Major reduced bandwidth.....virus?

TJ-

detailed description of my problem:

Major loss of bandwidth speed when browsing the net and downloading. Upon restart speed is restored for the first few web pages visited or until i download then speed drops off rapidly until it takes 2-3 mins to load a page and im downloading at 1kb/sec. Upon restart the speed is restored again until the cycle repeats itself. I have a 256/56 dsl connection and when tested my bandwidth it gave me between 150-190. My Spyware/ Adware programs automatically stop responding sometimes when i run them.

When i run bandwidth test first upon restart i get the 150-190. After an hour of trying to browse the net i run the same test and it taks forever and eventually tims out.


Things ive tried to get rid of the problem:

-Ran several anti virus scans with different programs all comming up negative.
-Ran the spyware/adware tests even though they dont respond have the time i stll got them to run a few times, all comming up negative.
-Ran registry mechanic 4.0
-checked and disabled any start up programs that wernt in use or suspicious.
-Deleted any unknown folders or files in Program files.
-Reformatted and reinstalled Windows, with no luck

Possible Causes----

after some research, a win 32 trojan or virus...?

some help please, how do i get rid of this thing if it is a virus?

if not what is it?

__________________
new sig comming soon

Warpy

Just a thought, the Windows XP CD may be ok, but the SP1 / SP2 exe that you update your Windows with might be infected if your running it from a backup.

Also..... turn the PC off and let the RAM clear for several mins in case the virus is mem resident. I would be tempted not to install any apps, just a clean Windows Xp build with the SP2 update via the web and then test your connection speeds.

__________________

ReDGuiTaR

Dying network card ? try another network card just to be sure ...

__________________
Zing a ling... zing a ling a ling ...

A8N-E - A64x2 4600, 2048 Mb Kingston ram 400mhz cas 2.5 ( 2 x 1024 DualChannel ), Seagate 320 Gig 7200 16Mb cache S-ata 2, GeForce 7900GT 512MB, Enermax 460watt power supply, WindowsXP SP2.

TJ-

the wixdows xp cd im using had sp2 already installed on it. Never cased any problems before. Another reformat is a last resort.

I dont use a network card, and my laptop is running smooth as silk.

The file i believe is the culprit is called crack.exe which is not on the hard drive since the new install.

__________________
new sig comming soon

Judas

http://www.pcpitstop.com/

Go thier and run the anti virus test... do a quick test.... then if you want.. a full..


after which run the FULL test... registering may be required, but i highly recommend you do this, Registration is free and as long as you make sure you don't check or make sure to uncheck anything to do with receiving crap.....

Pcpitstop will run the test, report any possible problems.. even assist or completely fix the problem for you. It'll also hold your information for every run... i signed up well over 5 years ago, i still have information from way back when.. and i'm stilling useing the same name and password without a single hitch..

__________________

PangingJr

if you are sure that all the mentioned programs is properly installed,
then i'd say that your system is infected with viruses or trojans,
there's some doubt, but, there is a possibility...

you can get this virus or any virus-like program at anytime while you are on the internet, find a good trojan detection program and run a complete scan on the system again. and also follow JD's advised.

if you've done all the scans and none of the scanner could find anything,
and you are also in doubt about files stored in the HDD might be infected with viruses. either clear out the existing HDD, delete every partitions and start over,
or replace your system HDD with, possibly, an old but empty one,
then do the Windows setup off-line using XP SP2 CD, then install the rest of system device drives if needed, then install an AV software (and spyware/adware programs if you like), then turn on your firewall and connect to the internet to update your Windows system and all of the 3rd party softwares. and see...

if you choose to replace the HDD method and then find no problem,
then the original HDD has some bad files on it, you will have to clear out that HDD and start over.

before running the new Windows setup D/L and run this virus scan utility - BOOTSCAN.EXE - http://vil.nai.com/vil/virus-4e.asp,
this's not be 100% sure, but just a last system check that i can think of atm.

nitrousoxide52

www.computercops.biz they have everything there, including a forum where you can post your problem and you can manually go through all the steps that the pro's give you there.

__________________
AMD Athlon64 X2 3800+
XFX Geforce 7800GT
ABIT AN8-SLI
BFG Tech 650w

TJ-

After running the pcpitstop tests it cam up with these viruses

The Eicar.Mod Virus was found in file C:\Documents and Settings\187\Local Settings\Temp\pft3.tmp\data1.cab

The Eicar.Mod Virus was found in file C:\Documents and Settings\187\Local Settings\Temp\pft4.tmp\data1.cab

The Eicar.Mod Virus was found in file C:\Documents and Settings\187\Local Settings\Temp\pftA53.tmp\data1.cab

The Eicar.Mod Virus was found in file C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\eicar.html


still running more tests, but im not to happy bout that one


after googeling that virus, i get the impression that its not actually a virus, is this true?

__________________
new sig comming soon

PangingJr

eicar in the KAV folder is an AV test file for KAV.
not sure why your get results from the scan in your Temp folder.
--
never use that on-line scan but i think, the scan ran an activeX and used or moved to your Temp folder.

TJ-

can i run that with my comp the way it is now, or does it have to be on a fresh install...?

so i should just leave those files intact, or do i disk cleanup and run crap cleaner...

__________________
new sig comming soon

PangingJr

yes, you can use the utility to look for viruses in memory on some computers.
read instruction inside of the downloaded file.

PangingJr

just "manually" remove any files/folders -not in use- in all of your Temp folder, including the system ones in \WINDOWS.

Judas

the pcpitstop test runs an active X controlled virus scanner.. constantly kept up to date.

