Question:
Internet Explorer will not allow me to acess the synmantec.com homepage. I seem to always receive the page "cannot find server" and "this page cannot be displayed". I have a broadband connection and I seem to be able to view any web page except for this one. I need access to this page to run a live update on my Norton 2004 antivirus software. Can anyone help????
Its driving me NUTSS!!!!!
Answers:
Erm - the homepage is but I suspect this was just a spelling mistake (synmantec) while posting.
Can you get to or securityresponse.symantec.com?
Are you navigating using Internet Explorer to Symantec.com or running liveupdate itself (and it is failing to contact the site during the update process)?
Try checking your hosts file for an entry for symantec.com (in XP the file is in C:\windows\system32\drivers\etc) - edit it in notepad and look for an entry for symantec along the lines of:
127.0.0.1
if there is one there then delete the whole line.
There are more tests you can do to make sure your PC is getting the right address for symantec if none of this helps.
Answers:
I have the same problem
Answers:
All the time or just recently?
I can get through just fine to all of them (and have have refreshed the page so it is not cached!
***Added***
I have been browsing for this problem, you may have been hit by a virus which modifies your hosts file (as per my first post) to prevent you from getting to Anti Virus Vendors sites. !Please check this first - note that the virus may have put a ton of blank lines in so make sure you scroll all the way down! You can also try going to a command prompt and type
ping
See what it resolves to (it shouldn't be 127.0.0.1).
More info here:
Answers:
Reset your hosts.txt file. To do this, go into notepad...
Click Start > Programs > Accessories > Notepad
... and straight away click ...
File > Save
... and navigate to the windows directory (normally Local disk c: and then windows). Change the file name to save to 'hosts.txt' and click save.
To protect yourself from further changes, find the file hosts.txt and right click using the right hand mouse button. Then click on properties. Finally click the box that says read only.
Answers:
Couple of small things, the file used by windows for name resolution is called 'hosts' (no extension) !not 'hosts.txt', and where it is kept depends on which version of windows you are using.
Windows 95/98 etc keep it in C:\Windows
Windows NT, XP keep it in C:\Windows\system32\drivers\etc
However, marking it as read only is a good tip (which I had not heard of before) as long as it does not break anything (and offhand I can't think anything it would break)
Answers:
OK loads of people have posted different things but can someone post step by step what I need to do!
Cheers,
wirm
Answers:
Hi Wirm,
I see you're looking for another browser - good idea as you should be able to get to the security websites to sort out your problem.
Answers:
Wirm,
If you are having difficulty sorting this out (I had so many things popping up literally every minute so kept losing track when I had trojan problems) - post on this forum . You will need to post a copy of . Save a copy first after scanning with hijackthis & post it to the forum.
Answers:
Wirm
Your problem may be less serious than Fran's was. !
1st check to see if you have had your hosts file hijacked:
1. !Navigate in explorer to C:\windows\system32\drivers\etc (if you are using XP) or c:\windows (if you are using windows 95/98)
2. !Double click on the file 'hosts' and when you are asked what to use to open it choose notepad.
3. !Look for an entry for symantec along the lines of:
127.0.0.1 ! ! ! !
(I put these the wrong way round originally - sorry)
if there is one there then delete the whole line. !In fact, unless you have put anything in there yourself the only one that belongs there is
127.0.0.1 ! localhost
2nd !Update your antivirus and it should find the virus responsible.
More information can be found at
Fran,
FYI if wirm cannot get to Symantec through IE and it is due to a hijacked hosts file, no browser at all will work. !I have just tested this by adding the entry
127.0.0.1 !
to my own hosts file and it kills both browsers.
Answers:
Ok I can get into the website using Mozilla Firefox!
In the folder you said, I have got two hosts files
1. Hosts (Format: File)
2. Hosts (Format: ICS)
Answers:
The hosts file used by the system for looking up IP addresses is the one of type 'File'
ICS is used for Mozilla Calendar information, outlook calendar files and several others (apparently it is anyway, it was a new one on me)
Seeing that you can get to the website using Mozilla it may be an IE specific thing though - but still give it a check just in case !???
Answers:
There ain't anything in it that shoudldn't be there!
I have changed to Mozilla from now on! ;D
Answers:
I must admit - I'd love to have a look at your PC and figure it out. The generic programs I use to clean PC's like Adaware and Hijack this may produce some interesting results, along with a full virus scan. But as long as you are happy with Mozilla and can get your updates that the main thing
Answers:
lol! Well I have Adaware and it isn't showing anything up!
If you really want i could pm you the hijak log?
Answers:
Go on then, I'll let you know if I see anything that stands out.
Answers:
Nigel,
Did you sort out your problem?
Wirm,
Let us know what it was that gave you problems if you find out. Thanks.
Answers:
Logfile of HijackThis v1.97.7
Scan saved at 19:18:26, on 05/10/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\System32\iosdt\iosdt.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 9.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\wirm\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: (no name) - !!06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - !!8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 9.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [hp 1000 firmware] C:\Program Files\hp LaserJet 1000\fwdl.exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" +c
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: !!166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) -
O16 - DPF: !!31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) -
O16 - DPF: !!3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://E:\content\include\XPPatchInstaller.CAB
O16 - DPF: !!3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) -
O16 - DPF: !!4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) -
O16 - DPF: !!56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) -
O16 - DPF: !!8B1BC605-C593-4865-8F5B-05517F0CD0BB} (MSSecurityAdvisorCD Class) - file://E:\Content\include\msSecUcd.cab
O16 - DPF: !!8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
O16 - DPF: {A8658086-E6AC-4957-BC8E-8D54A7E8A790} (GDIChk Object) -
O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) - file://E:\SuperCD\IntraLaunch.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) -
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
O17 - HKLM\System\CCS\Services\Tcpip\..\!!8E7AE71A-69FE-4D7E-AA82-1CFB0462A9BA}: NameServer = 194.168.4.100 194.168.8.100
Answers:
Thanks in advance!
Answers:
Nothing that I can see that is too exciting (but I have spent all day looking at a Office 2003 issue so my eyes are blurring)
Taking this right back to the basics,
Clear Internet Explorers History, (Tools -> Internet Options, 'Clear History' - otherwise
1. Is it only that you cannot get to, ie - works OK?
2. When you open a command prompt and type 'ping www.symantec.com', what comes back?
3. Go into IE, select Tools->Internet Options. Select the connections Tab and let me know the settings, particually anything listed in the LAN settings area.
4. This is a really tenuous one, can you get to the following site:
5. Even more tenuous, do you have zonealarm and the XP firewall both turned on? (I just found this on the web - it could be total rubbish)
In addition to this I must really apologise to nigelclose, who started my rants on this thread but has not had a word in since. Has any of this helped you, or if you have solved it then put me out of my misery. It's not making sense and it's driving me mad.