Internet access being blocked - ?

Have a strange situation ...
4x computers on local network.
LAN connections are all showing and functional.
All computers and shares, are seen in Network Neighborhood.
All computer can access shares. All computers XP Home/sp2

The above should provide ample proof router, NICS, cables, LAN / Network are all functional..??

I built a new computer a short month ago. My old computer was handed down to my wife. Created a new limited account for her and everything has worked fine the past month.
While building my computer and bring it into the network, I chose to put my new computer AND my old computer (wife's now using) running XP Firewall. I never had installed a 3rd party firewall on my new computer, but did disable a service in Comodo on my old computer prior to activating XP firewall. Transition was transparent and everything has run fine the past month.

Today my old computer (Wife's) can not connect to the Internet ... Firefox or IE .... but Thunderbird mail DOES.
When in Firefox, nothing will load, including Google search can not load.
BUT this is where it gets weird ...
I have a Firefox Addon / icon, with one click will load my web view Google mail account ... which I clicked on and it LOADED!! Google mail view is fully functional.
I then noticed the URL, it is a https type connection.
I then used RoboForm and chose my banking site (a https type) and it loaded and was functional.
The above activity is global for both admin / myself and Limited User / wife account.
I rolled system back (system restore) to 8:25AM yesterday (computer /Internet worked fine last night) and did not fix the problem.
Any suggestions, clues where to look for this block???

Thanks

 

Hi Dennis


Boot to safe mode networking and see if same issue.

Then back to normal and:

ipconfig /all
On both, look for differences

Do these pings on both and look for differences
ping yahoo.com
ping 216.109.112.135

pathping yahoo.com
pathping 216.109.112.135

If you cloned the drive in some way then you may have duplicate SIDS.

If you did clone then:
Download NewSID http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx

Run it on both computers and it will display current SID! If they are the same create a new random SID on one ot them!

Default the HOSTS file on the problem machine

Last resort do my Enema for the Network settings on only the problem computer.

Copy the lines below 1 at a time and paste into an open cmd prompt and hit enter
Ignore errors for now as that is possible depending on your setup.
---------------------------------------------------------
netsh interface ip delete arpcache

ipconfig /flushdns

ipconfig /release *

ipconfig /renew *

ipconfig /registerdns

nbtstat -RR

netsh winsock reset catalog
---------------------------------------------------------

Reboot and test!

Mike

 

I'm not a networking expert by any any means, but from my dealings with the firewall, https may be running through a different port to standard. Check the firewall settings that the main port (80 if I remember correctly) is open. Alternatively, there may be a setting to "block" the main internet connection.

Matt

 

10-4 to that!

Dennis that is why I recommended Safe mode networking where the Firewall and virus/spyware programs are not active.

Same problem in Safe mode networking then likely is something else besides firewall.

I didn't understand what you meant when you said you never installed a 3rd party Firewall then mentioned Comodo!

If all works well in Safe mode networking then in full mode turn off what ever firewall you have to confirm this.

Mike

 

Hi guys, thanks for your responses.
Unfortunately --- No luck.
This problem persists in Windows ...
With NO firewall active.
With only XP firewall active.
With only Comodo active.
AND
Safemode/networking.

First let's get on same page.
The computer with Internet connectivity problem (HTTP only, HTTPS works) is my old computer, now my wife's computer. It has two fire walls installed. Comodo (currently disabled) and XP Firewall. With both disabled or one active, problem persists. This computer has never had a cloned drive. About 9 months ago a new HDD was installed, a backup image was restored onto new drive.
The LAN connection for this computer is solid. It sees all other computers, all other computer sees it. All computer can exchange shared info between themselves.
This computer will always be referred to as "Problem computer ".

Ipconfig /all - Both Good and Bad computers look the same, other than assigned local path.

Problem computer - What has been done.
CCleaner - Cleaner and Registry.
HDD defrag
Ran WinsockXPfix - twice - about 6 hours apart.
Changed NIC cable.
Changed port connection on router.
Cold booted Router, Cable modem, all computers.
Router removed from circuit - direct connection, from cable modem to problem computer.


Ping tests - Compared between Good computer against Bad computer.
Pathping - both similar (have pics if required)
Ping - Good computer was always 100%, 28ms to 51ms.
Ping - Problem computer was always 25% loss, returned only 3 of 4 request. Speed was about same as good computer.
Above pings was done against HTTP (and) HTTPS numeric IP paths and domain name paths - same result for problem computer... lost 1 / returned 3.
Have Windows network diagnostics reports, both in Safemode and normal load if required. They agree ... HTTP not available, HTTPS is available.

