(Msg. 33) Posted: Wed Sep 02, 2009 9:36 pm
Post subject: Re: Meb,,, This One !! comp keeps timing out. [Login to view extended thread Info.] Archived from groups: microsoft>public>win98>gen_discussion (more info?)
square/circle wrote:
> PCR wrote:
>> square/circle wrote:
>>>> and hence they would not only ignore
>>>>>> my post, but would remove it forthwith.
>>>>>> So, I am now at 'Tom Coyotes' site and reading to see if they
>>>>>> will let me post a HJT log. I had a look at a lot of O/P's posts
>>>>>> while I was there, and their hjt logs were huge, whereas mine
>>>>>> only has minimal information.
>>>>> If it's small, go ahead & post it here.
>>>> You have no idea how happy you have just made me; not sure
>>>> whether I should do as attachment or place it within this post,
>>>> I'll go with
>>>> gut feeling after finished answering here.
>>
>> OK.
>>
>>>> If you've been
>>>>> downloading/installing a bunch of stuff lately, someone may spot
>>>>> something in your HJT report that might bear investigation--
>>>>> especially something installed or updated about the time the
>>>>> problem began.
>>>>
>>>> I don't see it anymore at his site. You can still get them
>>>>> from Windows Update...
>>>>> http://v4.windowsupdate.microsoft.com/en/default.asp >>>> Excellent, I will scarper over there next. (am a little confused
>>>> though, I thought they werent available)
>>
>> They are still there. The site will offer the ones that apply to your
>> OS, i.e., you go with a Win98 for those.
>>
>>>>>> S/C
>>>>>>
>>>>>> ps,, anyone seen Franc?
>>>>> I doubt he's been puzzled by your modem log; he must just be busy.
>>>> Yes, that is why I havent bugged him;; is a pain though,
>>>> because I have been booted off twice more since I posted to Franc;
>>>> in fact, got booted after 40 minutes tonight, and had to reconnect
>>>> just to come in here.(costs money too, price of a ph call, optus
>>>> are loving it)
>>>>
>>>> S/C
>>>>
>>>> ps, I chose 'attach', and it can be opened in notepad or the-gun
>>>> etc. pps, Will go do what you said with SpyBot too.
>>
>> OK. IE6 has deemed it safe to go ahead & open it, itself, & include
>> it at the bottom of your post...
>>
>>>> Logfile of HijackThis v1.99.1
>>>> Scan saved at 9:54:14 PM, on 9/1/09
>>>> Platform: Windows 98 SE (Win9x 4.10.2222A)
>>>> MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
>>>>
>>>> Running processes:
>>>> C:\WINDOWS\SYSTEM\KERNEL32.DLL
>>>> C:\WINDOWS\SYSTEM\MSGSRV32.EXE
>>>> C:\WINDOWS\SYSTEM\MPREXE.EXE
>>>> C:\WINDOWS\SYSTEM\mmtask.tsk
>>
>> Those all look normal.
>>
>>>> C:\WINDOWS\SYSTEM\MSTASK.EXE
>>
>> That is the Task Scheduler. I've prevented mine from starting
>> automatically. Do you have something in there you really use?
>> Anything in there look strange? To prevent it from starting at boot,
>> you may need first to uninstall the auto-Windows Update check.
>> That's useless now, anyhow, once you get fully updated especially.
>>
>>>> C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
>>>> C:\WINDOWS\EXPLORER.EXE
>>>> C:\WINDOWS\TASKMON.EXE
>>>> C:\WINDOWS\SYSTEM\SYSTRAY.EXE
>>>> C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
>>>> C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
>>
>> I doubt it's avast! causing your connectivity problem, because it
>> predates the problem. Even your program update to the v.4.8.1351 --
>> which I have yet to do but I swear I will -- postdates your problem.
>> Still -- really -- you should reconsider the settings change I
>> suggested in that other thread. If you've never activated IE, maybe
>> make a better choice at that "Update (connections)" screen.
>>
>>>> C:\WINDOWS\SYSTEM\USBMONIT.EXE
>>
>> I don't have that. A Google search says it has to do with checking
>> whether a Sandisk flashdrive has been plugged in. Unless the problem
>> started about when you installed or updated this, I guess it isn't
>> responsible. I see nothing on the first few Google pages about a
>> problem with it.
