MTS

Member
  • Content Count

    72
  • Joined

  • Last visited

Community Reputation

0 Neutral

About MTS

  • Rank
    Active Member

Profile Information

  • Gender
    Male
  • Location
    Queensland, Australia

Recent Profile Visitors

3163 profile views
  1. Hi Arthur, Just wondering whether you heard anything back from the QA team after review of the debug logs. Thanks!
  2. The connection has timed out The connection has timed out After disconnecting from Sydney server: Web page connected ok. Showed this: Authorization has been denied for this request. File download success.
  3. Hi Arthur, Debug logs sent. My first attempt to send them failed, probably due to the same reason I am unable to update when connected to the vpn. After disconnecting the logs sent ok.
  4. This morning I connected to the Sydney server. C:\Windows\system32>nslookup google.com Server: 25.0c.01a8.ip4.static.sl-reverse.com Address: 168.1.12.37 Non-authoritative answer: Name: google.com Address: 216.58.203.110 C:\Windows\system32>nslookup update.emsisoft.com Server: 25.0c.01a8.ip4.static.sl-reverse.com Address: 168.1.12.37 Non-authoritative answer: Name: update.emsisoft.com Address: 136.243.128.18 C:\Windows\system32>nslookup dl.emsisoft.com Server: 25.0c.01a8.ip4.static.sl-reverse.com Address: 168.1.12.37 Non-authoritative answer: Name: cds.z9k5w6b8.hwcdn.net Addresses: 205.185.216.42 205.185.216.10 Aliases: dl.emsisoft.com C:\Windows\system32>tracert update.emsisoft.com Tracing route to update.emsisoft.com [136.243.128.18] over a maximum of 30 hops: 1 62 ms 71 ms 67 ms 10.3.171.254 2 * * * Request timed out. 3 * * * Request timed out. 4 * * * Request timed out. 5 ^C C:\Windows\system32> I will now try your suggestions re number of connections and turning off ssl Made no difference. Still unable to update. Any more commands I can try while connecting to the Sydney server?
  5. @stapp, Thank you for the link. I remember this happening quite a while ago and I made a post about it. It appears I should not be concerned. cheers!
  6. Recently noticed this error in Event Viewer. Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error. File Name: \Device\HarddiskVolume3\EmsisoftInternetSecurity\a2hooks32.dll - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" /> <EventID>6281</EventID> <Version>0</Version> <Level>0</Level> <Task>12290</Task> <Opcode>0</Opcode> <Keywords>0x8010000000000000</Keywords> <TimeCreated SystemTime="2017-06-27T00:44:17.083589900Z" /> <EventRecordID>163397</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="48" /> <Channel>Security</Channel> <Computer>Windows-PC</Computer> <Security /> </System> - <EventData> <Data Name="param1">\Device\HarddiskVolume3\EmsisoftInternetSecurity\a2hooks32.dll</Data> </EventData> </Event>
  7. Hi Arthur, At the moment I am unable to get a connection to the Sydney server. I only have a choice of Australia and it mostly connects to Melbourne which works fine. I will wait until I once again get connected to Sydney and try your suggestions. If there was a problem with total connections or ssl would that not affect updating when connected to the Melbourne server? It is so strange that it only affects updating EIS. Browsing and resolving dns is not a problem. I will however try your suggestions the next time I manage to get a Sydney connection. Thanks for the help.
