If you go to Device Manager, are there any devices listed there as problem devices? When you wiped the drive and reinstalled Windows, did you reinstall the chipset drivers and then the ethernet network adapter drivers?
I had bought an external ethernet port, because the ethernet port seemed worn out; whenever I plugged the LAN cord in, it would not go online for long periods of time, and the cord would fall out; this led me to believe that it was the cord that gave me the problem, but it was the port itself. Even with the new external ethernet adapter, I could not get online for more than 5 minutes. I would literally go online, surf for maybe five minutes, then recieve the "404 - this page cannot be displayed" screen.
The funny thing was that I was still sending and recieving packets, meaning that everything was functioning correctly, and that I was still *technically* online.
Go to Start > Run and type cmd then click on OK. In the command prompt window that opens, type ipconfig /all then hit the Enter key. Copy the output from this command and paste it into a reply to this message. Make sure you get all of the output, including the text that scrolls up off the screen.
Steve
Message Edited by volcano11 on 03-26-2005 04:58 PM
all of my past posts have come from my pc, and this one is too. -_- i fired up the laptop, and just as expected, it was online for roughly five minutes. I was at the "preview message" page right when IE gave out. I then tried firefox, which did nothing, as well as netscape. But oddly enough, my AIM was still online, and I could still converse with people using AOL Instant Messenger.
I took the log from the laptop and put it on a disc, so here it is.
Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp.
Everything looks normal, and, if as you say, no network adatper works and the hard drive has been wiped clean and Windows installed on the empty hard drive, you truly have a strange problem. What other software did you install after wiping the drive and reinstalling Windows? Are you running any firewalls that may be interfering with the connection? Did you change any settings from the default settings in Network Properties?
I thought I'd hop in and mention that I just found a
very recent
Kaspersky Anti-Virus log
posted in a German spyware/malware board containing the following entries:
C:\WINDOWS\system32\ff1.exe is a backdoor Backdoor.Win32.Wilba.a 03.09.2004 00:59:12
C:\WINDOWS\system32\ff1.exe deleted 03.09.2004 00:59:17
C:\WINDOWS\system32\ff2.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:17
C:\WINDOWS\system32\ff2.exe deleted 03.09.2004 00:59:19
C:\WINDOWS\system32\ff3.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:19
C:\WINDOWS\system32\ff3.exe deleted 03.09.2004 00:59:20
C:\WINDOWS\system32\ff4.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:20
C:\WINDOWS\system32\ff4.exe deleted 03.09.2004 00:59:20
C:\WINDOWS\system32\ffx2.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:20
C:\WINDOWS\system32\ffx2.exe deleted 03.09.2004 00:59:21
C:\WINDOWS\system32\ffx3.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:22
C:\WINDOWS\system32\ffx3.exe deleted 03.09.2004 00:59:22
C:\WINDOWS\system32\ffx4.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:22
C:\WINDOWS\system32\ffx4.exe deleted 03.09.2004 00:59:23
You need to take a close look at that system for malware! The best approach might be to download a copy of HijackThis (a malware analysis and removal tool) on another machine, transfer it via floppy or CD to the infected system, scan the system, copy the log created by HijackThis back to the floppy, and submit the log for review.
With the Windows Explorer, go to C:\, right click and create a folder named HJT. Unzip the downloaded file hijackthis.zip into the newly created directory, C:\HJT.
After installing HijackThis.exe in the directory C:\HJT, run Hijackthis from that directory. Click on the 'scan' button and then 'save log' button. Copy the log back to the floppy, and take the floppy to a working system.
Copy and paste the contents of the text file you saved in a new message in the
HijackThis board for review by the trained volunteers. Be sure to post the log in a new message, and describe the problem you're experiencing. DON'T ATTEMPT TO FIX ANYTHING REPORTED BY HIJACKTHIS without expert advice!
Sorry for jumping in like this, Steve. There were so few posts available on those files that this may be quite new.
(edit) I rechecked the date on that log posting. It was August 29, 2004. That's not recent! :smileysurprised:
The funny thing was that when I went to the Geek Squad, they ran HiJack This on the computer, and no results came to fruition. I'll run it and post the results, and see if you guys can see anything.
Rather than having us network types try to analyze your HJT log, I'd suggest posting it in the
HijackThis board, so the folks who volunteer their time and expertise analysing those logs can take a look.
(edit) I was entirely wrong when I said that the log posting in the German board was recent. It was made in August 2004! That means that all the antivirus products should know about it by now.
volcano11
2 Intern
•
28K Posts
0
March 26th, 2005 03:00
thebestporter
6 Posts
0
March 26th, 2005 11:00
volcano11
2 Intern
•
28K Posts
0
March 26th, 2005 15:00
Go to Start > Run and type cmd then click on OK. In the command prompt window that opens, type ipconfig /all then hit the Enter key. Copy the output from this command and paste it into a reply to this message. Make sure you get all of the output, including the text that scrolls up off the screen.
Steve
Message Edited by volcano11 on 03-26-2005 04:58 PM
thebestporter
6 Posts
0
March 26th, 2005 20:00
all of my past posts have come from my pc, and this one is too. -_- i fired up the laptop, and just as expected, it was online for roughly five minutes. I was at the "preview message" page right when IE gave out. I then tried firefox, which did nothing, as well as netscape. But oddly enough, my AIM was still online, and I could still converse with people using AOL Instant Messenger.
