What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Not sure if I am infected

10 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1 last edited
Hi,

I am having intermittent Internet connection problems on a Dell Desktop Computer . The computer seems to be running normal with other programs. It is only when accessing the Internet, I have a very slow response and it continually disconnects and reconnects to the Internet. Once in a while when I reboot, I get an error message Catalyst Control Centre: Host Application has stopped working. From what I read, it has to do with the display, don’t think it has to do with the Internet connection.

At first I thought it was a router problem because for a few weeks my Internet connection on my home wired/wireless network was dropping and I would have to reset the router by unplugging and then the Internet connection would come back. To test the router, I disconnected the router and hard wired the desk top to the cable box. I still had the problem. I then hard wired my laptop and Internet connection is fine. I ruled out the router and cable box.

The Computer is two years old running Vista Home Premium. I called Dell because I have an extended hardware warranty and the tech had me uninstall and reinstall the driver for the NIC card. I still had the problem in regular mode, but in safemode, the Internet seemed to work fine. He switched me to the software tech and he told me I probably have a virus called Think Point and he could fix it, but they will charge me or I could take out the software warranty for $230/3 yrs.

I have Norton antivirus and recently upgraded to Norton 2011. I am wondering if the upgrade caused this problem. I can’t remember if I started to have problems before I upgraded to 2011. I checked the configuration and can’t figure out if it could be blocking my Internet connection or slowing it up in some way. My Norton is set to automatic scanning and updating. Nothing malicious has ever been found. I ran an Adaware full scan and it only found cookies. I ran HijackThis, but again only found cookies. I then ran HijackThis and I still don’t see anything malicious.

Is this a symptom of Think Point Trojan? What do I look for when I run HijackThis? Any other information would be very helpful.
I have attached my HiJackThis log.

Thank you for your time.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:43:38 PM, on 10/27/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Dell\apache\bin\httpd.exe
C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Users\Barbara\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\IPSBHO.DLL
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\coIEPlg.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2732990526-946799987-1826833585-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'RA Media Server')
O4 - S-1-5-21-2732990526-946799987-1826833585-1001 User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'RA Media Server')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIC273~1\WEB2~1\Office12\REFIEBAR.DLL
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - https://wimpro.cce.hp.com/ChatEntry/downloads/sysinfo.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.0…oUploader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Remote Access Media Server (Apache2.2) - Apache Software Foundation - C:\Program Files (x86)\Common Files\Dell\apache\bin\httpd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: Remote Access DB (dsl-db) - Unknown owner - C:\Program Files (x86)\Common Files\Dell\MySQL\bin\mysqld.exe
O23 - Service: Remote Access File Sync Service (dsl-fs-sync) - SingleClick Systems - C:\Program Files (x86)\Common Files\Dell\Remote Access File Sync Service\dsl_fs_sync.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Advanced Networking Service (hnmsvc) - Dell Inc. - c:\Program Files (x86)\Common Files\Dell\Advanced Networking Service\hnm_svc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Unknown owner - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security. (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 12682 bytes

Attachments:

Post #2
Hi 8cats,

:welcome:

My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

Download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • if it doesn't, manually reboot to ensure a complete clean

Then

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot (shut down your computer then restart it).

Also please describe how your computer behaves at the moment.
Post #3
Hi Tomk, Thank you for taking on my case. I am at work right now and won't be able to try this until I get home in the evening. Hopefully, I will be able to download Malwarebytes, as my Interenet connection keeps cutting out. I have not tried anything new on the computer awaiting an answer from this forum.
Post #5
Hi TomK I am off from work today so I am able to work on this problem. I did both scans and everything is clean, which I kind of already knew. I attached the log. It was probably a good idea to clean out temp files and do an additional scan just to be sure. I think I know the culprit. I read about something called Advanced Networking Service when my problem first started and that it can take up system resources. A few times I disabled the service and the Internet seemed to run better, then it would slow up again. Well this morning the Internet was so bad when I was trying to download the two programs you suggested, that I turned the service off. The Internet worked normally after that. I went on email, Facebook, etc. and it seemed to work okay. At the time I am writing this, I am not getting disconnected. I don't understand why all of a sudden this service is giving me problems when I never had this problem before a few weeks ago. Can I keep the Advanced Networking Service turned off? I don't really know what it is or what it does. Is it part of Vista? Seems to me it is doing more damage than good. Thank you.