  8. Yes I realize there are more than one server address able to resolve dns. I am now connected to the Melbourne server which as I have stated before has no problems updating EIS. The ip I am connected to is 168.1.75.11. dnsleaktest.com is showing the same ip address. However if i do ipconfig /all at a Command prompt this is what I get for the SSTP connection. PPP adapter Hide.ME SSTP: Connection-specific DNS Suffix . : hide.me Description . . . . . . . . . . . : Hide.ME SSTP Physical Address. . . . . . . . . : DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 10.3.162.169(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.255 Default Gateway . . . . . . . . . : 0.0.0.0 DNS Servers . . . . . . . . . . . : 168.1.75.8 168.1.75.9 NetBIOS over Tcpip. . . . . . . . : Disabled So as you can see when running this command it shows DNS Servers as 168.1.75.8 and 168.1.75.9 so yes there are more than one dns addresses being used. What I still fail to fathom is why I don't have any issues resolving dns for normal browsing connected to either Sydney of Melbourne but EIS only has a problem updating when connected to the Sydney server. It is obvious that something is different but what it is exactly is a mystery to me.
  9. Hi Arthur, Some more info. C:\Windows\system32>tracert update.emsisoft.com Tracing route to update.emsisoft.com [136.243.128.18] over a maximum of 30 hops: 1 65 ms 68 ms 69 ms 10.255.255.254 2 * * * Request timed out. 3 * * * Request timed out. 4 * ^C C:\Windows\system32>nslookup update.emsisoft.com Server: 25.0c.01a8.ip4.static.sl-reverse.com Address: 168.1.12.37 (NOTE: dnsleaktest.com is showing 168.1.12.36) I don't understand why there is a difference here. Non-authoritative answer: Name: update.emsisoft.com Address: 136.243.128.18 C:\Windows\system32>nslookup dl.emsisoft.com Server: 25.0c.01a8.ip4.static.sl-reverse.com Address: 168.1.12.37 (NOTE: dnsleaktest.com is showing 168.1.12.36) Non-authoritative answer: Name: cds.z9k5w6b8.hwcdn.net Addresses: 205.185.216.10 205.185.216.42 Aliases: dl.emsisoft.com
  10. Hi Arthur, The protocol I am using to connect is SSTP which means it is using port 443. I have to use SSTP because my ISP is throttling all other vpn ports. I normally get around 50-70 Mbps down but using OpenVpn it is 2 Mbps. I am currently connected to a Sydney server (the one having problems with updating EIS) and am browsing normally. If there was a problem with dns I would not have been able to get to this forum and any other dns requests would be failing. I agree there is something happening related to the Sydney dns but what I don't understand is why it doesn't affect normal browsing. Just the EIS update procedure. When not using the vpn my dns is as you said using OpenDNS.
  11. Hi Jeremy, The vpn provider is hide.me This from their web page. Not sure if it explains what you are referring to. The strange thing is when connected to the Melbourne server there is no problem. When connecting to the Sydney server EIS can't update. There is some difference but I know not what it could be. Highly Secure, Encrypted, Zero-Logging DNS At hide.me VPN, we run our own DNS on every Server for absolute Anonymity hide.me’s Self-Managed Anonymous DNS Servers Most internet users typically rely on their ISP’s DNS server or 3rd party services, which tends to monitor and record log of internet users’s activities and block access to certain websites. These DNS servers are unencrypted and vulnerable to hacker attacks. At hide.me, we run our own DNS on every server. When you connect to hide.me VPN, all your internet traffic will be routed via the same tunnelling protocol and protected with the same level of encryption using hide.me’s DNS servers. Since we run own DNS on every server and you will get the DNS service from same server you are connected to (not true.. see below) so you will receive proper and faster VPN service for that country. The thing is that when connected to the Sydney server the dns reported by dnsleak is different to the server connected to. When I am connected to Melbourne the dns reported by dnsleak is the same address as the current connected server. All dns connections are to Softlayer servers so there are no leaks happening. My browsing is not affected when connected to Sydney or Melbourne. The only thing affected is EIS being able to connect and update. Weird
