intermittent internet access

sleemie · 07-10-2006, 12:26 PM

Not sure if this is the right section for this because i'm not sure the root of the problem, but i'm getting spoty internet access. it works fine most of the time, but every now and then I lose the connection. I have access through my cable company and everything is running through a wireless modem, but the main CPU which is one of the systems i'm experiencing the problem with is connected physically to the router.

I've done all the spyware stuff and it SEEMS to be clean. I've done a hijack log, but I figure this isn't the right place to post that. I wanted to get some ideas on other possible problems...maybe a way to check to see if there's a physical problem with the router or something. I don't know how to test the router or modem to see if there's any problem with it. I've already done the unplugging the modem thing.

Also, which is a separate problem, the speed i'm getting connected wirelessly is pretty slow. every now and again it'll jump up to like 36 Mbps, but most of the time it's under 20, and a lot of times it drops way down to 5.5 or less. I'm not that far away from it. it's in the basement and i'm on the upper level only about 20 feet away from the entrance, and the router is located at the bottom of the steps, I would say a total distance of no more than 100 feet.
and of course I also have the intermittent internet access problem, which applies both wireless and physically connected.

I posted the previous in the modems/cable section, but no response. now i'm posting the hijack log here just in case it might be related to that. It appears to be clean. This system was previously heavily infected and I cleaned it up as best I could, but that doesn't mean I didn't miss something that hijack isn't picking up. I've already done adaware, spybot, ewido, trends housecall, so please don't have me start all the way from the beginning and do that all over again.

Logfile of HijackThis v1.99.1
Scan saved at 12:30:52 PM, on 7/8/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/Me.../bridge-c9.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.com/app/ST/ActiveX.ocx
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {9BE8D7B2-329C-442A-A4AC-ABA9D7572602} - http://activex.microsoft.com/objects/ocget.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Vikesrock8411 · 07-10-2006, 06:08 PM

Download WinsockFix- Save it to your desktop.

Run WinsockFix.exe
Warning this will also remove legitimate LSPs such as those placed by Firewalls and Antivirus programs, these programs may have to be reinstalled to work properly.

Download Hoster- Unzip it to your desktop.

Open up Hoster

Make sure that the "make hosts writable?" button in the upper right corner is enabled.
Click back up Host files
Click Restore orginal host files
Close the program

Reboot and see if the problem is still present.

sleemie · 07-10-2006, 07:59 PM

I ended up calling the cable company and found out the cable modem was outdated and needed to be upgraded. It seems to have fixed the problem, but it's still kind of slow to open a new web page. Once the homepage opens getting to the links is okay, but when first opening the page it's somewhat slow.

Should I still run those programs?

Vikesrock8411 · 07-10-2006, 09:37 PM

They probably won't help you out if now have full net access.

Your system certainly appears to be clean but we can perform some malware checks if you wish.

07-10-2006, 12:26 PM	#1 (permalink)
sleemie Registered User Join Date: Mar 2003 Location: Virginia Posts: 156 OS: Windows XP	intermittent internet access Not sure if this is the right section for this because i'm not sure the root of the problem, but i'm getting spoty internet access. it works fine most of the time, but every now and then I lose the connection. I have access through my cable company and everything is running through a wireless modem, but the main CPU which is one of the systems i'm experiencing the problem with is connected physically to the router. I've done all the spyware stuff and it SEEMS to be clean. I've done a hijack log, but I figure this isn't the right place to post that. I wanted to get some ideas on other possible problems...maybe a way to check to see if there's a physical problem with the router or something. I don't know how to test the router or modem to see if there's any problem with it. I've already done the unplugging the modem thing. Also, which is a separate problem, the speed i'm getting connected wirelessly is pretty slow. every now and again it'll jump up to like 36 Mbps, but most of the time it's under 20, and a lot of times it drops way down to 5.5 or less. I'm not that far away from it. it's in the basement and i'm on the upper level only about 20 feet away from the entrance, and the router is located at the bottom of the steps, I would say a total distance of no more than 100 feet. and of course I also have the intermittent internet access problem, which applies both wireless and physically connected. I posted the previous in the modems/cable section, but no response. now i'm posting the hijack log here just in case it might be related to that. It appears to be clean. This system was previously heavily infected and I cleaned it up as best I could, but that doesn't mean I didn't miss something that hijack isn't picking up. I've already done adaware, spybot, ewido, trends housecall, so please don't have me start all the way from the beginning and do that all over again. Logfile of HijackThis v1.99.1 Scan saved at 12:30:52 PM, on 7/8/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Analog Devices\SoundMAX\Smtray.exe C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wuauclt.exe C:\HiJackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/Me.../bridge-c9.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.com/app/ST/ActiveX.ocx O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O16 - DPF: {9BE8D7B2-329C-442A-A4AC-ABA9D7572602} - http://activex.microsoft.com/objects/ocget.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

07-10-2006, 06:08 PM	#2 (permalink)
Vikesrock8411 Analyst, Security Team Join Date: Jun 2005 Posts: 3,065 OS: Windows XP	Download WinsockFix- Save it to your desktop. Run WinsockFix.exe Warning this will also remove legitimate LSPs such as those placed by Firewalls and Antivirus programs, these programs may have to be reinstalled to work properly. Download Hoster- Unzip it to your desktop. Open up Hoster Make sure that the "make hosts writable?" button in the upper right corner is enabled. Click back up Host files Click Restore orginal host files Close the program Reboot and see if the problem is still present. __________________

07-10-2006, 09:37 PM	#4 (permalink)
Vikesrock8411 Analyst, Security Team Join Date: Jun 2005 Posts: 3,065 OS: Windows XP	They probably won't help you out if now have full net access. Your system certainly appears to be clean but we can perform some malware checks if you wish. __________________

07-10-2006, 07:59 PM	#3 (permalink)
sleemie Registered User Join Date: Mar 2003 Location: Virginia Posts: 156 OS: Windows XP	I ended up calling the cable company and found out the cable modem was outdated and needed to be upgraded. It seems to have fixed the problem, but it's still kind of slow to open a new web page. Once the homepage opens getting to the links is okay, but when first opening the page it's somewhat slow. Should I still run those programs?