31 replies to this topic

[Kakashi789]

I Installed quick heal 2011 on my computer and after 2,3 days when i go to any website it shows the connection was reset or this
And after six or eight tries it enters the sites but when i enter the site the site it loads quater of the page
I thought that it was because of the antivirus and i uninstalled it but the problem is still der and i checked my modem but it works perfectly on another pc
And here's one more

[Man'n'Black-4xp]

Did you try a different browser?
Can you do a system restore to before 'qiuck heal'?

[Man'n'Black-4xp]

Quote

Posted 10 September 2011 - 01:59 PM
I can assure you your computer is still infected.

Posted here

I think I will let Mr. B. or someone wiser than me deal with this...

[Kakashi789]

Hahaha and i dont think it is because of virus coz after installing antivirus the error came i think quick heal deleted something

[Broni]

MnB posted very valid questions:

Quote

Did you try a different browser?
Can you do a system restore to before 'qiuck heal'?

I'd uninstall "Quick Heal" first and then I'd try system restore.

[Kakashi789]

Nope the system restore is not there

[Broni]

Explain "not there".
Remember, we can't see what you see :)

[Kakashi789]

Aw sorry i edited the above reply but it did not save i told that i tried with other browsers and the problem still occurs and the system restore point before quick heal was not there

[Broni]

Never edit your replies if you want to add something new because we're not getting email notifications about edits.

Did you uninstall "Quick Heal"?

Please download MiniToolBox and run it.

Checkmark following boxes:

• Report IE Proxy Settings
  
• Report FF Proxy Settings
  
• List content of Hosts
  
• List IP configuration
  
• List Winsock Entries
  
• List last 10 Event Viewer log
  
• List Installed Programs
  
• List Users, Partitions and Memory size

Click Go and post the result.

[Kakashi789]

Wew it take one hour to post this log coz the error was coming when i was posting

MiniToolBox by Farbar
Ran by Hackingwite (administrator) on 05-10-2011 at 09:38:30
Microsoft Windows XP Service Pack 2 (X86)

***************************************************************************

========================= Flush DNS: ===================================


Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip


# Interface IP Configuration for "Local Area Connection"

set address name="Local Area Connection" source=dhcp
set address name="Local Area Connection" gateway=49.138.45.192 gwmetric=1
set dns name="Local Area Connection" source=static addr=208.67.222.222 register=PRIMARY
set wins name="Local Area Connection" source=dhcp


popd
# End of interface IP configuration




Windows IP Configuration



Host Name . . . . . . . . . . . . : akatsuki-2f87d9

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Media State . . . . . . . . . . . : Media disconnected

Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet NIC

Physical Address. . . . . . . . . : 00-1B-B9-D0-AE-3C



PPP adapter Sonyu:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface

Physical Address. . . . . . . . . : 00-53-45-00-00-00

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 101.209.181.40

Subnet Mask . . . . . . . . . . . : 255.255.255.255

Default Gateway . . . . . . . . . : 101.209.181.40

DNS Servers . . . . . . . . . . . : 202.148.200.3

202.148.202.3

NetBIOS over Tcpip. . . . . . . . : Disabled

Server: dns3.dwl.co.in
Address: 202.148.200.3

Name: google.com
Addresses: 74.125.236.147, 74.125.236.148, 74.125.236.144, 74.125.236.145
74.125.236.146



Pinging google.com [74.125.236.147] with 32 bytes of data:



Reply from 74.125.236.147: bytes=32 time=282ms TTL=47

Reply from 74.125.236.147: bytes=32 time=290ms TTL=47



Ping statistics for 74.125.236.147:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 282ms, Maximum = 290ms, Average = 286ms

Server: dns3.dwl.co.in
Address: 202.148.200.3

DNS request timed out.
timeout was 2 seconds.
Name: yahoo.com
Addresses: 209.191.122.70, 67.195.160.76, 72.30.2.43, 98.137.149.56
98.139.180.149



