Computer Disconnecting Router Internet

Vanit · November 16th, 2005, 13:05

For the last few days I've had this problem where when my main computer is started up in windows and connected to the router every 20 minutes or so it will render the internet completely useless (for every computer on the network, not just mine). Reseting the D-Link modem fixes it, as does shutting down my computer, but I would like to figure out a way to have my computer running on the internet without having to reset it all the time (which makes downloading large non-resumable files an interesting game). I have a hunch there is a virus of sorts behind this but as of yet I have been unable to locate it with the aid of all the usual programs (don't bother suggesting Hijackthis, adaware, spybot, and the like). So before I consider a reformat do you guys out there have any idea how I might be able to tackle this?

__________________
Click here to download my Sin and Punishment English translation.

**refraction** · November 16th, 2005, 13:16

at the uni im workign at weve started disabling "enable device to go into power saving mode" under the network card device properties, as staff members were experiencing simular problems, so thats one thing to check.

also disable proxy dns or dns cache on the router, our D-Link would go for a few days/weeks then itd need resetting as the dns doesnt flush and it chokes itself up, the only other thing you can try is getting a firmware update for the router, we had to do that as well for a very simular reason, plus the router kept freezing.

__________________

http://www.pcsx2.net
Intel i7 920 @ 3.4Ghz, POV GTX 570 1.3Gb, 1.8Tb HD space, 6Gb OCZ Reaper PC3-14400 Triple Channel
Dont PM me for help, use the forums, thats what its for!

My Chip16 Emulator RefChip16 http://code.google.com/p/refchip16/

KillerShots · November 17th, 2005, 15:41

If it's not limited to your computer, and it happens to all machines at once, I'd feel pretty safe thinking it's not a virus.

One thing I'd check is your DHCP settings in the router. Specifically, check lease times and renewals. Also, try manually configuring one machine to talk through the router and see if that works when the rest fail - if so, you can safely ignore DHCP as a possible issue.

__________________
Primary
CPU: Athlon 64 X2 4400+ Mobo: Biostar N4SLI-A9 RAM: 2G Crucial (DDR400) Video: eVGA GeForce 7900 GTX (512M) Audio: HDA X-Mystique HD(s): Maxtor 300G SATA2, Samsung 400G SATA2 OS(s): WinXP x64 Pro, Vista x32 Ultimate, Gentoo x64 Monitor(s): Primary - 19" Flat Panel (1280x1024) Secondary - 19" Flat Panel (1280x1024) Tertiary - Zenith 42" Plasma TV (1024x768 res)

Many other machines... sig too short

Kraelis · November 18th, 2005, 00:07

Or, he infected the whole network with it.

It's odd, since from what I understand, his main computer disables internet in all the systems in the network after 20 minutes. One system shouldn't normally have that kind of ability/power no matter what setting, unless it itself was the routing system.

Check for malware. It's possible that you have a worm that attacks the router. This will effectively shut down the network. I've handled cases like this before, and yeah, we had to restart the router and the attacking system, until the worm starts up again.

An easy way to know is to grab TCPView or something similar from http://www.sysinternals.com and check for an inordinate amount of connections hammering the router.

__________________
--KrÆlis Cross

Mundus vult decipi, ergo decipiatur

===============
Athlon 64 x2 3800| Asrock ALiveNF6G-VSTA | Kingston DDR2 1 Gb RAM

masque · November 18th, 2005, 03:49

our router was having similar kinds of problems because of a bad NIC. Try swapping out the NIC to see if that's causing the problems. If you can, use a crossover cable between the bad PC and good one and transfer a large file, ours was failing when I tried this.

__________________
Current Specs:
NForce2 Chipset, Athlon XP 3000+, 1GB DDR400 RAM, 60GB Western Digital 8MB 7200RPM, Some cheap 80GB drive 7200RPM, Radeon 9600 128MB, WinXP Professional SP2

KillerShots · November 18th, 2005, 13:51

If it was knocking out the whole network, then how does resetting the router help? No, that symptom does not suggest to me that it's a virus / worm. Just sounds like either the router is failing or that it's misconfigured.

