Topic 'Re: Web/HTTP access doesn't work, PING does' in forum 'Microsoft Help' - dslreports.com

Re: Web/HTTP access doesn't work, PING does

Wed, 09 Sep 2009 12:01:53 EDT

Hall posted : All the more reason not to touch Symantec's stuff with a 10' pole ! Heh, I remember and used Peter Norton's DOS-based utilties years ago and back then they were good stuff ! I hope he regrets selling out his name.... :( I presume he longer works for Symantec, of course, though he may I guess.

Re: Web/HTTP access doesn't work, PING does

Wed, 09 Sep 2009 10:06:27 EDT

gdm posted : Glad you got it working!

Re: Web/HTTP access doesn't work, PING does

Wed, 09 Sep 2009 09:45:32 EDT

Hall posted :

said by Pronoiac:

That case turned out to be an incomplete Norton uninstallation. ...get the Norton removal program and run it.

said by RPC :

After a Registry cleanup...

Those two "fixes" solved the problem ! I used Symantec's clean-up tool (ironic that their "uninstall" routine doesn't do the job properly) and then did a registry clean-up. Running the Norton tool and rebooting wasn't sufficient. Apparently there was still stray Norton crap left behind....

Re: Web/HTTP access doesn't work, PING does

Mon, 07 Sep 2009 19:35:46 EDT

anon posted : Just solved an identical issue on a friends laptop.
I've found a strange mix of AVG and bitdefender firewall registry entries.
After a Registry cleanup and a Panda AV scan and Firewall correctly configured, everything seems to work just fine

:)

Re: Web/HTTP access doesn't work, PING does

Thu, 03 Sep 2009 08:54:43 EDT

Hall posted :

said by Pronoiac:

That case turned out to be an incomplete Norton uninstallation. To check that, see if booting it in Safe Mode with Networking helps. If it does, get the Norton removal program and run it.

Interesting.... He had Symantec AV on there and said it wouldn't uninstall (properly). I thought I sent him a link to Symantec's stand-alone uninstaller but don't know if it was done.

Re: Web/HTTP access doesn't work, PING does

Thu, 03 Sep 2009 01:11:05 EDT

Pronoiac posted : Hey there -

I was troubleshooting a friend's netbook with the same problem when I stumbled on this page. I just signed up to post this, so pardon me if I botch the HTML.

That case turned out to be an incomplete Norton uninstallation. To check that, see if booting it in Safe Mode with Networking helps. If it does, get the Norton removal program and run it.

Cheers!

Re: Web/HTTP access doesn't work, PING does

Wed, 02 Sep 2009 10:30:03 EDT

mattei posted : I saw it suggested earlier in the thread. When you declined to do so, I figured you had decided to go the distance.

*sniffle* I was curious.

Re: Web/HTTP access doesn't work, PING does

Wed, 02 Sep 2009 10:17:22 EDT

Hall posted : Yeah, I thought of that too but the stubborn part of me said "no, don't bother ... the NICs are able to ping, auto-updates was working and everything worked just fine in Safe Mode". Didn't do it obviously :D

Re: Web/HTTP access doesn't work, PING does

Wed, 02 Sep 2009 09:56:01 EDT

gdm posted : I didn't think of this till first thing this morning. Not sure if would even work. Did you ever try removing all networking components and rebooting? Not that it matters now but I remember a similar problem years back with XP and it fixed it.

Re: Web/HTTP access doesn't work, PING does

Wed, 02 Sep 2009 08:14:47 EDT

Hall posted : Well, the laptop's owner asked for it back at this point.... I enjoyed the challenge !

I did tell him if/when he takes it to someone else to "fix" to not let them simply wipe it clean and start over because that's what how too many people "fix" PC problems. If that's the solution, he can do that himself vs pay someone to stick a disc in it, reboot, answer a few prompts and walk away.

Thanks to everyone for their help.

Re: Web/HTTP access doesn't work, PING does

Tue, 01 Sep 2009 11:10:04 EDT

mattei posted :

said by Hall:

Doesn't one of the 'netsh' commands wipe out LSPs and make things start over ?

Yes, but

said by mattei:

A system service (hidden, injected, or sitting in plain sight) could be adding to the catalog after reset. Try

netsh winsock show catalog >xsp.txt

Re: Web/HTTP access doesn't work, PING does

Tue, 01 Sep 2009 11:00:30 EDT

Hall posted : Will try FTP in a few minutes.

Remember, this still occurs when I disable XP's firewall so that leaves "filter hook" and "intermediate NDIS driver" from your list.

