Discussion Locked

no http 10 minutes after reboot

0 helpful
34 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Greetings.

I will do my best to describe this problem as accurately as I can.

I have a Toshiba Prot?g? laptop that belongs to one of our travelling users. The machine has been kept up-to-date with MS updates, AV and anti-spyware.

Here is the situation:
When the machine initially boots, all internet functionality works normally. After about 5-10 minutes (even if not logged in) the machine can no longer resolve http:// websites. https:// and all network resources work normally. Relogging does not fix the problem.

What I have tried:
I have run Anti-virus and anti-spyware tools (E-trust and AdAware -- including the vx2 plug-in)
I have searched the list of services, and processes running on the machine and have not found anything that sent up any red flags. I have run tcpview and with the exception of an inordinate number of the following:
[system process]0 trying to access the domain controller with status: TIME_WAIT.

I have rolled back Media Player to version 9, rolled back windows to settings prior to this complication and uninstalled all non-essential software (I-tunes, Yahoo Messenger and Port Magic)

Any suggestions would be very much appreciated -- I am very very stuck.

34 replies

by el_guapo

try pinging sites from a command prompt to determine if it is IE or network problem.

Run ipconfig /all make sure settings have not changed.

check connection settings in IE?

Dynamic or static ip settings?

by etienneh8y

"try pinging sites from a command prompt to determine if it is IE or network problem."

Forgot to mention that I checked this already. ping works fine.

"Run ipconfig /all make sure settings have not changed."

nothing changed.

"check connection settings in IE?"

I did this at the beginning and found that proxy had been turned on. I turned it off, and got to the point where I am now -- before it had 0 connection.

"Dynamic or static ip settings?"

Static IP on the domain, but Dynamic on both our DMZ and at home -- where the problem persists as described.

by faradhi

It sounds like the computer is not switching to DHCP when not on the domain.

When you set the static IP address under TCP/IP settings for the adapter, do you set it under the general tab or the Alternate Configuration?

If you set the static IP under the general tab, then it will always apply. This could be what is producing the issue. The static IP you are using may exist on the other networks. This would cause an IP conflict.

Instead, set the static IP under the alternate Configuration. This way the computer will look for a DHCP server and if it cannot find one, it will use the static IP.

I hope this helps.

by faradhi

After re-reading the question the answer is most likely not an IP confilct.

I wish I could withdraw answers.

by staxxxx

Sounds like you've still got a piece of scumware on your system somewhere but since you're scans keep coming up clean and you've uninstalled all non-essential programs already here are some other suggestions.

If E-Trust and Adaware are coming up clean it is always possible you have something that neither are capable of detecting. TrenMicro has a nice online scanner that detects both viruses and spyware. You may want to give it a try and see if it finds anything. http://housecall.antivirus.com

Have you run Hijackthis? It can be downloaded from
http://www.spywareinfo.com/~merijn/downloads.html

If you're not familiar with Hijack this you'll want to read this http://www.spywareinfo.com/~merijn/htlogtutorial.html and consider posting your logfile on their message boards for help with interpeting what's supposed to be there and what's not.

Have you tried putting the ip address directly in the web browser? example http://209.131.36.158/ should take you to yahoo

If that works you may want to try to flush the DNS cache or reset the TCP/IP stack.

from a command prompt ipconfig /flushdns

or to reset the tcp/ip stack?
from a command prompt run netsh int ip reset filename.txt

Another thing you may try is the System File check
Use the System File Checker tool to scan all of the protected files on your computer:
Click Start, and then click Run.
In the Open box, type sfc /scannow, and then click OK. You may be prompted for the installation media.

Yet another suggestion is to try to install another browser such as firefox and see if this problem is and IE explorer only problem in which case you may want to reinstall Internet explorer or try a repair installation
http://support.microsoft.com/default.aspx?kbid=318378

by etienneh8y

"If E-Trust and Adaware are coming up clean it is always possible you have something that neither are capable of detecting. TrenMicro has a nice online scanner that detects both viruses and spyware. You may want to give it a try and see if it finds anything. http://housecall.antivirus.com"

I don't stay connected to the internet long enough to complete something like housecall... I have tried Search & Destroy... clean.

"Have you run Hijackthis? It can be downloaded from
http://www.spywareinfo.com/~merijn/downloads.html"

Ya, I ran that since I posted, but didn't find anything incriminating except for that iTunes hadn't been completely removed.

"Have you tried putting the ip address directly in the web browser? example http://209.131.36.158/ should take you to yahoo"

yes... nothing

"Another thing you may try is the System File check
Use the System File Checker tool to scan all of the protected files on your computer:
Click Start, and then click Run.
In the Open box, type sfc /scannow, and then click OK. You may be prompted for the installation media."

