Solved

Can't connect to the internet on any browser but speed at the Local Area Connection shows 100.00 mbps

Posted on 2011-03-12
22
577 Views
Last Modified: 2013-12-06
Hi Experts
ITs very urgent I can't connect to the internet on any browser, Last night I tried to run Hitman Pro , I am pretty sure it make more worse. Please help
0
Comment
Question by:MSGK161091
  • 11
  • 6
  • 5
22 Comments
 
LVL 38

Assisted Solution

by:younghv
younghv earned 250 total points
ID: 35117733
Tell us more about your situation.
Obviously you have more than one computer, so you can connect to some sites for downloading tools - right?

Here is my basic 1-2-3 for this:

For Hijacking/re-directs, you might want to start with TDSSKILLER found here:
http://support.kaspersky.com/downloads/utils/tdsskiller.zip

* Download the file TDSSKiller.zip and extract it into a folder on the infected (or potentially infected) PC.
* Execute the file TDSSKiller.exe.
* Wait for the scan and disinfection process to be over. You do not have to reboot the PC after the disinfection is over.

If the tool finds a hidden service it will prompt you to type "delete",  you can also just hit "Enter" without typing in and the scan will continue...
The user can then post the log to be analyzed.

Let us know the results and we can take the next steps.
***********************

Download, install, and run
CCleaner (www.ccleaner.com)
Doing this will clean out all of the Temp/Junk files from your browser.
************

Download, install, and run
Malwarebytes (MBAM) (http://www.malwarebytes.org/mbam.php)
When downloading, save to your "Desktop" and use the "Save As" function (Internet Explorer) to rename the file.
The instructions are included right in that link.

If you need to manually download the latest update, use this link:
http://data.mbamupdates.com/tools/mbam-rules.exe

When finished with MBAM, post the log that is generated and let us look at it for you.

IF NEEDED, we may ask you do download ComboFix (using the same "Save As" process).
0
 
LVL 1

Author Comment

by:MSGK161091
ID: 35117761
Yes I have one more laptop through which I am able to get online. I will try ur 1-2-3 . Let u know soon

INfected PC:  Windows XP
0
 
LVL 38

Expert Comment

by:younghv
ID: 35117772
OK - great.
Please note the "Save As" instructions.
Some malware can recognize the MBAM executable when it lands on your computer and disable before you even get started.
0
 
LVL 1

Author Comment

by:MSGK161091
ID: 35117883
hi
 TDSSKILLER  didn't found anything , and now  I am now running Malware. Fingercross
0
 
LVL 1

Author Comment

by:MSGK161091
ID: 35117969
I had Malware.exe from long back on my infected PC, I have installed that and ran a quick scan first,

Logs
Malwarebytes' Anti-Malware 1.25
Database version: 1062
Windows 5.1.2600 Service Pack 3

9:13:33 AM 13/03/2011
mbam-log-03-13-2011 (09-13-33).txt

Scan type: Quick Scan
Objects scanned: 49917
Time elapsed: 5 minute(s), 13 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 5
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{4509d3cc-b642-4745-b030-645b79522c6d} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{4897bba6-48d9-468c-8efa-846275d7701b} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ca3eb689-8f09-4026-aa10-b9534c691ce0} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook.1 (Trojan.BHO) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\HyperCam Toolbar\tbhelper.dll (Trojan.BHO) -> Quarantined and deleted successfully.
C:\WINDOWS\Downloaded Program Files\atmgr.exe (Trojan.Agent) -> Quarantined and deleted successfully.
0
 
LVL 1

Author Comment

by:MSGK161091
ID: 35118228
Note: I can ping from command prompt  like  ping yahoo.com  or ping google.com
I am getting  reply but not able to get online via browser, still showing can't display the page.
Please help
0
 
LVL 23

Expert Comment

by:edbedb
ID: 35118244
Have you checked th proxy settings? - IE>Tools>Internet options>Connections>Lan settings
0
 
LVL 1

Author Comment

by:MSGK161091
ID: 35118259
Hi edbedb

Yes, ONly  'Automatically Detect Settings'  box is checked
thanks
0
 
LVL 23

Expert Comment

by:edbedb
ID: 35118279
What version of Windows do you have?
0
 
LVL 1

Author Comment

by:MSGK161091
ID: 35118304
I got Windows XP Prof  SP3.
I have just tried to go on internet under  'Safe Mode with Networking' and it was working.
So I restart my PC and tried to check on Normal Mode but again IE not working in Normal Mode.
Hmm strange..
0
 
LVL 23

Expert Comment

by:edbedb
ID: 35118318
Not really, it sounds like it's being caused by an add-on.

