How can I remove residual data from "Onspeed"?

Bob Lucas · May 27, 2009

Windows XP Professional Version 2002 (SP3)
Internet Explorer 7.0.5730.13
Zone Alarm Personal Firewall (free version) 8.0.298.000
avast! Home Edition, 4.8.1335
Spybot - Search & Destroy 1.6.2.46 (without the Tea-timer add-on)

Several years ago, I subscribed to the "Onspeed" download
accelerator service, which boosted my dial-up Internet
connection. The proprietary software configured my Internet
connection settings to use a proxy server at
http://pac.onspeed.com. - with an "automatic configuration
script" at http://pac.onspeed.com/pac/?id=[long_hex_number].

Several years ago, I changed to an ADSL broadband connection.
Consequently, I did not renew the Onspeed subscription - and I
used "Add or Remove Programs" to uninstall the software.

When I reviewed my LAN settings today, I discovered that although
the "Use automatic configuration script" option is unchecked and
the field is greyed out, it still points to a URL at
(http://pac.onspeed.com/pac/?id=[long_hex_number]). I have
tried, unsuccessfully, to clear this field.

I should be most grateful, if someone could advise me how to
remove the residue left behind, after I had uninstalled the
Onspeed software.

My registry includes the following data:

[HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file

:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="
http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-21-369320415-3544955198-2928392038-1005\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file

:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

Ron Badour · May 27, 2009

You can use regedit to delete the URL from the registry keys you posted;
however, export the key before doing so in case problems ensue afterwards.
Exporting creates a .reg file that can be used to reenter data that is
removed.

Since the item is greyed out, I doubt that having the entries in the
registry keys is causing any problems.
--
Regards

Ron Badour
MS MVP
Windows Desktop Experience

Bob Lucas said:
Windows XP Professional Version 2002 (SP3)
Internet Explorer 7.0.5730.13
Zone Alarm Personal Firewall (free version) 8.0.298.000
avast! Home Edition, 4.8.1335
Spybot - Search & Destroy 1.6.2.46 (without the Tea-timer add-on)

Several years ago, I subscribed to the "Onspeed" download accelerator
service, which boosted my dial-up Internet connection. The proprietary
software configured my Internet connection settings to use a proxy server
at http://pac.onspeed.com. - with an "automatic configuration script" at
http://pac.onspeed.com/pac/?id=[long_hex_number].

Several years ago, I changed to an ADSL broadband connection.
Consequently, I did not renew the Onspeed subscription - and I used "Add
or Remove Programs" to uninstall the software.

When I reviewed my LAN settings today, I discovered that although the "Use
automatic configuration script" option is unchecked and the field is
greyed out, it still points to a URL at
(http://pac.onspeed.com/pac/?id=[long_hex_number]). I have tried,
unsuccessfully, to clear this field.

I should be most grateful, if someone could advise me how to remove the
residue left behind, after I had uninstalled the Onspeed software.

My registry includes the following data:

[HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"=" http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-21-369320415-3544955198-2928392038-1005\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

Bob Lucas · May 28, 2009

Hello Ron.

I forgot to mention that I had already tried that. Sorry.

I had taken the precaution of exporting the registry keys. Then,
in an attempt to remove the auto-config entries, I deleted the
URL. The deletion did not stick. Then, I deleted the complete
"AutoConfigURL" Sub-key. Again, the deletion did not stick.

As I said previously, I am not using the Spybot S&D Tea-Timer
add-on. Furthermore, I am not aware of any other programs on my
computer that might prevent registry changes. Consequently, I do
not know to delete the remaining references to Onspeed.

AFAIK, I don't believe Onspeed is spyware. Even so, I would
still prefer to remove the auto-config URL completely.

Ron Badour said:
You can use regedit to delete the URL from the registry keys
you posted; however, export the key before doing so in case
problems ensue afterwards. Exporting creates a .reg file that
can be used to reenter data that is removed.

