to connect to its update server just like AVG), I unistalled it and reinstalled AVG from scratch ..but still the same fails to connect for updates fault! FSecure is the remnants of the old AV from the former job and wasn't used. Again the malware team asked me to download a removal tool, which I did and removed it. Windows firewall has always been turned off and I use Zone alarm. I have followed your instructions to go to it, via the control panel, when you click on a message comes up and says 'do you want to start the windows firewall/internet connection sharing service (ICS)?'. When you click on yes (not sure if thats what you should click on!), it try's and then says its unable to start the service, but gives no reason why. CCleaner is on my machine, I've used it for years to tidy up with on all my machines (it is the latest version). I have attached the text file as you requested from it. Yes the Novell Zenworks is from my previous job when it was a company machine. There is only one FSecure shown in the service, automatic update, in properties it shows it as disabled and I have left it as that. Hopefully that is everything! Once again thanks for your help, its nice to have someone 'on side' again!! Best Regards, Mick

Hi Mickhart,

I had lost track of your thread and am glad that Abydos stepped in.
Hopefully between the three of us now, we'll find a solution.

DNS server should be clearing its cache file on a frequent basis.
But it may not have, and some data may have become corrupted.

Please try an experiment:

Open a browser.
type the address for google into your browser address bar: http://www.google.com
Does the browser take you to google?

If not type the IP for google into your address bar: http://74.125.45.100/

Does the browser navigate to google when using the IP address?

______________________

Of course, Google may not be one of the addresses you are having trouble with.

Please write down a list of three sites that fail to access from your browser.
Then go to this location to derive the IP address for the sites.
Edit: Ooops: forgot to give the address: http://ip-lookup.net/domain.php

Try accessing the sites by entering the IP address for the site, instead of the human readable address
for instance, try http://74.125.45.100/ instead of www.google.com

Let us know the result.

There is a possible easy solution for this part of your problem, but it would be better to get the results from the above, prior to invoking the solution.

I'm at work right now, but will be at a keyboard most all day.
So I should be able to track along with you fairly regularly.

Best Regards.

Hi Doug… Yes it does take you to google (well google.co.uk rather than .com) There are no sites to the best of knowledge I can't navigate to, but being redirected seems a random occurrence, as does the browsers hanging, and the error messages I mentioned to you.It just sems at time that you navigate to a page you have three or four times in last 20 mins, and on the next try it stops, thinks and take you to another page, almost as if it has picked a link up from the page you were navigating to, and linked from that. As you previously suggested I put an XP disc in and ran the SFC tool, it lasted about 20mins, and was busy reading of the cd, but that has made no difference!. I'm surprised I can't get in to the Microsoft firewall, and the security centre says it is shutdown and I can't get it that way. Could that be blocking my AV updates and causing browser instability?… Or am I grabbing a straws again Best Regards, Mick

Ohh by the way the IP addreess you gave takes me to Google to!