Pinging yahoo.com [67.195.160.76] with 32 bytes of data:



Reply from 67.195.160.76: bytes=32 time=536ms TTL=47

Reply from 67.195.160.76: bytes=32 time=707ms TTL=47



Ping statistics for 67.195.160.76:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 536ms, Maximum = 707ms, Average = 621ms



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 1b b9 d0 ae 3c ...... Realtek RTL8139 Family PCI Fast Ethernet NIC - Packet Scheduler Miniport
0x20004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 101.209.181.40 101.209.181.40 1
0.209.181.40 255.255.255.255 101.209.181.40 101.209.181.40 1
101.209.181.40 255.255.255.255 127.0.0.1 127.0.0.1 50
101.255.255.255 255.255.255.255 101.209.181.40 101.209.181.40 50
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
224.0.0.0 240.0.0.0 101.209.181.40 101.209.181.40 1
255.255.255.255 255.255.255.255 101.209.181.40 101.209.181.40 1
255.255.255.255 255.255.255.255 101.209.181.40 2 1
Default Gateway: 101.209.181.40
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 01 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\rsvpsp.dll [90112] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\rsvpsp.dll [90112] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (10/04/2011 08:46:25 PM) (Source: Application Error) (User: )
Description: Faulting application facemood.exe, version 0.0.0.0, faulting module facemood.exe, version 0.0.0.0, fault address 0x00009d9a.
Processing media-specific event for [facemood.exe!ws!]

Error: (10/04/2011 08:46:08 PM) (Source: Application Error) (User: )
Description: Faulting application facebo~1.exe, version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x00057c98.
Processing media-specific event for [facebo~1.exe!ws!]

Error: (10/04/2011 08:46:07 PM) (Source: Application Error) (User: )
Description: Faulting application facebo~1.exe, version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x0077d7b9.
Processing media-specific event for [facebo~1.exe!ws!]

Error: (10/04/2011 08:43:30 PM) (Source: Application Error) (User: )
Description: Faulting application facebo~1.exe, version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x00861c5c.
Processing media-specific event for [facebo~1.exe!ws!]

Error: (10/04/2011 08:18:10 PM) (Source: Application Error) (User: )
Description: Faulting application facemood.exe, version 0.0.0.0, faulting module facemood.exe, version 0.0.0.0, fault address 0x00009d9a.
Processing media-specific event for [facemood.exe!ws!]

Error: (10/04/2011 08:18:04 PM) (Source: Application Error) (User: )
Description: Faulting application facebo~1.exe, version 0.0.0.0, faulting module facebo~1.exe, version 0.0.0.0, fault address 0x00002733.
Processing media-specific event for [facebo~1.exe!ws!]

Error: (10/04/2011 08:15:22 PM) (Source: Application Error) (User: )
Description: Faulting application facemood.exe, version 0.0.0.0, faulting module facemood.exe, version 0.0.0.0, fault address 0x00009d9a.
Processing media-specific event for [facemood.exe!ws!]

Error: (10/04/2011 08:15:19 PM) (Source: Application Error) (User: )
Description: Faulting application facebo~1.exe, version 0.0.0.0, faulting module facebo~1.exe, version 0.0.0.0, fault address 0x0000234c.
Processing media-specific event for [facebo~1.exe!ws!]

Error: (10/04/2011 08:15:15 PM) (Source: Application Error) (User: )
Description: Faulting application facebo~1.exe, version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x0085d7b9.
Processing media-specific event for [facebo~1.exe!ws!]

Error: (10/04/2011 07:08:31 PM) (Source: Application Error) (User: )
Description: Faulting application pmonitor.exe, version 1.0.0.15, faulting module rtl120.bpl, version 12.0.3210.17555, fault address 0x0000271a.
Processing media-specific event for [pmonitor.exe!ws!]


System errors:
=============
Error: (10/04/2011 08:40:05 PM) (Source: SideBySide) (User: )
Description: Generate Activation Context failed for C:\PROGRA~1\Nokia\NOKIAP~1\CONNEC~1.CPL.
Reference error message: The operation completed successfully.
.

