win 2000 pro problem of browsing the websites

Message

rbi · #1 Post by **rbi** » Thu Jun 21, 2007 7:35 pm

have difficulty browsing the websites at home.I tried to contact my ISP.And he helped me reset the ADSL modem and pinged the address. Finally he said there might be problem with my PC. I recalled last week I got a message to update the Adobe V8 via a not so familiar agent dowload site and did it. And also my windows 2000 pro got the update packets. I can't access any websites since then except for one website invest.etrade.com.au via clicking my favourite not typing the address. I can use Skype but not the outlook express through my ISP account. So I downloaded Bitdefender Antivirus plus v10 valuation version, scanned the system and got some info

C:\I386\WSHOM.OC_=>wshom.ocx Infected: Trojan.Qqpass.IW
C:\I386\WSHOM.OC_=>wshom.ocx Disinfection failed
C:\I386\WSHOM.OC_=>wshom.ocx Move failed
C:\WINNT\system32\CdnCli.exe=>(ZIP Sfx s)=>CdnCli/CdnAux.dll Detected: Adware.Bdsearch.DLL
C:\WINNT\system32\CdnCli.exe=>(ZIP Sfx s)=>CdnCli/CdnAux.dll Disinfection failed

Do you think it is due to the virus I can’t access the websites?

If I type any address in the address of IE, from the windows task monitor I can see it is not responding. Can anyone help?

#2 Post by **GomJabbar** » Thu Jun 21, 2007 9:01 pm

Not that I am a Virus expert or anything, but I find it strange that C:\I386\WSHOM.OC_ is infected. AFAIK, that is just one of the installation files for Windows. Here is a listing for Qqpass.IW. The other file looks like it is some spyware called CNNIC. Note that spyware, trojans, virus's and the like often damage the Winsock. Removing them can break the Winsock, preventing you from accessing the internet.

As far as removing virus's and trojans, I recommend you try Kaspersky. They give you a free 30 day trial. www.kaspersky.com Note that you should only have one antivirus program installed at a time. If you wish to try another, unistall the one you are using. Note that you will likely have a better success running your antivirus program in Windows SAFE MODE. It can delete things there that it can't delete in Windows NORMAL MODE. Press F8 at the IBM splash screen on bootup to enter SAFE MODE.

I would suggest the following. First try to remove all virus's, etc. Next, if you have a Win 2000 installation CD, put it in the CD drive, go to Start > Run, type SFC /scannow in the input box, then click on OK. It may take an hour or more to complete. If you do not have a Win 2000 installation CD, you can still run SFC /scannow and use the C:\I386\ directory. But if you have a virus in there, I am not sure what the result would be. SFC stands for System File Checker. It's purpose is to check the integrety of the Windows system files and replace any damaged or missing Windows files.

Next, try repairing the Winsock. Here are some links.

How to recover from Winsock2 Corruption

Troubleshoot TCP/IP Connectivity

Using the Network Diagnostics Tool

Corruption at the Jersey Shore

Minimizing 802.11 Interference Issues

rbi · #3 Post by **rbi** » Thu Jun 21, 2007 10:55 pm

GomJabbar wrote:Not that I am a Virus expert or anything, but I find it strange that C:\I386\WSHOM.OC_ is infected. AFAIK, that is just one of the installation files for Windows. Here is a listing for Qqpass.IW. The other file looks like it is some spyware called CNNIC. Note that spyware, trojans, virus's and the like often damage the Winsock. Removing them can break the Winsock, preventing you from accessing the internet.

As far as removing virus's and trojans, I recommend you try Kaspersky. They give you a free 30 day trial. www.kaspersky.com Note that you should only have one antivirus program installed at a time. If you wish to try another, unistall the one you are using. Note that you will likely have a better success running your antivirus program in Windows SAFE MODE. It can delete things there that it can't delete in Windows NORMAL MODE. Press F8 at the IBM splash screen on bootup to enter SAFE MODE.

I would suggest the following. First try to remove all virus's, etc. Next, if you have a Win 2000 installation CD, put it in the CD drive, go to Start > Run, type SFC /scannow in the input box, then click on OK. It may take an hour or more to complete. If you do not have a Win 2000 installation CD, you can still run SFC /scannow and use the C:\I386\ directory. But if you have a virus in there, I am not sure what the result would be. SFC stands for System File Checker. It's purpose is to check the integrety of the Windows system files and replace any damaged or missing Windows files.

Next, try repairing the Winsock. Here are some links.

How to recover from Winsock2 Corruption

Troubleshoot TCP/IP Connectivity

Using the Network Diagnostics Tool

Corruption at the Jersey Shore

Minimizing 802.11 Interference Issues

Really appreciate the help. My laptop is T23 and doesn't got the R & R CD although the OS is authentic.

Before I had this problem, I recalled I haven't done the virus scanning for long long time.

