Endpoint Protection

My SEP v 10 was nearing expiration, so I uninstalled it, and now my browsers will not resolve ANY domain names. (Windows 7, Chrome and IE.) Ping works, nslookup works, windows update works, etc.

I've tried: - Reset Internet Explorer Settings - upgrade IE - reinstall Chrome - netsh winsock reset catalog - netsh winsock reset - ipconfig /flushdns - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp\DependOnService (though no offending entries were there) - Poking, prodding. Is this something I can fix, or is it bye-bye to that Windows install? Thanks!

what's the message on IE browser when you try to browse?

So you are saying you can load a webpage by entering an IP address? Possible infection? Have you checked your DNS setting? Try pointing to the Norton DNS (198.153.192.1 and 198.153.194.1) for a test.

http://www.nortondns.com/

I would also run the Power Eraser Tool or the Load Point analysis Tool and see if anything suspect comes up.

 

Support Tool with Power Eraser Tool included –

http://www.symantec.com/business/support/index?page=content&id=TECH105414&locale=en_US

How to use the Load Point Analysis within the Symantec Support Tool to help locate suspicious files http://www.symantec.com/business/support/index?page=content&id=TECH141402

Check your proxy settings again in IE. I know you probably already looked at them but humor me and take another look. Make sure you have no proxy information in there and that your dns servers are properly configured.

I don't know how many times I've gone witch hunting for the same exact problem only to find out that the proxy information was incorrectly configured. The big hint that this may be an issue is that you uninstalled and reinstalled chrome to no avail. IE controls the proxy information for the entire system. Regardless of all the uninstalling and reinstalling you do, IE if configured improperly with bad proxy info, will basically render your computer useless for anything network related. Hope this helps.

Hi Pete, The message in IE is just the generic "Internet Explorer cannot display the webpage" What you can try: - Diagnose the connection - More information

Hi Cycletech, Yes, I CAN get a webpage by entering an IP address. It just seems like name resolution isn't happening. I've installed and run the tests and utilities. - The Norton DNS servers work from the command prompt (etc), but there's no change to the browsers. - The Power Eraser says I'm clean. - The Load Point Analysis didn't like the Sony software that was installed on there, so I removed it for good luck. No effect.

You stated that SEP 10, was installed, I am guessing you meant SAV10. If this is correct, SAV 10 does not work with Windows 7. It is possible you may have damaged something in the OS.

Can you confirm the exact version that you uninstalled? How was the product removed; though Add/remove or Cleanwipe utility?

Are you using the DNS given by your ISP ?

Hi Khue,

Double-checked, the proxy list is empty, and i did a "netsh winhttp reset proxy"

Thanks, though, I didn't mention the proxy list and that's the usual gotcha.

I belive it was "Symantec Endpoint Protection Client 10.x", but now you make me doubt my memory.  SAV10 is older, isn't it?  It came with the computer (Sony Viao VPCF1) just last year.

And yes, it's been removed via add/remove programs and the SEP support tool says it's gone-gone.  I don't have a Cleanwipe utility.

Re-install your NIC card Drivers.

DNS is working fine, but yes - I've tried ISP, Google's (8.8.8.8) and Norton DNS.

Was the Sony computer given to you by your company? If not, it would seem strange that SAV or SEP came preinstalled on your system.

 

I am not finding that model PC on the Sony site. Double check that number, then you can go here for the drivers -

http://www.sony-asia.com/support/SupportModelSearch.action?site=hp_en_AP_i&sectiontype=support

I'll double check.  (The PC actually belongs to my boss, he just asked me to fix it.)

It might have been part of a group purchase.  Is SEP not the Symantec Antivirus/Firewall that comes on business laptops?  I humbly apologise for my ignorance, I haven't used Symantec products regularly for about 5 years.

Yes, It is possible that SEP/SAV came pre-installed with a business system. One other thing to note, SEP 11 does not require a license. No warning would have come up stating this, so I would bet that this was not the product installed on the system.

 

How long was the system used without AV protection?

Try resetting the IP stack completely.  Seeing as how it's all browsers...

NETSH INT IP RESET LOG.TXT

Reboot the machine...

 

And check your HOSTS file!!

Okay, I've done each thing suggested, to no avail.  But I want to take a second to thank you all - this is a great forum community and all your advice has been incredibly in-depth and concise.

Here are the steps I've taken:

• Reinstalled NIC drivers from Sony (Complete removal)
• Cleaned out the HOSTS file
• Installed different AV software, full scan.
• netsh int ip reset log.txt
• re-re installed IE8 and Chrome

Now, I'm doing a way-way back system restore.