Browsing stops, have to reboot but Pings OK

Samsung Nc10-14gb blue netbook
October 9, 2009 at 06:07:14
Specs: Windows XP
I’m a medical person, not a techie, so if the
solution to this rather aggravating problem is
idiotically simple, please accept my apologies.

I’m using a Windows XP Samsung NC10
netbook and connect to the internet wirelessly.
For about a month or so, after a variable period
of time (minutes to hours) I am no longer able
to browse the internet. However, I am able to
PING as well as tracer-t various sites,
suggesting that I am connected. Also, I’m
unable to check email using an email program
called The Bat!. I do note that Limewire
sometimes remains connected albeit at low
speed. The only way to get back on the
internet is to REBOOT. Over the last few
weeks I’ve browsed this problem on the
internet and based on what I read, I’ve
observed the following and have taken the
following measures, all unfortunately
unsuccessful: :

1. Other computers at the same time ARE
able to browse
2. It doesn’t matter what browser I use
(Chrome, Firefox, IE)
3. It doesn’t matter what network
connection I use (connecting to a second
wireless network with a different router offers
no change)
4. It doesn’t matter whether or not I disable
Kasperksy antivirus or Zone Alarm. Mind you,
there are reports on the net of Zone Alarm
being the cause of such a problem BUT in my
case, ZA was unequivocally installed AFTER
this problem started
5. When this happens, even doing a
192.168.1.1 to connect to the router doesn’t
work
6. I’ve tried doing a winsock reset by
opening a command prompt, netsh int ip reset
log.txt <enter>, netsh w r
7. I’ve tried flushing the DNS cache by
typing ipconfig /flushdns. Initially I got an error
message, so I then went into services.msc
and set the DNS client to automatic, then
start. Now when I type ipconfig /flushdns I do
NOT get an error message (it says
“successfully flushed the DNS Resolver
Cache”) but it doesn’t restore browser
connectivity
8. I went to the registry: HKEY_LOCAL_M
ACHINE\SYSTEM \CurrentControlSet\Services
\ DNS cache \Parameters ……… Build a new
DWORD value called NegativeCacheTime and
give it a value of 0
9. I downloaded WinsockXPFix and ran it.
10. I’ve ran a full screen with Kasperksy
11. I’ve ran a full screen with Malwarebytes’
Antimalware
12. I’ve ran a screen with Hijackthis but don’t
know what to make of the output.

At this point I’m staring at the obvious reinstall
Windows XP but would like to know if any of
you smart guys can make any suggestions.

Thanks


See More: Browsing stops, have to reboot but Pings OK

Report •


#1
October 9, 2009 at 06:28:38
Limewire is an invitation to problems. If anti malware didn't fix the problems, then I would try combo fix. Make sure that you update any of them before you run them.

How do you know when a politician is lying? His mouth is moving.


Report •

#2
October 9, 2009 at 06:49:16
Fair enough, but I've had Limewire installed on my system for
ages. Might have recently upgraded to a newer version but can't
be sure if the timeline fits - I had been thinking of uninstalling and
going back to the older version though. Appreciate any other
help.

Report •

#3
October 9, 2009 at 07:55:10
Who is your ISP? Some ISPs frown on Bit Torrents (Limewire) because they eat up bandwidth and they will temporarily kill the connection if they suspect.

I use to work for AT&T and they programmed their DSL modem to detect the number of connections opened and to automatically reboot if there are too many opened. They said that it was to stop bot herders but I suspect that it was to stop people from sharing music and movies over their network.

So again who is your ISP? And to solve this you will need to go to a third party proxy.


Report •

Related Solutions

#4
October 9, 2009 at 08:34:07
I'm in Pakistan so not sure if the ISP's name will mean
anything to you. It's hard to know if the ISP has such a policy
but the problem occurs regardless of Limewire usage. In fact,
I only scantily use the program, I mentioned it above simply
because this was an observation made. Furthermore, the
problem (Limewire on or not) occurs with distinctly different
ISPs. Limewire is not set up to automatically load up when
Windows starts.

Appreciate the input and help.


Report •

#5
October 9, 2009 at 08:41:22
How much memory does this notebook have?

Sounds like you are running out of resouces.

Post the results of ipconfig /all for review


Report •

#6
October 9, 2009 at 08:51:36
yes and can you add a "NETSTAT -a" printout to that so that we can see how many ports you have open while your computer is idle?

Report •

#7
October 9, 2009 at 08:53:05
2 GB RAM. Hard drive is 500 GB.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.


