I am having problems with non-responsive internet for a bunch of times a day.
At first I blamed Win7 for this behavior, but I am not sure anymore.
I found out that, while the internet is unresponsive (and it won't ever revive itself automatically), my computer is making connections to a lot of different IP's.
This is just a small amount I'm pasting here. (Oh an SYSTEM is my computername, not the process ^.^)
117 02:50:44 18-7-2011 4.1324499 67.66.202.208 SYSTEM UDP UDP:SrcPort = 54399, DstPort = 47816, Length = 111 {UDP:8, IPv4:7}
128 02:50:44 18-7-2011 4.5423965 92.234.248.102 SYSTEM UDP UDP:SrcPort = 37435, DstPort = 47816, Length = 75 {UDP:10, IPv4:9}
136 02:50:45 18-7-2011 4.8449753 219.89.51.134 SYSTEM UDP UDP:SrcPort = 21455, DstPort = 47816, Length = 111 {UDP:12, IPv4:11}
178 02:50:46 18-7-2011 6.2919482 112.202.161.89 SYSTEM UDP UDP:SrcPort = 33249, DstPort = 47816, Length = 38 {UDP:14, IPv4:13}
281 02:50:50 18-7-2011 9.7174336 123.2.97.114 SYSTEM UDP UDP:SrcPort = 1024, DstPort = 47816, Length = 38 {UDP:16, IPv4:15}
326 02:50:51 18-7-2011 11.1190722 87.202.84.117 SYSTEM UDP UDP:SrcPort = 25821, DstPort = 47816, Length = 75 {UDP:18, IPv4:17}
391 02:50:53 18-7-2011 13.3591905 189.191.247.220 SYSTEM UDP UDP:SrcPort = 29896, DstPort = 47816, Length = 111 {UDP:20, IPv4:19}
658 02:51:02 18-7-2011 22.2892950 70.74.197.87 SYSTEM UDP UDP:SrcPort = 52622, DstPort = 47816, Length = 75 {UDP:29, IPv4:28}
670 02:51:03 18-7-2011 22.7092608 186.195.107.33 SYSTEM UDP UDP:SrcPort = 28163, DstPort = 47816, Length = 109 {UDP:31, IPv4:30}
677 02:51:03 18-7-2011 22.8609704 93.50.97.103 SYSTEM UDP UDP:SrcPort = 44008, DstPort = 47816, Length = 75 {UDP:33, IPv4:32}
716 02:51:04 18-7-2011 23.9898444 188.248.97.174 SYSTEM UDP UDP:SrcPort = 16140, DstPort = 47816, Length = 38 {UDP:35, IPv4:34}
718 02:51:04 18-7-2011 24.0194632 211.28.207.71 SYSTEM UDP UDP:SrcPort = 17751, DstPort = 47816, Length = 114 {UDP:37, IPv4:36}
813 02:51:07 18-7-2011 27.2593481 173.247.21.36 SYSTEM UDP UDP:SrcPort = 58323, DstPort = 47816, Length = 111 {UDP:39, IPv4:38}
I'm aware that torrent clients also cause this behavior, but I wouldn't be here if the torrent client caused this.
I'm not running any extra programs like hamachi*, torrent-clients, messenger, windows update or the automagically activated "customerexperienceimprovementcareserviceinvestigation-bandwidthdestroyer-applicationmanagementmodule".
This has happened to me before and I've taken precautions since that time.
Thanks to Sandboxie (another virtual pc box) for running all my downloaded programs/installers, I've been clean from infections... I thought...
Since three weeks this problem persists again, but now it's a bit different.
It used to only do this when explorer.exe was started (meaning I was 100% sure I was infected).
Now it does this every 15-20 minutes unless I am pinging somebody from my hamachi list or local network.
Is there any program I could use to see which programs are causing this?
Microsoft Network Monitor tells me the program is <Unknown>. Meaning it's not very helpful
*Note, I was running hamachi, but not logged on while these IP's showed up. The network monitor spotted a (1) broadcast signal going to the hamachi range of IP's (5.x.x.x).
It's rather useless and doesn't mean the list of IP's was produced by hamachi. So I ran another test with hamachi-services disabled and concluded the random IP's still show up.
Thnx in advance, I know there are more people who also need help, so I'll be patient.
I uploaded the Microsoft Network Module, it's right under the 1 MB, marvelous
.Cheers.
Edited by IO-error, 17 July 2011 - 07:29 PM.
Sign In
Create Account