I have set this to run overnight as I am going home from work... we'll see tomorrow I guess.

"Yet another suggestion is to try to install another browser such as firefox..."

I have tried both IE and Firefox

I have also used rootkit revealer... nothing interesting except for: HKLM\SOFTWARE\Classes\webcal\URL Protocol 1/28/2005 5:17 AM 13 bytes Data mismatch between Windows API and raw hive data. but from the sysinternals forum... this appears to be meaningless.

by wcp

It?s got to be due to security program(s), firewall, for example, that prevents internet connection after a while.
It could be due to settings of current firewall or residual setting of uninstalled firewall.

My suggestions are

1. Uninstall any third party firewall
2. If any third party firewall had been uninstalled before the current firewall, reinstall and then uninstall it. I strongly recommend you doing this.

by wcp

1. Run Services.msc and see if any third party firewall has started. If you can recognize any, stop the service. Better yet, you must uninstall the program. It may be a time consuming but compare services of this troubled system to a healthy one with similar system configuration to find any anomaly.
2. Run MSCONFIG > Services and click on Hide All Microsoft Services and Disable All. Restart. If this resolves the problem, you can identify the culprit.
3. If you still have the problem and time is of essence, back up data and clean install Windows.

by wcp

Before clean installing Windows, try installing Zone Alarm (trial version if you do not have a regular one) and then uninstalling it.

by etienneh8y

"1. Uninstall any third party firewall
2. If any third party firewall had been uninstalled before the current firewall, reinstall and then uninstall it. I strongly recommend you doing this."

If any third party firewall was installed I'm not aware of it, and the user has not supplied any information to that effect. I have uninstalled and reinstalled the Anti-virus.

by hazeen

I had faced a similar problem an year back. I tried av, service packs ,antispyware, online scan and all stuff like that. it didnt detect any thing. what i did was i knew the day from which the client was experiencing the problem. so i went into windows\system32 folder and arranged files by modified date. i fount some suspicious looking exe file on the said date. so i went to safe mode and renamed and relocated the suspicious file. that solved the problem. another method might be to do a system state rollback to some prior date.

by hjh.arets

Windows XP firewall has the annoying habbit of disallowing internettraffic when to many connactions have been made. After every MS update the firewall settings could be back to default.
Disable windows firewall and check if you can reach a http site. If so find a decent firewall to replace the MS firewall.

by monkeywrenchit

Make sure there is no group or local policy specifying incorrect settings. download sysinternals autoruns to look for something that loads automatically 5-10 minutes after boot. Does this happen in safe mode with networking? Does this happen on other network interfaces? (can you dial in and experience same problem) there are two programs for repairing your tcpip stack, freeware...Winsockfix, and I cant remember the name of the other. they reset the tcpip stack the way it was at the time of first install. Did you uninstall the drivers for the network card and reinstall? Did you attempt system restore to a time before this issue? Did you disable powermanagement, VPN software, antivirus. boot to Knoppix live cd and see if the problem is in the OS or the hardware.

by tiggeroush

Are you running Panda Anti-virus? I had this same problem when I loaded Panda onto my computer and had to restore to a previous date. It seems to load firewall when I told it not to and block all internet traffic.

by shortow

I had the same no download/access to http:// websites problem! Https:// websites would work normally.

I use a Desktop running Windows XP Pro SP2 with all the latest updates. My problem started when I uninstalled Internet Explorer 7 Beta 2 and upgraded to IE7 Beta 3. I then uninstalled IE7 Beta 3 back to the original version of IE6; but still had this same problem of no access to http:// web pages.

I also tried most all of the fixes listed in this article question to no avail! I contacted Microsoft Customer Support and submitted a Case ID request. After 2 weeks and going thru ~ 10 Support Technicians; my problem still wasn?t solved!

I tried to do an OPS Repair/Rebuild and it would fail with Stop: errors. My final solution to fix the OPS was to restore a 3-month-old image and install all the new programs and updates. I still don?t know what the http:// no access problem was! Maybe someone will have a solution to this problem and will post in this thread.

Shorto

by shortow

I had the same no download/access to http:// websites problem! Https:// websites would work normally.

I use a Desktop running Windows XP Pro SP2 with all the latest updates. My problem started when I uninstalled Internet Explorer 7 Beta 2 and upgraded to IE7 Beta 3. I then uninstalled IE7 Beta 3 back to the original version of IE6; but still had this same problem of no access to http:// web pages.