__________________
Primary
CPU: Athlon 64 X2 4400+ Mobo: Biostar N4SLI-A9 RAM: 2G Crucial (DDR400) Video: eVGA GeForce 7900 GTX (512M) Audio: HDA X-Mystique HD(s): Maxtor 300G SATA2, Samsung 400G SATA2 OS(s): WinXP x64 Pro, Vista x32 Ultimate, Gentoo x64 Monitor(s): Primary - 19" Flat Panel (1280x1024) Secondary - 19" Flat Panel (1280x1024) Tertiary - Zenith 42" Plasma TV (1024x768 res)

Many other machines... sig too short

Vanit · November 19th, 2005, 08:48

Okay I fixed the problem! Turns out there was some sort of program doing it... I installed the latest Norton's Internet Security (2006) and it found there was some process running that was accessing ports (I was previously suspicious of this file, but when ever I checked it the folder it claimed to be wasn't there) so Norton asked to block it and I obviously chose to let it. In anycase, this phantom program is now under lock and key, guarded by my saviour Norton Internet Security (I really recommend it).

Thanks for the help guys

.

And if you're interested the program was called Aclegini.exe in a folder that didn't exist called Intrdock. Google turned up no results on both accounts.

__________________
Click here to download my Sin and Punishment English translation.

**refraction** · November 19th, 2005, 14:39

wow, norton has a use, shame its bloated to death ;p

__________________

http://www.pcsx2.net
Intel i7 920 @ 3.4Ghz, POV GTX 570 1.3Gb, 1.8Tb HD space, 6Gb OCZ Reaper PC3-14400 Triple Channel
Dont PM me for help, use the forums, thats what its for!

My Chip16 Emulator RefChip16 http://code.google.com/p/refchip16/

Kraelis · November 21st, 2005, 09:56

"Aclegini.exe" eh? Sounds like one of those randomly naming worms. Yep. your router got hammered.

Well, as much as I hate Symantec, and that TCPView-Process Explorer are cheaper, at least it got the job done. Congratulations.

__________________
--KrÆlis Cross

Mundus vult decipi, ergo decipiatur

===============
Athlon 64 x2 3800| Asrock ALiveNF6G-VSTA | Kingston DDR2 1 Gb RAM

November 16th, 2005, 13:05	#1
Vanit Heretic Join Date: Jan 2004 Location: Australia! Posts: 2,764	Computer Disconnecting Router Internet For the last few days I've had this problem where when my main computer is started up in windows and connected to the router every 20 minutes or so it will render the internet completely useless (for every computer on the network, not just mine). Reseting the D-Link modem fixes it, as does shutting down my computer, but I would like to figure out a way to have my computer running on the internet without having to reset it all the time (which makes downloading large non-resumable files an interesting game). I have a hunch there is a virus of sorts behind this but as of yet I have been unable to locate it with the aid of all the usual programs (don't bother suggesting Hijackthis, adaware, spybot, and the like). So before I consider a reformat do you guys out there have any idea how I might be able to tackle this? __________________ Click here to download my Sin and Punishment English translation.

November 16th, 2005, 13:16	#2
refraction PCSX2 Coder $refraction's Avatar$ Join Date: Jan 2004 Location: Plymouth, UK Posts: 10,037	at the uni im workign at weve started disabling "enable device to go into power saving mode" under the network card device properties, as staff members were experiencing simular problems, so thats one thing to check. also disable proxy dns or dns cache on the router, our D-Link would go for a few days/weeks then itd need resetting as the dns doesnt flush and it chokes itself up, the only other thing you can try is getting a firmware update for the router, we had to do that as well for a very simular reason, plus the router kept freezing. __________________ http://www.pcsx2.net Intel i7 920 @ 3.4Ghz, POV GTX 570 1.3Gb, 1.8Tb HD space, 6Gb OCZ Reaper PC3-14400 Triple Channel Dont PM me for help, use the forums, thats what its for! My Chip16 Emulator RefChip16 http://code.google.com/p/refchip16/
$refraction is offline$

November 19th, 2005, 14:39	#8
refraction PCSX2 Coder $refraction's Avatar$ Join Date: Jan 2004 Location: Plymouth, UK Posts: 10,037	wow, norton has a use, shame its bloated to death ;p __________________ http://www.pcsx2.net Intel i7 920 @ 3.4Ghz, POV GTX 570 1.3Gb, 1.8Tb HD space, 6Gb OCZ Reaper PC3-14400 Triple Channel Dont PM me for help, use the forums, thats what its for! My Chip16 Emulator RefChip16 http://code.google.com/p/refchip16/
$refraction is offline$

