A modem connection problem

cloudvii · August 6th, 2004

Well it's been a while since the problem started , after i log on to internet using my dialup connection , i just stay for x minutes or hours then the connection gets really slow , and when i check for the properties of connection i find that as if i'm uploading and downloading at the same time (or as if i'm still surfing while i'm not)
1st thing : Am i hacked ?
2nd thing : How to get rid of that problem ?

gameman733 · August 6th, 2004

I dont think youve been hacked, but it could be a port scan. Do you have a firewall? I know sygate will tell you if your being port scanned. I get the same issue when i dont have a firewall up (except it will do it as soon as i get on, and not that slow)

cloudvii · August 6th, 2004

No i'm not using any firewalls

gameman733 · August 6th, 2004

Try one and see if it helps any. I prefer sygate, but zonealarm will work for testing (ZA can be a resource hog)

WEXP · August 6th, 2004

I had this problem when I had dialup, too. Unfornately I don't remember right now what was the solution, but try firewalls and antivirus first.

permethium · August 6th, 2004

I had the very same problem (plus my connection got dropped alot)...solved the problem by switching to a new internet service provider...i have a new problem now; i stay connected for about 10 minutes or so, and then a dialogue box appears that says :"A system shutdown will occur because the 'remote procedure call service' terminated unexpectedly - Shutdown initialised by NT AUTHORITY SYSTEM" ....what the hell does that mean? ...Anyways, i went to the Administator tools and set the settings for remote procedure call error to: "take no action" instead of "restart computer" seems to work....for now...

WEXP · August 6th, 2004

Quote:

Originally Posted by permethium

I had the very same problem (plus my connection got dropped alot)...solved the problem by switching to a new internet service provider...i have a new problem now; i stay connected for about 10 minutes or so, and then a dialogue box appears that says :"A system shutdown will occur because the 'remote procedure call service' terminated unexpectedly - Shutdown initialised by NT AUTHORITY SYSTEM" ....what the hell does that mean? ...Anyways, i went to the Administator tools and set the settings for remote procedure call error to: "take no action" instead of "restart computer" seems to work....for now...

Most likely you've got the MsBlaster worm or the Sasser worm. Download the patches from Microsoft. I'm sorry I can't give you direct links but Microsoft's pages don't work on this computer.

permethium · August 6th, 2004

Quote:

Originally Posted by WEXP

Most likely you've got the MsBlaster worm or the Sasser worm. Download the patches from Microsoft. I'm sorry I can't give you direct links but Microsoft's pages don't work on this computer.

Damn; you're right! I reinstalled winxp after the first couple of times it happened (i thought xp went corrupt on me) but the problem never went away, i also recall some message box saying something like "program error in lsass.exe in the windows/system directory, so it must be that sasser worm....i also just found that i can't copy and paste text(i had to quote your whole message)....so it's some kinda virus eh? can it physically harm anything in my pc or result in data loss?

scottlc · August 6th, 2004

Just run antivirus software. If you don't have any, grab AVG Free Edition from:
http://free.grisoft.com/

Second of all, run a firewall. ZoneAlarm is great, and free. Running a firewall would have prevented the infection in the first place! Grab it at:
http://www.zonelabs.com/

Also, visit the Gibson Research Corporation website and run DCOMbobulator to turn off the dangerous, and unneccesary DCOM service. There have been many DCOM exploits, and THERE WILL BE MORE.
http://www.grc.com/

Spyware removal software is also useful. I'd recommend Spybot S&D over AdAware.
http://spybot.safer-networking.de/

I really cannot stress enough the neccessity of a software or residential hardware firewall. If every PC in the world was firewalled, MSBlast would never have happened! Even if you are a dialup user, it is essential that you run a firewall!

WEXP · August 6th, 2004

Oh ****, I just noticed I forgot to install my firewall last time I reinstalled... *installs*

permethium · August 6th, 2004

thanks for the generous help

btw* i ran that Microsoft program that wipes out the worm; it says: "no infection found ???"

scottlc · August 6th, 2004

No problem, always willing to help. Run proper antivirus software though, there are many different nasties going about.

permethium · August 6th, 2004

well, i'm running Norton 2003 right now. And using Mozilla Firebird offcourse

SnakeBite · August 6th, 2004

I'm running both firewall (zonealarm) and antivirus (norton antivirus 2003). no problems here

but I got ms blaster before I installed any of those. I think you should have at least either a firewall or an antivirus program, but both is better

scottlc · August 7th, 2004

A firewall AND antivirus are essential. But a firewall is most essential, since nasties such as MSBlast can infect you without even having to run anything, since they exploit weaknesses in the underlying operating system.

permethium · August 7th, 2004

what about the built-in firewall(winxp) that you can enable at the dial-up connection settings? is it any good?

**Kane** · August 7th, 2004

The one Pre-SP2 is worthless, but hte SP2 one is allright.

