Re: Help - Tried almost everything!

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 11/20/03


Date: Wed, 19 Nov 2003 20:18:01 -0500

Rockly,
Most likely the other adapters when installed by default during Windows
Setup.
Although AOL may have had a hand in that too?

>"and the ICMP is still generated"
By who? (program name) does McAfee tell you?

>"After the packet is sent, my machine is "pinged."
Are you getting pinged from the same IP as the outgoing packet?
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-19-03]
Please post replies to this Newsgroup, email address is invalid

--
<anonymous@discussions.microsoft.com> wrote in message
news:1df001c3aeec$68ca5030$a601280a@phx.gbl...
> Hi Mike:  I read up on VPN with the link you gave me and
> then I searched Google again for more info.  I then
> checked my network adapters and there are adapters my
> machine that I have no idea where they came from.  In
> addition to "Dial-Up Adapter", there is also another "Dial-
> Up Adapter(VPN Support)" listed and another adapter
> called "Microsoft Virtual Private Network Adapter".  Why
> so many Network adapters?  I only use this machine to
> connect to AOL for my e-mail and my Internet access.  I
> have no other Networks!  Also, I've denied access to all
> programs with McAfee and then gave permissions, a complete
> start over, and the ICMP is still generated.  It gets
> blocked, but still gets generated so something in my
> machine is active.  In one of my searches, it was
> mentioned that some programs send out a "heartbeat"
> message that let's another machine know that the infected
> machine is still active.  Is this a possibility? Much
> appreciation to you for your help!
>
> >-----Original Message-----
> >Rockly,
> >Oops .... should say: VPN = "Virtual Private Network"
> >http://computer.howstuffworks.com/vpn.htm
> >
> >In the previous message I gave you a link to Google,
> which I
> >searched on that IP = 222.0.0.2 and that was the first
> hit (VPN).
> >
> >I don't use McAfee (firewall) but can you remove all
> allowed apps,
> >reboot and reset permissions one-at-a-time, to see which
> one jumps
> >up wanting access to the Internet?
> >__________________________________________________________
> __
> >Mike Burgess  [MVP Windows Shell\User]
> http://www.mvps.org/winhelp2002/
> >Blocking Spyware, Adware, Parasites, Hijackers, Trojans,
> with a HOSTS file
> >http://www.mvps.org/winhelp2002/hosts.htm [updated 11-19-
> 03]
> >Please post replies to this Newsgroup, email address is
> invalid
> >--
> >
> ><anonymous@discussions.microsoft.com> wrote in message
> >news:02b201c3aeca$82e35830$a301280a@phx.gbl...
> >> Hi Mike:  Thanks for continuing to help me.  My
> situation
> >> is getting very frustrating.  I've spent hours searching
> >> at all of the sites that people have recommended, and I
> >> still have no answer why the ICMP still goes out every
> >> time I connect.
> >> Please excuse my ignorance, but I don't know what a VPM
> >> Client is.  I did several searches at Google and Yahoo
> and
> >> still don't understand your question.  Please explain
> so I
> >> can answer you and get this thing to stop sending out
> >> ICMP.  Thanks again!  -Rockly
> >>
> >> >-----Original Message-----
> >> >Rocky,
> >> >Do you have some kind of "VPM client" setup?
> >> >
> >> >nslookup 222.0.0.2
> >> >Canonical name: KHP222000000002.ppp-bb.dion.ne.jp
> >> >Addresses: 222.0.0.2
> >> >
> >> >[more info]
> >> >http://www.google.com/search?num=20&hl=en&lr=&ie=UTF-
> >> 8&oe=UTF-8&safe=off&sa=G&q=%22222.0.0.2%22
> >>
> >__________________________________________________________
> >> __
> >> >Mike Burgess  [MVP Windows Shell\User]
> >> http://www.mvps.org/winhelp2002/
> >> >Blocking Spyware, Adware, Parasites, Hijackers,
> Trojans,
> >> with a HOSTS file
> >> >http://www.mvps.org/winhelp2002/hosts.htm [updated 11-
> 19-
> >> 03]
> >> >Please post replies to this Newsgroup, email address is
> >> invalid
> >> >--
> >> >
> >> ><anonymous@discussions.microsoft.com> wrote in message
> >> >news:05e001c3ae5a$2de8ff80$a301280a@phx.gbl...
> >> >> Mae:  I looked it up in the firewall codes and it is
> a
> >> >> type 10.  Now, how do I get rid of the program that's
> >> >> generating it?  thanks for your help!  - Rockly
> >> >> >-----Original Message-----
> >> >> >Then it is probably ICMP type 10 Router
> Solicitation:
> >> >> >Hosts send ICMP Router Solicitation messages to the
> all
> >> >> routers IP multicast address The router will respond
> by
> >> >> sending a router advertisement. This ensures the
> client
> >> >> receives a default gateway immediately without
> waiting
> >> for
> >> >> a periodic router advertisement. Windows sends a
> maximum
> >> >> of 3 solicitations at intervals of approximately
> >> >> 600milliseconds.
> >> >> >
> >> >> >mae
> >> >> >----------------------------------------------------
> ---
> >> ---
> >> >> ----
> >> >> >"Rockly" <anonymous@discussions.microsoft.com>
> wrote in
> >> >> message news:05b201c3ae50$8811caf0
> $a501280a@phx.gbl...
> >> >> >|
> >> >> >| >-----Original Message-----
> >> >> >| >On Tue, 18 Nov 2003 06:13:27 -0800, "Rockly"
> >> >> >| ><anonymous@discussions.microsoft.com> wrote:
> >> >> >| >
> >> >> >| >>Good Morning:  I'm running Win 98 with McAfee
> >> >> Firewall
> >> >> >| 4.0
> >> >> >| >>installed.  I connect to the Internet w/ America
> >> >> Online
> >> >> >| >>and every time I sign on, a program in my
> machine
> >> >> sends
> >> >> >| >>out an ICMP Packet.  After the packet is sent,
> my
> >> >> >| machine
> >> >> >| >>is "pinged."  The packet is sent every time,
> always
> >> >> to
> >> >> >| the
> >> >> >| >>same IP address, no matter how many times I sign
> >> >> >| off/on.
> >> >> >| >>I've looked, but can't find anything in my
> files.
> >> I
> >> >> >| >>installed the Firewall after I suspected a
> problem
> >> >> and
> >> >> >| >>I've used SpyBot to search the machine.  Any
> help
> >> is
> >> >> >| most
> >> >> >| >>greatly appreciated!  Thanks!
> >> >> >| >
> >> >> >| >Good Morning.
> >> >> >| >
> >> >> >| >Have you tried the tools at Sam Spade to see who
> >> owns
> >> >> the
> >> >> >| IP Address?
> >> >> >| >www.samspade.org
> >> >> >| >
> >> >> >| >What firewall did you install?
> >> >> >| >Does it list what programs are accessing the
> >> Internet?
> >> >> >| >
> >> >> >| >jbrown
> >> >> >| >brownbearat@canadadotcom
> >> >> >| >remove the at and the dot and the mail will
> come ;)
> >> >> >| >o did i say put in a .
> >> >> >| >Update your A/V product regularly or try an
> online
> >> scan
> >> >> >| >www.pandasoftware.com
> >> >> >| >Get your security updates at
> >> >> >| http://windowsupdate.microsoft.com ONLY
> >> >> >| >Remove spyware - www.lavasoftusa.com or
> >> >> >| http://security.kolla.de
> >> >> >| >Block annoying popups - www.panicware.com
> >> >> >| >.
> >> >> >| >
> >> >> >| Thanks for the information.  The IP address is
> >> >> 222.0.0.2
> >> >> >| and the Sam Spade site told me the name is All-
> >> >> >| Routers.Mcast.net.  That's all the info I have.
> >> Also,
> >> >> the
> >> >> >| Firewall is McAfee Firewall v 4 and it tells me
> >> what's
> >> >> >| connected, but this is just an ICMP packet that's
> >> sent
> >> >> out
> >> >> >| everytime I sign on.  After the packet goes out, I
> >> get
> >> >> >| pinged.  I'd like to know what's sending out the
> ICMP
> >> >> in
> >> >> >| the first place.  Thanks for your help!
> >> >> >.
> >> >> >
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >


Relevant Pages

  • [TOOL] WaveLock, WLAN Policy Enforcement
    ... Beyond Security would like to welcome Tiscali World Online ... Windows 2000 and Windows XP come with drivers for several wireless LAN ... adapters; installation requires only insertion of one of those ...
    (Securiteam)
  • Re: Netgear WiFi Equipment & WPA/WPA2
    ... Windows 2000 is absolutely and completely unaware of wireless hardware ... The adapter failed to work using Netgear tools under XP ... first is to register and the second is to simply file a support ticket ... I took both NetGear adapters back ...
    (alt.internet.wireless)
  • Re: Extender and SuperG wireless doesnt work
    ... Windows XP wireless config and management (wireless zero ... connected using a USB super g adapter. ... gaming adapters that plugs into the Ethernet port. ...
    (microsoft.public.windows.mediacenter)
  • Re: dell cust service sucks
    ... They call their Monitor-drivers for Display Adapters ... When I choose Windows XP as the OS for this machine, ... You are aware that XP supports many 2000 drivers, ...
    (alt.sys.pc-clone.dell)