98se

[newme2]

hello
im trying to load windows on my sisters computer and getting error
c:\windows\net start
invalid value for binding
error 7323 network transport driver
error loading NDISHLP.sys.
i was trying to run the removal tool for ghost ,it found nothing i rebooted and this error comes up any ideas
thanks

[Cricket]

What are the system specs?

Have you tried any troubleshooting steps yet?

Are you using a genuine Win98SE CD?

Things to look consider...replace IDE cable, try another CD drive, try different RAM.

Cricket

[newme2]

i was just using it a minute ago reboot and can only get into safe mode,thats what im typing from now

[newme2]

i guess im not in safe mode just seems that way,i just press escape after that error comes up,but the computer is really choppy and seems like it is in safe mode.

[newme]

what i have been able to find out is it has to do with a network or modem ,she is not on a network or using a modem.strange this all happened after running a removal tool.the reason i was running the removal tool,was she couidnt get on google or other sites so i used the ip instead and google did work using the ip instead of the url.

[Cricket]

Go to this webpage and download the removal tool and run it on your sister's computer.

This may or may not be the fix, but the QHosts trojan does degrade system performance and does something with Google.

Cricket

[GaryRouth]

I'm glad Cricket translated the ghost-removal to Qhost removal, which makes a lot more sense (I'm confused enough normally). . .

By all means, try the Qhosts removal tool if you suspected any such infection [do a full system scan if you can for any other bugs as well].

Then from Safe Mode, remove your network adapter. Also remove any hardware you see listed in there that you know is not present anymore on your sister's machine. When rebooting, reinstall the network adapter.

I hope you weren't able to reload Windows, or you might have more work ahead of you. If you were doing an over-the-top, you'll want to visit Windows Update for all the security patches.

When done with all this, re-enable the virus boot sector protection in your Bios. [you disable it while doing any Windows install/reinstall]
. . . Gary

[Cricket]

Oh, sorry...you were already trying to run the Qhosts removal tool (I didn't make the "ghost" and "Qhosts" connection until you mentioned it Gary...I noticed the reference to Google and remembered I saw something about bookmarks to Google getting messed up by some trojan or something).

Is the antivirus definitions up to date and have you run a full system scan?

Follow Gary's instructions and let us know how it goes.

Cricket

[newme]

i will give it a go thanks(sorry for the typo)

[newme]

hello
i have dealt with the error ,now there is still the problem with the internet explorer,when i type in the url for google or some other sites ,it wont work unless you put in the ip address,i know there is ways to flush dns with xp,but this is 98 se,any suggestions ?

[GaryRouth]

Hi again

I believe in Windows 98 you'll want to use winipcfg. You can run it from the Start/Run box. I think that a combination of Release, then Renew will have a similiar effect.

You could also try a repair install of IE, in case you think your browser has been knocked around by the uninstall/installing. (Start/Programs/Accessories/System Tools/System Information...and from the "Tools" menu, choose "Internet Explorer Repair Tool")

In the past month, several ISPs have been working on some DNS issues [some of it is upgrading and patching to improve security - there has been trouble with exploits and such]. You might want to call your sister's ISP just to see. A thread on another forum that mirrors this one a bit (except for the qhosts part) ends with this note: "Comcast is my ISP and I found out on their message board several users in my area are having the same trouble with Google, it appears the Comcast DNS server I was using is messed up. I solved my problem by switching to another DNS server."

But since you did have the qhost situation, it's possible you need to set up your sister's ISP connection again.

Best of luck
. . . Gary

some background links:
http://support.microsoft.com/default.aspx?kbid=141698
http://www.microsoft.com/technet/tre...s/ipconfig.asp

[newme]

thanks gary i will let you know the outcome.

[newme]

well i tried the renew ip didnt work,had her upgrade to internet explorer 6 and still he same,type in google url and get a page saying that the site doesnt exist ,unless you type in the ip address,any more suggestions?im going to have her contact her isp to make sure its not a problem at there end.

[GaryRouth]

Can't hurt to call the ISP. Since the removal tool (and also the worm itself) makes changes to IP settings, everything might not be back the way it was originally. It's possible that Windows is OK, IE is OK, but the ISP connection is not set up the same as before.

It's still possible that either Windows, IE, or perhaps even her antivirus setup isn't quite right anymore. To double-check that there's not still a virus lurking, you could go to http://housecall.trendmicro.com & run the online scan. To check the Windows angle, you could run an over-the-top http://forum.pcmech.com/showthread.p...threadid=70846 & then spend awhile at Windows Update getting the Security Patches again (IE6 again too, if necessary). Last but not least, you could uninstall/reinstall her ISP setup. That should cover just about any possibility.

Hope it works out soon
. . . Gary

[hm - one more thing - you could also try a run of RegClean in case a leftover in there is causing trouble http://download.com.com/3000-2094-881470.html?tag=list ]