[Help request] - Network

[Atomicide]

erm, i think i have a serious problem, one computer (my personal one) is sending an absolute exrtreme number of requests out, and im not even on it. its generatting literally 30+ attempts a second, most on 139, some on HTTP, and this computer in comparison shows up about once in every 6 or 7 refreshes :/

 

[Atomicide]

right ive attached a log file that shows about 2/3 refreshes worth of data, at the very top, is the most recent (where ive switched the computer off) you will see the traffic stops entirely, but this data looks like its going just about ****ing everywhere.

edit: cant find the log file -.- but im scanning the comp wih an AV.

 

[urbanfox]

AVG or Klaskpersky (sp) is good, and don't forget M$ AS.

 

[Atomicide]

Microsoft anti-spyware and Zonealarm firewall can both **** off tbh, there was one trojan on my comp AT LEAST which my trend micro installer found.

But whatever got on there has got past ZA and M$ AS, however i was extremely fortunate that i had upgraded my linksys routers firmware and it had miraculously blocked port 139 as part of the upgrade.

So my important info has been hammering just my router, which would explain why my bandwidth would seem to drain away, and why everything seemed to crash.

 

[Kaori]

I see some progress there! that's good. hope that's the problem...

 

[Atomicide]

it is, my comp has been removed from the network now, but unfortunately, progress has forced a Format + windows re-install.

3 different AV's havent managed to locate the problem, so ive decided to clean my comp up. I know where the virus has come from, and that would be one of the MU files ive downloaded recently. but like i said, my router has blocked any data going out, so in a way it kinda sacrificed itself to keep me safe lol.

Least tomorow ill have a clean comp and this time ill make the partitions better lol

 

[XeroX]

dont no if this might have had anythin to do with it but my Dlink router was hit by a surge and kept cutting me out like every five minutes on all of my computers excepte the laptop.


i rang dlinks helpline and the said to download new firmware (even though it was almoust imposable to stay connected to the net). so i had to put my internet on just the laptop and download the new firmware.


when i installed it HEYPRESTO it was fixed. (dont no how, imo i thought a surge would have blew the router but meh) it worked for me.


Perhaps it was that all along lol.

 

[Atomicide]

no, this was caused by a virus, for definate. What was happening was the vrius was eitehr trying to replicate and send itself, or was jsut sending a ton of information out, and it was being blocked by the closed router port.

The result was the router would "clog up" and come to momentary standstill while everything cleared, and this is what caused the problem.

MY comp is now cleaned, formatted and safe again, and everyhting is running smoothly

 

[¤]´)÷¤--§îr Äürøñ--¤÷(`[¤]

no, this was caused by a virus, for definate. What was happening was the vrius was eitehr trying to replicate and send itself, or was jsut sending a ton of information out, and it was being blocked by the closed router port.

The result was the router would "clog up" and come to momentary standstill while everything cleared, and this is what caused the problem.

MY comp is now cleaned, formatted and safe again, and everyhting is running smoothly

I don't know too many virii affecting 139 (NetBios awareness port). 135 was the old NetBios transfer.

Sounds like you had a dodgy hub/router, or you hit the 10-connection wall.

 

[Atomicide]

I don't know too many virii affecting 139 (NetBios awareness port). 135 was the old NetBios transfer.

Sounds like you had a dodgy hub/router, or you hit the 10-connection wall.

it was defiantely affected by something from my comp Auron, for the second i unplugged it the problem stopped, ive now formatted and cleaned (it needed on anyway) and set it all back up and the problem is gone. The attempts to send outgoing packets via port 139 have stopped as well.

Either way this problem seems to be resolved now.

 

[¤]´)÷¤--§îr Äürøñ--¤÷(`[¤]

it was defiantely affected by something from my comp Auron, for the second i unplugged it the problem stopped, ive now formatted and cleaned (it needed on anyway) and set it all back up and the problem is gone. The attempts to send outgoing packets via port 139 have stopped as well.

Either way this problem seems to be resolved now.

It could have been due to the 10-connection cut.

Basically. Windows XP SP2 will start limiting to 10 invalid connections at a time. If you had a bad DNS server, all these calls to an invalid DNS server could've tripped this. That would've caused your exact symptoms :P

If you're using SP2, i suggest you look into the patch, incase it should happen again

 

[Atomicide]

It could have been due to the 10-connection cut.

Basically. Windows XP SP2 will start limiting to 10 invalid connections at a time. If you had a bad DNS server, all these calls to an invalid DNS server could've tripped this. That would've caused your exact symptoms :P

If you're using SP2, i suggest you look into the patch, incase it should happen again

After my first run in with SP2 i decided to omit it from my installs this time. Im not sure how much additional protection SP2 offers, but i hated having to go through ther whole activeX thing on webpages and all the extra crap just to play a browser game etc.

this is the first time i ever got a virus on my computer, and hopefully will be the last, although it is my faut becuase i had uninstalled the AV the prvious day cos it was acting up and was to lazy to re-install and update.