Since the item is greyed out, I doubt that having the entries
in the registry keys is causing any problems.
--
Regards

Ron Badour
MS MVP
Windows Desktop Experience

Bob Lucas said:

Windows XP Professional Version 2002 (SP3)
Internet Explorer 7.0.5730.13
Zone Alarm Personal Firewall (free version) 8.0.298.000
avast! Home Edition, 4.8.1335
Spybot - Search & Destroy 1.6.2.46 (without the Tea-timer
add-on)

Several years ago, I subscribed to the "Onspeed" download
accelerator service, which boosted my dial-up Internet
connection. The proprietary software configured my Internet
connection settings to use a proxy server at
http://pac.onspeed.com. - with an "automatic configuration
script" at http://pac.onspeed.com/pac/?id=[long_hex_number].

Several years ago, I changed to an ADSL broadband connection.
Consequently, I did not renew the Onspeed subscription - and I
used "Add or Remove Programs" to uninstall the software.

When I reviewed my LAN settings today, I discovered that
although the "Use automatic configuration script" option is
unchecked and the field is greyed out, it still points to a
URL at (http://pac.onspeed.com/pac/?id=[long_hex_number]). I
have tried, unsuccessfully, to clear this field.

I should be most grateful, if someone could advise me how to
remove the residue left behind, after I had uninstalled the
Onspeed software.

My registry includes the following data:

[HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="
http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-21-369320415-3544955198-2928392038-1005\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

Click to expand...

SC Tom · May 28, 2009

Go to Start, Run and enter msconfig. Go to the Startup tab and see if
anything is listed there that might pertain to Onspeed and uncheck it. Go to
the Services tab, check the Hide all Microsoft Services box and see if maybe
Onspeed installed a service of some sort.

I'm not sure about the freeware version of ZA, but the paid version won't
allow registry changes without the user being prompted for permission. Try
shutting down the firewall, do your registry edits, then reboot before
bringing ZA back up.

SC Tom

Bob Lucas said:
Windows XP Professional Version 2002 (SP3)
Internet Explorer 7.0.5730.13
Zone Alarm Personal Firewall (free version) 8.0.298.000
avast! Home Edition, 4.8.1335
Spybot - Search & Destroy 1.6.2.46 (without the Tea-timer add-on)

Several years ago, I subscribed to the "Onspeed" download accelerator
service, which boosted my dial-up Internet connection. The proprietary
software configured my Internet connection settings to use a proxy server
at http://pac.onspeed.com. - with an "automatic configuration script" at
http://pac.onspeed.com/pac/?id=[long_hex_number].

Several years ago, I changed to an ADSL broadband connection.
Consequently, I did not renew the Onspeed subscription - and I used "Add
or Remove Programs" to uninstall the software.

When I reviewed my LAN settings today, I discovered that although the "Use
automatic configuration script" option is unchecked and the field is
greyed out, it still points to a URL at
(http://pac.onspeed.com/pac/?id=[long_hex_number]). I have tried,
unsuccessfully, to clear this field.

I should be most grateful, if someone could advise me how to remove the
residue left behind, after I had uninstalled the Onspeed software.

My registry includes the following data:

[HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"=" http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-21-369320415-3544955198-2928392038-1005\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

Bob Lucas · May 28, 2009

Unfortunately, that made no difference. There is nothing in
msconfig that might pertain to Onspeed.

I have tried deleting the offending registry entries:

a) In Safe Mode (logged in as Administrator)

b) With Windows Firewall on / Zone Alarm off

c) Ad-Aware (free version) off

"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"
always returns to the registry.

Surprisingly, I managed eventually to remove the Onspeed URL from
the "Use automatic configuration script" field in Internet
Options / Connections / LAN Settings.

To do so, I enabled "Use automatic configuration script" and
entered 127.0.0.1 in place of the Onspeed URL. Having saved that
change, I disabled "Use automatic configuration script".

However, changes to the registry still refuse to stick, so
something is restoring the Onspeed URL entry, every time I
re-boot.

