Dialup Connection freeze(?)

[Volk359]

My dialup woes continue. I purchased a PCMCIA V.90 modem from COMPUSA to replace the defunt modem in my laptop so now I'm back online however occasionally when connecting I cannot bring up a webpage and get this error:

[ignore]www.yahoo.com[/ignore] could not be found. Please check the name and try again.

Same error with Yahoo or CCN.com or a number of places but if I keep closing the browser and open again eventually I'll get in. Sometimes I'll get in to Yahoo but can't, for example, connect to CNN but if I search in Yahoo for [ignore]www.cnn.com[/ignore] and click the link from there I can get through. I'm using Firefox so I assumed it was a FF issue, BTW this also coincided with some kind of security update with FF, so I searched around their forums for the following suggestions which did not work:

http://forums.mozillazine.org/viewtopic.php?p=866722#866722

http://forums.mozillazine.org/viewtopic.php?t=155457

This also happens with IE so I don't think it's browser related and I suspect it may be the PCMCIA modem. I updated the driver which apparently made no difference.

This appears to happen randomly, sometimes the browser will quit working and sometimes when I ry to download a file I'll get an The document contains no data error.

Hyperterminal doesn't get through when this occurs either and as said before the solution is to click different links until the connection stops sticking.

Short of a virus/spyware/adware issue (just thought of it) I don't know what to do from here.

Suggestions?

 

[Volk359]

Virus/spyware/adware scan shows nothing. Am I right to suspect the PCMCIA modem?

 

[LloydSev]

post a log from HJT (HiJack This)

Computer/Network Technician
CCNA

 

[linney]

This is your new modem (am I right?) so it would be a bit too much of a coincident to have two faulty modems.

Do you have this problem just at home or at other locations as well?

What firewalling do you have on your machine, also many anti virus software comes with hidden firewall components.

 

[Volk359]

Linney, a coincidence but we've seen them before, eh? At home I have a cable modem and haven't tried the dialup there and now I'm at a remote work location so I won't be home for a bit.

Firewall, just the standard Win XP firewall. I checked everything else and was unable to find anything.

Here's HiJack This:

Logfile of HijackThis v1.99.1
Scan saved at 7:21:01 PM, on 5/6/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\WINNT\GWHotKey.exe
C:\WINNT\GWMDMMSG.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\WINNT\system32\atiptaxx.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\MOZILL~1\firefox.exe
C:\WINNT\system32\wuauclt.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [URL unfurl="true"]http://www.yahoo.com/[/URL]
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [windows_update_cleanup] "C:\WINNT\System32\windows_update_cleanup()\win_cleanup.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2005\pccguide.exe"
O4 - HKLM\..\Run: [Multi-function Keyboard] GWHotKey.exe
O4 - HKLM\..\Run: [GWMDMpi] C:\WINNT\GWMDMpi.exe
O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\QUICKENW\bagent.exe
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - [URL unfurl="true"]http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe[/URL]
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - [URL unfurl="true"]http://us.games2.yimg.com/download.games.yahoo.com/games/play/client/exentctl_0_0_0_1.ocx[/URL]
O16 - DPF: {739E8D90-2F4C-43AD-A1B8-66C356FCEA35} (RunExeActiveX.RunExe) - hcp://system/RunExeActiveX.CAB
O16 - DPF: {99CDFD87-F97A-42E1-9C13-D18220D90AD1} (StartFirstControl.CheckFirst) - hcp://system/StartFirstControl.CAB
O16 - DPF: {E4F00513-EE0D-11D4-BA1D-F293A1C67C30} (Project1.UserControl1) - [URL unfurl="true"]http://www.lawes.dircon.co.uk/webpagevikingchess.ocx[/URL]
O17 - HKLM\System\CCS\Services\Tcpip\..\{2C1CDC4E-FC88-4B92-9407-8E4EC0188D94}: NameServer = 209.165.131.12 209.165.131.13

 

[linney]

Make sure these are known to you.

C:\WINNT\GWHotKey.exe
O4 - HKLM\..\Run: [windows_update_cleanup] "C:\WINNT\System32\windows_update_cleanup()\win_cleanup.exe"
O16 - DPF: {739E8D90-2F4C-43AD-A1B8-66C356FCEA35} (RunExeActiveX.RunExe) - hcp://system/RunExeActiveX.CAB
O16 - DPF: {99CDFD87-F97A-42E1-9C13-D18220D90AD1} (StartFirstControl.CheckFirst) - hcp://system/StartFirstControl.CAB
O16 - DPF: {E4F00513-EE0D-11D4-BA1D-F293A1C67C30} (Project1.UserControl1) -

http://www.lawes.dircon.co.uk/webpagevikingchess.ocx

O17 - HKLM\System\CCS\Services\Tcpip\..\{2C1CDC4E-FC88-4B92-9407-8E4EC0188D94}: NameServer = 209.165.131.12 209.165.131.13

 

[Volk359]

Ok, erm, I seemed to have found the problem.

Seems when I did the install for the modem the default speed was set to 115K and I either didn't notice it or didn't bother to change it. After a hint from one of our SCADA techs I reset it to a more realistic speed (for our phones) of 38K and it works fine.

Sorry if anyone lost any sleep over this, I know I did.

Linney, I'll take your advice and double check those entries.

Thanks all.

 

[Frank4d]

It could be a DNS server problem or DNS setup issue in TCP/IP properties. What happens if you try to go to

http://64.236.24.12

or

http://66.94.230.45

?

 

[Volk359]

I get CNN & Yahoo. Seems aren't so well after all, I got the error again as I logged on. Wish to heck I had another modem to try.