# Browser not resolving names

Discussion in 'Networking' started by matulike, Aug 8, 2006.

Not open for further replies.

Joined:
Aug 7, 2006
Messages:
33
Hi, I put this in the OS section before, but I think it's maybe more appropriate here? -

Hi,

I've got a weird problem! My (WinXPProSP2) PC will not resolve any DNS names in a browser - I've tried IE and FireFox. BUT it will resolve from a command prompt!
Also no other applications are able to resolve: eg cannot update anti virus or any other software update, cant connect to MSN messenger, etc.
The even weird-er thing is that I CAN resolve fine within a virtual machine! That's what I'm using now, a SuSe virtual machine on an XP Pro SP2 host.

Well, just wondering if anyone had come across a similar problem?!

I think this only happened after I removed Panda anti virus and tried to install Kapersky - but the installer I had didn't work so I put McAfee 8 (Corp from work) on. I can't see how that would have this effect though.

I've had a look at my hosts file, it only has one entry: 127.0.0.1 localhost.
I also have a 'hosts.msn' file too - but that has the same single entry.

I've also recently removed a VPN client. NetScreen Secure remote. The only reason I mention that is that I had to add a DNS suffix for the domain I was connecting to, but I have set everything back to how it was/should be!

Any help'll be hugely appreciated!

2. ### datamonger

Joined:
Jul 25, 2006
Messages:
244
matulike,

Go to a command prompt. Type: ipconfig /all>c:\ipconfig.txt
Then open the ipconfig.txt file, copy all and paste it into a reply.

Joined:
Aug 7, 2006
Messages:
33
OK, here it is - note the 2 Virtual machine adapters...they've been there for a while and shouldn't cause any problems...besides, I'm actually typing this over one of those connections as it's the only way I can resolve DNS in a browser (in a VM!!)

Windows IP Configuration

Host Name . . . . . . . . . . . . : dada

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet8

Physical Address. . . . . . . . . : 00-50-56-C0-00-08

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.232.1

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet1

Physical Address. . . . . . . . . : 00-50-56-C0-00-01

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.31.1

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Desktop Adapter #4

Physical Address. . . . . . . . . : 00-07-E9-39-54-B8

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.254.30

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.254.254

DNS Servers . . . . . . . . . . . : 87.194.0.66

192.168.254.254

80.253.114.39

87.194.0.67

82.197.65.252

Joined:
Aug 7, 2006
Messages:
33
In case it helps, here's a hiJackthis log too:

Logfile of HijackThis v1.99.1
Scan saved at 22:42:02, on 08/08/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5450.0004)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
c:\reskit\srvany.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\r_server.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
C:\WINDOWS\system32\vmnat.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\FTPRush\FtpRush.exe
C:\mirc\mirc.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\Program Files\VMware\VMware Workstation\vmware.exe
C:\Program Files\VMware\VMware Workstation\bin\vmware-vmx.exe
C:\WINDOWS\explorer.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Program Files\Norton Ghost\Agent\GhostTray.exe"
O4 - HKLM\..\Run: [Atomic.exe] C:\Program Files\Atomic Clock Sync\Atomic.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [kdx] C:\WINDOWS\kdx\KHost.exe -all
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125784848535
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1127733560625
O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{290F5AF4-DE46-4F13-8110-B23DB2B39331}: NameServer = 87.194.0.66,192.168.254.254,80.253.114.39,87.194.0.67,82.197.65.252
O17 - HKLM\System\CCS\Services\Tcpip\..\{D601BDF1-6317-44F8-B808-0B9255E54EC7}: NameServer = 82.197.65.252,80.253.114.39,192.168.254.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE1652CC-236E-49F6-8EB5-0B3A3C9A1018}: NameServer = 192.168.254.254,82.197.65.252,80.253.114.39
O17 - HKLM\System\CS1\Services\Tcpip\..\{290F5AF4-DE46-4F13-8110-B23DB2B39331}: NameServer = 87.194.0.66,192.168.254.254,80.253.114.39,87.194.0.67,82.197.65.252
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ioFTPD - Unknown owner - c:\reskit\srvany.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\KService\KService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe" /service (file missing)
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: twdns - Unknown owner - C:\WINDOWS\system32\dns\bin\named.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\winvnc4.exe" -service (file missing)

-------------------------

That last entry is a strange one - the VNC service threw up a few errors a few days ago when I started the PC up. But seems to have been alright since....anyway...there it is, laid bare ;o) Enjoy!

5. ### datamonger

Joined:
Jul 25, 2006
Messages:
244
The problem could lie in the fact that you have 5 DNS servers. It appears that you are behind a router so I would suggest that you remove all of the DNS servers except for 192.168.254.254.

You may want to write the others down. You could also see if you can even ping them to see if they are still online. What could be happening is that the applications are going to the first DNS server listed, 87.194.0.66, but time out before moving on to the second DNS entry.

Joined:
Aug 7, 2006
Messages:
33
Tried that, still no luck. One other thing I have noticed is that in my network connections properties the 'Internet Gateway Device' that had been picked up (by UPnP I guess) says disabled - and when I try to enable it fails.

All this, but I am connected and downloading from an FTP site and on several IRC channels/servers - ONLY BY IP THO¬!!

7. ### datamonger

Joined:
Jul 25, 2006
Messages:
244
Could you do an nslookup for a few sites and post the results here? You may have to try each one more than once.

I just tried nslookups for each of your DNS servers (except the 192.168.254.254 one). Only the third one, 87.194.0.67, returned with something. It claims to be ns2.betherenow.co.uk. That seems to be a legit DNS server. You may want to make this your primary DNS server. One additional thing to look at is to make sure that your router is getting the proper DNS servers from your ISP. If you are sending DNS requests to your router and it does not have the proper entries then there is a dead end there as well.

8. ### TerryNetModerator

Joined:
Mar 23, 2005
Messages:
77,498
First Name:
Terry
You can access web sites by name but browsers don't work. Often means a bad winsock. If you have Windows XP SP2 ...

Winsock fix

(From JohnWill)

Try this Automated WINSOCK Fix for XP: http://www.spychecker.com/program/winsockxpfix.html

Reboot and see if the situation changes. If that doesn't do it, try these two commands.

TCP/IP stack repair options for use with Windows XP with SP2.

For these commands, Start, Run, CMD to open a command prompt.

Reset WINSOCK entries to installation defaults: netsh winsock reset catalog

Reset TCP/IP stack to installation defaults. netsh int ip reset reset.log

9. ### blaqDeaph

Joined:
Nov 22, 2005
Messages:
869
Ok, first up you need to test the connection itself by pinging a site by the IP. google is a good site.

Then, you need to change one of the DNS servers to something that your ISP uses (don't rely on the routerto act as a DNS server). If you have another computer then google up "<isp name> dns server"

Or else, give them a call and ask them the address for their recommended DNS server.

Joined:
Aug 7, 2006
Messages:
33
The DNS servers are right as I'm able to do a successful nslookup against them.

I'm trying the winsock fix - but need to reboot....doing video conv so have to wait for that to finish...

Joined:
Aug 7, 2006
Messages:
33
Thanks for that TerryNet - this < http://www.spychecker.com/program/winsockxpfix.html> worked.

I owe you! I NEVER would've thought of that! I guess it's a result of removing the VPN client software as that would've had most effect on the TCP/IP stack.

Well, anyway, thanks!

Joined:
Aug 7, 2006
Messages:
33
HELP!!

since doing this fix, I've gone to work this morning and can't connect remotely to my PC at all! Also the FTP server running on it is not connecting either.
I've asked my gf to have a quick look cos she's at home, but it looks like everything's OK. All the services are started, nothing's changed (ie ports or IP's) but I cant connect via RDP, RAdmin, VNC... It seems that no inbound sessions are being permitted.

I've asked her to have a look at the firewall settings (on the LAN connection - Windows firewall) and it's off - as it should be. My router has a firewall configured, with the right ports forwarded etc. Yesterday I could connect to my PC with no problem from work, today - since doing the Winsock fix - I can't. Even to the FTP server....

Any ideas? What would resetting the winsock catalog do to inbound connections?!

Any help hugely appreciated!!

13. ### JohnWillRetired Moderator

Joined:
Oct 19, 2002
Messages:
106,418
It shouldn't have any effect on the inbound connections. However, you may have to reinstall the applications in question, since the WINSOCK repair has probably yanked their "shims" out.

I'd re-install and see if that helps...

Joined:
Aug 7, 2006
Messages:
33
Oh you're joking....so I'll have to reinstall my FTP server, my Radmin, VNC, what about remote desktop (mstsc) ? I can't reinstall that as it's part of the XP OS...

15. ### JohnWillRetired Moderator

Joined:
Oct 19, 2002
Messages:
106,418
I'm saying some of the problems "might" be the WINSOCK. However, if you had to repair it, perhaps there's a reason it was broken.

One side effect of this may have been the XP firewall got turned on, did you check that?

As Seen On