Summary
I want to say it could be a funky NIC (onboard) with persistent 25% packet packet loss. BUT on local LAN it states 100 link speed, it ALWAYS links in, shares freely to all, and is fast .... I'm confused

 

Hi Dennis

On the loss I agree it may be a NIC "OR" a weak port on the switch/router. Do you get this ping loss pc to pc or just to WAN (Internet)?

I hope you will humor me here!

Uninstall COMODO Firewall. It can be put back easily enough.

After uninstall reboot and run Cclean again temp and registy repeatedly until they come up clean.

Then test the results of this.

If still no joy do the below!


----------------------------------
Download Dial-A-Fix (DAF)
http://wiki.djlizard.net/Dial-a-fix#...C_and_articles

Have XP CD available in case DAF needs a file.

Check all boxes on the screen (clear any restrictions if it shows any)
Then click GO!

When the entire page is finished click the HammerHead at bottom to go to the second DAF page.

Here 1 at a time do the below

Reinstall BITS
Reinstall Windows Firewall
Repair Permissions

Watch for any File not found or other errors as this may lead to the fix!

Reboot retest!

Get back to us.

Mike

 

OK on reread I see you switched ports on switch.

I forgot 1 operation on Hammer (page 2) of DAF.

Reset networking interfaces

Mike

 

I want to agree, but the following does not support it ...
Changed cable from router to problem computer.
Moved problem computer cable to different port on router.
Removed router from circuit - connected problem computer directly to modem.
All of the above returned the same result ... 25% loss.
For now I feel the router is not the culprit. I have a brand new router, same make / model on hand. All I have to do is plug it in and port over the profile.... may try this tonight.

New test
Yes - When pinging local LAN from problem computer to other attached computers I lose one / receive 3, a 25% loss.

The really strange part, when it works, it works fine. It has no problem with Thunderbird, loading / sending email. HTTPS links and LAN use work as great. It gives the appearance something is blocking HTTP. I will UNINSTALL Comodo tonight. I really love this firewall. But in full mode, I really hate the maintenance it requires to keep it happy. When it needs approval of it's own file sets (example, when applying Comodo program updates), you still must approve them ... this is overkill. Saying "yes" or moving new files to an approved user library gets old when you have to do it to a network of computers. Possible I can find some additional settings or reduced options to make it an easier live .... or find a different firewall, strongly considering XP built-in.

Download Dial-A-Fix (DAF)
Have a problem here per having XP install CD. This problem computer suffered a MOBO failure during warranty coverage (Have a thread in wBBS about 2 - 3 years ago). The local builder tried to say it was because it heat / dirty, but I had cleaned it about 6 months prior to failure. Research on Internet stated this failed board was problematic. He replaced the board, installed XP Home (I had purchased/paid for XP-Pro). When I noticed this a couple days later I had all my programs reinstalled. He said if we tried to reinstall Pro, would have to install programs again. He never gave me a XP Home install disk. I still have the XP Pro disk, have no Idea if it is still valid.

IMAGE Backup
We'll here we have a time lag. This problem computer was my old computer. It was master to the local LAN. When I did the cutover to my new computer it left all my automatic / normal manual backups on this old computer ... and I have not had time to restructure this. I keep my new computer current with images. The problem computer last image is the "final ", which was right before I create new account for my wife, adding new programs and fine tuned her user profile. I never got a new image on this problem computer since.
The good news ... If this is a "settings or unknown weird block" somewhere in the network config, any suggestions where I could look / find a clean version in the image file to copy / restore from. I can only guess these network settings change very little. ???

 

You likely will not need the XP CD in any case, the XP Pro disk would have what was needed.

Even if it could not find the files it needed it would cause no problem!

I ask again PLEASE uninstall Comodo! A firewall is for sure one of the things that can do someting like this! Just because it is off and the problem still exist in Safe mode networking is not always positive proof that it is not the firewall.

Then if no joy do the DAF!

Mike

 

The DAF is a good thing even after this issues is resolved. But don't do it before uninstalling Comodo so that you will know for sure if it was Comodo.

I get a few prompts from Comodo but not enough to be an issue.

I do notice when I do a deep cleanup of temps and registry it will ask for confirmation on certain items again.

Comodo is a good program but any program can get damaged. It can be reinstalled.

Mike

 

No problem with uninstalling Comodo, you may need to convince me to put it back on.
Creating a image file, put me in a better than nothing if uninstall/Comodo and/or DAF goes south on me.

 

Uninstalled Comodo
Now when I ping, I get ALL 4 replies, no LOSS.
But HTTP does NOT connect, just HTTPS

Ran DAF
Program was running against my C: I386 folder, but then required a XP disk. I put in my new XP Home disk I purchased for my new computer (OEM, not retail). This seemed to keep program happy.

