This is a reposting from the Virus/Trojan forum because the main issue now is no connectivity on our Dell Dimension 4700 desktop (Windows XP, SP-2), which previously had no problems.
The brief history is that, probably as a resultl of a trojan (something called Conhook.b), which I believe has now been expunged, I cannot connect to my ISP (Verizon Onliine). I have already talked to them. They said that when we ran the "ipconfig/all" test on the command line and we got a message saying that there was an "internal" problem, they could not do anythihg. I then talked to a Dell tech for an hour or so and he checked some connectivity issues (including trying to delete all the Verizon Online setup files in order to see if the original error message box twhich is headlined Verizon Online Updates when booting up "Error connecting to Inernet....Pc 0x82600264". He was not able to resolve the problem and it still reappears. I also tried changing my LAN settings on the problem desktop PC based on this laptop PC using the LAN Settings transfer Wizard....the error still appears. We get similar errors, of course,with Outlook Express (No Socket Error:11004, error number 0x800ccc0d.)
I have also tried using MS support recommendations, incl. resetting Winsock protocol. Unfortunately, I think the trojan had also compromised our System Restore capability, so am unable to get a previusly good condition either using a pre-infection restore point (there are none shown as available) or by rebooting in SAFE mode. Nothing has worked yet.
For info. the results of the IE diagnostics file is as follows:
Last diagnostic run time: 02/07/08 22:18:20 WinSock Diagnostic WinSock status
info All base service provider entries are present in the Winsock catalog. info The Winsock Service provider chains are valid. error Provider entry MSAFD Tcpip [TCP/IP] could not perform simple loopback communication. Error 10050. error Provider entry MSAFD Tcpip [UDP/IP] could not perform simple loopback communication. Error 10050. error Provider entry RSVP UDP Service Provider could not perform simple loopback communication. Error 10091. error Provider entry RSVP TCP Service Provider could not perform simple loopback communication. Error 10091. error A connectivity problem exists with an installed LSP. action Automated repair: Reset WinSock catalog action Successfully executed: netsh winsock reset catalog info System restart required
info Using home Internet connection Network adapter identification
info Network connection: Name=Local Area Connection, Device=Intel(R) PRO/100 VE Network Connection, MediaType=LAN, SubMediaType=LAN info Network connection: Name=verizononline, Device=WAN Miniport (PPPOE), MediaType=PPPOE, SubMediaType=NONE info Ethernet connection selected Network adapter status
warn HTTP: Error 12007 connecting to www.microsoft.com: The server name or address could not be resolved warn HTTPS: Error 12007 connecting to www.microsoft.com: The server name or address could not be resolved warn FTP (Passive): Error 12007 connecting to ftp.microsoft.com: The server name or address could not be resolved warn FTP (Active): Error 12007 connecting to ftp.microsoft.com: The server name or address could not be resolved warn HTTPS: Error 12007 connecting to www.passport.net: The server name or address could not be resolved warn HTTP: Error 12007 connecting to www.hotmail.com: The server name or address could not be resolved error Could not make an HTTP connection. error Could not make an HTTPS connection. error Could not make an FTP connection.
I am using the same DSL modem, ethernet cable, and telephone cable as for this laptop PC, so the hard connections are OK; I have powered DSL modem and unplugged ethernet cable several times as well. I'm about out of ideas, other than reload Win. XP, an unappealing prospect. Appreciate any further ideas and help very much....thanks.
Hi. Ran LSPfix.exe. It found no problems, made no changes,and said to keep the following files:mswsock.dll, winmr.dll, mdnsNSP.dll, & rsvpsp.dll. Should I try the other Winsockfix.exe link listed on the LSPfix web page?
You have probably done everything the winsockfix does, but it wouldn't hurt to try. Viruses and their removal can sometimes make problems like this nearly impossible to fix.
OK I ran the Winsockfix.exe for XP and it deleted the current registry values and imported new "working" values and replaced the "hosts" file with a default one. Unfortunately, now the Network Diagnostic Winsock status is:
info Error attempting to validate Winsock base providers:2
error Not all base service provider entries could be found in the winsock catalog. A reset is needed.
info Redirecting user to support call.
I did a winsock catalog reset but still "no luck." I probably would have to get these "service provider entries" from Verizon?
I'm beginning to think it may be just simpler, in the final analysis, to "bite the bullet" and reload Windows XP + SP-2 and all the updates (I belive there's a "streamlined" procedure available from Microsoft online) and take the consequences...what do you think?
Getting rid of the viruses has probably at least given you the ability to access your files. That is a plus, as you can now back them up. Yes, it will probably be faster in the long run to just reinstall Windows. Before you do this, however, go into Device Manager and take note of all installed devices and make sure you have all fo the drivers for these device available so you can reinstall them. In particular, make sure you have the chipset drivers for your system as it is absolutely essential that the chipset drivers be installed first and before attempting to install other device drivers.
I just had a brain incursion for one other possible option. I had backed up my "c" drive system data and files (I believe I did everything) onto another, bigger hard drive I installed several months ago as a recourse against the hard disc failures we all suffer from time to time. So, as we speak, I am trying to restore a back-up I did 10/17/07 to see if that will do the trick with registry settings and system files....I hope so.
Thanks for the heads up re: device drivers, etc. if I do have to reload XP I'll let you know how it turns out.
volcano11
2 Intern
•
27973 Posts
759
0
Posted February 11th, 2008 15:00
Try downloading and running lspfix from Here.
Steve