I can ping, tracert, print wireless, but I cannot access the internet with a browser.

[jadroe]

This is a real strange thing: I've checked for malware and viruses; I've done the command line ipconfig /release and /renew, the netsh winsock reset command (if I remember that one correctly), and I just can not get onto the internet, either with FF, GC, or Opera; IE is not an option.

I've uninstalled all the programs that were installed around the time that this happened, and my PC is the only one in the home network of numerous devices that cannot visit the WWW.

Help? Please?

 

[Steltek]

How are you connected to the Internet? Is it a wireless or hardwired connection? Are you connecting through a router or directly to a modem? System specs would also help.

Why is IE not an option? Did you remove it or something?

You might need to remove your antivirus/antimalware software and then reboot to see if it solves the problem.

 

[PliotronX]

Even with alternative browsers and Outlook, they look at a certain setting that malware likes to redirect page loads with and after removing that malware, most of the time this option is still checked so you get either a page cannot be displayed or a proxy server error. Run inetcpl.cpl and go to the Connections tab, click on LAN settings and look at whether the box to use a proxy server is checked or not. I have also seen malware molest NIC drivers somehow so to reset this run devmgmt.msc and expand network adapters then find your NIC and right-click on it then choose to uninstall. Important reminder with this, make sure the box to delete the driver is unchecked because you want it to reinstall. After it disappears, click Action at the top and choose Scan for hardware changes. Let us know where you get

 

[jadroe]

I am connected to a router then to a modem, and both wireless and hardwired are not working.

Sys specs to follow.

Yes, IE has been removed.

 

[Ketchup]

Can any computer on your network access the Internet? Does the Windows connection icon show that you have Internet access or local only?

 

[jadroe]

Can any computer on your network access the Internet? Does the Windows connection icon show that you have Internet access or local only?

An iMac, an HP and a Toshiba laptop, an iPad, 2 iPods, and several cell phones, can all access the internet, wiireless or hardwired (RJ45 cable).

 

[jadroe]

System Specs:

HP P6230F
AMD Phenom II X4 810 2.60 GHz
8GB RAM
Windows 7 Home Premium SP1

 

[Ketchup]

An iMac, an HP and a Toshiba laptop, an iPad, 2 iPods, and several cell phones, can all access the internet, wiireless or hardwired (RJ45 cable).

Gotcha. If you run an ipconfig on the problem computer, are you getting a default gateway?

 

[jadroe]

Gotcha. If you run an ipconfig on the problem computer, are you getting a default gateway?

Yes: I have a default gateway, the subnet mask, and an IPv4 and IPv6 address.

From the command line I can ping and tracert far away places, and I can even print wireless, but I cannot get onto the internet with a browser.

 

[mikeymikec]

Proxy setting?

Also, running a custom scan (+ rootkits) with malwarebytes free (malwarebytes.org) and ticking your boot drive wouldn't go amiss.

 

[jadroe]

Even with alternative browsers and Outlook, they look at a certain setting that malware likes to redirect page loads with and after removing that malware, most of the time this option is still checked so you get either a page cannot be displayed or a proxy server error. Run inetcpl.cpl and go to the Connections tab, click on LAN settings and look at whether the box to use a proxy server is checked or not. I have also seen malware molest NIC drivers somehow so to reset this run devmgmt.msc and expand network adapters then find your NIC and right-click on it then choose to uninstall. Important reminder with this, make sure the box to delete the driver is unchecked because you want it to reinstall. After it disappears, click Action at the top and choose Scan for hardware changes. Let us know where you get

The proxy server is not checked (checked by using inetcpl.cpl).
Deleted my NIC, and reinstalled it, everything fine, but no internet access (checked with devmgmt.msc). I would like to add that it takes rather long for the 5-bar "internet access" to come up: the turning blue wheel freezes over it, then comes a yellow triangle with an exclemation mark, and then internet access, but then I still cannot get onto the web with a browser.

 

[jadroe]

Proxy setting?

Also, running a custom scan (+ rootkits) with malwarebytes free (malwarebytes.org) and ticking your boot drive wouldn't go amiss.

Proxy setting are not checked.
Damn: when I start MalWareBytes, I get an error window titled IMF.exe An error occurred in the application.

 

[Fardringle]

Download an offline virus scanner boot disk (Kaspersky and VIPRE both have good options) on one of your other computers, burn it, and boot from it on the problem machine. Do a full system scan to get rid of whatever malware you've picked up, then boot back into Windows and check your Internet access again. If it still doesn't work, run these two commands in an administrator Command Prompt:

netsh winsock reset
netsh int ip reset

Then reboot and try it again.

 

[mikeymikec]

Proxy setting are not checked.
Damn: when I start MalWareBytes, I get an error window titled IMF.exe An error occurred in the application.

IMF? I don't think that has anything to do with Malwarebytes. When I googled for it, it came up with Iobit Malware Fighter... you're not using iobit software, are you?

Barge pole, etc.

Is Firefox any different if you start it in safe mode?
https://support.mozilla.org/en-US/k...safe-mode#w_how-to-start-firefox-in-safe-mode

 

[PliotronX]

The proxy server is not checked (checked by using inetcpl.cpl).
Deleted my NIC, and reinstalled it, everything fine, but no internet access (checked with devmgmt.msc). I would like to add that it takes rather long for the 5-bar "internet access" to come up: the turning blue wheel freezes over it, then comes a yellow triangle with an exclemation mark, and then internet access, but then I still cannot get onto the web with a browser.

