kinsey
asked on
Querky ICS on XP/NT
I have MS-ICS running on windows XP
Clients are
Win98
Linux
NT4.0
all clients were working but suddenly IE5.5 in the NT stopped working. The other clients still work.
On NT:
ipconfig /all looks normal
I can ping internal and external hosts by name/number
I can telnet to extermal and internal hosts
IE can resolve names to addresses but never displays any results. It just times-out.
I also run 'norton anti virus 2001' on it. LiveUpdate fails to connect to Symantec.
netstat -an shows an ESTABLISHED connection to the correct IP address but no results are delivered.
Any ideas? I think it got hacked but I don't know how.
I was working near the system when I noticed alot of disk/network activity going on. When i checked I could not identify the reason for the activity so did a restart.
After the restart -- no IE.
The internet connection comes through the XP box.
PCanywhere is maped via NAT to the NT but it does not show any unexpected connections in the log.
harold
Clients are
Win98
Linux
NT4.0
all clients were working but suddenly IE5.5 in the NT stopped working. The other clients still work.
On NT:
ipconfig /all looks normal
I can ping internal and external hosts by name/number
I can telnet to extermal and internal hosts
IE can resolve names to addresses but never displays any results. It just times-out.
I also run 'norton anti virus 2001' on it. LiveUpdate fails to connect to Symantec.
netstat -an shows an ESTABLISHED connection to the correct IP address but no results are delivered.
Any ideas? I think it got hacked but I don't know how.
I was working near the system when I noticed alot of disk/network activity going on. When i checked I could not identify the reason for the activity so did a restart.
After the restart -- no IE.
The internet connection comes through the XP box.
PCanywhere is maped via NAT to the NT but it does not show any unexpected connections in the log.
harold
Was IIS on the NT box ?
Have you checked for any of the newer worms Code Red 1 and 2 etc ?? Nimda ??
Have you Checked the IE version and try to do a repair from the add/remove in the Control panel - choosing remove gives you a repair option.
Also reapply sp6a and any security patches.
I hope this helps !
Have you checked for any of the newer worms Code Red 1 and 2 etc ?? Nimda ??
Have you Checked the IE version and try to do a repair from the add/remove in the Control panel - choosing remove gives you a repair option.
Also reapply sp6a and any security patches.
I hope this helps !
ASKER
SysExpert ,
No IIS running on the box, Norton AV 2001 found no viruses.
I ran a IE repair and rebooted with no change.
I'm running NT4.0sp4a.
I manualy flushed the routing table and rebuilt by hand.
After several re-bootx of both the NT and XP boxes it started working.
Got no idea what was going on.
Oh well it's all MS to me ;)
No IIS running on the box, Norton AV 2001 found no viruses.
I ran a IE repair and rebooted with no change.
I'm running NT4.0sp4a.
I manualy flushed the routing table and rebuilt by hand.
After several re-bootx of both the NT and XP boxes it started working.
Got no idea what was going on.
Oh well it's all MS to me ;)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
https://www.experts-exchange.com/jsp/memberProfile.jsp?mbr=kinsey
kinsey---> Of the 20 questions you've asked here, 10 remain open and await your update/finalization. They are listed below. If you need help in terms of splitting points or other special handling needs, just comment here with details.
https://www.experts-exchange.com/jsp/qShow.jsp?ta=java&qid=20140724
https://www.experts-exchange.com/jsp/qShow.jsp?ta=java&qid=20125266
https://www.experts-exchange.com/jsp/qShow.jsp?ta=apache&qid=20234895
https://www.experts-exchange.com/jsp/qShow.jsp?ta=apache&qid=20225030
https://www.experts-exchange.com/jsp/qShow.jsp?ta=networkgen&qid=20221526
https://www.experts-exchange.com/jsp/qShow.jsp?ta=linuxnet&qid=20264099
https://www.experts-exchange.com/jsp/qShow.jsp?ta=linuxnet&qid=20250945
https://www.experts-exchange.com/jsp/qShow.jsp?ta=linuxnet&qid=20250934
https://www.experts-exchange.com/jsp/qShow.jsp?ta=lotusnotes&qid=11651718
https://www.experts-exchange.com/jsp/qShow.jsp?ta=sendmail&qid=20102872
I'll return in one week to check progress.
Thanks,
Moondancer
Community Support Moderator @ Experts Exchange
kinsey---> Of the 20 questions you've asked here, 10 remain open and await your update/finalization. They are listed below. If you need help in terms of splitting points or other special handling needs, just comment here with details.
https://www.experts-exchange.com/jsp/qShow.jsp?ta=java&qid=20140724
https://www.experts-exchange.com/jsp/qShow.jsp?ta=java&qid=20125266
https://www.experts-exchange.com/jsp/qShow.jsp?ta=apache&qid=20234895
https://www.experts-exchange.com/jsp/qShow.jsp?ta=apache&qid=20225030
https://www.experts-exchange.com/jsp/qShow.jsp?ta=networkgen&qid=20221526
https://www.experts-exchange.com/jsp/qShow.jsp?ta=linuxnet&qid=20264099
https://www.experts-exchange.com/jsp/qShow.jsp?ta=linuxnet&qid=20250945
https://www.experts-exchange.com/jsp/qShow.jsp?ta=linuxnet&qid=20250934
https://www.experts-exchange.com/jsp/qShow.jsp?ta=lotusnotes&qid=11651718
https://www.experts-exchange.com/jsp/qShow.jsp?ta=sendmail&qid=20102872
I'll return in one week to check progress.
Thanks,
Moondancer
Community Support Moderator @ Experts Exchange
ASKER
You had the only respose, so I guess you win
Sorry, kinsey, our Experts take great pride in excellence and delivering just that. A "C" Grade is the lowest grade we have and deserves an explanation. If this was given in error, I can correct that. The points to you are the same, but the points granted to the experts who give of their free time to help is a direct result of the grade. More about grading here:
https://www.experts-exchange.com/questions/20310437/Proper-Grading.html
Thank you,
Moondancer - EE Moderator
https://www.experts-exchange.com/questions/20310437/Proper-Grading.html
Thank you,
Moondancer - EE Moderator
ASKER
1. Using RAS to connect to ISP every thing works.
2. Using a Win98 box to connect to DSL and SolidShare software ( NAT/router ) everything works.
3. Using XP to connect to DSL and MS-ICS the Win98 box works, the Linux box works, but the NT box can only get to some web sites. ( I've tried a number of different ones an have ONLY been succesful loading home.netscape.com, Yahoo, Exite, AOL, MSN, Microsoft, my.netscape.com..... other will not download ??????) PCanywhere will not work over the internet but ping works for external hosts by name or IP address, and I can telnet to outside hosts.
PCanywhere, telent, MS-networking, IE, and.... everything works on internal network.
This is REAL strange.
harold