Solved

Can't access anti virus websites

Posted on 2004-04-12
10
9,234 Views
Last Modified: 2013-11-16
Recently i haven't been able to access anti virus websites, www.symantec.com, www.grisoft.cz, etc. Therefore i can't see what virus i have to get rid of, i also can't updates my virus protection, because i am blocked from the websites. What do i need to do to get rid of this problem.

Thank You.
0
Comment
Question by:winters101stabd
  • 2
  • 2
  • 2
  • +4
10 Comments
 
LVL 24

Expert Comment

by:SunBow
ID: 10807300
Start by installing a blocker, such as personal firewall from ZoneLabs, then upgrade all you MS SW.

Check out your startup folder and event log and taskmanager for offenders. Once they are disposed of, you'll probably have to reload A/V again, if a culprit disabled it. (worst case, rebuild the OS from scratch)

It isn't a virus in many cases, but an adware or spyware that disables AV, if not a remote control program. Disable smpt and so not do online chats or running of suspicious materiel. See SpyBot and Adaware for other detections.
0
 
LVL 14

Expert Comment

by:JohnK813
ID: 10807713
Check your hosts file by opening it in notepad:

c:\windows\system32\drivers\etc\hosts

If you see any entries that look like this:

0.0.0.0     www.symantec.com

or

127.0.0.1     www.symantec.com

or similar for AV sites, delete those lines.

Your browser checks this hosts file before it checks DNS, so some of the new viruses/worms like to modify your hosts file so you can't get to those sites.  Once you delete these lines, you should be able to get to the AV sites.
0
 
LVL 6

Expert Comment

by:dorkestra
ID: 10809985
I agree it sounds like a host file issue. If it truly is host file entries then you'll be able to access these sites numerically by typing their ip's in the address bar

www.grisoft.com is 193.86.103.19

symantec.com is 206.204.212.69

housecall.trendmicro.com is 66.35.255.32
0
 

Author Comment

by:winters101stabd
ID: 10810289
I looked in the host file, and nothing is there.....
Just a little readme paragraph....

Any other ideas?
0
 
LVL 14

Expert Comment

by:JohnK813
ID: 10812642
Another file to check is lmhosts.sam in the same directory (I'm actually not to familiar with the Windows hosts files, but I believe this one is similar to "hosts").

I'd also suggest trying dorkestra's idea of using the IP addresses.  If you do, you may want to just download the latest AV program from scratch, because the updaters still may not work.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 11

Expert Comment

by:PennGwyn
ID: 10815120
The files "hosts" and "lmhosts" are the live ones.  "hosts.sam" and "lmhosts.sam" are SAMples of what these files would look like, supplied with the OS, and nothing actually uses them!  So don't bother with lmhosts.sam.

One of our users here recently couldn't get to any sites.  ping and nslookup were working fine, but the browser couldn't get DNS resolutions.  No idea why -- a reboot fixed it.

0
 
LVL 12

Accepted Solution

by:
rossfingal earned 125 total points
ID: 10815259
Hi!

Download and run CWShredder and Hijack This from the following:

http://www.spywareinfo.com/~merijn/downloads.html

Run CWShredder first.

Good luck!
0
 

Author Comment

by:winters101stabd
ID: 10828312
Rossfingal! That CWShredder program seemed to work. I can now get into www.symantec.com, but when i goto www.grisoft.cz i can get it,  but i can't translate the page to english, so i'm wondering if thats just a problem with their page. (i had been to another anti virus site, and couldn't get to the english section). Thanks for your help.

Sincerely,
Michael.
0
 
LVL 12

Expert Comment

by:rossfingal
ID: 10828688
Hi!

I'm glad someone here could help you!

You could post your Hijack This log here and maybe we could see if there's some type of restriction on Internet Explorer
as regards the language problem.

Thanks and good luck!
0
 

Expert Comment

by:dzappler
ID: 11058198
Hi,

I have just finish solving a problem similar to yours: I could not run any part of my
Norton Internet Security 2004 on Windows 2000. and I could not open the symantec web site.
The reason was a virus on my system that block the web access to symantec and to Norton Internet Security 2004 on my pc.
The solution: go to http://www.pandasoftware.com/activescan/  and scan your pc to remove the virus, then remove Norton Internet Security 2004 and reinstall.

It help me hope it will help you too.

Doron.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Big data transfers via information superhighways require special attention and protection. Learn more about the IT-regulations of the country where your server is located. Analyze cloud providers and their encryption systems for safe data transit. S…
Find out what Office 365 Transport Rules are, how they work and their limitations managing Office 365 signatures.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now