Doesn't one of the 'netsh' commands wipe out LSPs and make things start over ?

Re: Web/HTTP access doesn't work, PING does

Tue, 01 Sep 2009 10:12:41 EDT

mattei posted : The UDP DROPs are just NetBIOS/SMB broadcasts and a few DHCP packets. Could you lather, rinse, repeat for FTP? I'd like to verify, via the log, that it's not just HTTP running over TCP that's blocked. All we're doing is proving the earlier assertions of a third-party component forcibly knocking all TCP connections down.

tcpstats;
I'm trying not to look at the obvious correlations and stick to RFC definitions but, well, eew. It looks like an ornery LSP where there shouldn't be one (or firewall hook, filter hook, intermediate NDIS driver :(). I'll get back to those once the FTP test confirms it's TCP in general and not just HTTP but that's looking like a formality at this point.

Re: Web/HTTP access doesn't work, PING does

Mon, 31 Aug 2009 21:50:59 EDT

Hall posted :

said by mattei:

[code]
netsh interface ip show tcpstats
[/code] Oddities like zero's, much > than zero for In Errors, Out Resets equaling or approaching Out Segments?

Here's the results of that command.

tcpstats.txt 675 bytes

Re: Web/HTTP access doesn't work, PING does

Mon, 31 Aug 2009 21:45:15 EDT

Hall posted : The firewall logfile is attached. I actually cleared the logfile, restarted the firewall, and had to leave the PC.

.122 is the laptop itself. .50 is my PC. .104 is probably my wife's laptop.

pfirewall.log 2,898 bytes

Re: Web/HTTP access doesn't work, PING does

Mon, 31 Aug 2009 20:41:52 EDT

Hall posted : Let me stop the logging and get a fresh logfile to look at. Once I initiate it, I will attempt to access the internet with a browser and take a snapshot of the logfile at that point.

Re: Web/HTTP access doesn't work, PING does

Mon, 31 Aug 2009 20:40:56 EDT

Hall posted :

said by mattei:

Auto-login / login that seems slow or Hall is busy and it can wait?

When there was only (1) account on the machine, it logged in automatically. At one point I added a "test" user account so when it boots, it stops at the Welcome screen.

Re: Web/HTTP access doesn't work, PING does

Mon, 31 Aug 2009 18:51:03 EDT

mattei posted : We're looking for something specific...and we'll know it when we see it :D. XP SP2+ has a stateful firewall that does not block outbound traffic but we can use it to help troubleshoot the network stack.

OPEN, good.
DROP, good, if the RECEIVE flag is shown. Probably port 1900?
UDP only, bad.

We should be seeing TCP connection OPENs when you attempt to access the Internet. Sorry that I forgot to mention this but did you check both logging options (dropped and successful)? If so, we've almost confirmed TCP protocol IP stream sockets aren't making it to the firewall. If that's not the case we'll move on to WinHTTP.

Could you try FTP or POP or SMTP or all three, then check the firewall log again? You said FTP didn't work but I'd like to confirm the lack of TCP entries in the log.

Afterwards,

netsh interface ip show tcpstats

Oddities like zero's, much > than zero for In Errors, Out Resets equaling or approaching Out Segments?

If netsh complains about the Routing and Remote Access Service you'll probably have to change the service startup mode from disabled to manual before you can start it.

Re: Web/HTTP access doesn't work, PING does

Mon, 31 Aug 2009 18:38:17 EDT

mattei posted :

said by Hall:

As for the AU downloads, it seems to me that they're occurring while the PC is sitting at the login/welcome screen.

When booting normally?

said by Hall:

It can be there for a long time.

Auto-login / login that seems slow or Hall is busy and it can wait? :)

said by Hall:

I did try "Run as..." and signing in as admin but that's not allowed on XP Home it seems.

Only in Safe mode (blank default password).

Re: Web/HTTP access doesn't work, PING does

Sun, 30 Aug 2009 23:18:21 EDT

Hall posted :

said by mattei:

Then enable logging (advanced tab on the FW dialog) and see what you can see in %systemroot%\Pfirewall.log.

What would one look for in that log file ? All it contains (after attempting to access the 'net) is a bunch of "OPEN" and "DROP" UDP connections and they're all from "internal" IP addresses, i.e. 192.168.1.x addresses. Actually, since I launch the web browser -- wait, the XP firewall doesn't block outgoing connections anyway, does it ? -- the firewall shouldn't interfere.

Re: Web/HTTP access doesn't work, PING does

Sun, 30 Aug 2009 13:57:59 EDT

Hall posted : Will try the add'l 'netsh' commands you suggest.

As for the AU downloads, it seems to me that they're occurring while the PC is sitting at the login/welcome screen. It can be there for a long time. I'm working on this thing off and on (more off than on, mind you !). Also goes along with why I thought it was something related to the user's profile since 'net access (HTTP) works in Safe Mode.

I did try "Run as..." and signing in as admin but that's not allowed on XP Home it seems.

Re: Web/HTTP access doesn't work, PING does

Sun, 30 Aug 2009 12:33:57 EDT

mattei posted : :)

I missed the part where you followed through on resetting winsock. Likely, nothing interesting to be seen. I was interested in IP/IPSec routing, transports, and proxies. You've tried:

netsh winsock resetnetsh int ip reset reset.log

right?

May as well complete the trifecta:

netsh firewall reset

Then enable logging (advanced tab on the FW dialog) and see what you can see in %systemroot%\Pfirewall.log.

Back to winsock. A system service (hidden, injected, or sitting in plain sight) could be adding to the catalog after reset. Try

netsh winsock show catalog >xsp.txt

An obvious sign would be the presence of something removed by the reset (~~check the reset log~~ Edit: no reset log is generated for winsock - use a clean machine's catalog or Google and a fine tooth comb). Resetting winsock removed non-default Layered Service Provider registry keys. Unless one of the third-party repair tools claims to do more they're not going to help.

Sorry about the second one. netdiag is part of the support tools package (on the CD and a free download) but now that I've read all the steps you have and have not taken I see it's pointless.

AU uses BITS. BITS uses HTTP and HTTPS to transfer files. Another tool in the support tools package, bitsadmin.exe, will allow you to create jobs, add files to a job, and monitor progress. There's also a BITS MMC snap-in if you want a GUI but I don't know which editions, if any, have it installed. Never used it.

The presence of successful MS Automatic Update downloads means HTTP transport is working for the Update Agent but I'm fuzzy on the circumstances. Have any of these downloads occurred in Normal mode or were they all in Safe/Clean Boot modes? If I've read what you've reported clearly, ICMP (Ping) and UDP (DNS) seem unaffected.

The next thing that pops into my head is Group Policy restrictions. GPResult.exe might help. Myself, I'd probably have Process Explorer and NetMon running at this point as well as a copious supply of "Admin fuel" aka beer.

Re: Web/HTTP access doesn't work, PING does

Sat, 29 Aug 2009 21:23:33 EDT

bangaroo posted : How about the Winsock Fix?
»www.snapfiles.com/get/winsockxpfix.html

Re: Web/HTTP access doesn't work, PING does

Sat, 29 Aug 2009 18:27:21 EDT

MoJeeper posted : I'm not sure if this is related but I'm using Alltel wireless here and I'm having the same problems and My father who uses Alltel also is having the same issues as the OP.

I'm able to browse to some web pages, others not. I have tried an alternate DNS and same thing. I have Chrome, IE8 and Firefox.

They all do the same, either time out or partial load and they spin away trying to load the rest of the page. Ping is the same goes out and returns no problem.

has me baffled too.
--
Semper Fidelis. 233 Years Strong.
»www.pleasant-viewfire.org

Re: Web/HTTP access doesn't work, PING does

Sat, 29 Aug 2009 18:00:35 EDT

Boredness posted : If you can get SUPERAntiSpyware on there that could probably fix it. There is a "Repairs" tab in the preferences section also called control center that can repair broken network connections [WinSock LSP Chain]. There are other system repair options in there as well like reset URL prefixes.
--
hey mems

Re: Web/HTTP access doesn't work, PING does

Sat, 29 Aug 2009 15:16:09 EDT

Hall posted : Since I can PING websites, networking isn't broken. I can PING them by name, so DNS is good.

When I try »/ in a browser address, I get the same blank page. Interestingly, it takes a couple of seconds as if it's trying. Something is blocking the outbound HTTP port(s), yes ??

Re: Web/HTTP access doesn't work, PING does

Sat, 29 Aug 2009 14:56:40 EDT

Hall posted : Another "Automatic Update" got downloaded too. What protocol do those use ?

I also thought it could be something wrong with the user's account seeing as no 'net works when logged in as them but does as admin. So I created a 2nd user, with admin rights, and logged in. Still no 'net access though.