Windows IP Configuration

Host Name . . . . . . . . . . . . : xxxxxx
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Generic Marvell Yukon
88E8040 PCI-E
Fast Ethernet Controller
Physical Address. . . . . . . . . : 00-13-77-D0-33-AA

Ethernet adapter Wireless Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Atheros AR5007EG
Wireless Network Ad
apter
Physical Address. . . . . . . . . : 00-21-63-A7-D5-75
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.102
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 202.70.150.10
202.70.150.11
192.168.0.1
Lease Obtained. . . . . . . . . . : Friday, October 09, 2009
6:52:35 PM
Lease Expires . . . . . . . . . . : Saturday, October 10,
2009 6:52:35 P
M



Report •

#8
October 9, 2009 at 09:03:10
Here's the NETSTAT printout. Just FYI, no difference if I disable Livedrive (which is an online storage service). Many thanks, appreciate the help and input.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Fahim H Jafary>netstat -a

Active Connections

Proto Local Address Foreign Address State
TCP Fahim-Jafary:epmap Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:microsoft-ds Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:990 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:1110 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:2869 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:3260 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:3261 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:19780 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:31038 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:1034 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:1110 localhost:1190
ESTABLISHED
TCP Fahim-Jafary:1110 localhost:1782
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1823
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1827
ESTABLISHED
TCP Fahim-Jafary:1110 localhost:1830
ESTABLISHED
TCP Fahim-Jafary:1110 localhost:1840
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1842
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1847
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1853
ESTABLISHED
TCP Fahim-Jafary:1110 localhost:1857
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1860
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1948
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1954
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1964
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1968
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1983
ESTABLISHED
TCP Fahim-Jafary:1110 localhost:1991
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:1995
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:2002
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:2005
ESTABLISHED
TCP Fahim-Jafary:1110 localhost:2006
ESTABLISHED
TCP Fahim-Jafary:1110 localhost:2013
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:2015
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:2020
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:2026
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:2046
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:2050
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:2059
TIME_WAIT
TCP Fahim-Jafary:1110 localhost:2095
TIME_WAIT
TCP Fahim-Jafary:1190 localhost:1110
ESTABLISHED
TCP Fahim-Jafary:1494 localhost:1110
CLOSE_WAIT
TCP Fahim-Jafary:1534 localhost:1110
CLOSE_WAIT
TCP Fahim-Jafary:1827 localhost:1110
ESTABLISHED
TCP Fahim-Jafary:1830 localhost:1110
ESTABLISHED
TCP Fahim-Jafary:1853 localhost:1110
ESTABLISHED
TCP Fahim-Jafary:1951 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:1953 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:1960 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:1969 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:1976 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:1979 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:1983 localhost:1110
ESTABLISHED
TCP Fahim-Jafary:1986 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:1999 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2005 localhost:1110
ESTABLISHED
TCP Fahim-Jafary:2006 localhost:1110
ESTABLISHED
