Ethernet disappears: malware related?

jeremyb_127 · Apr 23, 2007

I am requesting help because my LAN connection repeatedly disappears from my Network Connections folder. I have downloaded and reinstalled the ethernet driver from Dell (Broadcom 570x Gigabit)--sometimes it works to get the ethernet to reappear; other times it does not. No matter what, it disappears again within a day or two. What seems to precipitate the ethernet disappearing is this: I turn the computer on and it shuts down immediately on its own after a few seconds. This might happen 4 or 5 times before it actually boots up successfully.

I suspect that this problem might be related to malware because in February Norton identified bloodhound.exploit.126 on my machine and could not fix it. I have attached runkeys.txt, newfiles.txt, and bdscan.txt to this message and will attach the other three requested files from the 'READ & RUN ME FIRST' page to a second message. BitDefender deleted several files from Norton Quarantine, even though these files did not show up when I tried to remove files from Norton Quarantine per the directions on 'READ & RUN FIRST'. I appreciate your help.

jeremyb_127 · Apr 23, 2007

See three additional attached files. Thanks.

jeremyb_127 said: ↑

I am requesting help because my LAN connection repeatedly disappears from my Network Connections folder. I have downloaded and reinstalled the ethernet driver from Dell (Broadcom 570x Gigabit)--sometimes it works to get the ethernet to reappear; other times it does not. No matter what, it disappears again within a day or two. What seems to precipitate the ethernet disappearing is this: I turn the computer on and it shuts down immediately on its own after a few seconds. This might happen 4 or 5 times before it actually boots up successfully.

I suspect that this problem might be related to malware because in February Norton identified bloodhound.exploit.126 on my machine and could not fix it. I have attached runkeys.txt, newfiles.txt, and bdscan.txt to this message and will attach the other three requested files from the 'READ & RUN ME FIRST' page to a second message. BitDefender deleted several files from Norton Quarantine, even though these files did not show up when I tried to remove files from Norton Quarantine per the directions on 'READ & RUN FIRST'. I appreciate your help.
Click to expand...

chaslang · Apr 23, 2007

Welcome to Major Geeks!

Problems like you are describing are rarely related to malware. I suggest you check this link out:

http://support.microsoft.com/kb/825826

Other than the above, I would suggest you post in the Networking Forum if you continue to have problems with this.

However I do have a few things that you should do anyway (not related to your problem).

Uninstall the below old versions of software:
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 8

Uninstall the Sunbelt CounterSpy trial since we are finished with it now!

Run HijackThis and select the following unnecessary startups lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

After clicking Fix, exit HJT.

Now Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentVersion\RunOnce]
"Chfa"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/SSDownload.dll]
Click to expand...

jeremyb_127 · Apr 24, 2007

Many thanks for your response. One of the fixes suggested on the Microsoft support page seems to have brought my LAN connection back--I hope it stays for good now.

Also thanks for your suggestions on improving performance. They seem to have worked--the only strange thing was that Norton wanted to stop a "malicious script" from running when I was uninstalling CounterSpy.

Thanks again.

chaslang · Apr 24, 2007

You're welcome.

jeremyb_127 said: ↑

the only strange thing was that Norton wanted to stop a "malicious script" from running when I was uninstalling CounterSpy.
Click to expand...

I would bet it did not come right out and say it was malicious. I would bet it said it could be malicious which it was not. It was just CounterSpy trying to uninstall its software. Sometimes (especially with Norton) you have to understand that you are the one who is running a script and you have to allow it. Norton warnings like this will occur for many things, even sometimes running BATCH files (like GetRunKey and ShowNew) will cause popups like that.

Log in or Sign up

Ethernet disappears: malware related?

jeremyb_127 Private E-2

Attached Files:

runkeys.txt

newfiles.txt

bdscan.txt

jeremyb_127 Private E-2

Attached Files:

CounterySpy.txt

Activescan.txt

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

jeremyb_127 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member