Computer Support Forum

ICMP Destination Unreachable warning

Question: ICMP Destination Unreachable warning

Just happen to read my last attack notice
.
It gave a source IP address
Destination port: N/A
Attack type: ICMP Destination Unreachable

There were four entries of this in 2 minutes, in my firewall log. Any ideas what this is?

Thanks

Relevance 100%
Preferred Solution: ICMP Destination Unreachable warning

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: ICMP Destination Unreachable warning

These are usually just ping entries. Some applications and sites use them just to check on the validity of connections. It's possible someone was scanning ports, but that really depends on the pattern, and more sophisticted scanners use a scattered pattern that is not so easily detected by firewalls.

In any case, it was blocked. In some cases, you may find that you need to allow some ICMP traffic for applications to work correctly.

1 more replies
Relevance 79.95%

How can i generate an ICMP Type 3 Code:3(Port unreachable message) using the command line? i tried to telnet to another computer, ping etc and i just can't seem to be able to generate my own ICMP (port unreachable) messages? I also need to do Host unreachable(Type 3 Code 1)?

I cant figure this out.

I need to do this and then capture it in wireshark.

i got the network unreachable by turning off my router and pinging a made up adress.
 

Answer:Quick Networking Question: Generate ICMP Type 3( Port unreachable)

http://www.hping.org/
 

1 more replies
Relevance 79.54%

I have a number of XP and W7 PCs in a domain with internet connection, all working fine.

I've wired my Linux laptop to the network, DHCP, and it can talk to other devices on the network. But I can't get connected to any site outside the network - ping to any external address gives "192.168.1.1 Destination Net Unreachable" 192.168.1.1 is the correct address for the router, and any Windows machine can ping to any address via that same router.

Any ideas please?
Stuart
 

More replies
Relevance 79.54%

Hi,When I ping one IP
Sometimes the below error:
What is difference between?
 Destination net unreachable.
 Destination Host unreachable.

Answer: Destination net unreachable.

Here are answers to your problems
http://www.corenetworkz.com/2009/05/destination-host-unreachable-reason-and.html
http://www.corenetworkz.com/2009/05/destination-net-unreachable-icmp-error.html
For problém diagnostics you will need to analyze output from ipconfig /all, from routing tables when you work behind local network and network analyzer for detailed analysis of packet exchane (Wireshark will do the trick)
Regards
Milos

2 more replies
Relevance 79.54%

that was shown when i ping yahoo.com,.
my internet connection is working properly,.
sometimes when i ping yahoo.com i get,.
reply from xxx.xxx.xxx.xxx: bytes =23 time=192ms TTL=46
after 5 to 10 mins.
i get destination net unreachable.,.
can u please help me,.
tnx in advance,.,
 

Answer:Destination net unreachable

13 more replies
Relevance 79.54%

Did a trace to help solve some possible instability in my connection. After 6 hops I got the title of the thread. Not sure how to translate it. It may be an MTU size issue? Would appreciate any insights. Thanks

F:\Users\dave>tracert cox.com

Tracing route to cox.com [24.248.75.200]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms esr9850.esr9850 [192.168.0.1]
2 7 ms 8 ms 11 ms 10.65.20.1
3 9 ms 9 ms 10 ms 98.172.172.192
4 9 ms 7 ms 7 ms 98.172.172.129
5 62 ms 73 ms 28 ms dukedsrj01-ge-210.0.rd.at.cox.net [68.1.1.121]
6 lkhndsrc01-pos0901.rd.at.cox.net [68.1.0.5] reports: Destination net unrea
chable.

Trace complete.
 

Answer:Destination net unreachable?

The router at that point has no idea how to get there.
 

9 more replies
Relevance 79.54%

I have the same issue with my computer network connection. And the error message says
192.168.1.1: Destination net unreachable

Can you guys pleae help out on this. I need this very urgently.
 

Answer:Destination net unreachable

Even though it appears you're having the same problem, please start a new thread when you have a new issue. It's very difficult to keep two problems straight and who's working on what in a single thread.

I've created a new thread for your issue here.

Note: You will need to post complete details of your configuration and your specific issue in this new thread for us to help you.

Thanks for your cooperation.
 

2 more replies
Relevance 78.72%

Hi,
My question is:-
i have a server which do not accept the ping request and throws destination host unreachable when i try to ping it from some of my client machines.  i have done so far is :-
1) TURNED ON THE NETWORK DISCOVERY ON THE CLIENT MACHINE.
2)TURNED OFF THE FIREWALL ON THE CLIENT MACHINE.
 nothing is working.  please help..

thanks in advance for a working reply.

More replies
Relevance 78.72%

Hi,

I have frequent internet connection lately after buying a new wireless router after the old one got broken.. I tried pinging the google to know whether i am still connected or losing my internet..

After few minutes there will be a Request Timeout followed by Reply from (My WAN IP) : Destination Host Unreachable

Linksys E900 300mbps

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Admin>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : win-xp-sp3-2010
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Realtek PCIe FE Family Controller
Physical Address. . . . . . . . . : 00-25-22-DE-9E-4B

Ethernet adapter Wireless Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TP-LINK 150Mbps Mini Wireless N USB
Adapter
Physical Address. . . . . . . . . : 90-F6-52-E1-2D-FC
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.138
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168... Read more

Answer:Destination Host Unreachable

Lets take it in a few steps. Try pinging your gateway 192.168.1.1 to see if we get errors. If not, then ping your DNS servers (124.106.6.2 & 124.106.4.2). Then try pinging 108.175.7.71. What are your results?
 

9 more replies
Relevance 78.72%

I have a NAS device with an LED link that displays it has a connection. However, when I attempt to ping the device I am getting an error saying "Destination host is unreachable". What is confusing to me is that the results say that all packets sent were received, 0% loss. Does anyone have a suggestion as to what I am doing wrong? Thank you in advance.
C:\>ping 192.168.168.190

Pinging 192.168.168.190 with 32 bytes of data:
Reply from 192.168.168.59: Destination host unreachable.
Reply from 192.168.168.59: Destination host unreachable.
Reply from 192.168.168.59: Destination host unreachable.
Reply from 192.168.168.59: Destination host unreachable.

Ping statistics for 192.168.168.190:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

C:\>tracert rpncnas01

Tracing route to rpncnas01.rpltd.com [192.168.168.190]
over a maximum of 30 hops:

1 PORCHE1.rpltd.com [192.168.168.59] reports: Destination host unreachable.

Trace complete.

C:\>pathping rpncnas01

Tracing route to rpncnas01.rpltd.com [192.168.168.190]
over a maximum of 30 hops:
0 PORCHE1.rpltd.com [192.168.168.59]
1 PORCHE1.rpltd.com [192.168.168.59] reports: Destination host unreachable.

Computing statistics for 25 seconds...
Source to Here This Node/Link
Hop RTT Lost/Sent = Pct Lost/Sent = Pct Address
0 PORCHE1.rpltd.com [192.168.168.59]

100/ 100 =100% |
1 --- ... Read more

Answer:Destination host unreachable

How is it connected by Wireless or hard line.

Can you ping it by the host name?

4 more replies
Relevance 78.72%

I'm trying to set up a network between two computers to run a track meet. I've followed the directions according to the instructions, setting up the TCP/IPv4 correctly on both computers. When I ping the 2nd computer I get a destination host unreachable message. How do I fix this?
 

Answer:Destination Host Unreachable

mcarrow said:


How do I fix this?Click to expand...

First step is to trouble shoot to determine the cause.

If you want help from somebody you need to describe your network and computers (with respect to the network).
 

2 more replies
Relevance 78.72%

I have searched everything and tried everything. Have an HP Desktop Pavilion. Purchased a MFC 8950dw Printer. One Desktop in the office Acer M3470 connected without Disks, system works beautifully. We have a Linksys wireless router. On the HP Pavilion nothing works. Continue to get "destination host unreachable". Here are the specks. Any help other than what's already been offered? I removed all firewall trying to make that work.
 

Answer:destination host unreachable

You need to tell us what the problem is, not what error you get. What are you trying to do? What are you pinging? Is the HP Pavillion connected to the router via WiFi or cable? Can it connect to the Internet?
Any other pertinent information would help.
 

1 more replies
Relevance 78.72%

I'm getting this message when I tracert sf.net. No other website is having problems being accessed from my network, only sourceforge. A ping responds with:
Reply from 66.35.250.203: Destination port unreachable.

A tracert responds with 15 successful hops, and then:
16 sourceforge.net [66.35.250.203] reports: Destination protocol unreachable.

I cant figure out where the problem is originating. I created a static route to allow all traffic to this address on my 1710 router. My SDSL modem is able to ping and tracert successfully. Ping and tracert from my Cisco 1710 router gives the unreachable error.
Network setup is:
LAN -------> Cisco 1710 --------> Efficient SDSL 5851

Any help is appreciated.

William
 

Answer:Destination Protocol Unreachable

10 more replies
Relevance 78.72%

Dear Friends,
We have connected four computers with one server machine. All four machines connected through one switch. out of four computers, three computers are not pinging with the server sometimes. so, I uninstalled the network driver and installed. but, now also that three computers are not pinging with server. but, the same time pinging with any other computer, it is pinging.

So, Anyone can help for this problem...how I can solve this....

thanks in advance.....
 

Answer:Destination Host Unreachable

8 more replies
Relevance 77.9%

I keep having an issue with one specific site and the problem is incredibly odd. Every weekend for the last 3 weeks, starting at about 11am on saturday and going through the weekend until monday, the site in question will be totally unreachable from any PC on my network. I can reach it from my phone on VZW LTE, but not from the WLAN. If I ping the site I get an error "Destination Net Unreachable". If I run a tracert I go about 15-18 hops before getting the same error. If I plug the PC directly into the modem, the website is reachable. That definitely indicates a router-side problem. The thing is, the router's configuration hasn't been touched in months, if not years, and the problem is recent. the router in question is a DIR-655, and there is no QOS, no parental controls, nothing that has been manually set up that would obviously be causing this issue. The setup is as barebones as it gets. Again, it is one specific website (pbnation.com), everything else works 100% fine. Any ideas?
 

More replies
Relevance 77.9%

Linux IPv6 Destination Unreachable problem
Hello,

Please help! I am quite new to network programming and so I tested out a sample client-Server application. The TCP or UDP client is either setup as either IPv6 or IPv4, depending on the server address type input by the user on a command line. The server has 4 sockets, one each for TCP/IPv6, TCP/IPv4, UDP/IPv6, UDP/IPv4. There is no router on this network, and the two platforms are on the same link

The client is able to communicate with the server in following combinations:

1) Client TCP IPv4, Server IPv4
2) Client UDP IPv4, Server IPv4
3) Client TCP IPv6, Server IPv4 using IPv6 mapped IPv4 address
4) Client UDP IPv6, Server IPv4 using IPv6 mapped IPv4 address
5) Client TCP IPv6, Server IPv6 both on same plaforms
6) Client UDP IPv6, Server IPv6 both on same plaforms

However, the following does not work is client and server are on diffent platforms
1) Client TCP IPv6, Server IPv6
2) Client UDP IPv6, Server IPv6

However, the application has a problem connecting. The tracedump6 shows the ICMPv6 message indicating “Destination unreachable”, “Unreachable address”.

The ping6 command from client to server platform works fine. I am at a deadend.

Following are some of the information for debugging. Will appreciate any help I can get in fixing this problem.

>>>>>>>>>>>>>>ifconfig on server platform >>>>>>>>>>>>>>>>>>>>&... Read more

Answer:Linux IPv6 - Destination unreachable

9 more replies
Relevance 77.9%

Hi guys I'm new here hope you can help :)
- have seen a similar thread in windows, probably should have been in networking section I apologize.
My internet provider has Wi-fi networks across the city, our tenement house has a receiver.
I am connected to router via cable. With very varied frequency I am getting random packet loss - up to 5% which makes e.g. gaming annoying.
It does so for all websites I tried.

At times there is no packet loss for even 5 minutes, sometimes every 20seconds or so I get "request timed out" followed by "10.6.41.1 destination unreachable"


- Is the issue on providers' site, or between my PC and the router?
-Any solutions to fix this?



Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\VaclavDusek>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : VaclavDusek-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8071 PCI-E Gigabit Ether
net Controller
Physical Address. . . . . . . . . : 90-FB-A6-2A-99-9F
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::acc2:aaf7:f753... Read more

Answer:Destination Unreachable - 1-5% packet loss

Just to add the ISP got pretty bad reviews about unstability etc.
- just need to know if this is likely on the provider's side

19 more replies
Relevance 77.9%

The nic is fine, I can ping the nic. Am unable to ping the outside world, I am not using a router, I am using XPPro. Have run Ad-Aware & deleated what it found, have deleated winsock2 & replaced it with a good copy. Have run CW Shredded, nothing found. I have had this problem on several computers & ended up formating the HD & installing a new copy of XPPro to resolve the problem. I have connected my laptop and am able to get out fine, this is a software problem & not equipment. Any help will be greatly appricated

John
 

More replies
Relevance 77.9%

I have done with network of 8 networks then 4 LAN's as departments.
First I have done successfully the connect from LAN 1 to LAN 2 and I can ping all hosts from LAN 1 to LAN 2 in both network and vice versa using RIP routing.
Second when I need to do same thing but I need LAN 3 to reach all LAN's and Facing Destination host unreachable problem.

what I should be do.
I hope you can help me to find where my mistake to solve it.

Thank you very much.
 

Answer:Solved: Destination host unreachable.

Given that you are using RIP (an old routing protocol not used in current production environments), and the name of the file you attached is "assignment2", I think it's safe to assume this is a school assignment.

Unfortunately we cannot provide assistance with school assignments here.

I have asked for an administrator/moderator to stop by your thread.
 

2 more replies
Relevance 77.9%

I am running a ASP.net website on Windows 8.1 with IIS and all morning I could access the website. By afternoon I could not access the website. I did not make any changes. I ping the website and my computer IP address and I get: Reply from 192.168.0.3: Destination host unreachable. I am new to networking. Can anyone give me any help as to how to go about fixing this?
 

Answer:Reply from 192.168.0.3: Destination host unreachable

12 more replies
Relevance 77.9%

hi all, i have my xbox and my router all on the same router, my subnet is the same and they are on the same network , im trying to media share from my windows 7 to my xbox 360, when i ping my xbox ip i get this:

C:\Users\Tippee>ping 192.168.11.8

Pinging 192.168.11.8 with 32 bytes of data:
Reply from 192.168.11.7: Destination host unreachable.
Reply from 192.168.11.7: Destination host unreachable.
Reply from 192.168.11.7: Destination host unreachable.
Reply from 192.168.11.7: Destination host unreachable.

Ping statistics for 192.168.11.8:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

C:\Users\Tippee>

i have turned on every file sharing option i can find ( i think ) i tryed this without my firewall on, same thing. please help me this is doing my head in!

Thanks very much

Tippee

Answer:ping; Destination host unreachable

Is there a default gateway option that you can put in for the xbox?

9 more replies
Relevance 77.9%

To put it simply, I'm just trying to successfully ping machines attached to a hub for now. Here is the setup:

5 Port ethernet Hub
Computer connected to port 1
Linux machine connected to port 2
Linux machine connected to port 3

Both linux machines have (different) static IP addresses. None of this is connected to any outside network, internet, etc. I don't know what I'm doing wrong with this setup because I can't successfully ping the Linux machines from my computer and I'm not sure what the issue is.
 

Answer:Ping-Destination Host unreachable?

Are the assigned ip address to each machine on the same subnet?

for example if I set the following ip addresses

1 - 192.168.1.1 with a subnet of 255.255.255.0
2 - 192.168.1.2 with a subnet of 255.255.255.0
3 - 192.168.1.3 with a subnet of 255.255.255.0

so each computer is on the 192.168.1 network.
In this example each computer would be able to ping each other.

if each computer was configured on different networks like the following:

1 - 192.168.1.1 with a subnet of 255.255.255.0
2 - 192.168.2.1 with a subnet of 255.255.255.0
3 - 192.168.3.1 with a subnet of 255.255.255.0

In this case each computer is on a different network 192.168.1, 192.168.2, and 192.168.3, so in this example the only way for those computers to talk to each other is if a router was in place on each network. Without a router you would get network unreachable or something to that effect.
 

2 more replies
Relevance 77.08%

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Ultimate, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz, Intel64 Family 6 Model 37 Stepping 2
Processor Count: 4
RAM: 3894 Mb
Graphics Card: Intel(R) HD Graphics, 1723 Mb
Hard Drives: C: Total - 99673 MB, Free - 32642 MB; D: Total - 153599 MB, Free - 84942 MB; E: Total - 153598 MB, Free - 102998 MB; F: Total - 69712 MB, Free - 57533 MB;
Motherboard: LENOVO, Base Board Product Name
Antivirus: Net Protector 2015, Updated: Yes, On-Demand Scanner: Enabled
I have 1ADSL Router DLINK 2750u (IP 192.168.1.1). 1 PC (win7) connected through LAN(IP 192.168.1.34) and 1 LAPTOP (win7) connected through WIFI (IP 192.168.1.35)
when i ping he says destination host unreachable
C:\Users\nilesh>ping 192.168.1.34
Pinging 192.168.1.34 with 32 bytes of data:
Reply from 192.168.1.35: Destination host unreachable.
Reply from 192.168.1.35: Destination host unreachable.
Reply from 192.168.1.35: Destination host unreachable.
Reply from 192.168.1.35: Destination host unreachable.
Ping statistics for 192.168.1.34:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
help me thanks
 

Answer:Solved: ping destination host unreachable

9 more replies
Relevance 77.08%

I have got a new belkin router and trying to connect internet but unable to do so. I am getting internet thru LAN cable if directly inserted in my PC but unable thru the router.

Please help.
 

Answer:Belkin f9k1009v1 destination host unreachable

8 more replies
Relevance 75.44%

Hey Everyone! I'm having some bizarre issues with all of my Lenovo W530/W540's.  I'm not sure when the issue started, the first time it was reported to me was around March, and it has been persistant since the issue was discovered.  The issue is that, quite frequently, our Lenovo W530/W540's will get Destiantion Host Unreachable if I run a continuous ping (ping -t ...) to anything outside our firewall. I have run a ping to things inside our firewall (other computers/servers, etc.) and they will return good ping until the cows come home. However, if I try to ping anything outside our firewall (google.com, google DNS 8.8.8.8, yahoo.com, etc.) about every 30 seconds (every 30-35 returns) it starts returning Destitnation Host Unreachable from our Firewall.  This will last for around 10-25 returns, and then traffic goes back to normal. We are a majority Apple Shop, and when I attempt to ping from any Apple on the network, it get fine returns consistently.  I also tried pinging from the few non-Lenovo Windows Machines we have as well (my personal machine which is self-built Windows rig, a couple of windows test machines, and a Windows 2008 Server we have) and they also have consistently good returns as well. It is ONLY the Lenovo's that have this problem.  To compound things, they have no issue when they are connected to a different network other than the company network.  This ONLY happens when they try to interact with traffi... Read more

Answer:Lenovo W530/W540 Getting Destination host Unreachable from our Firewall

Wireless or wired? If you have a hardware firewall, is there also a software firewall set? (Norton, windows, etc) Is the network set up as public, home or work?

4 more replies
Relevance 68.47%

Whenever I try to access www.dlink.com (or subdomains), or www.dzone.com, I get a "Connection closed by remote server" error in Opera (similar messages in other browsers).

When I try to ping or tracert either of the hosts, I get a "Destination host unreachable" error.

This has also occurred on other websites, which I cannot remember right now, and occurs with both Optus (my ISP) and OpenDNS as dns servers.

It also seems to be intermittent. Yesterday, I was able to access www.dzone.com without any issues for some time, yet today and the day before, this error was occurring.

Also, possibly unrelated, the website www.tv.com is extremely slow when loading.

Does anyone have any ideas as to what the issue is?

The traceroute and ping work fine from network-tools.com, so it must be something from my end.

The IP's are resolved correctly (when I ping or tracert, the IP shown is correct according to OpenDNS's cache). However, when typing either the hostname or the IP in the address bar, I still get the error.

Thanks for reply.

Edit: Also, a ping from my router is "successful", ie: in firmware, there is an option to ping hosts, and this returns successful. All firewalls are disabled.

Additionally http://www.dictionary.com does not work, but the basically aliased http://dictionary.reference.com/ does. However most of the images in http://dictionary.reference.com are served from http://sp.ask.com/ which doesn't load, whereas http://ask... Read more

Answer:Unable to access certain websites: "destination host unreachable"?

Sounds like you've got a DNS issue. Those are handled by your ISP, so you're pretty much screwed if that's the problem. Here's how to check your DNS connections:

1. Open a command prompt Start -> Run... -> cmd.
If you're using Vista, the command prompt is under the Accessories Menu.

2. At the prompt, type ns lookup, and hit enter. This puts your command prompt into Domain Naming Service lookup mode, meaning you can try to resolve websites' names and ip's from their websites.

3. Type the web address of a known website, such as yahoo.com or google.com, and hit enter. You should get the name and the ip address of the site in the command prompt window.

4. Once you've found one that works every time, this will be your Control site. You know it works, so you use it to check your connection.

5. Now, use the address of one of the sites that's not working. If you do get a reply from the site, then the problem isn't with your ISP. You'll need to check your connection speeds and other network settings to test the problem further. If the websites don't resolve, contact your ISP, and tell them their DNS isn't working properly. You're going to need to get to someone fairly high up the food chain, so be ready to be really patient for that part.
 

3 more replies
Relevance 68.06%

TSG info :
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 8.1, 64 bit
Processor: Intel(R) Core(TM) i7-4810MQ CPU @ 2.80GHz, Intel64 Family 6 Model 60 Stepping 3
Processor Count: 8
RAM: 8110 Mb
Graphics Card: NVIDIA GeForce GTX 870M, -1 Mb
Hard Drives: C: Total - 121074 MB, Free - 4367 MB; D: Total - 934781 MB, Free - 790990 MB;
Motherboard: Micro-Star International Co., Ltd., MS-1763
Antivirus: Windows Defender, Disabled

Hey guys, I'm trying to setup an RMI in java, after struggling with it for a long time I noticed that it's probably not my RMI that isn't working, but that there's something wrong in my networking.
When I asked a friend outside of the city to ping me to test his ability to connect to me, he said the result was Destination Host Unreachable. After a lot of googling I got explained that this is likely a physical problem, which is weird because I have perfect internet acces. I've disabled all my firewalls, and googling this problem is nearly impossible because googling "Destination host unreachable" usually gives results of attempts to ping a local machine from another local machine, not getting pinged from outside of your network. Does anyone have any idea what this could possibly be ?
I've tried:
1. Restarting all network devices in my network.
2. Changing IPv4 settings to a static IP.
3. Activating Remote Access service (failed)
4. Checking all physical cables

If I haven't giv... Read more

Answer:"Destination host unreachable" when pinged from outside my network

10 more replies
Relevance 67.65%

Hello TechSupport,

This is the first time I've had to make a post here. I've tried everything I know to fix this problem; direct connect, connected with router, firewall disabled, malware scans, and various cable unplugs for durations of time. Nothing's worked thus far, and this is what I get pinging any server every 5 mins:

Reply from 74.125.127.104: bytes=32 time=48ms TTL=46
Request timed out.
Request timed out.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Reply from 172.16.0.1: Destination net unreachable.
Request timed out.
Reply from 74.125.127.104: bytes=32 time=39ms TTL=46

Connection is wireless, ISP is locally owned and operated (nethop.net), and this has never happened prior to the last two days.

Would someone possibly ping nethop.net for about 5-6 mins to see if they're recieving massive packet loss at some point in time? That would at least t... Read more

Answer:"Destination net unreachable." Occuring every 5 mins

Because no one's replied to this problem yet, consider this reply a bump.

14 more replies
Relevance 63.55%

I added a second hard drive for additional storage on an XP Pro machine. I'm now getting a random error message popping up about every 30 minutes or so that reads: Destination Warning. Job cannot run because of not original destination. I haven't moved any programs to the new drive, only my documents, pictures, and music. This message comes up just sitting at the desktop without attempting to launch any programs, and there's no indication of what program is sending the error. I ran Norton 360's registry cleanup but it didn't fix it. Any ideas would be greatly appreciated!
 

Answer:Destination Warning

Hi

Just so I know what level Service Pack we are dealing with in XP, what is it you have RTM, SP1, SP2 or SP3?


Destination Warning is generally when a automated task cannot find the location it ised before, so what applications do you have that may be running automated tasks, it couls be Norton, it could be a defrag app or a backup app.

Even if you have no running apps at the time, many start with your PC so could cause this, without you knowing, so to that end and this is troubleshooting only is to click Start > Run and type msconfig and click the Startup tab and disable (untick) everything and reboot (do be disconnected from the internet for this) and see if the message appears, if not then enable one item at a time until you get that message and thats your culprit, and do tell us what it is and we can try and find a fix.

If you boot to safe mode (F8 at boot) do you get the same error message after 30mins?
 

6 more replies
Relevance 62.73%

I keep getting hundreds of these messages;
Blocked incoming ICMP error message (ICMP type 3) from 69.72.114.143 to xx.xx.xxx.xxx as there is no UDP session active between xx.xx.xxx.xxx:26581 and 69.72.114.143:1028 and type 11, I have a DLink router DIR 625, the router is logging these messaage every few seconds. And I can not get on some web sites. Can anyone help me with this?
 

More replies
Relevance 61.5%

"...warning message will appear when the destination has reached your set threshold. You can set the threshold from 50%-100%. " What do I do, specifically when space is filled? How do I know which file folders to delete to allow more backup ? I'm using incremental backup. It says to delete backups. Which ones? This external backup drive has been used off/on for months. There are many files on it which I cannot identify.I'm using windows 7. 64bit. Toshiba Satellite With external toshiba backup drive: Toshiba External USB 3.0 MK5055GSX drive. Is there a way to update this drive?

Answer:warning Destination Capacity is full what to do? - Part 1

Control Panel>Back up and Restore, Look for "Manage Space" right under the list of the back up location, click on that, then click on "View Back Ups" to see all of your back ups. They will be listed by date and size. As riider says, just delete the older back ups to free up enough space. If it was a year ago that it was cleaned out, you can probably safely delete about half of the back ups starting with the oldest ones (If you have more than 8 in the list, you can probably delete more than half). As soon as you are done, run a full back up to make sure that you are up to date.You have to be a little bit crazy to keep you from going insane.

10 more replies
Relevance 54.53%

Let me start from the top a few weeks ago I started getting the following error when renaming a file on the desktop "The destination folder or path would be too long..." yadda yadda, I have searched every where and even tried solutions that fix other similar issues but not the same Issue, I should also mention the fact that I am able to rename folders using command prompt and able to rename files normally, but it doesn't like me renaming ANY folders anywhere on my system not even directly on the C;\ Drive, I shall also copy and paste my dxdiag so you can see my system info

------------------
System Information
------------------
Time of this report: 10/18/2014, 11:52:45
Machine name: D1-PC
Operating System: Windows 7 Ultimate 64-bit (6.1, Build 7601) Service Pack 1 (7601.win7sp1_gdr.140303-2144)
Language: English (Regional Setting: English)
System Manufacturer: BIOSTAR Group
System Model: N61PB-M2S
BIOS: )Phoenix - Award WorkstationBIOS v6.00PG
Processor: AMD Athlon(tm) II X4 630 Processor (4 CPUs), ~2.8GHz
Memory: 4096MB RAM
Available OS Memory: 4094MB RAM
Page File: 1992MB used, 6194MB available
Windows Dir: C:\Windows
DirectX Version: DirectX 11
DX Setup Parameters: Not found
User DPI Setting: 120 DPI (125 percent)
System DPI Setting: 96 DPI (100 percent)
DWM DPI Scaling: Disabled
DxDiag Version: 6.01.7601.17514 64bit Unicode

------------
DxDiag Notes
------------
Display Tab 1: No problems found.
Display Tab 2: No problems found.
Sound Tab 1: No problems ... Read more

More replies
Relevance 43.87%
Question: ICMP.dll

When I try to launch Party Poker I am getting the following message :

C:\WINDOWS\system32\ICMP.dll is not a valid windows image please check against your installation diskette.

and the programme will not launch
what do I do ?

Party Poker was working fine a few weeks ago when I last used it

:cry HELP
 

Answer:ICMP.dll

Hello.
Try replacing the .dll file here.
You'll need a folder compression application like WinZIP or WinRAR.

Hope it works.
 

2 more replies
Relevance 43.87%
Question: WHAT IS ICMP

can any one tell me where i can find icmp in my panda internet security (platinum)

Answer:WHAT IS ICMP

A little more info would be helpful. What is your operating system? Why are you trying to find this?

1 more replies
Relevance 43.46%

Hi guys this is my fist post.

I would like to know if a PC is connected to a router(gateway of the mentioned PC) and their connecting interfaces have IP addresses in different networks, will they be able to ping each other?

If not then why?

Since IP add are use to find a node then what are MAC address' uses?

Finally, if ICMP is layer 3 protocol, then by right it should not have port address but then how does it send the ICMP messages to the terminal and display it?

Wow when I double check my post, it sounds like a homework question. Rest assured it isn't.
I was reading through my CCNA notes and the more I think the more it doesn't make sense. That's why I asked these.

If you don't believe me, just give me links to where I can find out the answer myself.

Thanks
 

Answer:Question about ARP an ICMP

a router is always there to connect networks. For a PC to connect to another network, the router always have to have an interface on the same subnet of the PC.

if the computer is 192.168.0.100 and it wants to connect to another network, there has to be a router with an interface of the 192.168.0.x subnet.
 

1 more replies
Relevance 43.46%
Question: ICMP on Port 0

I've started getting lots of these messages in my Cisco ASA 5510 firewall.

2008-01-31 00:11:57 Local4.Info y.y.y.1 %ASA-6-302020: Built ICMP connection for faddr x.x.x.184/0 gaddr y.y.y.1/0 laddr y.y.y.1/0

2008-01-31 00:11:57 Local4.Debug y.y.y.1 %ASA-7-609001: Built local-host inside:x.x.x.184

2008-01-31 00:12:01 Local4.Info y.y.y.1 %ASA-6-302021: Teardown ICMP connection for faddr x.x.x.184/0 gaddr y.y.y.1/0 laddr y.y.y.1/0

where
x.x.x.184 = Apple Airport Access Point
y.y.y.1 = 5510 ASA inside interface

I never used to get these messages, now I get about 3000 per day. Does anyone have any idea where these come from?
 

More replies
Relevance 43.46%
Question: ICMP Flooded? :S

Hey,

My new antivirus has just gave me a popup saying "Wireless Internet Connection is ICMP Flooded." whats this? i quickly looked it up, like a Denial of Service attack almost? O_O can someone help me?

Answer:ICMP Flooded? :S

  
Quote: Originally Posted by LumpyMoose


Hey,

My new antivirus has just gave me a popup saying "Wireless Internet Connection is ICMP Flooded." whats this? i quickly looked it up, like a Denial of Service attack almost? O_O can someone help me?



We need a ton more info. What AV, what network setup, what hardware, etc

7 more replies
Relevance 43.46%
Question: ICMP Type 10

Not being paranoid but just curious.I have a VB6 application that i wrote. This morning i started the program and got a warning from Sygate that i was trying to make a "ICMP Type 10" connection.What on earth for? The program just changes a reg key and back again to switch Flash On and Off??

Answer:ICMP Type 10

Internet Control Message Protocol type 10 is a router message that advertises it's ports.Why you generate it? No idea at all!

6 more replies
Relevance 43.46%

Hi, I was told awhile back that its best to turn off ICMP on the modem/router because it is a huge safety issue and so it has been that way for a long time now.

But sometimes i play games like BF4 (battlefield 4) and they send a ICMP request to show ping. Since i have ICMP blocked it shows "-" for my ping. And i get called a hacker or other names because they think im trying to hide something, which i am not.

So i went into my modem just now and i allowed ICMP on both traffic in and traffic out and now the ping works.

However now i am worred about security. What is the best way to do this to satisfy both needs?

thanks


UPDATE: did some googling and i guess the good news is that the modem/router appears to only allow 8 ICMP, 0 ICMP, 11/0 ICMP, 11/1 ICMP, 30 ICMP
0 - Echo Reply (ping response)
8 - Echo Request (ping request)
11 - Time Exceeded
I dont know what 30 is... i guess its traceroute

so is that better and safer to leave it on?

Answer:Best way to allow ICMP and be safe doing so

One of the major cornerstones of personal computer security is Attack Surface Reduction.

When an attacker's ping receives a reply, a live potential target has been revealed. Forget the blatherings of the ignorant and let your common sense prevail.

Cheers

2 more replies
Relevance 43.46%

Everytime I log on to my dialup connection, I get several instances of Svchost trying to ICMP various addresses, most or all of which seem to be proxy image / akamai servers. For several weeks, it was three tries each for five different addresses; the last couple of days I've noticed it's increased to six addresses, at least intermittently. Any ideas what this could be? My guess is it's a service that's not getting shut down and / or cleared properly, but I'm just guessing.

FYI: Win XP / Mozilla Firefox / Sygate Personal Firewall

Thanks.
 

Answer:SVCHOST trying to ICMP on log-on

My guess is that it is looking for updates for a variety of applications you are running. Every time I boot, that is what svchost does on my computer.
 

3 more replies
Relevance 43.46%

'Afternoon all. I would like to look into playing around with the ICMP protocol in C++ but need a starting point. The whole point of it is so I can attempt to block destination/source IP's, masks, ports etc.

Any help would be great

Cheers
 

Answer:ICMP Protocol (C++)

I think there are some firewalls that are open-source. I'd start there.
 

1 more replies
Relevance 43.46%
Question: ICMP Ping?

Since about 2 days ago, i have started to be bombarded with ICMP Ping requests. I cleared my firewall logs this morning and since being on line for 30 minutes, have recieved 412 logged entries. They all have the same network number 213.122.xxx.xxx (host.in-addr.btopenworld). BT Openworld is also my ISP.Can anyone describe what this request is and should i be worried about it (eg. port scan being run on my machine?)As i'm on dial-up, if i disconnect, the same happens as soon as i reconnect. Any help, thanks in advance...

Answer:ICMP Ping?

I take it that your ISP is BTOpenworld, yes?? All ISP's ping there members as it is there way to see if the IP address is still active if idle then they cut you off..

3 more replies
Relevance 42.64%

i want to close every port on my system, so that i don't get someone testing each of my ports every couple of hours and doubling my ping. playing counterstrike:s is great and all but when my ping jumps from 60 to 400 for 3 minutes coz someone's testing all my ports, its bloody annoying. i dont have any spyware, i've checked a thousand times, and i have all the proper defences, but i don't want ppl checking my ports! it's annoying. running pentium 2.8 1g ram or so with win xp sp2 all the updates, avg running 24/7 updated etc spywareblaster in position all that

Could there be another reason i am getting 400 ping every couple of hours? it isn't me downloading something (or anyone else on my network)

could my other computer have spyware.. hm i haven't checked that yet, i'll go check it now.
 