I also tried most all of the fixes listed in this article question to no avail! I contacted Microsoft Customer Support and submitted a Case ID request. After 2 weeks and going thru ~ 10 Support Technicians; my problem still wasn?t solved!

I tried to do an OPS Repair/Rebuild and it would fail with Stop: errors. My final solution to fix the OPS was to restore a 3-month-old image and install all the new programs and updates. I still don?t know what the http:// no access problem was! Maybe someone will have a solution to this problem and will post in this thread.

Shorto

by red_wolf9

As others have said make sure that any software firewalls are disabled.

Also try using a different browser, such as Firefox or Mozilla. It?s possible that IE has been corrupted by BHO's or ActixeX controls that are affecting it functionality.

Have you logged in as a different user on the same machine and gotten the same problem? Try the administrator account or even a different user account, I have seen corrupted files in the Documents and Settings folder of a user render them unable to browse.

If there is a problem reaching the domain controller they are probably not authenticated to the domain which could prevent them being able to route traffic (depending on how your network is designed).

Also, did you Process Explorer from sysinternals.com to view the processes? There are many ways to hide processes from Windows task manager. Might I also suggest using AutoRuns (also from sysinternals) to check of any unusual program loading at boot up.

by jlwachtel

I have found iTunes to be very problematic. Have you tried fully removing iTunes? Also, is there an ipod attached to the system? If so try removing that too!

by wxtomb

I have two suggestions:

Try booting from one of the CD-based linux disks and try acessing the internet...thereby bypassing windows.

If the problem still exists, I would suspect a heat problem.

by miguel1ss

This begun to happen to me after I installed Windows Media Player 11 (Beta, I know, I know, one nerver should install beta's on production machines).

The cleanes solution I did: Reinstall Windows XP.

by wpfloor

It would not surprise me at all if iTunes or -- more likely -- the installation of iPod is the culprit. Did this problem manifest itself after installing iTunes? Did you happen to plug in your iPod to a USB port? If so,what happened? Any chance you got the Do Not Interrupt on your iPod -- that stayed that wau apparently to perpetuity (or you powered down your PC manually)?

by etienneh8y

First of all I appreciate all the responses I have recieved on this incredibly annoying problem. Back at work, and still stuck.

some updates:
-safe-mode seems to work without error.
-The user took the machine home and reported that the problem was resolved by reinstalling and uninstalling outlook express. However, upon inspection this morning the same behavior occurs. I did, however, notice that the user had settings for a proxy server (disabled) through safeplace -- which might explain why the problem "went away" over the weekend--or may point to the culprit. I will have to talk to him further when he returns.
-static IP clarification: though the workstations have an assigned IP, they all acquire IP addresses automatically. The static IP setting is never used on the client.
-The user is not certain about when the problem began... however iTunes was installed very recently, and the problem is known to not exist before the installation of iTunes, though perhaps didn't start till later.
-disabling windows firewall has no effect.

I will post the results of the tests I run as suggested below -- again, the help is very much appreciated.

by etienneh8y

SOLVED... I think.

See below for specific comments, after disabling all M$ services, and start-up items and rebooting, the issue seems to have solved itself. (Came back up with all M$ services running) -- NOTE: I had disabled all start-up items before, without effect, so I'm leaning towards a correlation with the disabling of M$ services... though I am not certain what got "fixed."

Unfortunately I can't identitfy exactly where the problem was at, which is a bit disappointing.

Thanks again for all the insight and advice.

by etienneh8y

I'll leave the question open for a day or two in case any of you have questions for me that might help identify the source of this problem.

by jk1265732

You have a heat problem. The key is what you said about 5 to 10 minutes after Boot the problem starts. As you know laptops run hot and yours got hot. If it has a replaceble NIC, do so. Otherwise it's new Motherboard time. This is common Laptop problem in Texas because or the heat.

by pkiser1228

I would strongly agree with jk1265732@... Sure sounds like a "hot" problem. If you have a laptop cooler, see if it stays connected longer with it on. I use one all the time.

by darrylb

i have 2 desktops here... they were doing identical thing. wired nic's connected to wireless access point connected to the main infrastructure... I had a few more things to go wrong there...

I got vexed enough to swap the NIC's just to see and they are perfect now. It would seem once the old ones warmed up properly they stopped working... dry solders or something. Never bothered testing the nic's.. not worth the time and effort

by data ninja

I had the exact same problem on a customer's computer and tried two different utilities, the winsock2 fix (listed in another post above) and the LSP-Fix utility. The LSP-Fix was able to repair the problem, even though it didn't list anything in the "remove" column.

You can find this utility and more information here:
http://cexx.org/lspfix.htm

This discussion is closed to new replies.