Re: Help - Tried almost everything!

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 11/19/03 

Date: Wed, 19 Nov 2003 16:54:27 -0500

Rockly,
Oops .... should say: VPN = "Virtual Private Network"
http://computer.howstuffworks.com/vpn.htm

In the previous message I gave you a link to Google, which I
searched on that IP = 222.0.0.2 and that was the first hit (VPN).

I don't use McAfee (firewall) but can you remove all allowed apps,
reboot and reset permissions one-at-a-time, to see which one jumps
up wanting access to the Internet?
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-19-03]
Please post replies to this Newsgroup, email address is invalid 

--
<anonymous@discussions.microsoft.com> wrote in message
news:02b201c3aeca$82e35830$a301280a@phx.gbl...
> Hi Mike:  Thanks for continuing to help me.  My situation
> is getting very frustrating.  I've spent hours searching
> at all of the sites that people have recommended, and I
> still have no answer why the ICMP still goes out every
> time I connect.
> Please excuse my ignorance, but I don't know what a VPM
> Client is.  I did several searches at Google and Yahoo and
> still don't understand your question.  Please explain so I
> can answer you and get this thing to stop sending out
> ICMP.  Thanks again!  -Rockly
>
> >-----Original Message-----
> >Rocky,
> >Do you have some kind of "VPM client" setup?
> >
> >nslookup 222.0.0.2
> >Canonical name: KHP222000000002.ppp-bb.dion.ne.jp
> >Addresses: 222.0.0.2
> >
> >[more info]
> >http://www.google.com/search?num=20&hl=en&lr=&ie=UTF-
> 8&oe=UTF-8&safe=off&sa=G&q=%22222.0.0.2%22
> >__________________________________________________________
> __
> >Mike Burgess  [MVP Windows Shell\User]
> http://www.mvps.org/winhelp2002/
> >Blocking Spyware, Adware, Parasites, Hijackers, Trojans,
> with a HOSTS file
> >http://www.mvps.org/winhelp2002/hosts.htm [updated 11-19-
> 03]
> >Please post replies to this Newsgroup, email address is
> invalid
> >--
> >
> ><anonymous@discussions.microsoft.com> wrote in message
> >news:05e001c3ae5a$2de8ff80$a301280a@phx.gbl...
> >> Mae:  I looked it up in the firewall codes and it is a
> >> type 10.  Now, how do I get rid of the program that's
> >> generating it?  thanks for your help!  - Rockly
> >> >-----Original Message-----
> >> >Then it is probably ICMP type 10 Router Solicitation:
> >> >Hosts send ICMP Router Solicitation messages to the all
> >> routers IP multicast address The router will respond by
> >> sending a router advertisement. This ensures the client
> >> receives a default gateway immediately without waiting
> for
> >> a periodic router advertisement. Windows sends a maximum
> >> of 3 solicitations at intervals of approximately
> >> 600milliseconds.
> >> >
> >> >mae
> >> >-------------------------------------------------------
> ---
> >> ----
> >> >"Rockly" <anonymous@discussions.microsoft.com> wrote in
> >> message news:05b201c3ae50$8811caf0$a501280a@phx.gbl...
> >> >|
> >> >| >-----Original Message-----
> >> >| >On Tue, 18 Nov 2003 06:13:27 -0800, "Rockly"
> >> >| ><anonymous@discussions.microsoft.com> wrote:
> >> >| >
> >> >| >>Good Morning:  I'm running Win 98 with McAfee
> >> Firewall
> >> >| 4.0
> >> >| >>installed.  I connect to the Internet w/ America
> >> Online
> >> >| >>and every time I sign on, a program in my machine
> >> sends
> >> >| >>out an ICMP Packet.  After the packet is sent, my
> >> >| machine
> >> >| >>is "pinged."  The packet is sent every time, always
> >> to
> >> >| the
> >> >| >>same IP address, no matter how many times I sign
> >> >| off/on.
> >> >| >>I've looked, but can't find anything in my files.
> I
> >> >| >>installed the Firewall after I suspected a problem
> >> and
> >> >| >>I've used SpyBot to search the machine.  Any help
> is
> >> >| most
> >> >| >>greatly appreciated!  Thanks!
> >> >| >
> >> >| >Good Morning.
> >> >| >
> >> >| >Have you tried the tools at Sam Spade to see who
> owns
> >> the
> >> >| IP Address?
> >> >| >www.samspade.org
> >> >| >
> >> >| >What firewall did you install?
> >> >| >Does it list what programs are accessing the
> Internet?
> >> >| >
> >> >| >jbrown
> >> >| >brownbearat@canadadotcom
> >> >| >remove the at and the dot and the mail will come ;)
> >> >| >o did i say put in a .
> >> >| >Update your A/V product regularly or try an online
> scan
> >> >| >www.pandasoftware.com
> >> >| >Get your security updates at
> >> >| http://windowsupdate.microsoft.com ONLY
> >> >| >Remove spyware - www.lavasoftusa.com or
> >> >| http://security.kolla.de
> >> >| >Block annoying popups - www.panicware.com
> >> >| >.
> >> >| >
> >> >| Thanks for the information.  The IP address is
> >> 222.0.0.2
> >> >| and the Sam Spade site told me the name is All-
> >> >| Routers.Mcast.net.  That's all the info I have.
> Also,
> >> the
> >> >| Firewall is McAfee Firewall v 4 and it tells me
> what's
> >> >| connected, but this is just an ICMP packet that's
> sent
> >> out
> >> >| everytime I sign on.  After the packet goes out, I
> get
> >> >| pinged.  I'd like to know what's sending out the ICMP
> >> in
> >> >| the first place.  Thanks for your help!
> >> >.
> >> >
> >
> >
> >.
> >

Relevant Pages

  • Re: How do I stop my PC from returning a "Ping"?
    ... to send out packets and retrieve the incoming replies as well. ... I would bet that he is behind a router, the router is getting the IP ... The router probably can be set up to disable ICMP ... >> Hmmm, but "ping of death" attacks could be pretty major, should they ...
    (microsoft.public.windowsxp.security_admin)
  • Re: icmp werden ignoriert
    ... Router und *Computer* können zwar für das Beachten des DF Bits konfiguriert ... RFC-konform konfigurierte Router waren/sind eine der ersten Instanzen, ... von ICMP DoS Attacks überflutet wurden. ...
    (microsoft.public.de.security.netzwerk.sicherheit)
  • Dinosaurs wont route
    ... very simple routing tasks -- a local LAN and a gateway router, ... Ethernet0 is up, line protocol is up ... ICMP unreachables are always sent ... IP fast switching on the same interface is disabled ...
    (comp.dcom.sys.cisco)
  • Re: Help - Tried almost everything!
    ... I looked it up in the firewall codes and it is a ... >>Then it is probably ICMP type 10 Router Solicitation: ... but this is just an ICMP packet that's sent ...
    (microsoft.public.security)
  • Re: Dropped Connection!
    ... devices help services.* ... The dropped connections seem to occur when I run Google Maps. ... I know right away that the connection is gone as any other site ... I run upstairs to the router, unplug the power to the router, plug back ...
    (microsoft.public.windowsxp.network_web)