> --------------
>
> It was from a very old flash stick I had... is not important. I'll
> un-tick it in MsConfig.
Very good. No sense running something you don't use.
> ----------------
>>
>>>> C:\WINDOWS\RUNDLL32.EXE
>>>> C:\WINDOWS\SYSTEM\WMIEXE.EXE
>>>> C:\WINDOWS\RUNDLL32.EXE
>>>> C:\WINDOWS\SYSTEM\RPCSS.EXE
>>>> C:\WINDOWS\SYSTEM\SPOOL32.EXE
>>>> C:\WINDOWS\SYSTEM\TAPISRV.EXE
>>
>> Those are all normal to have. RPCSS.EXE sets up a port to the NET,
>> which I have used Kerio to block. Definitely, incoming packets
>> attempt to communicate with it...
>>
>> Someone from 24.64.9.177, port 3222 wants to send UDP datagram to
>> port 1027 owned by 'Distributed COM Services' on your computer.
>>
>> Someone from 24.64.8.158, port 32089 wants to send UDP datagram to
>> port 1027 owned by 'Distributed COM Services' on your computer
>>
>> Someone from 24.64.85.35, port 34996 wants to send UDP datagram to
>> port 1027 owned by 'Distributed COM Services' on your computer
>>
>> ...But I can't say I've ever had connectivity problem due to it when
>> I allowed it to connect. I decided from something glee wrote that I
>> shouldn't disable RPCSS.EXE altogether. It came installed on the
>> machine; it's an MS app. I've detected no problem from disallowing
>> it to communicate with the NET. Here was the thread on that...
> ------------
>
> Ditto, mine came with instal too. been there for ages.
For as long as it's been there, it has set up two local ports that are
listening on the NET-- waiting for a communication! What can it be told
to do? I need to research it a bit more &/or re-read glee's & Zabkar
comments. But I've never regretted having Kerio prevent its
communication!
-----------
>>
http://ms-os.com/windows-98/83225-who-are-24-64-9-177-and-24-64-8-158-etc-2.html >> Zabkar had something to say about it.
>>
>>>> C:\WINDOWS\NOTEPAD.EXE
>>>> C:\WINDOWS\NOTEPAD.EXE
>>>> C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
>>
>> I use IE6. I'm sure you've looked through all of FF's menus for
>> anything that may apply.
> -----------
>
> Yes, no problems there.
OK. Fine.
> --------------
>>
>>>> C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXE
>>>> C:\WINDOWS\SYSTEM\RNAAPP.EXE
>>
>> RNAAPP.EXE also sets up a port which I have used Kerio to block in
>> both directions. I can't quite recall whether it me who did it or it
>> was an imported expert's rule.
This one sets up 3 local addresses all of which I've blocked for quite a
while with no detectable problem. It can't be told to do anything! Now
I've set Kerio to alert on attempts. Look -- ten minutes later -- I've
just got two of these...!...
TCP Connection from 69.38.10.83:4901 was blocked by rule 'Block
RPCSS.EXE'
That's newsouth.net. What does it want RPCSS.EXE to do?
>>>> C:\WINDOWS\NOTEPAD.EXE
>>>> C:\PROGRAM FILES\MOZILLA THUNDERBIRD\THUNDERBIRD.EXE
>>
>> Is that part of FireFox?
> ---------------
>
> Yes, it is Mozillas newsreader and is the one I have used to post all
> posts to this n/g
All right.
> --------------
>>
>>>> E:\UTILITIES\HIJACKTHIS\HIJACKTHIS.EXE
>>>>
>>>> O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} -
>>>> E:\UTILIT~1\STARDL~1\STARDO~1\SDIEINT.DLL
>>
>> Is that a Browser Helper Object you have consciously installed? Maybe
>> turn it off temporarily to see whether the problem goes away.
> -------------------
>
> It is part of my DownLoad Manager,,, 'StarDownloader', all is fine.
Yea, I see. STILL -- if nothing else is found to be responsible --
StarDownLoader is a candidate because it interacts with the NET. Maybe
it has set something that is conflicting with some other app you've got.
