intenet connection keeps logging off 2

[bigdin]

have an irritating problem which has just started for 4 days ago when I connect to the internet after 3-4minutes I have to restart or else take the power from my Linksys router for 5 seconds and then I can log on again. In the tools settings of my MIE I tried changing to auto detect but it didn't help so I returned to previous settings. For 4 days ago i scanned my PC for possible viruses. Can anyone help,,,,Denis

 

[bcastner]

Replace the Linksys router power supply.
This is a direct link for the request. It takes about 3 Business Days to complete. Even if the router is out of warranty they will honor the claim.

https://ssl.linksys.com/rma1.asp

 

[bigdin]

Hello Bcastner,
have applied to linksys but I thought I should let you know, I have Skype on my PC so I can talk to my family long distance this works with no hitches. I have just been talking to my brother for an hour so I presume my router is okay!!or is it.? I tried after to log on to tek-tips but this took along time by disconnecting the power supply from the router 3-4 times
Could this be a browser problem, I also have the same problem on my e-mail.
So why would does the Skype program work and the net and e-mail not work??........thanks....denis

 

[bcastner]

It could well be an LSP problem, as your Skyppe does not use Winsock services. See faq779-4625

 

[bigdin]

Hello bcastner,
I believe it is an LSP problem I followed your suggestion and downloaded the winsock fix and I haven't been cut off for the last hour which is great. But I wonder, what was happening when I disconnected the power supply for 10 seconds and then I could log on again??

many thanks........Denis

 

[bcastner]

A DHCP renewal.

Then the malware LSP eventually kicks in and confounds the connection.

 

[bigdin]

Back again bcastner.
This problem has come back again only it logs off faster.
Run the winsock fix you recommended again but it didn't help. I found another lspfix at

http://www.cexx.org/lspfix.org

and I ran it but I wasn't sure what to do with the result. I had the choice to remove certain files as follows:

mswsock.dll Tcpip
winmr.dll NTDS
nwprovau.dll NWLink IPX/SPX/Netbios
CSLSP.DLL (protocol handler)
rsvpsp.dll (protocol handler)

What I understane is that a malware may have loggeg on to my PC which causes the internet connection to log off?
Have also run the list of antivirus programs which I picked up from one of your earlier solutions. So I am at a loss.

 

[bcastner]

Could you state the OS Version of Windows, and your service pack level?

 

[bigdin]

Microsoft Windows XP proffesional
version 2002
service pack 2 .
I have now run the winsock fix again and I've but up and running for an hour and a half without having to log on again. Funny to see how long it lasts. I also rebooted PC twice in a row just to try something.

 

[bcastner]

For Service Pack 2 the best way to restore the Winsock stack is simply:

Start, Run, netsh winsock reset
Then reboot.

 

[bcastner]

Try one of the trialware versions of an anti-trojan. I listed some in my FAQ above. My favorite of the month is Giant Antispyware:

http://www.giantcompany.com/(hhgyyq45s5wvvuz4yzqxzxui)/default.aspx

As a guess you still have an issue with a piece of malware generally called lop or loph. Antivirus products tend to ignore this one.

 

[bigdin]

Thanks bcastner!!
you mention netsh, what is this?

Quite a lot when I start my PC i get a popup box that says
"cannot create shell notification" I never thought to mention this before. has this something todo with netsh?

 

[bigdin]

You are an amazing person bcastner you have on many occasions hit the nail!! I downloaded Giant and run. It found 27 spyware problems for example your first suggestion:
c2.lop spyware
a better internet adaware
advanced logger dll key logger
roing search browser hijacker
claria.dashbar
All of the following were quarantined.

One called "I spy Now commercial remote control" this one it ignored it didn't seem to be a threat.
Anyway thanks again

 

[bcastner]

Netsh = netsh.exe

This is a native command line tool for XP that allows configuration of TCP/IP properties, and in SP2 command line configuration of the firewall.

XP Sp2 has added the feature to Netsh.exe to rebuild the Winsock stack with the command line: netsh winsock reset

It can also rebuild the TCP/IP service stack:
netsh int ip reset resetlog.txt

 

[bcastner]

I am quite impressed with the Giant product, and the Security forums of several sites seem very pleased with this new contendor in the market.

I purchased a copy for my daughter's laptop because I simply got tired of manually cleaning it weekly. I used this site to order the product at a 20% discount:

http://www.dozleng.com/purchase.html

 

[bigdin]

Hello Bcastner or whoever takes up the gauntlet
I'm back again. Just yesterday after quite a few weeks without problems this logging of started again.My trial for the Giant product ran out so I purchased it. The scenario; 11.14 logged off, disconnected power from linksys 10 seconds and I was up again until 11.26 logged off, power of linksys 10 seconds, okay until 11.36 logged off same procedure,11.42+11.51. I then ran PC bug doctor, Hijack this, spybot, Shredder. Okay until 13.00-13.13 ran all of the same procedure plus Giant. Today I turned off system restore and ran all the antivirus programs + Adaware up, to now internet is running well but Outlook will not send or receive my mail, cancelled account and remade it again. Funny thing is that my wife has her own place on the PC and she can send and receive mail.
All the times that I couldn't log on to the web I could talk to people through Skype.com. Would it be an idea to reinstall IE or OUTLOOK.
There is two urls that bother me and I can't get trid of them:

http://www.bitelynphofxku.uk/kpOOZ/_XwgbI7tiyv4fUHf3RP2kKtIyR9BJR7gjrr9hqUbYw73Q7v8vHa2sxSj/C.html

change to

http://www.eswyksjqjgaft.net/kpOOZ/_XwgbI7tiyv4fUHf3RP2kKtIyR9BJR7gjrr9hLrio2z09Xo8vHa2sxSj/C.html.

