For Chaslang re. CPU @ 100% & No Internet

Re: CPU @ 100% & No Internet

Are you sure the problem is not a configuration issue with how you setup you connection for your ISP?

What process is using all the CPU time?

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

 

Re: CPU @ 100% & No Internet

You must run ALL steps in the READ ME. You have not run step 1 of the cleaning process (the online scanners).

Also you have Grokster installed which you should uninstall. The below is part of it:

O4 - Startup: Check for TWS Updates.lnk = C:\Jts\WiseUpdt.exe

You should have HJT fix this line and reboot in safe mode and delete that file.

Also uninstall Vbounce or Virtual Bounce and delete its files:

O4 - HKLM\..\Run: [VBundleOuterDL] C:\Program Files\VBouncer\BundleOuter.EXE

You should have HJT fix this line and reboot in safe mode and delete that file.

After doing the above post a new HJT log and let me know if there is any change.

 

Re: CPU @ 100% & No Internet

Do you use AOL to get online? You mentioned DirecWay before.

Is the below ProxyServer setting part of DirecWay?
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:83

The IP address show on the O17 line all appear to belong to:

Code:

 OrgName:	Level 3 Communications, Inc. 
OrgID:	  [url="http://ws.arin.net/cgi-bin/whois.pl?queryinput=O%20!%20LVLT"][color=#0000ff]LVLT[/color][/url]
Address:	1025 Eldorado Blvd.
City:	   Broomfield
StateProv:  CO
PostalCode: 80021
Country:	US
 

Is this part of your ISP?

There are no real signs of malware in your log! This does not necessarily mean your system is clean. Still sounds line something messed up your configuration. Can you boot in safe mode and get access? If your ISP software requires any special drivers, you may not be able to. If your connection is via satellite perhaps your problems is not in a configuration setting, maybe it is a hardware problem. How did they verify that there is connectivity to your PC?

 

Re: CPU @ 100% & No Internet

Can you access sites using IP address rather then URLs?


Are the below IP addresses used in your internal network (if you have one)?
O17 - HKLM\System\CCS\Services\Tcpip\..\{1FEDB7E3-4D92-4864-85B8-BD17F51E0A6B}: NameServer = 198.77.116.8,198.77.116.12,198.77.116.12 198.77.116.8 198.77.116.8,198.77.116.12 198.77.116.8 198.77.116.8,198.77.116.12

If not, have HJT fix that O17 line. Then reboot and make sure it does not come back.

 

Answer what I asked in my last message! We combine you back into the original thread. You should not have started a new thread.

 

No to both questions?

It is just standard operating procedure in almost every forum. Once you start a thread for a particular problem, you should stay in that thread until the problem is resolved. It keeps the history for your problem in one place. Also, it prevents us and you from wasting time since most new threads will be met by a boilerplate message telling you to run the READ & RUN ME sticky.

It is not a violation of a rule, it is just better for all of us and keeps things more organized. If your problem was fixed and then later you came back with a different problem or a different PC with a problem then a new thread would be appropriate. But be aware that the READ & RUN ME should always be run before posting. It does not take very long for systems to get badly infected. So if you were clean and running okay one day and then the next day have problems, the READ ME should be run again (even if only run the day before) to sort out anything new.

I'm a little confused as to what your exact problem is too.
1) Can you access the internet at all via a browser? Did you try using both URL's and IP addresses?

2) You said you could ping. What address were you pinging? Was it an external address?

3) Are you sure you do not have some kind of configuration problem?

4) Are you sure the AOL stuff you installed did not mess with a required configuration setting?

 

Still sounds like a configuration issue to me and this probably no longer belongs in the Spyware Forum. You may want to check for things like below:

- hardware problem: do you have a network card in your PC. Is it showing up properly in Device Manager without any errors. Maybe you need to reload your drivers. Does it show that it actually has network connectivity.

- maybe a you need to uninstall you Direcway software, reboot and reinstall and reconfigure (if you have not already done this).

- Maybe a tool like XP TCP/IP Repair or thisWinSock XP Fix 1.2 would help if the problems is really related to a broken LSP stack.