VDOGamer
asked on
Sporadic loss of IE connection in Windows XP SP2
Hello,
I have a customer that loses its I.E. connection. They suspected that it was their daughter's AOL AIM installation. What was happening was they could get on to the internet but when accessing another page they would receive the "Page could not be displayed" page. It was as if their IE connection immediately timed out. This would repeat if they reboot the PC or release and renew their IP address. Now all the while AIM will self-load and connect to send/receive messages.
In the Event Viewer, these events occurred:
1.)Error
Source: http
Event ID: 15005 Unable to bind to the underlying transport for 0.0.0.0:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine. The data field contains the error number.
----I checked this field and it isn't located in the registry.
2.) Warning
Source: tcp/ip
Event ID: 4226
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
--- Here, I tried the "netstat -no | find "SYN"" but found no culprits
3.) Error
Source: Browser
Event ID: 8033
The browser has forced an election on network \Device\NetBT_Tcpip_{.....
----- I couldn't find any kind of possible solution for this error.
I rebooted in Safe Mode and used some netstat commands but found no culprits. So after I rebooted normally, it takes a while to load, possibly due to Norton AV, but I see the notification that Norton now has updated its definitions!!! We now have a connection!!! So while it's up, I go to Microsoft update to install all possible updates, run stinger, which found and removed some malware. Before I left, I waited for some time, while on IE, before accessing other sites....to see if the phantom IE timeout occurred again....no other occurrences.
....That was two days ago. Now, the problem is back. Of course, we'll uninstall AOL AIM and then monitor the IE connection, but is there any other possible causes for this to occur and what are the possible solutions, respectively?
Thanks
I have a customer that loses its I.E. connection. They suspected that it was their daughter's AOL AIM installation. What was happening was they could get on to the internet but when accessing another page they would receive the "Page could not be displayed" page. It was as if their IE connection immediately timed out. This would repeat if they reboot the PC or release and renew their IP address. Now all the while AIM will self-load and connect to send/receive messages.
In the Event Viewer, these events occurred:
1.)Error
Source: http
Event ID: 15005 Unable to bind to the underlying transport for 0.0.0.0:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine. The data field contains the error number.
----I checked this field and it isn't located in the registry.
2.) Warning
Source: tcp/ip
Event ID: 4226
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
--- Here, I tried the "netstat -no | find "SYN"" but found no culprits
3.) Error
Source: Browser
Event ID: 8033
The browser has forced an election on network \Device\NetBT_Tcpip_{.....
----- I couldn't find any kind of possible solution for this error.
I rebooted in Safe Mode and used some netstat commands but found no culprits. So after I rebooted normally, it takes a while to load, possibly due to Norton AV, but I see the notification that Norton now has updated its definitions!!! We now have a connection!!! So while it's up, I go to Microsoft update to install all possible updates, run stinger, which found and removed some malware. Before I left, I waited for some time, while on IE, before accessing other sites....to see if the phantom IE timeout occurred again....no other occurrences.
....That was two days ago. Now, the problem is back. Of course, we'll uninstall AOL AIM and then monitor the IE connection, but is there any other possible causes for this to occur and what are the possible solutions, respectively?
Thanks
I'd just add that you should probably run a few different spyware scanners on that machine as well to make sure there's no more malware, such as:
Ad-Aware - http://www.lavasoftusa.com
SpyBot - http://www.safer-networking.org/en/download/
Windows Defender - http://tinyurl.com/nmdfb
Good luck.
Ad-Aware - http://www.lavasoftusa.com
SpyBot - http://www.safer-networking.org/en/download/
Windows Defender - http://tinyurl.com/nmdfb
Good luck.
ASKER
I've found a process called WinampD32.exe that fills all the possible IE connections to the internet. Everytime you delete the process in the task manager, it launches itself infinitely.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
remove any websearch toolbars, clear internet cache. run the anti spyware as suggested. optionally uninstall winamp.(I have not seen that to be a culprit in causing IE page not found issues ..)
(Yahoo websearch toolbar, and Mysearch websearch- I find can kill an internet connection..)
(Yahoo websearch toolbar, and Mysearch websearch- I find can kill an internet connection..)
ASKER
It's not the official "Winamp" program. It's listed as WinampD32.exe in the Task Manager. I couldn't remember how to uninstall that stupid Yahoo toolbar. I went in the registry and deleted the Winamp keys, along with its associated files in the C: drive, and the problem is gone. I'll give the hacker props because they had it logged on as SYSTEM.
http://www.speedguide.net/read_articles.php?id=1497