This is what comes up on Giant when I reboot my system. They have something to do with search.com, are these maybe viruses or something

 

[bcastner]

Start with faq779-4625

 

[bigdin]

Now I have been reading the info given by microsoft about checing PROTOCOL (MSinfo32)the article describes 10 headings and a possible 17, I have 34? before I go any further could this be checked and do I have so many because I have run the Winsock Fix 10-15 times.
Name McAfee_GdLsp [MSAFD Tcpip [TCP/IP]]
Name McAfee_GdLsp [MSAFD Tcpip [UDP/IP]]
Name McAfee_GdLsp [RSVP UDP Service Provider]
Name McAfee_GdLsp [RSVP TCP Service Provider]
Name McAfee_GdLsp [MSAFD nwlnkipx [IPX]]
Name McAfee_GdLsp [MSAFD nwlnkspx [SPX]]
Name McAfee_GdLsp [MSAFD nwlnkspx [SPX] [Pseudo Stream]]
Name McAfee_GdLsp [MSAFD nwlnkspx [SPX II]]
Name McAfee_GdLsp [MSAFD nwlnkspx [SPX II] [Pseudo Stream]]
Name McAfee_GdLsp [MSAFD NetBIOS [\Device\NwlnkNb] SEQPACKET 3]
Name McAfee_GdLsp [MSAFD NetBIOS [\Device\NwlnkNb] DATAGRAM 3]
Name McAfee_GdLsp [MSAFD NetBIOS

[\Device\NetBT_Tcpip_{3BBF674C-1113-41D3-B7DF-E12A5AB9EF53}] SEQPACKET 0]
Name McAfee_GdLsp [MSAFD NetBIOS

[\Device\NetBT_Tcpip_{3BBF674C-1113-41D3-B7DF-E12A5AB9EF53}] DATAGRAM 0]
Name McAfee_GdLsp [MSAFD NetBIOS

[\Device\NetBT_Tcpip_{FB458613-4778-4C16-92F4-0450C437C848}] SEQPACKET 1]
Name McAfee_GdLsp [MSAFD NetBIOS

[\Device\NetBT_Tcpip_{FB458613-4778-4C16-92F4-0450C437C848}] DATAGRAM 1]
Name McAfee_GdLsp [MSAFD NetBIOS

[\Device\NetBT_Tcpip_{74046427-157B-460E-8CF1-35C9520B9896}] SEQPACKET 2]
Name McAfee_GdLsp [MSAFD NetBIOS

[\Device\NetBT_Tcpip_{74046427-157B-460E-8CF1-35C9520B9896}] DATAGRAM 2]
Name MSAFD Tcpip [TCP/IP]
Name MSAFD Tcpip [UDP/IP]
Name RSVP UDP Service Provider
Name RSVP TCP Service Provider
Name MSAFD nwlnkipx [IPX]
Name MSAFD nwlnkspx [SPX]
Name MSAFD nwlnkspx [SPX] [Pseudo Stream]
Name MSAFD nwlnkspx [SPX II]
Name MSAFD nwlnkspx [SPX II] [Pseudo Stream]
Name MSAFD NetBIOS [\Device\NwlnkNb] SEQPACKET 3
Name MSAFD NetBIOS [\Device\NwlnkNb] DATAGRAM 3
Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{3BBF674C-1113-41D3-B7DF-E12A5AB9EF53}] SEQPACKET 0
Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{3BBF674C-1113-41D3-B7DF-E12A5AB9EF53}] DATAGRAM 0
Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{FB458613-4778-4C16-92F4-0450C437C848}] SEQPACKET 1
Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{FB458613-4778-4C16-92F4-0450C437C848}] DATAGRAM 1
Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{74046427-157B-460E-8CF1-35C9520B9896}] SEQPACKET 2
Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{74046427-157B-460E-8CF1-35C9520B9896}] DATAGRAM 2
Does some of these have to be removed??

thanks .......Denis

 

[bcastner]

I think those entries are likely fine. You should check with McAfee about a possible upgrade to their software, as it has been known to cause connection issues.

 

[bigdin]

Waiting on reply from Mc Affee because this problem seems to be recurring!!
I believe my PC takes to long to start up 3mins approx.
Can some one check this windows task manager list;

iexplore.exe, iexplore.exe, taskmgr.exe, skype.exe, skinkers.exe, Rulaunch.exe, explorer.exe, VSStat.exe, gcasDtServ.exe, realsched.exe, svchost.exe, ScsiAccess.exe, salm.exe, Avsynmgr.exe, Avconsol.exe, spoolsv.exe, svchost.exe(LOCAL) Mcshield.exe, svchost.exe (network service), svchost.exe (system), svchost.exe (network service) svchost.exe(system). Islass.exe, services.exe, winlogon.exe, csrss.exe, smss.exe, VSHWIN32.EXE, gcasserv.exe, MCCINST.EXE, alg.exe, qttask.exe, CMGrdian.exe, System, System Idle Process

I have been cut off again so after all the scanning again!! It seems that everything goes better when i use the winsock fix. So there seems to be something that I can't get rid of.
Thinking of doing a complete format but I hate the thoughts of it.

all the best ...Denis