-
First, here is my Combofix log:
ComboFix 12-04-10.02 - Mike Hoover 04/13/2012 1:14.4.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.236 [GMT -4:00]
Running from: c:\temp\ComboFix.exe
Command switches used :: c:\documents and settings\Mike Hoover\Desktop\CFScript.txt
FW: Sunbelt Personal Firewall *Enabled* {BFD080F6-3BF0-40E1-9507-9CA969C35870}
.
FILE ::
"c:\windows\system32\dds_trash_log.cmd"
"c:\windows\system32\WS2Fix.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\TEMP\logishrd\LVPrcInj01.dll
.
.
((((((((((((((((((((((((( Files Created from 2012-03-13 to 2012-04-13 )))))))))))))))))))))))))))))))
.
.
2012-04-11 12:00 . 2012-04-11 12:00 1409 ----a-w- c:\windows\QTFont.for
2012-04-10 21:16 . 2011-08-17 13:49 138496 ----a-w- c:\windows\system32\drivers\afd.sys
2012-04-10 19:55 . 2007-04-26 14:21 302000 ----a-w- c:\windows\system32\drivers\fwdrv.sys
2012-04-08 23:44 . 2012-04-08 23:44 205072 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2012-04-08 22:24 . 2008-12-12 06:57 78336 ----a-w- c:\windows\system32\Agent.OMZ.Fix.exe
2012-04-08 22:24 . 2008-11-29 23:58 82944 ----a-w- c:\windows\system32\IEDFix.C.exe
2012-04-08 22:24 . 2008-10-01 19:51 87552 ----a-w- c:\windows\system32\VACFix.exe
2012-04-08 22:24 . 2008-09-20 16:45 80384 ----a-w- c:\windows\system32\o4Patch.exe
2012-04-08 22:24 . 2008-08-18 16:19 82432 ----a-w- c:\windows\system32\404Fix.exe
2012-04-08 22:24 . 2009-06-02 15:17 75776 ----a-w- c:\windows\system32\WS2Fix.exe
2012-04-08 22:24 . 2008-05-19 01:40 82944 ----a-w- c:\windows\system32\IEDFix.exe
2012-04-08 22:24 . 2007-09-06 04:22 289144 ----a-w- c:\windows\system32\VCCLSID.exe
2012-04-08 22:24 . 2006-04-27 21:49 288417 ----a-w- c:\windows\system32\SrchSTS.exe
2012-04-08 22:24 . 2004-07-31 22:50 51200 ----a-w- c:\windows\system32\dumphive.exe
2012-04-08 22:24 . 2003-06-06 01:13 53248 ----a-w- c:\windows\system32\Process.exe
2012-04-08 20:26 . 2012-04-08 20:26 -------- d-----w- c:\program files\ERUNT
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-08 23:11 . 2008-03-18 00:11 2786 ----a-w- c:\windows\system32\tmp.reg
2012-04-07 11:34 . 2008-03-18 23:50 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-04-07 11:34 . 2010-08-03 01:12 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-04-04 19:56 . 2010-05-01 12:23 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-02-25 13:11 . 2011-05-23 10:35 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-03 09:22 . 2002-08-29 10:00 1860096 ----a-w- c:\windows\system32\win32k.sys
2001-02-27 00:16 . 2010-05-23 01:29 53295 ----a-w- c:\program files\opera\program\plugins\PlugDef.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-04-10_20.28.14 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-04-13 05:59 . 2012-04-13 05:59 16384 c:\windows\Temp\Perflib_Perfdata_170.dat
+ 2003-09-03 00:03 . 2012-04-11 12:05 72160 c:\windows\SYSTEM32\PERFC009.DAT
- 2003-09-03 00:03 . 2012-04-10 20:31 72160 c:\windows\SYSTEM32\PERFC009.DAT
+ 2003-09-03 00:03 . 2012-04-11 12:05 442894 c:\windows\SYSTEM32\PERFH009.DAT
- 2003-09-03 00:03 . 2012-04-10 20:31 442894 c:\windows\SYSTEM32\PERFH009.DAT
+ 2012-04-10 23:13 . 2012-04-10 22:20 248742 c:\windows\PCHealth\HelpCtr\Config\Cache\Personal_32_1033.dat
+ 2010-05-22 23:53 . 2012-04-10 23:45 1157376 c:\windows\SYSTEM32\Restore\rstrlog.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2003-05-02 4640768]
"DVDSentry"="c:\windows\System32\DSentry.exe" [2002-08-14 28672]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2002-12-17 684032]
"basicsmssmenu"="c:\program files\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe" [2007-10-09 169328]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2004-09-26 98304]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-11-26 296056]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2003-9-2 24576]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{EDB0E980-90BD-11D4-8599-0008C7D3B6F8}"= "c:\program files\Qualcomm\Eudora\EuShlExt.dll" [2002-09-30 86016]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" /hide
"MoneyStartUp10.0"="c:\program files\Microsoft Money\System\Activation.exe"
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"=
"c:\\WINDOWS\\SYSTEM32\\mmc.exe"=
.
R1 fwdrv;Firewall Driver;c:\windows\SYSTEM32\DRIVERS\fwdrv.sys [4/10/2012 3:55 PM 302000]
R1 khips;Kerio HIPS Driver;c:\windows\SYSTEM32\DRIVERS\khips.sys [4/26/2007 10:21 AM 72624]
R2 NgVpnMgr;Aventail VPN Client;c:\windows\SYSTEM32\ngvpnmgr.exe [5/18/2011 2:48 AM 290472]
R3 NgLog;Aventail VPN Logging;c:\windows\SYSTEM32\DRIVERS\nglog.sys [5/18/2011 2:11 AM 27208]
R3 NgVpn;Aventail VPN Adapter;c:\windows\SYSTEM32\DRIVERS\ngvpn.sys [5/18/2011 2:11 AM 81480]
S2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\kpf4ss.exe [4/26/2007 10:21 AM 1234480]
S3 MatSvc;Microsoft Automated Troubleshooting Service;c:\program files\Microsoft Fix it Center\Matsvc.exe [4/10/2010 5:05 PM 266544]
S3 NgFilter;Aventail VPN Filter;c:\windows\SYSTEM32\DRIVERS\ngfilter.sys [5/18/2011 2:11 AM 23112]
S3 NgWfp;Aventail VPN Callout;c:\windows\SYSTEM32\DRIVERS\ngwfp.sys [5/18/2011 2:11 AM 25160]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
efs
aegisp
nsm1bus
MRENDIS5
NWADI
w70n51
s117bus
ctaud2k
netdevio
rchost
houdiniserver
HFACSVC
ctdvda2k
atikmdag
pciSd
racsvc
defwatch
vpcnfltr
Subsonic
GT680x
sskbfd
aaksrv
zntport
vstor2-ws60
lanusb
procmon10
w810bus
.
Contents of the 'Scheduled Tasks' folder
.
2012-04-13 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-3448474522-3304514054-2523392379-1007.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-11-08 21:14]
.
2012-04-10 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-3448474522-3304514054-2523392379-1007.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-11-08 21:14]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://www.google.com
mWindow Title = Microsoft Internet Explorer
uInternet Settings,ProxyOverride = <local>
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
TCP: DhcpNameServer = 75.75.76.76 75.75.75.75
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Mike Hoover\Application Data\Mozilla\Firefox\Profiles\h1ofpo0d.default\
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: CacheViewer: {71328583-3CA7-4809-B4BA-570A85818FBB} - %profile%\extensions\{71328583-3CA7-4809-B4BA-570A85818FBB}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Myibidder (Myibay) Bid Sniper for eBay: firefox1@myibay.com - %profile%\extensions\firefox1@myibay.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-04-13 02:00
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\DeterministicNetworks\DNE\Parameters]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,79,00,73,00,\
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(1832)
c:\windows\system32\WININET.dll
c:\windows\TEMP\logishrd\LVPrcInj01.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\LEXBCES.EXE
c:\windows\system32\LEXPPS.EXE
c:\windows\System32\SCardSvr.exe
c:\program files\Seagate\Basics\Service\SyncServicesBasics.exe
c:\program files\Cisco Systems\VPN Client\cvpnd.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\windows\System32\locator.exe
c:\program files\Dell Support Center\bin\sprtsvc.exe
c:\program files\Windows Media Player\WMPNetwk.exe
c:\windows\system32\wscntfy.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
.
**************************************************************************
.
Completion time: 2012-04-13 02:10:48 - machine was rebooted
ComboFix-quarantined-files.txt 2012-04-13 06:10
ComboFix2.txt 2012-04-10 23:00
ComboFix3.txt 2012-04-10 21:53
ComboFix4.txt 2012-04-10 20:36
.
Pre-Run: 50,752,536,576 bytes free
Post-Run: 50,768,814,080 bytes free
.
- - End Of File - - 1D99D33CC6784A9802FE519B092F9A36
-
You asked me if I could access the Internet in safe mode. The answer is no. I tried safemode with networking and I still could not access the Internet. I looks like it's loading a bunch of drivers in safe mode, but apparently, not all of the drivers I need.
My LAN or Network connection (broadband access) appears to be working, but the connection does not appear to be able to access ip address info. I try to "repair" the connection and it says it can not get the ip address because it could not access tcpip information. I did try to enter the ip address info manually, but that didn't help.
Outside of the Internet Access issue, there are a lot of applications that do not work, presumably because the drivers are not accessible. The PC can see a floppy drive, an external hard drive, and a thumb drive, but cannot see my 2 DVD drives.
At the moment, I have a work laptop next to the desk top, and I can access the Internet through the laptop. I will have the laptop all weekend, so I should be able to download things from the laptop, but it on the thumbdrive and move to my desk top.
-
Hi,
While I am looking over your ComboFix log please do the following:
Please download Farbar Service Scanner and run it on the computer with the issue.- Make sure the following options are checked:
- Internet Services
- Windows Firewall
- System Restore
- Security Center
- Windows Update
- Windows Defender
- Press "Scan".
- It will create a log (FSS.txt) in the same directory the tool is run.
- Please copy and paste the log to your reply.
-
Here it is Jeff:
Farbar Service Scanner Version: 01-03-2012
Ran by Mike Hoover (administrator) on 13-04-2012 at 15:12:05
Running from "C:\Temp"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error: Google IP is unreachable
Attempt to access Yahoo IP returend error: Yahoo IP is unreachable
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Disabled Policy:
========================
Security Center:
============
Windows Update:
============
File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
Extra List:
=======
Bridge(14) BridgeMP(13) DNE(8) Gpc(6) IPSec(4) NetBT(5) NwlnkIpx(10) NwlnkNb(11) PSched(7) Tcpip(3)
0x0F0000000400000001000000020000000300000009000000050000000600000007000000080000000A0000000B0000000C0000000D0000000E0000000F000000
IpSec Tag value is correct.
**** End of log ****
-
Hi,
Go to Start >> Run >> type CMD and this will open the command prompt.
In the command prompt type the following:
IPCONFIG /RELEASE (press Enter)
IPCONFIG /FLUSHDNS (press Enter)
IPCONFIG /RENEW (press Enter)
Close out of the command prompt and reboot.
Try to connect to the internet now and let me know if that helped.
-
I did as you instructed and it didn't help. The "local area connection" is connected but I cannot get the system to pull my ip address. I had tried the ipconfig /renew previously to see if that would help.
When I look at Device Manager, under Network Adapters, it looks like it giving and indication that certain drivers are missing,
I did find a place on the computer manufacturer's website where I can download drivers allegedly specific to my PC. I've never done it before, so I'm not exactly sure what I'm doing.
-
Please run Farbar Service Scanner.
Type the following in the search box:
netbt
Click "Export Service" and post the log it makes (FSS.txt).
-
OK Jeff. I will do that.
Just to let you know, even though I don't know what I'm doing, I have the PC now recognizing my two CD/DVD drives and I can run them. Also, I have my PC's audio back, which was gone. Still no Internet Access.
-
Here is FSS.txt:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000001
"Tag"=dword:00000005
"ImagePath"=hex(2):53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
52,00,49,00,56,00,45,00,52,00,53,00,5c,00,6e,00,65,00,74,00,62,00,74,00,2e,\
00,73,00,79,00,73,00,00,00
"DisplayName"="NetBios over Tcpip"
"Group"="PNP_TDI"
"DependOnService"=hex(7):54,00,63,00,70,00,69,00,70,00,00,00,00,00
"DependOnGroup"=hex(7):00,00
"Description"="NetBios over Tcpip"
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Linkage]
"OtherDependencies"=hex(7):54,00,63,00,70,00,69,00,70,00,00,00,00,00
"Bind"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,\
00,69,00,70,00,36,00,5f,00,7b,00,33,00,36,00,43,00,42,00,37,00,44,00,46,00,\
46,00,2d,00,34,00,39,00,31,00,32,00,2d,00,34,00,45,00,44,00,42,00,2d,00,39,\
00,41,00,43,00,42,00,2d,00,34,00,42,00,46,00,35,00,44,00,39,00,32,00,32,00,\
30,00,46,00,35,00,37,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,\
00,5c,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,46,00,37,00,33,00,\
32,00,37,00,46,00,37,00,38,00,2d,00,45,00,34,00,46,00,43,00,2d,00,34,00,32,\
00,45,00,45,00,2d,00,41,00,32,00,30,00,44,00,2d,00,36,00,33,00,30,00,38,00,\
35,00,34,00,34,00,34,00,42,00,44,00,45,00,43,00,7d,00,00,00,5c,00,44,00,65,\
00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,\
7b,00,39,00,46,00,32,00,30,00,34,00,34,00,31,00,41,00,2d,00,36,00,43,00,44,\
00,32,00,2d,00,34,00,39,00,36,00,46,00,2d,00,42,00,36,00,43,00,30,00,2d,00,\
32,00,37,00,42,00,30,00,46,00,35,00,34,00,34,00,38,00,32,00,38,00,42,00,7d,\
00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,\
69,00,70,00,36,00,5f,00,7b,00,32,00,35,00,34,00,39,00,38,00,32,00,35,00,35,\
00,2d,00,30,00,31,00,35,00,39,00,2d,00,34,00,44,00,35,00,36,00,2d,00,41,00,\
38,00,46,00,34,00,2d,00,35,00,45,00,46,00,38,00,35,00,30,00,30,00,36,00,43,\
00,35,00,31,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,\
5c,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,39,00,46,00,32,00,30,00,34,\
00,34,00,31,00,41,00,2d,00,36,00,43,00,44,00,32,00,2d,00,34,00,39,00,36,00,\
46,00,2d,00,42,00,36,00,43,00,30,00,2d,00,32,00,37,00,42,00,30,00,46,00,35,\
00,34,00,34,00,38,00,32,00,38,00,42,00,7d,00,00,00,5c,00,44,00,65,00,76,00,\
69,00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,46,00,37,\
00,33,00,32,00,37,00,46,00,37,00,38,00,2d,00,45,00,34,00,46,00,43,00,2d,00,\
34,00,32,00,45,00,45,00,2d,00,41,00,32,00,30,00,44,00,2d,00,36,00,33,00,30,\
00,38,00,35,00,34,00,34,00,34,00,42,00,44,00,45,00,43,00,7d,00,00,00,5c,00,\
44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,5f,\
00,7b,00,41,00,45,00,36,00,31,00,34,00,41,00,36,00,39,00,2d,00,45,00,31,00,\
33,00,41,00,2d,00,34,00,35,00,36,00,38,00,2d,00,42,00,32,00,30,00,46,00,2d,\
00,42,00,43,00,30,00,44,00,30,00,33,00,36,00,42,00,46,00,30,00,31,00,35,00,\
7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,\
00,69,00,70,00,5f,00,7b,00,33,00,36,00,43,00,42,00,37,00,44,00,46,00,46,00,\
2d,00,34,00,39,00,31,00,32,00,2d,00,34,00,45,00,44,00,42,00,2d,00,39,00,41,\
00,43,00,42,00,2d,00,34,00,42,00,46,00,35,00,44,00,39,00,32,00,32,00,30,00,\
46,00,35,00,37,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,\
00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,36,00,31,00,38,00,32,00,30,00,\
43,00,37,00,46,00,2d,00,31,00,46,00,32,00,44,00,2d,00,34,00,45,00,43,00,36,\
00,2d,00,41,00,43,00,35,00,32,00,2d,00,34,00,41,00,41,00,34,00,43,00,35,00,\
43,00,45,00,39,00,35,00,36,00,42,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,\
00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,45,00,35,00,\
45,00,43,00,30,00,41,00,36,00,37,00,2d,00,37,00,45,00,45,00,41,00,2d,00,34,\
00,38,00,44,00,36,00,2d,00,42,00,46,00,33,00,30,00,2d,00,39,00,30,00,46,00,\
35,00,43,00,31,00,33,00,41,00,42,00,43,00,41,00,33,00,7d,00,00,00,5c,00,44,\
00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,69,00,70,00,5f,00,\
7b,00,35,00,45,00,39,00,45,00,39,00,31,00,42,00,41,00,2d,00,31,00,43,00,32,\
00,44,00,2d,00,34,00,37,00,30,00,31,00,2d,00,38,00,44,00,41,00,43,00,2d,00,\
34,00,43,00,46,00,35,00,31,00,36,00,44,00,44,00,36,00,35,00,43,00,33,00,7d,\
00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,54,00,63,00,70,00,\
69,00,70,00,5f,00,7b,00,30,00,46,00,44,00,30,00,42,00,39,00,36,00,31,00,2d,\
00,44,00,45,00,33,00,38,00,2d,00,34,00,33,00,44,00,35,00,2d,00,41,00,43,00,\
35,00,36,00,2d,00,45,00,41,00,34,00,32,00,46,00,30,00,41,00,41,00,43,00,36,\
00,35,00,31,00,7d,00,00,00,00,00
"Route"=hex(7):22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,\
00,33,00,36,00,43,00,42,00,37,00,44,00,46,00,46,00,2d,00,34,00,39,00,31,00,\
32,00,2d,00,34,00,45,00,44,00,42,00,2d,00,39,00,41,00,43,00,42,00,2d,00,34,\
00,42,00,46,00,35,00,44,00,39,00,32,00,32,00,30,00,46,00,35,00,37,00,7d,00,\
22,00,00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,\
00,46,00,37,00,33,00,32,00,37,00,46,00,37,00,38,00,2d,00,45,00,34,00,46,00,\
43,00,2d,00,34,00,32,00,45,00,45,00,2d,00,41,00,32,00,30,00,44,00,2d,00,36,\
00,33,00,30,00,38,00,35,00,34,00,34,00,34,00,42,00,44,00,45,00,43,00,7d,00,\
22,00,00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,\
00,39,00,46,00,32,00,30,00,34,00,34,00,31,00,41,00,2d,00,36,00,43,00,44,00,\
32,00,2d,00,34,00,39,00,36,00,46,00,2d,00,42,00,36,00,43,00,30,00,2d,00,32,\
00,37,00,42,00,30,00,46,00,35,00,34,00,34,00,38,00,32,00,38,00,42,00,7d,00,\
22,00,00,00,22,00,54,00,63,00,70,00,69,00,70,00,36,00,22,00,20,00,22,00,7b,\
00,32,00,35,00,34,00,39,00,38,00,32,00,35,00,35,00,2d,00,30,00,31,00,35,00,\
39,00,2d,00,34,00,44,00,35,00,36,00,2d,00,41,00,38,00,46,00,34,00,2d,00,35,\
00,45,00,46,00,38,00,35,00,30,00,30,00,36,00,43,00,35,00,31,00,46,00,7d,00,\
22,00,00,00,22,00,54,00,63,00,70,00,69,00,70,00,22,00,20,00,22,00,7b,00,39,\
00,46,00,32,00,30,00,34,00,34,00,31,00,41,00,2d,00,36,00,43,00,44,00,32,00,\
2d,00,34,00,39,00,36,00,46,00,2d,00,42,00,36,00,43,00,30,00,2d,00,32,00,37,\
00,42,00,30,00,46,00,35,00,34,00,34,00,38,00,32,00,38,00,42,00,7d,00,22,00,\
00,00,22,00,54,00,63,00,70,00,69,00,70,00,22,00,20,00,22,00,7b,00,46,00,37,\
00,33,00,32,00,37,00,46,00,37,00,38,00,2d,00,45,00,34,00,46,00,43,00,2d,00,\
34,00,32,00,45,00,45,00,2d,00,41,00,32,00,30,00,44,00,2d,00,36,00,33,00,30,\
00,38,00,35,00,34,00,34,00,34,00,42,00,44,00,45,00,43,00,7d,00,22,00,00,00,\
22,00,54,00,63,00,70,00,69,00,70,00,22,00,20,00,22,00,7b,00,41,00,45,00,36,\
00,31,00,34,00,41,00,36,00,39,00,2d,00,45,00,31,00,33,00,41,00,2d,00,34,00,\
35,00,36,00,38,00,2d,00,42,00,32,00,30,00,46,00,2d,00,42,00,43,00,30,00,44,\
00,30,00,33,00,36,00,42,00,46,00,30,00,31,00,35,00,7d,00,22,00,00,00,22,00,\
54,00,63,00,70,00,69,00,70,00,22,00,20,00,22,00,7b,00,33,00,36,00,43,00,42,\
00,37,00,44,00,46,00,46,00,2d,00,34,00,39,00,31,00,32,00,2d,00,34,00,45,00,\
44,00,42,00,2d,00,39,00,41,00,43,00,42,00,2d,00,34,00,42,00,46,00,35,00,44,\
00,39,00,32,00,32,00,30,00,46,00,35,00,37,00,7d,00,22,00,00,00,22,00,54,00,\
63,00,70,00,69,00,70,00,22,00,20,00,22,00,4e,00,64,00,69,00,73,00,57,00,61,\
00,6e,00,49,00,70,00,22,00,00,00,00,00
"Export"=hex(7):5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,\
00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,33,00,\
36,00,43,00,42,00,37,00,44,00,46,00,46,00,2d,00,34,00,39,00,31,00,32,00,2d,\
00,34,00,45,00,44,00,42,00,2d,00,39,00,41,00,43,00,42,00,2d,00,34,00,42,00,\
46,00,35,00,44,00,39,00,32,00,32,00,30,00,46,00,35,00,37,00,7d,00,00,00,5c,\
00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,\
5f,00,54,00,63,00,70,00,69,00,70,00,36,00,5f,00,7b,00,46,00,37,00,33,00,32,\
00,37,00,46,00,37,00,38,00,2d,00,45,00,34,00,46,00,43,00,2d,00,34,00,32,00,\
45,00,45,00,2d,00,41,00,32,00,30,00,44,00,2d,00,36,00,33,00,30,00,38,00,35,\
00,34,00,34,00,34,00,42,00,44,00,45,00,43,00,7d,00,00,00,5c,00,44,00,65,00,\
76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,\
00,70,00,69,00,70,00,36,00,5f,00,7b,00,39,00,46,00,32,00,30,00,34,00,34,00,\
31,00,41,00,2d,00,36,00,43,00,44,00,32,00,2d,00,34,00,39,00,36,00,46,00,2d,\
00,42,00,36,00,43,00,30,00,2d,00,32,00,37,00,42,00,30,00,46,00,35,00,34,00,\
34,00,38,00,32,00,38,00,42,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,\
00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,\
70,00,36,00,5f,00,7b,00,32,00,35,00,34,00,39,00,38,00,32,00,35,00,35,00,2d,\
00,30,00,31,00,35,00,39,00,2d,00,34,00,44,00,35,00,36,00,2d,00,41,00,38,00,\
46,00,34,00,2d,00,35,00,45,00,46,00,38,00,35,00,30,00,30,00,36,00,43,00,35,\
00,31,00,46,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,\
4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,\
00,39,00,46,00,32,00,30,00,34,00,34,00,31,00,41,00,2d,00,36,00,43,00,44,00,\
32,00,2d,00,34,00,39,00,36,00,46,00,2d,00,42,00,36,00,43,00,30,00,2d,00,32,\
00,37,00,42,00,30,00,46,00,35,00,34,00,34,00,38,00,32,00,38,00,42,00,7d,00,\
00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,\
00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,46,00,37,00,33,00,\
32,00,37,00,46,00,37,00,38,00,2d,00,45,00,34,00,46,00,43,00,2d,00,34,00,32,\
00,45,00,45,00,2d,00,41,00,32,00,30,00,44,00,2d,00,36,00,33,00,30,00,38,00,\
35,00,34,00,34,00,34,00,42,00,44,00,45,00,43,00,7d,00,00,00,5c,00,44,00,65,\
00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,\
63,00,70,00,69,00,70,00,5f,00,7b,00,41,00,45,00,36,00,31,00,34,00,41,00,36,\
00,39,00,2d,00,45,00,31,00,33,00,41,00,2d,00,34,00,35,00,36,00,38,00,2d,00,\
42,00,32,00,30,00,46,00,2d,00,42,00,43,00,30,00,44,00,30,00,33,00,36,00,42,\
00,46,00,30,00,31,00,35,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,\
65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,\
00,5f,00,7b,00,33,00,36,00,43,00,42,00,37,00,44,00,46,00,46,00,2d,00,34,00,\
39,00,31,00,32,00,2d,00,34,00,45,00,44,00,42,00,2d,00,39,00,41,00,43,00,42,\
00,2d,00,34,00,42,00,46,00,35,00,44,00,39,00,32,00,32,00,30,00,46,00,35,00,\
37,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,\
00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,36,00,\
31,00,38,00,32,00,30,00,43,00,37,00,46,00,2d,00,31,00,46,00,32,00,44,00,2d,\
00,34,00,45,00,43,00,36,00,2d,00,41,00,43,00,35,00,32,00,2d,00,34,00,41,00,\
41,00,34,00,43,00,35,00,43,00,45,00,39,00,35,00,36,00,42,00,7d,00,00,00,5c,\
00,44,00,65,00,76,00,69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,\
5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,7b,00,45,00,35,00,45,00,43,00,30,\
00,41,00,36,00,37,00,2d,00,37,00,45,00,45,00,41,00,2d,00,34,00,38,00,44,00,\
36,00,2d,00,42,00,46,00,33,00,30,00,2d,00,39,00,30,00,46,00,35,00,43,00,31,\
00,33,00,41,00,42,00,43,00,41,00,33,00,7d,00,00,00,5c,00,44,00,65,00,76,00,\
69,00,63,00,65,00,5c,00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,\
00,69,00,70,00,5f,00,7b,00,35,00,45,00,39,00,45,00,39,00,31,00,42,00,41,00,\
2d,00,31,00,43,00,32,00,44,00,2d,00,34,00,37,00,30,00,31,00,2d,00,38,00,44,\
00,41,00,43,00,2d,00,34,00,43,00,46,00,35,00,31,00,36,00,44,00,44,00,36,00,\
35,00,43,00,33,00,7d,00,00,00,5c,00,44,00,65,00,76,00,69,00,63,00,65,00,5c,\
00,4e,00,65,00,74,00,42,00,54,00,5f,00,54,00,63,00,70,00,69,00,70,00,5f,00,\
7b,00,30,00,46,00,44,00,30,00,42,00,39,00,36,00,31,00,2d,00,44,00,45,00,33,\
00,38,00,2d,00,34,00,33,00,44,00,35,00,2d,00,41,00,43,00,35,00,36,00,2d,00,\
45,00,41,00,34,00,32,00,46,00,30,00,41,00,41,00,43,00,36,00,35,00,31,00,7d,\
00,00,00,00,00
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters]
"NbProvider"="_tcp"
"NameServerPort"=dword:00000089
"CacheTimeout"=dword:000927c0
"BcastNameQueryCount"=dword:00000003
"BcastQueryTimeout"=dword:000002ee
"NameSrvQueryCount"=dword:00000003
"NameSrvQueryTimeout"=dword:000005dc
"Size/Small/Medium/Large"=dword:00000001
"SessionKeepAlive"=dword:0036ee80
"TransportBindName"="\\Device\\"
"EnableLMHOSTS"=dword:00000001
"DhcpNodeType"=dword:00000008
"EnableProxy"=dword:00000002
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters\Interfaces]
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters\Interfaces\Tcpip_{0FD0B961-DE38-43D5-AC56-EA42F0AAC651}]
"NameServerList"=hex(7):00,00,00,00
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters\Interfaces\Tcpip_{36CB7DFF-4912-4EDB-9ACB-4BF5D9220F57}]
"NameServerList"=hex(7):00,00
"NetbiosOptions"=dword:00000000
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters\Interfaces\Tcpip_{5E9E91BA-1C2D-4701-8DAC-4CF516DD65C3}]
"NameServerList"=hex(7):00,00
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters\Interfaces\Tcpip_{61820C7F-1F2D-4EC6-AC52-4AA4C5CE956B}]
"NameServerList"=hex(7):00,00,00,00
"RASFlags"=dword:00000001
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters\Interfaces\Tcpip_{9F20441A-6CD2-496F-B6C0-27B0F544828B}]
"NameServerList"=hex(7):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"NetbiosOptions"=dword:00000000
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters\Interfaces\Tcpip_{AE614A69-E13A-4568-B20F-BC0D036BF015}]
"NameServerList"=hex(7):00,00
"NetbiosOptions"=dword:00000000
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters\Interfaces\Tcpip_{E5EC0A67-7EEA-48D6-BF30-90F5C13ABCA3}]
"NameServerList"=hex(7):00,00,00,00
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Parameters\Interfaces\Tcpip_{F7327F78-E4FC-42EE-A20D-63085444BDEC}]
"NameServerList"=hex(7):00,00
"NetbiosOptions"=dword:00000000
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Security]
"Security"=hex:01,00,14,80,e8,00,00,00,f4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,b8,00,08,00,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,\
05,0b,00,00,00,00,00,18,00,9d,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,\
23,02,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,\
02,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,\
00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,00,00,14,\
00,40,00,00,00,01,01,00,00,00,00,00,05,13,00,00,00,00,00,14,00,40,00,00,00,\
01,01,00,00,00,00,00,05,14,00,00,00,00,00,18,00,9d,01,02,00,01,02,00,00,00,\
00,00,05,20,00,00,00,2c,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\netbt\Enum]
"0"="Root\\LEGACY_NETBT\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_netbt]
"NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_netbt\0000]
"Service"="NetBT"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="NetBios over Tcpip"
"Capabilities"=dword:00000000
"Driver"="{8ECC055D-047F-11D1-A537-0000F8753ED1}\\0026"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_netbt\0000\LogConf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_netbt\0000\Control]
"ActiveService"="NetBT"
-
Well, I worked on trying to restore the internet connection for about 11 hours straight. No luck. I've tried all kinds of things, including uninstalling and reinstalling the tcp/in driver. But I still cannot generate the ip address.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules