Can ping router/web, but not browse

edanto

A friend is asking me for some help troubleshooting a BB connection and a couple of things that I tried didn't help. I'd appreciate any suggestions!

It's a Smart connection, Aolynk router- USB connection. I can ping the router at 192.168.1.1

But, with explorer, I can't open any webpage, not even the router page. In Tools|Options|LAN settings, neither 'automatically detect settings' or 'use a proxy server' are ticked.

I've taken off the Kerio that was on there (before doing that I couldn't ping the router) and I'm heading over now with Spybot/Firefox etc to see if they make any difference.

The closest thread that I could find about this problem is here , but I've already made the changes jor el suggested to the TCP/IP and no joy. As ever, there's an urgent need to get this fixed, so any suggestions would be really helpful.

Anti

check the automaticially detect setting. failing that reboot the modem/router buy powering them off. if that dont work try smarts tech support. but dont expect much from them. And if that dont work sujjest to your friend to try another isp, such as ntl, as they are far better priced and are much faster, and my experience with their tech support is rather good.

edanto

anti wrote:

check the automaticially detect setting.

No joy.

failing that reboot the modem/router buy powering them off. if that dont work try smarts tech support.

Thanks, but it's not a Smart problem - I have connected the laptop to my Smart router (which I know is working fine) and problem is still there....but marginally different.

Now, I can ping/reply the router and sites like bbc.co.uk, but the browsers can't load any pages... not even 192.168.1.1

After taking off Kerio, XP alerted me that I didn't have a firewall. I tried to look at the settings, but 'windows firewall settings can't be displayed at the assocaited service is not running' ' do you want to start the..'

I said, sure. 'starting windows firewall/Internet Connection Sharing services'

'Can't start windows firewall/Internet Connection Sharing services'

Does that seem a bit odd? It's all new to me, but it seems a bit weird that windows couldn't start it's own firewall.

edanto

An AVG scan found the IRC/BackDoor.SdBot.37.D Trojan Horse and cleaned the file.

I was trying to reinstall Kerio, but when it tried to start up, it gave an unusual error:
"Could not start DB server: server() failed: (10022) An invalid argument was suplied.."

To see what else is running, I've run hijackthis. If anyone is expert enough to let me know what the log means, it'd be appreciated.

Logfile of HijackThis v1.99.1
Scan saved at 08:18:36, on 14/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\DELL\AccessDirect\dadapp.exe
C:\Program Files\DELL\AccessDirect\DadTray.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\MusicMatch\MusicMatch Jukebox\mm_tray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Andrina\Application Data\My-disgo\MyKey disgo.exe
C:\WINDOWS\system32\ntvdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\rsvp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Kaspersky\mwavscan.com
C:\Kaspersky\kavss.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\notepad.exe
C:\hijack this\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/ie/enu/gen/default.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.btopenworld.com/searchpane
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://bt.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.euro.dell.com/countries/ie/enu/gen/default.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [DadApp] C:\Program Files\DELL\AccessDirect\dadapp.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MusicMatch\MusicMatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [My-disgo] C:\Documents and Settings\Andrina\Application Data\My-disgo\MyKey disgo.exe
O4 - HKCU\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
O4 - Startup: Mopy Points Collector.lnk = C:\MOPYFISH\GETPOINT.EXE
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Researcher - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://bt.yahoo.com
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20011217/qtinstall.info.apple.com/qt505/us/win/QuickTimeInstaller.exe
O16 - DPF: {EC5A4E7B-02EB-451D-B310-D5F2E0A4D8C3} (webhelper Class) - http://register.btinternet.com/templates/btwebcontrol024.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0A32B00E-2098-4937-A23F-8BAB507D0004}: NameServer = 84.203.254.34,84.203.128.7
O17 - HKLM\System\CCS\Services\Tcpip\..\{94A868D3-BA08-42DA-A176-3856C91DF343}: NameServer = 84.203.254.34,84.203.128.7
O17 - HKLM\System\CS1\Services\Tcpip\..\{0A32B00E-2098-4937-A23F-8BAB507D0004}: NameServer = 84.203.254.34,84.203.128.7
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

So - the story so far - the laptop was infected with a virus and this may be the reason that I can't put a firewall on it. I don't know if the virus has anything to do with the browsing problem. I can ping the router and any other site, but can't visit anything with Firefox/Explorer (stops me from updating XP).

In the 'control panel/connections' there are two, one is a 1394 or sth and the other is a LAN via USB. Both are connected. In the LAN, I've edited the properties to assign an IP address, made the router the default gateway and put in the Smart DNS details.

That's exactly the way things are set up on my machine and the Smart connection works fine, so the problem might be something related to this virus. Any ideas, please?

irlrobins

hijack log looks clean.

edanto

thanks.

8T8

I'd run a full system scan (not the default quick one) with Windows Defender as well - not sure what C:\MOPYFISH\GETPOINT.EXE is in your Hijack This log it sounds suspicious though it may be innocent.


Also try WinsockFix it may repair something which was tampered with or removed by some spyware or virus.

Is the default Windows Firewall still operational ?

You've double checked everything on the routers side, the DHCP server is turned off etc.

edanto

Cheers, appreciate the help. I looked into getpoint and I think it's OK, I think she has some fish screensaver or some such. I can't find a standalone Defender to download though, so won't be able to install it.

I'm optimistic about the winsockfix thing though - I'd no idea there was such a program - and it sounds very like the fix to my problem. I'm heading off to run it now. fingers crossed!

Is the default Windows Firewall still operational ?
You've double checked everything on the routers side, the DHCP server is turned off etc.

Firewall - no; Windows couldn't start it's firewall and Kerio won't start for me.

I can't check anything on the router side - The only way I know to check things is via browsing to 192.168.1.1, but I can't browse at all. The router is up though, steady light and answering pings. Connection is fine, I can ping abroad.

And then, sorry, but I don't know what a DHCP server is or how to check it.

edanto

Also try WinsockFix it may repair something which was tampered with or removed by some spyware or virus.

YEAH!!!! ya superstar... that fixed everything and it's all working well now. Firewall up and running, browsing away... all back to normal. Thanks very much everyone.