Member Avatar for Lorraine_2

I have a Toshiba Satellite L675 laptop running Windows 7 Home Premium. This evening, IE, Chrome or Mozilla would not connect to the Internet. I received a message saying :
"The remote device or resource won't accept Internet connection". I did manage to get Mozilla to connect to the Internet by going into Options-Advanced-Network-Connection and unchecked "no proxy". I tried to reconnect IE by going into Internet Options, Connections and "settings" is all greyed out so I cannot configure a proxy server for a connection. My other computers all connect to the Internet without a problem.

Any help would be much appreciated. Thank you.

  • 4 Contributors
  • 8 Replies
  • 366 Views
  • 19 Hours Discussion Span
  • Latest Post Latest Post by Lorraine_2

Dani AI

Generated

A quick diagnosis and what normally fixes this type of problem

The symptom set (all browsers reporting “the remote device or resource won’t accept the connection” while IE’s LAN/Connections controls are greyed out) strongly matches a proxy/PAC auto‑config hijack: malware sets an AutoConfigURL or proxy in the registry so browsers are forced through a malicious PAC/WPAD and normal connections fail. The LAN settings can also be locked by policy-style registry values under the Internet Explorer “Control Panel” policies (which is why the LAN Settings button is unchangeable). (malwarebytes.com)

Practical check-and-clean checklist (run from an elevated Command Prompt; back up the registry / create a restore point first)

reg query "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v AutoConfigURL
reg query "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable
reg query "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel" /v Proxy

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable /t REG_DWORD /d 0 /f
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer /f
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v AutoConfigURL /f

reg delete "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel" /v Proxy /f
reg delete "HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel" /v AutoConfig /f
reg delete "HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel" /v Proxy /f

netsh winhttp show proxy
netsh winhttp reset proxy
netsh winhttp import proxy source=ie
netsh winsock reset
netsh int ip reset
ipconfig /flushdns
ipconfig /release
ipconfig /renew

After netsh winsock reset a reboot is required. The reg add/delete sequence and the WinHTTP commands are standard ways to clear proxy/autoconfig entries; resetting Winsock and the TCP/IP stack clears common network corruption. (learn.microsoft.com)

Cleanup and prevention (persistence checks, browser profiles, sync)

Treat the system as compromised until proven clean: run full scans (Malwarebytes + a second‑opinion scanner / AdwCleaner/HitmanPro as needed), inspect startup/persistence with Sysinternals Autoruns, and check the hosts file (restore to Microsoft default if altered). Because a browser reinstall often preserves profile data and cloud sync, follow ’s and ’s advice: export bookmarks/passwords, turn off/reset Chrome Sync via Google’s sync page, choose “Also delete browsing data” when uninstalling Chrome, and delete the local profile folder (%LOCALAPPDATA%\Google\Chrome\User Data) before reinstalling. Use Autoruns to remove any scheduled tasks or hidden run keys the malware may recreate. These steps remove the hijack, clear locked policy keys, and stop reinfection from synced or persistent artifacts. ()

Cautions: editing the registry and removing policy keys needs administrator rights; back up the registry or create a system image first. If the infection is persistent after these steps, consider offline scanning or restoring from a known-clean backup.

Recommended Answers

All 8 Replies

Member Avatar for Oleg_3

Have you tried reinstalling your browsers?

Member Avatar for rproffitt

This sounds like the usual infection. You can try resetting the browsers (how is on the web) but I'd scan with the tools listed by Grif at this link.

The proxy setting is rarely used here. But some malware used that to hijack PCs.

Other issues include incorrect date and time, and older WiFi connections such as WEP.

Member Avatar for Lorraine_2

Yes, I did reinstall Chrome last evening and the reinstall didn't clear anything up. I do not know how to reinstall IE. I did however reset IE and that didn't work. So I ran my antivirus and it picked up a few times last night.

Just now I booted up that laptop and everything is back to the way it was. All browsers, so far, are connecting to the Internet.

Thank you Oleg_3 for responding to my problem.

I guess my post can be closed.

Member Avatar for rproffitt

@OP. Reinstalling browsers and most apps keep settings. This means a reinstall is not a reset in the case of say Chrome, Firefox and other apps.

Good news to read a reboot helped.

commented: Yup +6
Member Avatar for Lorraine_2

Yes, I did reinstall Chrome last evening and the reinstall didn't clear anything up. I do not know how to reinstall IE. I did however reset IE and that didn't work. So I ran my antivirus and it picked up a few times last night.

Just now I booted up that laptop and everything is back to the way it was. All browsers, so far, are connecting to the Internet.

Thank you Oleg_3 for responding to my problem.

I guess my post can be closed.
One more thing. I just ran Malwarebytes and it picked up the following: Hijack.AutoConfig.URL.PrxySvrRST. This may be my culpruit.

Member Avatar for rproffitt

@OP. That hijack is most likely it.

I suggest you beef up your browser security. I use 2 things on most browsers.

  1. Web Of Trust (it's out for most browsers.)
  2. An adblocker. Now there are some that hate these but they also block scams and more. I use:
    a. Ublock Origin (or)
    b. Adblock+
Member Avatar for AssertNull

@OP. Reinstalling browsers and most apps keep settings. This means a reinstall is not a reset in the case of say Chrome, Firefox and other apps.

Yup. However, the good news is that you can go into the settings and clear the cache, cookies, saved passwords, and there's often a "reset default" setting in the settings. Do that BEFORE uninstalling and reinstalling. Often does the trick. Not always. My general rule after detecting malware is to do all that, then uninstall, then reboot, then manually find those hidden "AppData" and "Program Files" files and shortcuts that somehow got left behind and delete them. A quick search for "Chrome" will show (a lot of, though perhaps not all) the places it buries itself. If I'm feeling extra-cautious, I'll search the registry too. These things never completely uninstall. If I'm feeling extra-paranoid I'll create a new user, reboot as that user, and reinstall as that user. Keep in mind that you're given the option generally of "importing" your old settings or importing the settings of another compromised browser program. If you import settings, be careful not to import the old junk into your fresh new secure installation.

Usually you don't have to do all that. You're probably fine since you isolated that malware.

Member Avatar for Lorraine_2

Thank you rproffitt and Assertnull for your input. I appreciate it very much.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.