SysChat

SysChat (http://www.syschat.com/forum.php)
-   Computer Security (http://www.syschat.com/software-support/computer-security/)
-   -   Help! I can no longer access "any" .gc.ca sites (http://www.syschat.com/help-i-can-no-longer-access-1905.html)

Boardwalker 04-07-2007 09:10 PM

Help! I can no longer access "any" .gc.ca sites
 
Hi, I'm new to the forum and come equiped with a problem.
All of a sudden, I can no longer access "any" .gc.ca sites.
These are Government of Canada sites and I believe that either Internet Explorer or Windows fire wall has corrupted the ability of my system to show them.

Message I get = Windows Internet Explorer Cannot open the page.
I can go anywhere in the world except for those sites.
Can anyone help with this problem?
I have contacted Microsoft,Norton Anti virus etc. and don't get to firs base with them.

Boardwalker 04-09-2007 10:19 AM

What? 28 views and not even one sugestion!
I'm not very computer literate, but it seems to me that someone should know whats going on:confused:

Sami 04-09-2007 01:48 PM

What version of IE (Internet Explorer) are you running.

Please try to access these sites through a different browser like Firefox so that we can pin point the problem.

In your IE, make sure you have not blocked any of these domains.
Goto - IE -> Tools -> Internet Options -> Privacy -> Websites -> Edit
And check if any of these domains are blocked.

Boardwalker 04-09-2007 02:49 PM

Ie7
 
Hi Sami;
Thank you kindly for responding to my dilemma!
I did what you said and everything seems to be at default level. Problem with me is I don't know what to allow (check off) or not.
If I go to allow sites, it asks me to type in the exact address of the site and wow! these are Government sites and there are hundreds of these Government of Canada Site | Site du gouvernement du Canada sites.
What can I do or am I just being stupid?? I know I'll probably get some comments on the latter:)

Tried to click on the above government site and IE7 told me page not found and re-directed me to a damn ****o site
I am running IE7

Boardwalker 04-09-2007 03:55 PM

Firefox
 
Tried accessing the sites through Firefox
Message= server cannot be found.
This is so frustrating, I'm ready to kill this computer!

Sami 04-10-2007 12:28 AM

Ok, So now we know that its not the browser.

Disable any firewall, and test it.

Install any Anti-spyware software and check for spyware or malware.

Boardwalker 04-10-2007 03:08 AM

Disabled
 
Disabled firewall, now I get 404 not found?

Boardwalker 04-10-2007 05:52 AM

no luck
 
I have done a full system scan, installed anti spy ware,etc., etc.
The results of all this come up clean and tell me there is nothing wrong with my system. Network connections are clean and working properly.
There has got to be a simple answer for this.
The government of Canada sites are the only ones I have a problem with. "Any" .gc.ca sites. I hope this computer has 9 lives, cause if I can't get it fixed It's gonna lose one of them! Still get ("Internet explorer cannot display the webpage")
Cheers!:) Microsoft Help Sucks!

Sami 04-10-2007 10:53 AM

Can you check your HOSTS file

Usually Hosts file is located in this folder

C:\WINDOWS\system32\drivers\etc

Open it with notepad and remove any lines referencing the problem Web sites.

Which firewall are using?

William_Wilson 04-10-2007 12:20 PM

are you running norton antivirus, or the entire system works, make sure both windows firewall and norton firewall are off.

Boardwalker 04-10-2007 01:56 PM

Thank you
 
Hi William;
Listen, it is indeed very good of you people to try and help me and I appreciate the help very much.:happy:
I am terrified of messing this computer up any more than it is.:confused:
You see I am not very computer literate, oh sure I can surf the net, manage my affairs and other stuff. But, when a problem like this happens, I'm out in left field.:embarrassed:
Anyway, I can get into the system files,(windows 32etc.) and open it in notepad, but I don't really know what I'm looking for.

It's crazy! just the government .gc.ca sites won't open.
I hate to be a PITA and if you people are frustrated with the time I'm taking up, then please feel free to disregard.:icon_wink:
I want you to know that your efforts to help have been respectfully appreciated.
When it comes to computers I'm like a third grader and need everything written down for me:sconfused:
Cheers and good on Ya!

mahahaavaahava 04-11-2007 09:16 AM

Hi,

try writing this address in IE7 in stead of http://www.gr.ca :

198.103.238.30

This is the actual IP-address of the gr.ca -site. IF you get there using the IP, the problem lies possibly with DNS-servers. More help after you've tried it. Just write the numbers in the address-field in IE7. no http or anything...

Cheers,

Petri from Finland

Boardwalker 04-11-2007 11:32 AM

Tried it
 
Hi Petri, and thank you!:happy:
I tried what you said and it re-directed me to another site
(spider monkey) where there are a whole bunch of Government IP addresses.

I tried clicking on some of the links and got the same thing
(cannot open the page).:confused:

I shut down my firewalls and re-booted, again nothing!
I also got rid of (Internet explorer IE7) and reinstalled IE6:icon_twisted:

Still having the same problem.:mad:
Did a number of scans and system checks and they all come up clean.:)

I'm pretty sure I need to go in some where and re-configure something, but I'm not sure exactly what I'm looking for, or what to do when I get there.:sconfused: :sconfused:
What a dummy eh! LOL:icon_wink:

Sami 04-11-2007 01:13 PM

Just to make sure you dont have any spyware or malware run this tool HijackThis and post or attach the log file to this thread.

Boardwalker 04-11-2007 01:23 PM

spyware
 
Greetings Sami,
I downloaded Spybot from your site, Ran it through the system twice anit congratulated me, came up clean.

Sami 04-11-2007 01:28 PM

Some times spybot misses some stuff like browser hijacking, which this tool HijackThis is very good at finding.

Boardwalker 04-11-2007 01:34 PM

spybot
 
Hi Sami,
Do i delete Spybot first??

Ok doing that now!

Sami 04-11-2007 01:41 PM

NO, don't delete it, you can safely have both. HijackThis is just a tool to find and analyze what's on your computer.

Boardwalker 04-11-2007 02:00 PM

Can't send?
 
Sami, it's still open but it won't let me send it to you:confused:
OK!

Sami 04-11-2007 02:06 PM

HijackThis doesn't fix any thing, it produces a log file paste that log file or save the log file on your computer and attach the file to this post so that I can analyze it, and let you know what to do next.

Boardwalker 04-11-2007 02:18 PM

log file
 
hope this works? I can not upload it.
It says invalid file??
I'm sorry for taking up the time and space
It looks like a change in registry value is the problem

Sami 04-11-2007 02:24 PM

For the time being can you copy and paste the details in this thread.

Boardwalker 04-11-2007 02:37 PM

failed
 
It will not let me cut copy and paste

Sami 04-11-2007 04:12 PM

Zip up the hijackthis.log file and upload it, It should work.

Boardwalker 04-11-2007 10:41 PM

another try
 
hope this works

Sami 04-11-2007 11:54 PM

Found five problems, run the HijackThis again and select these five items from your list and Click on Fix Checked

O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O8 - Extra context menu item: &Search - ....
O17 - HKLM\System\CCS\Services\Tcpip\..\{25A1717F-55C5-4A55-8BC3-6A025CEE66CC}: NameServer = 85.255.116.77,85.255.112.212
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.77 85.255.112.212
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.77 85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.77 85.255.112.212

I Think the number 17 is causing you the problem it has put in nameservers from Ukraine

Boardwalker 04-12-2007 01:28 AM

success!
 
Sami;
Thank you! Thank you! Thank you! :) :) :)
What a smart, Kind person you are!

I take this opportunity to thank all those who responded to my dilemma and hope that the information that has transpired may help others in the future.

Having said that, I am sure that none could be as silly as I
I don't know what went wrong to cause the problems, but I have my suspicions LOL:icon_wink:

At the risk of being a PITA, I have one more question.
Should I re-install IE7? which is what I was running before
Cheers, and good on all Ya's

Sami 04-12-2007 01:35 AM

You are welcome.

Yes you can reinstall IE7 now.

mahahaavaahava 04-12-2007 04:58 AM

Great job!

was the DNS though... Wonder where it came from....

