Help

Start a discussion
UNSOLVED

Axe123

updated

21 years ago

A

Axe123

23 Posts

0

567

September 30th, 2005 09:00

Please Help

My internet connections are going offline for some reason. I tried to search around and see what was wrong but I'm not really sure what im suppose to look for. Everytime this happens I have to reboot my router? I think thats what its called, then everythings fine until 20 minutes later when I cant access the web. Another weird thing is my computer dosent even tell me it lost its connection like it usually does. With that I thought maybe it was my anitvirus/firewall program so I turned that off but yet no change. So now hopefully from this log someone could help me and tell me whats wrong. Thanks.

Logfile of HijackThis v1.99.1
Scan saved at 12:47:53 AM, on 9/30/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\WDC\SetIcon.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
G:\Programs\BitSpirit\BitSpirit.exe
C:\WINDOWS\system32\wscntfy.exe
C:\HJT\HijackThis.exe

O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O8 - Extra context menu item: Download Using &BitSpirit - G:\Programs\BitSpirit\bsurl.htm
O9 - Extra button: ProxyPal - {B0127AF2-316C-4f1d-BF35-3DE43971EEC5} - C:\WINDOWS\system32\proxypal.exe
O9 - Extra 'Tools' menuitem: ProxyPal - {B0127AF2-316C-4f1d-BF35-3DE43971EEC5} - C:\WINDOWS\system32\proxypal.exe
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

Message Edited by Axe123 on 09-30-2005 05:54 AM

  • R

    RKinner

    2 Intern

    •

    5851 Posts

    309

    0

    Posted October 1st, 2005 17:00

    Log looks clean.  Nothing obvious.  Try one of the online scans and see if they find anything:
     
     
    Next time it happens see if it's a DNS problem.  Try going to:
     
     
    If you get to Google.com then it's a DNS problem. 
     
    Also Start, Run, cmd, OK to bring up a black screen and type:
     
    ipconfig /all
     
    then highlight the results and press Enter then move to a reply and Edit Paste it.  This will let me see how you are set up and I can tell you some more tests to run.
     
    Ron
  • A

    Axe123

    23 Posts

    309

    0

    Posted October 2nd, 2005 11:00

    Hey thanks for the reply, well I did the online scan thing and four JAVA BYTEVER.A infections showed up, also when I tried to clean these it wouldnt delete.

    Oh and here are the results from the cmd thing, Thanks a bunch!

    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.

    C:\Documents and Settings\Owner>ipconfig /all

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : com
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Unknown
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Cont
    roller
    Physical Address. . . . . . . . . : 00-0D-56-AB-B2-A9
    Dhcp Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 192.168.1.47
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.1.1
    DNS Servers . . . . . . . . . . . : 192.168.1.1
    192.168.1.2
  • R

    RKinner

    2 Intern

    •

    5851 Posts

    309

    0

    Posted October 4th, 2005 22:00

    Boot into Safe Mode with Network Support and try your Trend or Panda scan again and see if it can delete it then.  Does it give you a file name?
     
    Tests:
     
    Do these now while it is working and the next time when you can't get on line and compare the results:
     
    Start, Run, cmd, OK to get to the black cmd screen.
     
    ping 192.168.0.1
     
    You should get 4 replies.  Timeouts mean a problem with the router,the cable, the network card in your PC or the TCP/IP stack.
     
     
    tracert -d google.com
     
    This shows you how many hops it takes to get to google.com.  If it says it doesn't know google.com then do:
     
    nslookup google.com
     
    Do you really have a second DNS at 192.168.0.2?
    Check by
    nslookup
    server 192.168.0.2
    google.com
     
     
    I see you are not using DHCP on your PC.  I have no idea how big your local network is but with static IP addresses there is always the chance of another PC using the same IP address.  This can intermittent connectivity.  Next time you have a problem with connectivity, you can unplug your network cable and then go to another PC on the network and ping your PC. 
     
    ping 192.168.1.47
     
     If something replies then there is someone else on the network trying to use the same IP address.
     
    Ron
     
     
  • A

    Axe123

    23 Posts

    309

    0

    Posted October 6th, 2005 12:00

    Hey there, Well I managed to get rid of the viruses and do the test, here are the results.

    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.

