Bad certificate sites being blocked?

Hello all

 

I am running an AMD64 machine with XPSP3 32 bit and Norton AV and NIS 2009 (upgraded from 2007 --> 2008 --> 2009).

 

All has been working fine until this morning. Some sites are no longer accessable by this machine. On the same router and same DNS, i can access with another machine with no issue.

 

I am not very familiar with the internals of NIS, and this may be another issue but it seems that certain IP's are being blocked by something on my machine, Norton or other.

Symptoms:

 

1) I cannot reach my email server via a client (thunderbird) or via a web browser.

2) I cannot reach any site with the same domain name, example, if my mail server is mymailserver.test.com

then i cannot reach http://whois.domaintools.com/test.com

3) I cannot reach any website hosted on the same server, ie. same IP or IP registered to same domain.

4) Pinging these sites does not work either.

 

Here's the clincher, at least the mail server and one other website (different domain/IP) have had invalid SSL certificates over the past few days. The mail has fixed this recently (2 days ago) but i ony have this issue from this morning.

 

WHat i have tried thus far:

 

1) Reboot

2) Followed steps as in

http://www.symantec.com/norton/support/kb/web_view.jsp?wv_type=public_web&docurl=20080613124319EN

2.1) Could not download the tool due to connection issues

2.2) Could not run liveupdate due to connection issues

3) Turned off Phishing, no help

4) Disabled Norton, no help

5) Cleared all private data, temp files, cache etc. from Firefox and IE7

6) Rapidly made high velocity contact between my desk and my forehead several times

7) Rebooted and tried again

 

Still nothing.

 

Again, from another machine (Mac) on the same LAN, i can reach everything, no problem, so i'm fairly certain it's a problem local to the machine.

 

Being not terribly PC savvy, i pose the following questions to the kind folks here:

1) Does it sound like a NIS issue?

2) PC/Windows issue?

3) Virus??

4) Other

 

Many thanks to you in advance.

 

LP

 

Hello all

 

I am running an AMD64 machine with XPSP3 32 bit and Norton AV and NIS 2009 (upgraded from 2007 --> 2008 --> 2009).

 

All has been working fine until this morning. Some sites are no longer accessable by this machine. On the same router and same DNS, i can access with another machine with no issue.

 

I am not very familiar with the internals of NIS, and this may be another issue but it seems that certain IP's are being blocked by something on my machine, Norton or other.

Symptoms:

 

1) I cannot reach my email server via a client (thunderbird) or via a web browser.

2) I cannot reach any site with the same domain name, example, if my mail server is mymailserver.test.com

then i cannot reach http://whois.domaintools.com/test.com

3) I cannot reach any website hosted on the same server, ie. same IP or IP registered to same domain.

4) Pinging these sites does not work either.

 

Here's the clincher, at least the mail server and one other website (different domain/IP) have had invalid SSL certificates over the past few days. The mail has fixed this recently (2 days ago) but i ony have this issue from this morning.

 

WHat i have tried thus far:

 

1) Reboot

2) Followed steps as in

http://www.symantec.com/norton/support/kb/web_view.jsp?wv_type=public_web&docurl=20080613124319EN

2.1) Could not download the tool due to connection issues

2.2) Could not run liveupdate due to connection issues

3) Turned off Phishing, no help

4) Disabled Norton, no help

5) Cleared all private data, temp files, cache etc. from Firefox and IE7

6) Rapidly made high velocity contact between my desk and my forehead several times

7) Rebooted and tried again

 

Still nothing.

 

Again, from another machine (Mac) on the same LAN, i can reach everything, no problem, so i'm fairly certain it's a problem local to the machine.

 

Being not terribly PC savvy, i pose the following questions to the kind folks here:

1) Does it sound like a NIS issue?

2) PC/Windows issue?

3) Virus??

4) Other

 

Many thanks to you in advance.

 

LP

 

Yogesh

 

Thank you for taking the time to answer.

 

Unfortunately this did not help.

 

I could not download the "tools" as the link from Symantec is also "blocked". I am getting about 50% of sites blocked on this machine. Very bizzare.

 

Any other tips? Anyone?

 

Thanks

 

lp

Just as a progress update: I have changed all my email servers in the mail client to IP and it now works, but still having an issue accessingvia browsers/domains..

 

lp

Hi,

 

To check whether any programs is accessed by some threat, download Hijackthis: 

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

You need download the third in the list (Excutable), install it and click "Do a system scan and save a log". Then open the log in Notepad. Either post the log in this same message board or send it as a private message to me.

Also, download/install Malwarebytes Antimalware program, reboot your computer to Safe mode and then run a full system scan from Malwarrebytes. Click Malwarebytes AntiMalware to download it, it's a free download software which may help you in detecting removing such threats

 

Yogesh