Please register or login. There are 0 registered and 1102 anonymous users currently online. Current bandwidth usage: 326.30 kbit/s April 23 - 11:29pm EDT 
Hardware Analysis
      
Forums Product Prices
  Contents 
 
 

  Latest Topics 
 

More >>
 

    
 
 

  You Are Here: 
 
/ Forums / Software /
 

  Losing Internet and DLL associations 20 minutes after boot 
 
 Author 
 Date Written 
 Tools 
Jordan B Jul 04, 2006, 10:47am EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List Replies: 7 - Views: 1139
Hi all,
I have a question for the XP experts in here. My PC has been behaving strangely lately, and I can't tell if it's a hardware or software problem.
After my PC's been running for a while, the internet stops working. IE and OE fail to connect to the internet, and when I try running ipconfig in the command prompt, I get the error message 'The application failed to initialize properly.' Other applications start failing to launch as well. When I reboot, everything fixes itself and I can run ipconfig.
I thought it might be my hard drive failing and system files getting corrupt, but the machine runs perfectly when I first boot. I suppose it could be memory, but I think it's either a priveledges problem or malware. I've done a full scan with trendmicro virus scan and it came up with nothing.
I did a repair install of windows and reinstalled all the updates, but still get the same problem.
I have administrator access to the machine, and am logged in. My user accounts window came up blank for a while, but this was fixed by running regsvr32 jscript.dll.
Norton antivirus gave me a lot of errors, first with 'norton encountered an internal error and needs to close', and then 'norton does not support the repair feature. Please reinstall norton antivirus.' I had to run the uninstaller several times because it had trouble uninstalling, but even though it shows up in add/remove programs, I believe it is uninstalled now.
I do wonder if I have some sort of worm. When I run process explorer, I have two copies of lsass.exe running, one in c:\windows\system32 and one in c:\system volume information\restore_1. However, I don't have any popups or home pages reset or anything.
Anyone's help is appreciated, this has been a very helpful forum to me in the past.
Thanks,
Jordan


Want to enjoy fewer advertisements and more features? Click here to become a Hardware Analysis registered user.
Dublin_Gunner Jul 04, 2006, 11:00am EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List  
>> Re: Losing Internet and DLL associations 20 minutes after boot
To rule out adware/spyware/malware get yourself a copy of Spybot & Adaware, update both and do a full scan. If they turn up clean, chances are you dont have an infection.

It does sound strange though.

As it sems t happen after a time I'm wondering if maybe some part of your PC is overheating?

Check temps on your mobo & CPU.

Also, this could be down to a ram error, so try swapping out your ram, one stick at a time and see if it works or not. Also run a full test of memtest on each stick of ram individually on your PC.

Process of elimination is your only bet here, and failing that a FULL format & re-install of the OS may be necessary. (if its not a hardware problem)

Lancool PC K62
Phenom II x3 @ 3.5Ghz
4GB DDR2-800
ASUS GTX570 DirectCU II
Jordan B Jul 04, 2006, 12:32pm EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List  
>> Re: Losing Internet and DLL associations 20 minutes after boot
Thanks for your quick and thorough response!

Overheating is a distinct possibility. My Intel 4 chip runs LOUD, and heats this whole room up, though it only peaks around 60 C. (My Imac G5 peaks around 80). My system temp is around 48C. I've been meaning to replace the loud processor fan with a large quiet one or liquid cooling system, maybe that would help. What else could overheat, my drives? Should I run tests on those?

I ran spybot search and destroy and adaware and they came up with nothing. I ran a windows based memtest that didn't detect any errors, though I didn't test each stick separately and didn't do it from boot. I'll run it again once the problem happens again while it's happening.

I downloaded hijackthis and maybe I'll post my log over at castlecops. It does say there are some files missing; maybe some service I'm running isn't malware but is corrupting everything.