Then, you shut it off or uninstall it temporarily to see whether the
problem goes away. But I'm leaning heavily toward that 017 HJT line as
pinpointing the culprit pending further investigation.
> ----------------
>>
>>>> O2 - BHO: AcroIEHlprObj Class -
>>>> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
>>>> E:\UTILITIES\ADOBE\READER\ACTIVEX\ACROIEHELPER.OCX
>>
>> Same with this one. Try temporarily shutting it down to see whether
>> connectivity improves.
> ------------
>
> Been there since day dot... is not a prob PCR
I often agree with that. HOWEVER, something can always happen to make an
old, reliable program suddenly to be a problem. Maybe some setting
change or some other newly installed app suddenly causes a conflict.
> -----------
>>
>>>> O3 - Toolbar:
>>>> &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
>>>> C:\WINDOWS\SYSTEM\MSDXM.OCX
>>
>> I've got that one too in my own HJT report. That's a Windows Media
>> Player 2 ActiveX Control & I believe it allows WMP to integrate into
>> IE.
> -----------
>
> I have never used IE once on this computer, dont even have a shortcut
> to it.... outta site, outta mind.
Yea. OK.
> ---------
>
>>>> O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
>>>> O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
>>>> O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
>>>> powrprof.dll,LoadCurrentPwrScheme
>>
>> Those are normal Windows apps & have nothing to do with the NET.
>> Taskmon I believe is maintaining C:\WINDOWS\APPLOG for use during
>> Defrag when optimizing. After a Defrag with optimization, OPTLOG.TXT
>> has a list of everything that has run at least twice-- could be
>> worth a look in there or at least at the names of the files in
>> APPLOG for anything strange!
> -----------------
>
> Applog is fine... all the above are fine.
I'm saying, if you a strange name in that folder or file, it's something
that has run on the computer. It could be wise to Google it, then.
> -----------------------
>>
>>>> O4 - HKLM\..\Run: [avast! Web Scanner]
>>>> C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
>>>> O4 - HKLM\..\Run: [ashMaiSv]
>>>> C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
>>
>> Those are part of avast!.
>>
>>>> O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
>>
>> I don't use TweakUI. Have you used it for anything NET related?
> ----------------
>
> No, only thing I really wanted it for was to get rid of those annoying
> short-cut arrows on the desktop..... also has been there since day
> dot. Got it via 'Power Toys' around day dot.(day dot = 5 years ago)
You should keep your shortcut arrows! But that isn't this problem. I
tend to doubt TweakUI is the problem too, especially if you're not using
it.
> =======================
>>
>>>> O4 - HKLM\..\Run: [Gene USB Monitor] C:\WINDOWS\SYSTEM\USBMonit.exe
>>>> O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
>>
>> Going by Google,...
>> http://www.google.com/search?q=nwiz.exe&btnG=Search&hl=en&sa=2 >> ...that is a part of an NVidia graphics driver generating about
>> 314,000 Google hits. It may have to do with multiple monitors. Best
>> look into it...
>> http://winhlp.com/node/188 >> Something not nice about nwiz.exe.
> ------
>
> It too is fine..... day dot.
I would read some of those. I'm not saying to willy-nilly believe the
1st few you read. But, if it really puts a drain on the processor or the
Registry, that could be a problem. See whether you can determine what
nwiz.exe really does & whether you really need it...
http://www.innovative-sol.com/forum/index.php?showtopic=752
Looks like a sensible discussion-- a lot less scary than that other one!
> --------
>>
>>>> O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe
>>>> NvMCTray.dll,NvTaskbarInit
>>
>> That probably starts one of your BHOs.
>>
>>>> O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
>>>> powrprof.dll,LoadCurrentPwrScheme
>>>> O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
>>>> O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil
>>>> Software\Avast4\ashServ.exe
>>
>> Those are all normal.
>
> Yes,,, every thing above is normal and fine.
MSTask.exe is the Task Scheduler. Consider removing that from startup.
You can still run it if/when necessary from the START menus.
> ---------------
>>
>>>> O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
>>>> Office\Office\OSA9.EXE
>>
>>
http://www.google.com/search?hl=en&q=OSA9.EXE&btnG=Search&aq=f&oq=&aqi= >> Google has about 90,600 for OSA9.EXE. I don't have Office, only
>> MSWorks.