Ran into a snag at "Reset WMI/WBEM" Program hung per access violation. I was forced to use Task Manager and I restarted program on next item on list. I got all the way through SFC ... had to tap retry numerous times, buy meter kept moving forward.

Program completed, I prayed for a successful reboot. It did.

Two problems ..
I lost my Wife's profile, just mine listed (admin status).
Still can NOT connect to HTTP, but can connect to HTTPS.

 

We'll folks, I think we should have an monthly award. This award would be given to the individual who has demonstrated the highest degree of one or more of the following .....
My Bad.
Brain Dead.
A single cell of living matter has an higher IQ.

I would like to award myself this months outstanding and well deserved "Dumb ?SS award.


Q.) Why does my problem computer not have access to Internet HTTP??
A.) Because I told my router not to allow it.

OK, here's the story.
Prior to me getting a new computer and my wife getting my hand me down XP, she was running w98. At times, the kids are on computer restriction, which meant the only way I could control the kids from using her w98 was to create a rule which restricted HTTP via my router. It was only set for her IP address (192.168.0.3), since all other computers were password protected XP's. This filter is in "Blocked Services" for my router. I turn this on or off or use a built in time schedule to manage it.
I use another filter in "Blocked Sites" on my router. It uses key words to block activity, example all/any executable file downloads and is global to the network (my IP address is Allow/trusted). Monday night, my teenage son wanted to download some free game programs . I temporarily moved the restriction to "Off" in "Blocked Sites ". After he finished, I went back to the wrong setting (Blocked Services) and moved the setting back from "Off -(to)- On ", which meant the router was doing what it was told. Never allow HTTP access to IP address 192.168.0.3
So now you know ...
You ask if I deleted that nasty "No HTTP access" rule - YES!!

Again, I would like to thank all who replied and apologize for this ... like they say, check, recheck and check again.

Soooo, anyone have some easy suggestion on which files to copy back from my fresh image file to restore my wife's profile ??? No rush, I will be in the kitchen for a while ... I like to eat crow well done.

 

Revert to that image would be quickest/easiest.

 

Hi Dennis

I would not have recommended Reset WMI. That is a best done as a last resort with a specific error pointing to WMI.

And I don't know what happened to your wife's profile that is starnge.

I agree with Dave on the restore as best way to get back to square one.

But if you want we may can get it back.

But first ? does eveything seem back to normal as for broswing etc now. If everything seems to work then we can probably fix this.

OK for her profile!
Turn off hidden files and folder and turn on show system files.

Browse to Documents and Settings: and see if her Profile folder still exists and if it exists is it now named something like "Wife.computername" instead of just Wife.

If you can see the above the the profile is damaged and not repairable but all documents and emails favorites should be retrieviable.

If so create her a new profile set to admin for now. Log on and confirm new profile works.

Before we go further here let me know if in fact her profile is there and renamed as above.

One other thing I would do. Go into Event logs and clear them, then immediately reboot. Then check them immediately first thing, now you should have only events that occured on shutdown and startup. Check for any unusual errors that may need handling. Your DAL log looked clean.

Mike

 

It's all good Mike.
I found her profile info last night. Created a new profile and used the "Copy from - Copy to User Profile" function. It worked very well. Since she had only been using this profile 3 weeks, their was very little in profile. Firefox gave me a little problem when I noticed both old and new Firefox profiles where identical named. Just created a new profile shell and copied her Firefox profile info in, works fine.
I still have her account set to admin / no password. Will monitor for any more required changes and move her back to Limited account in a few days.

Mike, I would like to thank you for all your help, most appreciated. I must say, DAF is one powerful tool .. will be keeping an eye on it.

Would like to comment on Comodo.
It was nice to know it was not causing / creating any locks or hidden holds on system when it was put at a simple "disable / no load function ". That alone will have me installing Comodo back on system. Was surprised though what was left behind when uninstall was run. CCLeaner found 2 instances/two passes. Reboot, RegSeeker found 1 instance on a global clean. But sweeped again with a "Comodo" name search and found 22x more.

 

Fan-tan-tastic-al!!!!!!!!!

Lots of programs like that not uninstalling clean with Norton being #1 Mcafee #2 and Zone Alarm #3.

Look at the Revo uninstaller I think it is the Best using the Advanced functions which does a Registry and disk scan for leftovers after uninstall.

I have run DAF hundreds of times and it has never caused an issue. Tho I have had it stop when it could not find a file or a damaged file. Ususally this is good news as now I know what file to replace. I have had to abort also and as I said the log file show no issue.

I should have had you reboot between the items on page 2.

Now to finish checking for issues do the Clearing of Events procedure and look to see if you have any errors. Usually there are a few errors antway and some warnings.

Let me know if you see anything you thinkneeds attention.

But for this thread I think! Another one bites the dust!

Good luck!

Mike