Thanks for your help--
Jordan

Dublin_Gunner Jul 04, 2006, 12:53pm EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List

Edited: Jul 04, 2006, 12:53pm EDT

 
>> Re: Losing Internet and DLL associations 20 minutes after boot
On occasion I've had .dll files going corrupt on me too, and it can cause mayhem. Usually a repair install will fix it, but it doesnt seem to be the case here as you've stated you tried that.

Maybe try to back up anything important and format/reinstall.

Can you remember when this started happening? You may try to load a restore point from before the problem started occuring to see if that fixes the problem.

Lancool PC K62
Phenom II x3 @ 3.5Ghz
4GB DDR2-800
ASUS GTX570 DirectCU II
CrAsHnBuRnXp Jul 04, 2006, 05:23pm EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List  
>> Re: Losing Internet and DLL associations 20 minutes after boot
For kicks, download AVG Free. Update it and scan your entire computer. I have a link for the download in the link in my sig below.

If AVG does not find any viruses, I would first test the sticks of ram (one at a time) with memtest as Dublingunner stated. If those come up fine, I would back up all important data and do a reformat of the hard drive and install a fresh copy of XP.

Afrow UK Jul 04, 2006, 06:50pm EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List

Edited: Jul 04, 2006, 06:50pm EDT

 
>> Re: Losing Internet and DLL associations 20 minutes after boot
Also open up task manager, and check each process name under the processes tab. Just put their process names into Google and see what you get.

These ones running on mine I know are safe:
svchost.exe
alg.exe
wdfmgr.exe
mdm.exe
wmiprvse.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
explorer.exe

Those are all Windows services which you get on most systems.
These are some more I have running:

jusched.exe (Java update)
ati2evxx.exe (ATi drivers)
avg*.exe (AVG processes, 4 altogether)
opwareSE2.exe (Canon scanner)
type32.exe (Microsoft Keyboard)
speedfan.exe

I like: Programming, Gym, University
Music: House, Dubstep, D&B, Trance, Metal
Jordan B Jul 05, 2006, 11:21am EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List  
>> Re: Losing Internet and DLL associations 20 minutes after boot
Thanks everyone all for your help.
Just an update, AVG Antivirus didn't find anything, though I'm still worried about that second copy of lsass.exe. Ironically though now my computer hasn't done the thing it's been doing for 24 hours. I have two hunches - one, I left AVG's results window open, which could have kept it active and not revert to it's 'crashy' mode, or two, I right clicked and closed everything I could in the taskbar before I ran the antivirus--maybe I closed whatever service was causing all the trouble.
Anyway, I rebooted, and I'm waiting to see what happens, and I'll keep you posted. The next thing to do will be a memory check.
Thanks again,
Jordan

Jordan B Jul 06, 2006, 03:13pm EDT Reply - Quote - Report Abuse
Private Message - Add to Buddy List  
>> Re: Losing Internet and DLL associations 20 minutes after boot
I had a virus!
Weirdly enough, AVG Trial Antivirus didn't pick it up, and so I uninstalled the trial version once I found the free version and installed that, and the FREE version picked it up! Very weird. The trial version was updated and scanned the whole computer and found nothing. The free version, which I hadn't updated yet, detected it immediately:
"You have a virus!
backdoor.generic2.vlu
C:\System Volume Information\restore_1\lsass.exe
Ignore | Info | Move to Vault | Restore access"
When I clicked 'move to vault' it said 'access denied', and no amount of manual removal attempts could rid it either. Restore access opened up the Windows System Restore preference pane with an option of turning it off. Some googling told me that the system would not let me access the restore point without turning off system restore and deleting all restore points. After some futile attempts in safe mode, I went back and turned off system restore, which deleted all the files, and turning it back on and rescanning now comes up clean.
Very strange that AVG free worked better for me than AVG trial! I will let them know.
Thanks for all your help, and Mark for pointing me towards AVG Free.
Jordan


Write a Reply >>


 

    
 
 

  Topic Tools 
 
RSS UpdatesRSS Updates
 

  Related Articles 
 
 

  Newsletter 
 
A weekly newsletter featuring an editorial and a roundup of the latest articles, news and other interesting topics.

Please enter your email address below and click Subscribe.