In normal mode start IE without add-ons. Start>Run> then enter iexplore -extoff

If it works that way then that's the problem.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 1

Author Comment

by:MSGK161091
ID: 35118380
no... didn't worked disabling add-ons..... still can't get online
0
 
LVL 23

Expert Comment

by:edbedb
ID: 35118417
Does Google work if you enter the ip address in the bowser address bar?
74.125.226.177
0
 
LVL 1

Author Comment

by:MSGK161091
ID: 35118456
No I can't.. Still " IE cannot display the webpage"
0
 
LVL 23

Expert Comment

by:edbedb
ID: 35118477
0
 
LVL 1

Author Comment

by:MSGK161091
ID: 35118494
Tried following steps, please note
 
Ran Winsock
http://65.24.134.81/KipSolutions/WinsockFix/WinsockFix.htm

Tried to  ping tests against  LAN to try to narrow down other issues:

Step-1: Ping Loopback IP address (127.0.0.1). Success shows that TCP/IP is properly installed.
Answer: OK
Step-2: Ping local NIC's IP address. Success shows that NIC is working properly.
Answer : Request Timed Out
Step-3: Ping Default Gateway. Success shows that local physical layer connections are ok.
Answer: OK

Step-4: Ping Remote IP address. Success shows that remote physical layer connections are ok.  (ping yahoo.com)
Answer: OK
0
 
LVL 23

Assisted Solution

by:edbedb
edbedb earned 250 total points
ID: 35118525
I am about to call it a night so I will suggest  the last thing that comes to mind. If it doesn't work hopefully someone else will come along to assist you. If not, I will be back early AM EST.

It sounds like your anti virus or other security software might be causing this. I would try un-installing them temporarily to test.



0
 
LVL 1

Accepted Solution

by:
MSGK161091 earned 0 total points
ID: 35118822
Hi  Edbedb & younghv:

My system is back online,I can go online now on all Browser  HAPPYYYYYYYily,
Problem was my Firewall Turned ON and (also I uninstall my Norton AV)
1) Scan system via Malware (which found few trojans)
2)Uninstall AntiVirus
3)Initially I couldn't  TURNED OFF firewall in Normal Mode, but later I able to did in  Normal Mode. (Seems this was actual problem)
Anyway I am happy now
I got partial assistance from both of you, so I am happy to split points between both of you.
Thanks guys
0
 
LVL 38

Expert Comment

by:younghv
ID: 35118835
<<I had Malware.exe from long back on my infected PC, I have installed that and ran a quick scan first, >>

I am not sure what you meant by this comment - but if you haven't downloaded a new version of MBAM - with the separate 'update' file - you need to do that.

I believe this is a very old variant of malware and the current set of MBAM should remove all traces and effects.

If you are still having connectivity problems after running the new version - reboot to Safe Mode with Networking and try to connect here:
http://support.microsoft.com/fixit/
0
 
LVL 38

Expert Comment

by:younghv
ID: 35118854
Just thought of this also - "HOSTS" file may be corrupted.
If you can get to this link, try to download and install the modified HOSTS file.

You can also download it to your good computer and computer the zip file over to the infected one.

http://www.mvps.org/winhelp2002/hosts.htm
0
 
LVL 38

Expert Comment

by:younghv
ID: 35118871
Hey MSGK - sorry about that.
I was typing away and forgot to refresh my screen before the last posts.

Thank you for the additional info.
Take care.
0
 
LVL 1

Author Closing Comment

by:MSGK161091
ID: 35154548
The problem was  Windows Firewall Turned ON & Antivirus too might causing problem
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Change your password...do it now!. Probably the easiest point of access to your account is through guessing your password. If your password is guessable, do change it now. If not for your sake but for everyone else in your friends list. Remember …
PREFACE The purpose of this guide is to provide information to successfully add specific IIS 7.0 role services for the Symantec Endpoint Protection Manager (SEPM) to function properly when installed on Windows 2008. AUDIENCE Information Technol…
This video discusses moving either the default database or any database to a new volume.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now