Fedorov
Premium
join:2002-09-11
|  No HTTP access from Windows? Trojan?
Visited my neighbours house lastnight to try and fix his machine, he's got MSN Messenger access, Thunderbird email access, Kaspersky virus updates work providing it uses an FTP link... BUT anything that's HTTP/HTTPS does not work full stop in Firefox or IE.
I then of course asked him why he'd left Outpost Firewall in RULES Wizard mode and basically explained to him that it should be in BLOCK MOST mode, so his wife or kids use his machine, something requests access and they probably just click ok or allow...
He also had rundll32.exe and svchost.exe in his TRUSTED applications list - again I explained if you don't know what it is that is trying to get out then click BLOCK!!!
Anyway a full Kaspersky scan had found and deleted various trojans from his C:windows drive Win32.Keenval.f was one of them.
Checked his wireless router, checked basically everything to my knowledge, and everything that is not a http/https request works just fine so something appears to be blocking it all, it's not Outpost as you can see the activity being allowed out, I even shutdown outpost to try it as well.
In the end I did the old trick of booting of his WinXP SP2 CD, doing a REPAIR over the top of his current installation as this normally fixes most problems, NOPE!!! Still no http/https access.
I've basically told him to nuke his hard drive and reinstall from scratch.
Anyone else have any experience of this issue before please?
Thanks
Fedorov. |