I have thought of one possibility. The relevant sections of the
registry include the entry "AutoConfigProxy"="wininet.dll". A
search of my hard drive shows numerous instances of this file.
These include:

C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE. Version 7.0.6000.21020,
Created and Modified 03 March 2009, 01:17:40, Size 828,416 bytes.

C:\WINDOWS\system32. Version 7.0.6000.16827, Created 04 August
2004, 09:00:00, Modified 03 March 2009, 01:18:25, Size 826,368
bytes.

I wonder whether "wininet.dll" might be responsible for creating
the unwanted "AutoConfigURL" entry in the registry. If so, I
wonder whether I have the correct version of "wininet.dll" in my
C:\WINDOWS\system32 folder.

SC Tom said:
Go to Start, Run and enter msconfig. Go to the Startup tab and
see if anything is listed there that might pertain to Onspeed
and uncheck it. Go to the Services tab, check the Hide all
Microsoft Services box and see if maybe Onspeed installed a
service of some sort.

I'm not sure about the freeware version of ZA, but the paid
version won't allow registry changes without the user being
prompted for permission. Try shutting down the firewall, do
your registry edits, then reboot before bringing ZA back up.

SC Tom

Bob Lucas said:

Windows XP Professional Version 2002 (SP3)
Internet Explorer 7.0.5730.13
Zone Alarm Personal Firewall (free version) 8.0.298.000
avast! Home Edition, 4.8.1335
Spybot - Search & Destroy 1.6.2.46 (without the Tea-timer
add-on)

Several years ago, I subscribed to the "Onspeed" download
accelerator service, which boosted my dial-up Internet
connection. The proprietary software configured my Internet
connection settings to use a proxy server at
http://pac.onspeed.com. - with an "automatic configuration
script" at http://pac.onspeed.com/pac/?id=[long_hex_number].

Several years ago, I changed to an ADSL broadband connection.
Consequently, I did not renew the Onspeed subscription - and I
used "Add or Remove Programs" to uninstall the software.

When I reviewed my LAN settings today, I discovered that
although the "Use automatic configuration script" option is
unchecked and the field is greyed out, it still points to a
URL at (http://pac.onspeed.com/pac/?id=[long_hex_number]). I
have tried, unsuccessfully, to clear this field.

I should be most grateful, if someone could advise me how to
remove the residue left behind, after I had uninstalled the
Onspeed software.

My registry includes the following data:

[HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="
http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-21-369320415-3544955198-2928392038-1005\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

Click to expand...

SC Tom · May 28, 2009

What happens if you bring up the PC without the ADSL plugged in? Do you get
an error messages (other than the normal ones)? Have you checked for any
errors in Event Viewer?

If you have an XP CD at the same service pack level as what is installed,
you could run sfc /scannow and see what gets replaced.

SC Tom

Bob Lucas said:
Unfortunately, that made no difference. There is nothing in msconfig that
might pertain to Onspeed.

I have tried deleting the offending registry entries:

a) In Safe Mode (logged in as Administrator)

b) With Windows Firewall on / Zone Alarm off

c) Ad-Aware (free version) off

"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]" always
returns to the registry.

Surprisingly, I managed eventually to remove the Onspeed URL from the "Use
automatic configuration script" field in Internet Options / Connections /
LAN Settings.

To do so, I enabled "Use automatic configuration script" and entered
127.0.0.1 in place of the Onspeed URL. Having saved that change, I
disabled "Use automatic configuration script".

However, changes to the registry still refuse to stick, so something is
restoring the Onspeed URL entry, every time I re-boot.

I have thought of one possibility. The relevant sections of the registry
include the entry "AutoConfigProxy"="wininet.dll". A search of my hard
drive shows numerous instances of this file. These include:

C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE. Version 7.0.6000.21020, Created
and Modified 03 March 2009, 01:17:40, Size 828,416 bytes.

