Hello,

One of the moderators responded to a recent post from someone else about a problem I have been having for months now. I am still trying to fix it to avoid having to reformat my hard drive if possible. My Sprint PCS wireless connection card keeps dropping my connection every 15 miuntes like clockwork.

I got hit with Spy Falcom and a couple trojan horses. I was smart enough not to believe the warnings that attempted to direct me to their product to "fix" the problem. But I could not get rid of the Spy Falcom and my browser home page kept sending me to their site every time. My buddy cleaned up my laptop and all was well. Only thing I added before it went FUBAR again was Yahoo Messenger (cannot uninstall Yahoo Extras now either, not even with CCleaner). About three days after that it was dropping connection.

The moderator said to post my hijack this log, so here it is. PLEASE HELP!

Thanks!

~Steve

Logfile of HijackThis v1.99.1
Scan saved at 2:45:43 PM, on 6/25/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\acs.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\ati2evxx.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINNT\system32\bmwebcfg.exe
C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe
C:\PROGRA~1\Compaq\COMPAQ~4\CPQWEB~1\WebDmi.exe
C:\PROGRA~1\Compaq\COMPAQ~3\hibserv.exe
C:\WINNT\system32\hidserv.exe
C:\Program Files\UTStarcom\Sprint\Sprint PCS Connection Manager\PnCUtilityService.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\snmp.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\PROGRA~1\Compaq\COMPAQ~4\cpqdmi.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\Compaq\COMPAQ~4\CHKADMIN.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Compaq\Compaq EAB Software\cpqek.exe
C:\Program Files\Compaq\HotKey Software\hkss.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINNT\system32\Atiptaxx.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Plaxo\2.8.1.2\PlaxoHelper.exe
C:\Program Files\UTStarcom\Sprint\Sprint PCS Connection Manager\CMPnC.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\UTStarcom\Sprint\Sprint PCS Connection Manager\bmctl.exe
C:\WINNT\system32\wuauclt.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Administrator\Desktop\foo\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/yco...search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://jump.altavista.com/avie5/searchpane
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files\Compaq\Compaq Management Agents\cpqWebDmi\DmiAgent\Eng\blank.htm
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ChkAdmin] C:\PROGRA~1\Compaq\COMPAQ~4\CHKADMIN.EXE
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [cpqek] C:\Program Files\Compaq\Compaq EAB Software\cpqek.exe
O4 - HKLM\..\Run: [hkss] C:\Program Files\Compaq\HotKey Software\hkss.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Program Files\Plaxo\2.8.1.2\PlaxoHelper.exe -a
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
O4 - Global Startup: CMPnC.exe.LNK = C:\Program Files\UTStarcom\Sprint\Sprint PCS Connection Manager\CMPnC.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O10 - Broken Internet access because of LSP provider 'bmnet.dll' missing
O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com/
O14 - IERESET.INF: MS_START_PAGE_URL=http://www.yahoo.com/
O17 - HKLM\System\CCS\Services\Tcpip\..\{532E901C-92E5-43CF-B9AB-E1FB3E564661}: NameServer = 68.28.50.11 68.28.58.11
O20 - Winlogon Notify: WRNotifier - C:\WINNT\SYSTEM32\WRLogonNTF.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINNT\system32\acs.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\system32\ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Bytemobile Web Configurator (bmwebcfg) - Bytemobile, Inc. - C:\WINNT\system32\bmwebcfg.exe
O23 - Service: Compaq Local Alerter (CPQALERT) - Compaq Computer Corporation - C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe
O23 - Service: cpqdmi - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~4\cpqdmi.exe
O23 - Service: Compaq DMI Web Agent (cpqWebDmi) - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~4\CPQWEB~1\WebDmi.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Hibernation - Unknown owner - C:\PROGRA~1\Compaq\COMPAQ~3\hibserv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Pantech&Curitel Utility Service - Sprint Spectrum, L.L.C - C:\Program Files\UTStarcom\Sprint\Sprint PCS Connection Manager\PnCUtilityService.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Win32Sl (WIN32SL) - Intel - C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe

Download LSPFix by clicking here:
http://www.snapfiles.com/get/lspfix.html
Or here:
http://www.cexx.org/lspfix.htm



To run it, be sure you are NOT connected to the Internet.

