Sporadic loss of IE connection in Windows XP SP2

Hello,

I have a customer that loses its I.E. connection.  They suspected that it was their daughter's AOL AIM installation.  What was happening was they could get on to the internet but when accessing another page they would receive the "Page could not be displayed" page.  It was as if their IE connection immediately timed out.  This would repeat if they reboot the PC or release and renew their IP address.  Now all the while AIM will self-load and connect to send/receive messages.

In the Event Viewer, these events occurred:

1.)Error
 Source: http
Event ID: 15005  Unable to bind to the underlying transport for 0.0.0.0:2869.  The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number.  

----I checked this field and it isn't located in the registry.

2.)  Warning
      Source: tcp/ip
      Event ID: 4226
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

--- Here, I tried the "netstat -no | find "SYN"" but found no culprits

3.) Error
     Source: Browser
     Event ID: 8033

The browser has forced an election on network \Device\NetBT_Tcpip_{.........................} because a master browser was stopped.

----- I couldn't find any kind of possible solution for this error.

I rebooted in Safe Mode and used some netstat commands but found no culprits.  So after I rebooted normally, it takes a while to load, possibly due to Norton AV, but I see the notification that Norton now has updated its definitions!!!  We now have a connection!!!  So while it's up, I go to Microsoft update to install all possible updates, run stinger, which found and removed some malware. Before I left, I waited for some time, while on IE, before accessing other sites....to see if the phantom IE timeout occurred again....no other occurrences.

....That was two days ago.  Now, the problem is back.  Of course, we'll uninstall AOL AIM and then monitor the IE connection, but is there any other possible causes for this to occur and what are the possible solutions, respectively?

Thanks
VDOGamerAsked:
Who is Participating?
 
Bill_FleuryCommented:
http://www.pccillin.com

run their online housecall virus scan, because you have the Backdoor.Asylum trojan.
0
 
Bill_FleuryCommented:
It's possible that since you have so many different programs running at once that are connecting to the internet that your connection limit of 10 simultaneous TCP connections has been reached.  You can increase or remove the limit by following the directions here:

http://www.speedguide.net/read_articles.php?id=1497

0
 
Bill_FleuryCommented:
I'd just add that you should probably run a few different spyware scanners on that machine as well to make sure there's no more malware, such as:

Ad-Aware - http://www.lavasoftusa.com
SpyBot - http://www.safer-networking.org/en/download/
Windows Defender - http://tinyurl.com/nmdfb

Good luck.
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

 
VDOGamerAuthor Commented:
I've found a process called WinampD32.exe that fills all the possible IE connections to the internet.  Everytime you delete the process in the task manager, it launches itself infinitely.
0
 
Craig_200XCommented:
remove any websearch toolbars, clear internet cache. run the anti spyware as suggested. optionally uninstall winamp.(I have not seen that to be a culprit in causing IE page not found issues ..)

(Yahoo websearch toolbar, and Mysearch websearch- I find can kill an internet connection..)
0
 
VDOGamerAuthor Commented:
It's not the official "Winamp" program.  It's listed as WinampD32.exe in the Task Manager.   I couldn't remember how to uninstall that stupid Yahoo toolbar.  I went in the registry and deleted the Winamp keys, along with its associated files in the C: drive, and the problem is gone.  I'll give the hacker props because they had it logged on as SYSTEM.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.