6 replies to this topic

[shadowwar]

My mothers laptop was infected so she ran malwarebytes. After the run she can only get to secure https pages. Standard pages come up with page cannot be displayed in IE. Has anyone run into this? Pings are ok to yahoo and google but they wont display in ie. I dont have the laptop yet but was just wondering if anyone has experienced this at all. Googled a bit but havent seen any fixes. Will try to look at the logs tonight from MB to see what it may of removed.

Thanks for any help.

[GT500]

Please follow these instructions (skipping any steps you are unable to complete) for posting in our Malware Removal - HijackThis Logs forum. If you cannot follow any of those steps, then please create a new topic in that forum explaining what happened when you tried to run each of the tools in the instructions, and the expert who helps you will be able to suggest steps to take to get the tools working.

[Maniac]

Some users have the same problem. Solution to this problem is probably this:
http://www.windowsbbs.com/internet-explore...y-web-page.html

[shadowwar]

Thanks Maniac. Was just hoping someone has run into this here before. I always ran into it the other way where secure cannot be displayed but regular are fine.

Gt500 as i stated i do not have the laptop yet. Thanks anyway. Its probably just a bad winsock or reregistering the ie dll's.

[GT500]

shadowwar said:

Gt500 as i stated i do not have the laptop yet. Thanks anyway. Its probably just a bad winsock or reregistering the ie dll's.

Winsock/LSP issues make the most sense. Good old LSPFix would have probably taken care of it as well.

[shadowwar]

Ok. it turns out to be an incomplete removal by malwarebytes that caused it. There was a rogue service left behind. Disabled it and the internet came back on non secure pages. All bets off though. This thing is heavily infected and no telling how old the malware was so not totally malwarebytes fault. Couple years with no AV! Geez. I will see if i can get the file and the service name.

[GT500]

shadowwar said:

Ok. it turns out to be an incomplete removal by malwarebytes that caused it. There was a rogue service left behind. Disabled it and the internet came back on non secure pages. All bets off though. This thing is heavily infected and no telling how old the malware was so not totally malwarebytes fault. Couple years with no AV! Geez. I will see if i can get the file and the service name.

Yea, a couple of years without an AV will certainly open the door. Wonder if the did security updates...