Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

Geek Culture / annoying virus, cant find it

Author
Message
Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 22nd Dec 2006 03:05 Edited at: 22nd Dec 2006 03:14
Can't access any networks from my desktop. (on my laptop right now) Started out by only loading my home page (most likely it was just from cache), i can't load any websites from IE or FF nor ping anything from console. I ran ad-aware, spybot, and hijack this in normal mode and in safe mode. I have zonealarm and norton 2005 running. Whatever is going on, nothing will find it. And I can't update virus definitions. Can't even access other computers on local network or the router. Running windows 2000 sp4 with all latest updates as I've just done a reformat a few weeks ago.

Any ideas or know anything new thats been getting around?


Oh, and it seems to have affected every user account. I tried to create a fresh user and I still have the same problem.

Ron Erickson
Moderator
21
Years of Service
User Offline
Joined: 6th Dec 2002
Location: Pittsburgh, PA, USA
Posted: 22nd Dec 2006 03:23
Are you sure you that you are actually connected to your router/network at all?
Do you have an ip address? Maybe your network card died.

DO you have any strange processes running? Any processor load?

Check this app out. It does a MUCH MUCH better job than task manager:
http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer.mspx

EZrotate! TextureMax! Enhanced Animations! (coming soon....) 3D Character Maker! (coming soon....)
Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 22nd Dec 2006 04:54
it is connected, i can verify that from the router's status. (viewing from other computer) And I made sure it had an IP using ipconfig.

Since I recently got an old machine running with a fresh copy of 2k, I just zapped the drive from the infected machine and cloned the good one. Seems to be working, waiting for the last few updates to complete. (although, this security update for media player 6.4 hasn't budged in 15 minutes)

That app looks very handy, I'm assuming it'll show everything thats running; unlike task manager?

Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 22nd Dec 2006 08:37
I'm still having problems. I can get access the net again, but sometimes I have to refresh a page a few times before it'll "find" it. You think it could be the network card afterall? It's an integrated Marvell Yukon network card on an Asus p4p800 mobo. I'm afraid to think if its the card then what else could soon go wrong on the mobo.

indi
22
Years of Service
User Offline
Joined: 26th Aug 2002
Location: Earth, Brisbane, Australia
Posted: 22nd Dec 2006 08:49
What does your manufacturers website say in regards to network driver updates?

Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 22nd Dec 2006 08:55
i have the latest updates, just checked all my updates. The driver hasn't been updated in awhile and is no newer than what I previously used before I reformatted last month.

When I try to ping yahoo.com, it just says unknown host rather than some error about no connection.

I've just plugged my modem straight to the computer and bypassing the router for now. I'll try this for a few hours and see if there's any difference.

_Nemesis_
21
Years of Service
User Offline
Joined: 9th Nov 2003
Location: Liverpool, UK
Posted: 23rd Dec 2006 00:12
Go into a command prompt and type "netstat /a" (without quotes) and see if there's any dodgy connections. Maybe the max number of tcp/ip connections has been hit by something such as a trojan - seems like a possibility given what you've described.

[url="http://www.devhat.net"]www.devhat.net[/url] :: Devhat IRC Network.
Current Project: ASP Content Management System
Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 23rd Dec 2006 23:25
already checked, nothing there. I haven't had any trouble for the past day, so unfortunately is seems there's something up with my router. Just don't know why the other machines didn't have any problems. I'll try swapping ethernet cables and see what happens next.

Mikey P
19
Years of Service
User Offline
Joined: 23rd May 2005
Location: Manchester, UK
Posted: 24th Dec 2006 02:12 Edited at: 24th Dec 2006 02:13
If you have XP, are you updated? After I formatted a few PCs in my house the other day, I obviously didn't update fast enough, and I got a virus which was nasty like this. I could ping everything file from the command prompt but very few connections would be able to transfer data. I think it was spoolsv.exe in some weird folder in Program Files... I just cut my losses and reformatted again, so sorry I can't be helpful for a solution -- I can however confirm that once I formatted and updated the problem hasn't recurred.

[Edit: Woops. You're not running XP, just re-read your post. Silly me. I'll keep this here though.. interesting story.. sort of.]

Nicholas Thompson
20
Years of Service
User Offline
Joined: 6th Sep 2004
Location: Bognor Regis, UK
Posted: 24th Dec 2006 03:38
Quote: "When I try to ping yahoo.com, it just says unknown host rather than some error about no connection."

Next time that happens - what happens if you try to ping machines on the LAN rather than WAN (ie other local machines rather than remote)?

Judging by your replies so far, it might be as lucky as a knackered ethernet cable!

[center]
CattleRustler
Retired Moderator
21
Years of Service
User Offline
Joined: 8th Aug 2003
Location: case modding at overclock.net
Posted: 24th Dec 2006 14:32
yeah, all of this sounds router/lan cable related.
if its not the cable, maybe the port you plugged into on the router is shot? Or possibly did any windows networking settings get wiped by accident?

Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 24th Dec 2006 18:57
I thought about just using my older smc router and buying a wireless AP, but those seem to cost just as much as a router anyway.

I couldn't ping the router before, didn't think to try and ping the loopback but the card appears to be working anyway. Windows settings appear to be in order.

Osiris
20
Years of Service
User Offline
Joined: 6th Aug 2004
Location: Robbinsdale, MN
Posted: 26th Dec 2006 03:18
Dude, do you have a wireless router?

Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 26th Dec 2006 04:02
uh yea, the one im using now. SMC wbr14-g

If it is the router, the wireless seems unaffected so I could just plug the router into my older SMC router, which ran for years without a single reboot needed.

Osiris
20
Years of Service
User Offline
Joined: 6th Aug 2004
Location: Robbinsdale, MN
Posted: 26th Dec 2006 04:46
No its not the router, I had the same problem, what you need to do is uninstall everything that has to do with the card, drivers registry entries and folders/files, then take it out, reinstall everything, then put it back in. Its some stupid conflict with windows, also right click on My Computer then goto manage, then to Services and Applications then services, then make sure Windows zero configuration utility is turned off, well that is if your card came with its own configuration utility.

Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 26th Dec 2006 08:16
There is no Windows Zero service installed. I have an integrated Marvall nic.

I don't see how it'd be a conflict, problem remained after a reformat and didn't exist on the prior system until recently.

indi
22
Years of Service
User Offline
Joined: 26th Aug 2002
Location: Earth, Brisbane, Australia
Posted: 26th Dec 2006 08:26
are there other wireless users in your area with the same channel?

Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 27th Dec 2006 03:38
There was, but I changed my channel awhile ago. What does wireless have to do with anything?

I'm using a different port on the router and reset it about 30 times. I haven't had any more problems for the past day, so as far as I'm concerned, no more problem.

Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 5th Jan 2007 05:35 Edited at: 5th Jan 2007 05:39
Hah, found the culprit at last. For the past several weeks, I've only had a firewall running, no AV. Well I installed Norton back on and boom, problems happened again. It blocks my browser's access to the network whenever I get this:



That "Intruder" is my router. I've moved the 'portscan' signature to the safe list and hopefully I shouldn't get blocked again. (I'm able to reset the browser's access by shortly turning off auto-protect) Any bad portscanning should be handled by my firewalls anyway.

Attachments

Login to view attachments
CattleRustler
Retired Moderator
21
Years of Service
User Offline
Joined: 8th Aug 2003
Location: case modding at overclock.net
Posted: 5th Jan 2007 13:27
Gah!

Chaotic Warrior
17
Years of Service
User Offline
Joined: 13th Feb 2007
Location:
Posted: 13th Feb 2007 16:40
Have you tried NOD32? My computer was being eaten alive by a particularly nasty virus which had destroyed my other antivirus software I was recommended NOD32 by a friend(I used the trial version) and it cleared out all the viruses.

All is fair in love and war
Ollie is my name
17
Years of Service
User Offline
Joined: 5th Mar 2007
Location: Derbyshire, Uk
Posted: 13th May 2007 15:55
Have you tried turning it on and off again?

Lmao

Ollie

I already gosth one!
SageTech
19
Years of Service
User Offline
Joined: 3rd Dec 2004
Location: Orlando, Florida
Posted: 13th May 2007 19:58
Have you tried not bumping a 3 month old thread?


Battle Legacy: Online Third Person Shooter
Look for it on the WIP Board!
Benjamin
21
Years of Service
User Offline
Joined: 24th Nov 2002
Location: France
Posted: 13th May 2007 20:01 Edited at: 13th May 2007 20:01
Yeah, what kind of a person actually bothers searching pages and pages back?

Tempest (DBP/DBCe)
Multisync V1 (DBP/DBCe)
hessiess
17
Years of Service
User Offline
Joined: 30th Mar 2007
Location: pc!
Posted: 13th May 2007 20:19
Quote: "Yeah, what kind of a person actually bothers searching pages and pages back?"


i do if im looking for somthing or havent got anything better to do

learn blender, you will never regret it.
Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 14th May 2007 04:30
Quote: "Have you tried NOD32?"


Nod32 is the worst AV I've ever used. At first, it seemed great, until I saw how incredibly slow its file scanning was. Holy crap was it slow. I just went to Symantec corporate edition, way better than that home user crap. (btw, i finally found my original Norton disc that I lost 2-3 years ago)

And yes, why did you bump a thread after it was solved 4 months ago?


indi
22
Years of Service
User Offline
Joined: 26th Aug 2002
Location: Earth, Brisbane, Australia
Posted: 21st May 2007 08:39
and nortons is any better? pfft.

Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 21st May 2007 21:46
its a lot faster than nod32


hessiess
17
Years of Service
User Offline
Joined: 30th Mar 2007
Location: pc!
Posted: 22nd May 2007 17:57
norton makes computers extremly slow to boot, and extremly slow to do anything!

learn blender, you will never regret it.
Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 22nd May 2007 19:14
I run Symantec now, it runs a little better than Norton, but I've never really had problems to begin with. But it still uses a fair bit of ram, about 30-35mb. (way better than norton security suite)


GatorHex
19
Years of Service
User Offline
Joined: 5th Apr 2005
Location: Gunchester, UK
Posted: 22nd May 2007 19:24 Edited at: 22nd May 2007 19:28
What a crap firewall if it blocks you gateway -.-

Another common one is blocking you DNS server.

Personaly use zone alarm.

I had a similar problem that was driving me mad and after messing around testing cables and stuff it was the network electronics built into the motherboard going wonky. I dropped a new network card in a PCI slot and it solved it.

http://www.KumKie.com http://bulldog.servegame.com

Login to post a reply

Server time is: 2024-11-18 15:32:12
Your offset time is: 2024-11-18 15:32:12