Virus message! - Page 3

Grampy · 22-08-2004, 10:11

Quote:

Originally Posted by greencreeper

Open a command prompt again and type:

ipconfig /all > c:\windows\desktop\ipconfig.txt

A file should appear on your desktop - post the contents.

Here is the contents of the file

Windows 98 IP Configuration
Host Name . . . . . . . . . : BAGPUSS
DNS Servers . . . . . . . . : 212.250.1.6
Node Type . . . . . . . . . : Broadcast
NetBIOS Scope ID. . . . . . :
IP Routing Enabled. . . . . : Yes
WINS Proxy Enabled. . . . . : No
NetBIOS Resolution Uses DNS : No

0 Ethernet adapter :
Description . . . . . . . . : PPP Adapter.
Physical Address. . . . . . : 44-45-53-54-00-00
DHCP Enabled. . . . . . . . : Yes
IP Address. . . . . . . . . : 0.0.0.0
Subnet Mask . . . . . . . . : 0.0.0.0
Default Gateway . . . . . . :
DHCP Server . . . . . . . . : 255.255.255.255
Primary WINS Server . . . . :
Secondary WINS Server . . . :
Lease Obtained. . . . . . . :
Lease Expires . . . . . . . :

1 Ethernet adapter :
Description . . . . . . . . : Microsoft TV/Video Connection
Physical Address. . . . . . : 00-00-00-00-00-00
DHCP Enabled. . . . . . . . : No
IP Address. . . . . . . . . : 3.0.0.2
Subnet Mask . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . :
Primary WINS Server . . . . :
Secondary WINS Server . . . :
Lease Obtained. . . . . . . :
Lease Expires . . . . . . . :

2 Ethernet adapter :
Description . . . . . . . . : F5D5000, PCI Card/Desktop Network PCI Card
Physical Address. . . . . . : 00-30-BD-1A-C7-C1
DHCP Enabled. . . . . . . . : No
IP Address. . . . . . . . . : 192.168.0.1
Subnet Mask . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . :
Primary WINS Server . . . . :
Secondary WINS Server . . . :
Lease Obtained. . . . . . . :
Lease Expires . . . . . . . :

3 Ethernet adapter :
Description . . . . . . . . : ICSHARE Adapter.
Physical Address. . . . . . : 00-02-8A-60-36-A5
DHCP Enabled. . . . . . . . : Yes
IP Address. . . . . . . . . : 81.103.***.*** (Mod Edit - have removed ip)
Subnet Mask . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . : 81.103.***.***(My Edit - have removed address)
DHCP Server . . . . . . . . : 62.252.32.20
Primary WINS Server . . . . :
Secondary WINS Server . . . :
Lease Obtained. . . . . . . : 08 22 04 10:03:24
Lease Expires . . . . . . . : 08 22 04 10:33:24

Hope this helps

KraGorn · 22-08-2004, 10:51

Quote:

Originally Posted by Grampy

Microsoft(R) Windows 98
(C)Copyright Microsoft Corp 1981-1999.

C:\WINDOWS\Desktop>tracert pop.ntlworld.com
...SNIP...

This what I get when I type tracert pop.ntlworld.com

Hope it helps Off to bed now

It tells us you PC can resolve the name and seems to be able to reach the POP server .. in which case normally one would conclude one of:

1) there's no POP server running on the target machine
2) their firewall is blocking connection attempts to the POP server
3) you have a firewall on your PC which is blocking outbound connection attempts to their POP server
4) you have a firewall blocking the response
5) any other reason I can't think of

(4) is extremely unlikely of the rest it's hard to say .. 'fraid right now I'm a bit stumped, not sure what greencreeper was looking for in that ipconfig output, my knowledge of that is limited but I don't see anything amiss.

Grampy · 22-08-2004, 11:52

Quote:

Originally Posted by KraGorn

It tells us you PC can resolve the name and seems to be able to reach the POP server .. in which case normally one would conclude one of:

1) there's no POP server running on the target machine
2) their firewall is blocking connection attempts to the POP server
3) you have a firewall on your PC which is blocking outbound connection attempts to their POP server
4) you have a firewall blocking the response
5) any other reason I can't think of

(4) is extremely unlikely of the rest it's hard to say .. 'fraid right now I'm a bit stumped, not sure what greencreeper was looking for in that ipconfig output, my knowledge of that is limited but I don't see anything amiss.

Tried turning off firewall but all responses are the same
Thanks for you input

I had thought that someone may have obtained my e-mail password and is using my address, so ntl are blocking access. I have just changed my password so will see if there is any improvement as time goes on, but I'm not holding my breath.