>
> ----------
>
> Normal and fine...... day dot.
Office is a pretty big monster! I would study OSA9.EXE carefully in a
Google search. But it may well be you want it to startup at boot. (I
really don't know.)
> -------------
>>
>>>> O8 - Extra context menu item: Download with Star Downloader -
>>>> E:\UTILITIES\STARDLOAD\STAR DOWNLOADER\sdie.htm
>>>> O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
>>>> O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer =
>>>> 85.255.115.4,85.255.112.14
>>>> O20 - Winlogon Notify: !SASWinLogon - E:\SUPAANTI\SASWINLO.DLL
>>
>> Best Google those 4 to see whether there were any reported problems.
>> I don't have any of them & must hit the sack again soon.
>
> 08 and 012 are normal and fine.
Looks like 012 is from Adobe Acrobat Reader & is meant to interact with
IE. I guess it's OK or likely you'd see Acrobat activity at the time of
the disconnect. I do know one site I've visited recently starts Acrobat
on its own which quickly aborts. I don't know what that's about, but it
didn't throw me off the NET. I don't have NPDocBox.dll.
> 20 is from SuperAnt anti malaware and I deleted it today as it doesnt
> support 98 anymore.... ran Hijack after and its no longer there.
All right. I hope you mean you did a proper uninstall of it from
Add/Remove Programs. I suppose the connectivity problem has not gone
away.
> Now, for the bigeee.
> Number 017 is and address in the Ukrane via some sort of
> UkrTeleGroup. I used 'ARIN WHOIS database' and 'RIPE Database query
> service' to get this info by putting in the ip address as per what you
> see on my HJT log.
Uh-huh. This is the one that bears the most investigation. You have no
idea how that 017 line got into the HJT report? As I said earlier, HJT
describes an 017 as being a hijacking for the purpose of redirecting
URLs you click to go elsewhere.
> No kidding PCR, I spent all day on this today.. learned so much, and
> enjoyed every minute.
Very good.
> While I was on my travels, I found an AntiVirus program that is rated
> the best of the best. I even downloaded it (11.2MB), it only took
> about 20-25mins at an average of 5kb per second. The one I got was
> via a link from Bleeping Computers, and the link was also attributed
> to the above hjt 017.
I don't understand that last sentence. What does the link have to do
with the 017 line?
> (it is highly recommended by many many trusted
> sources.) The AntiV is supposed to cater for All versions of windows,
> so I wrote to them there and then and asked 5 questions,,, will get
> back to you when they reply. This is Great News PCR.
All right. But what is the program?
> So, the bottom line with me is now one of sorta simplicity, (shiver
> shiver) and relates to whether I have the Kahunas to go into the
> registry and delete:: have been there many times, but never touched a
> thing,,,,, I tip-toe in, and scarper back out.
> 1)the above info from HJT, and
I'm sure the answer for that will be there. Even HJT is mentioned. I'll
try to look, but I'm having trouble with my monitor-- it keeps turning
off and on!
> 2)the entries from the FraudLoader win32 (of which live in the MRU
> section of one of the sections in the registry;; did you go view the
> screen shots that Franc put on?)
Yea, I saw that. MRU lists are harmless. The one you saw is what appears
when you click the little down-arrow to the right of "named" at a Find
requestor. If you do a Find on something, it gets added to that Registry
key. It drops out on its own; only the last 10 are kept for that.
> Thats about it,,,, all I need now is either You or Meb or both to
> Fill me with confidence and give me step-by-step on how to rid myself
> of these Nasties. (although, with the HJT one, I suppose I could tell
> it to fix it.... yes???) Speaking of which, I never realised there
> was a newer version of HJT, so I d/loaded that too.
>
> Many many thanks for your time PCR,, I will repay with the info I get
> from the new AntiV ppl.
> Will ask Meb to look at this post too.
You are welcome. Yea, keep me informed, thanks.
>
> S/C
--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
Should things get worse after this,
PCR
pcrrcp RemoveThis @netzero.net
(Msg. 34) Posted: Thu Sep 03, 2009 2:05 am
Post subject: Re: Franc,, Major Update... Hope you get to this asap [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
On Sun, 30 Aug 2009 19:10:21 +0930, square/circle <not.RemoveThis@line.org> put
finger to keyboard and composed:
>Hello Franc,,
>
>I think I have found something, but I'll leave the interpretation up to you.
>
>I was on the internet(in the xp group killing time) for 1hr 56mins and
>it flippin' well did it again;; It died at about that time.
>It is/was during the same session as the last post I sent to you.
>
>This time, I viewed the log and I can see the something saying "serial
>over-run errors.
>Am attaching the log for you....... Why is it doing this! grrr.
>Sure hope it means something to you.
>
>S/C
Sorry, I'd forgotten about your modemlog.
AFAICS, apart from the hangups as a result of DUN's inability to parse
the BEGINblahblahEND response (sorry, my mistake), your modem's
hangups appear to be normal, ie your machine has initiated an orderly
disconnection in each case.
Hanging up the modem.
Hardware hangup by lowering DTR.
ATH<cr>
The serial overrun errors are not really a concern. Your COM port has
a 16-byte FIFO buffer which is being concurrently filled by the modem
and emptied by the CPU. If the CPU is busy with another task, then it
may be unable to service an interrupt from the COM port in a timely
manner, in which case the FIFO buffer overflows and characters are
lost, resulting in a serial overrun error. The associated data packet
then needs to be retransmitted.
You can reduce the number of overruns by adjusting the interrupt
trigger point for your receive FIFO. R-click your ISP's DUN
connectoid, select Properties -> General -> Configure -> Connection ->
Port Settings, and adjust the Receive Buffer slider for a lower
setting.
After your dialup session, you can access your modem's post call
diagnostic report via HyperTerminal.
(Msg. 35) Posted: Thu Sep 10, 2009 11:05 am
Post subject: Re: Franc,, Major Update... Hope you get to this asap [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Franc Zabkar wrote:
> On Sun, 30 Aug 2009 19:10:21 +0930, square/circle <not RemoveThis @line.org> put
> finger to keyboard and composed:
>
>> Hello Franc,,
>>
>> I think I have found something, but I'll leave the interpretation up to you.
>>
>> I was on the internet(in the xp group killing time) for 1hr 56mins and
>> it flippin' well did it again;; It died at about that time.
>> It is/was during the same session as the last post I sent to you.
>>
>> This time, I viewed the log and I can see the something saying "serial
>> over-run errors.
>> Am attaching the log for you....... Why is it doing this! grrr.
>> Sure hope it means something to you.
>>
>> S/C
>
> Sorry, I'd forgotten about your modemlog.
>
> AFAICS, apart from the hangups as a result of DUN's inability to parse
> the BEGINblahblahEND response (sorry, my mistake), your modem's
> hangups appear to be normal, ie your machine has initiated an orderly
> disconnection in each case.
>
> Hanging up the modem.
> Hardware hangup by lowering DTR.
> ATH<cr>
>
> The serial overrun errors are not really a concern. Your COM port has
> a 16-byte FIFO buffer which is being concurrently filled by the modem
> and emptied by the CPU. If the CPU is busy with another task, then it
> may be unable to service an interrupt from the COM port in a timely
> manner, in which case the FIFO buffer overflows and characters are
> lost, resulting in a serial overrun error. The associated data packet
> then needs to be retransmitted.
>
> You can reduce the number of overruns by adjusting the interrupt
> trigger point for your receive FIFO. R-click your ISP's DUN
> connectoid, select Properties -> General -> Configure -> Connection ->
> Port Settings, and adjust the Receive Buffer slider for a lower
> setting.
>
> After your dialup session, you can access your modem's post call
> diagnostic report via HyperTerminal.
>
> Setting up HyperTerminal:
> http://www.modemsite.com/56K/x2-hyperterm.asp >
> Using HyperTerminal:
> http://www.modemsite.com/56k/usehyper.asp >
> You can then send diagnostic commands to your modem. In your case the
> pertinent ones would be AT&V1, AT&V2, and AT#UD.
