Symantec -Site Problem?

  • Thread starter Thread starter Jane
  • Start date Start date
J

Jane

I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated. After
completing set up, attempted to download update for full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?
 
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de
 
On Microsoft's page for PC Security /windows
2000/firewall.asp: all links to AV web sites go to
Microsoft Homepage when clicked on.

Don't know URLs off-hand so conducted searches on Google:
The following result in Page Cannot be Displayed; also,
tracerts are same as with Symantic and others previously
traced.

Computer Associates
F-Secure

These sites were accessible:

BlaceIce PC
Panda Software
Tiny Software
ZoneAlarm

Any advice?

Thank you

-----Original Message-----
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de

-----Original Message-----
I can get to www.symantec.com just fine from here. If
Click to expand...
you
ping
www.symantec.com from a command line, what do you get in return (IP
address)?

Do you have access to any other websites in your
Click to expand...
browser?
Can you go to any
other AV sites, such as www.trendmicro.com , www.nai.com , etc?



.
Click to expand...
.
Click to expand...
 
After researching it looks possibly like MyDoom --?

No problems were experienced sith Symantec site or updates
until after download of Norton Internet Security 2004 on
evening of April 23.

Scans April 23, 24, 25 (today) report "none found" - any
advice please?

Thank you

-----Original Message-----
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de

-----Original Message-----
I can get to www.symantec.com just fine from here. If
Click to expand...
you
ping
www.symantec.com from a command line, what do you get in return (IP
address)?

Do you have access to any other websites in your
Click to expand...
browser?
Can you go to any
other AV sites, such as www.trendmicro.com , www.nai.com , etc?



.
Click to expand...
.
Click to expand...
 
You didn't ansewer my first question about what you see when you try to ping
www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
...
...
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1 address in
your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on your entire C drive
(presuming C is where Windows is installed) and make sure you're searching
hidden/system folders as well. See anything unusual? Were you running any AV
software (updated, natch) before?

The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de

-----Original Message-----
I can get to www.symantec.com just fine from here. If you ping
www.symantec.com from a command line, what do you get in return (IP
address)?

Do you have access to any other websites in your browser? Can you go
to any other AV sites, such as www.trendmicro.com , www.nai.com , etc?



.
Click to expand...
Click to expand...
 
....also, just thought of this - did you set up NIS to block anything
outbound yet? I haven't worked with it, so I don't know how it is supposed
to work. Can you disable it & get to Symantec, etc?
You didn't ansewer my first question about what you see when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1 address
in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on your entire C
drive (presuming C is where Windows is installed) and make sure
you're searching hidden/system folders as well. See anything unusual?
Were you running any AV software (updated, natch) before?

The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de

-----Original Message-----
I can get to www.symantec.com just fine from here. If you ping
www.symantec.com from a command line, what do you get in return (IP
address)?

Do you have access to any other websites in your browser? Can you go
to any other AV sites, such as www.trendmicro.com , www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated. After
completing set up, attempted to download update for full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?


.
Click to expand...
Click to expand...
Click to expand...
 
As a matter of fact I've posted several times on
accessibiltiy to AV sites and tracerts:Apparently Denial
of Service.

<10ms <10ms <10ms dj5d7b01 [127.0.0.1]

No Virus found on scans with Norton 2004

No Infection Detected with Microsoft MyDoom Removal tool

This problem started immediately after download of Norton
2004. No infections prior to or since discovered with
Norton.

Have downloaded Microsoft MyDoom removal tool 2x in last
30 minutes: No Infection Found.

Please advise.
-----Original Message-----
....also, just thought of this - did you set up NIS to block anything
outbound yet? I haven't worked with it, so I don't know how it is supposed
to work. Can you disable it & get to Symantec, etc?
You didn't ansewer my first question about what you see when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1 address
in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on your entire C
drive (presuming C is where Windows is installed) and make sure
you're searching hidden/system folders as well. See anything unusual?
Were you running any AV software (updated, natch) before?

The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here. If you ping
www.symantec.com from a command line, what do you get in return (IP
address)?

Do you have access to any other websites in your browser? Can you go
to any other AV sites, such as www.trendmicro.com ,
www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated. After
completing set up, attempted to download update for full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?


.
Click to expand...
Click to expand...


.
Click to expand...
 
Apologies: didn't read your entire message before: see
below

Pinging Symantec.com and McAfee: 4 packets sent/4 received

Tracerts on accessible sites - all normal.

