Ok, thanks for letting us know how you fixed it.
Odd that a firewall would block outbound ping requests, but who knows?
rogerX
--- In simplycomputers2@yahoogroups.com, "Misha" <mcm@...> wrote:
>
> Solved: it was the router's firewall blocking it.
>
> --- In simplycomputers2@yahoogroups.com, "RogerX19" <helpmeroger@> wrote:
> >
> > Ok, that helps.
> >
> > It now sounds like his computer is being redirected, which is a form of hijacking.
> >
> > That might explain why he can go to websites, but not ping them. All URL requests are sent through the redirection site, which then fetches them. Direct pings will be blocked, if it is setup to do that.
> >
> > Others here may be able to help you with redirection ... I haven't had the opportunity (yet) to fix that problem.
> >
> > You can Google for it ... especially for "man in the middle attack"
> >
> > rogerX
> >
> >
> > --- In simplycomputers2@yahoogroups.com, "Misha" <mcm@> wrote:
> > >
> > > No, he was able to access sites he hadn't been to before. I ran HJT and cleaned up a few leftovers, but there was nothing significant. I'll try pinging the IP address and see if that makes a difference.
> > >
> > > --- In simplycomputers2@yahoogroups.com, "RogerX19" <helpmeroger@> wrote:
> > > >
> > > > Hello
> > > >
> > > > That is strange.
> > > >
> > > > I don't know everything about networking, but I have learned quite a lot in the past few years.
> > > >
> > > > The fact that he can't ping to any site, but can browse to them, seems impossible to me!
> > > >
> > > > I wonder if his browser is just showing him old pages that it has stored in cache?
> > > >
> > > > Have him browse to a webpage that works, and then "refresh" the page. See if it works or gives an error. Also try going to a webpage that he has never been to before.
> > > >
> > > > You might also ping both the URL and also the IP address of the page.
> > > >
> > > > From a good computer, if you open the Command prompt window and enter:
> > > >
> > > > ping www.google.com
> > > >
> > > > it should show you the Ip address that it is pinging.
> > > >
> > > > Try pinging both on his computer and see what happens.
> > > >
> > > > You can also type the IP address directly into his browser and see what happens.
> > > >
> > > > If it is indeed true that he can browse to pages, including pages that he has never been to before, but can't ping them from the command line (either the IP address or the www ), then I would suspect that the malware hijacked the computer, and malwarebytes either didn't get it all out, or did not repair the damage.
> > > >
> > > > You're correct that the HOSTS file is a common hijack, but it is not the only one.
> > > >
> > > > If it turns out that the symptoms are really like you described them, I would look into "Hijack This" (google for it)
> > > >
> > > > Or maybe someone else has a better idea.
> > > >
> > > > rogerX
> > > >
> > > > --- In simplycomputers2@yahoogroups.com, "Misha" <mcm@> wrote:
> > > > >
> > > > > Got a call today from someone who had removed malware (MBAM and Avira Pro run in Safe Mode). He could get online download files, etc., but a particular program he uses to print photos online reports it is unable to establish a connection. He also can't ping any site, even though he can browse to them using both IE and Chrome. Avira firewall is set to allow the program access and nothing shows up in the logs to indicate it's being blocked, and problem occurs even with Avira turned off. Internet Options all appear correct, nothing in Hosts file. I haven't had a chance to check his DSL modem/router settings yet. Any thoughts?
> > > > >
> > > >
> > >
> >
>
http://tech.groups.yahoo.com/group/simplycomputers2
0 comments:
Post a Comment
Note: Only a member of this blog may post a comment.