Loss of internet connection?

Is there anything (virus related) that might hose up a system's
internet connection - so much so that you can't ping the outside world
from a command prompt? Its not just IE thats messed up.

I have two systems in the office with this symptom. A week ago there
was only one, it was loaded with spyware.

Then this week another PC started showing symptoms of something trying
to hijack the web browser -but it too has lost its internet access so
the browser (internet exploerer) fails to display.

Its driving me nuts trying to track this one down.

Also, in IE, nothing happens when I click Tools | Internet Options on
the second pc; I get no Options dialog box - nothing.

The first PC, when I r-click NW Neighborhood, the system prompts me
for a Office 2000 CD ???

Any ideas? I've just never seen an internet connections get hosed
like this - could it be remenents of a virus? Virus detection
software isn't finding anything.

Thanks,

Mike



-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups - 19 Different Servers! =-----

I see that you say it was loaded with spyware, but then say that your
AV finds nothing, Have you tried an anti trojan program such as Spybot
or Adaware.
Adaware http://www.lavasoft.de/support/download/
Spybot http://www.safer-networking.org/index.php?page=mirrors

Taff...........

On Fri, 16 Jan 2004 19:41:36 -0800, Mike <> wrote:

>Is there anything (virus related) that might hose up a system's
>internet connection - so much so that you can't ping the outside world
>from a command prompt? Its not just IE thats messed up.
>
>I have two systems in the office with this symptom. A week ago there
>was only one, it was loaded with spyware.
>
>Then this week another PC started showing symptoms of something trying
>to hijack the web browser -but it too has lost its internet access so
>the browser (internet exploerer) fails to display.
>
>Its driving me nuts trying to track this one down.
>
>Also, in IE, nothing happens when I click Tools | Internet Options on
>the second pc; I get no Options dialog box - nothing.
>
>The first PC, when I r-click NW Neighborhood, the system prompts me
>for a Office 2000 CD ???
>
>Any ideas? I've just never seen an internet connections get hosed
>like this - could it be remenents of a virus? Virus detection
>software isn't finding anything.
>
>Thanks,
>
>Mike
>
>
>
>-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
>http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
>-----== Over 100,000 Newsgroups - 19 Different Servers! =-----




www.sounds-pa.com | www.thecomputerworkshop.com

After running spybot and adaware, removing the entries, antivirus
found nothing.



On Sat, 17 Jan 2004 03:46:03 +0000, taff <taff@the-valleys.com> wrote:

>I see that you say it was loaded with spyware, but then say that your
>AV finds nothing, Have you tried an anti trojan program such as Spybot
>or Adaware.
>Adaware http://www.lavasoft.de/support/download/
>Spybot http://www.safer-networking.org/index.php?page=mirrors
>
>Taff...........
>
>On Fri, 16 Jan 2004 19:41:36 -0800, Mike <> wrote:
>
>>Is there anything (virus related) that might hose up a system's
>>internet connection - so much so that you can't ping the outside world
>>from a command prompt? Its not just IE thats messed up.
>>
>>I have two systems in the office with this symptom. A week ago there
>>was only one, it was loaded with spyware.
>>
>>Then this week another PC started showing symptoms of something trying
>>to hijack the web browser -but it too has lost its internet access so
>>the browser (internet exploerer) fails to display.
>>
>>Its driving me nuts trying to track this one down.
>>
>>Also, in IE, nothing happens when I click Tools | Internet Options on
>>the second pc; I get no Options dialog box - nothing.
>>
>>The first PC, when I r-click NW Neighborhood, the system prompts me
>>for a Office 2000 CD ???
>>
>>Any ideas? I've just never seen an internet connections get hosed
>>like this - could it be remenents of a virus? Virus detection
>>software isn't finding anything.
>>
>>Thanks,
>>
>>Mike
>>
>>
>>
>>-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
>>http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
>>-----== Over 100,000 Newsgroups - 19 Different Servers! =-----
>
>
>
>
>www.sounds-pa.com | www.thecomputerworkshop.com



-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups - 19 Different Servers! =-----

It may be worth trying CWShredder
http://www.merijn.org/downloads.html
Since you mentioned something trying to hijack the browser.