C:\WINDOWS\system32. Version 7.0.6000.16827, Created 04 August 2004,
09:00:00, Modified 03 March 2009, 01:18:25, Size 826,368 bytes.

I wonder whether "wininet.dll" might be responsible for creating the
unwanted "AutoConfigURL" entry in the registry. If so, I wonder whether I
have the correct version of "wininet.dll" in my C:\WINDOWS\system32
folder.

SC Tom said:

Go to Start, Run and enter msconfig. Go to the Startup tab and see if
anything is listed there that might pertain to Onspeed and uncheck it. Go
to the Services tab, check the Hide all Microsoft Services box and see if
maybe Onspeed installed a service of some sort.

I'm not sure about the freeware version of ZA, but the paid version won't
allow registry changes without the user being prompted for permission.
Try shutting down the firewall, do your registry edits, then reboot
before bringing ZA back up.

SC Tom

Bob Lucas said:

Windows XP Professional Version 2002 (SP3)
Internet Explorer 7.0.5730.13
Zone Alarm Personal Firewall (free version) 8.0.298.000
avast! Home Edition, 4.8.1335
Spybot - Search & Destroy 1.6.2.46 (without the Tea-timer add-on)

Several years ago, I subscribed to the "Onspeed" download accelerator
service, which boosted my dial-up Internet connection. The proprietary
software configured my Internet connection settings to use a proxy
server at http://pac.onspeed.com. - with an "automatic configuration
script" at http://pac.onspeed.com/pac/?id=[long_hex_number].

Several years ago, I changed to an ADSL broadband connection.
Consequently, I did not renew the Onspeed subscription - and I used "Add
or Remove Programs" to uninstall the software.

When I reviewed my LAN settings today, I discovered that although the
"Use automatic configuration script" option is unchecked and the field
is greyed out, it still points to a URL at
(http://pac.onspeed.com/pac/?id=[long_hex_number]). I have tried,
unsuccessfully, to clear this field.

I should be most grateful, if someone could advise me how to remove the
residue left behind, after I had uninstalled the Onspeed software.

My registry includes the following data:

[HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"=" http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-21-369320415-3544955198-2928392038-1005\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

Click to expand...

Click to expand...

Bob Lucas · May 28, 2009

I connect to my Local Area Network (and to the Internet) via a
wireless router. Consequently, I rarely need to use the Ethernet
cable connection.

Each time I reboot without ADSL plugged in, I get the usual
warning "Local Area Connection - A network cable is unplugged" -
and the "disconnected" icon appears in the notification area of
the taskbar.

There are no recent error messages in Event Viewer - at least,
none that might be relevant.

This Hewlett Packard laptop computer uses a recovery partition,
so I don't have an XP CD. According to the HP help files, System
File Checker checks whether any protected files have been
overwritten and if so, it retrieves the correct versions from the
%systemroot%\system32\dllcache folder.

I ran sfc /scannow today. System File Checker did not identify
any problems, so it made no replacements.

SC Tom said:
What happens if you bring up the PC without the ADSL plugged
in? Do you get an error messages (other than the normal ones)?
Have you checked for any errors in Event Viewer?

If you have an XP CD at the same service pack level as what is
installed, you could run sfc /scannow and see what gets
replaced.

SC Tom

Bob Lucas said:

Unfortunately, that made no difference. There is nothing in
msconfig that might pertain to Onspeed.

I have tried deleting the offending registry entries:

a) In Safe Mode (logged in as Administrator)

b) With Windows Firewall on / Zone Alarm off

c) Ad-Aware (free version) off

"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"
always returns to the registry.

Surprisingly, I managed eventually to remove the Onspeed URL
from the "Use automatic configuration script" field in
Internet Options / Connections / LAN Settings.

To do so, I enabled "Use automatic configuration script" and
entered 127.0.0.1 in place of the Onspeed URL. Having saved
that change, I disabled "Use automatic configuration script".

However, changes to the registry still refuse to stick, so
something is restoring the Onspeed URL entry, every time I
re-boot.

