Curse

Painbringer · Jun 02, 2008, 01:35 PM // 13:35

Where to begin (any suggestions)

Three weeks ago I was surfing GW guru when there was errors on the page (some of you may still see this ad errors or something) anyway I blindly clicked to get to the forums which was a big mistake. I must have click on an ad banner. I had windows prompt me stating I had an error on my system click here to resolve. Mislead by the perfect looking Windows error prompt….like a fool I clicked. This is where the first set of problems began. While on the internet Windows started to open on there own and my system started to lag while surfing the internet.

I run Norton and update my protection all the time. Three days later and 2 full system scans and many other checks my system finally caught a Trojan Vundo. The software would remove it and after you would reboot and log on again it would catch another copy (a vicious circle of repair reboot repair reboot). I searched the net for other removing tools and finally found one. Downloaded it ran it and nothing. So I have ran scans (with system restore off and in safe mode also disconnected from the internet at least 10 times in the last 2 weeks) during this time Guild Wars ran fine with no real change in lag at least nothing I noticed. This changed on Friday 05/30/08. I logged in and nothing… I could not get past the Character Screen. It would sit on the loading screen and then time out. I refreshed my IP connection following the suggestions from the help prompts and from there own I have kind of a wave issue (ping goes from 2000 or higher range down to 100 and back and forth back and forth makes it impossible to play). Frustrated I gave up and looked again to catching this virus that plagued my system. Well the special tool I downloaded finally caught it and removed it.

I was happy and ran the tool twice to make sure it was gone and no virus found. Great... I finally caught it this is great I thought to myself. Rebooted and pulled up GW and no change to the new lag problem. Waves of fast then slow. Also at the same time the internet would barely pull up a page. Half the time I would get time outs. I even changed my web browser from explorer to fire fox to see if I got improvements and unfortunately no. Frustrated thinking this is still the virus at work I did a full system restore a cleansing process more for myself a start from scratch approach. Yes I was pissed and went to extreme measures but I had a system that could not access the internet or the game I play on my free time all the time.

Loaded my system to factory settings and was starting the download process to load my virus software and no change #$^%$&% I timed out of the downloader. Over and over. Ok now what.

I called my DSL provider and was on the phone with them for over an hour. They show no problems in my area. ( I also have cable with them and it is fine) We reset my IP address. We pinged sites from the command prompt (sent 4 pings and received 4 replies from Google) (sent 4 pings and received 2 reply from Yahoo) and another site sent 4 pings and got 2 replies). We tested my modem and it seemed fine with good readings. We disabled the driver on the Ethernet Card and rebooted to restore and no changed in performance. (Even ran checks in safe mode). The devise manger reports no problems. My provider can send someone out to check the lines to my house for a charge. But that is all they can help with. Since I have no issues with cable I am assuming this is a waste to have them check it out.

I am far from an expert in this area and at my wits end. Any ideas? On what to do? I do not have another computer at home otherwise I would have tested the connection.

Older computer from 2004-5 range
e-machine T6524
Running Windows XP
1 Gig ram
ATI 1550 256 RAM (Yes I am cheap, but for what I do on the computer it works great for me)

Please help

Painbringer

PS yes I am a fool for clicking

natural_Causes · Jun 02, 2008, 01:56 PM // 13:56

Quote:

I even changed my web browser from explorer to fire fox

Thats probably how you got a virus. IE is basically a virus hidden as a web browser.

How long have you had the computer? It sounds like it may be time for a clean install of Windows. After a while, the Windows system gets bogged down with old files from programs that were un-installed and old registry info. To help clean some of it up, download a program such as CCleaner (google it), and run the system and Regestry scan. Another good program for this is "Advanced Windows Care V2 Personal". This also scans for spyware, and has sped up my system and stopped the dreaded BSOD.

Painbringer · Jun 02, 2008, 02:01 PM // 14:01

Quote:

Originally Posted by natural_Causes

Thats probably how you got a virus. IE is basically a virus hidden as a web browser.

How long have you had the computer? It sounds like it may be time for a clean install of Windows. After a while, the Windows system gets bogged down with old files from programs that were un-installed and old registry info. To help clean some of it up, download a program such as CCleaner (google it), and run the system and Regestry scan. Another good program for this is "Advanced Windows Care V2 Personal". This also scans for spyware, and has sped up my system and stopped the dreaded BSOD.

