UNSOLVED

Cobrafan2

updated

21 years ago

C

Cobrafan2

9 Posts

0

3706

October 15th, 2005 16:00

Internet Access Problem

Background:
 
I have a Dell Dimension 4600i running Windows XP, with service pack 2.
I have Norton Internet Security 2005 (NIS) with anti-virus installed.
My ISP is Comcast (cable connection).
 
Except for the routine Microsoft updates and the live updates from Symantec, nothing has been added to nor changed on the computer.  Other than the features of Norton Internet Security, I'm not running any spyware nor adware.
 
The Problem:
 
I can't get on the internet using a URL address without repeated tries.  The first time I double-click on the IE link (either in the Start menu or on the desktop) IE opens with a blank address line and an eventual "page cannot be displayed" message.  Sometimes I can get on on the second, third, or fourth try.  This began about a month ago.
 
I can however get on using an IP address, e.g., 68.142.197.86 instead of www.Yahoo.com.
 
Remedies Tried (unsuccessfully):
 
I called Comcast, and the technician there determined that I could get on using an IP address but not the URL.  He concluded that my Winsock file was "probably corrupted", and that I should call Dell.
 
I called Dell twice.  The first time the (outsource) technician asked me to disconnect and reconnect the modem cable.  During that session, I could get on the internet.  After hanging up the phone and rebooting, I discovered I still had the same problem.  Dumb me; $100 wasted.
 
On the second call to Dell, I got a very helpful tech in Virginia.  He walked me through the following:
1. Reinstalled TCP/IP.
2. Reset Winsock in the registry.
3. Entered the DNS numbers for Comcast statically.
 
Still had the same problem, and he concluded it must be a server problem with Comcast.
 
A Comcast technician has been here twice.  He replaced the modem.  He ran several utility programs from his tech CD.  Still the same problem.
 
I tried several "system restores".
I tried disabling NIS.
I uninstalled NIS 2005 and reinstalled it.
I uninstalled NIS 2005 and installed the new version with spyware protection.
All the settings in NIS are the default settings BTW.
 
At this point, I am stuck.  Anyone have any suggestions?  Help will be appreciated.
 
Alan
 
 
 
 
 
  • volcano11

    2 Intern

    •

    27973 Posts

    288

    0

    Posted October 15th, 2005 17:00

    To help troubleshoot this problem, go to Start > Run and type cmd then click OK. In the command prompt window that opens, type ipconfig /all then hit the enter key. Write down the output from this command or select it and save it to a txt file, then copy this output into a reply to this message.

    Also, find the file on your computer named hosts (note that the file has no extension and is not the file named hosts.sam and it is usually located in the folderC:\Windows\drivers\etc folder).  Open the file in notepad and see if yahoo.com is listed there.  If it is close the hosts file and rename to hosts.old.   If this is the case, then some spyware or hijacker has compromised your computer and should scan for and remove all spyware.

    Steve

  • Cobrafan2

    9 Posts

    288

    0

    Posted October 15th, 2005 21:00

    Steve -

    Thanks for the prompt reply.  Here is the output from the ipconfig /all command:

    Windows IP Configuration

            Host Name . . . . . . . . . . . . : OurNewDell4600
            Primary Dns Suffix  . . . . . . . :
            Node Type . . . . . . . . . . . . : Hybrid
            IP Routing Enabled. . . . . . . . : No
            WINS Proxy Enabled. . . . . . . . : No
            DNS Suffix Search List. . . . . . : hsd1.ca.comcast.net.

    Ethernet adapter Local Area Connection:

            Connection-specific DNS Suffix  . : hsd1.ca.comcast.net.
            Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connection
            Physical Address. . . . . . . . . : 00-0C-F1-94-F2-8C
            Dhcp Enabled. . . . . . . . . . . : Yes
            Autoconfiguration Enabled . . . . : Yes
            IP Address. . . . . . . . . . . . : 67.172.113.122
            Subnet Mask . . . . . . . . . . . : 255.255.248.0
            Default Gateway . . . . . . . . . : 67.172.112.1
            DHCP Server . . . . . . . . . . . : 68.87.76.10
            DNS Servers . . . . . . . . . . . : 204.127.202.4
                                                216.148.227.68
            Lease Obtained. . . . . . . . . . : Saturday, October 15, 2005 2:48:26 PM
            Lease Expires . . . . . . . . . . : Wednesday, October 19, 2005 6:30:27AM

     