Tracerts on non-accessible sites - all 127.0.0.1 {thanks
for clarification}

No e-mail attachments of any kind opened during last 10
days from known or unknown senders.

Plenty of spam that is immediately deleted (Outlook}

Microsoft Removal for MyDoom not finding an infection.
Norton 2004 not finding any infection.

Any suggestions for how to clean computer? May or may not
be My Doom. A variant perhaps? or something new?

Unable to access following:
Symantec
McAfee
Computer Associates
F-Secures
NAI
Trendmicro
Sophos
Kaspersky
-----Original Message-----
As a matter of fact I've posted several times on
accessibiltiy to AV sites and tracerts:Apparently Denial
of Service.

<10ms <10ms <10ms dj5d7b01 [127.0.0.1]

No Virus found on scans with Norton 2004

No Infection Detected with Microsoft MyDoom Removal tool

This problem started immediately after download of Norton
2004. No infections prior to or since discovered with
Norton.

Have downloaded Microsoft MyDoom removal tool 2x in last
30 minutes: No Infection Found.

Please advise.
-----Original Message-----
....also, just thought of this - did you set up NIS to block anything
outbound yet? I haven't worked with it, so I don't know how it is supposed
to work. Can you disable it & get to Symantec, etc?
Click to expand...
see
when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1 address
in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on your entire C
drive (presuming C is where Windows is installed) and make sure
you're searching hidden/system folders as well. See anything unusual?
Were you running any AV software (updated, natch) before?


Jane wrote:
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here.
Click to expand...
Click to expand...
If
you ping get
in return (IP
.
Click to expand...
.
Click to expand...
 
there are other viruses and worms that will change your hosts file to
prevent access to anti virus web sites, these are a few of them:
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.polybot.html
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

some of them also kill processes associated with anti-virus programs and
other tools that may find them.

Jane said:
Apologies: didn't read your entire message before: see
below

Pinging Symantec.com and McAfee: 4 packets sent/4 received

Tracerts on accessible sites - all normal.

Tracerts on non-accessible sites - all 127.0.0.1 {thanks
for clarification}

No e-mail attachments of any kind opened during last 10
days from known or unknown senders.

Plenty of spam that is immediately deleted (Outlook}

Microsoft Removal for MyDoom not finding an infection.
Norton 2004 not finding any infection.

Any suggestions for how to clean computer? May or may not
be My Doom. A variant perhaps? or something new?

Unable to access following:
Symantec
McAfee
Computer Associates
F-Secures
NAI
Trendmicro
Sophos
Kaspersky
-----Original Message-----
As a matter of fact I've posted several times on
accessibiltiy to AV sites and tracerts:Apparently Denial
of Service.

<10ms <10ms <10ms dj5d7b01 [127.0.0.1]

No Virus found on scans with Norton 2004

No Infection Detected with Microsoft MyDoom Removal tool

This problem started immediately after download of Norton
2004. No infections prior to or since discovered with
Norton.

Have downloaded Microsoft MyDoom removal tool 2x in last
30 minutes: No Infection Found.

Please advise.
-----Original Message-----
....also, just thought of this - did you set up NIS to block anything
outbound yet? I haven't worked with it, so I don't know how it is supposed
to work. Can you disable it & get to Symantec, etc?

Lanwench [MVP - Exchange] wrote:
You didn't ansewer my first question about what you
Click to expand...
see
when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1 address
in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on your entire C
drive (presuming C is where Windows is installed) and make sure
you're searching hidden/system folders as well. See anything unusual?
Were you running any AV software (updated, natch) before?


Jane wrote:
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here.
Click to expand...
If
you ping
www.symantec.com from a command line, what do you
Click to expand...
get
in return (IP
address)?

Do you have access to any other websites in your browser? Can you go
to any other AV sites, such as www.trendmicro.com ,
www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated. After
completing set up, attempted to download update for full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?


.


.
Click to expand...
.
Click to expand...
Click to expand...
 
Jane said:
Apologies: didn't read your entire message before: see
below

Pinging Symantec.com and McAfee: 4 packets sent/4 received
Click to expand...

What IP address was returned?
Tracerts on accessible sites - all normal.

Tracerts on non-accessible sites - all 127.0.0.1 {thanks
for clarification}

No e-mail attachments of any kind opened during last 10
days from known or unknown senders.

Plenty of spam that is immediately deleted (Outlook}

Microsoft Removal for MyDoom not finding an infection.
Norton 2004 not finding any infection.

Any suggestions for how to clean computer? May or may not
be My Doom. A variant perhaps? or something new?

Unable to access following:
Symantec
McAfee
Computer Associates
F-Secures
NAI
Trendmicro
Sophos
Kaspersky
Click to expand...

Did you check your hosts file(s) as I suggested?
-----Original Message-----
As a matter of fact I've posted several times on
accessibiltiy to AV sites and tracerts:Apparently Denial
of Service.

<10ms <10ms <10ms dj5d7b01 [127.0.0.1]

No Virus found on scans with Norton 2004

No Infection Detected with Microsoft MyDoom Removal tool

This problem started immediately after download of Norton
2004. No infections prior to or since discovered with
Norton.

Have downloaded Microsoft MyDoom removal tool 2x in last
30 minutes: No Infection Found.

Please advise.
-----Original Message-----
....also, just thought of this - did you set up NIS to block
anything outbound yet? I haven't worked with it, so I don't know
how it is supposed to work. Can you disable it & get to Symantec,
etc?

Lanwench [MVP - Exchange] wrote:
You didn't ansewer my first question about what you
Click to expand...
see
when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1
address in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on your entire C
drive (presuming C is where Windows is installed) and make sure
you're searching hidden/system folders as well. See anything
unusual? Were you running any AV software (updated, natch) before?


Jane wrote:
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here.
Click to expand...
If
you ping
www.symantec.com from a command line, what do you
Click to expand...
get
in return (IP
address)?

Do you have access to any other websites in your browser? Can
you go to any other AV sites, such as www.trendmicro.com ,
www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated. After
completing set up, attempted to download update for full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?


.


.
Click to expand...
.
Click to expand...
Click to expand...
 
Hosts files:

Folder: C:\I386
Hosts._ -- Type _File
LMHosts.SA_ -- Type SA_file

Folder: C:\WINNT\System
Hosts -- Type File
LMHosts --Type SAM File

On NIS, 2 programs are 'blocked' although they are
probably "ok:" svchost.exe and winaii.exe

Let me know if above are OK.

Thank you
-----Original Message-----
....also, just thought of this - did you set up NIS to block anything
outbound yet? I haven't worked with it, so I don't know how it is supposed
to work. Can you disable it & get to Symantec, etc?
You didn't ansewer my first question about what you see when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1 address
in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on your entire C
drive (presuming C is where Windows is installed) and make sure
you're searching hidden/system folders as well. See anything unusual?
Were you running any AV software (updated, natch) before?

The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here. If you ping
www.symantec.com from a command line, what do you get in return (IP
address)?

Do you have access to any other websites in your browser? Can you go
to any other AV sites, such as www.trendmicro.com ,
www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated. After
completing set up, attempted to download update for full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?


.
Click to expand...
Click to expand...


.
Click to expand...
 
Sorry for confusing thread - distractions, message re
hosts files and blocked programs is mine 'Jane'
-----Original Message-----
Hosts files:

Folder: C:\I386
Hosts._ -- Type _File
LMHosts.SA_ -- Type SA_file

Folder: C:\WINNT\System
Hosts -- Type File
LMHosts --Type SAM File

On NIS, 2 programs are 'blocked' although they are
probably "ok:" svchost.exe and winaii.exe

Let me know if above are OK.

Thank you
-----Original Message-----
....also, just thought of this - did you set up NIS to block anything
outbound yet? I haven't worked with it, so I don't know how it is supposed
to work. Can you disable it & get to Symantec, etc?
Click to expand...
see
when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1 address
in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on your entire C
drive (presuming C is where Windows is installed) and make sure
you're searching hidden/system folders as well. See anything unusual?
Were you running any AV software (updated, natch) before?


Jane wrote:
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here.
Click to expand...
Click to expand...
If
you ping get
in return (IP
.
Click to expand...
.
Click to expand...
 
Lanwench: (1)The IP address on Pinging is: 127.0.0.1
{sorry}
(2)The hosts files are in prior reply; ther are four,
should I click on any of them? Have not done so.

Dave: I can't access any of the URLs that you provided but
thank you. {all Page Cannot Display or 'white out'}

Does anyone have an e-mail address for Symantec tech
support? I can't get access to tech support on their site.

