Jump to content
nosirrah

Odd glitch today .

Recommended Posts

For a while I have been using LSPFix and Winsock fix in combination to rip the entire LSP/winsock out and then rebuild it after a malware cleanup .

Today I used LSPfix to remove everything and then SAS's LSP/winsock fix to rebuild . On reboot I could dial in but could not surf with IE7 . I tried to use the SAS repair a second time and rebooted , still connected but could not surf .

I used winsock fix and then rebooted . IE7 functioned normally afterwords .

LSPFix : http://cexx.org/lspfix.htm .

Click "I know what I am doing" , move all entries from left to right and then click finish .

Winsock fix : http://www.tacktech.com/display.cfm?ttid=257 .

Spybot has a good LSP/winsock viewer and there are big differences between what winsock fix installs and what the SAS LSP/winsock repair does .

After winsockfix :

Protocol  0: MSAFD Tcpip [TCP/IP]
       GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol  1: MSAFD Tcpip [uDP/IP]
       GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol  2: MSAFD Tcpip [RAW/IP]
       GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol  3: RSVP UDP Service Provider
       GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
   Filename: %SystemRoot%\system32\rsvpsp.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol  4: RSVP TCP Service Provider
       GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
   Filename: %SystemRoot%\system32\rsvpsp.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol  5: MSAFD nwlnkipx [iPX]
       GUID: {11058240-BE47-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP Novell Netware UPX protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD nwlnkipx *

Protocol  6: MSAFD nwlnkspx [sPX]
       GUID: {11058241-BE47-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP Novell Netware SPX protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD nwlnkspx *

Protocol  7: MSAFD nwlnkspx [sPX] [Pseudo Stream]
       GUID: {11058241-BE47-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP Novell Netware SPX protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD nwlnkspx *

Protocol  8: MSAFD nwlnkspx [sPX II]
       GUID: {11058241-BE47-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP Novell Netware SPX protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD nwlnkspx *

Protocol  9: MSAFD nwlnkspx [sPX II] [Pseudo Stream]
       GUID: {11058241-BE47-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP Novell Netware SPX protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD nwlnkspx *

Protocol 10: MSAFD NetBIOS [\Device\NwlnkNb] SEQPACKET 3
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 11: MSAFD NetBIOS [\Device\NwlnkNb] DATAGRAM 3
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 12: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3BBF674C-1113-41D3-B7DF-E12A5AB9EF53}] SEQPACKET 0
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 13: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3BBF674C-1113-41D3-B7DF-E12A5AB9EF53}] DATAGRAM 0
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 14: MSAFD NetBIOS [\Device\NetBT_Tcpip_{FB458613-4778-4C16-92F4-0450C437C848}] SEQPACKET 1
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 15: MSAFD NetBIOS [\Device\NetBT_Tcpip_{FB458613-4778-4C16-92F4-0450C437C848}] DATAGRAM 1
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 16: MSAFD NetBIOS [\Device\NetBT_Tcpip_{74046427-157B-460E-8CF1-35C9520B9896}] SEQPACKET 2
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 17: MSAFD NetBIOS [\Device\NetBT_Tcpip_{74046427-157B-460E-8CF1-35C9520B9896}] DATAGRAM 2
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Namespace Provider  0: Tcpip
       GUID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
   Filename: %SystemRoot%\System32\mswsock.dll
Description: Microsoft Windows NT/2k/XP TCP/IP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: TCP/IP

Namespace Provider  1: NTDS
       GUID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
   Filename: %SystemRoot%\System32\winrnr.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\winrnr.dll
DB protocol: NTDS

Namespace Provider  2: Network Location Awareness (NLA) Namespace
       GUID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
   Filename: %SystemRoot%\System32\mswsock.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: NLA-Namespace

Namespace Provider  3: NWLink IPX/SPX/NetBIOS Compatible Transport Protocol
       GUID: {E02DAAF0-7E9F-11CF-AE5A-00AA00A7112B}
   Filename: %SystemRoot%\System32\nwprovau.dll
Description: Microsoft Windows NT/2k/XP Novell Netware name space provider
DB filename: %SystemRoot%\system32\nwprovau.dll
DB protocol: NWLink IPX/SPX/NetBIOS*

After SAS repair :

Protocol  0: MSAFD Tcpip [TCP/IP]
       GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol  1: MSAFD Tcpip [uDP/IP]
       GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol  2: MSAFD Tcpip [RAW/IP]
       GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol  3: RSVP UDP Service Provider
       GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
   Filename: %SystemRoot%\system32\rsvpsp.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol  4: RSVP TCP Service Provider
       GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
   Filename: %SystemRoot%\system32\rsvpsp.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol  5: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A7E519B4-9133-4894-BD41-B63B88754ADE}] SEQPACKET 0
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol  6: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A7E519B4-9133-4894-BD41-B63B88754ADE}] DATAGRAM 0
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol  7: MSAFD NetBIOS [\Device\NetBT_Tcpip_{4975CD19-974F-4558-A672-EAA3548D9B25}] SEQPACKET 1
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol  8: MSAFD NetBIOS [\Device\NetBT_Tcpip_{4975CD19-974F-4558-A672-EAA3548D9B25}] DATAGRAM 1
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol  9: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5493DD7E-8B68-439A-A3B5-00E12AEBCFC7}] SEQPACKET 2
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 10: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5493DD7E-8B68-439A-A3B5-00E12AEBCFC7}] DATAGRAM 2
       GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
   Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Namespace Provider  0: Tcpip
       GUID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
   Filename: %SystemRoot%\System32\mswsock.dll
Description: Microsoft Windows NT/2k/XP TCP/IP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: TCP/IP

Namespace Provider  1: NTDS
       GUID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
   Filename: %SystemRoot%\System32\winrnr.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\winrnr.dll
DB protocol: NTDS

Namespace Provider  2: Network Location Awareness (NLA) Namespace
       GUID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
   Filename: %SystemRoot%\System32\mswsock.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: NLA-Namespace

Share this post


Link to post
Share on other sites

Thanks for the info - each fix "attacks" things differently. We are adding additional repairs, and we may adjust the LSP version.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...