Error: (10/04/2011 08:40:05 PM) (Source: SideBySide) (User: )
Description: Resolve Partial Assembly failed for Microsoft.VC80.CRT.
Reference error message: The referenced assembly is not installed on your system.
.

Error: (10/04/2011 08:40:05 PM) (Source: SideBySide) (User: )
Description: Dependent Assembly Microsoft.VC80.CRT could not be found and Last Error was The referenced assembly is not installed on your system.

Error: (10/04/2011 08:34:59 PM) (Source: PlugPlayManager) (User: )
Description: The device 'zimnlrtos1' (Root\LEGACY_ZIMNLRTOS1\0000) disappeared from the system without first being prepared for removal.

Error: (10/04/2011 08:28:17 PM) (Source: SideBySide) (User: )
Description: Generate Activation Context failed for C:\PROGRA~1\Nokia\NOKIAP~1\CONNEC~1.CPL.
Reference error message: The operation completed successfully.
.

Error: (10/04/2011 08:28:17 PM) (Source: SideBySide) (User: )
Description: Resolve Partial Assembly failed for Microsoft.VC80.CRT.
Reference error message: The referenced assembly is not installed on your system.
.

Error: (10/04/2011 08:28:17 PM) (Source: SideBySide) (User: )
Description: Dependent Assembly Microsoft.VC80.CRT could not be found and Last Error was The referenced assembly is not installed on your system.

Error: (10/04/2011 08:27:52 PM) (Source: 0) (User: )
Description: \Device\CdRom0

Error: (10/04/2011 08:27:48 PM) (Source: 0) (User: )
Description: \Device\CdRom0

Error: (10/04/2011 08:27:44 PM) (Source: 0) (User: )
Description: \Device\CdRom0


Microsoft Office Sessions:
=========================
Error: (10/04/2011 08:46:25 PM) (Source: Application Error)(User: )
Description: facemood.exe0.0.0.0facemood.exe0.0.0.000009d9a

Error: (10/04/2011 08:46:08 PM) (Source: Application Error)(User: )
Description: facebo~1.exe0.0.0.0unknown0.0.0.000057c98

Error: (10/04/2011 08:46:07 PM) (Source: Application Error)(User: )
Description: facebo~1.exe0.0.0.0unknown0.0.0.00077d7b9

Error: (10/04/2011 08:43:30 PM) (Source: Application Error)(User: )
Description: facebo~1.exe0.0.0.0unknown0.0.0.000861c5c

Error: (10/04/2011 08:18:10 PM) (Source: Application Error)(User: )
Description: facemood.exe0.0.0.0facemood.exe0.0.0.000009d9a

Error: (10/04/2011 08:18:04 PM) (Source: Application Error)(User: )
Description: facebo~1.exe0.0.0.0facebo~1.exe0.0.0.000002733

Error: (10/04/2011 08:15:22 PM) (Source: Application Error)(User: )
Description: facemood.exe0.0.0.0facemood.exe0.0.0.000009d9a

Error: (10/04/2011 08:15:19 PM) (Source: Application Error)(User: )
Description: facebo~1.exe0.0.0.0facebo~1.exe0.0.0.00000234c

Error: (10/04/2011 08:15:15 PM) (Source: Application Error)(User: )
Description: facebo~1.exe0.0.0.0unknown0.0.0.00085d7b9

Error: (10/04/2011 07:08:31 PM) (Source: Application Error)(User: )
Description: pmonitor.exe1.0.0.15rtl120.bpl12.0.3210.175550000271a


