Home › Forums › Archives › Computer Support › Computer Support Discussion › Serious problem – connection is messed
- This topic has 14 replies, 3 voices, and was last updated 19 years, 6 months ago by kron_19792000.
-
AuthorPosts
-
October 22, 2004 at 8:05 pm #1920DeadeyeMember
I just formatted my WindowsXP, installed my drivers and such and connected to the internet.
I noticed that before I could open any page, or start any program related to the internet, my connection was busy with something else.
Very busy to be exact, dramatically slowing down my already slow dial up connection. So right out of nowhere, this pop up came up.
The page was this: http://www.angelfire.com/bug2/dsggh65gf/aha.html
I do NOT have a Gmail account, never did, never tried to get one.
I’m desperate and killing for help as this is making my connection almost useless and it took me ages to get to BBB forums and post this.Every time I run the Spybot S&D I see that the following spyware programs are installed: Avenue A. Inc, 180Solutions, N-case, VX2/f.
I remove them and they come back again. Especially the VX7/f one.I dont know if I’m infected with a virus, it will take centuries to download the latest Norton definitions so my hands are tied. 😡
I have important projects to finish on this computer based on the internet, I’m running out of time and this problem is a real nightmare.Any suggestions apart from shooting my computer?
October 22, 2004 at 9:06 pm #36251kron_19792000MemberIf your only problem is that pop up you can try this you can redirect the web page to the local host.
Go to c:>windows>system32>drivers>etc there you will find a file called Hosts, open it with note pad. Then go to the last line press enter and cut and paste the following127.0.0.1 localhost
127.0.0.1 angelfire.com/bug2/dsggh65gf/aha.html
That should get rid of the problem if it is only a pop up that is worrying you.
Good luckOctober 22, 2004 at 9:53 pm #36245DeadeyeMemberQuote:quote:Originally posted by DeadeyeI noticed that before I could open any page, or start any program related to the internet, my connection was busy with something else.
Very busy to be exact, dramatically slowing down my already slow dial up connection.Does that look like that i’m worrying about a pop up?
October 22, 2004 at 9:57 pm #36240DavidParticipantkron’s code is incorrect, the correct entry in the HOSTS file is “127.0.0.1 angelfire.com”.
Start > Run > MSCONFIG > ‘Startup’ > Disable All. Restart your computer and run ad-aware and Spybot.
October 23, 2004 at 5:35 am #36252kron_19792000MemberTy david
I just noticed I copied and pasted the whole thing.
Deadeye
Do u have any peer to peer software that starts up when u restart the comp. Try using a prog called fport it will tell u what prog is running off which port that should give u an idea if some thing that should not be running is.
u can get fport at http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/proddesc/fport.htm
Hope this helpsOctober 23, 2004 at 5:43 am #36241DavidParticipantQuote:quote:Originally posted by kron_19792000Ty david
I just noticed I copied and pasted the whole thing.
Deadeye
Do u have any peer to peer software that starts up when u restart the comp. Try using a prog called fport it will tell u what prog is running off which port that should give u an idea if some thing that should not be running is.
u can get fport at http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/proddesc/fport.htm
Hope this helps“netstat -b -v” executed from cmd will also tell you what program is running on what port with what modules.
October 23, 2004 at 2:29 pm #36246DeadeyeMemberOkay so I tried everything suggested here. I ran spybot and ad aware as you recommended Dave, found a load of spyware and removed it. But its on my computer again now. It never stops coming.
As for the ”host” file, I’m not sure if I did it right because that page keeps coming up (the angelfire one).
This is what is in it right now (tell me if its correct)Quote:quote:# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a ‘#’ symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host127.0.0.1 localhost
127.0.0.1 angelfire.comMy connection is still busy with something, cant figure out what though. The angelfire page tries to download a trojan in my system, a file name grgregre.exe. I’m at a loss.
No p2p network working, nothing I could suspect of. Even my MSN says there is a connectivity problem and wont let me sign in.
Nothing’s working properly, the command you suggested for cmd shows up some options as ”-a” ”-n” etc, not a list of working programs.
The fport showed me a HUGE list of 2 programs: winmon and crsss64. What are those? Are they responsible for my mess?
Please help…October 23, 2004 at 2:40 pm #36242DavidParticipantAdd: 127.0.0.1 http://www.angelfire.com
Did you try scanning your computer in Safe-Mode? Press F8 before the boot screen and select “Safe Mode.”
October 23, 2004 at 3:38 pm #36247DeadeyeMemberI just did…:D
Dave, I love you in a non sexual way…
October 23, 2004 at 5:05 pm #36243DavidParticipantI know, many people do…
So is it working now or not?
October 23, 2004 at 7:21 pm #36248DeadeyeMemberSort of.
Sometimes it works, sometimes it starts messing again, but its definetly a bit better.
Is there any folder that all files from the internet are being installed?
Deleting everything from my temporary internet files would work maybe?
Something on my computer downloads all that crap, I just need to track it down somehow…or thats the impression I have.
What do you think?-edit-
I just went to my control panel/add-remove programs and noticed 2 Ad programs installed there that I have removed many times before. Those are WebRebates and Win Comm. Maybe they are responsible for my mess. How do I block them from getting access to my computer?October 23, 2004 at 9:20 pm #36244DavidParticipantStart > Run > “MSCONFIG” > Startup > Disable All > Reboot > Safe Mode > Ad-Aware scan.
October 24, 2004 at 12:36 pm #36249DeadeyeMemberThe ad aware scan came up empty but my Antivirus did find a spybot worm.
I hope that was the problem. The connection still seems to be busy with something but it happens rarely now. I’ll repeat the safe-mode scans.
On a side note and since I dont want to flood the forum with topics, I try to run some programs on WinXP, kinda old ones, and this message comes up:Quote:quote:16 bit Windows SubsystemC:WINDOWS/SYSTEM32AUTOEXEC.NT. The system file is not suitable for running MS-DOS and Microsoft Windows applications. Choose ”Close” to terminate the application.
Do I have to download something to make this work? Thanks for the help so far and sorry for the off-topic.
October 24, 2004 at 5:56 pm #36253kron_19792000MemberOk that problem is due u’r autoexec.nt is damaged. You could try this
start>run>type”C:windowsrepair” with out the quotes copy the autoexec.nt file then
start>run>type”Windowssystem32″ paste the file you have copied into the system32 folder. That should do the trick
Hope that helpedOctober 24, 2004 at 8:42 pm #36250DeadeyeMemberThanks it did, and spybot was probably my problem. Its all clear now.
Thank you all. -
AuthorPosts
- You must be logged in to reply to this topic.