Bob565656

Hi all, I don't know what the problem is but it is driving me crazy. Here is the description:

I just formatted my computer, installed WinXP-Pro, and everything was fine. I installed all my drivers and installed an internet DSL connection. I then went through the process of aquiring an antivirus (Panda) because somewhere I got infected with a W32 Gaobot & other variants that were replicating on their own.

I think everything is clean but now the internet is kind of messed up. It only works 10% of the time, the other 90% it's either trying to connect or when it is connected, it doesnt open anything. I think it might be some virus altering my dialup connections but no antivirus is catching it.

Both my DSL line and my isp are having no problems so the problem is at my end. I moved my modem directly beside my phonejack thinking the cord was too long, but to no evail. I also noticed that whenever I install some sort of windows update or SP2, my internet will stop working if it was working in the past. No firewalls are active to block my connection.

Anyone have any ideas? This is pissing me off, I've been at it for 3 days now. Is there a way to reinstall dialup connections or to reinstall its required files somehow? This is my best idea so far and I don't know how to do it. If anyone has any ideas, feel free to comment, thx. I also uninstalled Panda because it was hogging to much memory @ installed Norton Antivirus 2004.


HIJACKTHIS LOG
Logfile of HijackThis v1.99.1
Scan saved at 9:10:45 PM, on 12/20/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O17 - HKLM\System\CCS\Services\Tcpip\..\{9CE83D36-8AA4-4B22-9D68-3EF2386C9ADD}: NameServer = 216.58.97.21 216.58.97.20
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

Bob565656

When it is connected and it doesn't open anything sometimes this happens:

if I try to open www.yahoo.com, it will scower over different domains before returning cannot find yahoo.com, eg. it will for www.yahoo.com.com, www.yahoo.com.net, etc. This might be a characteristic of some virus or something??

Alphatronix

thats some yukky stuff in your computer. Sounds like a full blown worm to me.

Take off norton, its a bigger hog then panda.

Run EVERY possible spyware, mailware, bugware, anit-virus program imaginable. lol.

I wouldnt be suprised if you have some sort of prefech file that opens the door to all your problems the second ya try to go online. try running some registry cleaner program after ya run all the other stuff.

Other then that, if HIJACKTHIS isnt coming up with anything, not much else to do. Maybe some power user on the forums might have a solution..