Answer:how do i close my icmp port?

Huh? If you want to close all your ports yank the plug to your modem... Im not sure what your saying? It might be bad/faulty cabling/telephoneline wiring; Or it might be crappy servers or something in ur pc causing studder.
 

4 more replies
Relevance 42.64%

Out of the blue today I could no longer connect to the internet. Router has been working fine and I haven't touched the router in a couple months. Anyway, I rebooted it and I can now connect to the internet,however, I am now getting ICMP redirects trying to ping google.com, msn.com, etc. No config options have changed since initial install.

I am using Firmware: DD-WRT v24-sp2 (07/22/09) mini on a WRT54GL router.

The WRT54GL is also connected to a pfSense 2.0 firewall. I have configured the 54GL router based on http://www.dd-wrt.com/wiki/index.php/Wireless_Access_Point

Anyone know why this is happening?


Code:
user$ ping www.google.com
PING www.l.google.com (173.194.64.104): 56 data bytes
92 bytes from 192.168.102.2: Redirect Host(New addr: 192.168.102.1)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 2b5a 0 0000 40 01 3a79 192.168.102.3 173.194.64.104

92 bytes from 192.168.102.2: Redirect Host(New addr: 192.168.102.1)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 3678 0 0000 40 01 2f5b 192.168.102.3 173.194.64.104

92 bytes from 192.168.102.2: Redirect Host(New addr: 192.168.102.1)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 6e53 0 0000 40 01 f77f 192.168.102.3 173.194.64.104
192.168.102.3 is my laptop IP
192.168.102.2 is WRT54GL IP
192.168.102.1 is pfSense interface IP
 

Answer:DDWRT ICMP redirects

If your gateway is .2, and .2'1 gateway is .1, when you send traffic to .2, it will send you redirects, telling you the most optimal path is via .1; this is normal behavior.

Typically your PC simply sees the redirect and modifies its routing table accordingly.
 

1 more replies
Relevance 42.64%
Question: ICMP Redirect Host

Kerio Personal Firewall keeps reporting something called ICMP Redirect Host. It denies this action every time. It calls it Bad-Unknown and a medium risk. It blocks it, but it's getting more and more frequent that it is showing this. Does anyone know what this is? If so, why is Kerio blocking it?
 

Answer:ICMP Redirect Host

Anyone know what this is?
 

1 more replies
Relevance 42.64%
Question: ICMP Type 3 Code 3

I was trying to troubleshoot a problem earlier and I noticed this:

IP's/name's have been modified.

pixfirewall# debug icmp trace

ICMP trace on

Warning: this may cause problems on busy networks

pixfirewall# 719: ICMP unreachable (code 3) 192.168.10.10 > 192.168.10.1

720: ICMP unreachable (code 3) 192.168.10.10> 192.168.10.1

So I loaded up a saved net capture I see ICMP: Type 3 Code 3 responses. After doing some research, it looks like this response is due to a port scan. Keep in mind that 192.168.10.10 isn't assigned to any network interface which is why I'm a bit baffled by this.

Anyone have any ideas?
 

More replies
Relevance 42.64%

I'll share something it took me a while to figure out and I could find little help on the web. With my old Linksys WRT54G all ports were by default stealth on running ShieldsUp https://www.grc.com/x/ne.dll?bh0bkyd2 and I got a "PASSED" message from the Common Ports test.

When I switched to the Actiontec GT724WGR combo DSL modem/router, all ports were still stealth, but I got a failure from an ICMP echo. That is, on a ping my router would reply saying in effect "hi, I'm here..what do you want?". ShieldsUp states emphatically that you want to be totally stealthy so there is nothing Igor in St Petersberg can do to detect your existence and thereby hack your machine. HOWEVER, there seems to be some on-line debate about just how egregious an ICMP echo actually is. Anyway, being a paranoid obessive-compulsive, I wanted it off and finally found it's very simple with my particular router. Moderate testing so far has shown no unintended consequence of disabling the ICMP echo.

How to disable ICMP echo shown as failure in ShieldsUp

To block outgoing echoes in response to incoming ping

1. Go into Actiontec router with 192.168.0.1
2. Select Security tab then Firewall settings.
3. Select/check “Custom”.
4. Un-check box for “ICMP” out (both boxes unchecked).
5. Save

This may work with other routers with similar settings features.
 

More replies
Relevance 42.64%

I am Using Vista Home Basic, and I am hooked on a LAN which runs on Squid Proxy. I am unable to Ping my Laptop from other PC in the LAN.
I am not able to use webcam on Yahoo messanger with Squid proxy ....... every time it says unable to determine IP address.

More replies
Relevance 42.64%
Question: ICMP time exceeded

Keep getting this popup message from ZA firewall:

Firewall has blocked aceess (ICMP time exceeded) to your computer from ip adress.

What does that mean?
Read up on ICMP but dont undestand it.

Big security problem?

Running a router besides ZA.

thx.

brwkem
 

More replies
Relevance 42.64%

40 minutes ago I turned my Computer on. and ESET Smart Security notified me "Detected ICMP Flooding Attack Remote IP Address: (Don't think its necessary to post it) " . So I freaked out did and Quick Scan with Malwarebytes and Full Scan with ESET Smart Security, both Logs turned out with Zero threats. I am not sure if ESET took care of the issue when it notified me, so I am confused and need of some help
I am assuming this issue must have began yesterday since I let my friend use my Computer to print out some documents for school. He is clueless on computers and does not know how to serf the net safely. So I am kinda assuming he transferred some Trojan from his computer to mine. I deleted all his files off my desktop and Hard drive and not sure if its fixed, So please if there is any help I can get. it would be appreciated Thank you, I attached the files you need to the Post.

Hijackthis Log
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:53:50 PM, on 6/20/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
C:\Users\Ivan\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Users\Ivan\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files (x86)\Dev... Read more

Answer:ICMP Flooding Attack

Bump
 

2 more replies
Relevance 42.64%

I am developing a packet sniffer using Windows Raw Socket. I see the packets being received in NetMon but somehow my packet sniffer is unable to capture it. As suggested on msdn I have set the promiscuous mode using SIO_RCVALL. However I still see
only icmp echo request / reply packets and not icmp router advertisement packets.  Does NetMon capture packet at Ethernet layer as opposed to IP layer? I can attached the packet capture if required.

More replies
Relevance 42.64%

Hello

I hope I am posting this in the right place ....

Although I have googled till I'm dizzy I can't find an answer (or at least not one I can understand) to what this firewall log entry means.

Rule "Default Allow Specific Inbound ICMP" permitted (192.168.1.1,3).

Inbound ICMP request.
Local address is (XXXXXX).
Remote address is (192.168.1.1).
Message type is "Destination Unreachable".
Process name is "N/A".

Inbound from where to where, requesting what?
Where is the destination? And what was destined to go there?
Type 3, code 3, pipe 3, port 3?

Could anyone offer any interpretation, please?

Further info: These instances occur when sending some (but not all) emails whether via webmail or an email client on my computer. There's one address which always triggers this, others are more random/irregular. The responses I have received so far includes "get rid of the firewall"; (I have tried two different versions); "you have got something nasty on your computer" (I have run plenty of anti- stuff but all seems well); and "block it" - but I can't send the (plain-text) mail in question if I do that.

What are these occurrences "usually" symptomatic of? ......And can I do anything to prevent them?

Any help will be greatly appreciated

Thanx
 

Answer:What is causing this ICMP pest

15 more replies
Relevance 42.64%

I have lots of router log entries (several per second) similar to this:

[INFO] Sun Nov 04 22:32:41 2007 ICMP ALG rejected packet from 192.168.0.64:65535 to 88.65.97.43:65535 (protocol 1)
[INFO] Sun Nov 04 22:32:40 2007 ICMP ALG rejected packet from 192.168.0.64:65535 to 123.5.19.132:65535 (protocol 1)
[INFO] Sun Nov 04 22:32:40 2007 ICMP ALG rejected packet from 192.168.0.64:65535 to 61.133.117.164:65535 (protocol 1)

The thing is... they go away when uTorrent is open, even if there are no torrents in the queue.

I can't figure out what this is telling me. Suggestions?
 

More replies
Relevance 42.64%
Question: Cisco 3725 ICMP

Wow, been out of the game for two years and I've forgotten it all!

Anyway, I have:

fa 0/0 192.168.5.1 /24
fa 2/0 10.10.10.2 /30

I have a laptop on my fa0/0 interface with 192.168.5.11 /24 and I want to be able to ping 10.10.10.2 interface on the router.

