Can adware prevent internet connection?

I started this thread because I could not connect to the internet after trying to get rid of some adware as described below. Because of a line in the HiJackThis log I may have found the problem. But before I get too giddy, I'd like some professional advice.

The short version:

Laptop had adware (Virtual Bouncer among others)

Installed McAfee Internet Suite (got rid of some adware, a virus, a VPN and another anti-virus s/w)

Lost internet connection (usually through Linksys Wireless Access Point Router w/by ethernet cable, other PCs connected to router are unaffected) and noticed home page was being unsuccessfully re-routed to www.incredifind.com, when closing IE got following error: "The instruction at xxx referenced memory at yyy. The memory could not be read." Laptop currently has 169.254... IP address while others attached to router have 192.168.... addresses. None of the IP addresses can be released or renewed.

Ran Disk Defragmenter

Uninstalled McAfee Internet Suite

Reinstalled Windows XP

Ran SpyBot which removed some more adware.

Reinstalled McAfee Internet Suite

Powercycled modem, reset router, tried to direct-connect laptop to modem

Found this site

Ran Spybot (got one new one), HiJackThis scan & log, AdAware and new HiJackThis log (below).

 

The following line:

O10 - Broken Internet access because of LSP provider 'c:\windows\system32\cslsp.dll' missing

looked especially relevant, so I copied the cslsp.dll file from the i386 folder to the system32 folder and rebooted and lo and behold I have contact (albeit slow for a cable modem).

 

My question is: Is there anything else here that might have caused this problem?

Thanks so much in advance.

 

Logfile of HijackThis v1.98.0

Scan saved at 6:07:08 PM, on 7/26/2004

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\McAfee\McAfee Privacy Service\GUARDDOG.EXE

c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe

C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe

C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\McAfee\McAfee Privacy Service\GUARDDOG.EXE

C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe

C:\WINDOWS\System32\nvsvc32.exe

c:\PROGRA~1\mcafee.com\vso\mcshield.exe

C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe

C:\Program Files\Apoint\Apoint.exe

C:\Program Files\BroadJump\Client Foundation\CFD.exe

C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe

C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe

C:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe

C:\PROGRA~1\mcafee.com\agent\McAgent.exe

C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe

C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe

c:\progra~1\mcafee.com\vso\mcvsescn.exe

C:\WINDOWS\System32\ctfmon.exe

C:\Program Files\Apoint\Apntex.exe

C:\Program Files\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://websearch.drsnsrch.com/sidesearch.cgi?id=