I tried using a different pc to log on to my e-mails and the blocking is also an that machine and IE on that machine has the virus alert page as well now.

greencreeper · 22-08-2004, 11:57

Quote:

Originally Posted by KraGorn

(4) is extremely unlikely of the rest it's hard to say .. 'fraid right now I'm a bit stumped, not sure what greencreeper was looking for in that ipconfig output, my knowledge of that is limited but I don't see anything amiss.

I was wondering why pop.ntlworld.com resolves to 212.250.1.6 instead of the actual IP address of the pop server which is 62.253.162.50. I've just done a DNS lookup on the 212.250.1.6 address and it resolves to outbreak.ntli.net, which rather suggests you're still in the walled garden and you won't ever leave the garden until NTL let you out. Phone them (again)

It's high time NTL dropped the flaming walled garden - causes far more trouble than it solves.

Grampy · 22-08-2004, 14:32

Quote:

Originally Posted by greencreeper

I was wondering why pop.ntlworld.com resolves to 212.250.1.6 instead of the actual IP address of the pop server which is 62.253.162.50. I've just done a DNS lookup on the 212.250.1.6 address and it resolves to outbreak.ntli.net, which rather suggests you're still in the walled garden and you won't ever leave the garden until NTL let you out. Phone them (again)

It's high time NTL dropped the flaming walled garden - causes far more trouble than it solves.

NTL are insisting that I still have a virus even though I've run stinger, Avg & panda online virus checker. How can I insist on them releasing me.
I have also been contacted by several people who have sent me e-mails (which I have received using webmail to access my account) but they are being told that they are undeliverable!!

paulyoung666 · 22-08-2004, 14:36

Quote:

Originally Posted by Grampy

NTL are insisting that I still have a virus even though I've run stinger, Avg & panda online virus checker. How can I insist on them releasing me.
I have also been contacted by several people who have sent me e-mails (which I have received using webmail to access my account) but he is being told that they are undeliverable!!

it looks as though that is going to be the only way i am afraid , when you ring them ask for a supervisor and see if that helps , or is there an ntl office near you , it might help to knock on the door and see what happens

greencreeper · 22-08-2004, 17:01

Quote:

Originally Posted by paulyoung666

it looks as though that is going to be the only way i am afraid , when you ring them ask for a supervisor and see if that helps , or is there an ntl office near you , it might help to knock on the door and see what happens

Agree. Be pushy - threaten to withhold payment. Sounds like they're treating you as yet another muppet user with a virus.

I don't know why NTL staff have such faith in NTL systems

KraGorn · 23-08-2004, 17:09

Quote:

Originally Posted by greencreeper

I was wondering why pop.ntlworld.com resolves to 212.250.1.6 instead of the actual IP address of the pop server which is 62.253.162.50. I've just done a DNS lookup on the 212.250.1.6 address and it resolves to outbreak.ntli.net, which rather suggests you're still in the walled garden and you won't ever leave the garden until NTL let you out. Phone them (again)

Gotcha, didn't consider that. :o

Grampy · 04-10-2004, 19:06

Sorry for such a delay getting back to you all. Finally got round to talking to someone with sense at ntl world and it looks like I am out of the walled garden.
greencreeper was correct about the dns address being incorrect. I'll keep my fingers crossed for a few days to make sure it's ok. Thanks to everyone for your help.

greencreeper · 04-10-2004, 20:24

Quote:

Originally Posted by Grampy

Sorry for such a delay getting back to you all. Finally got round to talking to someone with sense at ntl world and it looks like I am out of the walled garden.
greencreeper was correct about the dns address being incorrect. I'll keep my fingers crossed for a few days to make sure it's ok. Thanks to everyone for your help.

Glad you got out

paulyoung666 · 04-10-2004, 20:38

Quote:

Originally Posted by Grampy

Sorry for such a delay getting back to you all. Finally got round to talking to someone with sense at ntl world and it looks like I am out of the walled garden.
greencreeper was correct about the dns address being incorrect. I'll keep my fingers crossed for a few days to make sure it's ok. Thanks to everyone for your help.

a result in the end , its a shame it took so long

Grampy · 11-10-2004, 12:20

Well I had it sorted for two days then it went completely (no internet connection at all) so contacted NTL again they ended up sending an engineer to check modem. He said the signal was too strong fitted a thingy(forward path attenuator 10db) on the input of the modem. All seems ok again.

Again thanks for all your help.