Let's say I can't copy and paste my config... what am I missing? NAT on fa 0/0?
 

Answer:Cisco 3725 ICMP

Why would you need NAT?

Assuming ip routing was enabled and your host is using 5.1 as the default gateway it should work since the 3725 has routes to both networks (since they are connected).
 

3 more replies
Relevance 42.64%
Question: Ping icmp echo

Hi I'm a newby

Had a laptop for 5 years did the basics - surfed the web, bought items online and never too ambitious. Always security concious - or is it paranoid - so I periodically checked with GRC to re-assure me that my laptop was not vulnerable to hackers. If that's possible. Always came away happy that no ports were accessed and my laptop ignored pings. Now I have a new laptop which has the ports ok but failed by acknowledging a ping test. Any solutions for a thicko to do basic and I mean basic tweaks.

Thanks guys and gals in advance
 

Answer:Ping icmp echo

Welcome to MG's. I am moving your thread to the software forum.
 

3 more replies
Relevance 42.64%
Question: NAS unreachable

Hi,

I have a NAS, accessible via 192.168.1.57:81 locally. The problem is : I can't see it under Windows. In Linux I can see it under network tab

I try to access it with \\192.168.1.57 in My Computer but doesn't work too

Any ideas ?

Thanks in advance

Answer:NAS unreachable

Hi nathan30

Did this just recently start?

Is this a new device or new install?

Is your computer connected wirelessly and is the network set to private? (not public).

Could you fill out system specs please.
Ken

28 more replies
Relevance 42.23%

could that be the reason that I am getting connection interupted all the time, and the reason my xbox live can't handle games without dedicated servers?
 

Answer:I have ICMP blocked on my wireless router.

No, it is your Wireless router firewall blocking you with your X-box.
 

2 more replies
Relevance 42.23%

Any way to reduce or solve the icmp error in cisco router?
 

Answer:ICMP Error in Cisco Router

You'll need to provide more information than what you've posted. What ICMP errors are you getting? What router are we talking about? What are you trying to ping? Is it across subnets or within the same subnet?
 

3 more replies
Relevance 42.23%

In the past 24 hours, one instance of SVCHOST seems to have gotten lonely and decided to reach out and touch someone. As soon as I connect to the internet, it tries to ICMP 5 or 6 sites (apparently being successfully blocked by Sygate Personal Firewall), then seems to happen occasionally while I'm connected. Target addresses vary, but usually include something in the 195.22.198.xx range (which seems to resolve to something on yimg.com sometimes, but not always). Any ideas what this could be? I'm not aware of having installed anything new.

Also attached is HJT log in case it helps, and for a quick hygeine check.

Thanks.

Logfile of HijackThis v1.96.2
Scan saved at 4:04:58 PM, on 8/26/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\COMPAQ\CPQINET\CPQInet.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\WINDOWS\System32\svchost... Read more

Answer:SVCHOST ICMP'ing and Quick HJT Log Check

I should add that I did an online scan at TrendMicro and ran SpyBotS&D with latest updates (except "TeaTime" - what's that anyway?). Both said clean.

Also, below is a representative packet of what's being sent:

0000: 07 00 20 00 0D 00 00 00 : 07 00 00 00 08 00 45 00 | .. ...........E.
0010: 00 3C B9 35 00 00 20 01 : 74 C5 C3 DE 26 42 45 14 | .<.5.. .t...&BE.
0020: 3D 92 08 00 3D 5C 02 00 : 0E 00 61 62 63 64 65 66 | =...=\....abcdef
0030: 67 68 69 6A 6B 6C 6D 6E : 6F 70 71 72 73 74 75 76 | ghijklmnopqrstuv
0040: 77 61 62 63 64 65 66 67 : 68 69 66 70 2F 32 30 30 | wabcdefghifp/200
0050: 34 30 38 32 36 2F 74 68 : | 40826/th
 

2 more replies
Relevance 42.23%

Hi Guys

I see in settings firewall and have not G DATA firewall ICMP Protocol, this protocol is very good for secure user.

But G Data give not this protocol for products.
 

More replies
Relevance 42.23%

Whats a guy to do with ping and tracert these days when every other router and host disables icmp echo requests? Is there another way to find out which routers, or hosts are the problem? besides using icmp?

This is really getting to be annoying.

rfc's recommend against this practice , even though is becoming more and more widespread.

DOS attacks are an primarily an os problem anyways, and not a router one.

Also, another option would be to allocate a certain amount of bandwidth to icmp to so at least a few requests could get through.

But hey, I suppose it's much easier to just disable it.
 

More replies
Relevance 42.23%

I just noticed in my Symantec Endpoint Protection, I have noitced that I am seeing inbound ICMP connections to www.heartbeat.com (74.208.84.230) as well as outbound IP traffic to (239.255.255.250). I have run both Symantec Endpoint protection and SuperAntiSpyware and both turn up nothing.

Below is a copy of my DDS log file:

DDS (Ver_09-07-30.01) - NTFSx86
Run by Dave at 3:13:25.01 on Sun 08/30/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1791.1039 [GMT -4:00]

AV: Symantec Endpoint Protection *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
FW: Symantec Endpoint Protection *enabled* {BE898FE3-CD0B-4014-85A9-03DB9923DDB6}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\idt\xpv_5902_012208\wdm\STacSV.exe
C:\Program Files\Nero\Nero8\InCD\InCD.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\ActivIde... Read more

Answer:Unwanted ICMP Traffix to www.heartbeat.com

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 42.23%

I do not understand this ICMP activity being blocked by my Firewall on default. Perhaps some kind person conversant with this matter will respond and enlighten me.My Firewall blocks these pulses by default. Although I can customize the settings and remove the blocking of ICMP traffic, since I regard my FW suppliers as knowing best, I see no reason to alter their settings. I have entered my IP as being "Trusted" in the hope that these pulses will stop being logged, but it has made no difference. They are blocked every few seconds, which makes an awful lot of FW event logs. They seem to be "Echo requests", which means nothing to me except it infers meaningless activity.My settings are shown on the two screen shots : 1 - the settings table and 2 - the event log after a few minutes browser use.1.Settings table :-2. Event log :-

Answer:Firewall blocking of ICMP activity

As nobody has replied, I have in fact concluded that my firewall is doing what it should do and blocking ICMP signals in and out.

I still do not understand why a signal from my IP to my IP should be an event log, since my IP is designated as trusted on my firewall, but it does not matter too much, I can live with it.

Please consider this thread closed.

1 more replies
Relevance 42.23%

I am just starting out with Cisco equipment. I have a router that I set up and am trying to figure out how to block ICMP on the WAN interface so that I am not visible to the outside world.

I try setting up an access-list that is deny icmp any any

When I apply it to my WAN interface inbound it immediately stops all incoming and outgoing IP activity. I can't ping the router from internal, I can't access any web pages. Can't ping the router from external so that at least works

I tried running the auto secure wizard which shuts off a whole bunch of stuff but still did not seem to shut it off. Any thoughts on where I could be going wrong?
 

Answer:Blocking ICMP on a Cisco router

Code:
conf t
ip access-list ext OUTSIDE
deny icmp any any
permit ip any any
exit
int fa0/0
ip access-group OUTSIDE in
end
copy r s
 

21 more replies
Relevance 42.23%

Hello... Ran a port security scan and it said that I was 100% "stealth" with the exception of my pc's inability to turn-away a ICMP ping. Question is, how to secure your firewall or ports to be able to stop one of these pings? Any suggestions would be appreciated-
thanks
Webz
 

Answer:How to block ICMP (echo) pings?

You could use kerio firewall and the rule sets from here, best to get the old kerio 2.1.5 version. Or, you can get Jetico firewall, which appears to be one of the best emerging firewalls out there especially since it has now passed 15 firewall leak tests! Jetico is also a very flexible firewall and can have ruls inserted!

for Kerio 2.1.5

http://www.321download.com/LastFreeware/page7.html#Kerio Personal Firewall
how to set up and configure kerio rules based firewall.

http://www.dslextreme.com/users/surferslim/tpf.html
http://www.jetico.com/

link below on jetico

http://www.wilderssecurity.com/showthread.php?t=79697
 

3 more replies
Relevance 42.23%

This hasn't came upon my attention until very recently. Upon using PeerBlock, a freeware application for purposes of blocking IPs, I've noticed that it detects activity with an educational institute at constant intervals despite the fact that I'm sitting comfortably at home and is not accessing any of my university's internet resources. I don't see any odd applications running on HiJackThis either:

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 5:36:17 PM, on 6/9/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\WTablet\TabUserW.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Protecto... Read more

Answer:Solved: TCP/ICMP Packets to External IPs

11 more replies
Relevance 42.23%

I have a Verizon branded Actiontec GT704-WG behind which is a smoothwall. My question is...when I run the GRC Shields Up it says everything is stealth except this:

"Ping Reply: RECEIVED (FAILED) — Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet."

So how do I fix this? I have the option to drop (not reject) these requests at my smoothwall but is it the modem/gateway/router that's responding? Or what? Help?!?!
 

Answer:Stopping the ping ICMP reply.....?

Honestly, I wouldn't worry about it.
So some one sees a response to a ping, it's not the end of the world. I don't know of any recent OS susceptible to the Ping of Death so you're fine in that regard. Rarely does any attempting intruder even try ICMP echo requests any more because dropping them is to be expected, and they know they won't be able to exploit any thing with a ping in the first place. They will be probing the TCP and UDP ports looking for possibly exploitable services, and relying on that to determine if you're a target.
 

3 more replies
Relevance 42.23%

W98SE, DUN
I blocked all ICMP in and out with my firewall. Now eveytime I connect I get a warning: Packet sent from (IP my IP assigns me) to 224.0.0.2 (ICMP Router Solicit) was blocked.
Is it normal for packet to be sent out to the ICMP Router Solicit when you connect to the net? If it's not normal what sort of stuff could cause this?
 

More replies
Relevance 42.23%

I am not to worried about this problem except comcast is all over me about my bandwidth usage and threatened to cut me off for an entire year if I exceed their bandwidth cap again. I just went 400GB over in bandwidth usage, so I need to go on a bandwidth diet.After researching and sampling a few bandwidth monitors, I ran across Net-Peeker (http://www.net-peeker.com/) at bluetack(http://www.bluetack.co.uk)This program showed me in realtime that my system process was communicating with www.heartbeat.com over the ICMP protocol. Since I have never been to this site and I deemed any data in/outbound unwarranted I blocked the ICMP traffic to and from www.heartbeat.com using Net-Peeker's firewall.Instantly www.google.com appeared under the system process with in/outbound traffic on the ICMP protocol, I denied in/outbound traffic for that specific google address.Again instantly www.yahoo.com appears with the same traffic on ICMP, I blocked it, then google reappears from a different address.I ended up blocking the entire range of addresses(ICMP only) for google and yahoo. www.google.com is unrelenting and Net-Peeker blocks an outbound echo to a different google address almost every 5 secondsThe rule I created for the firewall is set to block both in/outbound traffic w/googles entire range of addresses, in the logs only outbound traffic is blocked and no record of any inbound...I ran mbam(updated) -full scan: Nothingran my free AVG 8.5(uodated) -full scan: Nothingran t... Read more

Answer:WeatherBug.a ?? Unwarrented ICMP traffic ??

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

3 more replies
Relevance 42.23%

At work, my network seems to slow down a great deal every so often. I ran Symantec and AVG on every machine as well as Adaware and made sure every box on the network is virus-free. The netscreen people walked me through setting up some policies showing viruses and logging their IPs in a log file. I also set up a policy for PING and ICMP traffic also with logs.
So far, none of these policies affected the problems I've been having trying to track down the boxes with viruses slowing down the network. One tech from Netscreen suggested it was a "Nachia" virus which is aka "Ping-of-Death". I ran some cleanup tools for that as well and could find nothing.

The equipment is a Netscreen 5 firewall, majority of the boxes in the network are win2k, few winxp pro, and 1 98se box.

Help
 

Answer:ICMP (Ping) attacks on my firewall

You really need to get your hands on a network sniffer so you can see what type of traffic is flooding your network...
 

4 more replies
Relevance 42.23%

I have one home computer with SBC DSL service. The system has a 2Wire 1000hg modem. I have Norton Systemworks 2005, Norton Personal Firewall 2006, Webroot Spy Sweeper, and Ad-Aware programs. I ran some security checks to get an idea of my protection. The 2Wire has a firewall along with the Window XP SP2 firewall. I have both of these deactivated and I use the Norton 2006 Firewall. Symantec's test results said the security status is SAFE. It also said the ICMP PING is open, all other ports are stealth. Sygate's test said all ports are blocked but the protocol ICMP Type 8 status is open. GRC's PING ICMP Echo test failed. Other ports were blocked. Is there a setting on the Norton Personal Firewall that needs to be changed? The installation says to use the default settings. I presume this is a secuity threat that I should try and fix. I haven't messed with any settings, they are still on default.

Answer:Ping Icmp Echo Test

I'm replying to myself, is that ok. Someone else on here recommended I use my personal firewall with my SBC 2Wire Modem's firewall. After going through the 2Wire's settings I found a setting for stealth mode and PING. I did the security checks again and each one passed.

3 more replies
Relevance 42.23%

I was wondering if any one can help me here. I have been having problems with my NIS, so today I uninstalled then reinstalled it. As soon as I got on the internet after, I have been getting ICMP echo request (8), about every 5-30 seconds. I tryed to get some info on it and it seems as though there was a problem with this a couple of months ago with a worm. Any advise, recommendations, help appreciated
 

Answer:Bombarde with ICMP echo request (8)

PS All echo requests are coming from different IP addresse
 

2 more replies
Relevance 42.23%

Problem: cannot access godaddy.com. All 4 computers on my home network cannot access godaddy.com. I do not get porn I just time out.

What I've done so far:
numerous anti-spyware programs have been run including spybotS&D and HijackThis (both before I found your forums), AdwareSE.
called both godaddy.com and verizon.net (my provider) with no luck, both say everything is fine on their end.

I have followed the FAQ with two problems:

-I mistakenly exited out of Counterspy without the log.
-Bitdefender crashed just as it was going to show the "detected problems" Explorer was the named culprit. I do remember mostly trojans found in email (trash box, Eudora Pro) that were deleted.

I do have the other 4 log files. I hope you can help, I have a website at godaddy.com that needs attending to.
 

Answer:Godaddy.com is unreachable

logs continued.
 

14 more replies
Relevance 42.23%

i have bought a second hand laptop microstar medion 2020,i am trying to connect to my existing router thompson 576,i have a belkin pci card and all seems ok,until i try to connect to aol but the followin error comes updns server unavailable24-01-08-033,it is searching for my ip address?? can any one help me i am so near yet so far from connection.i know there is a lot of computer literate people out there can anyone HELP

Answer:dns server unreachable (aol)

what operating system are you using?

2 more replies
Relevance 42.23%

can anyone help? i am trying to get to a website and keep getting this message Warning: mysql_connect(): Too many connections in /home/movies/public_html/store/includes/functions/database.php on line 19Unable to connect to database server! the site is dvd5movies .com

Answer:unreachable website

Warning: mysql_connect(): Too many connections in /home/movies/public_html/store/includes/functions/database.php on line 19Unable to connect to database server!The site must be down.

3 more replies
Relevance 42.23%

Hi,

I'm not sure what it might be but one day I noticed that about a dozen of websites I open regularly became unavailable. "The connection has timed out."

nslookup works OK and I get IP address resolved, I also tried tracert, it goes through 5-10 hops and then times out. I can still open some web sites but not all of them. I can open all web sites via online proxy so they are all up and running.

I have ADSL modem connected to my laptop, no routers, the modem doesn't have any static routing tables, so as far as I understand it, the list of hosts I see in tracert output depends on my ISP router.

The ISP is able to open all "problem" web sites on their side, but I can't get any help from them as they say that since tracert goes beyond their network it's not their problem and it's my computer actually blocking some of web sites.

I'm not aware of any software on my laptop which could possibly do that as well as I don't have any routing/proxy programs installed, so it seems that it might be a virus or some malicious software.

So what do I do? Try to find a virus or can it be a system issue?

Answer:some web sites became unreachable

Hi I'm new to this site but I'd like to help you.

Try downloading a alternate browser (I reccomend Google Chrome). This will make sure the problem isn't in your browser at least. Also can you ping any of those sites you can't get to?

2 more replies
Relevance 42.23%

build a 2k3 server, updated it and everything near my desk plugged into the exact same port on my switch, was able to RDP into as many times as I wanted, transfered some files to it, speed was good, everything is dandy. shut it down and put it into its place inside my closet, plug in the ethernet cable into the exact same port....

attempt to RDP and......


tried 3 different ports on my switch, same result, flushed the DNS, restarted the switch, same result....

wtf?? my last option is to take one of my LCDs to the closet and see whats up (LAST resort)
 

Answer:host unreachable... wtf???

probably something dumb...

that kinda crap happens to me all the time....

may as well bring the monitor over, usually you'll waste more time trying to figure it out
 

5 more replies
Relevance 42.23%
Question: Unreachable host

Hi Everyone,

For some reason, I cannot get my digital display sign to play well with my pc. I have had tech help, help from the installer, and trouble shooting myself, etc.

If the following makes any sense to anyone, feel free to share the knowledge. Thanks in advance!

Tracing route to 172.16.192.25 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms CISCOF1948 [192.168.1.1]

2 25 ms 25 ms 25 ms L201.PHIL-DSL-RTR11.verizon-gni.net [71.242.238.1]

3 L201.PHIL-DSL-RTR11.verizon-gni.net [71.242.238.1] reports: Destination net unreachable.

Trace complete.

Pinging 172.16.192.25 with 32 bytes of data:

Reply from 172.16.192.20: Destination host unreachable.

Reply from 71.242.238.1: Destination net unreachable.

Reply from 71.242.238.1: Destination net unreachable.

Reply from 71.242.238.1: Destination net unreachable.

Ping statistics for 172.16.192.25:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Its greek to me!
 

Answer:Unreachable host

6 more replies
Relevance 42.23%

Since the automatic upgrade was pushed to our PC's we can't reach www.msn.com. We can reach all other web sites.
Is there a workaround, I tried to restore to a date last week, but it didn't fix the problem.

More replies
Relevance 42.23%
Question: Server unreachable

I cannot get online whenever I try I get the following message in a software Update box. The server is unreachable. Retry the request. When I access network connections, the broadband connection symbol has a x over it, and there is this message. This connection is not available because there is a problem with your modem is network adapter. Can anyone offer any solution please
 

Answer:Server unreachable

Try to update the driver
 

4 more replies
Relevance 42.23%

Everytime I open a new browser I also get another window pop up with adverts, also certain websites are unreachable, I have scanned with AVG and adware and they keep finding things but removing them, this has been done in safe mode as well.... Below is the log from hijackthis.. PLEASE HELP...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:08:47, on 09/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
c:\Centenn.ial\Audit\CAgent32.exe
C:\Centenn.ial\Audit\xferwan.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\NWDLS.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EZEJTRAY.EXE
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Progra... Read more

Answer:Ad Pop ups and certain sites unreachable - Please help!!!

Quote:




Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.





Hello and welcome to the forums

My name is Katana and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:
1. If you don't know, stop and ask! Don't keep going on.
2. Please reply to this thread. Do not start a new topic.
3. Please continue to respond until I give you the "All Clear"
(Just because you can't see a problem doesn't mean it isn't there)

If you can do those three things, everything should go smoothly :D

Please Note, your security programs may give warnings for some of the tools I will ask you to use.
Be assured, any links I give are safe

----------------------------------------------------------------------------------------

I apologize for the delay in responding, but as you can probably see the forums are quite busy.
Unfortunately there are far more people needing help than there are helpers.

If you still require help please post a fresh HJT log

Installed Programs

Please could you give me a list of the programs that are installed.Start HijackThis
Click on the Misc Tools button
Click on the Open Uninstall Manager button.
You will see a list with the programs installed in your computer.
Cl... Read more

1 more replies
Relevance 42.23%

We started experiencing an issue with some customers unable to browse out to the internet.  Manually setting their proxy server to the proxy.server.com address works, but not when we use the http:\\proxy.pac. In the auto configuration script area
 on a working machine entering the http:\\proxy.pac in the address bar prompts for you to download/open the pac.  On the non working machine it ALSO cant reach the destination.  If *I* log on to the machine it works as intended.  We are
using preferences to push these settings and over 22,000 machines are working correctly.  But recently a number of people have started to experience this issue, and we are perplexed.  thoughts?

More replies
Relevance 42.23%

2 nights ago I purchased a Linksys WPC54GS for my laptop so that I could access the Free Wireless Internet at the motel I was staying at in Ohio, and it worked great. Now I am in a hotel in CA that has free Wireless Internet access also, and my computer says I'm connected, but when I try to access the internet I get "Host is unreachable or DNS server culd not resolve the DNS name." Can anyone tell me what to do to get online?
 

Answer:Host is unreachable

Go down to the front desk and ask them for their network settings/codes etc. See if they can help you since its their network.
 

2 more replies
Relevance 41.82%

I have three Win 2000 machines on my internal network at home. One of them is constantly sending out ICMP packets to 192.165.00.01 to the top then starts on 211.161.60.00 and counts up.
I have searched and searched for a proccess that is doing this to shut it off but.........
anyone have any ideas, the other two machines don't do this. Plus this is a new install.
The nic card is d-link and the router/switch is a 4 port d-link

Thanks to anyone that replies. I thought about putting this in networking foram but figured this was more of a security issue
 

Answer:Outgoing ICMP packets scanning from my computer

13 more replies
Relevance 41.82%

Hi, got an issue with Zonalarm IS 6.5.737.000. I run a regular external test on my firewall/AV programs using Symantec on line scanner and Shield's Up every so often. To my dismay, both scans showed that Zonealarm was quite happy to shout from the rooftops who and where my IP was, by responding to a ping request, making me a prime target for webhooli's. I've checked ZA's firewall settings, internet zone is set to high and therefore stealth mode, but responding to ICMP/Ping requests does not sound very stealthy to me. Anybody know how to adjust the firewall settings to stop these responses ( current settings all at default and I haven't tampered with them). Muchas gracias

Answer:Zonealarm Failing ICMP/Ping probe

Are you behind a router that does NAT? It might just be the hardware device that is scanned and not your computer.

2 more replies
Relevance 41.82%

So in the last two days when I disconnect from AirVPN I get a popup from Eset claiming my own router ip (it's the missing details that is cleared out in the image below) is being blocked for ICMP flood attack. I've logged into my Netgear R7000 to check what is all connected to my network and nothing looks out of the norm. I do have an ip range set and it should be blocking anything that isn't allowed on the network.

I was running version 1.07.12_1.2.5 (Wasn't done long ago) and just updated to version 1.08.34_1.2.15 which looks like a junk update from the notice. Um no Netgear you can't have my analytic data.

Such a newb with this firewall/network settings and security crap.

I will add that after doing some minor checking online I ran the following common ports scan from here.

The results are below. I'm not sure if the last section that bombed is because AirVPN should be making me hidden or what. Like I said network/security newb.
 

More replies
Relevance 41.82%

i just recently bought a used laptop and downloaded a different firewall than i have used before.. Sygate Personal Firewall.
after i connected to the internet through my dial up connection i had this message pop up,.

"Win32 Kernel core component (Kernel32.dll) is trying to send an ICMP Type 10 (Router Solicitation) packet to [224.0.0.2].
Do you want to allow this program to access the network?"

ive said no to this, and then wasnt able to load any webpages. i didnt click yes, instead wanted to come online here using my regular computer and ask what does this message mean?
 

Answer:Kernel32.dll ICMP Type 10, access to network?

do i need to grant access to this to let any webpage work, or is this something bad that i need to say no to ??
 

1 more replies
Relevance 41.82%

I seem to be getting about 3 of these ICMP: Type:11 Code:0 showing in my firewall a SECOND. I have found out this and unreachable address that something is trying to call. But how do I find out what ?. Does anybody know of a TCP port sniffer ?
My firewall (look'n'stop) shows only Nod32,WLMessenger, CfosSpeed(network balancer), and maxthon showing as connected. I have a dual boot system and with the second system with the SAME 4 things connected there are NO ICMP: Type:11 Code:0 entries in the firewall.
Thanks
 

Answer:ICMP: Type:11 Code:0 showing in firewall

A packet sniffer like Wireshark should give you information on ICMP packets but, so should your firewall logs, I'd think. Regardless, Wireshark should show you source and destination IP. In an ICMP packet with a type 11 and a code 0 means that the packet's time to live (TTL) exceeded in transit.
 

1 more replies
Relevance 41.82%

Hi Guys,I check my routers firewall daily - I would say I get approx' 20 ICMP / UDP port scan attempts on a daily basis. (Majority ICMP ) - is this an unsually high figure? - they appear to be from all over the place, main attempts seem to be midnight - to early hours of the morning. No One on any PC's in the house at the time , wireless powered down & all pc's off. Secondly, which one should we be more concerned about a firewall ICMP check or port scan?Thanks.

Answer:quantity of icmp requests - unusually large or not?

Hi -
First, do you have any "software firewall" installed on your computer, along with your Antivirus program ?
Next, is there a specific reason why you cannot turn off the router at the wall socket over-night (telephone or similar) ?

Thank You -

11 more replies
Relevance 41.82%

Websense? Security Labs? has received a sample of a new phishing Trojan that delivers stolen information back to the attacker via ICMP packets. Upon infection of a victim's computer, the Trojan will install itself as an Internet Explorer Browser Helper Object (BHO). The BHO then waits for the user to post personal information to a monitored website. As this information is entered by the user, it is captured by the BHO and sent back to the attacker...

More replies
Relevance 41.82%

Everyday I have thius couple of messages from my Avira firewall

"ICMP Flooding started on adapter Connessione alla rete locale (LAN)"

and, some milliseconds later:

"ICMP Flooding ended on adapter Connessione alla rete locale (LAN)"

I have read that this behaviour is a kind of Dos attack, can you help me removing it?

Here below are my HJThis and DDS logs.

Thanks a lot for your help

Answer:ICMP flood message from Avira firewall

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool.??No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies