Here's one for you: A Computer Connected to the Network....

Dyre Straits · Feb 9, 2006, 07:02 AM

....if left connected for a few minutes (only 2 - 3 minutes) causes all the computers on the network to lose Internet connectivity.

If I unplug that computer from the router, all the computers restore their Internet connectivity.

I've moved the said computer closer to the router and am using a previously known to be good cable.

I've also replaced and tested 3 more NIC cards. The same thing happens regardless of which NIC card is installed. (They're all different makes, too with their respective drivers installed.)

The rest of the story from tonight is:

This particular computer (belonging to my d-i-l) did not have AV installed. Nor has she used any Spam blockers/killers. (OUCH!) NOR did she have the Windows FIREWALL active! Double OUCH!!

So, I've used several programs tonight to clean this thing up as much as possible.

CCleaner removed over 1 GB of CRAP.

AD-AWARE SE found over 150 CRITICAL items.

AVG FREE found 4 Trojan Horse Downloaders!!!

I'm presently running an updated AVG full system scan on it and it's found another TH Downloader just now.

Up until just today, this one computer was the most dependable one to be stable on the network.

If cleaning it up doesn't correct the situation with the Internet, what would you do next? Reformat? I'm sure she'd be very happy about that.... NOT!!!

Yousaif · Feb 9, 2006, 10:29 AM

I would reformat if the problem persists. If someone running on my network didn't have any AV or firewall then the need to reformat is on their head. I wouldn't have any problem wiping my wife's machine clean if she was that irresponsible.

Tipstaff · Feb 9, 2006, 10:49 AM

Sounds like Windows Winsock has been hijacked by some spyware/adware. The best thing to do is to reformat the machine, but before you do that you may want to try resetting the default internet/network settings using a tool like WinSockFix, or LSP-Fix. After you run the program you will need to reboot, however all your settings will be slow, and you will need to reoptimize your network settings using something like Speedguides TCP Optimizer.

Dyre Straits · Feb 9, 2006, 11:12 AM

Would HiJackThis show anything?

PangingJr · Feb 9, 2006, 12:49 PM

not sure if Ad-aware reports the Most Recent Used (MRU) registry entries and the tracking cookies as critical items, but if it does then these two items could be most of the items that the program has found on the system.

as for the CCleaner removed over 1 GB of crap -- the most number would be the items in Temp folders and TIF folder, the rest of the unused files (*.old, *.dmp, *.gid, *.~mp, *._mp; or whatever...) that are exist elsewhere on the Windows system will not be costing your hard drive space that much.

AVG found 4 Trojan Horses -- this makes me stop trying to clean up the Windows system.
i hate that i have to do another Windows install i mean on any system, but if i have to help someone who has this problem, and i think he lacks the knowledge to solve the problem himself, then i would backup whatever files that he/she wants, check out the system and hardwares configuration and then do a clean install of everything for him. i think this can takes less time than trying to clean up the system. he just has to provide me the Windows product licence.

anyway, please post logfile of the HijackThis if you want to.
may be other might see somethings that you missed and everyone can gain more experience on this.

Dyre Straits · Feb 9, 2006, 06:38 PM

I agree about reformatting this one as I think that's what's going to be done very shortly.

Here's what's happening now, though: Everything I'm using shows the system to be cleaned up. I used the WinSockFix program Tipstaff suggested and the NIC cards still go crazy. By that I mean, no matter what NIC card or which PCI slot I use, as soon as the cable is connected to the HUB/Router the Green light goes berserk. It just flashes incessantly. The NIC cards that have a 2nd light ... that one glows a constant Yellow.

Additionally, after removing several infected files it took a Hard Drive Error Check to get Windows to boot normally again.

I haven't gotten around to installing HiJackThis on this computer just yet. I may do that later tonight.

PangingJr · Feb 9, 2006, 07:57 PM

reason that i suggest you to do a clean install of everything on that system because some of the never ending problem may occur after you return the computer back to the owner.

you can try to fix the NIC card problem...
remove the device in Windows, shutdown and turn off then physically disconnect it from the system, restart the computer without the card.
then reset the TCP/IP stack, then shutdown and turn off, connect the card to the system and restart.
then reconfigure your LAN (eg. NetBIOS over TCP/IP and its adapter properties) up again and see what happens?

Dyre Straits · Feb 10, 2006, 04:52 AM

UPDATE:

Well, according to everything I've run on this system this evening, it's clean as a whistle.

I even reset the TCP/IP stack using the CMD for it.

Also, by enabling NONCONNECTED HIDDEN DEVICES I was able to remove all the extra non-connected NIC cards that wouldn't allow me to remove them otherwise.

Once all that was cleared up and the system rebooted a couple of times....both SAFEMODE and NORMAL Windows, I then inserted a previously known to be good NIC card. The Green light no longers goes berserk.

However, if I leave this computer plugged into the Network for even as much as 2 minutes, all other computers lose the Internet connectivity. The computers can still....ALL of them....see other Shares and access them. BUT, the Internet becomes blocked for some reason.

After I disconnect this one computer, within 60 seconds or so, the Internet is once again accessible to all the other computers.

The owner isn't presently available for consultation, but, my next advice will be to provide the Windows CD and allow me to reformat and do a fresh installation.

