Symantec access is completely blocked

  • Thread starter Thread starter Harry H. Forstner
  • Start date Start date
H

Harry H. Forstner

Hi,

All Symantec pages and Live update are blocked.

I found wrong entrys in windows/system32/drivers/etc/1.host and erased
them.

But symantec is still blocked.
The warning shows the IP Adress and the Webaddress contained in "some
host file".

Is there any other "host" file which I didn't find?

Could it be blocked within a Symantec File?

Or does the Firewall block it? I couldn't find any entry.


I'm using Internet Security 20006 with Firewall + XP SP2


with regards

Harry.H.Forstner
 
Harry said:
Hi,

All Symantec pages and Live update are blocked.

I found wrong entrys in windows/system32/drivers/etc/1.host and erased
them.
Click to expand...

how about if you checked the windows/system32/drivers/etc/host file
instead...
 
From: "Harry H. Forstner" <[email protected]>

| Hi,
|
| All Symantec pages and Live update are blocked.
|
| I found wrong entrys in windows/system32/drivers/etc/1.host and erased
| them.
|
| But symantec is still blocked.
| The warning shows the IP Adress and the Webaddress contained in "some
| host file".
|
| Is there any other "host" file which I didn't find?
|
| Could it be blocked within a Symantec File?
|
| Or does the Firewall block it? I couldn't find any entry.
|
| I'm using Internet Security 20006 with Firewall + XP SP2
|
| with regards
|
| Harry.H.Forstner


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *
 
Look in:
windows/system32/drivers/etc/hosts

That's the hosts file used by windows. I have no idea what 1.host might be.
 
Look in:
windows/system32/drivers/etc/hosts

That's the hosts file used by windows.
Click to expand...


It's the default location but settable in the registry

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath



Jim.
 
From: "James Egan" <[email protected]>

| On Thu, 19 Jan 2006 12:30:38 -0500, "Colon Terminus"
|
| It's the default location but settable in the registry
|
| HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath
|
| Jim.

Yep.

The Multi AV Scanning Tool will check that key and if it has been altered it will set it
correctly. It will also makes sure there is NO hosts file and will then flush the DNS
cache. Thus it will make sure that anti virus vendors web sites can be accessed. Something
that malware writers don't want the affected PC to do.
 
Hi,
Look in:
windows/system32/drivers/etc/hosts
Click to expand...

I found it. It was hiidden
That's the hosts file used by windows. I have no idea what 1.host might be.
Click to expand...

It's similiar to "hosts".

In both files where entries.


thanks to everybody.
The problem is solved


with regards

Harry.H.Forstner
 
Back
Top