Can't Connect to Internet 1

[lewis33]

Hi, I'm a DB guy so network issues are my definite weakness.
Got a real issue as I cannot use my dial up Internet service nor dial into my work mainframe. I'm using Windows 98 and so far I have:
1. Reinstalled Windows 98 and reinstalled I.E. 5.5 but get the same error. I didn't remove the IE program and thought reinstalling would add in any drivers I may have zapped if in fact that's what I did.

Whenever I try to connect, I get a RAS error or 'remote access server not available' or something like 'Rundll32 not found- Explorer must shut down'. I tried removing dial up networking and re-adding but that didn't change anything. ANY ideas would be great- desparate in Cleveland.

 

[stormbind]

Somewhere in Win98 there is folder named "Dial Up Connections"

What happens if you go in there and open "Create New Connection"?

I cannot remember, but think it's either in My Computer or Control Panels.

----------
Memoria mihi benigna erit qui eam perscribam

 

[TekTippy4U]

try this;

http://www.astonsoft.com/products/winsock/download/

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[lewis33]

I can establish new connections but I still can the Rundll32 error.

 

[TekTippy4U]

try replacing rundll32.exe from Install CD
I have no idea why that error, without more specific Info
Boot into Safe Mode...SAME?
Start >RUn MSCONFIG
See any thing unusual in the Startup Tab?

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[lewis33]

Thanks TT4U- I'll try running the rundll32.exe from the install CD.
Can you tell me how to boot into safe mode and also what running msconfig does? Is that kind of a disk defrag (don't think so but thought I'd say that to show how little I know about this)

 

[TekTippy4U]

hi lewis33
I really suspect malware

Safe Mode;

http://service1.symantec.com/SUPPOR...2001052409420406?OpenDocument&src=sec_doc_nam

See if the problem occurs in Safe Mode

msconfig.exe is M$ System Configuration Utility
One of many "tools" found in MSinfo32

start > run msinfo32 and choose Tools menu > System Configuration Utility - same thing.

start > run msconfig and click startup tab, general tab, config.sys, autoexec,bat, system.ini, win.ini.

Do you have any rundll32 entries in the Startup tab???
if so...what?
How about in Config.sys or Autoexec.bat????

How about in System.ini (click [+] sign to expand)
[boot]
shell=explorer.exe (have it Exactly??)

How about Win.ini
[windows]
load=
run=
are these 2 entries Blank ??



TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[lewis33]

Thank you again TT4U. I'll give it all of those a look see. I started having these problems when some programs started to load onto my machine when I was logged on.

 

[TekTippy4U]

Find in C:\Windows (if they exist)
Wininit.ini
Wininit.bak
and delete these

Clear out your Temporary Internet Files / Temp / History / Recent / and Cookies Folder...(check for "useful" cookies you may want to keep)

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[lewis33]

TT4U,
Wanted to say, thanks again- think I got it working. I did not go into safe mode but I made a couple of adjustments and not sure what did the trick. However, I did lose some of my disply colors when I re-booted. Basically, I deleted all the cookies and also I think I zapped a Wininit.ini or
Wininit.bak file.
Also--
I ran the msinfo32 info and checked some things out. I didn't even know that utility existed. I ran the IE repair tool. Then, I checked the system configuration utility and checked that the boot had 'shell=explorer.exe' which it did. However, under Win.ini under +windows it had this:
load=ptsnoop.ex
run=c:windows\system\cmmpu.exe
I deleted these and know it shows as blank but with a pencil next to them.
Then, I disabled all of the Start Up items from the Start Up tab and now under the General Tab, it reads (with the Selective Start Up radio button on):
X -process autoexec
blank for process config.sys
X -process system.ini file
X -process Win.ini file
and then a grayed check box for the load start up group items.
I think the autoexec and config.sys tabs were blank.

Now, under the Start Up tab, I have 18 items that are blank except for one. The first is checked as follows and all others are blank:
-Voltray C:\program files\netzero\exec.exe regrun (my ISP)
-Voltray (same thing except not checked)
-Reminder C:\ProgramFiles\Microsoft Money\system\reminder.exe
-LoadPower Profile Rundll32.exepowrprof.dll,LoadCurrentPwr Scheme
-aqadcup C:\Windows\aqadcup.exe
-Scan Registry C:\Windows\scanregw.exe/autorun
-TaskMonitor C:\Windows\task.mon
-System Tray systray.exe
-Country Selection pcpptt.exe
-C-Media Mixer C:\ProgramFiles\PCI Audio Application Mixer/startup.exe
-Slmss C:\ProgramFiles\Common Files\slmss\slmss.exe
-MWSVM C:\Windows\mwsvm.exe
-Fash C:\Windows\fash.exe
-Quick Time Task C:\Windows\System\QTTask.exe
-Gene USB Monitor C:\Windows\System\USBMonitor.exe
-Scheduling Agent C:\Windows\System\mstask.exe
-Welcome C:\Windows\Welcome.exe/R

I didn't see any other rundll type files in the autoexec or config.sys tabs except for the fourth entry in the start up. Grateful for the help on this. Think it seems to be working OK but I'm thinking I might be missing some things that should be running in the start up tab.

 

[TekTippy4U]

for these;
load=ptsnoop.ex
run=c:windows\system\cmmpu.exe
Start > Run SYSEDIT
choose Win.ini
delete ALL the text associated only -
such like Rem t-shoot; ptsnoop.exe so you're left with
Load=
run=
File >> Save

------------------
concerning C:\windows\system\cmmpu.exe
------------------
[...Background task that works as a MIDI emulator for the integrated sound chip by C-Media based on the CMI-8330 chip set found in cheap motherboards...]
see

http://support.microsoft.com/?kbid=218608

MS says it was designed for 95 - reinstall drivers - look for updated driver from C-media site linked from MS link.

--------------------
as for ptsnoop.exe
---------------------
PtSnoop.exe

(PCTEL) This background program is used by PCTEL modems. It is essential to the good functioning of those modems.
Recommendation :
If you used to have a PCTEL modem, but have since replaced it, DELETE it.

==================
much more info
==================
ptsnoop.exe CAN BE a BACKDOOR TROJAN - this could be the problem with the Internet conn. not working, see;

http://www.f-secure.com/v-descs/ptsnoop.shtml

and

http://www.computing.net/security/wwwboard/forum/1754.html

Go to C:\Windows\System and DELETE the PTSNOOP.EXE file
Uninstall the modem and reinstall using the Orig Install CDs - if you're even still using the modem. If you don't have Orig CDs and are still using the PC-Tel modem then go to

http://www.driverguide.com

and d/l the pctel56k.zip file

==============
as I look deeper - gloom starts setting in
==============
-Slmss C:\ProgramFiles\Common Files\slmss\slmss.exe

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=ADW_SECTHOUGHT.A

you've got serious adware and spyware issues, and psssibly worse....and this is a Reinstall?
Do an online virus scan from Panda or Trendmicro.

http://www.pandasoftware.com/activescan/

http://housecall.trendmicro.com

go here and to the links below;

http://www.mvps.org/winhelp2002/unwanted.htm

d/l and run CWShredder , SpyBot, AdAware - in that order - update the definitions...run each program and understand the settings.
more here;

http://www.safer-networking.org/en/tutorial/index.html

You need to re-enable all the MSCONFIG stuff and reboot for these tools to work properly.(incliuding HJT)

D/l and scan with HijackThis! after you're done cleaning and post back with the Log file - Create a Folder called C:\HJT and d/l and unzip HijackThis into that folder and then run the tool.

http://tomcoyote.com/hjt/

for a tutorial

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs