Link to home
Create AccountLog in
Avatar of TechComposer
TechComposer

asked on

Cannot access microsoft.com

I cannot access any microsoft-related websites from a couple of computers on my network.  Others work just fine, however.  On the problem computers, I don't seem to have problems with any other websites.  I have looked through several posts both here and elsewhere that deal with this problem.  I gone through all the solutions that others have found to no avail, but perhaps I have overlooked something.

My hosts file is clean.  Ewido hasn't turned up any malware.  My HijackThis log is posted here: http://www.rafb.net/paste/results/jfREDf64.html.  I have already gone through one HijackThis log, looked up each line, and addressed each entry accordingly.  But again, I may have missed something.  Where should I look next?

Thanks,
Brennon
Avatar of Will Szymkowski
Will Szymkowski
Flag of Canada image

Hello there,

Have you tried clearing any temp files that are on the machine. Also, have you tried a different web broswer to access the sites?
what happens when you try to browse to microsoft.com?
have you checked your hosts file?
what browser (and version) are you using?

your analyzed hijackthis log:
http://www.hijackthis.de/logfiles/90feb393f2d29872b64f87f86290caa0.html
the nmnsp.dll entry is an indication that you have malware...
http://www.castlecops.com/lsps-n.html
http://www.castlecops.com/lsp-4.html

Avatar of TechComposer
TechComposer

ASKER

Cleared out temp files...problem still exists.

Tried accessing www.microsoft.com through Firefox.  Error is:  Server not found.  Firefox can't find the server at www.microsoft.com

When using IE, error is: Cannot find server.  The Page cannot be displayed...blah, blah, blah.

Hosts file is clean.  Only one entry other than 127.0.0.1.  This entry is for a wireless connection to my printer.

Using 128-bit IE 6.0.2900.2180.xpsp_sp2_gdr.050301-1519

nmnsp.dll and cespy.dll is from software that I have installed.  I have it installed on several other machines that are not experiencing this problem.

Thank you for your continued help,
BB
Try and do a nslookup for microsoft.com

open command prompt.
>nslookup microsoft.com

This should return an IP address.

Then, in IE window Address bar, put http://IP_ADDRESS.

If nslookup does not resolve to any IP address, then check if these machines are pointing to the corrent DNS servers.

You can also, try and do a tracert to microsoft.com

Are, you using proxy server to access the internet, or is it a NAT connection from firewall?

"nslookup microsoft.com" output:

Server: rti01.rti.local
Address: 192.168.1.34

Non-authoritative answer:
Name: microsoft.com
Addresses: 207.46.250.119, 207.46.130.108

Attempting to browse to either of these IPs yields same results.

"tracert microsoft.com" results:

Tracing route to microsoft.com [207.46.250.119]
over a maximum of 30 hops:

  1     *        *        *     Request timed out.
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *        *     Request timed out.
  5     *        *        *     Request timed out.
  6     *        *        *     Request timed out.
  7     *        *        *     Request timed out.
  8     *        *        *     Request timed out.
  9     *        *        *     Request timed out.
 10     *        *        *     Request timed out.
 11     *        *        *     Request timed out.
 12     *        *        *     Request timed out.
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17     *        *        *     Request timed out.
 18     *        *        *     Request timed out.
 19     *        *        *     Request timed out.
 20     *        *        *     Request timed out.
 21     *        *        *     Request timed out.
 22     *        *        *     Request timed out.
 23     *        *        *     Request timed out.
 24     *        *        *     Request timed out.
 25     *        *        *     Request timed out.
 26     *        *        *     Request timed out.
 27     *        *        *     Request timed out.
 28     *        *        *     Request timed out.
 29     *        *        *     Request timed out.
 30     *        *        *     Request timed out.

Trace complete.

These machines are connected through static NAT connections to our firewall.
Please check, if this machine has default gateway defined in the network connection properties.

Can you paste, ipconfig /all here.
BTW, machines are running Symantec Client Firewall 8.6.2.133 and Symantec Antivirus 10.0.2.2000.
Default gateway is defined explicitly in network connection properties as 192.168.1.1.

"ipconfig /all" output:

Windows IP Configuration

        Host Name . . . . . . . . . . . . : RTILAPTOP03
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Wireless Network Connection 3:

        Media State . . . . . . . . . . . : Media disconnected
        Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network Connection
        Physical Address. . . . . . . . . : 00-0E-35-9C-18-17

Ethernet adapter Local Area Connection 2:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet NIC
        Physical Address. . . . . . . . . : 00-0B-5D-72-43-E3
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.1.35
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.1.1
        DNS Servers . . . . . . . . . . . : 192.168.1.34
Ok,

Please disable the Norton firewall.
Let the antivirus run.

Also, try connecting to this IP address.
http://64.4.52.246
I'm a bit confused.  Did you mean, "let the antivirus run" as in, "turn off firewall, but leave antivirus on"?  Or, "turn off firewall, and perform a virus scan"?

Either way, disabling firewall does not help.

I can successfully connect to TechNet at http://64.4.52.246
ASKER CERTIFIED SOLUTION
Avatar of Kerem ERSOY
Kerem ERSOY

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
- Have you ever try to edit your hosts file in folder "c:\windows\system32\drivers\etc\"?
- If not, could you open this file in notepad application and then find
"127.0.0.1       www.microsoft.com" and delete this line or you can delete all line that begin with  "127.0.0.1" except "127.0.0.1    localhost".
- then restart your computer
use the entries from nslookup in your hosts file lets see how far this goes :)
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account