I just did a reformat of the hard drive and reload to factory settings from the recovery disks? I can not download a thing if i wanted to... it times out on me 90% of the time.

lakatz · Jun 02, 2008, 02:37 PM // 14:37

Did you clean your registry? It's a good idea to clean your registry after a viral attack. Go to something like geekstogo.com forums or hijackthis forums for help from professional geeks.

Snograt · Jun 02, 2008, 02:39 PM // 14:39

You can ping Google but not connect to it? What error do you get in FireFox when you TRY to connect? Purely 404 not found, or a DNS server error?

@Lakatz - he said he did a full format and restore - that registry is as clean as they get

Painbringer · Jun 02, 2008, 03:10 PM // 15:10

Ok it is weird I will load a page and it takes forever I mean 5 minutes to load a page. I am on a 10 meg DSL it used to be instantaneous.

I really don't have anything set up on my system. I loaded the graphic card software (basic disk that came with it) the keyboard g-11 and mouse (g-5 I think) small downloads for them. And the system let me do it. I go to load up norton and it times out while downloading the patch.

Fire fox... I am pretty sure will time out if I try and download the browser.

Before I reset my system I would get a prompt from Norton "check that the cords are properly connected". When requesting help and support. They seem ok I have a buried cable outside and I have checked from the splice to my computer everything seems fine

On a side note I am tempted to ask my sister in law to come over and hook into the DSL with her laptop to see if she has any issues. at least I coould certainly find out if it is the line. But she lives aways away from me.

IslandHermet · Jun 02, 2008, 05:36 PM // 17:36

This could just be a odd occurrence but I have had many friends get e-machine's and without fail they all crap out.

Everything sounds fine on your DSL.

did you get it at wal-mart?

e-machine comps are like area-51 computers.....I am prolly the only one who knows what a area-51 comp is, lol they went bankrupt years ago.

Chthon · Jun 02, 2008, 06:04 PM // 18:04

After a full reformat and reinstall, that virus should be totally dead. That leaves the DSL people as the source of the connectivity problem. Keep after them.

Painbringer · Jun 02, 2008, 06:04 PM // 18:04

Quote:

Originally Posted by IslandHermet

This could just be a odd occurrence but I have had many friends get e-machine's and without fail they all crap out.

Everything sounds fine on your DSL.

did you get it at wal-mart?

e-machine comps are like area-51 computers.....I am prolly the only one who knows what a area-51 comp is, lol they went bankrupt years ago.

LOL If crapped out I should atleast have issues running other things. It runs fine for anything other than Internet. And I would replace the ethernet card in a heartbeat if i new it was going out. but it shows it is running

Best Buy

I did find this on the web and I will check it tonight

If your PING tests work but you are having problems browsing sites on the Internet
1. If you could ping external sites by both IP address and Name, but cannot browse the web, likely your web browser is misconfigured.
2. Double check that you don't have an incorrect or not needed Proxy server assigned.
For the Internet Explorer - Tools / Internet Options / Connections tab / LAN settings button. Uncheck both Automatically detect settings and Use a proxy server for your LAN.

Brianna · Jun 02, 2008, 06:08 PM // 18:08

If you want, you can head on over to www.lunarsoft.net, they are pretty good with security there too.

They can recommend some things to start getting your PC cleaned up.

http://lunarsoft.net/news/software/3...ti-malware-114 you can also download this and run it, see if it catches the Trojan.

Here is a Malware cleanup page on there too http://lunarsoft.net/downloads/cat_v...alware-cleanup these things seem to do good.

Quaker · Jun 02, 2008, 06:56 PM // 18:56

I've had problems in the past where I could ping sites but not connect. It turned out to be corrupted TCP/IP drivers and/or stacks. If I recall, I had to go through a process involving uninstalling and reinstalling the drivers, etc. The tricky part (which I don't recall) was forcing Windows to install fresh copies off the CD instead of the ones on the hard drive.

Of course, a format C: and complete reinstall would probably fix it, and should be done every now and then anyway. (Which is a good reason for having only the OS installed on C: and creating a D: for everything else.

)

Tarun · Jun 02, 2008, 07:37 PM // 19:37

So, I started reading this post to see what was going on and try to find the issue. I only got as far as:

Quote:

Originally Posted by Painbringer

I run Norton[...]

That right there is your biggest problem. In fact, it's probably the entire problem. Get rid of Norton/Symantec products. Uninstall them COMPLETELY.

You'll need SymNRT to fully remove everything. It'd be a good idea to use Dial-a-fix after you've used SymNRT to remove Norton, that way anything that Norton broke during uninstall/removal (like Windows Updates, SSL, etc.) can get repaired.

You can use avast which is free and does far better than Norton.

Snograt · Jun 02, 2008, 07:47 PM // 19:47

He's a bit stuffed not being able to d/l anything :/

Painbringer, I suggest you do invite your sister-in-law over, get her to download what Tarun suggested, then burn them onto a CD to install on your system.

Painbringer · Jun 02, 2008, 08:21 PM // 20:21

Quote:

Originally Posted by Tarun

So, I started reading this post to see what was going on and try to find the issue. I only got as far as:

That right there is your biggest problem. In fact, it's probably the entire problem. Get rid of Norton/Symantec products. Uninstall them COMPLETELY.

You'll need SymNRT to fully remove everything. It'd be a good idea to use Dial-a-fix after you've used SymNRT to remove Norton, that way anything that Norton broke during uninstall/removal (like Windows Updates, SSL, etc.) can get repaired.

You can use avast which is free and does far better than Norton.

So even if I reformatted and reinstalled to factory settings it Norton can still be messing with my settings ???

Brianna · Jun 02, 2008, 08:25 PM // 20:25

If you reformat (F-Disk, delete the C partition etc) then no there is no files left, thus Norton is gone.

I still think the bashing against Symantec AntiVirus (Not Norton) is null. I haven't had any problems in 2 and a half years and the only one I had recently was self inflicted due to my own stupidity, and my AV caught that and dealt with it for me.

Not to mention that Task Manager uses up more resources than my AV does to run, that makes it even more null in my opinion, plus all of it's updates are done in stealth too and take up no resources either, so you'll never even notice it.

Tarun · Jun 02, 2008, 08:40 PM // 20:40

Quote:

Originally Posted by Painbringer

So even if I reformatted and reinstalled to factory settings it Norton can still be messing with my settings ???

There is literally a blog about all the problems that Norton causes.

http://symantec-sucks.blogspot.com/

Another worth reading about the problems of almost every pay antivirus:
http://djlizard.net/2007/12/23/278/

Note: Symantec's corporate antivirus was originally made by Intel (a part of "LANdesk") and it is almost exactly the same today as it was when Intel first created it - that's why it isn't totally horrible. The detection rate feels about the same as Norton Antivirus, and it catches a lot less spyware pieces than anything else out there.

Brianna · Jun 02, 2008, 08:44 PM // 20:44

But notice how everything is still listed Norton in there.

I do not use anything labeled under ''Norton''

even if it is the same company. Aside, I have not had any of those problems that blog mentions.

I know you aren't referring to me so much, but I'm just throwing it out there anyway. (Ahh I see, that makes sense, whether it's good at detecting things or not is something I can be more inclined to believe, but it did catch most baddies anyways, and it has definition updates quite often so I feel pretty safe at the very least.)

Tarun · Jun 02, 2008, 09:50 PM // 21:50

After having to deal with Symantec's products in the tech shop and seeing how a majority of computers had it and had lots of issues, I don't recommend the use of any product from Symantec except for SymNRT. :P

Grenths Ire · Jun 02, 2008, 11:29 PM // 23:29

sounds like you have a well hidden hijacker. most likely hidden in a rootkit.

my advice (which i strongly recommend you follow) is this:

1) DO NOT LET ANYONE ELSE ON YOUR NETWORK UNTIL THIS ISSUE IS RESOLVED. ie, your sister.

2) go to www.bleepingcomputer.com
3) register there, it is required for assistance and worth your time.
4) make a post there in the appropriate forum.
5) they will most likely have you run an app called hijackthis
6) once you save and post the logfile it creates they will analyze it for free and give you advise for removal of any problems.
7) they may end up having you run one or two other apps, by the way, Rootkit Revealer for instance.

Just follow their advise explicitly and you should have your problem resolved.

Do not, under any circumstances ever click on any link that offers Analysis, Removal, or Repair of your system unless specifically advised to by a well informed and educated person.

i once had a very similar problem and resolved it thusly.

anyway, good luck...

ps- you could go to pcworld.com and research your problem there, but i wager bleepingcomputer will get you fixed up. one caveat though, since they are an all volunteer force don't expect the most hasty results.

Dark Kal · Jun 03, 2008, 10:58 AM // 10:58

If you reformatted your hard drive and only installed essential programs without touching your internet and this setup has worked perfectly before, it's nearly impossible a software issue. I'd recommend you check your line with a different computer (i.e. your sister in law's computer). You can also try resetting your modem/router (disabling power for 10 seconds should work for most hardware). Norton isn't a bad program either it's just that most people are dumb/lazy/impatient.