Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Internet works fine, but can't connect to services like skype etc.


  • Please log in to reply
50 replies to this topic

#31 sturm115

sturm115
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:12 PM

Posted 09 November 2014 - 10:57 PM

no i get this message  https://drive.google.com/file/d/0B8E8AIwrysCiMk45RFQ3ZlRKaEk/view?usp=sharing



BC AdBot (Login to Remove)

 


m

#32 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,536 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:12 PM

Posted 10 November 2014 - 04:21 AM

And what firewall do you use?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#33 sturm115

sturm115
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:12 PM

Posted 12 November 2014 - 11:25 AM

I use the normal windows firewall.



#34 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,536 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:12 PM

Posted 12 November 2014 - 01:19 PM

OK, then we will turn it off and try again. Now do this only when you are on your home network, with a private IP address.

 

Go to Control Panel / Windows Firewall.

Click on Turn Windows Firewall on or off.

Turn off Windows Firewall (for Private and Public network settings).

 

Then upload a picture with your screencapture program.

 

Then turn Windows Firewall back on (for Private and Public network settings).

 

Let me now what your screencapture program did.


Edited by Didier Stevens, 12 November 2014 - 01:19 PM.

Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#35 sturm115

sturm115
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:12 PM

Posted 12 November 2014 - 04:46 PM

I got the same exact error message as before when i did gyazo with the firewalls turned off



#36 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,536 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:12 PM

Posted 12 November 2014 - 05:27 PM

Have you used Sysinternals Process Monitor before?

 

http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#37 sturm115

sturm115
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:12 PM

Posted 15 November 2014 - 01:13 PM

no i have not



#38 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,536 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:12 PM

Posted 15 November 2014 - 02:20 PM

Are you computer savvy? Do you know what a process is, a TCP connection, ... ?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#39 sturm115

sturm115
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:12 PM

Posted 17 November 2014 - 01:14 AM

Yes i know that stuff, i suppose what i should have said is that i have used this program before so i have no experience with. I understand what is does, but dont normally have a need to use this type of thing for my computer. On the other note, i have it and is there anything in particular you want me to look at? Some reg file or exe?



#40 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,536 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:12 PM

Posted 18 November 2014 - 03:20 PM

You start Process Monitor. It's just one executable you can download from Microsoft Sysinternals.

You accepts the filters as proposed.

 

Then you try to upload a screenshot with gyazo.

 

Then you stop capturing events With Process Monitor.

You open the Filter.

You add a filter: Process Name is gyazo.exe

You add a second filter: Operation begins with TCP

 

What connections do you see?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#41 sturm115

sturm115
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:12 PM

Posted 20 November 2014 - 11:06 PM

So i did that and got nothing showing up. On another note, I was at a friends office and got one of the it guys to take a look at it. He noticed that in my internet connections on IE it said some settings are managed my the system administrator( which i am) and that i can't access it for some reason. think it may be related?



#42 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,536 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:12 PM

Posted 22 November 2014 - 12:36 PM

Then I don't know what prevents your applications from accessing the Internet.

 

If there was no problem, you would see successful connections in Process Monitor's logs.

If a firewall is blocking your applications, then you would see failed connections in Process Monitor's logs.

But you don't see anything. And I have no explanation for that.

 

Was this machine the victim of a malware infection and cleanup?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#43 NullPointerException

NullPointerException

  • Banned
  • 125 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:42 AM

Posted 22 November 2014 - 01:12 PM

It seems we should use NetAdapter Repair All in One. Since I, too, am confused about his situation. 

I suggest you to perform Advanced Repair.

 

Edit : Didier, you could also try pinging the DNS, if that helps.


Edited by NullPointerException, 22 November 2014 - 01:12 PM.


#44 sturm115

sturm115
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:12 PM

Posted 25 November 2014 - 11:45 PM

So i used the program suggested by Null and it fixed it. Through i not entirely sure what was causing it since it just did it stuff then poof its done. Ill see if i cant find what it was later but thanks for all the help.



#45 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,536 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:12 PM

Posted 26 November 2014 - 07:31 PM

Great! I have not used that program myself, so good suggestion by Null.

Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users