last day (14 days later) » 

18:34
-1
Q: Google.com connection

Mike CheelI have a server that was hacked and have run a variety of anti virus and anti malware applications (bitdefender, rkill, malwarebytes, zemana, etc) against it and they are all now reporting all clear. When the server was infected I as not able to open google and windows updates (among other thing...

Why would you use browser on a server?
Various reasons
Nuke the server, start fresh, and stop using the browser.
This is smarm overflow apparently
@MikeCheel I'm not sure what you mean by that, but the suggestions you've received in comments here are absolutely the proper way to deal with a compromised server. This may not be what you want to hear, but it's the right answer regardless.
18:34
@EEAA There has been one comment suggesting to nuke the server. I do not have this option. The rest were smarmy replies. None of these comments have answered my question which is how can I see what is interfering with the connection. I didn't ask what the best course of action was. I asked how I can tell if something is interfering with my connection to google.
@MikeCheel You have a compromised server. Whether or not something is interfering with your connection to Google should be the least of your worries. Nuke the server. You always have that option, and whomever is telling you it's not an option is wrong. Plain and simple, you have absolutely no way to trust anything that is on the server now. You must assume everything is suspect.
These are not "smarmy" comments. They are comments by very experienced systems administrators, recommending the only responsible course of action in response to a server compromise.
@EEAA You must be in charge at your company as you are able to do whatever you please apparently. Pretend that I didn't mention about being compromised. Are you able to answer my question?
WRT Infrastructure, yes I am in charge. Even if you're not, the professional thing for you to do is to recommend to management that the server be rebuilt. If they're not willing to do that, they're incompetent and you should be looking for a new job.
So no answer to my question then...
Well I think the answer is fairly clear. It's likely that something is interfering. But this course of inquiry is pointless. It's like someone asking why there's a scratch on a car that's been totalled in an accident. Rebuild the server.
18:34
Even if you can find that something specific is interfering, there could be many other things that are more deeply hidden, and that will be used to make ugly things on the server. You can try hiring a security consultant to dig through the server, but even then you cannot be sure the server is 100% clean. You also have paid much more in fees than rebuilding the system will cost.
All I am asking is for a few tips on how to tell if something is interfering with my connection. I am getting all kinds of replies except what i am looking for. If you had the same thing happening to you and yet all of your virus scans are reporting that everything is good except this one site keeps getting interrupted what would you look at? Nuking is not an option. I am not quitting my job because management hasn't prioritized a server (you know almost nothing about) the way you think it should be. Can I get an answer or can you just say there is no answer?
@MikeCheel Start with ping google.com
>What can I do to see if anything is actually interfering with my connection to google.com? Open it in browser & get the same can't connect message. Here's an answer you're looking for!
The interruption is intermittent. Is there anything I can do with say nslookup or anything?
Thank you I will try this
Ping plotter connects with no problem as does ping at the cmd prompt. The cleanup tool says it couldn't find any issues.
18:35
Wireshark is your tool of choice then!

last day (14 days later) »