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

November 17th, 2005, 15:41	#3
KillerShots War Games coder Join Date: Apr 2001 Location: Florida Posts: 1,927	If it's not limited to your computer, and it happens to all machines at once, I'd feel pretty safe thinking it's not a virus. One thing I'd check is your DHCP settings in the router. Specifically, check lease times and renewals. Also, try manually configuring one machine to talk through the router and see if that works when the rest fail - if so, you can safely ignore DHCP as a possible issue. __________________ Primary CPU: Athlon 64 X2 4400+ Mobo: Biostar N4SLI-A9 RAM: 2G Crucial (DDR400) Video: eVGA GeForce 7900 GTX (512M) Audio: HDA X-Mystique HD(s): Maxtor 300G SATA2, Samsung 400G SATA2 OS(s): WinXP x64 Pro, Vista x32 Ultimate, Gentoo x64 Monitor(s): Primary - 19" Flat Panel (1280x1024) Secondary - 19" Flat Panel (1280x1024) Tertiary - Zenith 42" Plasma TV (1024x768 res) Many other machines... sig too short

November 18th, 2005, 00:07	#4
Kraelis Transcended Join Date: Jun 2001 Location: Moonlight Spire Posts: 1,409	Or, he infected the whole network with it. It's odd, since from what I understand, his main computer disables internet in all the systems in the network after 20 minutes. One system shouldn't normally have that kind of ability/power no matter what setting, unless it itself was the routing system. Check for malware. It's possible that you have a worm that attacks the router. This will effectively shut down the network. I've handled cases like this before, and yeah, we had to restart the router and the attacking system, until the worm starts up again. An easy way to know is to grab TCPView or something similar from http://www.sysinternals.com and check for an inordinate amount of connections hammering the router. __________________ --KrÆlis Cross Mundus vult decipi, ergo decipiatur =============== Athlon 64 x2 3800\| Asrock ALiveNF6G-VSTA \| Kingston DDR2 1 Gb RAM

November 18th, 2005, 03:49	#5
masque Registered User Join Date: Nov 2003 Location: Dixon CA Posts: 378	our router was having similar kinds of problems because of a bad NIC. Try swapping out the NIC to see if that's causing the problems. If you can, use a crossover cable between the bad PC and good one and transfer a large file, ours was failing when I tried this. __________________ Current Specs: NForce2 Chipset, Athlon XP 3000+, 1GB DDR400 RAM, 60GB Western Digital 8MB 7200RPM, Some cheap 80GB drive 7200RPM, Radeon 9600 128MB, WinXP Professional SP2

November 18th, 2005, 13:51	#6
KillerShots War Games coder Join Date: Apr 2001 Location: Florida Posts: 1,927	If it was knocking out the whole network, then how does resetting the router help? No, that symptom does not suggest to me that it's a virus / worm. Just sounds like either the router is failing or that it's misconfigured. __________________ Primary CPU: Athlon 64 X2 4400+ Mobo: Biostar N4SLI-A9 RAM: 2G Crucial (DDR400) Video: eVGA GeForce 7900 GTX (512M) Audio: HDA X-Mystique HD(s): Maxtor 300G SATA2, Samsung 400G SATA2 OS(s): WinXP x64 Pro, Vista x32 Ultimate, Gentoo x64 Monitor(s): Primary - 19" Flat Panel (1280x1024) Secondary - 19" Flat Panel (1280x1024) Tertiary - Zenith 42" Plasma TV (1024x768 res) Many other machines... sig too short

November 19th, 2005, 08:48	#7
Vanit Heretic Join Date: Jan 2004 Location: Australia! Posts: 2,764	Okay I fixed the problem! Turns out there was some sort of program doing it... I installed the latest Norton's Internet Security (2006) and it found there was some process running that was accessing ports (I was previously suspicious of this file, but when ever I checked it the folder it claimed to be wasn't there) so Norton asked to block it and I obviously chose to let it. In anycase, this phantom program is now under lock and key, guarded by my saviour Norton Internet Security (I really recommend it). Thanks for the help guys . And if you're interested the program was called Aclegini.exe in a folder that didn't exist called Intrdock. Google turned up no results on both accounts. __________________ Click here to download my Sin and Punishment English translation.

November 21st, 2005, 09:56	#9
Kraelis Transcended Join Date: Jun 2001 Location: Moonlight Spire Posts: 1,409	"Aclegini.exe" eh? Sounds like one of those randomly naming worms. Yep. your router got hammered. Well, as much as I hate Symantec, and that TCPView-Process Explorer are cheaper, at least it got the job done. Congratulations. __________________ --KrÆlis Cross Mundus vult decipi, ergo decipiatur =============== Athlon 64 x2 3800\| Asrock ALiveNF6G-VSTA \| Kingston DDR2 1 Gb RAM