The easiest way to fix the broken chain is to use a freeware utility called LSPFix.exe:
http://cexx.org/lspfix.htm (copy to a floppy or pen drive, if necessary –182K file)



LSPFIX tutorial here:
http://www.bleepingcomputer.com/foru...howtutorial=59

If you just want to fix a broken chain, and the problem DLL has already been removed for some other reasons, you can just click the Finish button, designated by the green box in Figure 1. LSP-Fix will automatically fix the LSP chain and hopefully restore connectivity back to the network.

Please, make sure that all IE browser windows and internet connections are closed. Run the program (LSPFix) and click the "I know what I'm doing" box.

Highlite all instances of "bmnet.dll" and move them to the "Remove" side and click finish. Don't remove anything else there.

Do a full power down REBOOT.



Let us know if the following line entry is no longer present and whether your connect drop issue has now been resolved?:

O10 - Broken Internet access because of LSP provider 'bmnet.dll' missing

Yup!

Once I did the Hijack This thing, I saw that entry Broken Blah Blah Blah... And I have LSP Fix, and see that bmnet.dll seems to be in the remove box anyway. I did not know you could not be online while running the LSP Fix. I am going to give it a try and will let you know if it fixes it. If not, any other ideas?

Thanks!

~Steve

Originally Posted by VopThis

Download LSPFix by clicking here:
http://www.snapfiles.com/get/lspfix.html
Or here:
http://www.cexx.org/lspfix.htm



To run it, be sure you are NOT connected to the Internet.





Please, make sure that all IE browser windows and internet connections are closed. Run the program (LSPFix) and click the "I know what I'm doing" box.

Highlite all instances of "bmnet.dll" and move them to the "Remove" side and click finish. Don't remove anything else there.

Do a full power down REBOOT.



Let us know if the following line entry is no longer present and whether your connect drop issue has now been resolved?:

O10 - Broken Internet access because of LSP provider 'bmnet.dll' missing

Thanks a lot!!!

I tried to do what you said, and somehow I fixed the problem or it went away at least. I tried to LSP Fix the bmnet.dll issue, but it would not go away. Some other things that looked similar showed up in the window on the left of issues that may be present. I followed your advice and left them alone, but wonder if they might be problems anyway. I can send them to you for review if you like. I don't think they all show up on the HJT list either.

Anyway, when the bmnet.dll did not go bye bye, I renamed and moved it, then did reboot again. Then I could not connect to the net at all until I named it back to bmnet.dll and moved it back to the original folder it was in to begin with. Now my connection is fine. WEIRD but as long as it remains okay I am cool.

Wanted to give you an update! any more advice is greatly appreciated! Thanks again.


~CaboWaboSifu

-----------------------------------------------------------------------------------

Originally Posted by VopThis

Download LSPFix by clicking here:
http://www.snapfiles.com/get/lspfix.html
Or here:
http://www.cexx.org/lspfix.htm



To run it, be sure you are NOT connected to the Internet.





Please, make sure that all IE browser windows and internet connections are closed. Run the program (LSPFix) and click the "I know what I'm doing" box.

Highlite all instances of "bmnet.dll" and move them to the "Remove" side and click finish. Don't remove anything else there.

Do a full power down REBOOT.



Let us know if the following line entry is no longer present and whether your connect drop issue has now been resolved?:

O10 - Broken Internet access because of LSP provider 'bmnet.dll' missing

Highlite all instances of "bmnet.dll" and move them to the "Remove" side and click finish. Don't remove anything else there.

It now appears that it was not necessary to REMOVE the file (the system wouldn't allow it, anyway) - it was only necessary to FIX THE BROKEN CONNECTION by running LSPFIX:

If you just want to fix a broken chain, and the problem DLL has already been removed for some other reasons, you can just click the Finish button

(and the problem appears to have fixed itself for that reason).





To help avoid serious infection again, please look carefully at this post for some excellent preventative measures. Prevention must be made the first line of defense to improve upon.