TCP Fahim-Jafary:2055 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2062 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2068 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2072 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2080 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2083 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2088 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2092 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2098 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2101 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:2111 localhost:1110
TIME_WAIT
TCP Fahim-Jafary:5152 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:5152 localhost:2498
CLOSE_WAIT
TCP Fahim-Jafary:5679 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:7438 Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:netbios-ssn Fahim-Jafary:0
LISTENING
TCP Fahim-Jafary:1192 195.27.58.81:http
ESTABLISHED
TCP Fahim-Jafary:1835 ty-in-f113.google.com:http
ESTABLISHED
TCP Fahim-Jafary:1836 ty-in-f113.google.com:http
ESTABLISHED
TCP Fahim-Jafary:1855 64.236.76.160:http
ESTABLISHED
TCP Fahim-Jafary:1939 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:1975 ty-in-f167.google.com:http
TIME_WAIT
TCP Fahim-Jafary:1978 ty-in-f167.google.com:http
TIME_WAIT
TCP Fahim-Jafary:1981 www.asterpix.com:http
TIME_WAIT
TCP Fahim-Jafary:1985 ty-in-f155.google.com:http
ESTABLISHED
TCP Fahim-Jafary:1990 91.103.138.62:http
TIME_WAIT
TCP Fahim-Jafary:1994 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2001 www.asterpix.com:http
TIME_WAIT
TCP Fahim-Jafary:2010 ty-in-f113.google.com:http
ESTABLISHED
TCP Fahim-Jafary:2011 ty-in-f113.google.com:http
ESTABLISHED
TCP Fahim-Jafary:2033 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2038 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2042 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2054 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2077 ty-in-f167.google.com:http
TIME_WAIT
TCP Fahim-Jafary:2081 server-202.livedrive.com:50234
ESTABLISHED
TCP Fahim-Jafary:2102 www.asterpix.com:http
TIME_WAIT
TCP Fahim-Jafary:2104 www.asterpix.com:http
TIME_WAIT
TCP Fahim-Jafary:2106 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2110 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2113 cds17.lon.llnw.net:http
TIME_WAIT
TCP Fahim-Jafary:2117 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2120 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2126 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2129 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2133 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2138 192.168.0.101:34447
TIME_WAIT
TCP Fahim-Jafary:2750 server-213.livedrive.com:50234
ESTABLISHED
TCP Fahim-Jafary:2869 192.168.0.1:1203
CLOSE_WAIT
TCP Fahim-Jafary:2869 192.168.0.1:1205
CLOSE_WAIT
TCP Fahim-Jafary:2869 192.168.0.1:1289
TIME_WAIT
TCP Fahim-Jafary:2869 192.168.0.1:1290
TIME_WAIT
TCP Fahim-Jafary:2869 192.168.0.1:1291
TIME_WAIT
TCP Fahim-Jafary:3588 server-202.livedrive.com:50234
ESTABLISHED
TCP Fahim-Jafary:3779 server-213.livedrive.com:50234
ESTABLISHED
TCP Fahim-Jafary:4037 server-213.livedrive.com:50234
ESTABLISHED
TCP Fahim-Jafary:4566 server-213.livedrive.com:50234
ESTABLISHED
TCP Fahim-Jafary:4578 server-213.livedrive.com:50234
ESTABLISHED
UDP Fahim-Jafary:microsoft-ds *:*
UDP Fahim-Jafary:isakmp *:*
UDP Fahim-Jafary:1050 *:*
UDP Fahim-Jafary:ms-sql-m *:*
UDP Fahim-Jafary:1463 *:*
UDP Fahim-Jafary:1787 *:*
UDP Fahim-Jafary:2042 *:*
UDP Fahim-Jafary:2249 *:*
UDP Fahim-Jafary:2353 *:*
UDP Fahim-Jafary:2620 *:*
UDP Fahim-Jafary:3153 *:*
UDP Fahim-Jafary:3324 *:*
UDP Fahim-Jafary:3592 *:*
UDP Fahim-Jafary:3622 *:*
UDP Fahim-Jafary:3665 *:*
UDP Fahim-Jafary:3757 *:*
UDP Fahim-Jafary:3838 *:*
UDP Fahim-Jafary:3871 *:*
UDP Fahim-Jafary:4013 *:*
UDP Fahim-Jafary:4192 *:*
UDP Fahim-Jafary:4219 *:*
UDP Fahim-Jafary:4238 *:*
UDP Fahim-Jafary:4352 *:*
UDP Fahim-Jafary:4399 *:*
UDP Fahim-Jafary:4412 *:*
UDP Fahim-Jafary:4453 *:*
UDP Fahim-Jafary:4500 *:*
UDP Fahim-Jafary:4513 *:*
UDP Fahim-Jafary:4549 *:*
UDP Fahim-Jafary:4733 *:*
UDP Fahim-Jafary:4991 *:*
UDP Fahim-Jafary:ntp *:*
UDP Fahim-Jafary:1900 *:*
UDP Fahim-Jafary:ntp *:*
UDP Fahim-Jafary:netbios-ns *:*
UDP Fahim-Jafary:netbios-dgm *:*
UDP Fahim-Jafary:1900 *:*