>
> Modem Diagnostic Screens Quick-Reference:
> http://www.modemsite.com/56k/diag.asp >
> BTW, Stanislav V. Mekhanoshin's freeware AT#UD and AT&V decoder
> utilities are available here:
> http://f128.n5022.z2.fidonet.net/fileecho/xhrdidc/s1-1202.zip > http://f128.n5022.z2.fidonet.net/fileecho/xhrdidc/ud-1100.zip >
> - Franc Zabkar
Hello Franc,
I had been called away on business, plus had a monitor break-down since.
There is a lot of information in your post, I hope I can get through it
all, and better still, understand it. As you probably have figured, all
of your information and instructions to me are a totally new concept for
me, but I am doing the best I can.
Since returning and having a monitor (last 24 hours) I have been booted
off of the internet twice,, but there now seems to be another demon in
the works of which I have just mentioned in a post to Meb and PCR.
It goes like this:
About 18hrs ago, I connected to the net, then couldnt use it after about
an hour, so I went straight to cpl, modems, and to the log-file area. I
hit the 'view log file' button of which brought up a diag box stating
the file is too large and that I would need WordPad to open it,, fine I
said, so I hit 'yes' to WordPad,, when I got there I got another diag
msg stating the file could not be opened because some other program was
using it. I am now beyond being confused, and still getting no
connection at intermittent times,,, and its really frustrating me!!
This never happened when I was 'viewing and saving' the log for you.
I have since un-ticked the 'append' box, because I cant view anything
now anyway.
Is it possible that the drivers have become corrupt? or even the Modem
is on its way out?? (I've never understood what is really meant when
people in help groups like this say to re-instal drivers... because all
I see a driver as is being a piece of text....?)
I know you are a busy person, and other things are more important, but I
would be so appreciative if you would follow this through with me until
I get it fixed.
Should I delete the Modem and re-instal too?
(Msg. 36) Posted: Fri Sep 11, 2009 7:05 pm
Post subject: Re: Franc,, Major Update... Hope you get to this asap [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
On Thu, 10 Sep 2009 23:54:30 +0930, square/circle <not.TakeThisOut@line.org> put
finger to keyboard and composed:
>About 18hrs ago, I connected to the net, then couldnt use it after about
>an hour, so I went straight to cpl, modems, and to the log-file area. I
>hit the 'view log file' button of which brought up a diag box stating
>the file is too large and that I would need WordPad to open it,, fine I
>said, so I hit 'yes' to WordPad,, when I got there I got another diag
>msg stating the file could not be opened because some other program was
>using it.
Dial-Up networking "owns" the log file until you disconnect. This
prevents other applications from writing to it. Maybe Notepad was
opening the file in read-only mode.
There are a lot of things that your modem can tell you about your
connection, but only after you disconnect. I don't think this
newsgroup would appreciate a discussion about modem hardware issues,
but you are welcome to send me your diagnostic reports via email.
Alternatively, comp.dcom.modems used to a good newsgroup for this kind
of question but these days it is very quiet.
>I know you are a busy person ...
Unfortunately that's not true.
- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.
(Msg. 37) Posted: Fri Sep 11, 2009 8:09 pm
Post subject: Re: Franc,, Major Update... Hope you get to this asap [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Franc Zabkar wrote:
> On Thu, 10 Sep 2009 23:54:30 +0930, square/circle <not DeleteThis @line.org> put
> finger to keyboard and composed:
>
>> About 18hrs ago, I connected to the net, then couldnt use it after about
>> an hour, so I went straight to cpl, modems, and to the log-file area. I
>> hit the 'view log file' button of which brought up a diag box stating
>> the file is too large and that I would need WordPad to open it,, fine I
>> said, so I hit 'yes' to WordPad,, when I got there I got another diag
>> msg stating the file could not be opened because some other program was
>> using it.
>
> Dial-Up networking "owns" the log file until you disconnect. This
> prevents other applications from writing to it. Maybe Notepad was
> opening the file in read-only mode.
>
> There are a lot of things that your modem can tell you about your
> connection, but only after you disconnect. I don't think this
> newsgroup would appreciate a discussion about modem hardware issues,
> but you are welcome to send me your diagnostic reports via email.
> Alternatively, comp.dcom.modems used to a good newsgroup for this kind
> of question but these days it is very quiet.