To reduce the re-infection potential for malware and protect your PC against spyware, here are a few helpful suggestions:

1. Keep Windows and Internet Explorer current with the latest critical security updates from Microsoft . This will patch many of the security holes through which attackers can gain access to your computer . You CANNOT complete this update using an alternate browser – you must use Internet Explorer.
   http://v5.windowsupdate.microsoft.com/v5co...t.aspx?ln=en-us
   http://www.microsoft.com/windows/ie/default.asp
   
   • http://www.securityfocus.com/news/11273
     If you surf to questionable (blockable) parts of the Web, you could encounter sites that compromise your PC without any user interaction. In experiments [reported Aug 2005], Microsoft identified 752 specific addresses owned by 287 Web sites that contain programs able to install themselves on a completely unpatched Windows XP system. Also, be aware that the WinXP Service Pack 2 was an update that focused almost exclusively on security. Also reported was that a fully patched Windows XP SP2 system cannot be compromised by any such discovered rogue Web sites.
   
   
2. Run your antivirus software regularly, and to keep its definitions up-to-date. If you are thinking about switching (using a real-time AV tool only one at a time), there are some good free Antivirus programs that are decent, including AVG and Avast!.
   AVG: http://free.grisoft.com/doc/1
   Avast: http://www.avast.com/eng/avast_4_home.html
   
   
3. In addition to using Ad-aware, consider using another free malware scanning/removal program :
   Adaware SE: http://www.download.com/Ad-Aware-SE-Person...ubj=dl&tag=top5
   Spybot S&D: http://www.download.com/Spybot-Search-Dest...tml?tag=lst-0-1
   Microsoft Windows Defender beta 2 : http://www.download.com/Microsoft-Wi...ml?tag=lst-0-1
   
   
4. Consider using a free firewall if you are not already using one (use only one firewall at a time – normally you will need to disable the MS firewall). Some good free ones (for incoming and added outgoing traffic protection) are:
   Kerio Personal Firewall: http://www.sunbelt-software.com/Kerio.cfm
   *** After 30 days, Kerio shuts down selected features, but will continue to run in 'free' mode.
   Zone Alarm: http://www.zonelabs.com/store/content/company/products/znalm/comparison.jsp?lid=ho_za
   
   It is not a bad idea to also consider using a Router/Hardware firewall device where you have a High-Speed Internet access connection. A software firewall may occasionally need to be disabled or it gets/remains disabled by someone or something. Such an added layer of security consistency has a lot of merit to it.
   
   
5. Consider using an alternate free browser for general web surfing but you must use IE for windows updates. The use of Firefox (or similar alternate) mitigates the many types of malware that are now possible when using IE ActiveX based components.
   Mozilla Firefox: http://www.mozilla.org/products/firefox/
   
   
6. Consider increasing your browser security by using these programs:
   SpywareGuard will help protect your homepage from being hijacked: http://www.javacoolsoftware.com/spywareguard.html
   SpywareBlaster will increase browser protection by blocking access to thousands of known malware sites by adding them to IE's restricted sites zone. It essentially blocks known- bad ActiveX program items from being installed or running on your computer. Download it here: http://www.javacoolsoftware.com/spywareblaster.html
   • If you use SpywareBlaster, you can also use a customblocklist to add even more entries into IE restricted sites zone. Go to this site for the current list and how to use instructions: http://customblockinglist.cjb.net/
     
   • IE-SPYAD is similar in that it adds thousands more known malware sites to IE's restricted zone. Download it here:
     http://www.spywarewarrior.com/uiuc/resource.htm
   
   
7. A HOSTS file can block Internet access to thousands of known-bad sites by not allowing you any easy browser access to such sites knowingly or unknowingly. Use HJT to determine if a current HOSTS file exists and any contents therein:
   • Run the HiJackThis tool and select ‘Open the Misc Tools section’.
   • Next select ‘Open host file manager’ button.
   • Use the ‘Open in Notepad’ button in XP/W2K or use WORDPAD if necessary [type wordpad.exe in the RUN box (Start>Run)] and load the FILE PATH identified in HJT.
   • Go to http://www.mvps.org/winhelp2002/hosts.txt . # Read the initial instructions #. Copy and paste (append or replace) the RELEVANT host address entry contents of that file into Notepad or Wordpad and save the updated file contents.
     
     EXCERPT:
     #start of lines added by WinHelp2002
     # [Misc A - Z]
     127.0.0.1 phpadsnew.abac.com
     127.0.0.1 a.abnad.net
     127.0.0.1 e.abnad.net
     127.0.0.1 www.accoona.com #[Adware-Accoona][Adware.Atoolb][Panda.Accoona]
     .
     .
     .
     #end of lines added by WinHelp2002

*Remember just like your primary anti-virus software, it is important to:

• Keep all of these programs up-to-date (using auto-updates where possible), and
• Use them on a regular (minimum weekly) basis.

REALITY CHECK:

• Who else uses your PC? What are the potential risks created by multiple (potentially loose cannon) users and why?
• What about bad luck, simple mistakes, and bad browsing choices (SEE: www.siteadvisor.com and their BLOG)?

ABOVE ALL, it is most imperative that users exercise "safe surfing" habits such as banning or at least verifying attachments (with scanning tools) before opening, and by not executing programs unless obtained from a trusted (or researched) source, etc.

Hey VopThis!

It's me again. The problem is back and LSP Fix won't cure it. I even tried to rename and move the file to trick it like last time. The issue returned when Spy Sweeper did an update online. I had no files in quarantine to my knowledge and when Webroot SS was doing the new update install it asked me if I wanted to keep the two files in quarantine. (Still does not show any in Q) Once the new install was done and rebooted, connection dropped again just like before. CRAP! I had a few weeks where it was just fine!

I have been trying to fix it without any luck. Searching for help online again. Do you have any ideas to help me please?! Aaaaaaggh!

Do I need to upgrade LSP Fix? That is where I am headed now. If you have any better ideas or know of any other good FREE fixes - even if I have to do some work, please let me know!

THANK YOU!

~Steve

[QUOTE=VopThis]It now appears that it was not necessary to REMOVE the file (the system wouldn't allow it, anyway) - it was only necessary to FIX THE BROKEN CONNECTION by running LSPFIX:

(and the problem appears to have fixed itself for that reason).

Try re-running the LSPFIX - and simply click the Finish button. LSP-Fix will automatically fix the LSP chain and hopefully restore connectivity back to the network.


Additionally, you may want to try and run 'WinSock XP Fix':

http://www.snapfiles.com/get/winsockxpfix.html

Vop,

Hey, I am open to trying the Winsock XP Fix, and it is sitting on my desktop, but my PC is older and runs Win 2000, not XP. Can I still use this? If not, then any other ideas? PLEASE HELP! THANKS!

~Steve

Originally Posted by VopThis

Try re-running the LSPFIX - and simply click the Finish button. LSP-Fix will automatically fix the LSP chain and hopefully restore connectivity back to the network.


Additionally, you may want to try and run 'WinSock XP Fix':

http://www.snapfiles.com/get/winsockxpfix.html

Your wireless setup appears to be quite unique:

http://www.google.ca/search?hl=en&q=...G=Search&meta=

What is the source of bmnet.dll and what is its purpose? Was it part of your wireless card driver (unlikely) - where did it come from? Can you uninstall or update it? Do you need it? Try contacting the appropriate (HW or SW) vendor with your problem:

http://www.castlecops.com/lsp-111.html
Bytemobile Optimization Client related? , http://www.bytemobile.com/html/Client_products.html

http://www.bytemobile.com/products/oc.html




There are numerous (mostly unsuccessful fix) examples where WinSockXPFix has been used with WIN2K (it is fairly common to use XP drivers and tools in WIN2K - same architecture base):

http://www.google.ca/search?hl=en&q=...G=Search&meta=


Run WinSockXPFix.exe and click "Reg Backup" to backup the Registry first. After this, click the "Fix" button and follow the instructions given by the tool.




Post your latest HijackThis LOG if there are still issues.