Problems with PC

roar_ie

Hey Guys,

I am having problems with my PC. I can't seem to download certain files from the internet using either Firefox 3.0.5, IE 7.0.5730.11 or Google Chrome 1.0.154.46

For example the following URL doesn't work (Link is to .NET 3.5 Read Me):
http://download.microsoft.com/download/9/a/e/9ae0f6cc-7032-408e-9ca7-989f9e4af4ec/dotNetReadMe.htm

However I can access the Google cached version of the site here:
http://74.125.47.132/search?q=cache:http://download.microsoft.com/download/9/a/e/9ae0f6cc-7032-408e-9ca7-989f9e4af4ec/dotNetReadMe.htm

Another example would be (AVG 8.0 Latest Virus definitions)
http://update.avg.com/softw/80/update/u7avi1425rj.bin

The problem first arose when I was trying to update AVG 8.0 (Original Thread). I have since uninstalled AVG and installed Comodo. However Comodo has yet to find anything wrong on the system.

My OS is Windows XP Home Edition, Version 2002 with Service Pack 3. I am pretty sure the issue must be system wide as it is effecting all my browsers. I have looked through the processes running in Task Manager and nothing seems out of the ordinary according to the results from google.

My initial thought was that some virus/worm had infected the PC but so far I can't confirm it plus this is the only problem I am currently having. Everything else is working fine. I was starting to think it may be something to do with the URL but I can download the following http://download.comodo.com/cis/download/setups/CIS_Setup_3.5.57173.439_XP_Vista_x32.exe, which is the COMODO anti virus installer.

Any other ideas on what is causing this issue?

Thanks

Ghost Train

does this work for the avg definition, if so its probably dns settings
http://212.96.161.238/softw/80/update/u7avi1425rj.bin

roar_ie

Yep that URL works.

I checked my DNS settings and it looks like there were manually entered DNS servers. I changed it to obtain DNS servers automatically but it didn't work. I then changed it to another set of DNS servers that my laptop is using and still no luck.

When I used ping in Command Prompt I got the following:

Pinging update.avg.com [127.0.0.1] with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms

Obviously this is wrong and is what is causing the problems.

I then check my Hosts file the only entry there is:
127.0.0.1 localhost

I then check my IP Routing table and these are the entries there:

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x20002 ...00 30 1b bc 14 be ...... Broadcom NetLink (TM) Gigabit Ethernet - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.1.1    192.168.1.33       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      192.168.1.0    255.255.255.0     192.168.1.33    192.168.1.33       20
     192.168.1.33  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.1.255  255.255.255.255     192.168.1.33    192.168.1.33       20
        224.0.0.0        240.0.0.0     192.168.1.33    192.168.1.33       20
  255.255.255.255  255.255.255.255     192.168.1.33    192.168.1.33       1
Default Gateway:       192.168.1.1
===========================================================================
Persistent Routes:
  None

which matches up with my laptop (which is running correctly).

I then ran the following commands in command prompt:
ipconfig /flushdns
ipconfig /release
ipconfig /renew

No effect. It still thinks update.avg.com is at 127.0.0.1

Any ideas why it thinks update.avg.com is at 127.0.0.1? I know I can manually enter the IP into hosts and that should fix the issue for now but I want to find the underlining issue causing all of these problems.

Thanks

Ghost Train

that is pretty weird

sure you checked the right host file?

tried disable the comodo firewall.. even though you said the problem was there before comodo



maybe download the latest broadcom drivers for your card and uninstall the current drivers and reinstall the new ones

i have seen the broadcom software do funny stuff, so if you have that installed just uninstalling the extra programs they install might help... not the driver just the software



could be some sort of virus, blocking av updates? maybe run malwarebytes, see if that picks up anything

roar_ie

Cheers Ghost Train. Malwarebytes did the trick. There was a trojan on my PC that was changing the DNS in the regestry. All gone now hopefully.