asked on

Web browsing blocked on one machine

Today, my PC ceased its ability to access the web or POP mail. This machine can ping anywhere. I ran Wireshark traces and saw that the machine is requesting DNS for web sites and the responses with correct IPs is coming back. Trying to put the IP in the browser makes no difference. I can ping with no problem. RDP from the machine is fine as is FTP.
This is what I have tried:
1. Stop the Windows Firewall Service
2. Shut off anti-virus and spam blocker.
3. Removed and added TCP/IP settings.
4. Rebooted the machine.
5. Used system restore to go back to settings 1 day and 2 days ago.
6. Connected a laptop to the same network cable to check it.

I am totally at a loss and would be thrilled if anyone can help me.

hmare

Check local security policy for any kind of port blocking. Also, try to access secure websites via https.

phototropic

Have you scanned for malware? Try Malwarebytes:

http://www.malwarebytes.org/mbam.php

A Hijackthis scan log would help to show what is going on on your pc.

Download here:

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

Download the installer. Click on "Do a system scan and save a logfile". Post the scan log here via the "attach code snippet" box below.

Will Szymkowski

Just a thought is there any GPO's running on this computer that may be affecting the internet browsing? Also, If you go to into Internet Options>Connections Tab>LAN Settings>Under Proxy Server do you have that checked with a faulty Proxy address in there?

Also have you tried different web browsers to view websites? Have you tried using Windows Explorer to web browse?

ASKER CERTIFIED SOLUTION

Alan Hardisty

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

sgarson1

ASKER

I did not, but I just ran the reset command. Rebooting now. Attached is the HiJack log

sgarson1

ASKER

Oops. Here it is. I also just ran a port scan and learned that port 80 is indeed open.
hijackthis.log

Alan Hardisty

No attachment!

sgarson1

ASKER

Alan, I wish I thought of coming to this site before I wasted my day trying to resolve this. A million thanks! If you live in Boston, I'll buy you a beer!

Steve

Alan Hardisty

Next time you will know where to come ;-)
Sadly - I don't live in Boston - but I'll have one on you this weekend and thank you for it now.
Glad you are sorted. Thanks for the points.
Alan

phototropic

These are the lines that look bad:

O10 - Unknown file in Winsock LSP: c:\windows\system32\securenet.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\securenet.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\securenet.dll

Download LSP Fix:

http://www.bleepingcomputer.com/files/lspfix.php

Unzip to your desktop, then run it. Put a tick next to " I know what i'm doing ". Click on (highlight) each occurance of the following, one at a time:

securenet.dll

then click ">>", to move each one, individually, to the Remove pane. Do not move anything else. Click on "Finish", then reboot and test.

There are three seperate instances of IE in your log:

C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe

Is that by design?