Can't launch my VPN client since virus incident

[nuxvomica]

I have gone through the VPN help desk at work and and Dell Support and have tried several reinstalls without success. Here's the story:

On April 1, 2005, Norton discovered and removed a virus on my computer (Windows XP O/S). When I later tried to launch the Nortel Contivity VPN client, the window would appear but as soon as I moved the cursor over the window to type in my PIN, the window "froze" and became "not responding". The same behavior occurred when launching Timbuk2 but I have no problems with internet browsing or e-mail and I can ping the VPN server. One of the first things I tried was restoring the system back to March 25 but that didn't correct the problem. Thinking there might be some spyware interceding on launch, I did complete scans with Norton, Ad-Aware, Spybot and the Microsoft AntiSpyware, and the problem persists. I now think some essential component got scrogged by the viral attack and needs to be reinstalled but I don't know what that might be.

The only clue I might have is that when I run diagnostics on the network adaptor (Intel(R) PRO/100 VE Network Connection), it fails the "PHY loopback" and "MAC loopback" tests. I had never run these tests before the VPN problem so I don't even know if they would have failed before because of the adaptor I am using. I am also connecting to the net via a Netgear router and had been able to use the VPN through that connection previously.

Any suggestions about what I might look at next?

[Cooley Hurd]

1. What type of VPN client are you using?

One that is username/password only or one that requires a security key? I've not had any experience w/ Nortel, but some Cisco VPN clients require a security key for connectivity. It's possible that the security key became corrupted

Also, are you running a software-based firewall, as well as your Netgear physical firewall? Perhaps the software firewall shut down applicable ports being used by the VPN connection due to the virus (if the virus was of the trojan kind). Try disabling the native Windows firewall (right-click on Local Area Connection, and click on the 'advanced' tab) if it's not disabled already. Let me know if this helps...:thumbsup:

[nuxvomica]

2. Disabling the Windows firewall didn't solve the problem

I'm not running any other firewall that I know of. In fact, the Windows firewall had never been enabled until after I had the VPN problem, which probably explains why I got the virus. I don't have a log of the type of virus (I reinstalled Norton since then to upgrade tp SystemWorks) but I recall that it was a trojan.
The VPN client is Norton Contivity VPN Client. It requires a PIN number but I can check at work tomorrow whether it has security key.
I actually think the problem is not specific to the VPN client because I got the same behavior from Timbuk2 as well.

[Cooley Hurd]

3. Can you still log onto your netgear router and check to see...

...if VPN connectivity (and, by association, Timbuktu, since it uses the VPN for remote connectivity) is still allowed. I know it's a longshot that the trojan could've messed with your router, but see if certain UDP ports have been shut down. Here's a site with the list of the ports and each of their uses:
http://kbserver.netgear.com/kb_web_files/n100495.asp

Let me know what you find out.:thumbsup: