Sorry your browser is not supported!

I don't know if anybody here knows what the problem could be, but when it comes to network connections, I'm an idiot.

2 problems recently arose - not at the same time, but distant apart for me to not assume they're connected. One is that I've found my browser to suffer from a case of 'redirecting' my searches, which I might have received because Kaspersky Internet Security 2009 can't update itself, at least, it managed to slide beneath the radar.

I rolled back the updates to a previous one, but Kaspersky still failed any kind of connection to its update server. So after I managed to find my disk, I repaired the software, problem still occurred. I uninstalled Kaspersky and nabbed a 30-day trial of ESET Smart Security/NOD32, I hit the update button (although it's in date) and it couldn't connect to the update server also. In attempt to solve this problem and the the 'redirect' issue, I nabbed MalWareBytes (which also couldn't update), booted it in SafeMode and did a scan - 'redirect' problem solved.

So, I'm still stuck with my Internet Security failing its updates, currently it's doing a full scan (in case it's a virus) and is at 31% and will likely take forever. So in the meantime, I'd be interested in seeing what else it could be, after all, it could be something else. I don't think it's Windows Firewall because it's turned off (because KIS and ESET have their own Firewalls). It's possible my router settings have changed for some reason, but I don't have access to the Admin for that (it's not my router).

But I suppose it also could be a network setting on my end. But, when it comes to network connections, I suck, so I wonder if anybody has any suggestions in solving this issue?

Thank you.

That means you have a virus doing that for you. I suggest going back to your last recovery save, and seeing what happens.

This is the annoying thing, this isn't my computer, my laptop has been dead since Easter and I've not have the funds to repair it (it'll cost me £100 just to have it looked at), so my sister has allowed me to use her old computer in the meantime, so some pillock who used it before me turned off system restore, so there's no previous states for me to restore to. Previous computer problems have taught me 3 important rules: paying for reliable internet security is worth the money, back up your data regularly and system restore is made of win. My sister on the other hand, is a lot more reckless, hence I found several trojan horses as soon as I installed my internet security on here, after all, hers was a trial of Norton 2002, which probably ran out 8 years ago.

Then it's not your fault.

Also



If theres only a few, theres probally one more.

Funny story. Just fixed my PC after Kaspersky expired. In he time it took me to find a Tunnock's Teacake and eat it, four programs had installed themselves, part of the System32 folder disappeared, Explorer also did a runner, and Kaspersky itself was broken...

Like a tidal wave. Had to run Task Manager and find the locations of the suspect programs, then nuke them with a 30 day trial. Still having to run explorer from the Task Manager though...

I don't think it's a virus. At least ESET's not found it.

However, it manages to update itself on bootup (whereas Kaspersky couldn't), so, as my Kaspersky runs out in 14 days, I might as well spend money on ESET instead of renewing my license. The fact Kaspersky hasn't updated probably allowed for the entry for the malware and viruses I did discover.

I am under the assumption it's network related not virus related, but if I can't find a solution, I'll have to deal with it - for me it's only a temporary set-up and at least ESET can manage to find a way to update itself.

Hmm, I've noticed my PC has been a little slow too, checked task managed - manages to eat 70% CPU, but when I check system idle process, it shows 99% (meaning I should be seeing 1% CPU).

However, the interesting development is, I've created a new fresh user account to see if it makes a difference...it has, ESET just updated itself and not on boot-up and it has detected 3 suspicious files which it has sent to the ESET people to look at...hopefully, these are the 3 files causing the problem and they come back with a solution.

ESET has also asked for a Windows Update and is downloading, so hopefully this will point me in the right direction, given these pop-ups are appearing, it must mean it can connect to its server.

Still not sure if it's a virus causing it - but I'm still suspicious there's something on my PC. The fact a new user account seems to have solve the problem suggests that maybe it was a user setting that stopped anything from updating, but I'm still not ruling out virus.


[edit]

I might have found it - MalwareBytes still has the problem of not being able to update, but I did another scan with it in SafeMode and it found 2 instances of a DNS related virus, so after it was removed, I hit 'update', did another scan and with the update and it found about 6 trojans. It seems both ESET and MalWareBytes can update, I'm just going to do one more scan with ESET and hope all traces of any viruses are gone. It seems I might have solved this one by myself.

haha, was just about to suggest checking the HOSTS file. Your computer checks the HOSTS file for any address to ip mappings, then checks the DNS servers listed on your network settings in order.

So obviously the virus that you had ran a dns server on your pc locally that kept your antivirus stuff from updating.

Once you get it fixed, make sure you run only one a/v, as multiple a/v running can cause issues.

Cheers,

It seems to be fixed now, at least I've not experienced anything wrong since the DNS malware has been removed - I am only running one AV at the moment - i removed Kaspersky before I installed ESET and I only have the free version of Malware Bytes, so it doesn't use it's protection software, just scanning and isn't conflicting with ESET's malware protection.

However, concerning hosts - I've checked my network connections in ESET (ekrn.exe) - there's 4 IP addresses, mine and others that look like nothing to me...perhaps they make more sense to somebody else?



My assumption - based on the number made by Safari & ESET is that these are the connections made every time the computer communicates with another server - the number of connections by ESET look right for the frequency I have it update.