    C:\Documents and Settings\Owner>ping 192.168.0.1

    Pinging 192.168.0.1 with 32 bytes of data:

    Request timed out.
    Request timed out.
    Request timed out.
    Request timed out.

    Ping statistics for 192.168.0.1:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

    C:\Documents and Settings\Owner>tracert -d google.com

    Tracing route to google.com [216.239.57.99]
    over a maximum of 30 hops:

    1 <1 ms <1 ms <1 ms 192.168.1.1
    2 26 ms 25 ms 26 ms 72.234.240.1
    3 25 ms 25 ms 24 ms 10.245.225.29
    4 26 ms 26 ms 25 ms 144.223.63.89
    5 26 ms 26 ms 25 ms 144.232.30.21
    6 79 ms 80 ms 80 ms 144.232.8.46
    7 83 ms 82 ms 83 ms 144.232.20.113
    8 83 ms 83 ms 83 ms 144.232.3.250
    9 85 ms 85 ms 84 ms 144.232.20.7
    10 84 ms 84 ms 84 ms 144.223.243.82
    11 84 ms 85 ms 94 ms 193.251.249.18
    12 84 ms 85 ms 85 ms 66.249.94.10
    13 101 ms 101 ms 101 ms 216.239.49.170
    14 102 ms 103 ms 103 ms 216.239.49.2
    15 101 ms 102 ms 102 ms 216.239.57.99

    Trace complete.

    C:\Documents and Settings\Owner>nslookup
    Default Server: dslrouter
    Address: 192.168.1.1

    > server 192.168.0.2
    Default Server: [192.168.0.2]
    Address: 192.168.0.2

    > google.com
    Server: [192.168.0.2]
    Address: 192.168.0.2

    DNS request timed out.
    timeout was 2 seconds.
    DNS request timed out.
    timeout was 2 seconds.
    *** Request to [192.168.0.2] timed-out
    >

    Umm, I was wondering what is DHCP?
    Also, thank you very much, I'll follow the instructions you gave me when the problem comes again.
  • R

    RKinner

    2 Intern

    •

    5851 Posts

    309

    0

    Posted October 6th, 2005 13:00

    I messed up the tests.  Typos.  Following is corrected version:
     
    Tests:
     
    Do these now while it is working and the next time when you can't get on line and compare the results:
     
    Start, Run, cmd, OK to get to the black cmd screen.
     
    ping 192.168.1.1
     
    You should get 4 replies.  Timeouts mean a problem with the router,the cable, the network card in your PC or the TCP/IP stack.
     
     
    tracert -d google.com
     
    This shows you how many hops it takes to get to google.com.  If it says it doesn't know google.com then do:
     
    nslookup google.com
     
    Do you really have a second DNS at 192.168.1.2?
    Check by
    nslookup
    server 192.168.1.2
    google.com
     
     
    I see you are not using DHCP on your PC.  I have no idea how big your local network is but with static IP addresses there is always the chance of another PC using the same IP address.  This can intermittent connectivity.  Next time you have a problem with connectivity, you can unplug your network cable and then go to another PC on the network and ping your PC. 
     
    ping 192.168.1.47
     
    DHCP is a method for your PC to automatically get an IP address.  When it comes up it sends out a broadcast to everybody on the local net asking if there is a DHCP server.  Normally on a home or small business system the router plays DHCP server and answers back with an IP address for the PC.  It also tells it the mask, default gateway and DNS servers to use.  Usually the router has a pool of addresses to chose from and it assigns one of these to the PC.  Then it makes a note of the assignment so it doesn't give out the same address twice.  Most low end routers come programmed to do the DHCP server bit and use the either the lower or upper end of the 192.168.0.1-192.168.0.254 range.  In your router's case the range is 192.168.1.1-192.168.1.254.  Without knowing the brand and model of the router I can't tell you which end of the range it uses for the DHCP pool.  If you read the manual that came with the router it should tell you tho it may tell you the range of Static addresses that you can use instead.  Microsoft does not mention DHCP in their Network setup.  Under TCP/IP properties for the Local Area Connection they offer a Choice of Obtain an IP Address Automatically or Use the Following.  The Automatic option is the default and uses DHCP to obtain an IP address.
     
    Ron
     

Dell Support Resources

Latest Solutions

View More