I have thought of one possibility. The relevant sections of
the registry include the entry
"AutoConfigProxy"="wininet.dll". A search of my hard drive
shows numerous instances of this file. These include:

C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE. Version
7.0.6000.21020, Created and Modified 03 March 2009, 01:17:40,
Size 828,416 bytes.

C:\WINDOWS\system32. Version 7.0.6000.16827, Created 04
August 2004, 09:00:00, Modified 03 March 2009, 01:18:25, Size
826,368 bytes.

I wonder whether "wininet.dll" might be responsible for
creating the unwanted "AutoConfigURL" entry in the registry.
If so, I wonder whether I have the correct version of
"wininet.dll" in my C:\WINDOWS\system32 folder.

SC Tom said:

Go to Start, Run and enter msconfig. Go to the Startup tab
and see if anything is listed there that might pertain to
Onspeed and uncheck it. Go to the Services tab, check the
Hide all Microsoft Services box and see if maybe Onspeed
installed a service of some sort.

I'm not sure about the freeware version of ZA, but the paid
version won't allow registry changes without the user being
prompted for permission. Try shutting down the firewall, do
your registry edits, then reboot before bringing ZA back up.

SC Tom

Windows XP Professional Version 2002 (SP3)
Internet Explorer 7.0.5730.13
Zone Alarm Personal Firewall (free version) 8.0.298.000
avast! Home Edition, 4.8.1335
Spybot - Search & Destroy 1.6.2.46 (without the Tea-timer
add-on)

Several years ago, I subscribed to the "Onspeed" download
accelerator service, which boosted my dial-up Internet
connection. The proprietary software configured my Internet
connection settings to use a proxy server at
http://pac.onspeed.com. - with an "automatic configuration
script" at http://pac.onspeed.com/pac/?id=[long_hex_number].

Several years ago, I changed to an ADSL broadband
connection. Consequently, I did not renew the Onspeed
subscription - and I used "Add or Remove Programs" to
uninstall the software.

When I reviewed my LAN settings today, I discovered that
although the "Use automatic configuration script" option is
unchecked and the field is greyed out, it still points to a
URL at (http://pac.onspeed.com/pac/?id=[long_hex_number]).
I have tried, unsuccessfully, to clear this field.

I should be most grateful, if someone could advise me how to
remove the residue left behind, after I had uninstalled the
Onspeed software.

My registry includes the following data:

[HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="
http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-21-369320415-3544955198-2928392038-1005\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

Click to expand...

Click to expand...

SC Tom · May 28, 2009

Well, shoot! Have you thought about re-installing Onspeed and uninstalling
it again? Maybe it missed something the first time around. Might be worth a
try, but I wouldn't count on it.

Another option might be to download and run CCleaner (please, no flaming!).
You can do a backup of the registry before any changes are made, and if
anything is deleted that shouldn't be, you can restore it through the
program. I've used it numerous times for various things with no adverse
affects.

Bob Lucas said:
I connect to my Local Area Network (and to the Internet) via a wireless
router. Consequently, I rarely need to use the Ethernet cable connection.

Each time I reboot without ADSL plugged in, I get the usual warning "Local
Area Connection - A network cable is unplugged" - and the "disconnected"
icon appears in the notification area of the taskbar.

There are no recent error messages in Event Viewer - at least, none that
might be relevant.

This Hewlett Packard laptop computer uses a recovery partition, so I don't
have an XP CD. According to the HP help files, System File Checker checks
whether any protected files have been overwritten and if so, it retrieves
the correct versions from the %systemroot%\system32\dllcache folder.

I ran sfc /scannow today. System File Checker did not identify any
problems, so it made no replacements.

SC Tom said:

What happens if you bring up the PC without the ADSL plugged in? Do you
get an error messages (other than the normal ones)? Have you checked for
any errors in Event Viewer?

If you have an XP CD at the same service pack level as what is installed,
you could run sfc /scannow and see what gets replaced.