Attachments:

Post #6
8cats,

I don't know alot about Advanced Networking Service. I think it is an Intel program utilized by Dell (and others) to run their programs. It should be related to connecting to a LAN. If it causes you no problems with it off… I'd leave it off.

Let's do an online scan to double check for malware. If we don't find any (and I don't come up with a better answer about Advanced Networking Service) I'll send you over to the Tech team for their advice.


Please go to Kaspersky website and perform an online antivirus scan.

  • Read through the requirements and privacy statement and click on Accept button.
  • It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  • When the downloads have finished, click on Settings.
  • Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
    • Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
      Mail databases
  • Click on My Computer under Scan.
  • Once the scan is complete, it will display the results. Click on View Scan Report.
  • You will see a list of infected items there. Click on Save Report As….
  • Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
  • Please post this log in your next reply.
Post #7
Hi TomK, Had to go vote while the scan was running. I'm not sure if I ran it correctly due to the following: A pop explained that I need to open the browser as administrator to correctly run the program in Vista. I don't know how to open my browser as an administrator. I tried to right click and run the program as administrator, but it would not allow me. I disabled all my virus software programs and it still would not allow me to check the first choice, to scan for Spyware, Adware, etc. There was a check in the box, but it was greyed out. The scan ran for a very long time and I had nothing in the report - it was blank. It found zero threats.
Post #8
Hi, Found many people on the Internet having problems with Advanced Networking Service and now I think I know what it is. I copied this from another help forum. "….I've discovered that "Advanced Networking Service" is something relating to Dell remote access. My innanets is working fine with it off. So, I guess problem solved. Still have questions though…namely, why on earth Dell would package their computers with software that would destroy connections? …. " I have used the Dell remote access a few times to try it and must have enabled this program and screwed up my computer!
Post #9
I tried to hook my Network back up with the wireless N router and it seems I may also have a problem with my router. It won't give me a wireless signal and won't give me an Internet connection on the desktop even though the Internet indicator is lit. I tried resetting the router, but it does not work. Do you have a suggestion on a forum I can go to with router problems? I realize you only deal with spyware, etc. Thank you for all your help.
Post #10
8cats,

Right clicking and running as Administrator is the correct way to do the scan. I'm not sure why it isn't working for you.

I suspect it isn't going to find anything and that you're right that the problem lies with Advanced Network Service.

As for your router isssue… I'm confused.

My innanets is working fine with it off.

won't give me an Internet connection

How do you know your internet is working fine if you can't get an internet connection?
Post #11 last edited
I had the desktop hard wired to the cable box when I was testing the Internet and running the scans, etc..I was trying to rule out what was actually causing the problem; the cable box, the router or the computer. At first I thought my router was bad, but when I hard wired both my laptop and desktop (one at a time) to the cable box, I found the Internet problem with the Desktop (which is not wireless) and the laptop worked fine hard wired. Now that I fixed the desktop I connected the cable box and desktop back to the router (desktop is wired and laptop is wireless) and I can't get an Internet connection now through the router and there is no wireless signal at all. I may have had two problems to begin with. A bad router and problems with the desktop computer. Now my problem lies back to the router.
Post #12
8cats,

Please download SINO by Artellos.

  • Save SINO to a place you can remember and run SINO.exe. (If you downloaded the ZIP version you will need to extract it first)
  • Then please check the following checkboxes:
    System Info
Event Log
Ipconfig
Ping

Routing Table
  • Once checked, hit the Run Scan! button and wait for the program to finish the scan.
  • A notepad window will pop up. Please copy all of the content into your next reply.
Note: If you try to interact with the program once it’s started scanning it might appear to hang. The scan however will continue.