No really, continue on, a PRIME connection for 9X users in foreign
nations is still a phone line, and there are still lots of phone line
AOL, NetZero, and other ISP users who might find it interesting. Its got
my vote for continuance [like that matters anyway]...
>
>> I know you are a busy person ...
>
> Unfortunately that's not true. >
> - Franc Zabkar
(Msg. 38) Posted: Sat Sep 12, 2009 8:05 am
Post subject: Re: Franc,, Major Update... Hope you get to this asap [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Franc Zabkar wrote:
> On Thu, 10 Sep 2009 23:54:30 +0930, square/circle <not.TakeThisOut@line.org> put
> finger to keyboard and composed:
>
>> About 18hrs ago, I connected to the net, then couldnt use it after about
>> an hour, so I went straight to cpl, modems, and to the log-file area. I
>> hit the 'view log file' button of which brought up a diag box stating
>> the file is too large and that I would need WordPad to open it,, fine I
>> said, so I hit 'yes' to WordPad,, when I got there I got another diag
>> msg stating the file could not be opened because some other program was
>> using it.
>
> Dial-Up networking "owns" the log file until you disconnect. This
> prevents other applications from writing to it. Maybe Notepad was
> opening the file in read-only mode.
>
> There are a lot of things that your modem can tell you about your
> connection, but only after you disconnect. I don't think this
> newsgroup would appreciate a discussion about modem hardware issues,
> but you are welcome to send me your diagnostic reports via email.
> Alternatively, comp.dcom.modems used to a good newsgroup for this kind
> of question but these days it is very quiet.
>
>> I know you are a busy person ...
>
> Unfortunately that's not true. >
> - Franc Zabkar
Okay Franc,, I will try the 'view files' after I disconnect tonite,
but I must admit, when you told me to tick that 'append' box and the
like, I was able to view the file while still connected,, could view
it and save it no problem.
(ps, got kicked off today after a mere 11minutes... but so long as I am
doing something re: the internet, its fine.)
(Msg. 39) Posted: Sat Sep 12, 2009 10:05 am
Post subject: Re: PCR MEB.. I am Back. [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
>> 1)Yes,,, all files are always shown.
>
> That's good.
>> 3)Never knew about Adobe problem, havent even updated it when it asks,
>> because it knocks me back due to Win98-O/S anyway.
>
> Hopefully, avast! would have caught anything that tried to get in that
> way or any way. But here are some few simple manual checks...
>
> (1) "START, Find, F/F, Explorer.exe".
> If one is found to exist in C:\, that could be trouble. Normally,
> there is only one-- & it belongs in C:\Windows!
Nope, nothing found.
------------
> (2) "START button, Run, SysEdit" to look at System.ini & Win.ini.
------------
But why tell me to use 'run'? was simpler just to go to windows folder
and view them via notepad.... (or in my case, 'the gun', of which like
heaps of other things is an option via a right click.)
>
> (a) Normally, Win.ini has these first lines...
> [windows]
> load=
> run=
> ...Anything after those equal signs could be trouble. (But it's OK not
> to have the lines at all.)
>
> (b) System.ini will have this in the [boot] section...
> [boot]
> shell=Explorer.exe
> ...Anything other than JUST that on that line could be trouble.
no problems there PCR,,, so far, so good.
---------
>
>> 4)Have now (24hrs ago) told HJT to 'fix' 017. Have rebooted twice
>> since and no problems encountered.
>
> In addition to what I posted above in this thread... Presumably, your
> ISP is now supplying your DNS Server(s). You may discover it/them the
> way MEB said... "START, Run, winipcfg /all"
> ... Click the elipses (...) at that requestor to see whether there is a
> secondary DNS. I see two of the three I had discovered by looking at
> Kerio logs. Soon, I must contact NetZero to see whether these are the
> ones intended. You must contact your ISP.
Pleeeeeeeeze, dont talk to me about Kerio right now,, its a huuuuge
thorn since I put it on.
Like I tried to tell Meb, I dont have any difficulty putting on
programs or apps or utilities,, but I do have a problem when it comes to
configuring something I know absolutely nothing about.. my eyes are
getting really tired from reading all about Kerio and Firewalls.
