Re: Help - Tried almost everything!
anonymous_at_discussions.microsoft.com
Date: 11/19/03
- Next message: Jason: "Re: hacker attacks"
- Previous message: Jupiter Jones [MVP]: "Re: XP Pro - copying an EFS encrypted file to a web site for storage"
- In reply to: Mike Burgess: "Re: Help - Tried almost everything!"
- Next in thread: David Robbins: "Re: Help - Tried almost everything!"
- Reply: David Robbins: "Re: Help - Tried almost everything!"
- Reply: Mike Burgess: "Re: Help - Tried almost everything!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 19 Nov 2003 14:28:09 -0800
Hi Mike: I read up on VPN with the link you gave me and
then I searched Google again for more info. I then
checked my network adapters and there are adapters my
machine that I have no idea where they came from. In
addition to "Dial-Up Adapter", there is also another "Dial-
Up Adapter(VPN Support)" listed and another adapter
called "Microsoft Virtual Private Network Adapter". Why
so many Network adapters? I only use this machine to
connect to AOL for my e-mail and my Internet access. I
have no other Networks! Also, I've denied access to all
programs with McAfee and then gave permissions, a complete
start over, and the ICMP is still generated. It gets
blocked, but still gets generated so something in my
machine is active. In one of my searches, it was
mentioned that some programs send out a "heartbeat"
message that let's another machine know that the infected
machine is still active. Is this a possibility? Much
appreciation to you for your help!
>-----Original Message-----
>Rockly,
>Oops .... should say: VPN = "Virtual Private Network"
>http://computer.howstuffworks.com/vpn.htm
>
>In the previous message I gave you a link to Google,
which I
>searched on that IP = 222.0.0.2 and that was the first
hit (VPN).
>
>I don't use McAfee (firewall) but can you remove all
allowed apps,
>reboot and reset permissions one-at-a-time, to see which
one jumps
>up wanting access to the Internet?
>__________________________________________________________
__
>Mike Burgess [MVP Windows Shell\User]
http://www.mvps.org/winhelp2002/
>Blocking Spyware, Adware, Parasites, Hijackers, Trojans,
with a HOSTS file
>http://www.mvps.org/winhelp2002/hosts.htm [updated 11-19-
03]
>Please post replies to this Newsgroup, email address is
invalid
>--
>
><anonymous@discussions.microsoft.com> wrote in message
>news:02b201c3aeca$82e35830$a301280a@phx.gbl...
>> Hi Mike: Thanks for continuing to help me. My
situation
>> is getting very frustrating. I've spent hours searching
>> at all of the sites that people have recommended, and I
>> still have no answer why the ICMP still goes out every
>> time I connect.
>> Please excuse my ignorance, but I don't know what a VPM
>> Client is. I did several searches at Google and Yahoo
and
>> still don't understand your question. Please explain
so I
>> can answer you and get this thing to stop sending out
>> ICMP. Thanks again! -Rockly
>>
>> >-----Original Message-----
>> >Rocky,
>> >Do you have some kind of "VPM client" setup?
>> >
>> >nslookup 222.0.0.2
>> >Canonical name: KHP222000000002.ppp-bb.dion.ne.jp
>> >Addresses: 222.0.0.2
>> >
>> >[more info]
>> >http://www.google.com/search?num=20&hl=en&lr=&ie=UTF-
>> 8&oe=UTF-8&safe=off&sa=G&q=%22222.0.0.2%22
>>
>__________________________________________________________
>> __
>> >Mike Burgess [MVP Windows Shell\User]
>> http://www.mvps.org/winhelp2002/
>> >Blocking Spyware, Adware, Parasites, Hijackers,
Trojans,
>> with a HOSTS file
>> >http://www.mvps.org/winhelp2002/hosts.htm [updated 11-
19-
>> 03]
>> >Please post replies to this Newsgroup, email address is
>> invalid
>> >--
>> >
>> ><anonymous@discussions.microsoft.com> wrote in message
>> >news:05e001c3ae5a$2de8ff80$a301280a@phx.gbl...
>> >> Mae: I looked it up in the firewall codes and it is
a
>> >> type 10. Now, how do I get rid of the program that's
>> >> generating it? thanks for your help! - Rockly
>> >> >-----Original Message-----
>> >> >Then it is probably ICMP type 10 Router
Solicitation:
>> >> >Hosts send ICMP Router Solicitation messages to the
all
>> >> routers IP multicast address The router will respond
by
>> >> sending a router advertisement. This ensures the
client
>> >> receives a default gateway immediately without
waiting
>> for
>> >> a periodic router advertisement. Windows sends a
maximum
>> >> of 3 solicitations at intervals of approximately
>> >> 600milliseconds.
>> >> >
>> >> >mae
>> >> >----------------------------------------------------
--- >> --- >> >> ---- >> >> >"Rockly" <anonymous@discussions.microsoft.com> wrote in >> >> message news:05b201c3ae50$8811caf0 $a501280a@phx.gbl... >> >> >| >> >> >| >-----Original Message----- >> >> >| >On Tue, 18 Nov 2003 06:13:27 -0800, "Rockly" >> >> >| ><anonymous@discussions.microsoft.com> wrote: >> >> >| > >> >> >| >>Good Morning: I'm running Win 98 with McAfee >> >> Firewall >> >> >| 4.0 >> >> >| >>installed. I connect to the Internet w/ America >> >> Online >> >> >| >>and every time I sign on, a program in my machine >> >> sends >> >> >| >>out an ICMP Packet. After the packet is sent, my >> >> >| machine >> >> >| >>is "pinged." The packet is sent every time, always >> >> to >> >> >| the >> >> >| >>same IP address, no matter how many times I sign >> >> >| off/on. >> >> >| >>I've looked, but can't find anything in my files. >> I >> >> >| >>installed the Firewall after I suspected a problem >> >> and >> >> >| >>I've used SpyBot to search the machine. Any help >> is >> >> >| most >> >> >| >>greatly appreciated! Thanks! >> >> >| > >> >> >| >Good Morning. >> >> >| > >> >> >| >Have you tried the tools at Sam Spade to see who >> owns >> >> the >> >> >| IP Address? >> >> >| >www.samspade.org >> >> >| > >> >> >| >What firewall did you install? >> >> >| >Does it list what programs are accessing the >> Internet? >> >> >| > >> >> >| >jbrown >> >> >| >brownbearat@canadadotcom >> >> >| >remove the at and the dot and the mail will come ;) >> >> >| >o did i say put in a . >> >> >| >Update your A/V product regularly or try an online >> scan >> >> >| >www.pandasoftware.com >> >> >| >Get your security updates at >> >> >| http://windowsupdate.microsoft.com ONLY >> >> >| >Remove spyware - www.lavasoftusa.com or >> >> >| http://security.kolla.de >> >> >| >Block annoying popups - www.panicware.com >> >> >| >. >> >> >| > >> >> >| Thanks for the information. The IP address is >> >> 222.0.0.2 >> >> >| and the Sam Spade site told me the name is All- >> >> >| Routers.Mcast.net. That's all the info I have. >> Also, >> >> the >> >> >| Firewall is McAfee Firewall v 4 and it tells me >> what's >> >> >| connected, but this is just an ICMP packet that's >> sent >> >> out >> >> >| everytime I sign on. After the packet goes out, I >> get >> >> >| pinged. I'd like to know what's sending out the ICMP >> >> in >> >> >| the first place. Thanks for your help! >> >> >. >> >> > >> > >> > >> >. >> > > > >. >
- Next message: Jason: "Re: hacker attacks"
- Previous message: Jupiter Jones [MVP]: "Re: XP Pro - copying an EFS encrypted file to a web site for storage"
- In reply to: Mike Burgess: "Re: Help - Tried almost everything!"
- Next in thread: David Robbins: "Re: Help - Tried almost everything!"
- Reply: David Robbins: "Re: Help - Tried almost everything!"
- Reply: Mike Burgess: "Re: Help - Tried almost everything!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
