Completely baffled by this IE/FF/Opera browser error....

lektrix

Golden Member
Aug 9, 2003
1,174
0
76
There are certain banking/payment websites I can't open in my web browsers. mbna.ca is one of them. I have no idea what happened but it was working fine a few days ago. Now it won't load. IE/FF/Opera all don't work. I haven't changed any settings lately, but my ESET SMART SECURITY AV/FW (aka ENOD) did get 3 updates today. Not sure if it has to do with anything here but disabling ESET/killing the process doesn't make a difference. I've tried resetting my router/modem/PC/XP profile but to no avail. I've tried a full ENOD scan, Windows Malware Remover, Windows Update, but to no avail. The sites load fine on all the other computers on my network except mine. All my friends can load the websites fine except for me. Is there anything else I could try? I find it hard to believe that I have to take the reformat route over some damn websites......

Here's the error message for IE:

This problem can be caused by a variety of issues, including:

Internet connectivity has been lost.
The website is temporarily unavailable.
The Domain Name Server (DNS) is not reachable.
The Domain Name Server (DNS) does not have a listing for the website's domain.
If this is an HTTPS (secure) address, click Tools, click Internet Options, click Advanced, and check to be sure the SSL and TLS protocols are enabled under the security section.

And Opera:

Please make sure that the Web address (URL) is correctly spelled and punctuated, then try reloading the page.
Make sure your Internet connection is active and check whether other applications that rely on the same connection are working.
Check that the setup of any Internet security software is correct and does not interfere with ordinary Web browsing.
If you are behind a firewall on a Local Area Network and think this may be causing problems, talk to your systems administrator.
Try pressing the F12 key on your keyboard and disabling proxy servers, unless you know that you are required to use a proxy to connect to the Internet. Reload the page.

Tried two more things:

SAFE MODE - no go

Directly connected my computer to the modem (taking the router out of the equation) - no go

Breaking news:

I was fooling around and decided to put a US proxy (160.94.220.241:3128) into FF/IE and the websites load...I take the US proxy off and the pages fail to load....WTF is going on? Is it really Bell Sympatico (ISP) accidentally blocking sites?
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
Sounds like a DNS/name resolution problem.

Check your hosts file in system32/drivers/etc to make sure there aren't entries in there. Also a easy test is to ping the website address to make sure you get an IP address back. Or use the nslookup command to check name resolution is working - just type nslookup. Then at the prompt type in websites you're having problems with.
 

lektrix

Golden Member
Aug 9, 2003
1,174
0
76
Originally posted by: spidey07
Sounds like a DNS/name resolution problem.

Check your hosts file in system32/drivers/etc to make sure there aren't entries in there. Also a easy test is to ping the website address to make sure you get an IP address back. Or use the nslookup command to check name resolution is working - just type nslookup. Then at the prompt type in websites you're having problems with.

Pinging the website times out.

I found the IP of the site on google and pinged that, no good either.

Where/how do I check the hosts file? What exact file is it?
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
It's a text file. Don't worry about not being able to ping a website, many don't respond to pings. The important part is that you're getting the correct IP back from your name servers. If you are then we can eliminate name resolution as a possible cause.
 

lektrix

Golden Member
Aug 9, 2003
1,174
0
76
So type nslookup mbna.ca in cmd? I did that and nothing comes up, no IP...I did it via google and found the IP, tried to ping it, nothing comes up either...

Also, no txt file in that folder...only lmhosts.sam, networks, protocol, services....nothing else
 

lektrix

Golden Member
Aug 9, 2003
1,174
0
76
UPDATE: Some weird crap is going on. NONE of the computers on my network can view the sites now. ABSOLUTELY NONE. It was working fine on my other computers 24 hours ago. Now they all have the same problem.....
 

Medea

Golden Member
Dec 5, 2000
1,606
0
0
Try walking through the following two steps.

? You may want to flush your dns to clear it:
- Go to Start > Run > and copy/paste: ipconfig /flushdns
- Click OK.

? Please download HostsXpert 4.2 - Hosts File Manager
- Create a new folder: C:\HostsXpert
- Unzip the file to C:\HostsXpert
Open up the HostsXpert 4.1 - Hosts File Manager program.
Click on Make Writable at the top left hand corner.
Then click on Restore MS Hosts File
Then click on Make Host File read only
Close the program.
 

lektrix

Golden Member
Aug 9, 2003
1,174
0
76
Originally posted by: Medea
Try walking through the following two steps.

