Firewall problem

I'm using a music download software that shows that it is behind a firewall. I use AVG (free edition) and Windows patrol. I can't find anywhere where they have any firewall settings. Besides that, I have a router (Netgear) and the music download software says it might not be configured to allow it to work. I've used this in the past (music downloader) but can't remember if I've used it since adding the router. I've installed several download programs to no avail. Needless to say, I need some advice.

 

I guess you need to NAT whatever port the program uses in to your computer.
So you need to figure out the port, then make a NAT rule on the firewall redirecting that traffic to the ip of your computer. So you should also set a static ip on your computer. If you get IP from a DHCP, the NAT rule will stop working if you get a new ip next time you boot computer.
How you setup NAT\port forwarding on your router is diffrent on all brands, so read the manual. But you prob have to open the configuration page via an internet browser.

 

I may have intermediate experience but you are talking greek to me. I have no idea how to do what you have suggested.

 

Ok first start a command line (Start->Run cmd)
Type in ipconfig, and press enter.
Copy the default gateway IP. Ex. 192.168.1.1
Paste it in to the adress field in your internet explorer, and hit enter.
If you now get a Netgear configuration site, your inside the router\firewall config.
Look at the menus to see if you can find port forfarding\NAT etc..
You have to make an entery there. But you need the port that the program uses to do this, and your ip. Your ip is listed in ipconfig (same place you found gateway). But the port you have to google, or look in the programs settings.

 

Thanks, not trying to ignore you, just went to bed was all. I'll give the IP config a look at.

 

Hi, Bubba.

Neither AVG nor WinPatrol are firewalls. I expect your Netgear router behaves as a firewall. That is quite possibly why your music download software shows it is behind a firewall. Also, if you don't have a 3rd-party software firewall installed, then I suspect your computer is using the native Windows XP firewall (if you are using Windows XP SP2).

I Googled "music downloader" and got over 95,000 results, many of which link to sites (some dangerous, according to McAfee's SiteAdvisor) dealing with various peer-to-peer (P2P) file sharing programs.

Please answer the following questions for us. More details might help us find a solution more quickly.

1. What is the exact brand name and version of your installed "music downloader" program?
2. What is the model number of your Netgear router?
3. What Windows version and service pack are you using?

 

Thanks for the response.

Music downloader:Limewire
Netgear:MR814 v3
Windows:XP SP2

 

I went to my control panel, clicked on the Windows firewall and looked through it and found that I had several exceptions listed there with Limewire being one of them. I guess I had forgotten I had used it before.

 

Thanks, Bubba.

Here's a link for configuring Lime Wire to work through certain software firewalls.

• Lime Wire: Trouble connecting? Firewall problems?

I'll see if I can find specific instructions for configuring your Netgear router to allow Lime Wire traffic.

 

• PORT Forward: Port Forwarding for the Netgear MR814

Please let us know how it goes.

 

Thanks, just got home from work and have to do honey do's, will try solutions later.

 

I got the first part ok but when following port forwarding and trying to run a cmd command, I get a illegal instruction and can't get past that point?

 

Hi, Bubba.

I searched the Port Forward page for cmd and didn't find it anywhere on the page.

Can you provide more detail about exactly where in the instructions you are stuck? (Perhaps paste the text here?)

 

It's in the part about getting a static IP address. After clicking on it, it gives you instructions to go to run and type in cmd. That's as far as I got because something is wrong with my cmd.

This is the text:

LimeWire's Port for incoming connections

To setup port forwarding on this router your computer needs to have a static ip address. Take a look at our Static IP Address guide to setup a static ip address. When you are finished setting up a static ip address, please come back to this page and enter the ip address you setup in the Static IP Address box below.

 

Thanks, Bubba. I found the section you referenced.

Hmmm..., can you please provide all of the exact error message you get?

Let's also investigate the possibility of malware preventing you from using the
Start > Run > cmd > OK button
procedure.

Click here to download "HJTsetup.exe ".

1. Save HJTsetup.exe to your desktop.
2. Double-click on the HJTsetup.exe icon on your desktop.
   (By default it will install to C:\Program Files\Hijackthis)
3. Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
4. Put a check by Create a desktop icon and then click Next again.
5. Continue to follow the rest of the prompts from there.
6. At the final dialogue box click Finish and it will launch HijackThis.
7. Click on the Do a system scan and save a log file button.
   (It will scan and the log should open in Notepad.)
8. Click on "Edit" > "Select All" to higlight the entire Notepad contents.
9. Then click on "Edit" > "Copy ".
10. Come back here to this thread and Paste the log in your next reply.
    (Right-click in the message body field and select "Paste ".)

CAUTION: DO NOT have HijackThis "fix" anything without carefully following expert guidance. Otherwise, you might render your computer unstable or even unbootable. Most of what HijackThis finds will be harmless or even required.

DISCLAIMER: I am not a HijackThis (HJT) log analysis expert. However, I will look at your HJT log to see if I can recognize any signs of malware that are obvious to my untrained eye.

 

OK, I've used Hijack this before.

 

Here is the Hijack this file:

Logfile of HijackThis v1.99.1
Scan saved at 7:35:46 PM, on 6/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPMon32.exe
C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPClient.exe
C:\Program Files\D-Link\Air USB Utility\AirCFG.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\john\My Documents\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://bigblueheaven.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [IPInSightMonitor 02] "C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPMon32.exe "
O4 - HKLM\..\Run: [IPInSightLAN 02] "C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPClient.exe" -l
O4 - HKLM\..\Run: [D-Link Air USB Utility] C:\Program Files\D-Link\Air USB Utility\AirCFG.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Yahoo! Freecell Solitaire - http://presence.games.yahoo.com/yog/y/fs10_x.cab
O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} (DD_v4.DDv4) - http://www.drivershq.com/DD_v4.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=48835
O16 - DPF: {231B1C6E-F934-42A2-92B6-C2FEFEC24276} (yucsetreg Class) - C:\Program Files\Yahoo!\common\yucconfig.dll
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1138381294296
O16 - DPF: {8EC18CE2-D7B4-11D2-88C8-006008A717FD} (NCSView Class) - http://63.241.168.237/ecwplugins/ncs.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://floridakeysmedia.tv/axiscam/Codebase/AxisCamControl.ocx
O16 - DPF: {928626A3-6B98-11CF-90B4-00AA00A4011F} (SurroundVideoCtrl Object) - http://www.homesteadhotels.com/minisite/accommodations/surround/MSSurVid.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
O16 - DPF: {E596DF5F-4239-4D40-8367-EBADF0165917} - http://privacyprotector.com/.freeware/cab/installprivacyprotector.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\system32\ImapiRox.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)

 

Thanks, Bubba.

Your HJT log was confirmed apparently clean in your cmd related thread by an expert (noahdfear) as far as he can tell. (Thanks, Dave! )

I posted this message so other people following this thread know I am not ignoring your most recent post in this thread and they can follow the discussion in your other thread (linked above) about your cmd issue if they wish.

You're in good hands in your other thread so I will await any possible further requests from you in this thread after you get your cmd issue resolved. Be assured I will not ignore you, though I may be away from the computer for several consecutive days at any time.

If you successfully get LimeWire working without any further assistance in this thread, please post a follow-up here to let us know.

 

Thanks to everyone responding. I'll run my anti virus and spyware programs and see if they catch something. I did have a few trogans on my machine recently but got rid of them, maybe they're back

 

Can you explain what problems you get with cmd?
Does it open, or is the ipconfig command giving you trouble?
If you are on win98 cmd wont work, instead you use winipcfg (from start->run)