=========================== Installed Programs ============================

Adobe Flash Player 10 Plugin (Version: 10.3.181.14)
Advanced SystemCare 5 (Version: Beta 2.0)
Air Assault 2 (Version: 1.0)
CamStudio OSS Desktop Recorder (Version: 2.6 Beta r294)
Cheat Engine 5.6.1
Chicken Invaders 3 (Version: 1.0.0)
Fraps (remove only)
Free Hide Folder
IDT Audio (Version: 5.10.5407.0)
Intel® Graphics Media Accelerator Driver
Java Auto Updater (Version: 2.0.5.1)
Java™ 6 Update 26 (Version: 6.0.260)
Java™ 7 (Version: 7.0.0)
Malwarebytes' Anti-Malware version 1.51.1.1800 (Version: 1.51.1.1800)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Mozilla Firefox 6.0.2 (x86 en-US) (Version: 6.0.2)
MSVC90_x86 (Version: 1.0.1.2)
Naval Strike (Version: 1.0)
Nokia Connectivity Cable Driver (Version: 7.1.34.0)
Nokia PC Suite (Version: 7.1.62.1)
PC Connectivity Solution (Version: 11.4.19.0)
Real Bowling (Version: 1.0)
Real Chess (Version: 1.0)
Road Rash - www.classic-gaming.net
Teddy Wars (Version: 1.1.0)
Uniblue SpeedUpMyPC
VLC media player 1.1.11 (Version: 1.1.11)
WebFldrs XP (Version: 9.50.7523)
Windows Driver Package - Nokia Modem (02/25/2011 4.7) (Version: 02/25/2011 4.7)
Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9) (Version: 02/25/2011 7.01.0.9)
Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0)
Windows Media Format 11 runtime

========================= Memory info: ===================================

Percentage of memory in use: 27%
Total physical RAM: 1015.29 MB
Available physical RAM: 734.56 MB
Total Pagefile: 2445.11 MB
Available Pagefile: 2271.34 MB
Total Virtual: 2047.88 MB
Available Virtual: 2004.98 MB

========================= Partitions: =====================================

1 Drive c: (Local Disk) (Fixed) (Total:48.83 GB) (Free:11.34 GB) NTFS
2 Drive d: () (Fixed) (Total:48.83 GB) (Free:7 GB) NTFS
3 Drive e: () (Fixed) (Total:51.39 GB) (Free:3.79 GB) NTFS

========================= Users: ========================================

User accounts for \\AKATSUKI-2F87D9

Administrator Guest Hackingwite
HelpAssistant SUPPORT_388945a0

========================= Minidump Files ==================================

No minidump file found

**** End of log ****

[Broni]

Your internet connection is fine.

You didn't say:

Quote

Did you uninstall "Quick Heal"?

[Kakashi789]

Aw sorry i uninstalled quick heal

[Broni]

Open Internet Explorer go Tools>Internet options>Advanced tab and click on "Reset" button.
Restart IE. Any change?

[Kakashi789]

Hey broni my windows is not working i.e when i tries to start pc it restarts and restarts so i am gonna do a re-insatllation of win xp and tell u if the error still occurs

[Broni]

No problem. Let me know....

[Kakashi789]

Hey broni the problem is still der plzz help and I dont have internet explorer i have only opera,aurora and firefox

[Broni]

What do you mean, you don't have IE?
Did you reinstall Windows?
Was it clean installation?

[Kakashi789]

Yea i reinstall windows and it was a clean installation and i deleted internet explorer in previous windows so i thought when i reinstall windows again internet explorer wouldn't be there but i was wrong it is there and as u said "Open Internet Explorer go Tools>Internet options>Advanced tab and click on "Reset" button.
Restart IE. Any change?"
I did it but after going to to advanced tab there was no reset option there was restore default option?

[Broni]

Quote

I did it but after going to to advanced tab there was no reset option there was restore default option?

There is no reason to reset anything if you reinstalled Windows.
Make sure you install all updates including all Service Packs.
Since this is clean installation I suspect you have Internet Explorer 6 there and IE 6 doesn't have "Reset" button.

[Kakashi789]

I cannot update anything it tells u dont have a internet connection and i dont think it is because of browser coz i ran a apllication which uses net connection it also displays the same message