ICS Vista to XP

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I've been trying to get ics to work on Vista host, XP client. The network
works i get connected icon on XP. The only site i can get is
http://216.92.56.121/ but microsoft sites flash with the web page then IE7
says "IE cannot display the web page" Outlook dosn't work "pop 3 server could
not be found",
Ive tried fire wall off on both computers. the XP works fine when i connect
it to the modem.
 
ping yahoo.com
ping request could not find host.
I then entered http://66.94.234.13 (yahoo.com) into ie7 and got a yahoo page
with message"sorry page requested could not be found" meanwhile the busy
symbol was on the Tab with a message incorrect URL. the page then changed to
Internet explorer cannot display page.
requesting www.yahoo .com coms up with address not valid
 
Tracing route to 4.2.2.1 over a maximum of 30 hops
1 <1ms * <1ms 192.168.0.1
2 * * * Request timed out,
3 18ms 20ms 17ms 62.25.206.8
4 20ms 18ms 20ms 195.50.91.9
5 20ms 20ms 18ms 4.68.116.15
6 33ms 30ms 25ms 4.2.2.1
Trace complete
 
Seems like name resolution issue. Try this command: nslookup and the
yahoo.com. please post back with the results. Also please post back with the
result of ipconfig /all.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
 
I changed my NIC back to the on board marvel yucon on the vista machine and
every thing worked fine until i switched both computers off. now its back to
how it was.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\zena>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : EXSCHOOL
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mshome.net

Ethernet adapter Home:

Connection-specific DNS Suffix . : mshome.net
Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast
Eth
ernet NIC
Physical Address. . . . . . . . . : 00-01-80-23-13-17
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.164
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Lease Obtained. . . . . . . . . . : 26 October 2007 12:04:38
Lease Expires . . . . . . . . . . : 02 November 2007 12:04:38

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : FF-FF-FF-FF-FF-FF-FF-FF
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::ffff:ffff:fffd%4
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Automatic Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . : mshome.net
Description . . . . . . . . . . . : Automatic Tunneling
Pseudo-Interface

Physical Address. . . . . . . . . : C0-A8-00-A4
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::5efe:192.168.0.164%2
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Disabled

C:\Documents and Settings\zena>nslookup yahoo.com
Server: Johnnew.mshome.net
Address: 192.168.0.1

Non-authoritative answer:
Name: yahoo.com
Addresses: 216.109.112.135, 66.94.234.13


C:\Documents and Settings\zena>
 
This is the new trace rt after i swapped the NIC
C:\Documents and Settings\zena>tracert 4.2.2.1

Tracing route to vnsc-pri.sys.gtei.net [4.2.2.1]
over a maximum of 30 hops:

1 <1 ms * <1 ms Johnnew.mshome.net [192.168.0.1]
2 * * * Request timed out.
3 24 ms 24 ms 24 ms ge2-38.114.pbr-4.ewfd.as5388.net
[62.25.192.58]

4 27 ms 25 ms 25 ms 195.50.91.9
5 25 ms 26 ms 27 ms ae-11-55.car1.London1.Level3.net
[4.68.116.143]

6 27 ms 27 ms 27 ms vnsc-pri.sys.gtei.net [4.2.2.1]

Trace complete.

C:\Documents and Settings\zena>
 
Hi AhmadShubar
My problem was solved by Updating the drivers on both the computers Network
cards.
 
Who is Level3.net????

It seems that all of my information is 'filtered' through them regardless of
what search engine I use, or what site I am searching.

I have a suspicion it is the location of an xml file which is preventing me
from seeing 'things' based on keywords and other criteria. Yes, my computers
have been hacked by someone using the WebWatcher program, which
coincidentally offers just that type of service.

Can anyone explain who Level3.net is???? Why do all of my Microsoft
searches return the results from their IP addresses?
 
Terance said:
Who is Level3.net????

It seems that all of my information is 'filtered' through them regardless of
what search engine I use, or what site I am searching.

I have a suspicion it is the location of an xml file which is preventing me
from seeing 'things' based on keywords and other criteria. Yes, my computers
have been hacked by someone using the WebWatcher program, which
coincidentally offers just that type of service.

Can anyone explain who Level3.net is???? Why do all of my Microsoft
searches return the results from their IP addresses?
Click to expand...

Doesn't look particularly good:

http://www.google.com/search?hl=en&...zilla:en-US:official&q=Level3.net&btnG=Search

But it doesn't really matter who exactly Level3.net are; any redirection
like you are describing is indicative of infection. Either go through
the virus/malware removal steps outlined below or back up your data and
do a clean install. It's your choice.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html
- download site

The site is in German but David's tool is in English so don't let that
worry you. Scroll all the way down to almost the bottom of the page and
you'll see a box titled "Infos Zum Download - Multi-AV Scanning Tool".
You'll see "Download von www pctipp.ch" and the live link to download
Multi_AV.

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Not all tools used will work in Vista and you will need to run them
elevated. If you are unable to remove the infection by following the
general steps, register at one of the HijackThis forums as suggested.

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.


Malke
 
Back
Top