Problems accessing Internet

  • Thread starter Thread starter KD
  • Start date Start date
K

KD

I am running XP Pro and having a sudden and serious
problem with internet connectivity.

Let me preface by saying that I am writing this by booting
XP in Safe Mode with Networking. This is the only way
that my internet is functioning normally.

Following is the symptoms under Normal boot:
- I can send and receive email
- I can FTP
- I can play online games, such as Soldier of Fortune
- I can use TeamSpeak for online chatting with other
gamers.
- I can ping most any site I can think of.

The problematic symptom is I CANNOT BROWSE ANYWHERE!! I
cannot update my antivirus, I cannot update my tax
software, NOTHING.

Upon running a NETSTAT command, I saved the output to a
TXT file. There were over 2000 connections looping back
to localhost on various ports. When I run NETSTAT now (in
Safe Mode) I get only 1 or 2 and they are to legitimate
sites.

I have downloaded in Safe Mode my anti-virus update, plus
run varying other online scans. No viruses found, at
least not while in Safe Mode, but in Normal Mode I cannot
connect to the internet to check.

This problem first showed itself on Mar 11, 2004. I have
not installed anything except for my Tax software which I
did on Mar 6, 2004.

Any help please to find out what is causing my apparent
loopback to localhost instead of going to the internet for
browsing. It seems to me like some type of DoS, but I am
not sure.

Anxiously awaiting a response.

KD
 
Download, install and run Ad Aware:
www.lavasoftusa.com

Also, try the following, open IE, go to Tools, select Internet Options, on
the General Tab click Delete Cookies, Delete Files (Accept the option to
delete all offline content) and click Clear History.

Then go to the Advanced tab, remove the check from "Enable Third party
browser extensions," reboot and try accessing the sites again.
 
I haven't gotten to doing that but I must update on what
I have done. Right now, as I right this, I am booted in
Normal mode. Hence, I have access to the internet
again. I still think my NETSTAT should have less, but it
is way smaller.

I found a process SYMPROXY.EXE that was the culprit for
much of the results. It claims in my Services to be a
part of my Norton Firewall software. I've had it
installed for 2 years, and this is the first time I've
seen this reaction.

I am assuming it either became compromised or was
spoofed. I'm still not sure. Also running is another
application called WEBPROXY.EXE, but it does not appear
to be Norton related.

So, I don't know if this is the result of a hack, or a
virus, or just plain weird. Any highlights on this might
be revealing.

Thanks.

KD
 
Back
Top