Re: Web/HTTP access doesn't work, PING does

Sat, 29 Aug 2009 14:55:09 EDT

Hall posted :

said by MJimLay:

netsh int ip delete arpcache (this doesn't appear to have been tried)

Returned "ok"

Re: Web/HTTP access doesn't work, PING does

Sat, 29 Aug 2009 14:52:54 EDT

Hall posted : 'netsh dump'

Interesting to whom ? :D I piped it's results to a logfile and read through it and nothing glaringly wrong jumps out (to me).

'netdiag /test:winsock'

command not found

Re: Web/HTTP access doesn't work, PING does

Sat, 29 Aug 2009 12:48:48 EDT

Hall posted :

said by MJimLay:

Netsh int ip reset reset.log (the command above is incorrect)

I didn't have any luck with the exact wording either. The resetlog file didn't look "right". I found the KB at MS and it was worded a bit different. Ran that and the resetlog file was full of entries.

said by MJimLay:

netsh int ip delete arpcache (this doesn't appear to have been tried)

Will try that.

said by MJimLay:

If that does not resolve issue, uninstall/reinstall NIC drivers. Disable TCP/IP Version 6 if it's installed as well.

Nothing is wrong with the NIC. It works in Safe Mode and things like PING work in normal mode. I haven't tried the wired connection but the owner said he tried both wired and wireless and got same problem. IPv6 is already disabled (not installed).

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 23:59:10 EDT

Frohike posted :

said by MJimLay:

Try the following on the command line.

Netsh int ip reset reset.log (the command above is incorrect)

netsh int ip delete arpcache (this doesn't appear to have been tried)

Reboot after running these. It should resolve your issue.

If that does not resolve issue, uninstall/reinstall NIC drivers. Disable TCP/IP Version 6 if it's installed as well.

netsh int ip reset reset.log or netsh int ip reset resetlog.txt will both work.

Its not his NIC drivers - the NIC works fine in safemode.

As I said before - there is software loading in regular mode that is interfering with the HTTP that doesn't load in safemode.

If you can't seem to find it - can try system restore back to a date it was working and hope that system restore removes the program(s) in question. Which is never a guarantee.

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 22:32:25 EDT

MJimLay posted : Try the following on the command line.

Netsh int ip reset reset.log (the command above is incorrect)

netsh int ip delete arpcache (this doesn't appear to have been tried)

Reboot after running these. It should resolve your issue.

If that does not resolve issue, uninstall/reinstall NIC drivers. Disable TCP/IP Version 6 if it's installed as well.

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 21:20:08 EDT

mattei posted : What do

netsh dump

and

netdiag /test:winsock

tell you? Anything interesting?

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 21:05:13 EDT

Hall posted :

said by sonofjay:

Any repeating entries every few seconds? Any Mention of True Vector Service?

No mention of "True Vector Service".

said by sonofjay:

can you telnet to port 80 anywhere? i.e. telnet www.google.com 80

Could not open connection to host on port 80: Connect failed

said by sonofjay:

Do you know if FTP is blocked as well?

It appears to be. No access through a browser nor via the command line.

ftp: connect: unknown error number

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 20:56:41 EDT

Hall posted :

said by Frohike:

You have either security software or spyware blocking the connection.

Still running like just posted above.....

AVG is uninstalled. Windows Defender is uninstalled. Windows Firewall is turned OFF.

Still no web browser access.

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 20:48:36 EDT

Hall posted :

said by auggy:

Can you try a "clean boot" of XP:

»support.microsoft.com/kb/331796

Clean booting may not stop all third party software that loads at startup.

Tried that.... Disabled everything as instructed in the KB article, rebooted and walked away. When I returned, the yellow shield balloon was telling me there were updates available .... Windows Update had internet access. Tried IE, FF, and Chrome, no access. Ping still works and DNS is working. Hmmm...

Still trying :-)

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 10:46:46 EDT

Frohike posted :

said by Hall:

said by auggy:

Can you restart the computer in "Safe Mode with Networking" and see if the same problem exists?

Interesting.... Browser access works in Safe Mode.

You have either security software or spyware blocking the connection.

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 07:53:24 EDT

auggy posted : Can you try a "clean boot" of XP:

»support.microsoft.com/kb/331796

Clean booting may not stop all third party software that loads at startup.

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 00:20:51 EDT

nwrickert posted : Is it possible that your software firewall is forcibly closing connections?

Re: Web/HTTP access doesn't work, PING does

Fri, 28 Aug 2009 00:09:37 EDT

Hall posted :

said by auggy:

Can you restart the computer in "Safe Mode with Networking" and see if the same problem exists?

Interesting.... Browser access works in Safe Mode.

