Internet Freezes

**ZER0X** · 09-18-2004, 01:06 PM

Sometimes when I'm on the net I go to my homepage and it just sits there for ages like 30 seconds before it starts working again. and when it doesn't find the site it goes to Errorplace.com I hate that can't get rid of it.

Could someone help me out here, drives me mad coz when I Host a game and the Internet freezes like that, He gets kicked out

thanks ZER0X

4W4K3 · 09-18-2004, 03:31 PM

do you have 56K? or wat?

Lorand · 09-18-2004, 03:38 PM

You got a spyware. Run Spybot. If it doesn't help, run HijackThis and post its log here.

**ZER0X** · 09-19-2004, 01:35 AM

Quote:

Originally Posted by 4W4K3

do you have 56K? or wat?

Yer I have 56k

and I'll try Spybot, and Hijackthis aswell

**ZER0X** · 09-19-2004, 02:03 AM

Spybot found a few things, and now im using Hijackthis

Logfile of HijackThis v1.97.7
Scan saved at 11:05:57 AM, on 19/09/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qau10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bigpond.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = BigPond Dial-Up Residential Internet Explorer
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://qau10.hpwis.com/
R3 - URLSearchHook: (no name) - _{5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {E1027C9B-CD21-42C8-B309-2ACC1BDAF39E} - C:\WINDOWS\sxkske.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: ninemsn Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1629.0\en-au\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\MSDXM.OCX
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: ICQ 4.0 (HKLM)
O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://www.bigpond.com/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab30149.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...n.cab30149.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{26F4E7AA-F662-4475-AEBA-C2391D938EE5}: NameServer = 203.49.70.92 139.134.2.190

Avant Technologies · 09-19-2004, 03:16 AM

Your HiJackThis log looks perfectly normal

The only entries you should remove are the two O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) ones, and the O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file); they're harmless, but they're unnecessary.

Here are two suggestions:
- Run a (free) online virusscan at http://housecall.trendmicro.com/ - it might take a looooong time with 56k, though.
- Download SwatIt - yups, another spyware scanner, but way more in-depth than Spybot or Adaware.

4W4K3 · 09-19-2004, 04:04 AM

Quote:

Originally Posted by ZER0X

Yer I have 56k

if you dont find spyware i would suspect old modem drivers or possibly a bad line.

**ZER0X** · 09-19-2004, 04:22 AM

Yer possibly a bad line, but ive been having this problem since I started getting an errorplace thingy, it's been really annoying......probably got a hidden virus somewhere.

Lorand · 09-19-2004, 09:01 AM

The "O2 - BHO: (no name) - {E1027C9B-CD21-42C8-B309-2ACC1BDAF39E} - C:\WINDOWS\sxkske.dll" is very dubious.

**ZER0X** · 09-19-2004, 09:15 AM

Yer, well I took a look at this Errorplace thingy and I downloaded a Prog to delete it, but didn't work

i'll check out that DLL.

09-18-2004, 01:06 PM	#1 (permalink)
ZER0X Moderator Join Date: Aug 2004 Location: Australia Age: 18 Posts: 1,417	Internet Freezes Sometimes when I'm on the net I go to my homepage and it just sits there for ages like 30 seconds before it starts working again. and when it doesn't find the site it goes to Errorplace.com I hate that can't get rid of it. Could someone help me out here, drives me mad coz when I Host a game and the Internet freezes like that, He gets kicked out thanks ZER0X __________________ AMD X2 4000+ Socket AM2 2Gb RAM DDR2 667 Dual Channel 160Gb ATA100 8mb ASUS EN8800GT 512mb

09-18-2004, 03:31 PM	#2 (permalink)
4W4K3 VIP Member Join Date: Jul 2004 Location: Lewisville, TX Age: 20 Posts: 6,858	do you have 56K? or wat? __________________ My Computer I choose to believe what I was programmed to believe. Can I eat your brain? FOLDING FOR THE GOOD OF MANKIND :F@H Team 44358

09-19-2004, 02:03 AM	#5 (permalink)
ZER0X Moderator Join Date: Aug 2004 Location: Australia Age: 18 Posts: 1,417	Spybot found a few things, and now im using Hijackthis Logfile of HijackThis v1.97.7 Scan saved at 11:05:57 AM, on 19/09/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVG6\avgserv.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\WINDOWS\system32\crypserv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe C:\Program Files\Messenger Plus! 3\MsgPlus.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Owner\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qau10.hpwis.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bigpond.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = BigPond Dial-Up Residential Internet Explorer R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://qau10.hpwis.com/ R3 - URLSearchHook: (no name) - _{5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: (no name) - {E1027C9B-CD21-42C8-B309-2ACC1BDAF39E} - C:\WINDOWS\sxkske.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) O3 - Toolbar: ninemsn Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1629.0\en-au\msntb.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\MSDXM.OCX O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: ICQ 4.0 (HKLM) O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O14 - IERESET.INF: START_PAGE_URL=http://www.bigpond.com/ O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab30149.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...n.cab30149.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{26F4E7AA-F662-4475-AEBA-C2391D938EE5}: NameServer = 203.49.70.92 139.134.2.190 __________________ AMD X2 4000+ Socket AM2 2Gb RAM DDR2 667 Dual Channel 160Gb ATA100 8mb ASUS EN8800GT 512mb Last edited by ZER0X; 09-19-2004 at 02:06 AM.

09-19-2004, 03:16 AM	#6 (permalink)
Avant Technologies New Member Join Date: Sep 2004 Location: Allen TX Posts: 10	Your HiJackThis log looks perfectly normal The only entries you should remove are the two O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) ones, and the O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file); they're harmless, but they're unnecessary. Here are two suggestions: - Run a (free) online virusscan at http://housecall.trendmicro.com/ - it might take a looooong time with 56k, though. - Download SwatIt - yups, another spyware scanner, but way more in-depth than Spybot or Adaware. __________________ Avant Technologies Allen, TX

09-19-2004, 04:22 AM	#8 (permalink)
ZER0X Moderator Join Date: Aug 2004 Location: Australia Age: 18 Posts: 1,417	Yer possibly a bad line, but ive been having this problem since I started getting an errorplace thingy, it's been really annoying......probably got a hidden virus somewhere. __________________ AMD X2 4000+ Socket AM2 2Gb RAM DDR2 667 Dual Channel 160Gb ATA100 8mb ASUS EN8800GT 512mb

09-18-2004, 03:38 PM	#3 (permalink)
Lorand VIP Member Join Date: Dec 2003 Location: Bucharest Age: 41 Posts: 3,042	You got a spyware. Run Spybot. If it doesn't help, run HijackThis and post its log here.

09-19-2004, 09:01 AM	#9 (permalink)
Lorand VIP Member Join Date: Dec 2003 Location: Bucharest Age: 41 Posts: 3,042	The "O2 - BHO: (no name) - {E1027C9B-CD21-42C8-B309-2ACC1BDAF39E} - C:\WINDOWS\sxkske.dll" is very dubious.

09-19-2004, 09:15 AM	#10 (permalink)
ZER0X Moderator Join Date: Aug 2004 Location: Australia Age: 18 Posts: 1,417	Yer, well I took a look at this Errorplace thingy and I downloaded a Prog to delete it, but didn't work i'll check out that DLL. __________________ AMD X2 4000+ Socket AM2 2Gb RAM DDR2 667 Dual Channel 160Gb ATA100 8mb ASUS EN8800GT 512mb

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode