i would get them to run one of the free online virus scans like the ones in my signature ,i do believe its trojan/malware releated .
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
rename the "hosts" file in the i386 folder (i.e., hosts.old or hosts_043004 or whatever); the OS will create a new cache "hosts" file automatically.
aeinstein
Team Member - aka kaynine
645 posts since May 2002
Reputation Points: 186
Solved Threads: 8
obviously i dont know how your network is setup, but have your it ppl tried clearing the arp cache of the respective server/router/ubr(s)?...
...after re-reading your posts a couple of times to try and get a better grasp on the situaion i'm not hopeful clearing arp cache on an intermittent connectivity issue is going to clear the issue (although it is something to be done if only to cross it off of the list of possible solutions; strange things can happen w/tcp/ip). it almost seems like an ip conflict, but the duration of connectivity is too long...
aeinstein
Team Member - aka kaynine
645 posts since May 2002
Reputation Points: 186
Solved Threads: 8
what has been done to foot-print the issue? the who's, when's, what's...? for a moment i thought it might be a cable/dsl modem firmware issue, but the dial-up scenarios preclude that (in all likelihood any arp cache issues as well). also, theyre obviously using different hardware dial-up v. c/dsl modem, so the prospect of a hardware fault drops to a low probability. if i'm not mistaken, and i quite well may be, i think winxp rebuilds the tcp/ip stack on reboot, which could go a long way towards explaining the issue. since it's happening to a number of systems the best avenue of attack, imo, is to identify commonalities amongst the systems/access patterns of the end-users (e-u's). are these ppl running specialized, or private use, s/w that other winxp e-u's arent? are they jumping off of the same link/page/site? are they connecting to the same respective network presences (dial-up & c/dsl)? same time of day? is it possibly a server-side rather than client side issue propogating a corruption/conflict to these e-u's? ....
aeinstein
Team Member - aka kaynine
645 posts since May 2002
Reputation Points: 186
Solved Threads: 8
Supreme Ox, have you asked any of these users if they have upgraded to SP2? If so, did they have the problem before that or did it start afterwards? It's possible this may have something to do with it.
dlh6213
Posting Maven
3,117 posts since Jul 2004
Reputation Points: 63
Solved Threads: 214