X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type; q=dns; s=default; b=eyBA
	ulw1cTmnwKj9cnfm8VfX9L8b4bwhBIDvy6JQCqicf3mqeBHZUpVHg5J0fvCw6eUs
	mOynQ2aemqZt3TJBaFRXOb/bTNB1w9aaes8MDvVSDITWVaTaEuubRsICQNHtedRT
	uatmCIDepkoVUvBUfllf/Jg6vbmgX1VqX+a1XmE=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type; s=default; bh=e148sZOJ7X
	EAm3QQxNeWbGcPkRA=; b=LnYWPlOolrzjdLENnQ4Jo+zmcILVeB6bkFe5z7k90G
	j16q7dqVaGdPypZq2Luowo6mJhNs+HGUX0qMV8PSRLylpYtbeefJqjuii/eTFcw8
	NiwT8MuE4wxQ6CRHydXNRSpsFzQ0XRtZQfrrz9DvH/r7+WalgZkirirr54RzY8Hz
	U=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.2 required=5.0 tests=AWL,BAYES_00,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW autolearn=ham version=3.3.2
X-HELO:	nm4-vm1.access.bullet.mail.bf1.yahoo.com
X-Yahoo-SMTP:	vUK3UKuswBCE01YQVYEZ1wHCa.HPSVCYhektzgdifA--
Subject:	Re: setup-x86_64.exe Unable to get setup.ini on all mirrors
To:	cygwin AT cygwin DOT com
References:	<55D5E2D2 DOT 1040308 AT bellsouth DOT net> <55D9C8F2 DOT 4090608 AT bellsouth DOT net> <op DOT x3tp58g9ofd6j1 AT nebbiolo DOT upc DOT de> <55DA140D DOT 5080805 AT bellsouth DOT net> <op DOT x3ug2yjjofd6j1 AT nebbiolo DOT upc DOT de> <55DB02CC DOT 9080808 AT bellsouth DOT net> <87r3mshb8f DOT fsf AT Rainer DOT invalid>
From:	Dennis Putnam <dap1 AT bellsouth DOT net>
X-Enigmail-Draft-Status:	N1110
Message-ID:	<55DB5151.8020507@bellsouth.net>
Date:	Mon, 24 Aug 2015 13:16:01 -0400
User-Agent:	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0
MIME-Version:	1.0
In-Reply-To:	<87r3mshb8f.fsf@Rainer.invalid>
X-IsSubscribed:	yes

--kAkdElR0WDiGi4frUu0lUfwh1nQSs8bBE
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 8/24/2015 1:01 PM, Achim Gratz wrote:
> Dennis Putnam writes:
>>> Just to test if you can access it at all but that was expectable.
>> OK. I have no networking problems with anything other than cygwin which
>> is why I was asking for someone to explain how it interfaces with the OS
>> network. This all started with the Lavasoft malware and I believe that
>> is the key to resolving this. Perhaps I'll go to one of the virus help
>> sites and see what they can find.
> Basically you can start setup.exe with direct connection (the default),
> IE proxy settings or by telling it the proxy host and port.  If you have
> no connection either way, then it's hard to see why only setup.exe
> wouldn't connect unless you have more malware on the computer, or it's
> blocked by the firewall or some similar software.
That is what I do. However, I discovered something else that may or may
not shed some light but I don't understand it. Again keeping in mind
that my browser has no trouble finding URLs, I tried 'nslookup' from a
command prompt and it can find nothing. The error is no response from
server. This happens with all the name servers I tried. It makes no
sense the the browser can find IPs but 'nslookup' cannot.
>
>>> You could open the taskmanager as admin and kill one obscure process
>>> after another and try setup again.
>> When I get a chance to reboot, I'll try it in safe mode with networking.
> You didn't reboot after removing the malware via autoruns?  Then it
> might still be active for already running processes.
I did reboot after removing the malware but I can't reboot at the moment.
>
>
> Regards,
> Achim.



--kAkdElR0WDiGi4frUu0lUfwh1nQSs8bBE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iEYEARECAAYFAlXbUVEACgkQ/fiWYqZ2tVS1GwCgyDELjkTlDw2afEpViWX7lStu
Pq4An34ziqTuItDG1g5xeyVy2WzRav8l
=mzyC
-----END PGP SIGNATURE-----

--kAkdElR0WDiGi4frUu0lUfwh1nQSs8bBE--

- Raw text -