SC Tom

Bob Lucas said:

Unfortunately, that made no difference. There is nothing in msconfig
that might pertain to Onspeed.

I have tried deleting the offending registry entries:

a) In Safe Mode (logged in as Administrator)

b) With Windows Firewall on / Zone Alarm off

c) Ad-Aware (free version) off

"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"
always returns to the registry.

Surprisingly, I managed eventually to remove the Onspeed URL from the
"Use automatic configuration script" field in Internet Options /
Connections / LAN Settings.

To do so, I enabled "Use automatic configuration script" and entered
127.0.0.1 in place of the Onspeed URL. Having saved that change, I
disabled "Use automatic configuration script".

However, changes to the registry still refuse to stick, so something is
restoring the Onspeed URL entry, every time I re-boot.

I have thought of one possibility. The relevant sections of the
registry include the entry "AutoConfigProxy"="wininet.dll". A search of
my hard drive shows numerous instances of this file. These include:

C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE. Version 7.0.6000.21020,
Created and Modified 03 March 2009, 01:17:40, Size 828,416 bytes.

C:\WINDOWS\system32. Version 7.0.6000.16827, Created 04 August 2004,
09:00:00, Modified 03 March 2009, 01:18:25, Size 826,368 bytes.

I wonder whether "wininet.dll" might be responsible for creating the
unwanted "AutoConfigURL" entry in the registry. If so, I wonder whether
I have the correct version of "wininet.dll" in my C:\WINDOWS\system32
folder.

Go to Start, Run and enter msconfig. Go to the Startup tab and see if
anything is listed there that might pertain to Onspeed and uncheck it.
Go to the Services tab, check the Hide all Microsoft Services box and
see if maybe Onspeed installed a service of some sort.

I'm not sure about the freeware version of ZA, but the paid version
won't allow registry changes without the user being prompted for
permission. Try shutting down the firewall, do your registry edits,
then reboot before bringing ZA back up.

SC Tom

Windows XP Professional Version 2002 (SP3)
Internet Explorer 7.0.5730.13
Zone Alarm Personal Firewall (free version) 8.0.298.000
avast! Home Edition, 4.8.1335
Spybot - Search & Destroy 1.6.2.46 (without the Tea-timer add-on)

Several years ago, I subscribed to the "Onspeed" download accelerator
service, which boosted my dial-up Internet connection. The
proprietary software configured my Internet connection settings to use
a proxy server at http://pac.onspeed.com. - with an "automatic
configuration script" at
http://pac.onspeed.com/pac/?id=[long_hex_number].

Several years ago, I changed to an ADSL broadband connection.
Consequently, I did not renew the Onspeed subscription - and I used
"Add or Remove Programs" to uninstall the software.

When I reviewed my LAN settings today, I discovered that although the
"Use automatic configuration script" option is unchecked and the field
is greyed out, it still points to a URL at
(http://pac.onspeed.com/pac/?id=[long_hex_number]). I have tried,
unsuccessfully, to clear this field.

I should be most grateful, if someone could advise me how to remove
the residue left behind, after I had uninstalled the Onspeed software.

My registry includes the following data:

[HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"="http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=dword:00000000
"EnableNegotiate"=dword:00000001
"ProxyEnable"=dword:00000000
"SecureProtocols"=dword:00000028
"AutoConfigProxy"="wininet.dll"
"MigrateProxy"=dword:00000001
"ProxyHttp1.1"=dword:00000001
"GlobalUserOffline"=dword:00000000
"AutoConfigURL"=" http://pac.onspeed.com/pac/?id=[long_hex_number]"

[HKEY_USERS\S-1-5-21-369320415-3544955198-2928392038-1005\Software\Microsoft\Office\9.0\Common\Internet]
"LocationOfComponents"="file:\\msowc.cab"
"DownloadComponents"=dword:00000001
"UseRWHlinkNavigation"="http://pac.onspeed.com/"
"DoNotUpdateLinksOnSave"=dword:00000000

Click to expand...

Click to expand...