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 169.254.184.65:80

O1 - Hosts: 127.0.0.0 localhost

O1 - Hosts: 127.0.0.2 auditmypc.com

O1 - Hosts: 127.0.0.3 boards.cexx.org

O1 - Hosts: 127.0.0.4 bulletproofsoft.net

O1 - Hosts: 127.0.0.5 camtech2000.net

O1 - Hosts: 127.0.0.6 cexx.org

O1 - Hosts: 127.0.0.7 computercops.us

O1 - Hosts: 127.0.0.8 ct7support.com

O1 - Hosts: 127.0.0.9 doxdesk.com

O1 - Hosts: 127.0.0.20 kellys-korner-xp.com

O1 - Hosts: 127.0.0.21 kephyr.com

O1 - Hosts: 127.0.0.22 lavasoft.de

O1 - Hosts: 127.0.0.23 lavasoftusa.com

O1 - Hosts: 127.0.0.24 lurkhere.com

O1 - Hosts: 127.0.0.25 majorgeeks.com

O1 - Hosts: 127.0.0.26 merijn.org

O1 - Hosts: 127.0.0.27 mjc1.com

O1 - Hosts: 127.0.0.28 moosoft.com

O1 - Hosts: 127.0.0.29 mvps.org

O1 - Hosts: 127.0.0.30 net-integration.net

O1 - Hosts: 127.0.0.31 noadware.net

O1 - Hosts: 127.0.0.32 no-spybot.com

O1 - Hosts: 127.0.0.33 onlinepcfix.com

O1 - Hosts: 127.0.0.34 pchell.com

O1 - Hosts: 127.0.0.35 pestpatrol.com

O1 - Hosts: 127.0.0.36 safer-networking.org

O1 - Hosts: 127.0.0.37 secure.spykiller.com

O1 - Hosts: 127.0.0.38 secureie.com

O1 - Hosts: 127.0.0.39 security.kolla.de

O1 - Hosts: 127.0.0.40 spybot.info

O1 - Hosts: 127.0.0.41 spychecker.com

O1 - Hosts: 127.0.0.42 spychecker.com

O1 - Hosts: 127.0.0.43 spycop.com

O1 - Hosts: 127.0.0.44 spyguard.com

O1 - Hosts: 127.0.0.45 spykiller.com

O1 - Hosts: 127.0.0.46 spyware.co.uk

O1 - Hosts: 127.0.0.47 spyware-cop.com

O1 - Hosts: 127.0.0.48 spywareinfo.com

O1 - Hosts: 127.0.0.49 spywarenuker.com

O1 - Hosts: 127.0.0.50 spywareremove.com

O1 - Hosts: 127.0.0.51 spywareremove.com

O1 - Hosts: 127.0.0.52 stopzillapro.com

O1 - Hosts: 127.0.0.53 sunbelt-software.com

O1 - Hosts: 127.0.0.54 thiefware.com

O1 - Hosts: 127.0.0.55 tomcoyote.org

O1 - Hosts: 127.0.0.56 unwantedlinks.com

O1 - Hosts: 127.0.0.57 webattack.com

O1 - Hosts: 127.0.0.58 wilders.org

O1 - Hosts: 127.0.0.59 www.auditmypc.com

O1 - Hosts: 127.0.0.60 www.bulletproofsoft.net

O1 - Hosts: 127.0.0.61 www.cexx.org

O1 - Hosts: 127.0.0.62 www.computercops.us

O1 - Hosts: 127.0.0.63 www.ct7support.com

O1 - Hosts: 127.0.0.64 www.doxdesk.com

O1 - Hosts: 127.0.0.65 www.eblocs.com

O1 - Hosts: 127.0.0.66 www.enigmasoftwaregroup.com

O1 - Hosts: 127.0.0.67 www.free-spyware-scan.com

O1 - Hosts: 127.0.0.68 www.free-web-browsers.com

O1 - Hosts: 127.0.0.69 www.grc.com

O1 - Hosts: 127.0.0.70 www.grisoft.com

O1 - Hosts: 127.0.0.71 www.hackfaq.org

O1 - Hosts: 127.0.0.72 www.hazeleger.net

O1 - Hosts: 127.0.0.73 www.javacoolsoftware.com

O1 - Hosts: 127.0.0.74 www.kellys-korner-xp.com

O1 - Hosts: 127.0.0.75 www.kephyr.com

O1 - Hosts: 127.0.0.76 www.lavasoft.de

O1 - Hosts: 127.0.0.77 www.lavasoftusa.com

O1 - Hosts: 127.0.0.78 www.lurkhere.com

O1 - Hosts: 127.0.0.79 www.majorgeeks.com

O1 - Hosts: 127.0.0.80 www.merijn.org

O1 - Hosts: 127.0.0.81 www.mjc1.com

O1 - Hosts: 127.0.0.82 www.moosoft.com

O1 - Hosts: 127.0.0.83 www.mvps.org

O1 - Hosts: 127.0.0.84 www.net-integration.net

O1 - Hosts: 127.0.0.85 www.noadware.net

O1 - Hosts: 127.0.0.86 www.no-spybot.com

O1 - Hosts: 127.0.0.87 www.onlinepcfix.com

O1 - Hosts: 127.0.0.88 www.pchell.com

O1 - Hosts: 127.0.0.89 www.pestpatrol.com

O1 - Hosts: 127.0.0.90 www.safer-networking.org

O1 - Hosts: 127.0.0.91 www.secureie.com

O1 - Hosts: 127.0.0.92 www.security.kolla.de

O1 - Hosts: 127.0.0.93 www.spybot.info

O1 - Hosts: 127.0.0.94 www.spychecker.com

O1 - Hosts: 127.0.0.95 www.spychecker.com

O1 - Hosts: 127.0.0.96 www.spycop.com

O1 - Hosts: 127.0.0.97 www.spyguard.com

O1 - Hosts: 127.0.0.98 www.spykiller.com

O1 - Hosts: 127.0.0.99 www.spyware.co.uk

O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll (file missing)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: McAfee Privacy Service - {cc4b2ee5-4803-11d7-8a38-00b0d0c6b814} - C:\Program Files\McAfee\McAfee Privacy Service\GDIEHELP.DLL

O2 - BHO: Band Class - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:\WINDOWS\dealhlpr.dll

O3 - Toolbar: (no name) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - (no file)

O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)

O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll

O3 - Toolbar: Band Class - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:\WINDOWS\dealhlpr.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\ServicePackFiles\i386\msconfig.exe /auto

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet

O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe

O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe

O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe

O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe /autorun

O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe

O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask

O4 - HKLM\..\Run: [McAfee Guardian] C:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe /SU

O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\McAgent.exe

O4 - HKLM\..\Run: [VirusScan Online] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe

O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MSKDetct.exe /startup

O4 - HKLM\..\Run: [MPFTray] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - Global Startup: Wireless-G Notebook Adapter Utility.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\WPC54CFG.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: Privacy Bar - {cc4b2ee5-4803-11d7-8a38-00b0d0c6b814} - C:\Program Files\McAfee\McAfee Privacy Service\GDIEHELP.DLL

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll

O10 - Broken Internet access because of LSP provider 'c:\windows\system32\cslsp.dll' missing

O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab

O16 - DPF: {1C78AB3F-A857-482E-80C0-3A1E5238A565} - file://C:\install.cab

O16 - DPF: {3C648A72-C49A-48EF-9F90-68EF13293F97} (Cacher Class) - http://xmlsweb.socalmls.com/XMLSearch/XMLCache.CAB

O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021017/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe

O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/ydropper/ydropper1_2us.cab