Jump to content


Production svr w/o network after HJT 010 LSP "fix"

  • This topic is locked This topic is locked
1 reply to this topic

#1 ifnotmewho



  • New Member
  • Pip
  • 2 posts

Posted 28 July 2004 - 06:50 PM

Windows 2000 Server, SP4, Primary use as a Terminal Server.

While using HJT to clean up some browser buttons, I sloppily fixed the following in HJT:

O10 - Broken Internet access because of LSP provider 'z:\windows\system32\rnr20.dll' missing.

HJT made no backup of the changes it made, and when complete, the network components of the OS were largely crippled:
- Pings IP addresses
- No DNS (nslookup fails)
- Netlogon service fails on boot (with the expected disastrous results)

And then came my most lovely discovery that since Veritas Backup Exec depends on the netlogon service, I'm going to have to work harder to get yesterday's registry back.

My question: can anyone give me some detail as to
- What this HJT check identifies when flagging this?
- What the "fix" portion does to it.

Already tried the following:
- lspfix (nothing appears either side)
- Removing and reinstalling the TCP/IP protocol
- winsockfix (same behavior, slight change in netlogon error messages)

Your input is greatly appreciated. Email away -- I'll be here until it's fixed.....

#2 ifnotmewho



  • New Member
  • Pip
  • 2 posts

Posted 29 July 2004 - 03:41 AM

Resolved, in case anyone was interested.

Cause: Never identified in detail, nor was the nature of the change caused by HJT. Generally, the cause was a breakdown in network communications that affected name resolution. Did not seem to be at TDI level, as sysinternals' TDIMon indicated success when networking attempts failed.

1. Uninstall all services, then protocols, from network adapters
2. Delete all registry keys associated with network protocols, and many services (winsock, winsock2,dhcp, lanman, others)
3. Reboot, and reinstall services then protocols again.

Boing! We're back.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of

Support SpywareInfo Forum - click the button
PayPal - The safer, easier way to pay online!