ddeeff

Thanks again, I'm not sure that it's large transfers that are the problem, I think the error is statistically more likely to occur in large transfers because there's more time for it to go wrong. network.http.keep-alive seemed to have no effect, but setting network.http.max-connections-per-server to 1 made a large page of text unable to load at all. I switched it back to 15. Perhaps Firefox is making loads of connections and only some of those work. It then uses the working ones to download data until one by one, the connections fail and there are no more connections to serve data. This doesn'

Thanks for the replies, I have pinged google.co.uk (closer) and google.com without comparing it to the safe mode with networking They give similar steady responses. (42ms and 122-124 respectively). I don't think the ping response is a large enough amount of data to trigger the error. I wanted to instead test whether the problem I described occurred (using a browser) in safe mode with networking, but I couldn't get online. I'm using a wireless Belkin adapter to connect to the router, which is connected by a USB port. It uses a Belkin application to connect to the router, but this application se

My (Windows XP) computer is having trouble with its internet connection. I'll give 2 examples of the same problem. I'm downloading a webpage. Sometimes, esp. on longer pages, not everything downloads. At some point, the connection has failed mid-download. However, the browser carousel which represents the loading of the page is still spinning. I'm downloading a file to my hard drive. It cuts out and the information it displays (time remaining, X of Y MB, speed) doesn't update (should say 0kb/sec, but displays speed before cut-out). It does this on IE and Fx. The only way to download a whole

The malware has come back yet again. I don't think this is coming from the internet. I think this is coming from my iPod since it happened when I was trying to copy some files to it again. This makes sense since I recently connected the iPod to a friend's computer. I'm guessing I got infected from there. EDIT: According to a Sophos report, the infection LSA Shellu, which is attempting to get into the startup list, is transmitted through removable storage devices. I have run MBAM through the iPod and it finds no problems. EDIT 2: Ran MBAM through computer and found the same four files found ori

Issues 1, 2 and 3 seem to be sorted now, with nothing malicious found Malwarebytes' Anti-Malware 1.11 Database version: 604 Scan type: Full Scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|M:\|) Objects scanned: 292854 Time elapsed: 1 hour(s), 20 minute(s), 8 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items

Here is the combofix.txt file: ComboFix 08-04-08.10 - Will Barry 2008-04-09 17:51:35.5 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.582 [GMT 1:00] Running from: C:\Documents and Settings\Will Barry\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\Will Barry\Desktop\CFScript.txt * Created a new restore point [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] FILE :: C:\Documents and Settings\Will Barry\services.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))

I'm afraid combofix.txt was deleted when it was dragged and dropped. I ran it again, so here is the outputed log.txt ComboFix 08-04-08.10 - Will Barry 2008-04-09 16:47:53.4 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.641 [GMT 1:00] Running from: C:\Documents and Settings\Will Barry\Desktop\ComboFix.exe [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((( Files Created from 2008-03-09 to 2008-04-09 ))))))))))))))))))))))))))))))) . 2008-04-09 16:15 . 2005-11-10 14:03 49,265 --a------ C:\WIND

Damn. After posting that, the problem has come back. Again I have seen issue 1, 2 and 3 from the original post. I will re-follow the steps once I can be advised on how to stop the problem happening again. Should I add spoof .exe files to where the virus keeps infecting? When it came back, I was opening up my iPod to copy some files over to it. Could the infection somehow have got onto the iPod? (The iPod is using its native software and is in disk mode)

Here is the Kaspersky log: ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Wednesday, April 09, 2008 10:08:42 AM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 9/04/2008 Kaspersky Anti-Virus database records: 691309 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: tr

ok. Here is report.txt [b]SDFix: Version 1.167 [/b] Run by Administrator on 09/04/2008 at 00:06 Microsoft Windows XP [Version 5.1.2600] Running From: C:\SDFix [b]Checking Services [/b]: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1351.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-04-09 00:12:15 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ...

Damn- the malware is back! After a restart it has come back. I'll uninstall some recently installed software and then if that fails I will create some blank exe files to fool whatever is doing it into stopping

Excellent. It appears to have found what Spybot and Ad-Aware could not. Is this program better or should I use it in conjunction with the others? Malwarebytes' Anti-Malware 1.11 Database version: 602 Scan type: Quick Scan Objects scanned: 40442 Time elapsed: 5 minute(s), 53 second(s) Memory Processes Infected: 1 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 1 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 2 Memory Processes Infected: C:\Documents and Settings\Will Barry\lsass.exe (Heuristics.Reserved.Word.Exploit) -> Unloaded process

I have multiple issues, but they all probably same from the same thing. I run Ad-Aware and Spybot to check for viruses. I run Spybot and Securemaker in the background to check in real-time for viruses Additionally, there is a firewall on the router I use. Issue 1: Both Securemaker and Spybot are flagging up attempts from "LSA Shellu" to program the startup Path. Spybot gave me the "path" as C:\Documents and Settings\Will Barry\Lsass.exe(Will Barry is me, btw) I keep rejecting these but whatever is doing it is being persistent. I went into the folder and found a suspicious exe file called "ser