connection refused by symantec.com

  • ThATKiD
  • Proficient
  • Proficient
  • User avatar
  • Posts: 321
  • Loc: somewere over there

Post 3+ Months Ago

I am working on someones computer when my connection to symantec .com was refused. i cant get on liveupdate or on to the symantec site to download definition. tried with mozilla and IE anyone have any ideas?
  • Anonymous
  • Bot
  • No Avatar
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post 3+ Months Ago

  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

Well, normally when you can't get to an AV website, there's probably a virus or something screwing with things. What were you trying to do?
  • ThATKiD
  • Proficient
  • Proficient
  • User avatar
  • Posts: 321
  • Loc: somewere over there

Post 3+ Months Ago

im trying to get into http://www.symantec.com and i cant i also cant live update.
i know this comp has saser not sure what version i think it has the jeebo worm and i think it was skynet or somehting to that effect
  • DuckIT
  • Graduate
  • Graduate
  • User avatar
  • Posts: 155
  • Loc: London, UK

Post 3+ Months Ago

Try: http://housecall.trendmicro.com/

S
  • ThATKiD
  • Proficient
  • Proficient
  • User avatar
  • Posts: 321
  • Loc: somewere over there

Post 3+ Months Ago

ok let me rexplain cuz i did kinda rush on it a little bit. That compuer has nortons anti virus pro 2004. That computer cannot log into the symantec website to manually download updates or on to live update engine.
  • BlueHat
  • Banned
  • Banned
  • User avatar
  • Posts: 589
  • Loc: Cyprus

Post 3+ Months Ago

how are u connected to the internet.

Are u having direct connection or u r under a server.
  • bigcheeez
  • Graduate
  • Graduate
  • bigcheeez
  • Posts: 243

Post 3+ Months Ago

You may have to reinstall norton. It is normally pretty straight forward, although you may need a separate removal utility from symantec.

I have seen a few problems like this with norton before, and this usually fixes this. This is of course if you can get out to other sites and have network connectivity.

That virus definitely had something to do with this though.
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

I was just thinking. Pull up your hosts file in Notepad. The hosts file will be in %System%\drivers\etc\hosts where %System% is System32 in Winnt (Win2k) or Windows (XP)

The file has no extension, so you'll have to browse for "all files" instead of .txt

Chances are the virus has overwritten this file to prevent your accessing a variety of sites. For example one current virus adds something like this:

Quote:
127.0.0.1 http://www.symantec.com
127.0.0.1 securityresponse.symantec.com
127.0.0.1 symantec.com
127.0.0.1 http://www.sophos.com
127.0.0.1 sophos.com
127.0.0.1 http://www.mcafee.com
127.0.0.1 mcafee.com
127.0.0.1 liveupdate.symantecliveupdate.com
127.0.0.1 http://www.viruslist.com
127.0.0.1 viruslist.com
127.0.0.1 viruslist.com
127.0.0.1 f-secure.com
127.0.0.1 http://www.f-secure.com
127.0.0.1 kaspersky.com
127.0.0.1 kaspersky-labs.com
127.0.0.1 http://www.avp.com
127.0.0.1 http://www.kaspersky.com
127.0.0.1 avp.com
127.0.0.1 http://www.networkassociates.com
127.0.0.1 networkassociates.com
127.0.0.1 http://www.ca.com
127.0.0.1 ca.com
127.0.0.1 mast.mcafee.com
127.0.0.1 my-etrust.com
127.0.0.1 http://www.my-etrust.com
127.0.0.1 download.mcafee.com
127.0.0.1 dispatch.mcafee.com
127.0.0.1 secure.nai.com
127.0.0.1 nai.com
127.0.0.1 http://www.nai.com
127.0.0.1 update.symantec.com
127.0.0.1 updates.symantec.com
127.0.0.1 us.mcafee.com
127.0.0.1 liveupdate.symantec.com
127.0.0.1 customer.symantec.com
127.0.0.1 rads.mcafee.com
127.0.0.1 trendmicro.com
127.0.0.1 http://www.trendmicro.com
127.0.0.1 http://www.grisoft.com


That essentially prevents your computer from accessing any of those sites.

Remove anything like that that you see. Unless you've modified the hosts file in the past, the only thing that should be in there is

Quote:
127.0.0.1 localhost


Remove everything except that one. Then click File | Save

Don't do save as, because that will add an extension to the file and we don't want that.

In theory, this should allow you to regain access to symantecs site.
  • ThATKiD
  • Proficient
  • Proficient
  • User avatar
  • Posts: 321
  • Loc: somewere over there

Post 3+ Months Ago

thanks alot atno im goign to try that. lately i have found myself being the local IT guys.

In school i was selected to help the tecnitians fix up the school from a virus not sure which on yet i havent started.
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

*smiles ThaTkid Good luck with the virus stuff at school. Always a pain in the behind, but if you remember what you learn each step of the way it will go a long way towards helping you improve.

Let us know how it goes, and if you get stuck you know where OZZU is.
  • jen
  • Born
  • Born
  • jen
  • Posts: 2

Post 3+ Months Ago

i am having the same problem accessing symantec website...is it my computer or the website? can anyone offer me advice keeping in mind that i am not very computer literate....
  • grinch2171
  • Moderator
  • Genius
  • User avatar
  • Posts: 6801
  • Loc: Martinsburg, WV

Post 3+ Months Ago

Another problem could be that it isn't a legitimate copy of Norton. I have heard of people with pirated versions of NAV2004 are unable to use live update.
  • warchild
  • Born
  • Born
  • warchild
  • Posts: 4

Post 3+ Months Ago

could you walk me through the host files thing cause I'm new to this stuff. I'm having the same problem logging on to symantecs web page and I need to run my live updates.
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

Warchild and Jen, I don't think I can be any more specific than this reply above:

Click here or just scroll up a bit.
http://www.ozzu.com/sutra72289.html#72289
  • ThATKiD
  • Proficient
  • Proficient
  • User avatar
  • Posts: 321
  • Loc: somewere over there

Post 3+ Months Ago

yeah i think atno painted a good picture there. thanks alot atno your advice always comes thru. =)
  • warchild
  • Born
  • Born
  • warchild
  • Posts: 4

Post 3+ Months Ago

Thanks, your advice worked.
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

:thumbsup:
  • childofjah
  • Born
  • Born
  • childofjah
  • Posts: 2

Post 3+ Months Ago

I've read the replies above. I even tried that website that someone linked too to scan my computer. BUT, I see that when it asks me to agree to the download, it has the same address as where it sends me when I ping http://www.symantec.com. When I ping http://www.symantec.com I get a reply from a568.x.akamai.net which is the same site for the PC scan, so I didn't do it. My other issue is this, I looked at my host file like instructed above but I only see the "local host" entry. Nowhere do I see any other sites listed. Anyone please help. Thanks in advance for I am at your mercy.
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

Im not sure what else to suggest at the moment, but Akamai Technologies owns the IP address for http://www.symantec.com

It is a legit company:

http://www.akamai.com/index_flash.html
  • childofjah
  • Born
  • Born
  • childofjah
  • Posts: 2

Post 3+ Months Ago

Thanks. I didn't know that was a company that could be trusted. I had some sasser crap still floating around. Fixed now! Thanks again!
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

*lol - If I recall correctly, they are out of Cambridge. Probably owned by a bunch of MIT grads making mega bucks now *lol.
  • jasonrechtin
  • Born
  • Born
  • jasonrechtin
  • Posts: 4

Post 3+ Months Ago

I am having this problem as well and have tried EVERYTHING I can think of to fix it. My problems are:

- I cannot get my live update to update correctly (I get a LU1814 Error - LiveUpdate could not retrieve the update list).
- I also cannot connect to any of symantec's websites (http://www.symantec.com, symantec.liveupdate.com, etc.) through my browser (IE).