    Also, here are the contents of the hosts file (I found no reference to yahoo.com):

    # Copyright (c) 1993-1999 Microsoft Corp.
    #
    # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
    #
    # This file contains the mappings of IP addresses to host names. Each
    # entry should be kept on an individual line. The IP address should
    # be placed in the first column followed by the corresponding host name.
    # The IP address and the host name should be separated by at least one
    # space.
    #
    # Additionally, comments (such as these) may be inserted on individual
    # lines or following the machine name denoted by a '#' symbol.
    #
    # For example:
    #
    #      102.54.94.97     rhino.acme.com          # source server
    #       38.25.63.10     x.acme.com              # x client host

    127.0.0.1       localhost

    My fingers are crossed. 

    Thanks again, Alan

     

  • Cobrafan2

    9 Posts

    288

    0

    Posted October 15th, 2005 21:00

    Steve -

    I tried your last suggestion, and I still have the same problem.  Any other ideas?

    Thanks again

     

  • volcano11

    2 Intern

    •

    27973 Posts

    288

    0

    Posted October 15th, 2005 21:00

    Everything looks good in both the ipconfig output and the hosts file.  Try opening the command prompt window again and this time type ipconfig /flushdns and see if that helps.

    Steve

     

  • volcano11

    2 Intern

    •

    27973 Posts

    288

    0

    Posted October 16th, 2005 19:00

    Normally it is the dns server located at your isp.  The only time this wouldn't apply is if the URL of the web site is listed in the hosts file on your computer, in which case the URL would be directed to the IP address listed in your hosts file.  Your hosts file is not doing this, so you are not reaching the dns server at your isp.

    The only thing I can suggest at this point is to reset your network.  Shut down everything, then wait 5 minutes.  Turn on the modem and wait another 5 minutes.  Then turn on the computer. 

    Do you have any third party firewalls (McAfee, Norton, Zone Alarm) installed that might be blocking dns? 

    Steve

  • Cobrafan2

    9 Posts

    288

    0

    Posted October 16th, 2005 19:00

    Anyone: What translates a URL address into an IP number address?  Is it software on our, i.e., sending computer, or does the translation take place on the ISP's server? 

    I'm still trying to figure out why I can get on the Internet using an IP address but not using a URL.

    Thanks for any help.

     

  • Cobrafan2

    9 Posts

    288

    0

    Posted October 16th, 2005 21:00

    I tried 5+5 minute shutdown to reset my network, but with the same result.

    I do indeed have a third party firewall: Norton Internet Security 2005 with Spyware version.  However, I have turned it off in several trials and used the Windows firewall instead.  And the problem persists.

    It just occurred to me that the blank address line in IE might be a clue.  It seems to me that IE may return the "page cannot be displayed" message because the URL it is trying to follow is the characters "                    ". 

    This leads me to the question: "What is it that puts the link into the address field?.

    BTW, I tried typing and pasting in the URL without success.  The only way I'm able to get on the internet is by repeated tries.  Lately, the second try works; but every once in awhile, it takes three tries.  Weird...

    Thanks again for any help,

    Alan

     

  • volcano11

    2 Intern

    •

    27973 Posts

    288

    0

    Posted October 16th, 2005 21:00

    This sounds like you may be infected with spyware or a home page hijacker.   Download, install, update, and run the free versions of Ad-Aware and Spybot and let these programs remove all of the garbage that they find.

    If these programs don't solve the problem, go Here and follow the directions to download and run the analysis tool called HijackThis. Generate a log file, then open it and copy and paste the text of the log file in a message in the HijackThis forum where a HijackThis expert can offer advice on how to fix the problem.

    Steve
  • Cobrafan2

    9 Posts

    288

    0

    Posted October 17th, 2005 01:00

    Steve -

    I'll try your latest suggestions.

    I guess the spyware detection feature of Norton is too wimpy to detect this.

    Thanks for your reply.  I appreciate it.

    Alan

     

  • Cobrafan2

    9 Posts

    122

    0

    Posted October 18th, 2005 17:00

    Steve -

    I down-loaded and ran the scans from Ad-Aware and Spybot, and removed the garbage they found.  It wasn't much though.  However, I was not able to get the updates for either program.  I kept getting the "program is not responding" message in the task manager window.

    I also posted my problem on the HihackThis site, but I haven't received a response yet.

    If I insisted on the Comcast technician bringing a laptop to my home and trying to get on the internet through my  modem, would that make any sense?

    Thanks for the support, Alan