Yes I guess the only option is to download the Kapski and scanned and tried to repair the Winsock.

#4 Post by **RealBlackStuff** » Fri Jun 22, 2007 1:19 am

Before trying a full installation (of Kaspersky or any other AV), go to http://housecall.trendmicro.com/ and let it scan your PC (for free).
It'll do a thorough job.
If you're happy afterwards, either get the free AVG antivirus from http://free.grisoft.com or go for NOD32, as advertised at the top/right of this page.

rbi · #5 Post by **rbi** » Sat Jun 23, 2007 12:30 am

RealBlackStuff wrote:Before trying a full installation (of Kaspersky or any other AV), go to http://housecall.trendmicro.com/ and let it scan your PC (for free).
It'll do a thorough job.
If you're happy afterwards, either get the free AVG antivirus from http://free.grisoft.com or go for NOD32, as advertised at the top/right of this page.

Really appreicate it RealBlackStuff. The problem is I can't access the websites either. BUT today I am now in the library using the wireless card and I can browse the internet without any problem at all. My wireless card is a PCMCIA card IBM brand abg one. Why is it like that. Can you help me with that?

#6 Post by **RealBlackStuff** » Sat Jun 23, 2007 4:31 am

The TCP/IP and a bunch of other settings for wired and wireless are separate.
Your wired setup is infected, but the wireless not yet.
Use the opportunity to do the SCAN while you still can!

#7 Post by **GomJabbar** » Sat Jun 23, 2007 4:55 am

The problem is, only a scan in SAFE MODE is likely to be able to remove the virus'. Of course it depends on the virility of the virus' in question.

rbi · #8 Post by **rbi** » Mon Jun 25, 2007 7:03 pm

GomJabbar wrote:The problem is, only a scan in SAFE MODE is likely to be able to remove the virus'. Of course it depends on the virility of the virus' in question.

So I can only do it in the library using the wireless network.

#9 Post by **Kyocera** » Mon Jun 25, 2007 7:25 pm

check the tcpip setttings of your lan, if you are on a dhcp network make sure your set to 'obtain ip address automatically' unless you have specifically been using a static ip, also check internet options, connections, LAN settings if there anything in the proxy server, uncheck it, your library settings for IE may be different than your lan and my be overriding your default settings.

You may be able to do a system restore back to a point prior to this event that will allow you to at least get on line, get to the kaspersky web site do the on line scan, which is kind of a pain since you do have to download some tools, i'd go for microsoft web site download any update, then head for the nod32 and get the forum deal, i'm running it on my 2003 server and it is working great.

rbi · #10 Post by **rbi** » Mon Jun 25, 2007 8:24 pm

Kyocera wrote:check the tcpip setttings of your lan, if you are on a dhcp network make sure your set to 'obtain ip address automatically' unless you have specifically been using a static ip, also check internet options, connections, LAN settings if there anything in the proxy server, uncheck it, your library settings for IE may be different than your lan and my be overriding your default settings.

You may be able to do a system restore back to a point prior to this event that will allow you to at least get on line, get to the kaspersky web site do the on line scan, which is kind of a pain since you do have to download some tools, i'd go for microsoft web site download any update, then head for the nod32 and get the forum deal, i'm running it on my 2003 server and it is working great.

I am trying to avoid the system restoring. I already checked the tcp/ip and couldn't find any difference??

I will post the details of my internet connection and etc. Another issue is I used to install the Norton Corporate version Antivirus and uninstalled it incompletely which prevented other antivirus software installation.

#11 Post by **tomh009** » Mon Jun 25, 2007 8:36 pm

When you are on the wired connection, can you access web sites using numeric IP addresses, like
http://64.235.98.2/

If you can, then it's the DNS settings on your wired connection that's causing the problem. Can you check the IP configuration for your wired (Ethernet) connection?

#12 Post by **GomJabbar** » Mon Jun 25, 2007 9:02 pm

rbi wrote:Another issue is I used to install the Norton Corporate version Antivirus and uninstalled it incompletely which prevented other antivirus software installation.

Download and run the Norton Removal Tool

rbi · #13 Post by **rbi** » Mon Jun 25, 2007 9:20 pm

tomh009 wrote:When you are on the wired connection, can you access web sites using numeric IP addresses, like
http://64.235.98.2/

If you can, then it's the DNS settings on your wired connection that's causing the problem. Can you check the IP configuration for your wired (Ethernet) connection?

Ok I will check it. That's really nice of you guys to put in so much effort and time to help me through it.

rbi · #14 Post by **rbi** » Mon Jun 25, 2007 9:21 pm

GomJabbar wrote:
rbi wrote:Another issue is I used to install the Norton Corporate version Antivirus and uninstalled it incompletely which prevented other antivirus software installation.
Download and run the Norton Removal Tool

Cool and really appreciate it GomJabbar!

win 2000 pro problem of browsing the websites

win 2000 pro problem of browsing the websites

Who is online