Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

One User can not browse on a Domain, Ping OK.


  • Please log in to reply
3 replies to this topic

#1 Roberthil5

Roberthil5

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:40 AM

Posted 15 July 2014 - 07:20 AM

I take care of our small SBS2011 based system (approx 30 users). I have a (1) user (Windows 7 Pro system) who can no longer browse the internet with Firefox or IE. If I log in as another user, I can browse - no problem.

 

Logged in under the problem user, I can ping web sites and get 4 good returns. I did scan with Sophos, Malwarebytes, SFC and Vipre Rescue (safe mode). Malwarebytes did find and quarantine a few things. 

 

What ever he stepped in, it did load a couple of BS programs which I went into control panel (programs) and uninstalled as well.

 

What should I look for or try next?

 

I was going to try Rkill, Combofix and adwCleaner.

 

Thanks



BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,601 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:40 AM

Posted 15 July 2014 - 10:15 AM

Run the AdwCleaner.  If downloads have been made which contained embedded third party software it will remove it.
 
Do not run Combofix, you should not run this without the guidance of one of our Malware Removal Teem members.  You can not post a combofix in the Widnows forums.
 
Please post the Malwarebytes log.
 
To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.
 
To open the log double click on mbam-check.exe on your desktop.  When the log opens, scroll down toward the bottom of the log to Quarantined Items.  Copy and paste this in your next post.


Please run the ESET OnlineScan

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.

 

Because the Eset online scan is going to be run and the results posted this topic will be moved to the Am I Infected forum.  This is the proper location for this topic.  These logs can not be posted in the Windows forums.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 Roberthil5

Roberthil5
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:40 AM

Posted 15 July 2014 - 10:23 AM

I forgot to check the Proxy settings, I have seen this setting changed after a malware infection.  

 

I went back and looked at the error message when the browser failed to display a page:

 

ssl received an unexpected Client HELLO Handshake message
 
error code: ssl_error_rx_unexpected_client_ Hello
 
Sure enough "use a proxy server for your LAN" was checked. I unchecked it and set for automatic detect settings and now it all works.
 
I should have known right away when I could ping successfully...
 
Thanks.


#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,601 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:40 AM

Posted 15 July 2014 - 10:31 AM

There you go. :thumbup2:


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users