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 23:36:27 EDT

sonofjay posted : Anything in the event log? Any repeating entries every few seconds? Any Mention of True Vector Service?

can you telnet to port 80 anywhere?

i.e. telnet www.google.com 80

Do you know if FTP is blocked as well?

--
Mission Accomplished

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 23:12:21 EDT

auggy posted : Can you restart the computer in "Safe Mode with Networking" and see if the same problem exists?

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 23:05:21 EDT

Hall posted :

said by Hall:

Will try the 'reset' option now.

Didn't fix the problem.... :(

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 21:07:55 EDT

Hall posted :

said by nwrickert:

However, line problems could also be involved.

Line problems aren't likely the cause. He described what was happening with the laptop at his house and the exact same thing occurs at my house.

Will try the 'reset' option now.

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 20:49:24 EDT

auggy posted :

said by Hall:

said by XT0RT:

Try these three commands in a command prompt window and then reboot the system, see if it still does it:

1. ipconfig /flushdns
2. netsh int ip reset resetlog.txt
3. netsh winsock reset

Doesn't the "Repair" option in the right-click menu of the network adapter do that ? I did try that already. Besides, as I said, PING works.

The Network Adapter Repair option will not reset Winsock and there is a good chance the problem is Winsock corruption. With Winsock corruption ping may work but browsing may not.

I would suggest to go ahead with the Winsock reset.

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 20:32:26 EDT

nwrickert posted : Does this happen quickly, or after a delay?

I'm inclined to agree that it is a winsock problem. However, line problems could also be involved.

If there are line errors, ping would work because it uses short packets, while browsing fails because it uses longer packets. You can test by using long packets with ping, or by seeing whether other computers work fine on the same ISP connection.
--
AT&T dsl; Speedstream 5100b modem; Zyxel NBG334W router; openSuSE 11.0; firefox 3.0.13

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 20:24:33 EDT

Hall posted :

said by nwrickert:

What happens when you try to access a page in the browser? Does it time out, or is there some sort of error?

Firefox says:

Connection Interrupted, The connection to the server was reset while the page was loading. The network link was interrupted while negotiating a connection.

IE says:

Internet Explorer cannot display the webpage

(and has the button that runs the network diagnostic wizard)

Google Chrome says:

The webpage is not available. The webpage at »www.yahoo.com/ might be temporarily down.....

ERR 101 (net::ERR_CONNECTION_RESET): Unknown error

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 20:16:35 EDT

Hall posted :

said by XT0RT:

Sounds like she either got a DNS hijack in her browser...

Wouldn't Hijack This show that ? I did run that and see that I didn't mention it above. It came back clean (I could recognize pretty much every entry or the paths appeared legit). Can't access a website via IP address either...

said by XT0RT:

...or the TCP stack itself is shot.

Try these three commands in a command prompt window and then reboot the system, see if it still does it:

1. ipconfig /flushdns
2. netsh int ip reset resetlog.txt
3. netsh winsock reset

Doesn't the "Repair" option in the right-click menu of the network adapter do that ? I did try that already. Besides, as I said, PING works.

said by XT0RT:

...that's why online scanners from Trend Micro and ESET exist. Use them.

Back to the original problem, the internet can't be accessed via a web browser.

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 12:29:56 EDT

XT0RT posted : Sounds like she either got a DNS hijack in her browser or the TCP stack itself is shot. Did she update to IE 8 recently? Some plugins from 7 will not transfer over properly. As for the removal of MalwareBytes and BitDefender, she probably had someone else look at it and probably isn't being truthful about it.

Try these three commands in a command prompt window and then reboot the system, see if it still does it:

1. ipconfig /flushdns
2. netsh int ip reset resetlog.txt
3. netsh winsock reset

Other steps would be to disable the anti-virus solution, or uninstall it completely and try again. AVG is useless if the virus or malware is already in the system, that's why online scanners from Trend Micro and ESET exist. Use them :P

Let us know how it goes. WCS, she's in for a format and education on malware prevention.
--
Asus P5Q-E / Q9450 @ 3.6 / 4GB OCZ Reaper HPC 8500 / XFX 9800 GX2 / Vista Ultimate x64 SP1

Re: Web/HTTP access doesn't work, PING does

Thu, 27 Aug 2009 11:44:44 EDT

nwrickert posted : What happens when you try to access a page in the browser? Does it time out, or is there some sort of error?
--
AT&T dsl; Speedstream 5100b modem; Zyxel NBG334W router; openSuSE 11.0; firefox 3.0.13