Thank you, J
-----Original Message-----
Sorry for confusing thread - distractions, message re
hosts files and blocked programs is mine 'Jane'
-----Original Message-----
Hosts files:

Folder: C:\I386
Hosts._ -- Type _File
LMHosts.SA_ -- Type SA_file

Folder: C:\WINNT\System
Hosts -- Type File
LMHosts --Type SAM File

On NIS, 2 programs are 'blocked' although they are
probably "ok:" svchost.exe and winaii.exe

Let me know if above are OK.

Thank you
-----Original Message-----
....also, just thought of this - did you set up NIS to block anything
outbound yet? I haven't worked with it, so I don't know how it is supposed
to work. Can you disable it & get to Symantec, etc?

Lanwench [MVP - Exchange] wrote:
You didn't ansewer my first question about what you
Click to expand...
see
when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1 address
in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on your entire C
drive (presuming C is where Windows is installed) and make sure
you're searching hidden/system folders as well. See anything unusual?
Were you running any AV software (updated, natch) before?


Jane wrote:
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here.
Click to expand...
If
you ping
www.symantec.com from a command line, what do you
Click to expand...
get
in return (IP
address)?

Do you have access to any other websites in your browser? Can you go
to any other AV sites, such as www.trendmicro.com ,
www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated. After
completing set up, attempted to download update
Click to expand...
for
full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?


.


.
Click to expand...
.
Click to expand...
.
Click to expand...
 
After some research on Hosts files: understand that the
anti-virus sites must have been added to Hosts file with
127.0.0.1 my local host to "block" access.

The info on the file has Modified 4/23/04 7:52 PM; this is
time I did download/set up of Norton 2004.

Question-1: Can I modify through Notepad and should I
remove or modify in some other manner.

Question-2: Was this due to a virus? and if so how do I
remove - Norton 2004 does not detect anything.

Thank you, J








-----Original Message-----
Lanwench: (1)The IP address on Pinging is: 127.0.0.1
{sorry}
(2)The hosts files are in prior reply; ther are four,
should I click on any of them? Have not done so.

Dave: I can't access any of the URLs that you provided but
thank you. {all Page Cannot Display or 'white out'}

Does anyone have an e-mail address for Symantec tech
support? I can't get access to tech support on their site.

Thank you, J
-----Original Message-----
Sorry for confusing thread - distractions, message re
hosts files and blocked programs is mine 'Jane'
-----Original Message-----
Hosts files:

Folder: C:\I386
Hosts._ -- Type _File
LMHosts.SA_ -- Type SA_file

Folder: C:\WINNT\System
Hosts -- Type File
LMHosts --Type SAM File

On NIS, 2 programs are 'blocked' although they are
probably "ok:" svchost.exe and winaii.exe

Let me know if above are OK.

Thank you

-----Original Message-----
....also, just thought of this - did you set up NIS to
block anything
outbound yet? I haven't worked with it, so I don't know
how it is supposed
to work. Can you disable it & get to Symantec, etc?

Lanwench [MVP - Exchange] wrote:
You didn't ansewer my first question about what you see
when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the
127.0.0.1 address
in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on
your entire C
drive (presuming C is where Windows is installed) and
make sure
you're searching hidden/system folders as well. See
anything unusual?
Were you running any AV software (updated, natch)
before?


Jane wrote:
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL
Address

Page Cannot Display when accessing through Google
search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links
from
page to Page Cannot Display

access to Symantic Security Check page, however, all
links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as
Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here. If
you ping
www.symantec.com from a command line, what do you get
in return (IP
address)?

Do you have access to any other websites in your
browser? Can you go
to any other AV sites, such as www.trendmicro.com ,
www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated.
After
completing set up, attempted to download update for
full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was
down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?


.


.

.
Click to expand...
.
Click to expand...
.
Click to expand...
 
edit the hosts file with notepad and see if there are a bunch of av sites
listed with ip=127.0.0.1. if so, then you are probably infected with
something... and most likely norton isn't really what is running, or it
isn't running properly and is not showing you valid results. most systems
don't need the hosts file or lmhosts file at all, if you delete them and
they aren't recreated during reboot then you might be able to browse to the
av web sites to do an on-line scan to see what you have.

Jane said:
After some research on Hosts files: understand that the
anti-virus sites must have been added to Hosts file with
127.0.0.1 my local host to "block" access.

The info on the file has Modified 4/23/04 7:52 PM; this is
time I did download/set up of Norton 2004.

Question-1: Can I modify through Notepad and should I
remove or modify in some other manner.

Question-2: Was this due to a virus? and if so how do I
remove - Norton 2004 does not detect anything.