Feb 9, 2006, 07:02 AM	#1
Dyre Straits HH Old Fuddy Duddy Join Date: May 2002 Location: Georgia, USA Posts: 14,196 Rep Power: 216 System Specs	Here's one for you: A Computer Connected to the Network.... ....if left connected for a few minutes (only 2 - 3 minutes) causes all the computers on the network to lose Internet connectivity. If I unplug that computer from the router, all the computers restore their Internet connectivity. I've moved the said computer closer to the router and am using a previously known to be good cable. I've also replaced and tested 3 more NIC cards. The same thing happens regardless of which NIC card is installed. (They're all different makes, too with their respective drivers installed.) The rest of the story from tonight is: This particular computer (belonging to my d-i-l) did not have AV installed. Nor has she used any Spam blockers/killers. (OUCH!) NOR did she have the Windows FIREWALL active! Double OUCH!! So, I've used several programs tonight to clean this thing up as much as possible. CCleaner removed over 1 GB of CRAP. AD-AWARE SE found over 150 CRITICAL items. AVG FREE found 4 Trojan Horse Downloaders!!! I'm presently running an updated AVG full system scan on it and it's found another TH Downloader just now. Up until just today, this one computer was the most dependable one to be stable on the network. If cleaning it up doesn't correct the situation with the Internet, what would you do next? Reformat? I'm sure she'd be very happy about that.... NOT!!!

Feb 9, 2006, 10:49 AM	#3
Tipstaff HardwareHeaven Extreme Member Join Date: Jul 2002 Location: Real capital of Canada: Torauna Posts: 6,773 Rep Power: 190 System Specs	Sounds like Windows Winsock has been hijacked by some spyware/adware. The best thing to do is to reformat the machine, but before you do that you may want to try resetting the default internet/network settings using a tool like WinSockFix, or LSP-Fix. After you run the program you will need to reboot, however all your settings will be slow, and you will need to reoptimize your network settings using something like Speedguides TCP Optimizer. __________________ Portal: The Flash Version _________________________________ Brain: So, you sacked the cocky khaki Kicky Sack sock plucker? Mr. Sackett: The second cocky khaki Kicky Sack sock plucker I've sacked since the sixth sitting sheet slitter got sick.

Feb 9, 2006, 12:49 PM	#5
PangingJr Member Join Date: Mar 2003 Posts: 5,989 Rep Power: 71	not sure if Ad-aware reports the Most Recent Used (MRU) registry entries and the tracking cookies as critical items, but if it does then these two items could be most of the items that the program has found on the system. as for the CCleaner removed over 1 GB of crap -- the most number would be the items in Temp folders and TIF folder, the rest of the unused files (.old, .dmp, .gid, .~mp, ._mp; or whatever...) that are exist elsewhere on the Windows system will not be costing your hard drive space that much. AVG found 4 Trojan Horses -- this makes me stop trying to clean up the Windows system. i hate that i have to do another Windows install i mean on any system, but if i have to help someone who has this problem, and i think he lacks the knowledge to solve the problem himself, then i would backup whatever files that he/she wants, check out the system and hardwares configuration and then do a clean install of everything for him. i think this can takes less time than trying to clean up the system. he just has to provide me the Windows product licence. anyway, please post logfile of the HijackThis if you want to. may be other might see somethings that you missed and everyone can gain more experience on this. Last edited by PangingJr; Feb 9, 2006 at 12:54 PM.*

Feb 9, 2006, 11:12 AM	Thread Starter #4
Dyre Straits HH Old Fuddy Duddy Join Date: May 2002 Location: Georgia, USA Posts: 14,196 Rep Power: 216 System Specs	Would HiJackThis show anything?

Feb 9, 2006, 06:38 PM	Thread Starter #6
Dyre Straits HH Old Fuddy Duddy Join Date: May 2002 Location: Georgia, USA Posts: 14,196 Rep Power: 216 System Specs	I agree about reformatting this one as I think that's what's going to be done very shortly. Here's what's happening now, though: Everything I'm using shows the system to be cleaned up. I used the WinSockFix program Tipstaff suggested and the NIC cards still go crazy. By that I mean, no matter what NIC card or which PCI slot I use, as soon as the cable is connected to the HUB/Router the Green light goes berserk. It just flashes incessantly. The NIC cards that have a 2nd light ... that one glows a constant Yellow. Additionally, after removing several infected files it took a Hard Drive Error Check to get Windows to boot normally again. I haven't gotten around to installing HiJackThis on this computer just yet. I may do that later tonight.

Feb 9, 2006, 07:57 PM	#7
PangingJr Member Join Date: Mar 2003 Posts: 5,989 Rep Power: 71	reason that i suggest you to do a clean install of everything on that system because some of the never ending problem may occur after you return the computer back to the owner. you can try to fix the NIC card problem... remove the device in Windows, shutdown and turn off then physically disconnect it from the system, restart the computer without the card. then reset the TCP/IP stack, then shutdown and turn off, connect the card to the system and restart. then reconfigure your LAN (eg. NetBIOS over TCP/IP and its adapter properties) up again and see what happens?

Feb 10, 2006, 04:52 AM	Thread Starter #8
Dyre Straits HH Old Fuddy Duddy Join Date: May 2002 Location: Georgia, USA Posts: 14,196 Rep Power: 216 System Specs	UPDATE: Well, according to everything I've run on this system this evening, it's clean as a whistle. I even reset the TCP/IP stack using the CMD for it. Also, by enabling NONCONNECTED HIDDEN DEVICES I was able to remove all the extra non-connected NIC cards that wouldn't allow me to remove them otherwise. Once all that was cleared up and the system rebooted a couple of times....both SAFEMODE and NORMAL Windows, I then inserted a previously known to be good NIC card. The Green light no longers goes berserk. However, if I leave this computer plugged into the Network for even as much as 2 minutes, all other computers lose the Internet connectivity. The computers can still....ALL of them....see other Shares and access them. BUT, the Internet becomes blocked for some reason. After I disconnect this one computer, within 60 seconds or so, the Internet is once again accessible to all the other computers. The owner isn't presently available for consultation, but, my next advice will be to provide the Windows CD and allow me to reformat and do a fresh installation.