SnakeBite · August 7th, 2004

I wouldn't rely on a built-in firewall, especially not if it's a Microsoft-firewall

/me wubs ZoneAlarm

August 6th, 2004	#1 (permalink)
cloudvii Emunext fanboy Join Date: Sep 2003 Location: Cairo , Egypt Posts: 4,243	A modem connection problem Well it's been a while since the problem started , after i log on to internet using my dialup connection , i just stay for x minutes or hours then the connection gets really slow , and when i check for the properties of connection i find that as if i'm uploading and downloading at the same time (or as if i'm still surfing while i'm not) 1st thing : Am i hacked ? 2nd thing : How to get rid of that problem ? __________________ Fekra Online magazine Fekra Magazine Fekra Magazine readers Facebook group

August 6th, 2004	#2 (permalink)
gameman733 Registered User Join Date: May 2003 Location: no where Posts: 338	I dont think youve been hacked, but it could be a port scan. Do you have a firewall? I know sygate will tell you if your being port scanned. I get the same issue when i dont have a firewall up (except it will do it as soon as i get on, and not that slow) __________________ Desktop: CPU:Athlon XP 2400+ Mobo:Shuttle AK32VN Memory:256MB PC2100 DDR-RAM + 512 PC2700 DDR-RAM Video Card:Apollo Geforce 6600GT + HDTV out Hard Drives: Maxtor 120GB 7200 RPM + Maxtor 120GB 5400 RPM + Maxtor 20GB DVD+RW: Lite-on LDW-401S 4x Running XP Pro SP2 Linbox (R.I.P, Dead Motherboard)(server): CPU: 1.4ghz Athlon Mobo: ECS K7S5A Memory: 2x64MB SDRAM Video Card: ATI Rage something Drives: hda: 6 GB HD hdc: DVD-rom Drive Running Debian Sarge

August 6th, 2004	#3 (permalink)
cloudvii Emunext fanboy Join Date: Sep 2003 Location: Cairo , Egypt Posts: 4,243	No i'm not using any firewalls __________________ Fekra Online magazine Fekra Magazine Fekra Magazine readers Facebook group

August 6th, 2004	#4 (permalink)
gameman733 Registered User Join Date: May 2003 Location: no where Posts: 338	Try one and see if it helps any. I prefer sygate, but zonealarm will work for testing (ZA can be a resource hog) __________________ Desktop: CPU:Athlon XP 2400+ Mobo:Shuttle AK32VN Memory:256MB PC2100 DDR-RAM + 512 PC2700 DDR-RAM Video Card:Apollo Geforce 6600GT + HDTV out Hard Drives: Maxtor 120GB 7200 RPM + Maxtor 120GB 5400 RPM + Maxtor 20GB DVD+RW: Lite-on LDW-401S 4x Running XP Pro SP2 Linbox (R.I.P, Dead Motherboard)(server): CPU: 1.4ghz Athlon Mobo: ECS K7S5A Memory: 2x64MB SDRAM Video Card: ATI Rage something Drives: hda: 6 GB HD hdc: DVD-rom Drive Running Debian Sarge

August 6th, 2004	#5 (permalink)
WEXP Elemental Join Date: Jun 2003 Location: Norway Posts: 289	I had this problem when I had dialup, too. Unfornately I don't remember right now what was the solution, but try firewalls and antivirus first. __________________

August 6th, 2004	#6 (permalink)
permethium Fallout Fanatic Join Date: May 2004 Location: Shady Sands Posts: 329	I had the very same problem (plus my connection got dropped alot)...solved the problem by switching to a new internet service provider...i have a new problem now; i stay connected for about 10 minutes or so, and then a dialogue box appears that says :"A system shutdown will occur because the 'remote procedure call service' terminated unexpectedly - Shutdown initialised by NT AUTHORITY SYSTEM" ....what the hell does that mean? ...Anyways, i went to the Administator tools and set the settings for remote procedure call error to: "take no action" instead of "restart computer" seems to work....for now... __________________ AMD Athlon 64x2 5000+ @2.6ghz\|4Gb DDR800 \| X-Fi extreme \| Sapphire Radeon HD4850 512Mb \| Asus 690G \| WinXP x64 To know is to Live

August 6th, 2004	#9 (permalink)
scottlc Registered User Join Date: Sep 2002 Location: St Andrews, Scotland Posts: 1,575	Just run antivirus software. If you don't have any, grab AVG Free Edition from: http://free.grisoft.com/ Second of all, run a firewall. ZoneAlarm is great, and free. Running a firewall would have prevented the infection in the first place! Grab it at: http://www.zonelabs.com/ Also, visit the Gibson Research Corporation website and run DCOMbobulator to turn off the dangerous, and unneccesary DCOM service. There have been many DCOM exploits, and THERE WILL BE MORE. http://www.grc.com/ Spyware removal software is also useful. I'd recommend Spybot S&D over AdAware. http://spybot.safer-networking.de/ I really cannot stress enough the neccessity of a software or residential hardware firewall. If every PC in the world was firewalled, MSBlast would never have happened! Even if you are a dialup user, it is essential that you run a firewall! __________________ OS: Arch Linux w/ Kernel 2.6.23.8 + GNOME 2.20.1 - CPU: Intel Pentium M 1.5GHz - Memory: 1280MB DDR PC2700 - Browser: Mozilla Firefox 2.0.0.10 Last edited by scottlc; August 6th, 2004 at 22:47.