C:\Documents and Settings\Fahim H Jafary>


Report •

#9
October 9, 2009 at 09:07:38
All looks good. I can ping the dns servers which at least means those ips are live [don't really know if doing dns]

Review your nic card configuration concerning power savings. It should be configured not to be shutdown/put to sleep by the OS.

didn't see netstat results when I posted this


Report •

#10
October 9, 2009 at 10:24:07
Power Save mode of the wireless card is set to "normal" and has
always been in that mode. Appreciate the help.

Report •

#11
October 9, 2009 at 13:48:57
I have never seen "normal" and I have seen a lot of nic cards in 16 years of IT

On the power management tab of the cards properties you usually have two possible check boxes

"allow the computer to turn off this device to save power"
and
"allow this device to wake the computer"

I uncheck both.

That sure looks like a lot of open ports to me. Here is my laptop for comparison

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 SL_Laptop:0 LISTENING
TCP 0.0.0.0:445 SL_Laptop:0 LISTENING
TCP 0.0.0.0:5357 SL_Laptop:0 LISTENING
TCP 0.0.0.0:49152 SL_Laptop:0 LISTENING
TCP 0.0.0.0:49153 SL_Laptop:0 LISTENING
TCP 0.0.0.0:49154 SL_Laptop:0 LISTENING
TCP 0.0.0.0:49155 SL_Laptop:0 LISTENING
TCP 0.0.0.0:49156 SL_Laptop:0 LISTENING
TCP 127.0.0.1:27015 SL_Laptop:0 LISTENING
TCP 127.0.0.1:27015 SL_Laptop:49162 ESTABLISHED
TCP 127.0.0.1:49158 SL_Laptop:0 LISTENING
TCP 127.0.0.1:49162 SL_Laptop:27015 ESTABLISHED
TCP 192.168.0.105:139 SL_Laptop:0 LISTENING
TCP [::]:135 SL_Laptop:0 LISTENING
TCP [::]:445 SL_Laptop:0 LISTENING
TCP [::]:5357 SL_Laptop:0 LISTENING
TCP [::]:49152 SL_Laptop:0 LISTENING
TCP [::]:49153 SL_Laptop:0 LISTENING
TCP [::]:49154 SL_Laptop:0 LISTENING
TCP [::]:49155 SL_Laptop:0 LISTENING
TCP [::]:49156 SL_Laptop:0 LISTENING
TCP [::1]:49159 SL_Laptop:0 LISTENING
UDP 0.0.0.0:123 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5355 *:*
UDP 0.0.0.0:57382 *:*
UDP 127.0.0.1:1900 *:*
UDP 127.0.0.1:51062 *:*
UDP 127.0.0.1:51900 *:*
UDP 127.0.0.1:54390 *:*
UDP 127.0.0.1:64650 *:*
UDP 192.168.0.105:137 *:*
UDP 192.168.0.105:138 *:*
UDP 192.168.0.105:1900 *:*
UDP 192.168.0.105:64649 *:*
UDP [::]:123 *:*
UDP [::]:500 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:5355 *:*
UDP [::]:57383 *:*
UDP [::1]:1900 *:*
UDP [::1]:64647 *:*
UDP [fe80::1080:7df:3f57:ff96%19]:1900 *:*
UDP [fe80::1080:7df:3f57:ff96%19]:64648 *:*
UDP [fe80::9df6:75cd:3b27:22f9%17]:1900 *:*
UDP [fe80::9df6:75cd:3b27:22f9%17]:64646 *:*
UDP [fe80::c5df:e30f:1495:3a15%8]:1900 *:*
UDP [fe80::c5df:e30f:1495:3a15%8]:64645 *:*


Report •

#12
October 9, 2009 at 15:06:50
Yes, I agree. You have a bot infestation (Viruses) on your computer. Comodo may work or you may need a Malware removal tool.

Be careful when you use Limewire to download software that come with a Key Generator. These key gen programs do more than just give you a key that will let you install the program, they give your computer a bot which can be used by the hacker.


Report •

#13
October 10, 2009 at 13:17:00
Well, my problem is solved (I think)!

Some of the smart comments above regarding Limewire got
me thinking - I recently did install Limewire 5.xx which, I do
believe, was a hacked version. Prior to that I had a legit
purchased copy of Limewire 4.xx. So I uninstalled Limewire
5.xx and let things chill for a couple of days. Immediately
began to notice a difference and my browsing was not stalling
anymore. Went on to follow some of the other advise
including running ComboFix (did find some malware) and
aggressively disabled literally all startup stuff in msconfig with
the exception of just a few things (Kaspersky included).
Finally reinstalled the old "legit" Limewire 4.xx. So far, up
and running with no stalling.

Conclusion: in all probability it was the hacked version of
Limewire that was doing something (amazingly even when the
program was not open)

Moral of the story: avoid hacked programs, I suppose. As
blasphemous as it may sound, I actually DO buy all my
software including The Bat, Kaspersky, Malwarebytes, Zone
Alarm etc. but this was an odd exception.

Many thanks for everyone's help. I figured I should post this
feedback for everyone's reference.


Report •

#14
October 10, 2009 at 14:03:26
Limewire is dangerous under any circumstances & so are any of the other P2P sharing programs.

How do you know when a politician is lying? His mouth is moving.


Report •

#15
October 10, 2009 at 18:19:04
You are still thinking of the old web before cyber criminals took over.

Until you wipe and reinstall everything from scratch don't do ANY personal or customer financial/credit card/online banking.

You be hacked and I can assure you they left a back door into your system.


Report •

#16
October 10, 2009 at 18:34:46
These days, I would only do financial stuff with a Live CD.

How do you know when a politician is lying? His mouth is moving.


Report •


Ask Question