cannot find server or DNS error - Page 2

[Whyzkid99]

I have the same problem with not being able to go on internet explorer... if i stay at the computer for a while when i first turn it on, it works good but if i leave for like 4-5 hours and come back the internet explorer wont work... i did the log thing and here it is... hope someone can help me out

Logfile of HijackThis v1.97.7
Scan saved at 4:22:13 PM, on 6/8/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\WINNT\System32\TFNF5.exe
C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe
C:\WINNT\System32\TPWRTRAY.EXE
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Drag'n Drop CD\BinFiles\DragDrop.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINNT\System32\ctfmon.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
C:\WINNT\System32\PackethSvc.exe
c:\jetsuite\jsdaemon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINNT\System32\nvsvc32.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINNT\SYSTEM32\THOTKEY.EXE
C:\Program Files\TOSHIBA\TME3\Tmesbs3.exe
C:\Program Files\TOSHIBA\TME3\Tmesrv3.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\wanmpsvc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\wbem\wmiapsrv.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINNT\System32\msiexec.exe
C:\Program Files\Serials 2000\serial2k.exe
C:\WINNT\system32\rundll32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\My Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.slickdeals.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.slickdeals.net
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files\NZSearch\SearchEnh1.dll
O1 - Hosts: 207.36.196.189 auto.search.msn.com
O1 - Hosts: 207.36.196.189 search.netscape.com
O1 - Hosts: 207.36.196.189 ieautosearch
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Pa&nicware Pop-Up Stopper - {7E82235C-F31E-46CB-AF9F-1ADD94C585FF} - C:\Program Files\Panicware\Pop-Up Stopper\pstopper.dll
O3 - Toolbar: ZeroBar - {F5735C15-1FB2-41FE-BA12-242757E69DDE} - C:\Program Files\NetZero\Toolbar.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [TosHKCW.exe] C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [TMESRV.EXE] C:\Program Files\TOSHIBA\TME3\TMESRV3.EXE /Logon
O4 - HKLM\..\Run: [TMESBS.EXE] C:\Program Files\TOSHIBA\TME3\TMESBS3.EXE /logon
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [Drag'n Drop CD] C:\Program Files\Drag'n Drop CD\BinFiles\DragDrop.exe /StartUp
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\PROGRA~1\AIM95\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\System32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [uoltray] C:\Program Files\NetZero\exec.exe regrun
O4 - HKCU\..\Run: [spc_w] "C:\Program Files\NZSearch\hcm.exe" -w
O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O4 - Global Startup: ZoneAlarm Pro.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37869.6481944444
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{55243170-9E83-461A-8064-4F18C439B7DF}: Domain = pica.army.mil

[DMR]

Hi Whyzkid99,

First of all, you need to start your own thread for your question, and you need to post it in our Security forum- that's where we concentrate on HJT log analysis and general malware-related issues.

We ask that, for reasons of clarity, members abide by our "one member's question per post" rule and also post in the forum most suited for their particular problem.

Thanks for understanding :)

[mcalixte]

Connect but Cannot Browse Registry Fix

This fix works on dial-up, DSL or Cable internet connections that are connected but that do not allow any web browsing. Use only as a last resort after everything else has been tried!!!!

Click on Start, then Run. Type regedit.

FIRST OF ALL MAKE SURE ALL OTHER PROGRAMS OR WINDOWS ARE CLOSED AND BACKUP YOUR REGISTRY (File --> Export registry file --> Export Range = All --> Enter a filename and remember the location --> Save)

Your registry file is backed up. If you need to restore your old registry file simply File --> Import registry file --> Find the file you saved earlier --> Open

Next:

Click once on HKEY_LOCAL_MACHINE so that it is selected.

Then click on File, then on Load Hive.

Go to My Computer the C Drive, then click twice on the Windows or Winnt folder, then the Repair folder, then click twice on the system or system.bak file.

Name the new Key "xp".

Minimize the Registry Editor.

Click on Start, Run, and type in cmd.

Type in the following:

reg copy hklm\xp\controlset001\services\winsock2 hklm\system\currentcontrolset\services\winsock2 /s /f

There is a space (no carriage return or enter) between "reg copy hklm\xp\controlset001\services\winsock2" and "hklm\system\currentcontrolset\services\winsock2 /s /f"

You will get a message that the operation completed successfully.

Exit DOS.

Maximize the Registry Editor. Select the xp folder that was created.

Click on File, then UnLoad Hive.

You will be prompted to confirm the removal of the folder, click Yes.

Exit the Registry.

Connect and browse. (No need to reboot the computer.)

BEATS HAVING TO REINSTALL WINDOWS!!!! ENJOY!

Monti

[showtown]

Hello everyone I know I should have posted on the newby page but I wanted to comment on this topic. Thanks Loril1212 I have been strggling for two weeks now unable to get on the net with any browser or indeed any internet prog on my home pc. I was doing a search on Google trying to get some, help when I came accross the daniweb forum. Superb I saw your info on dll's and proceded to refresh as advised, shell32.dll would not refresh an error message came up telling me that the file was possibly corrupted. I downloaded it on to floppy on the works pc and tried to replace the corrupted one on my pc, windows wouldn't let me! I got my old Dos book out (6years old) and restarted in command prompt (dos) after deleting the file, windows wouldn't start, after a minor panic and reading a bit more I restarted pressing F8 and selected command prompt again, I copied the file from A: to to the system folder in windows and rebooted Yippee I got a connection again Thanks Very Much I couldn't have done it without falling upon this great forum.
P.S. I don't know why but I lost all program links in the program menu (start menu) but who cares I don't have to take it to the shop now :)

Best Regards David

[zenfulcreations]

Your welcome!~

Techie forums are GREAT for solving probs!