? You may want to flush your dns to clear it:
- Go to Start > Run > and copy/paste: ipconfig /flushdns
- Click OK.

? Please download HostsXpert 4.2 - Hosts File Manager
- Create a new folder: C:\HostsXpert
- Unzip the file to C:\HostsXpert
Open up the HostsXpert 4.1 - Hosts File Manager program.
Click on Make Writable at the top left hand corner.
Then click on Restore MS Hosts File
Then click on Make Host File read only
Close the program.

Still no go :frown:
 

Medea

Golden Member
Dec 5, 2000
1,606
0
0
Last step is to try:

Go to Start > Run > type: cmd
A DOS window will appear.
Type in the DOS window: netsh winsock reset
Press Enter.
Reboot your computer.

If you're still having problems, post a HJT log.
 

lektrix

Golden Member
Aug 9, 2003
1,174
0
76
Still won't work. Here's the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:24:43 PM, on 4/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\ESET\ESET Smart Security\egui.exe
D:\Program Files\DAEMON Tools\daemon.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Logitech\SetPoint\SetPoint.exe
D:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
D:\Program Files\a-squared Anti-Malware\a2service.exe
D:\Program Files\ESET\ESET Smart Security\ekrn.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\system32\PnkBstrA.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\RealVNC\VNC4\WinVNC4.exe
D:\Program Files\Canon\CAL\CALMAIN.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Documents and Settings\Christian\Desktop\asd\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 169.229.50.12:3124
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [egui] "D:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [DAEMON Tools] "D:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Logitech SetPoint.lnk = D:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Append to existing PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: d:\windows\system32\nwprovau.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.co...site.cab?1198524569426
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.co...site.cab?1204094553984
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia....er/current/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EF0D114D-D8CF-44FB-88CC-D55914882707}: NameServer = 192.168.0.1
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - D:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - D:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - D:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - D:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - D:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - D:\Program Files\RealVNC\VNC4\WinVNC4.exe

--
End of file - 7055 bytes
 

lektrix

Golden Member
Aug 9, 2003
1,174
0
76
I can't load dslreports.com now and it was working fine 2 hours ago....this crap is pissing me off!
 

Medea

Golden Member
Dec 5, 2000
1,606
0
0
Your log looks clean. You need to update Java because the one you have is out of date.

One thing that I noticed is that you mentioned your router. The O17 in your log looks like you have it set up correctly.

However, what is confusing to me is that in your HJT log you have your R1, which is your IE default search page, set up to a Berkley site. Earlier in the thread, you mentioned that you were fooling around and decided to put a US proxy (160.94.220.241:3128) into FF/IE and the websites load...I take the US proxy off and the pages fail to load. That IP points to the Univ. of Minnesota.

You don't have to post any more personal info here. Whatever ISP you have, just give them a call and tell them that you mistakenly input the wrong IP info and now you're having the problem you're having - break it down for them. Then see what tech support they can offer. Hopefully, they can clean it up for you. ;)
 

lektrix

Golden Member
Aug 9, 2003
1,174
0
76
Originally posted by: Medea
Your log looks clean. You need to update Java because the one you have is out of date.

One thing that I noticed is that you mentioned your router. The O17 in your log looks like you have it set up correctly.

However, what is confusing to me is that in your HJT log you have your R1, which is your IE default search page, set up to a Berkley site. Earlier in the thread, you mentioned that you were fooling around and decided to put a US proxy (160.94.220.241:3128) into FF/IE and the websites load...I take the US proxy off and the pages fail to load. That IP points to the Univ. of Minnesota.

Yeah actually i've been trying a lot of US proxies, 160.94.220.241:3128 and 169.229.50.12:3124 are two of them...when I put them into FF/IE, the websites load perfectly fine.

You don't have to post any more personal info here. Whatever ISP you have, just give them a call and tell them that you mistakenly input the wrong IP info and now you're having the problem you're having - break it down for them. Then see what tech support they can offer. Hopefully, they can clean it up for you. ;)

What do you mean "mistakenly input the wrong IP info"?

 

Medea

Golden Member
Dec 5, 2000
1,606
0
0
Hi -

Forget that - poor choice of wording. I was just suggesting that you don't have to post what changes you've tried but, rather, just call your ISP and ask for tech support. Explain what you did and maybe they can be of some assistance.