Forum Home
Press F1
 
Thread ID: 48813 2004-09-01 23:55:00 XPhome, new install, SP2, intermittent internet jaxson (3204) Press F1
Post ID Timestamp Content User
268135 2004-09-01 23:55:00 Hi guys.

My machine is doing my head in. I have a fresh install of XP home, updated to SP2. My broadband connection with XTRA works just fine for about ten minutes or so, then I get "Page cannot be found".

Xtra 'help'desk say it's something to do with a firewall. I dont think it is - I switch off the windows firewall and it's just the same.

Ran Spyweeper - nothing
Ran Stinger Anti Virus/trojan - nothing
Ran HijackThis - seems all good:

Logfile of HijackThis v1.97.7
Scan saved at 10:52:47 a.m., on 2/09/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\voltio.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
D:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\mapiicon.exe
C:\Program Files\Belkin\Belkin Wireless USB Adapter Manager\WlanMonitor.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Shane\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.nz
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.nz
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [ADSL_A2] A2Installed
O4 - HKLM\..\Run: [System Startup] voltio.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunServices: [System Startup] voltio.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [System Startup] voltio.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpySweeper] "D:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ADSL Diagnostic Tools.LNK = C:\WINDOWS\system32\mapiicon.exe
O4 - Global Startup: USB Manager.lnk = C:\Program Files\Belkin\Belkin Wireless USB Adapter Manager\WlanMonitor.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - v5.windowsupdate.microsoft.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{8A7B6743-CDCE-43B1-819B-E1EF0D14FD41}: NameServer = 202.27.184.3 202.27.184.5

I also installed Firefox to see if it was a browser problem, but that has the same trouble.

Any ideas?
jaxson (3204)
268136 2004-09-02 00:05:00 jaxson

Have you phoned Microsoft and asked for SP2 support? That could be your problem.

Oxie (Lyn)
Oxie (1318)
268137 2004-09-02 00:07:00 M$oft have telephone support for SP2? It's news to me... jaxson (3204)
268138 2004-09-02 00:12:00 I would remove voltio.exe. Its either spyware or a trojan...remove that and reboot. This file isnt part of XP Spacemannz (808)
268139 2004-09-02 00:38:00 > M$oft have telephone support for SP2? It's news to me...

Yes. Phone no: 0800-800-004
then press the no. they give you in the message for SP2 support.

regards Marg.
pulling hair out (4493)
268140 2004-09-02 00:41:00 It was indeed voltio.exe. How I got that on a three day old fresh install (new HDD) with a firewall and careful internet use I don't know.

I looked for it, couldn't find it - it was a protected hidden operating system file. There are hidden files, and there are protected hidden files - I say this for anyone who has the same trouble - you must enable both options in TOOLS / FOLDER OPTIONS / VIEW.

I also found this elsewhere if anyone needs it:
***********
Go to start, Run en type regedit and click on ok. Now you are in the Register-editor. Open HKEY_LOCAL_MACHINE Software Microsoft Windows CurrentVersion Run and look for voltio.exe and not recognizable programs and delete them on the right side. Programs you don't need or they are not recognizable, they don't have to run. Never.
Ensure delete the correctly key because deleting registry keys incorrectly may cause serious problems to your operating system (OS) which may necessitate the need to reinstall the OS.
Go to Start, Run, type in msconfig, click ok, go to the 'startup' tab, look for voltio.exe and not recognizable programs and uncheck them. Reboot. When the box pops up asking you to go back, check don't show me this again.
Go to C:\WINDOWS\Prefetch and clean that folder, voltio.exe is maybe there. Take a look at C:\Programs an if you see a not recognizable program right-click and delete. If you received an error message upon deleting the files, or if the problem persists after this, removing voltio.exe in Safe Mode will allow you to delete the files properly. Click Start, Help, and search for "SAFE MODE" for information specific to your system. Empty your recycle bin, Delete the history in Explorer, Delete the Cookies in Explorer.
Don't let voltio.exe act as a server!!
jaxson (3204)
268141 2004-09-02 00:52:00 Woot . Glad you got rid of it Jax .

Usually if u notice strange files in logs like Hijackthis . Do a search on . google . com or http://www . yahoo . com" target="_blank">www . google . com or http:

Either one of these, will tell you whether it's a worm/trojan/or part of a program etc, thats part of XP, or device u have installed .
Spacemannz (808)
1