  12. Hi Arthur, Running same commands now that I am connected to Melbourne Server. C:\Windows\system32>tracert update.emsisoft.com Tracing route to update.emsisoft.com [136.243.128.18] over a maximum of 30 hops: 1 71 ms 78 ms 80 ms 10.3.163.254 2 129 ms 79 ms 79 ms 2.4b.01a8.ip4.static.sl-reverse.com [168.1.75.2] 3 161 ms 78 ms 77 ms ae11.dar01.mel01.networklayer.com [168.1.118.130] 4 112 ms 100 ms 77 ms ae8.bbr02.nd01.mel02.networklayer.com [50.97.19.76] 5 125 ms 87 ms 90 ms ae0.bbr02.eq01.syd02.networklayer.com [50.97.19.64] 6 113 ms 87 ms 90 ms ae7.bbr01.eq01.syd02.networklayer.com [50.97.19.60] 7 235 ms 239 ms 239 ms ae3.bbr01.cs01.lax01.networklayer.com [50.97.19.192] 8 * * * Request timed out. 9 388 ms 311 ms 319 ms ae0.cbs01.cs01.den01.networklayer.com [50.97.17.83] 10 364 ms 311 ms 331 ms ae7.cbs02.cs01.den01.networklayer.com [50.97.17.17] 11 365 ms 324 ms 314 ms ae0.cbs02.eq01.chi01.networklayer.com [50.97.17.47] 12 * * * Request timed out. 13 * 339 ms * ae0.cbs02.tl01.nyc01.networklayer.com [50.97.17.49] 14 363 ms 319 ms 319 ms ae9.bbr02.tl01.nyc01.networklayer.com [50.97.17.45] 15 444 ms 399 ms 401 ms ae0.bbr01.tg01.lon01.networklayer.com [50.97.18.205] 16 446 ms 399 ms 399 ms ae0.bbr01.xn01.fra01.networklayer.com [50.97.18.209] 17 * * * Request timed out. 18 444 ms 395 ms 396 ms core23.fsn1.hetzner.com [213.239.203.154] 19 435 ms 399 ms 399 ms ex9k2.rz21.hetzner.de [213.239.203.190] 20 437 ms 400 ms 400 ms api1.emsisoft.com [136.243.128.18] Trace complete. C:\Windows\system32>nslookup update.emsisoft.com Server: 8.4b.01a8.ip4.static.sl-reverse.com Address: 168.1.75.8 Non-authoritative answer: Name: update.emsisoft.com Address: 136.243.128.18 C:\Windows\system32>tracert dl.emsisoft.com Tracing route to cds.z9k5w6b8.hwcdn.net [205.185.216.42] over a maximum of 30 hops: 1 73 ms 76 ms 81 ms 10.3.163.254 2 129 ms 78 ms 85 ms 3.4b.01a8.ip4.static.sl-reverse.com [168.1.75.3] 3 105 ms 78 ms 83 ms ae12.dar02.mel01.networklayer.com [168.1.118.136] 4 124 ms 78 ms 86 ms ae9.bbr02.nd01.mel02.networklayer.com [50.97.19.78] 5 139 ms 99 ms 89 ms ae0.bbr02.eq01.syd02.networklayer.com [50.97.19.64] 6 147 ms 87 ms 96 ms ae7.bbr01.eq01.syd02.networklayer.com [50.97.19.60] 7 291 ms 241 ms 239 ms ae1.bbr02.eq01.tok01.networklayer.com [50.97.19.67] 8 283 ms 239 ms 238 ms ae7.bbr01.eq01.tok01.networklayer.com [50.97.18.162] 9 284 ms 238 ms 239 ms 218.100.6.91 10 327 ms 239 ms 239 ms es001.tk1.hwcdn.net [173.245.216.68] 11 280 ms 247 ms 231 ms map2.hwcdn.net [205.185.216.42] Trace complete. C:\Windows\system32>nslookup dl.emsisoft.com Server: 8.4b.01a8.ip4.static.sl-reverse.com Address: 168.1.75.8 Non-authoritative answer: Name: cds.z9k5w6b8.hwcdn.net Addresses: 205.185.216.10 205.185.216.42 Aliases: dl.emsisoft.com C:\Windows\system32>tracert cdn.emsisoft.com Tracing route to cds.z9k5w6b8.hwcdn.net [205.185.216.10] over a maximum of 30 hops: 1 70 ms 79 ms 81 ms 10.3.163.254 2 107 ms 80 ms 79 ms 2.4b.01a8.ip4.static.sl-reverse.com [168.1.75.2] 3 128 ms 78 ms 78 ms ae11.dar02.mel01.networklayer.com [168.1.118.132] 4 129 ms 78 ms 78 ms ae9.bbr02.nd01.mel02.networklayer.com [50.97.19.78] 5 120 ms 90 ms 88 ms ae0.bbr02.eq01.syd02.networklayer.com [50.97.19.64] 6 134 ms 89 ms 90 ms ae7.bbr01.eq01.syd02.networklayer.com [50.97.19.60] 7 230 ms 241 ms 239 ms ae1.bbr02.eq01.tok01.networklayer.com [50.97.19.67] 8 277 ms 239 ms 237 ms ae7.bbr01.eq01.tok01.networklayer.com [50.97.18.162] 9 277 ms 239 ms 239 ms 218.100.6.91 10 259 ms 238 ms 241 ms es001.tk1.hwcdn.net [173.245.216.68] 11 279 ms 239 ms 239 ms map2.hwcdn.net [205.185.216.10] Trace complete. C:\Windows\system32>nslookup cdn.emsisoft.com Server: 8.4b.01a8.ip4.static.sl-reverse.com Address: 168.1.75.8 Non-authoritative answer: Name: cds.z9k5w6b8.hwcdn.net Addresses: 205.185.216.42 205.185.216.10 Aliases: cdn.emsisoft.com Just tried to update connected to Melbourne Server and it failed. Internet is working fine. Really don't understand this problem at all. C:\Windows\system32>ping google.com Pinging google.com [216.58.220.142] with 32 bytes of data: Reply from 216.58.220.142: bytes=32 time=101ms TTL=55 Reply from 216.58.220.142: bytes=32 time=159ms TTL=55 Reply from 216.58.220.142: bytes=32 time=147ms TTL=55 Reply from 216.58.220.142: bytes=32 time=117ms TTL=55 Ping statistics for 216.58.220.142: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 101ms, Maximum = 159ms, Average = 131ms Second attempt at Manual Update is happening although it is very slow. 30 KB to 80 KB. I am able to get up to 8 MBps down. I will stay connected to the Melbourne Server and monitor update process.
  13. Hi Arthur, Here are the results of the commands you gave me. I am currently connected to a Sydney server and not able to update. dns is 168.1.12.36 C:\Windows\system32>tracert update.emsisoft.com Tracing route to update.emsisoft.com [136.243.128.18] over a maximum of 30 hops: 1 582 ms 62 ms 69 ms 10.255.255.254 2 * * * Request timed out. 3 * * * Request timed out. 4 * * * Request timed out. 5 * * * Request timed out. C:\Windows\system32>nslookup update.emsisoft.com DNS request timed out. timeout was 2 seconds. Server: UnKnown Address: 168.1.12.37 Non-authoritative answer: Name: update.emsisoft.com Address: 136.243.128.18 C:\Windows\system32>tracert dl.emsisoft.com Tracing route to cds.z9k5w6b8.hwcdn.net [205.185.216.42] over a maximum of 30 hops: 1 318 ms 66 ms 70 ms 10.255.255.254 2 * * * Request timed out. 3 * * * Request timed out. 4 * * * Request timed out. 5 * * * Request timed out. 6 ^C C:\Windows\system32>nslookup dl.emsisoft.com Server: 25.0c.01a8.ip4.static.sl-reverse.com Address: 168.1.12.37 Non-authoritative answer: Name: cds.z9k5w6b8.hwcdn.net Addresses: 205.185.216.10 205.185.216.42 Aliases: dl.emsisoft.com C:\Windows\system32>tracert cdn.emsisoft.com Tracing route to cds.z9k5w6b8.hwcdn.net [205.185.216.10] over a maximum of 30 hops: 1 958 ms 62 ms 69 ms 10.255.255.254 2 * * * Request timed out. 3 * * * Request timed out. 4 * * * Request timed out. 5 ^C C:\Windows\system32>nslookup cdn.emsisoft.com Server: 25.0c.01a8.ip4.static.sl-reverse.com Address: 168.1.12.37 Non-authoritative answer: Name: cds.z9k5w6b8.hwcdn.net Addresses: 205.185.216.10 205.185.216.42 Aliases: cdn.emsisoft.com Edit> I am confused as I am able to browse no problem so dns is resolving ok.
  14. Hi Arthur, Have been able to recreate the problem. Currently connected to vpn @ 168.1.10.227 (Sydney server) However when checking for dns leak it shows dns as 168.1.12.36 (Both Softlayer so no actual leak as such.) Am sending another Diagnostic log now that it is failing as the one sent earlier was when it was working. When trying to manually update now it is stuck on Initializing. I have to cancel which takes quite some time to timeout. Trying to create Emsisoft Diagnostic log connected to Sydney Server. Stuck on Step 1 of 3 - Checking update.emsisoft.com Proceeds no further. The script doesn't throw an error to let you know the step failed. After sending you the pm this morning I then realized that updates were working ok. I am now connected to a Sydney server whereas this morning it was a Melbourne server. I don't get a choice of which City it will connect to. Somewhat automatic with just an Australia option. Will try to get a Melbourne connection again to see if that is working. Have managed to connect to Melbourne server. It is the same ip as it was this morning. 168.1.75.11 What I have noticed is that when connected to Melbourne server 168.1.75.11 a DNS leak test shows the same ip. When connected to the Sydney server the dns ip was different. (See beginning of this post) Updates are once again working fine and if I run the batch file again I am sure it will complete ok. Script ran fine but I don't think it necessary to send it again as it is the same ip connection and dns as the one sent earlier. I am puzzled as to what the difference is. Is there anything further I can do to troubleshoot the problem?