Member Avatar for funhousejoe

I have a new issue I have 2 pc's that i have gotten in the last few days that all of a sudden won't web browse.
one is a windows XP sp3
the other is a Win 7 pro sp1

in both cases they can connect to the network and see mapped drives and browse the network locally. they can ping local and internet addresses.
they can ping www.kodak.com addresses properly in other words resolve DNS but when any web browser is opened it just spins. it never brings up can't connect or resolve.
the internet options are not set to go to a proxy
the ip4 settings are automatic and other machines webbrowse fine
i have run AVG and it is clean i have run COMBOFIX from bleeping computer and it is clean I have run RKILL from bleeping compuer and it is clean
i have run TDDSkiller from kaspersky and it is clean
i saw another post here on daniweb suggesting to reset the winsock useing "netsh winsock restet catalog" and rebooted that didn't help

i have an ugly feeling this is a new virus that just has not been found but that is all i have that and 2 machines that don't webbrowse.

  • 4 Contributors
  • 3 Replies
  • 660 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by noe.sylvestrechrist

Dani AI

Generated

In situations like described (XP SP3 and Win7 SP1: SMB and ICMP/DNS work but browsers never complete), the most likely causes are Windows‑level HTTP interception or broken network filter drivers rather than basic DNS/routing. Third‑party AV/web‑shielding, proxy autoconfig leftovers or a damaged LSP/WFP hook can allow pings and file shares while stalling HTTP(S) from userland browsers.

A quick isolation sequence builds on and : a Live Linux USB test confirms whether the path outside Windows works; a raw TCP/HTTP probe shows where the block happens (see for the telnet idea and how to interpret responses). The report from that 64‑bit IE works while other browsers fail is a useful clue — it often points to a 32/64‑bit filter or browser‑hook mismatch rather than pure routing/DNS.

These Windows diagnostics help narrow the root cause. These commands require an elevated command prompt:

ipconfig /flushdns
ipconfig /release
ipconfig /renew
ipconfig /registerdns
netsh int ip reset
netsh winhttp show proxy
netsh winhttp reset proxy
netsh winsock show catalog
netstat -ano

Additional useful checks: capture traffic with Wireshark to watch SYN/SYN‑ACK/RST patterns; compare what leaves the machine when a browser is started versus a raw TCP test; inspect installed network filter drivers and recently removed AV by using the vendor’s cleanup/uninstall tool; review browser helper objects and auto‑config scripts (Autoruns or a clean‑boot are effective at exposing persistent helpers). If raw TCP connects but browsers still hang, focus effort on filtering hooks and the security/HTTP‑filtering components rather than DNS or the perimeter router.

Recommended Answers

All 3 Replies

Member Avatar for JorgeM

It could be malware, but there are a few more things to try...

Have you tried a different browser?
On the machine that has a problem, to rule out the OS, I would boot up to another operating system,say a version of linux that boots off of CD or USB so you dont have to install it and see if the browser that comes with it works.

If you want to get into the "weeds", install a packet capture application on one of these computers and capture the traffic to see if in fact the computer is sending traffic on port 80 to the destination hosts you are trying to browse to.

Member Avatar for CimmerianX

Like JorgeM said, try opera or firefox and see if you get the same result.

Can you telnet to an internet host on port 80? Does that connection get through? If it does, that rules out network stuff and you can concentrate on the PC/browser/OS.

Is your perimeter router set to filter traffic on 80 for some reason? Maybe QOS or something is set and misconfigured?

Member Avatar for noe.sylvestrechrist

i have a simular problem my issue is it connects with internet explorer'64' but nothing else not google chrome, not firefox not even regular internet explorer just explorer '64' and weird part about it is I can still update with windows update, it started acting up when I deleted this stupid antivirus software I downloaded for free, something simular happened to me with mcafee, when I deleted mcafee it fix the problem, some how its related to something installed or deleted my guess antivirus or malware.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.