PDA

View Full Version : Please help with unknown error!



ekfight
2008-02-01, 22:02
So I've been reading these forums and have been learning a lot about security... things i really didnt know before. Ive been doing this for way too long so this kinda stuff really interests me. Lately I've come across this problem on my computer that I really cant seem to track down and has been driving me nuts - as I'm an IT tech who can usually point this stuff out. I think it might be hardware related, but anyways; I need help!

So ill be using my computer on the internet for extended periods of time, but every now and then ill notice a "slow loss" of internet connectivity - where webpages all of a sudden start to load slowly, and then not at all. while this is happening i can still access MSN and ping out to websites, but then another 5 minutes and i lose that as well. It seems like there is a time limit lock on my PC, and really cant find the problem. Ive gone through the other steps on the system, but really am at a loss here.

My HJT log is here:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:57:52 PM, on 2008-02-01
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {3E4E2051-50E2-4AB6-917C-C0F12A6040C5} - (no file)
O2 - BHO: (no name) - {4A569C30-2DC6-45F2-8C1D-A5A0A003F0E9} - (no file)
O2 - BHO: (no name) - {91C17E7C-5BE3-493D-B393-A6598C288DB2} - (no file)
O2 - BHO: (no name) - {B53CFF98-5DCB-4A3A-994E-100B37282A6b} - (no file)
O2 - BHO: (no name) - {BD5D4071-0E06-4EB2-B59A-9D124B2E3DD9} - (no file)
O2 - BHO: (no name) - {E0256A92-F4A6-404A-8A4C-228965E77AB4} - (no file)
O2 - BHO: (no name) - {F2F8EC60-A630-46A0-B46F-5CC201CF8DD2} - (no file)
O2 - BHO: (no name) - {FE3035BE-0AC9-44DF-9834-339DAAFFFCDE} - (no file)
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} -
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} -
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Digidesign MME Refresh Service (DigiRefresh) - Digidesign, A Division of Avid Technology, Inc. - C:\Program Files\Digidesign\Drivers\MMERefresh.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe

--
End of file - 3300 bytes

ekfight
2008-02-03, 04:07
just bumpin the topic, any help guys?

Edit: Bump and Topic Will Be Closed (http://forums.spybot.info/showpost.php?p=219168&postcount=6)
The Waiting Room (http://forums.spybot.info/forumdisplay.php?f=37)
Post here if still waiting for help in the Malware Forum, (AFTER) FOUR days (http://forums.spybot.info/showthread.php?t=1137)

shelf life
2008-02-10, 20:21
hi,

dont see anything that looks like malware in the log. looks like you had it at one time anyway. i suggest a online scan as a second opinion. when you lose connectivity, how do you get it back? do you have to reboot? maybe its your isp?

ESET online scanner:

http://www.eset.com/onlinescan/

uses Internet Explorer only
check "YES" to accept terms
click start button
allow the ActiveX component to install
click the start button. the Scanner will update.
check both "Remove found threats" and "Scan unwanted applications"/
click scan
when done you can find the scan log at:C:\Program Files\EsetOnlineScanner\log.txt
please copy/paste that log in next reply.