Taff..........

On Fri, 16 Jan 2004 19:57:10 -0800, Mike <> wrote:

>After running spybot and adaware, removing the entries, antivirus
>found nothing.
>
>
>
>On Sat, 17 Jan 2004 03:46:03 +0000, taff <taff@the-valleys.com> wrote:
>
>>I see that you say it was loaded with spyware, but then say that your
>>AV finds nothing, Have you tried an anti trojan program such as Spybot
>>or Adaware.
>>Adaware http://www.lavasoft.de/support/download/
>>Spybot http://www.safer-networking.org/index.php?page=mirrors
>>
>>Taff...........
>>
>>On Fri, 16 Jan 2004 19:41:36 -0800, Mike <> wrote:
>>
>>>Is there anything (virus related) that might hose up a system's
>>>internet connection - so much so that you can't ping the outside world
>>>from a command prompt? Its not just IE thats messed up.
>>>
>>>I have two systems in the office with this symptom. A week ago there
>>>was only one, it was loaded with spyware.
>>>
>>>Then this week another PC started showing symptoms of something trying
>>>to hijack the web browser -but it too has lost its internet access so
>>>the browser (internet exploerer) fails to display.
>>>
>>>Its driving me nuts trying to track this one down.
>>>
>>>Also, in IE, nothing happens when I click Tools | Internet Options on
>>>the second pc; I get no Options dialog box - nothing.
>>>
>>>The first PC, when I r-click NW Neighborhood, the system prompts me
>>>for a Office 2000 CD ???
>>>
>>>Any ideas? I've just never seen an internet connections get hosed
>>>like this - could it be remenents of a virus? Virus detection
>>>software isn't finding anything.
>>>
>>>Thanks,
>>>
>>>Mike




www.sounds-pa.com | www.thecomputerworkshop.com

Mike <> wrote in news:9mbh00p9rkft6itjd8tct1d9nrq3ach235@4ax.com:

>
> Any ideas? Thanks,
>

Not to be smart here, but how about implementing some security measures on
the Webserver, if you're using IIS.

http://www.itso.iu.edu/howto/iis/#best

Duane

Who mentioned a web server? Its a simple peer-to-peer, no file or
print sharing - no pc can see any other on the network. The network
is there simply to provide internet access to each pc in the
organization.

everyone there is a separate entity - there is no need to share. Its
a shared office space.



On Sat, 17 Jan 2004 04:22:36 GMT, Duane Arnold <notme@notme.com>
wrote:

>Mike <> wrote in news:9mbh00p9rkft6itjd8tct1d9nrq3ach235@4ax.com:
>
>>
>> Any ideas? Thanks,
>>
>
>Not to be smart here, but how about implementing some security measures on
>the Webserver, if you're using IIS.
>
>http://www.itso.iu.edu/howto/iis/#best
>
>Duane
>
>
>



-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups - 19 Different Servers! =-----

Mike <> wrote in news:h7kh00l55ircpvufbpqpesqljka6b96jgr@4ax.com:

> Who mentioned a web server? Its a simple peer-to-peer, no file or
> print sharing - no pc can see any other on the network. The network
> is there simply to provide internet access to each pc in the
> organization.
>
> everyone there is a separate entity - there is no need to share. Its
> a shared office space.
>
>
>
> On Sat, 17 Jan 2004 04:22:36 GMT, Duane Arnold <notme@notme.com>
> wrote:
>
>>Mike <> wrote in news:9mbh00p9rkft6itjd8tct1d9nrq3ach235@4ax.com:
>>
>>>
>>> Any ideas? Thanks,
>>>
>>
>>Not to be smart here, but how about implementing some security
>>measures on the Webserver, if you're using IIS.
>>
>>http://www.itso.iu.edu/howto/iis/#best
>>
>>Duane
>>
>>
>>
>
>
>
> -----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
> http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
> -----== Over 100,000 Newsgroups - 19 Different Servers! =-----
>

>>to hijack the web browse

My bad I saw that. I am going back out for a couple of more beers. <g>

Duane

Not unless I get to go have a few with ya!