August 6th, 2004	#10 (permalink)
WEXP Elemental Join Date: Jun 2003 Location: Norway Posts: 289	Oh ***, I just noticed I forgot to install my firewall last time I reinstalled... installs* __________________

August 6th, 2004	#11 (permalink)
permethium Fallout Fanatic Join Date: May 2004 Location: Shady Sands Posts: 329	thanks for the generous help btw* i ran that Microsoft program that wipes out the worm; it says: "no infection found ???" __________________ AMD Athlon 64x2 5000+ @2.6ghz\|4Gb DDR800 \| X-Fi extreme \| Sapphire Radeon HD4850 512Mb \| Asus 690G \| WinXP x64 To know is to Live

August 6th, 2004	#12 (permalink)
scottlc Registered User Join Date: Sep 2002 Location: St Andrews, Scotland Posts: 1,575	No problem, always willing to help. Run proper antivirus software though, there are many different nasties going about. __________________ OS: Arch Linux w/ Kernel 2.6.23.8 + GNOME 2.20.1 - CPU: Intel Pentium M 1.5GHz - Memory: 1280MB DDR PC2700 - Browser: Mozilla Firefox 2.0.0.10

August 6th, 2004	#13 (permalink)
permethium Fallout Fanatic Join Date: May 2004 Location: Shady Sands Posts: 329	well, i'm running Norton 2003 right now. And using Mozilla Firebird offcourse __________________ AMD Athlon 64x2 5000+ @2.6ghz\|4Gb DDR800 \| X-Fi extreme \| Sapphire Radeon HD4850 512Mb \| Asus 690G \| WinXP x64 To know is to Live

August 6th, 2004	#14 (permalink)
SnakeBite Single Join Date: Apr 2002 Location: Norway Posts: 667	I'm running both firewall (zonealarm) and antivirus (norton antivirus 2003). no problems here but I got ms blaster before I installed any of those. I think you should have at least either a firewall or an antivirus program, but both is better __________________ This is my new improved sig.

August 7th, 2004	#15 (permalink)
scottlc Registered User Join Date: Sep 2002 Location: St Andrews, Scotland Posts: 1,575	A firewall AND antivirus are essential. But a firewall is most essential, since nasties such as MSBlast can infect you without even having to run anything, since they exploit weaknesses in the underlying operating system. __________________ OS: Arch Linux w/ Kernel 2.6.23.8 + GNOME 2.20.1 - CPU: Intel Pentium M 1.5GHz - Memory: 1280MB DDR PC2700 - Browser: Mozilla Firefox 2.0.0.10

August 7th, 2004	#16 (permalink)
permethium Fallout Fanatic Join Date: May 2004 Location: Shady Sands Posts: 329	what about the built-in firewall(winxp) that you can enable at the dial-up connection settings? is it any good? __________________ AMD Athlon 64x2 5000+ @2.6ghz\|4Gb DDR800 \| X-Fi extreme \| Sapphire Radeon HD4850 512Mb \| Asus 690G \| WinXP x64 To know is to Live

August 7th, 2004	#17 (permalink)
Kane 邪魔ゎ指せない Join Date: Jan 2002 Location: Gosport, England Posts: 26,255	The one Pre-SP2 is worthless, but hte SP2 one is allright. __________________ >Site Live< Pop over to my site for help with setting up PSX emulators. Help for the Final Fantasies and other RPGs avalaible Celes: (Desktop) Athlon 64 X2 4200+, 2Gb 400MHz DDR Ram, MSI K8N Platinum, GeForce 8800 GTS 320Mb, 500Gb RAID HDD, Vista Business Erika: (MCPC) Athlon XP 2400+, 1Gb 400MHz DDR Ram, geForce 6800 256Mb, 80Gb Hdd, XP 2005 MCE Kimiko: (Desktop 2) Athlon 64 3000+, 512Mb 400MHz DDR Ram, Asus K8V, geForce 6800 128Mb

August 7th, 2004	#18 (permalink)
SnakeBite Single Join Date: Apr 2002 Location: Norway Posts: 667	I wouldn't rely on a built-in firewall, especially not if it's a Microsoft-firewall /me wubs ZoneAlarm __________________ This is my new improved sig.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode