|
|
MICGL
|
|
Dec 11, 2006 13:23:56 GMT
|
|
After 5 minutes after reboot, cannot connect to any websites on port 80 (http). Still can connect to https or any other ports (21, 110, 25, etc).
Have current virus definitions from Symantec Ent AntiVirus protection. Windows XP Pro, SP2.
Scanned with Lavesoft Ad-Aware, Spybot, Windows Defender and no issues found. made firewall disabled.
I looked in the event log, msconfig and found nothing suspecious.
All other computer on the same network do not have these issues. Computer is not part of domain.
The problem started after removing Cisco VPN client (ttok me 10 reboots to get rid of it).
Thanks in advance!
|
|
|
Note: If you are the author of this question and wish to assign points to any of the answers, please login first.For more information on assigning points ,click
here
|
|
|
Sort Answers By:
Date or Points
|
|
George Liu
|
|
Dec 11, 2006 14:20:09 GMT
5 pts
|
|
ipconfig see if the device is up
if network is up, then telnet website 80 to get error message |
|
|
MICGL
|
|
Dec 11, 2006 14:29:00 GMT
N/A: Question Author
|
|
Device is ofcourse up. Otherwise other ports wouldn't work. Telneting gives a generic message. Connecting To www.yahoo.com
port 80: Connect failed |
|
|
Jorge Pinto Leite
|
|
Dec 12, 2006 08:23:29 GMT
1 pts
|
|
Hi
Is your domain server using a firewall (like ISA) to block unauthorized access with http?
Check this. Perhaps joining domain (at least just for test!).
Good luck
Jorge |
|
|
George Liu
|
|
Dec 12, 2006 11:43:45 GMT
2 pts
|
|
Could be a routing issue or DNS hijacked.
try
tracert the_web_site |
|
|
MICGL
|
|
Dec 12, 2006 13:06:14 GMT
N/A: Question Author
|
|
tracert shows fine. The issue is with port 80 only.
We don't use ISA or something like it. Computer is not member of domain. What addition to the domain will give me? Remember in works for 5-8 minutes after reboot. |
|
|
MICGL
|
|
Dec 12, 2006 14:18:42 GMT
N/A: Question Author
|
|
Some more troubleshooting info.
Malware/Spyware didn't reveal anything serious.
Booting in save mode w/Networking does not produce the problem (http websites accessible after 16 minutes of running).
Booting in Selective Startup with only MS services running (No startup items loaded and no non-MS services loaded), produces the behavior in question- http websites are not accessible after 7-9 minutes after reboot. websites on port 81, etc runninf OK still. It's obviously that something within XP produces this issue as nothing else is running.
At that moment following services were running (image attached).
Also attaching TCTView log and the list of DLLs loaded ( used ListDlls tool)- all within ZIP file.
Thanks in advance! |
|
|
MICGL
|
|
Dec 12, 2006 14:34:27 GMT
N/A: Question Author
|
|
|
I forgot to mention that Firefox shows very same behavior, so the issue not with IE. |
|
|
George Liu
|
|
Dec 13, 2006 09:20:41 GMT
4 pts
|
|
The IE or FIrefox or proxy issues were eliminated by directly trying telnet xxx 80
Lets start with the beginning,
DOes this host have private IP? If yes, could it connect to any hosts in local domain?
What is the output of netstat -an |
|
|
MICGL
|
|
Dec 13, 2006 12:37:05 GMT
N/A: Question Author
|
|
Cannot access local servers too.
telnet testserver 80
Connecting To testserver...Could not open connection to the host, on port 80:
Connect failed
For netstat see attachment. Thanks! |
|
|
George Liu
|
|
Dec 15, 2006 16:21:56 GMT
4 pts
|
|
FRom the output of netstat, you have port 80 open on the local machine.
post the following,
route print
ipconfig /all
Is 192.168.1.2 a Domain server? |
|
|
MICGL
|
|
Dec 15, 2006 18:54:48 GMT
N/A: Question Author
|
|
192.168.1.2 is domain NT4 controller, but this machine is not on the domain and workgroup has different name.