/Petri

Boardwalker 04-12-2007 12:18 PM

Dns
 
Hi Petri;
I have no idea what happened, I'm thinking that there was some confusion between the two security systems I have running, one of them may have let something slip through:sconfused:

I take this opportunity to thank you for your contribution in helping with this problem.:)

I have learned a lot from this site, it is indeed a good one!
Cheers!:happy: :icon_wink:

frustrated file-er V 04-13-2007 11:50 PM

Quote:

Originally Posted by Sami (Post 6132)
Found five problems, run the HijackThis again and select these five items from your list and Click on Fix Checked

O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O8 - Extra context menu item: &Search -
O17 - HKLM\System\CCS\Services\Tcpip\..\{25A1717F-55C5-4A55-8BC3-6A025CEE66CC}: NameServer = 85.255.116.77,85.255.112.212
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.77 85.255.112.212
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.77 85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.77 85.255.112.212

I Think the number 17 is causing you the problem it has put in nameservers from Ukraine

Hi Sami,
I have had the same problem for a number of months.
I Can't access gc.ca (Gov't of Canada) sites. And it's tax time!
I opened and downloaded HijackThis just now. It's results has almost the same Line 17 items (6 line items) listed above.
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.77 85.255.112.212
Except last 5 digits of the Name Server numbers are different.
Is it safe to just "fix" those 6 lines?

Sami 04-14-2007 12:26 AM

Yes its safe to delete those lines. But if you want you can post your log file here so that we can analyze it, and can guide you what to remove.

frustrated file-er V 04-14-2007 11:45 AM

gc.ca problem solved
 
:sbiggrin: Wow you are GOOD!
I used the hijackthis download and the Fix and Repair icon after ticking the 6 lines of Line 017 info.
I could then successfully access the Government of Canada websites!
And sent them all my tax money! Gee thanks!
Seriously, you are to be commended.
I thank you.
I thank Google for helping me find SysChat and the previous poster Boardwalker and the hijackthis developer.
But you Sami found the problem and pointed the way out. Hats off.

V

Boardwalker 04-14-2007 11:17 PM

I'm glad every thing is working well for you.
This site is a Jewel and so are the people who keep it going.
I can only guess at the amount of time it takes to create and maintain the site.
I for one sure do appreciate it.
I came in here with a problem, very frustrated because of my inability to understand what was wrong.
Although I was on the verge of becoming a huge pain in the butt, I was dealt with fairly and with respect!
I am hoping that through study of this site I may be able to help someone in the future. Thanks again,
Emery

Pizza53 04-15-2007 09:46 AM

Redirected gc.ca sites
 
Quote:

Originally Posted by Boardwalker (Post 6133)
Sami;
Thank you! Thank you! Thank you! :) :) :)
What a smart, Kind person you are!

I take this opportunity to thank all those who responded to my dilemma and hope that the information that has transpired may help others in the future.

Having said that, I am sure that none could be as silly as I
I don't know what went wrong to cause the problems, but I have my suspicions LOL:icon_wink:

At the risk of being a PITA, I have one more question.
Should I re-install IE7? which is what I was running before
Cheers, and good on all Ya's

I just thankfully found this thread.

I have the same problem on my fathers computer - he is turning 80. All the gc.ca sites are being redirected on his system to somes sites that he would definitely not visit if you know what I mean. I hope to try this solution and will see what it can do. Thanks for bringing your problem on line so others can see what assistance they gave you here. Wish me luck with my attempts.

Will be posting a log of my problem soon.

Pizza in Canada - Tax season and a hijacked gc.ca site is not at all good for some if not all systems.

:confused:

Boardwalker 04-15-2007 12:45 PM

re-directing
 
Hi Pizza53;
I know exactly what you mean.

Before the good people here fixed my problem, I would type in a .gc.ca site by other means and I would be re-directed to some astonishing sites with my Grandchildren looking over my shoulder, (not good!)

I have no idea how this happened, I suspect that one of my security systems messed up.
I tried contacting them both of them, and including the kahuna of the INTERNET, I won't mention any names.

What did I get= (thank you for buying our products)
Glad your problem is fixed and I hope you enjoy this site.
Cheers

Pizza53 04-15-2007 06:18 PM

GC.CA problem - Zip file of Hackthis.log
 
Hello,

Here is a zip file of hackthisJE.log.