But i have never had it find a virus like that... even with an anti virus prog running (it tells you to disable the one you may be running on your own machine)

however, using the pcpitstop one, it's detected viruses that even norton hasn't found... let alone mcfee or some other top named brand anti virus progs.....

if you run a full scan or try the spyware/adware scanner, it has been very usefull!

__________________

PangingJr

no Judas, i meant the on-line scanner found the test file and move it to the Temp folder. i'm sure it's a good service, you just told me

battleaxe187,
Ok, to be sure and you don't have to worry about the Eicar files,
locate and manually remove or put every Eicar files you fould on your HDD in your AV quarantine list.

TJ-

been working on this all day, i think i finally fixed it. Dont know how, just a mix of a bunch of things i think. No viruses left. Been on the net for a hour and the speed is consistant so im praying......

Thanks for the help and links guys.....

__________________
new sig comming soon

TJ-

actually, still getting some problems. Browsing seems to be ok for a longer period of time but after a while it slows right down. Upon restart i cant even go online to play games, its telling me i dont have a internet connection(firewall disabled). Downloads seem to be at normal speed again for a while.

Im stumped, feel like picking my case up and throwing it out the window!!!!!!

I HATE COMPUTERS !!!!!!!

oh well im getting a upgrade on my connection at the end of the month to 512/128 so we shall see if that makes any difference

__________________
new sig comming soon

PangingJr

maybe it's just the net connection problem, i heard that dsl do like this sometimes but i'm not sure.

and how come your spyware/adware programs automatically stop responding,
have you tried reinstalling the programs? and what about those Eicar files, can the AV program takes care it?

TJ-

Man i dont know what the heck is going on, its not a network problem cause when i swith the service over to my laptop everything is fine there. I reinstalled all the adware/spware again and its all working good. I moved those Eciar fils to the chest of my current AV (avast professional) and the scans come up negative.But i still get problems after a period of time. Its fu*&ed though cause when i restart everything is back to normal.

Im looking for a good AV that picks up these viruses. Currrently reading the reviws on E trust EZ antivirus, the one that picked up the viruses, but im getting mostly bad reviews. Seems it picks up the vires like a charm but is a resources hog and doenst delete them.

As for the problem im still trying to figure it out, the last thing i want to do is reformat again. If all fails m gunna have to buy another HD.

__________________
new sig comming soon

Tipstaff

One thing you should do is run spyware/adware, and virus scanners in SafeMode. This way you will get a better clean out of them as a lot of stuff are not loaded at startup.

The best AV software I've found are Kaspersky, Panda, and McAfee. The best spyware/adware removal tools would be Xoftspy, Spybot S&D (free), and Spysweeper. HijackTHIS is good for routing things out, but it's not for the inexperienced as you can screw your system up.

- Tip

__________________

PangingJr

well, if those programs are working fine now, your system may not be infected,
and can be something else that causes the problem, but i have no idea atm.
one thing that you can do is to try to minitor your internet connection with a port monitor and a firewall log.
anyway, why you said you will need to buy a new HDD?

TJ-

tried that tipstaff...still nothing.....

and Ctrl-alt-Del i dont really know why i said to get a new HD, was pullin a 14 hour day and was so fed up was willing to start from scratch, thought the HD was infected. Ran another virus scan of the memory and HD again with NOD32 and it came up cleen so a virus dont seem to be the problem.

Got a fire wall log running, btw its outpost firewall, if that makes any difference. I will be monitoring my net connection

One thing i thought about in my sleep was mabye it could be something with the cpu or something overheating. But my asus probe is all normal.

Also It feels like something is getting shut down after i run some sort of application. Then teh restart makes everything normal again. Seems like everythime i install/uninstall a program unsing install shield thats when the problem happens, but that wouldnt explain the reduced bandwitdh, just the programs not responding, ive noticed its not just the adware/spyware but a bunch of programs just stop responding randomly......

anyways im still working on a solution....

__________________
new sig comming soon

nitrousoxide52

Download CWshredder from computercops, it will check for a trojan that automaticaly shutsdown adware and spyware scanners.

__________________
AMD Athlon64 X2 3800+
XFX Geforce 7800GT
ABIT AN8-SLI
BFG Tech 650w

TJ-

ive got and tried many trojan remover programs, all comming up negative...

__________________
new sig comming soon

Judas

give you ISP a call and ask around till you get a straight answer.... is thier or is thier not bandwidth being used (even though you aren't using the net)..... is the signal strength good.... is it eratic... you name it... ask it....

__________________

PangingJr

how's it going ?

TJ-

an update guys.....

gave the isp a call and thank god im ditching that company *hypermax* because the "tech guys" are friggen idiots....
anyways...saying nothing wrong with connection...

bought a d-link router and did yet another reinstall of windows. This time i also got a wireless card for my laptop so i installed all the dodgy apps that i use for work on there. So i set up the router ( very nice 108mbps 128 bit encryption btw ) hooked everything else up, installed all drivers and software and everything is smooth as silk. I have no idea what the problem was. But it all seems to have worked out.

* My delima now is weather to install cat 5.3 or omega 4.9

__________________
new sig comming soon

FearTheTerp

So it works fine now? I've had the same problem before. My connection would be perfectly fine upon the boot but then it was rapidly deteriorate. I just power routed my router (unplug for a while plug it back in) and it was fixed.

TJ-

yea works good, i dont know what could cause the problem, my modem is fine and its not cheep, was one of the best dsl modems you can get. Comp is only 6 months old, so im stumped as to what caused the problem.

__________________
new sig comming soon