Computer Hope

Internet & Networking => Networking => Topic started by: only_lonely on December 06, 2007, 06:14:25 PM

Title: adapter or windows problem?
Post by: only_lonely on December 06, 2007, 06:14:25 PM
It happend everyday around 3-4pm.
when refresh lotus notes, the message "the TCP/IP stack reported it ran out of memory. Consult your network documentation to increase configured memory, or reduce notes connections by limiting clients"

Also the IE,it cannot display the webpage.

I have to restart my pc to get it solved.
Title: Re: adapter or windows problem?
Post by: Broni on December 06, 2007, 06:44:30 PM
I strongly suspect some infection...

Start here:
http://www.computerhope.com/forum/index.php/topic,46313.0.html
Post all logs at Computer Viruses and Spyware forum.
Title: Re: adapter or windows problem?
Post by: only_lonely on December 06, 2007, 08:17:58 PM
but my pc is scanned every week ,using NAV corp.
nothing infected
Title: Re: adapter or windows problem?
Post by: Broni on December 06, 2007, 08:20:27 PM
We're not talking here about viruses only, and Norton is very far from being a miracle tool.
I suggest trying my link.
Title: Re: adapter or windows problem?
Post by: only_lonely on December 07, 2007, 01:48:10 AM
so after using ESET online scan,found 2 files at windows system,and deleted it.
then i boot pc to safe mode, run super antivirus to scan,found 29 track and malware,then deleted.
herewith the hijacklog file after reboot to normal mode

[saving space - attachment deleted by admin]
Title: Re: adapter or windows problem?
Post by: Broni on December 07, 2007, 05:17:11 PM
Some Mod, please, move this thread to "Computer Viruses and Spyware", while I'll take a look at HJT log.
Thank you.
Title: Re: adapter or windows problem?
Post by: Broni on December 07, 2007, 05:36:31 PM
1. Print this post out, since you won't have an access to it, at some point.

2. Download, and install Spybot (if you don't have it) from here: http://www.download.com/3000-2144-10122137.html

3. Close all windows, except for HJT.

4. Put a checkmark next to the following HJT entries:

- O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)

- O2 - BHO: (no name) - {E5A1691B-D188-4419-AD02-90002030B8EE} - (no file)

- O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)

- Does ges-msl.com ring any bell? If NOT, checkmark all four O17 entries.

5. Click on "Fix It" button.

6. Restart your computer in Safe Mode (keep tapping F8 key, when your computer starts)

7. Run Spybot (check for updates, first), and fix whatever it asks you to fix.

8. Open Windows Explorer. Go Tools>Folder Options>View tab, put a checkmark next to "Show hidden files, and folders".

9. Delete following files (if they still exist):

Nothing to remove

10. Turn off System Restore:

- Windows XP:
   1. Click Start.
   2. Right-click the My Computer icon, and then click Properties.
   3. Click the System Restore tab.
   4. Check "Turn off System Restore".
   5. Click Apply.   
   6.  When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
   7. Click OK.
- Windows Vista:
   1. Click Start.
   2. Right-click the Computer icon, and then click Properties.
   3. Click on System Protection under the Tasks column on the left side
   4. Click on Continue on the "User Account Control" window that pops up
   5. Under the System Protection tab, find Available Disks
   6. Uncheck the box for any drive you wish to disable system restore on (in most cases, drive "C:")
   7. When turning off System Restore, the existing restore points will be deleted. Click "Turn System Restore Off" on the popup window to do this.
   8. Click OK

11. Restart in Normal Mode.

12. Turn System Restore on.

13. Run HJT again, and post back its log back here.
Title: Re: adapter or windows problem?
Post by: only_lonely on December 09, 2007, 06:58:42 PM
i think the 017 entries will start everytime i login(company pc)
so i delete it,but after reboot,it still there.
here is the log file

[saving space - attachment deleted by admin]
Title: Re: adapter or windows problem?
Post by: Broni on December 09, 2007, 09:34:23 PM
No more O17 entries, and the log is clean.
Are you still getting those errors?
Title: Re: adapter or windows problem?
Post by: only_lonely on December 10, 2007, 01:21:16 AM
ya...so far still can access internet..
thanks for helping.
just checked the O17 entries is my company policies.it come back again at windows startup
Title: Re: adapter or windows problem?
Post by: Broni on December 10, 2007, 05:36:39 PM
I'd like you to go back here:
http://www.computerhope.com/forum/index.php/topic,46313.0.html
and perform step #3: SUPERAntiSpyware
Post its log back here.