Solved

ASUS laptop bombs local network and internet access

Weirdly, very recently my ASUS N56VZ laptop, with Windows 8.1, has started to totally kill my local network whenever I switch the laptop on. This doesn't happen every time but, over the past month, it has happened about 4 times. Most times it's one day but the first time it happened over 2 days.

If I run a network speed test (Ookla), my download speeds with the laptop not connected, are around 1600 kB/s. As soon as I boot the laptop up or switch its wifi on, download speeds are erratic and drop down to about 50-300 kB/s. In fact, today I couldn't even start a test, the app said 'Network communication issues'. It is only the laptop that is killing the network and affects all devices linked to the network (e.g. Netflix on my Samsung TV also bombs out - my Samsung TV is connected via a Cat5 cable to the router).

I have already tried rebooting into safe mode and running a program called 'Malwarebytes Anti-Malware' but it does not detect any malware. My anti-virus program, McAfee, has also not detected any viruses. I have also tried disabling my Bluetooth driver (but have not yet uninstalled it) and the only network hungry process I can find is 'svchost.exe (LocalServiceAndNoImpersonation). I'm not aware of any other program's that have been installed recently.

Does anyone have an idea what may be causing this issue and how to fix it as it's driving me crazy?

Thanks in advance
6 answers Last reply Best Answer
More about asus laptop bombs local network internet access
  1. sound like you either have a rogue proccess or spyware in your system.

    Have you run anit-virus / anti-spyware / trojan removal software?
  2. corroded said:
    sound like you either have a rogue proccess or spyware in your system.

    Have you run anit-virus / anti-spyware / trojan removal software?


    Hi corroded,

    Thank you for the prompt response. I tend to agree that there is something disrupting the network in the background, presumably malicious. However, it doesn't happen all the time so something must be triggering it (or it is designed to be periodically disruptive).

    I have tried to find malware (using Malwarebytes Anti-Malware) and I have McAfee installed but I haven't found anything. Can you recommend any software that might detect and remove spyware/rogue processes/trojans?

    Thanks again
  3. The resource monitor should show you the process and what ip it is sending data to. You can also run wireshark if you really need to see the packets. What you are looking for is it sending so much traffic that it disrupts everything else. It would need to be a lot so it really should stand out.

    Still it could be something like a duplicate address especially if it somehow gets the router ip. Sometime incorrect subnet masks will also causes strange errors like this.

    If it is sending data the list of addresses and ports it is using should give you a guess as to what it is. If it is from a system process there are some malware that install as rootkits and are hard to see and remove. Generally the resource monitor should give you a big clue what is causing your issues.
  4. Best answer
    Before we begin... What AV are you using? Exact name of the product.

    Steps I'd take...

    1, Ccleaner, install it and run the Cleaner (Run Cleaner) until there is either nothing returned or the items repeat... Then goto the Registry tab and "Scan for.." then "Fix Selected.." Do not bother with saving registry first unless you are paranoid. (I've used it for almost 10 year, no mishaps) Repeat like the Cleaner part.

    next goto the Tools tab, Startup... wait for it to load up... Look for anything not critial and Disable it NOT DELETE. To start with turn off everything EXCEPT AV and hardware items. You can turnb other stuff back on, if you seem to need it later.

    Go up to the Uninstall section, let it load up and sort by date. (I like newest on top) Look for unfamiliar items that are install since it started happening. Uninstall them! If you see some unfamiliars, also go back to the Startup the Scheduled tasks to see if they dropped some stuff there and Disable it.

    Reboot and check.

    Run the same again as well as the AV and MalwareBytes and the below, in Safe Mode...


    also get ADWCleaner
    https://toolslib.net/downloads/viewdownload/1-adwcleaner/

    It is one of my goto cleaners... It gets a lot out... There are a lot of sections to it. Run it AFTER the rest, it will go quicker and pick up[ the bits (pun intended) that the rest leave.

    Reboot.

    If it is still doing it...?
  5. bill001g said:
    The resource monitor should show you the process and what ip it is sending data to. You can also run wireshark if you really need to see the packets. What you are looking for is it sending so much traffic that it disrupts everything else. It would need to be a lot so it really should stand out.

    Still it could be something like a duplicate address especially if it somehow gets the router ip. Sometime incorrect subnet masks will also causes strange errors like this.

    If it is sending data the list of addresses and ports it is using should give you a guess as to what it is. If it is from a system process there are some malware that install as rootkits and are hard to see and remove. Generally the resource monitor should give you a big clue what is causing your issues.


    Hi bill001g,

    Thank you for you help.

    I watched the resource monitor and saw a few processes that scored quite high up on the 'Processes with Network Activity'. I also installed Wireshark but unfortunately I didn't really understand how to read the data. However, I followed 'corroded's' subsequent post and, using Ccleaner, was able to fix the issue (I hope).

    What is interesting is that I restarted resource monitor and Wireshark after fixing the error to compare against what I saw before fixing the error. The 'svchost.exe (LocalServiceAndNoImpersonation)' process has not sent anything since restarting the laptop (compared to previously when it topped the list). Also, there was an SSDP protocol that came up hundreds of times on Wireshark (Notify * http/1.1) that now only appears in small amounts.

    I'm not sure if that means anything to you but Ccleaner seemed to have fixed it.

    Thanks again
  6. corroded said:
    Before we begin... What AV are you using? Exact name of the product.

    Steps I'd take...

    1, Ccleaner, install it and run the Cleaner (Run Cleaner) until there is either nothing returned or the items repeat... Then goto the Registry tab and "Scan for.." then "Fix Selected.." Do not bother with saving registry first unless you are paranoid. (I've used it for almost 10 year, no mishaps) Repeat like the Cleaner part.

    next goto the Tools tab, Startup... wait for it to load up... Look for anything not critial and Disable it NOT DELETE. To start with turn off everything EXCEPT AV and hardware items. You can turnb other stuff back on, if you seem to need it later.

    Go up to the Uninstall section, let it load up and sort by date. (I like newest on top) Look for unfamiliar items that are install since it started happening. Uninstall them! If you see some unfamiliars, also go back to the Startup the Scheduled tasks to see if they dropped some stuff there and Disable it.

    Reboot and check.

    Run the same again as well as the AV and MalwareBytes and the below, in Safe Mode...


    also get ADWCleaner
    https://toolslib.net/downloads/viewdownload/1-adwcleaner/

    It is one of my goto cleaners... It gets a lot out... There are a lot of sections to it. Run it AFTER the rest, it will go quicker and pick up[ the bits (pun intended) that the rest leave.

    Reboot.

    If it is still doing it...?


    Hi corroded,

    Thank you very much for your help with this frustrating issue. Following your instructions, using Ccleaner, seems to have resolved the issue,

    Thanks
Ask a new question

Read More

Internet Access Asus