Files you are asking attached. I've spend already 3 days with Microsoft support and 2 days myself. Thanks a lot! |
|
|
MICGL
|
|
Dec 18, 2006 18:14:37 GMT
N/A: Question Author
|
|
After 10 days and numerous hours spent troubleshooting myself and with 4 Microsoft Support people, the 5th MS guy helped me!
Apparently my uninstalled Cisco VPN Client didn't uninstall fully leaving some keys-services ( invisible sercices that one can only observe from Recovery Console. As per infomation on http://www.cisco.com/univercd/cc/td/doc/product/vpn/client/rel401/401_clnt.htm, logged in as Administrator (that would be the name, not only having rights), navigated to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vsdatant in Registry Editor and changed Start parameter value to 3 which disabled the corrupt component of Zonealarm. |
|
|
Bill Berryman
|
|
Mar 6, 2007 23:58:10 GMT
Unassigned
|
|
MICGL - you absolutely rock! I had the identical problem and was about to re-install windows from scratch after being unable to resolve this issue.
I spent some time on the CISCO web site looking at issues with the VPN client and there was nothing that pointed me at the resolution. In my mind, this is a critical-shipstopper level issue with the vpn client and I am very disappointed with CISCO for not addressing this issue.
I spent a lot of time googling for similar problems and hitting your post has saved me hours and hours of work.
If there was a way to buy you a beer - I'd gladly do it. |
|
|
TGT
|
|
Mar 7, 2007 05:17:04 GMT
Unassigned
|
|
I too have the problem as MICGL described. Difference is -
1. My OS is Win98 non-SE.
2. Have never installed Cisco VPN.
3. Starting up Zonealarm (free edition) fixes the problem! Even just starting and exiting ZA, then browse with or without Kerio, works.
To MICGL & Bill -
From your post I take it that the solution is to fix vsdatant value to 3 in the registry? I'm away from my system at the moment, so not sure if that item even exist in my registry, as it seems to be a WinNT (and derivatives) thing.
Anyway will be trying the above reg fix. Don't care if it clobbers ZA - have been wanting to ditch ZA for a long time. If I uninstall ZA, will it fix the problem? |
|
|
TGT
|
|
Mar 8, 2007 04:36:23 GMT
Unassigned
|
|
|
To cut a long story short, uninstalling Zonealarm solved the problem for me. Thank you MICGL. |
|
|
MICGL
|
|
Mar 8, 2007 11:43:12 GMT
N/A: Question Author
|
|
I'm glad you didn't have to waste time on it.
For everyone who wants to have a beer with me, I'm in Marin County, North from San Francisco. :) |
|
|
TGT
|
|
Mar 9, 2007 01:51:49 GMT
Unassigned
|
|
To MICGL -
If you happen by London (UK) let me know. |
|
|
TheWolf
|
|
Jul 16, 2007 10:37:06 GMT
Unassigned
|
|
MICGL,
I have to tell you, you are da'man!! Thank you for suggesting that solution!
I spent every evening of a whole week (while on a client engagement over in Europe) in trying to solve the same problem you had, and went through myriads of advises, all of which cost time to implement but at the end had no result.
Disabling the vdatant.sys finally ended my nightmare.
By the way, some more information for others who may have the same problem:
1. Even if you think you never installed ZoneAlarm (like me), still look out for vdatant.sys, it may be there!
2. You cannot change the registry setting when vdatant.sys is loaded/running, even if you have Admin privileges. You need to boot your machine in safe mode (with or without networking), and then you can edit the registry setting to disable the driver.
3. I was experiencing issues with the two services IPsec and WebClient ... for (unknown) reasons the event log showed them being started, but shortly thereafter stopped! (WebClient actually went into a state "stopping", and never recovered).
Well, both problems went away after disabling vdatant.sys |
|
|
TGT
|
|
Jul 31, 2007 02:33:39 GMT
Unassigned
|
|
Wolf,
Are you sure it was vdatant and not vsdatant?
In my case (Win98) it was ZA's vsdata95.vxd that preloaded itself during Win98 startup. It caused the problem if you don't run the visible ZA client.
Note: after uninstalling ZA in the usual way, I still had to clean up the Registry, and manually delete various vs* such as vsdata*.*, vsinit*.* files in Windows/System folder, and various other debris such as ZA's log files. |
|
|
TheWolf
|
|
Jul 31, 2007 11:41:15 GMT
Unassigned
|
|
TGT,
You are right ... the correct filename is "vsdatant.sys", in my case found under c:\windows\system32.
As mentioned, I was following MICGL's advise, but unfortunately misspelled in my summary report. Good catch!
As to your comment -- can we assume that indeed all vsdata*.* and vsinit*.* can safely be removed from the system if you are not using ZA ? |
|
|
TGT
|
|
Aug 1, 2007 03:29:28 GMT
Unassigned
|
|
Wolf,
After uninstalling ZA on my Win98 system (don't remember if I used ZA's uninstaller direct or via Control Panel's applet), I actually checked the property of each remaining vs file to confirm it was part of ZA's bloatware, before deleting it.
Anyway, I am now using Kerio with no problem in the relevant areas relating to internet, as far as I can tell (not saying there are no problems in other areas with my Win98 - such as playing no. 9 DVDs, reinstalling HP 6100 printer driver etc - but can't see they are related to deleting a vs file, and those problems predate the removal of ZA anyway). |
|
|
TheWolf
|
|
Aug 1, 2007 17:55:28 GMT
Unassigned
|
|
TGT,
Thanks for the info, I am going to hunt down the other vs - files then. |
|
|
Daniel Fajardo
|
|
Sep 7, 2007 08:51:23 GMT
Unassigned
|
|
MICGL MANY MANY thanks.
I tried everthing...
netsh winsock reset catalog commnad, WinsockFix, iefix and HostsXpert applications and nothing really worked.
Thanks to TheWolf because he said us that this should be done in Safe Mode and by the Administrator user.
NOTE: I don't have any Zone Alarm software installed. |
|
|
Matt Burch
|
|
Sep 12, 2007 15:58:41 GMT
Unassigned
|
|
Just wanted to drop my two cents in on this conversation. I am running Win XP, and have the Cisco VPN client installed. I experience this exact problem, but the Cisco VPN service was just stopped (I had disabled it because it was interfering with my TFTP server).
Starting the service again finally allowed me to browse the web. =)
Thanks MICGL, and the awesome power of google. |
|
|
Jason Missinne
|
|
Jun 5, 2008 15:57:57 GMT
Unassigned
|
|
|
Hey Guys,\\I really do not know much about computers and all of ther stuff that you were talking about, I was just searching to find a fix for my problem and you guys fixed it. I cannot say thank you enough, I had my offices IT guy take a look at my laptop and he could not figure it out. But doing what you guys suggested did it. Thanks again |
|
|
RTin
|
|
Jul 16, 2008 13:25:29 GMT
Unassigned
|
|
I just had this problem also, after an IT person told me to uninstall Zone Alarm after having some network problems. After reading this thread, I just downloaded and reinstalled Zone Alarm and---presto!---back on line with http sites!
This thread saved me a complete reinstall of Windows XP and all the fun. Thanks to all! |
|
|
SKS
|
|
Feb 7, 2009 20:10:13 GMT
Unassigned
|
|
My problem too started with uninstalling Cisco VPN Client along with several other applications... I struggled for 2 days and at last what solved my problem was re-installing Cisco VPN. I am not so technical, SO can anyone explain why the hell this should happen with Cisco VPN...does that Cisco VPN is corrupting my PC...
Thanks for sharing your knowledge and experience... |
|
|
contech
|
|
May 30, 2009 07:32:57 GMT
Unassigned
|
|
Hi,
I'm having the same problem with 3 laptops (two xp pro, one vista business) they are part of our sbs2008 domain.
I do not have any cisco vpn or zone alarm installed.
our system is protectded by a hardware fortigate firewall with clients on the laptops, and the trend micro worryfree advanced as antivirus.
the VS-files you guys are talking about are not present on the vista laptop registry.
the dos commands mentioned, they do not help neither.
I'm googling 2 weeks without finding a fix :-)
any idee?
thanks & regards
Marco |
|
Printable version
