M
Martyn Webster
Summary
On one of my office PCs (my main one), since a few days ago I have been unable to connect to most web sites. It returns a "connection reset" message which I understand is a pretty generic message meaning that the web site was identified (DNS was resolved) but the site returned no response other than a "finish" packet.
I have recently changed ISP, moved the modem, switched from wired to wireless, and tried to bridge to a wired network (gave up on that). I also did a standard Windows update recently so it's hard to say exactly which change triggered the problem.
I have done a lot of elimination work as follows:
Hence I am pretty sure it's a windows problem, as the whole network and internet connection is the same on two other PCs which do not have this problem.
Windows Firewall
The most likely issue (IMHO) is that Windows Firewall seems to be "broken". I would normally have it off anyway and rely on the firewall rules on the modem. When I open the firewall settings I see the text:
Update your Firewall settings
Windows Firewall is not using the recommended settings to protect your computer.
If I then try to restore it to "Use recommended settings" (just to see if that helps) and it gives a message:
Windows Firewall can't change some of your settings. Error Code 0x80070422
Thus, I am thinking that Windows Firewall is the problem, but I can't find a way to clean it up.
Reference Information
Hardware:
Operating System:
Is it a virus?
I don't think it's a virus because:
I have also tried:
I am aware that Windows 7 is now officially deprecated. I really don't want the time, expense and "change risk" of upgrading to Windows 10 unless there is a good change it will resolve the problem. It would be less costly for me to replace the PC entirely. A way to repair all of Windows 7 without clearing the entire PC would be ideal, if it can be done!
Any other suggestions welcome.
Continue reading...
On one of my office PCs (my main one), since a few days ago I have been unable to connect to most web sites. It returns a "connection reset" message which I understand is a pretty generic message meaning that the web site was identified (DNS was resolved) but the site returned no response other than a "finish" packet.
I have recently changed ISP, moved the modem, switched from wired to wireless, and tried to bridge to a wired network (gave up on that). I also did a standard Windows update recently so it's hard to say exactly which change triggered the problem.
I have done a lot of elimination work as follows:
- The problem occurs in exactly the same way in both Chrome (80.0.3987.149) and IE (11.0.9600.19596) - same sites and equivalent error.
- In both cases, it seems to resolve the DNS because sites which redirect their main URL to a specific page (e.g. a login page) actually display the specific page and then show the message - hence it must have contacted the destination web service at some level.
- I get the same problem (or not) with the same web sites all the time (it's entirely repeatable).
- There seems to be no commonality with those that work and those that don't - content, domain, fancy scripted or basic html - some work and some don't in all categories.
- Sites which I have never visited may or may not work, so it's doesn't matter whether there is a stored history. An interesting thing is that I removed the stored Chrome site-specific security settings (which are accumulated automatically it seems) and some sites which I could get to before, I now cannot... as if something about those settings was overriding the problem setting!
- I have another PC with a recent (last week) Windows 10 installation connecting to the same modem via the same WiFi channel and it works normally. Another older Windows 7 PC also works normally with the same WiFi connection.
- All of those PCs connect to the internet in the same way and would appear to have the same source (we have a static IP address), so I don't think it is likely to be the destination sites blocking my PC but not the other two (e.g a blacklist).
- I have checked the network settings and they all have a modem DHCP issued IP address in the correct range, the same gateway, mask and DNS addresses (pretty standard 192.168.1.* range). They all have IP6 on auto settings although I am not so familiar with IP6, but they all look ok.
Hence I am pretty sure it's a windows problem, as the whole network and internet connection is the same on two other PCs which do not have this problem.
Windows Firewall
The most likely issue (IMHO) is that Windows Firewall seems to be "broken". I would normally have it off anyway and rely on the firewall rules on the modem. When I open the firewall settings I see the text:
Update your Firewall settings
Windows Firewall is not using the recommended settings to protect your computer.
If I then try to restore it to "Use recommended settings" (just to see if that helps) and it gives a message:
Windows Firewall can't change some of your settings. Error Code 0x80070422
Thus, I am thinking that Windows Firewall is the problem, but I can't find a way to clean it up.
Reference Information
Hardware:
- Reconditioned HP Prodesk with Intel i7, 8Gb RAM, 2 screens - pretty regular business desktop machine.
- I am using an older external WiFi dongle (Netgear WG111v3) - planning to replace it to get better range / signal and speed.
Operating System:
- Windows 7 Professional SP1 (genuine) installed and working since 2017.
- The system does have quite a few auto-starting programs but shutting everything down doesn't help.
Is it a virus?
I don't think it's a virus because:
- ESET has been installed and is always updated (product and signatures).
- Windows Defender disabled as is normal when using a 3rd party virus program.
- I have done a recent scan for viruses and found nothing
- I have checked for unexplained processes and services in task manager (all tasks)
- I have checked the registry for run and runonce (global and the only user) and nothing unexpected found there.
- There are no other odd behaviors that I have noticed.
I have also tried:
- Uninstalled the two recent windows updates. I couldn't uninstall three security updates but I think they were just a one-only run of the malicious removal tool - it didn't give the option.
- Restored from a recent restore point, but I don't think that went back far enough and could not see any older restore points. Perhaps that's a related symptom?
- Rebooted the modem and PC endless times
- Yes, it's plugged in and turned on
I am aware that Windows 7 is now officially deprecated. I really don't want the time, expense and "change risk" of upgrading to Windows 10 unless there is a good change it will resolve the problem. It would be less costly for me to replace the PC entirely. A way to repair all of Windows 7 without clearing the entire PC would be ideal, if it can be done!
Any other suggestions welcome.
Continue reading...