Can't surf on internet

[lukor]

2) When i try to telnet do localhost:12080 i get connected, but if i try to write anything i get disconnected istantanely.

This is the problem. WebShield must be able to accept connections and also accept http requests on them. Why is this, I don't know. Please try to download

http://www2.asw.cz/~rypacek/ashwebsv.zip

and unzip it into c:\program files\alwil software\avast4\ (or equivalent in your language).

This is the debug version of the software (and will be replaced on reboot during automatic avast's integrity check).
You will be able to overwrite ashWebSv.exe only when WebShield is terminated. When the debug version version of WebShield is started, it will start to create pretty detailed log in c:\program files\alwil software\avast4\data\log\ashwebsv.dbg.

Try to access the internet, then terminate WebShield and send me the debug log. Perhaps we will see more.

Also you can download and run TCPVIEW from sysinternals.com and post here the list of running processes and their open connection. This might also give a clue.

[CyberPK]

Ok, i've done the log. You can download it at http://tsaclan.netsons.org/files/AshWebSv.dbg
In this log there are some of my attmpt to surf on internet withous success.
Thenk you for your help.

[lukor]

Just a small comment, the dump file is truncated at the end - apparently you have not terminated WebShield before copying the dump. The rest of the file is flushed to the disk during the process shutdown.

[CyberPK]

OK. Just done.
You can use the same link of before.

[CyberPK]

 OK. Just done.
You can use the same link of before.

[ivanmmj]

I disabled the web shield and it seems to be running fine, now.

[CyberPK]

you seem to have the my same problem.
Do you use msn messenger? I think is related to it because my avatr icon change by itself.
Try do do what lukor say.
Use the debug version to make a debug log for lukor.

[lukor]

What is really interresting in the log file is the error: 10055 during read operation on socket. It says:

An operation on a socket could not be performed because the system lacked sufficient buffer space or because a queue was full.

At first sight it looks like an error returned by the firewall. But I know you are using Sygate, which is totaly impotent in detecting localhost communication. So is there a possibility some other software is running on your system that will block WebShield of the network? I can hardly imagine that on correct system there would indeed be no memory for the buffer, as the message says. Besides, the Winsock function WSARecv should not return this error - again another clue that 3rd party software is in action.

[CyberPK]

There is no firewall. I have always used the windows firewall + sygate firewall and it worked always correctly. Now i'm thinking to a worm or to a virus, because my msn messenger change my avatar image and my personal message by itself from the problem started.
I use also software as emule and azureus, but before no any problem
What do you need to understand correctly my problem and help me?

[lukor]

Can you try this:
http://support.microsoft.com/?id=196271


?

[CyberPK]

MaxUserPort Data was already 65534...
And now?

[lukor]

And now?

Hijackthis log

[CyberPK]

http://tsaclan.netsons.org/files/hijackthis.log

[lukor]

and a screenshot from this:

http://www.cexx.org/LSPFix.exe

 

[CyberPK]

http://tsaclan.netsons.org/files/screenshot.jpg

Don't look too much to my desktop... It need to be cleaned