Shoot, that is scary. Does it do this in safe mode with networking?

Ah, saw the post about interference with Malwarebytes. See if you can transport rkill with a USB drive and you should include Emsisoft Emergency Kit and HitmanPro as well. Rkill does a decent job of closing processes and services that may interfere with scanners. Junkware Removal Tool also does this and I am starting to like this tool more and more every time I use it, very simple and automated.

 

[Ketchup]

IMF? I don't think that has anything to do with Malwarebytes. When I googled for it, it came up with Iobit Malware Fighter... you're not using iobit software, are you?

Barge pole, etc.

Is Firefox any different if you start it in safe mode?
https://support.mozilla.org/en-US/k...safe-mode#w_how-to-start-firefox-in-safe-mode

Hopefully it is just the Iobit program and removing it will clear your problem.

If it is a virus/rootkit/malware, let me say this:

I have removed some pretty nasty viruses/Malware for others, and you may be able to do so on your machine. Personally, I wouldn't take the risk. If this is a virus, it probably has been on there a while to get to this level, and I would just back up and do a clean install.

 

[jadroe]

IMF? I don't think that has anything to do with Malwarebytes. When I googled for it, it came up with Iobit Malware Fighter... you're not using iobit software, are you?

Barge pole, etc.

Is Firefox any different if you start it in safe mode?
https://support.mozilla.org/en-US/k...safe-mode#w_how-to-start-firefox-in-safe-mode

Well, you got me, I was using iobit software. Why, what's wrong with it?

booted up in safe mode, with network capabilities, and still no access to the web.

 

[jadroe]

Used rkill, and across the board there were no issues found.
On to the others utilities.

 

[master_shake_]

sounds like a dns error try typing in googles ip address and see if the browser can resolve it.

http://74.125.224.72/

 

[jadroe]

Shoot, that is scary. Does it do this in safe mode with networking?

Ah, saw the post about interference with Malwarebytes. See if you can transport rkill with a USB drive and you should include Emsisoft Emergency Kit and HitmanPro as well. Rkill does a decent job of closing processes and services that may interfere with scanners. Junkware Removal Tool also does this and I am starting to like this tool more and more every time I use it, very simple and automated.

Ok, did all four utilities, got rid of several things in the registry, but still, the internet is not accessible.

 

[LPCTech]

Run ADWcleaner, and check your IPv4 properties in the network and sharing center, local area connection properties, if there is a strange IP listed remove it. Also check that your shortcut for your browser is not somehow hijacked. try getting to a page by going to run: and typing "hh http://www.google.com" to see if you can get there.

 

[jadroe]

sounds like a dns error try typing in googles ip address and see if the browser can resolve it.

http://74.125.224.72/

I typed in the above IP address and got this as a name returned:
lax17s02-in-f8.1e100.net

when I typed in www.yahoo.com, I got this:
Server: dnsr1.sbcglobal.net
Address: 68.94.156.1

In the non-authoritative answer section I got this:
Name: fd-fp3wg1.b.yahoo.com
Addresses: 2 IPv6 and 2 IPv4.

 

[LPCTech]

I think your dns is hijacked maybe? Check IPv4 properties, and make sure its set to auto detect and not some random IP even after using anti malware tools it wont put the setting back to normal unless you change it manually

edit: right click on the tiny network icon in the system tray by the time, select "open network and sharing center", click the blue link on the right representing your network connection, click properties, click internet protocol version 4 settings(IPv4), click properties on the right, make sure there is nothing listed in the bottom there and check to obtain DNS server info automatically. OR set to google DNS which is 8.8.8.8 or 8.8.4.4

I clean malware for a living off about 20-40 PCs a day.

If thats not it, and its still not working run Norton power eraser or combofix, or format and reinstall.

 

[PliotronX]

Ok, did all four utilities, got rid of several things in the registry, but still, the internet is not accessible.

Okay, the two times I had this type of problem, HMP was able to rectify it so personally I would cut and run like Ketchup suggested unless you have difficult-to-activate software like I've had to mess with in the past that you'd like to avoid having to reinstall.

I think your dns is hijacked maybe? Check IPv4 properties, and make sure its set to auto detect and not some random IP even after using anti malware tools it wont put the setting back to normal unless you change it manually

That sounds about right, there is something that does the opposite of what it says and it's called DNS Unlocker which is a type of malware that gets deeply rooted. HMP was able to remove it the times I have encountered it but with the salvo of anti-malware exhausted I'd say it's time for a reload of Windows.

 

[mikeymikec]

Well, you got me, I was using iobit software. Why, what's wrong with it?

1 - I've removed Iobit software (usually "Advanced System Protector") from a tonne of systems for which the customer has said that they had no idea how the software got on to their computer.

2 - Iobit is one of these companies that loves to make (and get the user to pay for) useless software, like a defrag utility for an OS newer than XP.

3 - Pretty much any software that claims to speed up your computer can be likened to "miracle cream" of yestercentury.