All website acess blocked.

  • Thread starter Thread starter Chris Manuel
  • Start date Start date
C

Chris Manuel

Hello.

I have a big problem with my PC .
I cant access any of the sites, i think there is either an unknown firewall
running on my PC, or something else that is blocking it.

Does anybody know if there is anything on thsi 'HijackThis' log file, that
could be causing my problem?

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://forum.gladiator-antivirus.com/index.php?s=80af0a1d52917016763a1aea392
097fa&
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.blueyonder.co.uk/dial
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft
Internet Explorer provided by blueyonder
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyServer = 82.39.40.216 : 8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = local
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program
Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program
Files\COMPAQ\Coloreal\coloreal.exe"
O4 - HKLM\..\Run: [Smapp] Smtray.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button
Support\StartEAK.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo
Imaging\Hpi_Monitor.exe"
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common
Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP
Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital
Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winamp
3\\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [MSConfig]
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [NoAds] "C:\Program Files\NoAds\NoAds.exe"
O4 - HKCU\..\Run: [STYLEXP] C:\Program
Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &iSearch The Web -
res://C:\WINDOWS\System32\toolbar.dll/SEARCH.HTML
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .pdf: C:\Program Files\Internet
Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet
Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.blueyonder.co.uk/dial
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) -
http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX
Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
 
Presumably your connection, wheather it be modem, or DSL connects properly?
Have you uninstalled anything lately?

go to the command prompt ( run | cmd )

type:

a) ping -w10000 www.yahoo.co.uk - Do you get a reply?
b) ping -w10000 217.12.3.11 - Reply?


if (b) works but (a) does not then It may be a problem with the winsock
layered [name] service provider. ( in that cast do a search on the web on
how to fix it - it involved uninstalling winsock and deleting a few registry
keys )
 
yes, i have braodband, and i recently have had a problem with spyware and
trojans.
Ive unistalled those, using HijackThis. i got some advise from a tech
website.

Ive tried a, and b, it said IP address must be specified.

I typed 'tracert 217.12.3.11' in the CMD and it traced ok
and did the same with 'tracert yahoo.co.uk', and that did it ok too.
 
Chris said:
Hello.

I have a big problem with my PC .
I cant access any of the sites, i think there is either an unknown firewall
running on my PC, or something else that is blocking it.

Does anybody know if there is anything on thsi 'HijackThis' log file, that
could be causing my problem?
Click to expand...
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyServer = 82.39.40.216 : 8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = local
Click to expand...

You sure your proxy settings are all correct? I didn't see anything
other than you have far too many programs running resident.
 
from the wonderful said:
yes, i have braodband, and i recently have had a problem with spyware and
trojans.
Ive unistalled those, using HijackThis. i got some advise from a tech
website.

Ive tried a, and b, it said IP address must be specified.

I typed 'tracert 217.12.3.11' in the CMD and it traced ok
and did the same with 'tracert yahoo.co.uk', and that did it ok too.
Click to expand...

If tracert works OK but web access to the same site does not, then it
sounds as if the problem is with your browser. Try repairing the
installation (for WinXP users of IE6 this is a somewhat convoluted
process - google for how to do it).
 
im really havnt got a clue anbout this sorta stuff, how would i check they
are correct.

Im trying to uninstall norton internet security, but it keeps telling me i
need have an account with supervisor access.
This is my own PC and im the only user on it.
 
yeah, i finally got this thing sorted.

Apparently i should be using an IP address anymore, so i just unticked it.

Telewest broadband, didnt bother informing anybody that it was gonna change,
so theres loadsa people woth the same problem on the blueyonder newsgroup.

Thanks for the tip anyways!!
regards,
chris.
 
On that special day, Chris Manuel, ([email protected]) said...
yes, i have braodband, and i recently have had a problem with spyware and
trojans.
Ive unistalled those, using HijackThis. i got some advise from a tech
website.

Ive tried a, and b, it said IP address must be specified.

I typed 'tracert 217.12.3.11' in the CMD and it traced ok
and did the same with 'tracert yahoo.co.uk', and that did it ok too.
Click to expand...

There must be a flie on your machine, called "hosts", with *no*
ending/suffix.

It is a text file. Look if there is more than the line
127.0.0.1 localhost
inside, and if it looks fishy, tell about the contents. They might not
belong there.


Gabriele Neukam

(e-mail address removed)
 
Gabriele Neukam said:
On that special day, Chris Manuel, ([email protected]) said...


There must be a flie on your machine, called "hosts", with *no*
ending/suffix.

It is a text file. Look if there is more than the line
127.0.0.1 localhost
inside, and if it looks fishy, tell about the contents. They might not
belong there.
Click to expand...

Hell, just tell us the file size - it must be huge to send all
websites to the loopback. ;o)
 
from the wonderful said:
Hell, just tell us the file size - it must be huge to send all
websites to the loopback. ;o)
Click to expand...

But ISTR that he said 'ping' by name worked .. now afaik if 'hosts' has
blocking cr&p in, that'll stop 'ping' or 'tracert' just as well as it'll
stop your browser, email system, whatever.
 
GSV said:
But ISTR that he said 'ping' by name worked .. now afaik if 'hosts' has
blocking cr&p in, that'll stop 'ping' or 'tracert' just as well as it'll
stop your browser, email system, whatever.
Click to expand...

it shouldn't *stop* the ping, it should redirect it... it should wind
up being equivalent to ping 127.0.0.1...
 
GSV Three Minds in a Can said:
But ISTR that he said 'ping' by name worked .. now afaik if 'hosts' has
blocking cr&p in, that'll stop 'ping' or 'tracert' just as well as it'll
stop your browser, email system, whatever.
Click to expand...

I was being facetious. For *all* websites to be sent to the
loopback by the hosts file, *all* websites would need an
entry in that file. Take the total number of existing websites
and multiply that by the average number of characters that
denote a website to get an idea how large the hosts file would
need to be (we can ignore *all* of the 127.0.0.1 entries for
this excercise).

....a large file indeed I would think.

It seems more likely to me that there was (but no longer is)
a local proxy between the browser and the ISP.
 
Back
Top