Aslo… do you know how to configure your router?
Post #13
I have all the settings printed out for the router and have configured it a couple of times already. I had it encrypted and hidden. Of course, now that I hit the reset button, the settings are now gone. Once I download SINO, do I run it with the router hooked up? It sounds like it is going to ping the connection?
Post #14
8cats, Yes. Leave the router hooked up. It will tell us the settings on your computer and things like that. It may be that your just need to set your router back up after you reset it.
Post #15
Hi TomK,

I downloaded SINO.exe, ran the scan without the router (because I forgot to connect it) and got the following, but when I connected the router, the program would not run and I got an error, I got a pop up window: "Errors Occurred" "See the logfile SINO.exe.log for details" , I included what I think is the SINO log file at the end of this.

System Investigator by Olrik
Log Created On: 1836_04-11-2010
SINO Version: 3.0.0.0

Total RAM: 4086 MB | Free RAM: 2398 MB | Pagefile Size: 4386 MB
C: | 461040 MB out of 595055 MB Free | Local Fixed Disk
D: | 8399 MB out of 15359 MB Free | Local Fixed Disk
E: | None | CD-ROM Disc
F: | None | Removable Disk
G: | None | Removable Disk
H: | None | Removable Disk
I: | None | Removable Disk
K: | None | Removable Disk

<<<< System Information >>>>

Computer Name: BASEMENT
Username: Barbara
Language Setting: ENU
Windows Directory: C:\Windows
Windows Version: Windows Vista Service Pack 2
UAC Status: On
Windows Mode: Normal

<<<< Last 5 Application Errors or Warnings >>>>

Computer Name: Basement | ID: 1002 | Source: Application Hang | Type: Error | Date: 4-11-10 18:34:7 | Log: Application
Message: The program SINO.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel.

Process ID: 1740

Start Time: 01cb7c70453ac560

Termination Time: 1


Computer Name: Basement | ID: 100 | Source: Bonjour Service | Type: Error | Date: 4-11-10 18:15:6 | Log: Application
Message: Task Scheduling Error: m->NextScheduledSPRetry 170052603


Computer Name: Basement | ID: 100 | Source: Bonjour Service | Type: Error | Date: 4-11-10 18:15:6 | Log: Application
Message: Task Scheduling Error: m->NextScheduledEvent 170052603


Computer Name: Basement | ID: 100 | Source: Bonjour Service | Type: Error | Date: 4-11-10 18:15:6 | Log: Application
Message: Task Scheduling Error: Continuously busy for more than a second


Computer Name: Basement | ID: 10 | Source: WinMgmt | Type: Error | Date: 2-11-10 17:36:31 | Log: Application
Message: 99, 0x80041003'.>
<<<< Last 5 System Errors or Warnings >>>>

Computer Name: Basement | ID: 27 | Source: e1yexpress | Type: Warning | Date: 4-11-10 18:27:40 | Log: System
Message: Intel® 82567LF-2 Gigabit Network Connection

Link has been disconnected.


Computer Name: Basement | ID: 36 | Source: W32Time | Type: Warning | Date: 4-11-10 18:15:14 | Log: System
Message: The time service has not synchronized the system time for 86400 seconds because none of the time service providers provided a usable time stamp. The time service will not update the local system time until it is able to synchronize with a time source. If the local system is configured to act as a time server for clients, it will stop advertising as a time source to clients. The time service will continue to retry and sync time with its time sources. Check system event log for other W32time events for more details. Run 'w32tm /resync' to force an instant time synchronization.


Computer Name: Basement | ID: 7022 | Source: Service Control Manager | Type: Error | Date: 2-11-10 17:37:59 | Log: System
Message:
Computer Name: Basement | ID: 27 | Source: e1yexpress | Type: Warning | Date: 2-11-10 16:36:2 | Log: System
Message: Intel® 82567LF-2 Gigabit Network Connection

Link has been disconnected.


Computer Name: Basement | ID: 27 | Source: e1yexpress | Type: Warning | Date: 2-11-10 16:0:7 | Log: System
Message: Intel® 82567LF-2 Gigabit Network Connection

Link has been disconnected.


<<<< Special Events >>>>

There were no special events found

<<<< Ipconfig >>>>

Windows IP Configuration

Host Name . . . . . . . . . . . . : Basement
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel® 82567LF-2 Gigabit Network Connection
Physical Address. . . . . . . . . : 00-24-E8-14-34-C6
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::d1f6:6c5e:9746:7e7f%11(Preferred)
IPvx Address. . . . . . . . . . . : xx.xxx.xxx.xxx(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Lease Obtained. . . . . . . . . . : Thursday, November 04, 2010 6:25:51 PM
Lease Expires . . . . . . . . . . : Saturday, November 06, 2010 6:29:22 PM
Default Gateway . . . . . . . . . : [removed]
DHCP Server . . . . . . . . . . . : 10.240.163.5
DHCPv6 IAID . . . . . . . . . . . : 234890472
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-11-BA-FB-F6-00-24-E8-14-34-C6
DNS Servers . . . . . . . . . . . : [removed]
167.206.254.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 6:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{EB1A0492-4557-43C3-A1FB-48CA478E0536}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 7:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:4571:ea78::4571:ea78(Preferred)
Default Gateway . . . . . . . . . : 2002:c058:6301::c058:6301
DNS Servers . . . . . . . . . . . : [removed]
167.206.254.1
NetBIOS over Tcpip. . . . . . . . : Disabled


<<<< Pinging >>>>

OpenDNS Domain Test
Pinging to www.opendns.com [208.69.38.150]:
Response - 82ms
Response - 89ms
Response - 81ms
Response - 85ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 81ms - Maximum = 89ms

OpenDNS IP Test
Pinging to 208.69.38.150 [208.69.38.150]:
Response - 82ms
Response - 81ms
Response - 89ms
Response - 81ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 81ms - Maximum = 89ms

Kaspersky Domain Test
Pinging to www.kaspersky.com [38.117.98.231]:
Response - 23ms
Response - 31ms
Response - 23ms
Response - 22ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 22ms - Maximum = 31ms

Kaspersky IP Test
Pinging to 195.27.181.10 [195.27.181.10]:
Response - 98ms
Response - 101ms
Response - 98ms
Response - 120ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 98ms - Maximum = 120ms

YouTube Domain Test
Pinging to www.youtube.com [173.194.35.190]:
Response - 36ms
Response - 16ms
Response - 26ms
Response - 23ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 16ms - Maximum = 36ms

YouTube IP Test
Pinging to 66.102.9.136 [66.102.9.136]:
Response - None
Response - None
Response - None
Response - None
Packets: Sent = 4, Received = 0, Lost = 4
Minimum = 0ms - Maximum = 0ms

localhost Test
Pinging to 127.0.0.1 [127.0.0.1]:
Response - 0ms
Response - 0ms
Response - 0ms
Response - 0ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 0ms - Maximum = 0ms


<<<< Routing Table >>>>

===========================================================================
Interface List
11 …00 24 e8 14 34 c6 …… Intel® 82567LF-2 Gigabit Network Connection
1 ……………………… Software Loopback Interface 1
12 …00 00 00 00 00 00 00 e0 isatap.{EB1A0492-4557-43C3-A1FB-48CA478E0536}
10 …02 00 54 55 4e 01 …… Teredo Tunneling Pseudo-Interface
18 …00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 [removed] [removed] 20
[removed] 255.255.254.0 On-link [removed] 276
[removed] 255.255.255.255 On-link [removed] 276
[removed] 255.255.255.255 On-link [removed] 276
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link [removed] 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link [removed] 276
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
18 1125 ::/0 2002:c058:6301::c058:6301
1 306 ::1/128 On-link
18 1025 2002::/16 On-link
18 281 2002:4571:ea78::4571:ea78/128
On-link
11 276 fe80::/64 On-link
11 276 fe80::d1f6:6c5e:9746:7e7f/128
On-link
1 306 ff00::/8 On-link
11 276 ff00::/8 On-link
===========================================================================
Persistent Routes:
None



—— End of File ——

This is the error file when I had the router connected.


Traceback (most recent call last):
File "SINO.py", line 956, in
File "SINO.py", line 43, in __init__
File "SINO.py", line 756, in update
File "httplib.pyc", line 866, in request
File "httplib.pyc", line 889, in _send_request
File "httplib.pyc", line 860, in endheaders
File "httplib.pyc", line 732, in _send_output
File "httplib.pyc", line 699, in send
File "httplib.pyc", line 667, in connect
socket.gaierror: (11001, 'getaddrinfo failed')

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI