[thedarkprince]

Finally ran MBAM, enabling rootkit scan, but no malicious items were found.  

 

I have also temporarily disabled Avast and tried accessing sites via IE but still get the 'IE cannot display the page' error.

What's next  ?

[Advertisements]

Lets see if it is something to do with how IE is configured.

 

Open Internet Explorer and go to the Tools wheel (top right)

Click on Internet Options > Advanced tab and put a check\tick in the box next the items Use TLS if they are not already checked. If they are checked, try unchecking Use TLS 1.1 and TLS 1.2

Come back and tell me how it went.

[emeraldnzl]

Lets see if it is something to do with how IE is configured.

 

Open Internet Explorer and go to the Tools wheel (top right)

Click on Internet Options > Advanced tab and put a check\tick in the box next the items Use TLS if they are not already checked. If they are checked, try unchecking Use TLS 1.1 and TLS 1.2

Come back and tell me how it went.

[thedarkprince]

Holy crap!  That actually worked.  Sorry to sound surprised but didn't think something so simple would fix it. 

 

All three TLS options were unchecked so checked 1.1 and 1.2 et voila!

 

Are those options normally checked and somehow have become unchecked through malware (or something else)?

[emeraldnzl]

 

Are those options normally checked and somehow have become unchecked through malware (or something else)?

 

It's just started to happen recently (I have seen it in several forums) and I haven't pinned down the cause yet. It definitely happens when there is infection but whether that is the cause or just coincidence has yet to be determined... at least by me. Might be malware doing it, might be something happening in the malware removal process (i.e. something we are doing with our tools) or it might be some change that has happened e.g. an update changing settings.

 

One of my colleagues, ruggie_UK found the answer recently in another thread here.

 

Now

 

I think you are good to go.

 

We have a couple of last steps to perform and then you're all set.

Follow these steps to uninstall Combofix and some tools used in the removal of malware. This will also clean out and reset your Restore Points
 

• Click START then RUN (Vista users go to Programs > Accessories > Run)
• Now type Combofix /Uninstall in the runbox  and click OK.  Note the space between the X and the U, it needs to be there.
  
  
  

After that please go here to download OTC.

Run this program to remove most of the remaining tools we have been using.

If you are asked to reboot the machine to finish the Cleanup process choose Yes.

MBAM can be uninstalled via control panel add/remove but it may be a useful tool to keep.

Any remaining tools may be deleted.

-------------------------------------------------------------------------------------------------------------------

A reminder:  Remember to (re-install if uninstalled during cleaning) update and turn back on any anti-malware programs you may have turned off during the cleaning process.
-------------------------------------------------------------------------------------------------------------------

Here are some things that I think are worth having a look at if you don't already know about them:

---------------------------------------------------------------------------------------------------------------------

It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article Strong passwords: How to create and use them.

----------------------------------------------------------------------------------------------------------------------

So many of us use Facebook nowadays. Go here for a guide to Facebook security.

-----------------------------------------------------------------------------------------------------------------------

A while back over 100 million Adobe users e-mail and other information were hacked. Users were asked to change their passwords following the hack and you can go to the link below to check your e-mail to see whether you were one of the 150 million.

https://lastpass.com/adobe/

If you are on the list, all passwords should be changed including those used for banking, email, eBay, paypal and online forums.

------------------------------------------------------------------------------------------------------------------------

Java warning

Java is a popular point of entry to your computer for malicous programs. The United States Department of Homeland Security recommends that computer users disable Java, see here. Unless you need it to run an important software the safest approach is to completely uninstall Java. Where you do require it, then the next safest option is to disable it in your browsers until you need it, then enable it.

How to disable Java in your web browser and How to unplug Java from the browser

If you do still need Java then regularly check that it is up to date. Older versions are the most vulnerable to malicious attack.
 

• Download Java for Windows
  
  Reboot your computer.
  You also need to unininstall older versions of Java.
  
     
• Click Start > Control Panel > Add or Remove Programs
     
• Remove all Java updates except the latest one you have just installed.

--------------------------------------------------------------------------------------------------------------------

CryptoLocker Warning

There is a particularly nasty infection out there at the moment.

Go here for information about CryptoLocker Ransomeware

Download CryptoPrevent free for home use.

--------------------------------------------------------------------------------------------------------------------

To help protect your computer in the future:



If you do not already have automatic updates set then it is recommended that you do set Windows to check, download and install your updates automatically.

    * Click Start > Control Panel > System and Security > Windows Update
    * Under Windows Update click on Turn automatic updating on or off
    * Check items shown to ensure you receive updates automatically. Click OK.

Be aware of what emails you open and websites you visit.

Go here for some good advice about how to prevent infection.

A fun way to check your online safety literacy.

Quiz - getsafeonline

Have a safe and happy computing day!