This is the log of my fathers computer where we have the gc.ca problem and I ran Adaware and Spybot. When I ran spybot I found 4 errors relating to Micorosoft.Windows.Security.InternetExplorer:Setti ngs...
where the registry for
HKEY_LOCAL_MACHINE\Software\Internet Exploreer\Main\FeatureControl\FEATURE_LOCALMACHINE _LOCKDOWN\explorer.exe!=W=1

Mircosoft.WindowsSecurityCenter.AntivirusDisableNo tify:Settings...
where the registry for
HKEY_LOCAL_MACHINE\Software\Security Center\AntiVirusDisableNotify!=dword:0

Mircorsoft.WindowsSecurity Center.FirewallDisableNotify:Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0

Microsoft WindowsSecurityCenter_disabled: Settings....
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wscsvc\Start!=W=2

I removed these using Spybot.

Today I looked at his system and the Window Security Center told me that he did not have any antivirus, but at that moment the Nortons on his machine was doing an update and I had it scan, but the Security Center did not recognise that the program Nortons was on and running.... sheesh...

I ran Hijack This and got the following log.

Thanks for any help that you can give me.

Pizza53

Pizza53 04-15-2007 06:27 PM

Quote:

Originally Posted by Pizza53 (Post 6207)
Hello,

Here is a zip file of hackthisJE.log.

This is the log of my fathers computer where we have the gc.ca problem and I ran Adaware and Spybot. When I ran spybot I found 4 errors relating to Micorosoft.Windows.Security.InternetExplorer:Setti ngs...
where the registry for
HKEY_LOCAL_MACHINE\Software\Internet Exploreer\Main\FeatureControl\FEATURE_LOCALMACHINE _LOCKDOWN\explorer.exe!=W=1

Mircosoft.WindowsSecurityCenter.AntivirusDisableNo tify:Settings...
where the registry for
HKEY_LOCAL_MACHINE\Software\Security Center\AntiVirusDisableNotify!=dword:0

Mircorsoft.WindowsSecurity Center.FirewallDisableNotify:Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0

Microsoft WindowsSecurityCenter_disabled: Settings....
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wscsvc\Start!=W=2

I removed these using Spybot.

Today I looked at his system and the Window Security Center told me that he did not have any antivirus, but at that moment the Nortons on his machine was doing an update and I had it scan, but the Security Center did not recognise that the program Nortons was on and running.... sheesh...

I ran Hijack This and got the following log.

Thanks for any help that you can give me.

Pizza53


Just noticed the following in the log...

O17 - HKLM\System\CCS\Services\Tcpip\..\{18483498-4575-4C26-A6A1-BBA73B54A840}: NameServer = 85.255.114.43,85.255.112.165
O17 - HKLM\System\CCS\Services\Tcpip\..\{3482D08E-2DA5-4264-B691-5C40CE4F7A77}: NameServer = 85.255.114.43,85.255.112.165
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.43 85.255.112.165
O17 - HKLM\System\CS1\Services\Tcpip\..\{18483498-4575-4C26-A6A1-BBA73B54A840}: NameServer = 85.255.114.43,85.255.112.165
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.43 85.255.112.165

Same as what was seen in the log of Boardwalker...

Is there anything else that could cause the other probem, or should I reset the registry back from what spybot had removed....

Sami 04-15-2007 07:38 PM

Hi Pizza53,

Yes remove these 5 entries, rest of them are ok.

O17 - HKLM\System\CCS\Services\Tcpip\..\{18483498-4575-4C26-A6A1-BBA73B54A840}: NameServer = 85.255.114.43,85.255.112.165
O17 - HKLM\System\CCS\Services\Tcpip\..\{3482D08E-2DA5-4264-B691-5C40CE4F7A77}: NameServer = 85.255.114.43,85.255.112.165
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.43 85.255.112.165
O17 - HKLM\System\CS1\Services\Tcpip\..\{18483498-4575-4C26-A6A1-BBA73B54A840}: NameServer = 85.255.114.43,85.255.112.165
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.43 85.255.112.165

mercer.stephen 04-20-2007 06:31 PM

Help!!
 
1 Attachment(s)
I am seeing the exact same problem ... used Hijack This - deleted the same entries BUT still can not gain access to the gc.ca domains.

Thanks in Advance,
Steve


All times are GMT -4. The time now is 02:44 PM.


Copyright © 2005-2013 SysChat.com


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54