I took the log from the laptop and put it on a disc, so here it is.
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\Owner>ipconfig/all
Windows IP Configuration
Host Name . . . . . . . . . . . . : laptop
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-690TXD CardBus PC Card
Physical Address. . . . . . . . . : 00-0D-88-32-50-8C
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 172.16.1.10
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 172.16.0.254
DHCP Server . . . . . . . . . . . : 172.16.0.254
DNS Servers . . . . . . . . . . . : 172.16.0.254
Lease Obtained. . . . . . . . . . : Saturday, March 26, 2005 4:47:11 PM
Lease Expires . . . . . . . . . . : Tuesday, April 05, 2005 4:47:11 PM
C:\Documents and Settings\Owner>
volcano11
2 Intern
•
28K Posts
0
March 27th, 2005 04:00
Everything looks normal, and, if as you say, no network adatper works and the hard drive has been wiped clean and Windows installed on the empty hard drive, you truly have a strange problem. What other software did you install after wiping the drive and reinstalling Windows? Are you running any firewalls that may be interfering with the connection? Did you change any settings from the default settings in Network Properties?
Steve
thebestporter
6 Posts
0
March 27th, 2005 05:00
This is what I have downloaded since wiping the hard drive:
MoZilla FireFox
Netscape
AOL Instant Messenger
Creative Labs Zen MP3 player (plus Adobe Acrobat and a read-me for the player)
XP Service Pack 2
Besides those programs, that's the only thing that has changed with the originial factory settings. The firewall that came with SP2 has been disabled.
Whenever I do start the machine up, however, I do get this error message. It's a "16 bit MS-DOS Subsystem" error. It reads as follows:
C:\WINDOWS\system32\ffx2.exe
the NTVDM CPU has encountered an illegal instruction.
CS:0dab IP:0184 OP:ff fd 1f 58 5d Choose 'close' to terminate the application.
Then I'll get another one, this time "ffx3.exe" instead of "ffx2.exe"
And then one more behind that, this time "ffx4.exe".
Is there any reason why I am receiving these errors as well?
jwatt
4.4K Posts
0
March 27th, 2005 05:00
I thought I'd hop in and mention that I just found a
very recentKaspersky Anti-Virus log posted in a German spyware/malware board containing the following entries:C:\WINDOWS\system32\ff1.exe is a backdoor Backdoor.Win32.Wilba.a 03.09.2004 00:59:12
C:\WINDOWS\system32\ff1.exe deleted 03.09.2004 00:59:17
C:\WINDOWS\system32\ff2.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:17
C:\WINDOWS\system32\ff2.exe deleted 03.09.2004 00:59:19
C:\WINDOWS\system32\ff3.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:19
C:\WINDOWS\system32\ff3.exe deleted 03.09.2004 00:59:20
C:\WINDOWS\system32\ff4.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:20
C:\WINDOWS\system32\ff4.exe deleted 03.09.2004 00:59:20
C:\WINDOWS\system32\ffx2.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:20
C:\WINDOWS\system32\ffx2.exe deleted 03.09.2004 00:59:21
C:\WINDOWS\system32\ffx3.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:22
C:\WINDOWS\system32\ffx3.exe deleted 03.09.2004 00:59:22
C:\WINDOWS\system32\ffx4.exe is a network worm Worm.Win32.Wilab.a 03.09.2004 00:59:22
C:\WINDOWS\system32\ffx4.exe deleted 03.09.2004 00:59:23
You need to take a close look at that system for malware! The best approach might be to download a copy of HijackThis (a malware analysis and removal tool) on another machine, transfer it via floppy or CD to the infected system, scan the system, copy the log created by HijackThis back to the floppy, and submit the log for review.
Here's a download link for HijackThis, and an illustrated guide to installing and running HijackThis that you may find helpful.
With the Windows Explorer, go to C:\, right click and create a folder named HJT. Unzip the downloaded file hijackthis.zip into the newly created directory, C:\HJT.
After installing HijackThis.exe in the directory C:\HJT, run Hijackthis from that directory. Click on the 'scan' button and then 'save log' button. Copy the log back to the floppy, and take the floppy to a working system.
Copy and paste the contents of the text file you saved in a new message in the HijackThis board for review by the trained volunteers. Be sure to post the log in a new message, and describe the problem you're experiencing. DON'T ATTEMPT TO FIX ANYTHING REPORTED BY HIJACKTHIS without expert advice!
Sorry for jumping in like this, Steve. There were so few posts available on those files that this may be quite new.
(edit) I rechecked the date on that log posting. It was August 29, 2004. That's not recent! :smileysurprised:
Jim
Message Edited by jimw on 03-27-2005 04:14 PM
thebestporter
6 Posts
0
March 27th, 2005 15:00
The funny thing was that when I went to the Geek Squad, they ran HiJack This on the computer, and no results came to fruition. I'll run it and post the results, and see if you guys can see anything.
Thanks, Anthony
jwatt
4.4K Posts
0
March 27th, 2005 22:00
Rather than having us network types try to analyze your HJT log, I'd suggest posting it in the HijackThis board, so the folks who volunteer their time and expertise analysing those logs can take a look.
(edit) I was entirely wrong when I said that the log posting in the German board was recent. It was made in August 2004! That means that all the antivirus products should know about it by now.
Jim
Message Edited by jimw on 03-27-2005 04:20 PM