4.2.71.2 - User opens browsers, no internet , reboot fixes it.

Discussion in 'ESET NOD32 Antivirus' started by Hawk_wi, Jan 16, 2012.

Thread Status:
Not open for further replies.
  1. Hawk_wi

    Hawk_wi Registered Member

    Joined:
    Jan 16, 2012
    Posts:
    1
    This problem does not happened every day.... I could not disable web filtering, I would input the password and nothing happens . This issues is on 10 pc's
     
  2. dwomack

    dwomack Eset Staff Account

    Joined:
    Mar 2, 2011
    Posts:
    588
    Have you attempted to uninstall NOD32 to see if the problem persists? When re-installing, you may also want to upgrade to version 5.0.95.0 from our website.
     
  3. RobJanssen

    RobJanssen Registered Member

    Joined:
    Jul 15, 2011
    Posts:
    55
    Is this a known problem with 4.2.71?
    We do have this occasional problem on our network the last couple of weeks,
    before that it has never been a problem.

    Suddenly a user cannot browse anymore (both the internet and our intranet)
    using different webbrowsers. All pages result in connection failures.
    Reboot fixes the problem.
    In a network with about 400 computers, the problem occurs only for a one or
    two users a day, and it kind of looks like it hits the same users every time.
    Re-installation of the computer does not fix it.

    I have now scheduled an update to 4.2.76 this weekend, hoping that it will
    fix it. We are not prepared to run Beta versions.
    I would really appreciate to hear when this is a known problem and in what
    version it is fixed (hopefully a 4.2.x version)
     
  4. RobJanssen

    RobJanssen Registered Member

    Joined:
    Jul 15, 2011
    Posts:
    55
    I have installed version 4.2.76 and the issue still occurs.
    It is in Windows XP SP3.
    Anyone else seen this or any ESET people know what can be happening?
     
  5. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,032
    Location:
    California
    Hello,

    I do not recall hearing of this before.

    Do all of the computers in question run a particular application or have a type of network connection that is different from the others?

    Are other network applications besides the web browser affected? Does it make a difference for local network traffic versus the Internet?

    Regards,

    Aryeh Goretsky
     
  6. karlisi

    karlisi Registered Member

    Joined:
    Apr 7, 2011
    Posts:
    68
    Location:
    Latvia
    Last week almost the same happened for us, uninstalling NOD32 changed nothing. After restart Internet worked about 15 minutes, then HTTP and HTTPS stopped working. Ping worked to IP and to DNS names, so problem was not in TCP/IP. We tried to repair Winsock and it helped. WinsockXPFix tool you can find here.
     
    Last edited: Feb 21, 2012
  7. RobJanssen

    RobJanssen Registered Member

    Joined:
    Jul 15, 2011
    Posts:
    55
    The only hard evidence I have is where browser traffic is broken. We use an internet proxy and it does not matter if you want to access an intranet site (which is accessed directly) or an internet site (which is accessed via the proxy, using port 3128, which is in the ports list to be scanned). Both are affected.

    On the system which I tried to debug, other connections are still working when I am looking. E.g. IMAP (port 143) from the same application still works, shared folders on server still accessible, etc.
    But the user has complained that her Citrix ICA client connection also has hung a few times. I have not seen this myself.

    We mostly use Mozilla Seamonkey for browsing, but I have seen that when Seamonkey no longer can browse, and Internet Explorer is started at that moment, it does not work either. This is what makes me believe the cause is somewhere in NOD32.
     
  8. RobJanssen

    RobJanssen Registered Member

    Joined:
    Jul 15, 2011
    Posts:
    55
    Well, I re-installed a PC on which this problem occurred from scratch.
    (not a problem - we have an automatic installation procedure that does all of this from a network boot. it uses a scripted install (unattend.txt), not an image, everything is done from scratch by the installation procedures of all software)

    The problem immediately manifests itself again. Furthermore, when the user affected is working on another PC, it also occurs.
    So it looks like it is something that travels along with the roaming profile.
     
  9. karlisi

    karlisi Registered Member

    Joined:
    Apr 7, 2011
    Posts:
    68
    Location:
    Latvia
    This morning the problem is back again, so it is not Winsock. Decided to reinstall from scratch, no user profile migration, only preserving documents and mail profiles. Will see.
     
  10. RobJanssen

    RobJanssen Registered Member

    Joined:
    Jul 15, 2011
    Posts:
    55
    Well, the re-install of the software alone does not help, but maybe your clearing of the profile does the trick.
    I will try this as well, because it seems that one single user is very heavily affected by this and others report it only very occasionally. I will have to see if the problems for this single user disappear when clearing the profile.

    Of course it is still unclear what the root cause of this problem is. Apparently more than one NOD32 user is affected by this, but maybe other people just as well, they just don't visit this forum :)
    It could be some malware that enters into the user's profile, but considering the amount of security measures we have in place it will have to be quite sophisticated.
    (software that just downloads and runs from the %TEMP% directory has not much chance here, because of software restriction policies etc)
     
  11. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,032
    Location:
    California
    Hello,

    I wonder if there might be some sort of network filter driver or service which is conflicting with ESET's software. Have you tried opening a ticket with ESET technical support? They will want to get an ESET SysInspector log to see what else is running on the computer, so including that when you open the ticket will help speed up troubleshooting.

    Regards,

    Aryeh Goretsky
     
  12. karlisi

    karlisi Registered Member

    Joined:
    Apr 7, 2011
    Posts:
    68
    Location:
    Latvia
    Reinstalled three weeks ago. Problem gone, other workstations working good. This time we need to bring the workstation to work as fast as possible, so decided to reinstall, if there will be more cases, sure, we will open support ticket.
     
Thread Status:
Not open for further replies.