But, I have found the best link to understanding it, and also one which
has a whole lot of stuff that I am supposed to put into Kerio,, here is
the link::
from what I have read so far, (eyes getting soooooo tired) it seems to
be very helpful... please let me know if you think it is good.
>> 6)Basically, all seems well so far, Except I have been booted off of
>> my connection twice in 24hrs......
>
> I've asked a question about that above in this thread: Are you really
-------------------------
This is the weird part PCR,,,, my connection stays on, ie, it still
shows on the task-bar,, and I can bring it up and see that it shows I
am still connected.... but if I try to use the internet in any way,
whether it be to talk to you guys, or send a mail, or go to a site, the
msg is always the same......"HOST NOT FOUND".!! its driving me
friggin' crazeeee.
But, and heres the thing, if I constantly use it and surf to all the
above, it is just fine, but heaven forbid I dont use it for ten minutes
or so, because it will simply say :: nyah nyah. HELP!!!!!
---------------
> He responded to you; you owe him...
> news:8aila5lv5nf0ngpo792k9bn42k453ej4s3@4ax.com
All is well there,, I raced across replies too fast,, but I was super
anxious to fix this damn problem.
>> I will now do a google (or in my case, a 'Clusty') search for 012,
>> punching in "NPDocBox.dll.... and also ".spop".
>
> That's it. That's what I was doing. That's the right tack & the best you
> can do, seing as PA Bear has gone back into hibernation.
Yes, will just keep on keeping on.... pluggin' away. What I find
infuriating the most is simply identifying something, yet at the same
time not being able to find a solution;; and like Meb said, this
thread has gone on too long, and nothing has been fixed. (I do
understand your frustration too Meb)
The stupidest part about it all is, the fact that the computer itself is
running just fine, except for losing my connection, if that is even
whata is happening.
--------
> He responded to that. Yea, I think append may be good for a bit-- but
> don't leave it like that. No good to have something grow to a monstrous
> size! Careful with Kerio's log when you get that set up--
GRRRRRRRRRRRR to Kerio. so far it has become a problem in itself, but,
sigh, I guess its early days and can only be put down to my lack of
understanding how to configure... but geeez,, to take nearly 20
minutes just to get to my telly guide, then an afternoon just to get to
Gmail... all I can say is, it had to be switched OFF.
(you probably wont understand what I am talking about, but if you read
my latest to Meb, you will.
----------------
mine was an
> incredible 16/so MB recently! But it was my own fault for forgetting I
> set so many rules to write to it! Here's another log to check...
>
> "BHOCop" found a Browser Helper Object called Wavehelper Class, created
> by "Wavetop", that was building a monstrosity of an error log called
> "Logit.txt" in here. "START, Find, F/F, Logit.txt"-- see one? Get rid of
> it!
Okay, but first let me try to configure Kerio etc,, before I lose my
sight. at the moment I am blind in one and cant see out of the other.
-------------------------
>>> And the firewall still needs installed SOON [like a week ago]...
>
Um, yeah, right, been done.
---------------
to oz posters, I just watched the crows lose,,,,, or maybe I should
say this to Franc.
Again,, I am sooooo grateful that you guys are hanging on for me, and I
know how this thread must be causing nausciousness... (hope that
spelling is enough to relay my msg.
(Msg. 40) Posted: Sat Sep 12, 2009 2:02 pm
Post subject: Re: PCR MEB.. I am Back. [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
MEB wrote:
> > What I have been trying to tell you all along, is that I Dont
> > understand Ports and permissions and Addresses and all that stuff.
> [if someone wants to recommend something else]. You NEED a quick
> fix...
Throw away your dial-up connection and get a low-cost broadband internet
connection if you're that terrified of port scans and inbound
unsolicited traffic. Once you have a broad-band internet connection, it
will almost certainly have NAT functionality resulting in iron-clad
hardware filtering against all unsolicited inbound traffic.
All times are: Eastern Time (US & Canada) (change) Goto page Previous1, 2, 3, 4, 5, 6, 7, 8, 9
Page 5 of 9
You can post new topics in this forum You can reply to topics in this forum You can edit your posts in this forum You can delete your posts in this forum You can vote in polls in this forum
Home
Forums
Home
FAQ
Profile
Private Messages
Log in
Windows Other