Thank you, J








-----Original Message-----
Lanwench: (1)The IP address on Pinging is: 127.0.0.1
{sorry}
(2)The hosts files are in prior reply; ther are four,
should I click on any of them? Have not done so.

Dave: I can't access any of the URLs that you provided but
thank you. {all Page Cannot Display or 'white out'}

Does anyone have an e-mail address for Symantec tech
support? I can't get access to tech support on their site.

Thank you, J
-----Original Message-----
Sorry for confusing thread - distractions, message re
hosts files and blocked programs is mine 'Jane'
-----Original Message-----
Hosts files:

Folder: C:\I386
Hosts._ -- Type _File
LMHosts.SA_ -- Type SA_file

Folder: C:\WINNT\System
Hosts -- Type File
LMHosts --Type SAM File

On NIS, 2 programs are 'blocked' although they are
probably "ok:" svchost.exe and winaii.exe

Let me know if above are OK.

Thank you

-----Original Message-----
....also, just thought of this - did you set up NIS to
block anything
outbound yet? I haven't worked with it, so I don't know
how it is supposed
to work. Can you disable it & get to Symantec, etc?

Lanwench [MVP - Exchange] wrote:
You didn't ansewer my first question about what you
see
when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the
127.0.0.1 address
in your tracert results (that's your localhost
address).
In fact, do a search for hosts (no file extension) on
your entire C
drive (presuming C is where Windows is installed) and
make sure
you're searching hidden/system folders as well. See
anything unusual?
Were you running any AV software (updated, natch)
before?


Jane wrote:
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL
Address

Page Cannot Display when accessing through Google
search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links
from
page to Page Cannot Display

access to Symantic Security Check page, however, all
links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as
Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here.
If
you ping
www.symantec.com from a command line, what do you
get
in return (IP
address)?

Do you have access to any other websites in your
browser? Can you go
to any other AV sites, such as www.trendmicro.com ,
www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated.
After
completing set up, attempted to download update for
full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was
down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem
with
Symantec or could it be Internet connectivity...?


.


.

.

.
Click to expand...
.
Click to expand...
Click to expand...
 
You can rename your existing hosts file to hosts.jane, create a new one in
the same location in Explorer (text file) -

127.0.0.1 localhost

is the only entry you need by default. Save, and then rename the file to
remove the file extension (make sure Explorer is set up not to hide file
extensions). Then reboot & try again....
After some research on Hosts files: understand that the
anti-virus sites must have been added to Hosts file with
127.0.0.1 my local host to "block" access.

The info on the file has Modified 4/23/04 7:52 PM; this is
time I did download/set up of Norton 2004.

Question-1: Can I modify through Notepad and should I
remove or modify in some other manner.

Question-2: Was this due to a virus? and if so how do I
remove - Norton 2004 does not detect anything.

Thank you, J








-----Original Message-----
Lanwench: (1)The IP address on Pinging is: 127.0.0.1
{sorry}
(2)The hosts files are in prior reply; ther are four,
should I click on any of them? Have not done so.

Dave: I can't access any of the URLs that you provided but
thank you. {all Page Cannot Display or 'white out'}

Does anyone have an e-mail address for Symantec tech
support? I can't get access to tech support on their site.

Thank you, J
-----Original Message-----
Sorry for confusing thread - distractions, message re
hosts files and blocked programs is mine 'Jane'
-----Original Message-----
Hosts files:

Folder: C:\I386
Hosts._ -- Type _File
LMHosts.SA_ -- Type SA_file

Folder: C:\WINNT\System
Hosts -- Type File
LMHosts --Type SAM File

On NIS, 2 programs are 'blocked' although they are
probably "ok:" svchost.exe and winaii.exe

Let me know if above are OK.

Thank you

-----Original Message-----
....also, just thought of this - did you set up NIS to block
anything outbound yet? I haven't worked with it, so I don't know
how it is supposed
to work. Can you disable it & get to Symantec, etc?

Lanwench [MVP - Exchange] wrote:
You didn't ansewer my first question about what you
see
when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1
address in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on
your entire C
drive (presuming C is where Windows is installed) and
make sure
you're searching hidden/system folders as well. See anything
unusual? Were you running any AV software (updated, natch)
before?


Jane wrote:
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all
links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here.
If
you ping
www.symantec.com from a command line, what do you
get
in return (IP
address)?

Do you have access to any other websites in your browser? Can
you go to any other AV sites, such as www.trendmicro.com ,
www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated. After
completing set up, attempted to download update for
full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?


.


.

.

.
Click to expand...
.
Click to expand...
Click to expand...
 
Thank you Dave and Lawwench. I did some research and
learned about 'hosts' files. Removed the av web sites that
were listed and browsed to Symantec for updates just in
time - the host file was modified again right after.
Problem was apparently caused by 2 Gaobot worms. Thank you
for your assistance.
-----Original Message-----
You can rename your existing hosts file to hosts.jane, create a new one in
the same location in Explorer (text file) -

127.0.0.1 localhost

is the only entry you need by default. Save, and then rename the file to
remove the file extension (make sure Explorer is set up not to hide file
extensions). Then reboot & try again....
After some research on Hosts files: understand that the
anti-virus sites must have been added to Hosts file with
127.0.0.1 my local host to "block" access.

The info on the file has Modified 4/23/04 7:52 PM; this is
time I did download/set up of Norton 2004.

Question-1: Can I modify through Notepad and should I
remove or modify in some other manner.

Question-2: Was this due to a virus? and if so how do I
remove - Norton 2004 does not detect anything.

Thank you, J








-----Original Message-----
Lanwench: (1)The IP address on Pinging is: 127.0.0.1
{sorry}
(2)The hosts files are in prior reply; ther are four,
should I click on any of them? Have not done so.

Dave: I can't access any of the URLs that you provided but
thank you. {all Page Cannot Display or 'white out'}

Does anyone have an e-mail address for Symantec tech
support? I can't get access to tech support on their site.

Thank you, J
-----Original Message-----
Sorry for confusing thread - distractions, message re
hosts files and blocked programs is mine 'Jane'
-----Original Message-----
Hosts files:

Folder: C:\I386
Hosts._ -- Type _File
LMHosts.SA_ -- Type SA_file

Folder: C:\WINNT\System
Hosts -- Type File
LMHosts --Type SAM File

On NIS, 2 programs are 'blocked' although they are
probably "ok:" svchost.exe and winaii.exe

Let me know if above are OK.

Thank you

-----Original Message-----
....also, just thought of this - did you set up NIS to block
anything outbound yet? I haven't worked with it, so
Click to expand...
I don't
know
how it is supposed
to work. Can you disable it & get to Symantec, etc?

Lanwench [MVP - Exchange] wrote:
You didn't ansewer my first question about what you
see
when you try
to ping www.symantec.com -

When I run a tracert to www.symantec.com I see this:

Tracing route to a568.x.akamai.net [206.112.112.46]
..
..
(etc)

Run ipconfig /all and report back your results.

Check your hosts file - you shouldn't be seeing the 127.0.0.1
address in your tracert results (that's your localhost address).
In fact, do a search for hosts (no file extension) on
your entire C
drive (presuming C is where Windows is installed) and
make sure
you're searching hidden/system folders as well. See anything
unusual? Were you running any AV software (updated, natch)
before?


Jane wrote:
The Tracert I failed to mention is unusual.

Tracert for Symantec:

1) <10ms <10ms <10ms dj5d7b01 [127.0.0.1]

Page Cannot Display when trying to access by URL Address

Page Cannot Display when accessing through Google search
results for 'symantec'

Through Google search results:

access to Australian site home page only, all links from
page to Page Cannot Display

access to Symantic Security Check page, however, all
links
from page to Page Cannot Display

Re: Trendmicro, Nai and McAfee - same results as Symantec,
including tracert results.

All other sites Ok:
CNN, Google, Yahoo, Webroot, Lavasoft.de


-----Original Message-----
I can get to www.symantec.com just fine from here.
If
you ping
www.symantec.com from a command line, what do you
get
in return (IP
address)?

Do you have access to any other websites in your browser? Can
you go to any other AV sites, such as www.trendmicro.com ,
www.nai.com , etc?

Jane wrote:
I downloaded Norton Internet Security 2004 on 4/23.
Download and set up were longer than anticipated. After
completing set up, attempted to download update
for
full
virus scan etc. but received 'no server connection'
messages. Went to Symantec site on 4/24 to contact
customer service - however, the Symantec site was down.
The site is not accessible today. Tracert does not
indicate a time out anywhere. Is there a problem with
Symantec or could it be Internet connectivity...?


.


.

.

.

.
Click to expand...
Click to expand...


.
Click to expand...
 
Back
Top