Re: Help - Tried almost everything!

anonymous_at_discussions.microsoft.com
Date: 11/22/03


Date: Sat, 22 Nov 2003 08:23:17 -0800

Hi Mike: If I understand you correctly, I shouldn't worry
about the other adapters? I thought perhaps one of the
duplicates was communicating with the "outside world."
Also, when the ICMP is sent and I get pinged, McFirewall
just advises me that a Ping has been intercepted. That's
all the info I have to go on, so I just keep searching.
Also, I going to post another question on the new page,
I've discovered a program attempting to communicate, it's
called RPSCC.EXE and it's property name is Distributed COM
Services. Any ideas? Thanks! Rockkly
>-----Original Message-----
>Rockly,
>Most likely the other adapters when installed by default
during Windows
>Setup.
>Although AOL may have had a hand in that too?
>
>>"and the ICMP is still generated"
>By who? (program name) does McAfee tell you?
>
>>"After the packet is sent, my machine is "pinged."
>Are you getting pinged from the same IP as the outgoing
packet?
>__________________________________________________________
__
>Mike Burgess [MVP Windows Shell\User]
http://www.mvps.org/winhelp2002/
>Blocking Spyware, Adware, Parasites, Hijackers, Trojans,
with a HOSTS file
>http://www.mvps.org/winhelp2002/hosts.htm [updated 11-19-
03]
>Please post replies to this Newsgroup, email address is
invalid
>--
>
><anonymous@discussions.microsoft.com> wrote in message
>news:1df001c3aeec$68ca5030$a601280a@phx.gbl...
>> Hi Mike: I read up on VPN with the link you gave me and
>> then I searched Google again for more info. I then
>> checked my network adapters and there are adapters my
>> machine that I have no idea where they came from. In
>> addition to "Dial-Up Adapter", there is also
another "Dial-
>> Up Adapter(VPN Support)" listed and another adapter
>> called "Microsoft Virtual Private Network Adapter". Why
>> so many Network adapters? I only use this machine to
>> connect to AOL for my e-mail and my Internet access. I
>> have no other Networks! Also, I've denied access to all
>> programs with McAfee and then gave permissions, a
complete
>> start over, and the ICMP is still generated. It gets
>> blocked, but still gets generated so something in my
>> machine is active. In one of my searches, it was
>> mentioned that some programs send out a "heartbeat"
>> message that let's another machine know that the
infected
>> machine is still active. Is this a possibility? Much
>> appreciation to you for your help!
>>
>> >-----Original Message-----
>> >Rockly,
>> >Oops .... should say: VPN = "Virtual Private Network"
>> >http://computer.howstuffworks.com/vpn.htm
>> >
>> >In the previous message I gave you a link to Google,
>> which I
>> >searched on that IP = 222.0.0.2 and that was the first
>> hit (VPN).
>> >
>> >I don't use McAfee (firewall) but can you remove all
>> allowed apps,
>> >reboot and reset permissions one-at-a-time, to see
which
>> one jumps
>> >up wanting access to the Internet?
>>
>__________________________________________________________
>> __
>> >Mike Burgess [MVP Windows Shell\User]
>> http://www.mvps.org/winhelp2002/
>> >Blocking Spyware, Adware, Parasites, Hijackers,
Trojans,
>> with a HOSTS file
>> >http://www.mvps.org/winhelp2002/hosts.htm [updated 11-
19-
>> 03]
>> >Please post replies to this Newsgroup, email address is
>> invalid
>> >--
>> >
>> ><anonymous@discussions.microsoft.com> wrote in message
>> >news:02b201c3aeca$82e35830$a301280a@phx.gbl...
>> >> Hi Mike: Thanks for continuing to help me. My
>> situation
>> >> is getting very frustrating. I've spent hours
searching
>> >> at all of the sites that people have recommended,
and I
>> >> still have no answer why the ICMP still goes out
every
>> >> time I connect.
>> >> Please excuse my ignorance, but I don't know what a
VPM
>> >> Client is. I did several searches at Google and
Yahoo
>> and
>> >> still don't understand your question. Please explain
>> so I
>> >> can answer you and get this thing to stop sending out
>> >> ICMP. Thanks again! -Rockly
>> >>
>> >> >-----Original Message-----
>> >> >Rocky,
>> >> >Do you have some kind of "VPM client" setup?
>> >> >
>> >> >nslookup 222.0.0.2
>> >> >Canonical name: KHP222000000002.ppp-bb.dion.ne.jp
>> >> >Addresses: 222.0.0.2
>> >> >
>> >> >[more info]
>> >> >http://www.google.com/search?
num=20&hl=en&lr=&ie=UTF-
>> >> 8&oe=UTF-8&safe=off&sa=G&q=%22222.0.0.2%22
>> >>
>>
>__________________________________________________________
>> >> __
>> >> >Mike Burgess [MVP Windows Shell\User]
>> >> http://www.mvps.org/winhelp2002/
>> >> >Blocking Spyware, Adware, Parasites, Hijackers,
>> Trojans,
>> >> with a HOSTS file
>> >> >http://www.mvps.org/winhelp2002/hosts.htm [updated
11-
>> 19-
>> >> 03]
>> >> >Please post replies to this Newsgroup, email
address is
>> >> invalid
>> >> >--
>> >> >
>> >> ><anonymous@discussions.microsoft.com> wrote in
message
>> >> >news:05e001c3ae5a$2de8ff80$a301280a@phx.gbl...
>> >> >> Mae: I looked it up in the firewall codes and it
is
>> a
>> >> >> type 10. Now, how do I get rid of the program
that's
>> >> >> generating it? thanks for your help! - Rockly
>> >> >> >-----Original Message-----
>> >> >> >Then it is probably ICMP type 10 Router
>> Solicitation:
>> >> >> >Hosts send ICMP Router Solicitation messages to
the
>> all
>> >> >> routers IP multicast address The router will
respond
>> by
>> >> >> sending a router advertisement. This ensures the
>> client
>> >> >> receives a default gateway immediately without
>> waiting
>> >> for
>> >> >> a periodic router advertisement. Windows sends a
>> maximum
>> >> >> of 3 solicitations at intervals of approximately
>> >> >> 600milliseconds.
>> >> >> >
>> >> >> >mae
>> >> >> >-------------------------------------------------

---
>> ---
>> >> ---
>> >> >> ----
>> >> >> >"Rockly" <anonymous@discussions.microsoft.com>
>> wrote in
>> >> >> message news:05b201c3ae50$8811caf0
>> $a501280a@phx.gbl...
>> >> >> >|
>> >> >> >| >-----Original Message-----
>> >> >> >| >On Tue, 18 Nov 2003 06:13:27 -0800, "Rockly"
>> >> >> >| ><anonymous@discussions.microsoft.com> wrote:
>> >> >> >| >
>> >> >> >| >>Good Morning:  I'm running Win 98 with McAfee
>> >> >> Firewall
>> >> >> >| 4.0
>> >> >> >| >>installed.  I connect to the Internet w/ 
America
>> >> >> Online
>> >> >> >| >>and every time I sign on, a program in my
>> machine
>> >> >> sends
>> >> >> >| >>out an ICMP Packet.  After the packet is 
sent,
>> my
>> >> >> >| machine
>> >> >> >| >>is "pinged."  The packet is sent every time,
>> always
>> >> >> to
>> >> >> >| the
>> >> >> >| >>same IP address, no matter how many times I 
sign
>> >> >> >| off/on.
>> >> >> >| >>I've looked, but can't find anything in my
>> files.
>> >> I
>> >> >> >| >>installed the Firewall after I suspected a
>> problem
>> >> >> and
>> >> >> >| >>I've used SpyBot to search the machine.  Any
>> help
>> >> is
>> >> >> >| most
>> >> >> >| >>greatly appreciated!  Thanks!
>> >> >> >| >
>> >> >> >| >Good Morning.
>> >> >> >| >
>> >> >> >| >Have you tried the tools at Sam Spade to see 
who
>> >> owns
>> >> >> the
>> >> >> >| IP Address?
>> >> >> >| >www.samspade.org
>> >> >> >| >
>> >> >> >| >What firewall did you install?
>> >> >> >| >Does it list what programs are accessing the
>> >> Internet?
>> >> >> >| >
>> >> >> >| >jbrown
>> >> >> >| >brownbearat@canadadotcom
>> >> >> >| >remove the at and the dot and the mail will
>> come ;)
>> >> >> >| >o did i say put in a .
>> >> >> >| >Update your A/V product regularly or try an
>> online
>> >> scan
>> >> >> >| >www.pandasoftware.com
>> >> >> >| >Get your security updates at
>> >> >> >| http://windowsupdate.microsoft.com ONLY
>> >> >> >| >Remove spyware - www.lavasoftusa.com or
>> >> >> >| http://security.kolla.de
>> >> >> >| >Block annoying popups - www.panicware.com
>> >> >> >| >.
>> >> >> >| >
>> >> >> >| Thanks for the information.  The IP address is
>> >> >> 222.0.0.2
>> >> >> >| and the Sam Spade site told me the name is All-
>> >> >> >| Routers.Mcast.net.  That's all the info I have.
>> >> Also,
>> >> >> the
>> >> >> >| Firewall is McAfee Firewall v 4 and it tells me
>> >> what's
>> >> >> >| connected, but this is just an ICMP packet 
that's
>> >> sent
>> >> >> out
>> >> >> >| everytime I sign on.  After the packet goes 
out, I
>> >> get
>> >> >> >| pinged.  I'd like to know what's sending out 
the
>> ICMP
>> >> >> in
>> >> >> >| the first place.  Thanks for your help!
>> >> >> >.
>> >> >> >
>> >> >
>> >> >
>> >> >.
>> >> >
>> >
>> >
>> >.
>> >
>
>
>.
>


Relevant Pages

  • Re: Missing icons in Network Connections, no Network Setup Wizard, no ICS.
    ... ICS won't appear unless it thinks you have enough adapters to run ICS, ... enumeration means less network adapters, ... >> devices under Network Adapters in Device Manager. ...
    (microsoft.public.windowsxp.network_web)
  • Re: question regarding load-balancing intermediate driver
    ... adapters in the team in any way? ... It seems you are implementing 802.3ad Link Aggregation. ... requires you to put all aggregated network adapters in promiscuous ... We are implementing the 'generic load balancing driver with fail over' as IM ...
    (microsoft.public.development.device.drivers)
  • Re: GetAdaptersInfo Fails???
    ... so How do I get the list of Network Adapters even if some or all of the ... Adapters are Disabled? ... "Arkady Frenkel" wrote: ... >> I've noticed when I disable the Network Connection and then run the ...
    (microsoft.public.win32.programmer.networks)
  • Re: Cant run ipconfig
    ... I have been chasing down a problem in trying to access files on one of the wired PCs from the laptop. ... If you go to Network Connections, you should see all of the adapters. ... Also check the status of your network adapters in Device Manager. ... The inability to get the IP address is only on the laptop run in wireless mode. ...
    (microsoft.public.windowsxp.general)
  • Re: OSDAgent unable to begin State Restore phase
    ... I have discovered that the WLAN adapter is causing the problem connecting to ... I would still like to know if the timeouts can be ... > I suspect that the network adapters are not yet on-line. ...
    (microsoft.public.sms.tools)