Avatar of TechComposer
TechComposer
 asked on

Cannot access microsoft.com

I cannot access any microsoft-related websites from a couple of computers on my network.  Others work just fine, however.  On the problem computers, I don't seem to have problems with any other websites.  I have looked through several posts both here and elsewhere that deal with this problem.  I gone through all the solutions that others have found to no avail, but perhaps I have overlooked something.

My hosts file is clean.  Ewido hasn't turned up any malware.  My HijackThis log is posted here: http://www.rafb.net/paste/results/jfREDf64.html.  I have already gone through one HijackThis log, looked up each line, and addressed each entry accordingly.  But again, I may have missed something.  Where should I look next?

Thanks,
Brennon
Security

Avatar of undefined
Last Comment
prashsax

8/22/2022 - Mon
Will Szymkowski

Hello there,

Have you tried clearing any temp files that are on the machine. Also, have you tried a different web broswer to access the sites?
zephyr_hex (Megan)

what happens when you try to browse to microsoft.com?
have you checked your hosts file?
what browser (and version) are you using?

your analyzed hijackthis log:
http://www.hijackthis.de/logfiles/90feb393f2d29872b64f87f86290caa0.html
zephyr_hex (Megan)

the nmnsp.dll entry is an indication that you have malware...
http://www.castlecops.com/lsps-n.html
http://www.castlecops.com/lsp-4.html

All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
TechComposer

ASKER
Cleared out temp files...problem still exists.

Tried accessing www.microsoft.com through Firefox.  Error is:  Server not found.  Firefox can't find the server at www.microsoft.com

When using IE, error is: Cannot find server.  The Page cannot be displayed...blah, blah, blah.

Hosts file is clean.  Only one entry other than 127.0.0.1.  This entry is for a wireless connection to my printer.

Using 128-bit IE 6.0.2900.2180.xpsp_sp2_gdr.050301-1519

nmnsp.dll and cespy.dll is from software that I have installed.  I have it installed on several other machines that are not experiencing this problem.

Thank you for your continued help,
BB
prashsax

Try and do a nslookup for microsoft.com

open command prompt.
>nslookup microsoft.com

This should return an IP address.

Then, in IE window Address bar, put http://IP_ADDRESS.

If nslookup does not resolve to any IP address, then check if these machines are pointing to the corrent DNS servers.

You can also, try and do a tracert to microsoft.com

Are, you using proxy server to access the internet, or is it a NAT connection from firewall?

TechComposer

ASKER
"nslookup microsoft.com" output:

Server: rti01.rti.local
Address: 192.168.1.34

Non-authoritative answer:
Name: microsoft.com
Addresses: 207.46.250.119, 207.46.130.108

Attempting to browse to either of these IPs yields same results.

"tracert microsoft.com" results:

Tracing route to microsoft.com [207.46.250.119]
over a maximum of 30 hops:

  1     *        *        *     Request timed out.
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *        *     Request timed out.
  5     *        *        *     Request timed out.
  6     *        *        *     Request timed out.
  7     *        *        *     Request timed out.
  8     *        *        *     Request timed out.
  9     *        *        *     Request timed out.
 10     *        *        *     Request timed out.
 11     *        *        *     Request timed out.
 12     *        *        *     Request timed out.
 13     *        *        *     Request timed out.
 14     *        *        *     Request timed out.
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17     *        *        *     Request timed out.
 18     *        *        *     Request timed out.
 19     *        *        *     Request timed out.
 20     *        *        *     Request timed out.
 21     *        *        *     Request timed out.
 22     *        *        *     Request timed out.
 23     *        *        *     Request timed out.
 24     *        *        *     Request timed out.
 25     *        *        *     Request timed out.
 26     *        *        *     Request timed out.
 27     *        *        *     Request timed out.
 28     *        *        *     Request timed out.
 29     *        *        *     Request timed out.
 30     *        *        *     Request timed out.

Trace complete.

These machines are connected through static NAT connections to our firewall.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
prashsax

Please check, if this machine has default gateway defined in the network connection properties.

Can you paste, ipconfig /all here.
TechComposer

ASKER
BTW, machines are running Symantec Client Firewall 8.6.2.133 and Symantec Antivirus 10.0.2.2000.
TechComposer

ASKER
Default gateway is defined explicitly in network connection properties as 192.168.1.1.

"ipconfig /all" output:

Windows IP Configuration

        Host Name . . . . . . . . . . . . : RTILAPTOP03
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Wireless Network Connection 3:

        Media State . . . . . . . . . . . : Media disconnected
        Description . . . . . . . . . . . : Intel(R) PRO/Wireless 2200BG Network Connection
        Physical Address. . . . . . . . . : 00-0E-35-9C-18-17

Ethernet adapter Local Area Connection 2:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet NIC
        Physical Address. . . . . . . . . : 00-0B-5D-72-43-E3
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.1.35
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.1.1
        DNS Servers . . . . . . . . . . . : 192.168.1.34
Your help has saved me hundreds of hours of internet surfing.
fblack61
prashsax

Ok,

Please disable the Norton firewall.
Let the antivirus run.

Also, try connecting to this IP address.
http://64.4.52.246
TechComposer

ASKER
I'm a bit confused.  Did you mean, "let the antivirus run" as in, "turn off firewall, but leave antivirus on"?  Or, "turn off firewall, and perform a virus scan"?

Either way, disabling firewall does not help.

I can successfully connect to TechNet at http://64.4.52.246
ASKER CERTIFIED SOLUTION
Kerem ERSOY

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ouksras

- Have you ever try to edit your hosts file in folder "c:\windows\system32\drivers\etc\"?
- If not, could you open this file in notepad application and then find
"127.0.0.1       www.microsoft.com" and delete this line or you can delete all line that begin with  "127.0.0.1" except "127.0.0.1    localhost".
- then restart your computer
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Mohamed Osama

use the entries from nslookup in your hosts file lets see how far this goes :)
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.