Winxp Problem (dual Boot Prob?) - net dies

[alexBF]

**** edit problem solved, see 4th post here *****

I posted this at other forums a couple days ago... no helpful responses yet ;-/

Ok, I've been running win98 for like 4 years... never had any problems. But now there's some programs that I need winXP to run, so I installed winXP Pro on a partition of my new HD so now I can boot either win98 or winXP.

Anyway.. my problem is that when I boot up winXP i can go visit a website or two, and my net works for a few minutes... but after like 5minutes tops (usually 1-2) my net just stops working. No idea what's causing it, but it sure is annoying as hell. So now I'm back running win98 so that my net actually works ;-/

Net connection setup is a router with 3 comps (only one is mine) plugged into it, DSL connection goes to router.

XP firewall is off. ipconfig shows everything normal before and after net dies.

I can't ping anything when it goes down.... and my roommates net seemed to be messing up too... (he directly connects to same router same way as i do... his doesnt go through my comp or a hub or anything).

About 3minutes after i booted into winXP and net started to die, I pinged my router:
http://www.10sixcenter.com/alex/winxp/ping.JPG

I went looking for XP drivers on the d-link website for my network card, they had none and just said XP comes with their drivers, I already upgraded using XPs default drivers for it.

address is assigned by dchp
subnet mask is 255.255.255.0
default gateway(and dchp server) is 192.168.2.1

In my LAN properties window i have client for microsoft networks, QoS Packet Scheduling and TCP/IP... the box under authentification tab is checked, the advanced one (firewall) is not.

Someone suggested it could be a virus/worm killing my connection, anyway online to virus check? (yay now i'm on winXP with it's millions of worms/viruses)

[keto]

Hi Alex. Alex is an old acquaintance of mine, he is a legend still spoken of with reverence as one of, if not THE, top players ever in the MMORPG 10-Six. And a fellow Canuck :canflag:

There is an online virus scanner here at Trend Micro (http://housecall.trendmicro.com/housecall/start_corp.asp). You download a small applet and then pick which drives to scan. I've used it in the past and found virii, tho it is not likely as comprehensive as an onboard solution. Just follow the prompts.

I am speculating it may have to do with too many services running in WinXP. Not too many, I mean maybe something that shouldn't be - XP loads a TON of stuff by default. Go to Black Viper's XP guides page (http://www.blackviper.com) and look for the section on services - it's among the first things I do on a reformat, kill unneccesary services. I'm going to ASS/U/ME here that you've run Windows update on your XP partition.....? If not, do that first. GL Alex & welcome aboard:thumbsup:

[alexBF]

I'll go virus scan now, I guess I need a downloadable one to run it while in XP though.

Anyway I ran a packet sniffer and my comp is sending out a ton of packets (guess that's why my roommates comp died)... and after looking at the packets being sent (omg assembly programing course coming in handy?) it looks like it's just running through every IP address it can... 192.165.3.1, 192.165.3.2, etc and sending ... what looks like junk info to me... a bunch of bytes of As (32 bytes i think).... so 10101010101010101010...etc

Anyone else recognize that... i swear i looked at the blaster worm's code last summer and this is looking exactly like that ;-/

[alexBF]

Ok, looks like I fixed it.

It wasn't the blaster worm like i thought... it was Welchia worm aka Nachi... and i think it's a modified blaster worm (it says alias WORM_MSBLAST.D).

Anyway I got info and a fix from this page:

http://www.bitdefender.com/html/virusinfo.php?menu_id=1&v_id=151