:)

[showtown]

Thanks I spoke too soon still on the net OK but I seem to have changed language some of the buttons are in greek! the folders and icons are ok the keyboard is ok just buttons e.g. when I shut down I can't read the buttons? you wouldn't have an idea how to get it right would you (win98)
Thanks Dave

[DMR]

...I seem to have changed language some of the buttons are in greek! the folders and icons are ok the keyboard is ok just buttons e.g. when I shut down I can't read the buttons? you wouldn't have an idea how to get it right would you (win98)

Hi Dave,

You need to start your own thread for that question. If the problem is only with Internet Explorer, post the new thread in this forum; if the problem is happening with your Windows installation in general, post your thread in the Win 95/98/ME forum instead. When you do post the new thread, post/attach a screenshot (or some other image file) of what you're experiencing if possible; that way we can see exactly what corruption you're describing.

[showtown]

Thanks I will do that
Regards Dave

[tim.hollingwort]

I am using windows xo pro sp1. When I am on a site I need to stay on and click refresh IE6 will work for awhile and then it will go to page cannot be displayed, at the bottom is cannot find server or dns error. I thought at first something was corrupt, so I reformatted and installed the same os. It started this again before any programs were reinstalled. When it does this I can close that page and try and reopen IE6 but I get the same error. The only way it will work is to reboot and everything goes along fine for a little while, then I get the error. I can't even log off and log back in again to get it to work. I know my connection to the internet is okay, because I can still get mail in and msn messenger is working fine, just IE6 has died.
Does anyone know what is causing this or how to sure it?

====================================================

I had exactly the same problem on my PC after I had reinstalled windows xp home. I could use the internet for 10 minutes then it would show the "cannot find page" info! The strange thing was that another computer in the network was connecting through the problem PC to the internet without problems. Like the above person this would be fixed after a reboot but again after 10
minutes the dreaded "cannot find page" would apperar.

This went on for over two weeks until I could stand it no more. I had downloaded service pack 2 and as many updated as possible even the ones for internet explorer 6, to no avail...

Eventually I had a long conversation with a very helpfull Canadian microsoft techie called Bill. After the usual downloading of Adaware and CW Shredder which showed nothing he decided to re-install Internet Explorer. Which I am VERY pleased to say did the trick!

This is how he talked me through it....

1. Show all hidden folders and files. (on any window click TOOLS > FOLDER OPTIONS open the tab

VIEW > 10th line down SELECT "Show hidden files and folders" ALSO uncheck 12th line "Hide protected operating system files".

2. Open C drive - then the WINDOWS folder - then open the pale "hidden" folder called inf - C:\WINDOWS\inf

3. Find the file ie.inf - RIGHT CLICK and select INSTALL (at the top).

4. It will need to find some downloaded service pack files which are kept in

C:\WINDOWS\ServicePackFiles\i386

5. Highlight IEXPLORE.EXE and click OPEN then OK -

( If the file is not here then it needs to be downloaded from microsoft in the "Install Internet Explorer 6"
http://www.microsoft.com/windows/ie/default.mspx )

6. It may need other files that it's missing which I had to get from the windows XP CD in the CDROM drive. D:\I386 - Click on the required file and click OPEN and OK.

7. This will then result in the usual computer re-boot and everything will be fine!

I suggest installing service pack 2 from microsoft as it should give the best protection.

Hope this works for you as it did for me.

Tim :D

[moneymike]

um just a stupid little suggestions ... have you tried *flush dns* from cmd prompt ??

[DMR]

um just a stupid little suggestions ... have you tried *flush dns* from cmd prompt ??

And the exact syntax for that command would be:

ipconfig /flushdns

[migman29]

I'm having the same problem.It connects up but won't let me view any web pages.
Shut down ,reconnect at a different speed and it works fine.
Heeeeeelp.

[Margtoo]

I am using windows xo pro sp1. When I am on a site I need to stay on and click refresh IE6 will work for awhile and then it will go to page cannot be displayed, at the bottom is cannot find server or dns error. I thought at first something was corrupt, so I reformatted and installed the same os. It started this again before any programs were reinstalled. When it does this I can close that page and try and reopen IE6 but I get the same error. The only way it will work is to reboot and everything goes along fine for a little while, then I get the error. I can't even log off and log back in again to get it to work. I know my connection to the internet is okay, because I can still get mail in and msn messenger is working fine, just IE6 has died.
Does anyone know what is causing this or how to sure it?

Hi, for what it is worth (I'm no techie) I notice you are using PC-cillin. I was having the same symptoms, but getting a message it was caused by tmproxy.exe. So yesterday I uninstalled PC-cillin and reinstalled. I've been connected for over 5 hours today without the problem occurring so far. Fingers crossed. M

[infinit3]

Hey guys i'm online from a wireless adapter on my moms pc because my pc(the main pc with the modem) is getting a page cannot be displayed error no matter what site i try to visit and it also shows a problem with the dhcp. Any of you guys got a working link for that hijacker thing so i can get you guys a log and maybe we can find whats wrong with my connection and maybe fix it? This thing is driving me crazy, I haven't been able to use my pc for like 2 months now it's so upsetting. Any help would be greatly appreciated, Thanks.