On Sat, 17 Jan 2004 06:25:18 GMT, Duane Arnold <notme@notme.com>
wrote:

>Mike <> wrote in news:h7kh00l55ircpvufbpqpesqljka6b96jgr@4ax.com:
>
>> Who mentioned a web server? Its a simple peer-to-peer, no file or
>> print sharing - no pc can see any other on the network. The network
>> is there simply to provide internet access to each pc in the
>> organization.
>>
>> everyone there is a separate entity - there is no need to share. Its
>> a shared office space.
>>
>>
>>
>> On Sat, 17 Jan 2004 04:22:36 GMT, Duane Arnold <notme@notme.com>
>> wrote:
>>
>>>Mike <> wrote in news:9mbh00p9rkft6itjd8tct1d9nrq3ach235@4ax.com:
>>>
>>>>
>>>> Any ideas? Thanks,
>>>>
>>>
>>>Not to be smart here, but how about implementing some security
>>>measures on the Webserver, if you're using IIS.
>>>
>>>http://www.itso.iu.edu/howto/iis/#best
>>>
>>>Duane
>>>
>>>
>>>
>>
>>
>>
>> -----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
>> http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
>> -----== Over 100,000 Newsgroups - 19 Different Servers! =-----
>>
>
>>>to hijack the web browse
>
>My bad I saw that. I am going back out for a couple of more beers. <g>
>
>Duane



-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups - 19 Different Servers! =-----

>>>On Fri, 16 Jan 2004 19:41:36 -0800, Mike <> wrote:
>>>
>>>>Is there anything (virus related) that might hose up a system's
>>>>internet connection - so much so that you can't ping the outside world
>>>>from a command prompt? Its not just IE thats messed up.
>>>>
>>>>I have two systems in the office with this symptom. A week ago there
>>>>was only one, it was loaded with spyware.
>>>>
>>>>Then this week another PC started showing symptoms of something trying
>>>>to hijack the web browser -but it too has lost its internet access so
>>>>the browser (internet exploerer) fails to display.
>>>>
>>>>Its driving me nuts trying to track this one down.
>>>>
>>>>Also, in IE, nothing happens when I click Tools | Internet Options on
>>>>the second pc; I get no Options dialog box - nothing.
>>>>
>>>>The first PC, when I r-click NW Neighborhood, the system prompts me
>>>>for a Office 2000 CD ???
>>>>
>>>>Any ideas? I've just never seen an internet connections get hosed
>>>>like this - could it be remenents of a virus? Virus detection
>>>>software isn't finding anything.
>>>>
>>>>Thanks,
>>>>
>>>>Mike

Refer to Fix 268 from Kelly's site:

http://www.kellys-korner-xp.com/xp_tweaks.htm
Restores All tabs in IE and Removes the ** Internet Options **
Restrictions as well

The cause usually is due to a spyware.

HTH,

BoB

On Fri, 16 Jan 2004 19:41:36 -0800, Mike <unknown> wrote:

> Is there anything (virus related) that might hose up a system's
> internet connection - so much so that you can't ping the outside world
> from a command prompt? Its not just IE thats messed up.

Too many to id it from your description, however given what's been
common lately, I'd check for the qhosts and coolwebsearch trojans,
and also run spybot, and adaware.

http://securityresponse.symantec.co...jan.qhosts.html
http://www.spywareinfo.com/~merijn/cwschronicles.html
http://security.kolla.de/index.php?...n&page=download
http://www.lavasoft.de/support/download/

Note, for spybot and adaware, be sure to download the latest updates,
after you install the program, but before scanning your system.

Then use a known clean boot disk, and run a full av scan.

Also, make http://www.claymania.com/safe-hex.html mandatory reading
for everyone in your office, with a comprehension test after<G>.

Regards, Dave Hodgins
--
Change nomail.afraid.org to rogers.com to reply by email.
(nomail.afraid.org has been set up specfically for
use in usenet. Feel free to use it yourself.)