I tried:

- Checking my host file and the only entry is the localhost entry.
- When I ping http://www.symantec.com, it resolves to 127.0.0.1.
- I have tried killing all services and processes that I can think of.
- I uninstalled NAV 2004 and reinstalled.
- Updating the NAV Virus Definitions manually and have gotten a clean virus scan.

The problem persists - any ideas?
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

Go to a command prompt

Start | Run > then type cmd (or command if 98 or ME)

type: ipconfig /flushdns

See if that helps.
  • jasonrechtin
  • Born
  • Born
  • jasonrechtin
  • Posts: 4

Post 3+ Months Ago

Thanks for the quick response. I tried it and rebooted and still no luck.

Any other ideas?
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

The only other thought that immediately comes to mind is to make sure that your firewall didn't get set inadvertantly to block access. Quiest way to check is disable the firewall and see if you can get through then.
  • jasonrechtin
  • Born
  • Born
  • jasonrechtin
  • Posts: 4

Post 3+ Months Ago

I do not have a firewall installed right now. Maybe that is my problem. If you think of anything else, please let me know...
  • LAbrego
  • brego from LA
  • Web Master
  • User avatar
  • Posts: 2852

Post 3+ Months Ago

Jason, take a look of this site and see of it help:
http://www.isaserver.org/tutorials/Fixing_the_Symantec_LiveUpdate_Problem.html

If that does not fix your problem I suggest you start your computer in Safe Mode (tapping F8 several times when you boot until you see a menu) open IE and try Trend Micro Housecall: http://housecall.trendmicro.com/housecall/start_corp.asp (you'll download a small definitions and a scanning tool. I'd suggest clicking on the "My Computer" or "C/local" drive option for scanning.)

Again if that does not fix your problem either download the latest version of hijack this:
http://www.majorgeeks.com/download3155.html
save the file in your documents, run it and post you log here to see if we can find something.
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Posts: 23456
  • Loc: Woodbridge VA

Post 3+ Months Ago

Nothing else at the moment and I won't be back until later this evening. The wierd part is what you said about symantec ping resolving to 127.0.0.1

The only thing that I can think of that would cause that is that it would be in your hosts file. Yet you say it's not. Double check that the hosts file you are looking at is \system32\drivers\etc\hosts

This is what I was expecting you to tell me was there:
http://www.ariejan.net/content/view/43/2/

To test something, take a look at that list and see if you can access any of those sites. If you can't you probably have that virus that's listed there. My current expectation is that you will not be able to connect to most or all of those sites.
  • chewie
  • Born
  • Born
  • chewie
  • Posts: 1
  • Loc: Ellensburg, WA

Post 3+ Months Ago

I'm having the same problem. I cannot goto any companies site that seems to involve anti-virus; symantec, trendmicro, mcafee, etc. The host file is empty except the localhost listing. The hosecall.trendmicro.com link does work though, so I'm thinking there must be something running that is redirecting or blocking these sites on port 80. I can ping all these sites on the command line. I have even tried to enter the IP address to the sites and I'm still blocked. There is no firewall running on the system and I have run Spybot, Ad-Aware, spy-sweeper, spyware blaster, hijackthis, cwshredder.

I found it, I'm such an idiot. I opened the hosts file and did not think to scroll all the way to the bottom of the file. The file had a ton of blank lines. So make sure to scroll all the way through the file. Duh :oops:

The Viruses trend found were DOS_AGOBOT.GEN and WORM_RBOT.LA

I hope this helps.
  • LAbrego
  • brego from LA
  • Web Master
  • User avatar
  • Posts: 2852

Post 3+ Months Ago

Hey, that's a good feedback chewie, never thought of that, thanks. Hope Jason come back and check that too.
  • Anonymous
  • Bot
  • No Avatar
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post 3+ Months Ago

Post Information

  • Total Posts in this topic: 31 posts
  • Users browsing this forum: No registered users and 36 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.