"tell sites that I do not want to be tracked" occsionaly redirected to google.com or error 404!?
Hello,
First the specs:
- PC: Dell Venue 8 Pro (New) - OS: Windows 8.1 - Firefox Ver.: 33.1.1 - Default search engine: duckduckgo - Current security protection: Avast and Spybot S&D (all up to date)
Hello
I just got a this hardware, I happened to have a previous issue about 2 weeks ago where after a search using duckduckgo, I would click on a link (which I had opened many times before) and suddenly while browsing that website I'd be be redirected to result page of google.com with part of the address in the search and an error as a result and no way to go back, as if no history, I tried my search again starting from duckduckgo, find the results, click on the link this time i'd be redirected directly to google.com sometines getting only no results and a blank search field or filled with the last half of the address starting with HTTP (if i remember correctly something like this: HTTP//hdmi%output%problem/page_4.html). Even entering the full address of that said website by copy/paste in the address bar would end in "error 404" page. This only happened in Firefox and any search engine, I tried the same search on Internet explorer with various search engines, no problem. I was sure something was wrong (even though the hardware was a couple of days old at the time), at that time i was running only windows defender, so i recovered the OS and I installed Avast and Spybot right after the recovery was done. Since then till today no problem. Now I remember a couple of days ago I ticked the "tell sites...tracked" case (which I then remember doing the first time from the get go) and I started having trouble accessing websites sometimes when doing searches from duckduckgo, I figured some sites rejected my request to access them because of the fact i had ticked that case. No problem I'll look for my answers on another website from the result list. But now the redirect is happening again so I figured I'll un-tick the case and, so far no problem.
Is this normal that some websites block/cancel the access because of that feature? why the redirect to google? I don't even use google, besides checking gmail occasionally (1-2 times a week).
PS -when I get the Error 404, that is the only thing displayed on the page, no "check you connection" or "the page is unavailable" - as I type this I have in my history (1x) error 404 with the logo from google next to it, again I do not use google, if I try to open it now I get the page I was supposed to see when I had the case ticked. Thank you
Nicolas
Alle svar (20)
I use this feature ( "tell sites...tracked" case ticked ), and I never met your problem. So this is not the where your trouble comes from.
Ok, first of all, the security of your computer. You NEED a firewall, it is more important that an antivirus. Avast seems ok, but SpybotSD ? Is it still working, not out-of-date ? Try Malwarebytes Anti-Malware, it is working like SpybotSD : free for checking your computer once by once, but paying if you want your computer always under his protection. And then, perform a check-up of your computer, to detect any malware.
Second, after cleaning your computer, come back here and tell if you still have your problem. I believe that the cleaning will solve the problem, but maybe I'm wrong. I'll check every day this topic.
Thank you for answering so quickly.
Installed the latest version of Malwarebytes and (just like the first time) this is what I got:
Registry Keys: 2 PUP.Optional.InstallCore.A, HKU\S-1-5-21-2845286417-389633338-3620685142-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Quarantined, [be79223d47353df90cf72066b94a33cd], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2845286417-389633338-3620685142-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Quarantined, [0532f46b95e7a393fd2843593ec6d828],
Registry Values: 1 PUP.Optional.InstallCore.A, HKU\S-1-5-21-2845286417-389633338-3620685142-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0M2P0U0F0B1O1O1G, Quarantined, [0532f46b95e7a393fd2843593ec6d828]
Put them in quarantine, opened up Firefox, turn the case back on, now I have nothing, website from bookmark not working,not even my home page, "server not found" is all I get, turn the case back off, still nothing. Have to use internet explorer.... Wait, it works now. Will stay on IE for now.
What are your thoughts?
Thanks again
Nicolas
Btw , link , Google apparently owns duckduckgo, that answers some questions
And concerning the firewall, isn't windows firewall enough?
Forget it. Problem in IE also. Sending a screenshot. In this case I was searching one of the PUP detection from the log, with duckduckgo and this is what I got. Happening alot more often now, almost every search I do the links give me this error.
Ok, Microsoft is known for Operating Systems and Office Suites, maybe for games (xbox). But NOT for security programs. Seriously, not. The windows firewall is a joke, compare to real firewalls. So you should start by installing a firewall (paying or free one). Then, you could apply this : http://www.malwareremovalguides.info/pup-optional-installcore-a-removal-guide/ Quarantine is not enough for this kind of problem, in my experience. So I think it is normal you still have the problem.
For duckduckgo, the article you link has been writen the 30 January '12, and as nobody else found something in the last 3 years, I wouldn't trust it so much... ;)
Ok here is what i got. Cannot open the link you provided with Firefox, opened up IE link opens, start following the procedure, close the tab to the link by accident, try to open again, nothing "This page can't be displayed". close both IE and Ff, restart, access support.mozilla, "server not found". after many attemps, I to this thread with Ff. but nothing with IE, now.
In IE, below the "This page cannot be displayed" there is a button, fix connection problems which opens the connection troubleshooter, as a result I get DNS problems.
Don't know what are your thoughts, for now I will access my neighbor's network , may be it's my network/ISP...
Ændret af tinico den
Neigbor's internet runs smooth but slow. adwscanner : found two empty folders (from unused uninstalled software)
Hitman found: Potential Unwanted Programs _________________________________________________
C:\ProgramData\APN\ (AskBar)
Cookies _____________________________________________________________________
C:\Users\Nicolas\AppData\Local\Microsoft\Windows\INetCookies\VVAKP5J5.txt C:\Users\Nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\nfqkhgkm.default\cookies.sqlite:adserving.unibet.com
...
Hopefully this will do a change, i'm starting to think it's a ISP issue. I will be using the neighbor's internet for later today and maybe tomorrow also, to see if any of those issues show up. Will advise as soon as something new pops up.
Thank you
Ok, what I think is that you have malware(s). This is my personnal opinion, but what you described looks like an infection that spreads. We'll see at the end if there's something wrong with your Firefox.
For now, I'm afraid you suffer a great lack of security on your computer : - No firewall : omg ! Without that, it is nearly like having no defence ; - No antimalware : Hitman is not, Malwarebytes is, but I guess you have the free version, so it's only working for checking from time to time. Spybot, I used it like 5 years ago, did they wake up . Spybot has anyway the same problem than Malwarebytes : not-continuous protection => only the firewall will do the job ; - Antivirus : they are not as necessary as they were before. Avast is ok, but you don't need the extension on Firefox, IMHO. And it doesn't stop malwares, that are what you'll find the more in websurfing.
You need to use a software that will detect the corruption of your Windows and your Firefox (and, I guess, your IE also). My preference go to : http://en.wikipedia.org/wiki/HijackThis (download here seems to be without PUPrograms : http://www.filehippo.com/fr/download_hijackthis ) If you have time to read about your computer security (or to ask help) : http://www.spywareinfoforum.com/ I urge you to be very careful with the use of this kind of programs : they are really efficient, e.g. you can really messing up your computer with them too. But they'll find every software installed on your computer, and help you to get rid of the PUP. There's a lot to read (and watch : https://www.youtube.com/watch?v=FDWD9mhgeno for example) about how to use Hijackthis. I repeat : be very slow, patient and aware when you use Hijackthis.
Also, before to start to clean your computer, download the programs needed, install in first place a firewall (I use Comodo), then shut down any internet connection (cable, wifi, bluetooth... ) and get rid off usb devices, cd-rom... , then only start to fight the infection. It's like a doctor, you don't want to work in a dirty place that would reinfect your patient while healing it.
By the way, and for later, what about using : https://addons.mozilla.org/en-us/firefox/addon/wot-safe-browsing-tool/ ?
Helo, please check that firefox is set to directly connect to the internet, go from options > advanced > network > connection - settings > choose no proxy > click OK.
Also, try to boot the computer in Windows Safe Mode with network support (also : http://support.microsoft.com/kb/2809468/en-us ) and then see if that helps.
(in Startup Settings choose Enable Safe Mode with Networking)
thank you
@Gnarrk: I have worked with hijack this previously, so no problem. will do. BTW, Spybot is constantly updating, they have a new UI also.
@ideato: Just did the no proxy setting, will see what happens during the day.
One thing though, I have in the past about, 10years ago, had a problem with my desktop (winXP ), I was then that I started using the Avast and Spybot Combo, nothing more, on all my computers (also some with Vista and win7), never had any issue. I still have my desktop and still no problem and i use it frequently. I find it hard to believe I've had this Tablet for only a few weeks and i'm getting infected already.
Again thank you guys for the great support, I will update you during the week end on the (hopefully) progress.
Nicolas
Well, at least, I've learned that SPsd is back in the game. ;) What firewall do you use (you NEED one) ? This is the best defense nowodays. It was less necessary 15 years ago, I admit. And Tablets (+smartphones) are very weak in question of security : firewall, antivirus and antimalware are just starting to be adapted for this product, when they exist...
So, what is Hijackthis saying ?
To my knowledge, what hijackthis found had nothing wrong. Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 8:30:02 AM, on 12/6/2014 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.17416)
FIREFOX: 33.1.1 (x86 en-US) Boot mode: Normal
Running processes: C:\Windows\system32\taskhostex.exe C:\Program Files\Malwarebytes Anti-Malware\mbam.exe C:\Windows\Explorer.EXE C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe C:\Windows\System32\igfxtray.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Windows\System32\DptfPolicyLpmServiceHelper.exe C:\Program Files\AVAST Software\Avast\avastui.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe C:\Program Files\Sandboxie\SbieCtrl.exe C:\Users\Nicolas\AppData\Local\FluxSoftware\Flux\flux.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\System32\SettingSyncHost.exe C:\Program Files\Dell Update\DellUpTray.exe C:\Windows\System32\WWAHost.exe C:\Windows\System32\RuntimeBroker.exe D:\DOWNLOADS\HijackThis.exe C:\Windows\system32\SearchFilterHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dell13.msn.com/?pc=DCJB R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll O4 - HKLM\..\Run: [IgfxTray] "C:\Windows\system32\igfxtray.exe" O4 - HKLM\..\Run: [HotKeysCmds] "C:\Windows\system32\hkcmd.exe" O4 - HKLM\..\Run: [Persistence] "C:\Windows\system32\igfxpers.exe" O4 - HKLM\..\Run: [DptfPolicyLpmServiceHelper] C:\Windows\system32\DptfPolicyLpmServiceHelper.exe O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe" O4 - HKCU\..\Run: [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe" O4 - HKCU\..\Run: [DellSystemDetect] C:\Users\Nicolas\AppData\Local\Apps\2.0\G1OO10O1.EB0\ZZYRNL27.E7P\dell..tion_e30b47f5d4a30e9e_0005.000c_1df9a4898fae00de\DellSystemDetect.exe O4 - HKCU\..\Run: [f.lux] "C:\Users\Nicolas\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: *.dell.com O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\system32\IntelCpHeciSvc.exe O23 - Service: Dell Update Service (DellUpdate) - Dell Inc. - C:\Program Files\Dell Update\DellUpService.exe O23 - Service: @oem19.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform & Thermal Framework Processor Participant Service Application (DptfParticipantProcessorService) - Intel Corporation - C:\Windows\system32\DptfParticipantProcessorService.exe O23 - Service: @oem19.inf,%WIN32_DPTF_POLICY_CRITICAL_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform & Thermal Framework Critical Service Application (DptfPolicyCriticalService) - Intel Corporation - C:\Windows\system32\DptfPolicyCriticalService.exe O23 - Service: @oem19.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_DISPLAY_NAME%;Intel(R) Dynamic Platform & Thermal Framework Low Power Mode Service Application (DptfPolicyLpmService) - Intel Corporation - C:\Windows\system32\DptfPolicyLpmService.exe O23 - Service: HitmanPro Scheduler (HitmanProScheduler) - SurfRight B.V. - C:\Program Files\HitmanPro\hmpsched.exe O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface (jhi_service) - Intel Corporation - C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: Sandboxie Service (SbieSvc) - Sandboxie Holdings, LLC - C:\Program Files\Sandboxie\SbieSvc.exe O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
-- End of file - 7500 bytes
But now from Firefox, icannot log into the support.Mozilla.org website, after entering the name, password, I get untrusted website page, see blow,
This Connection is Untrusted
You have asked Firefox to connect securely to support.mozilla.org, but we can't confirm that your connection is secure.
Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified. What Should I Do?
If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.
support.mozilla.org uses an invalid security certificate. The certificate is only valid for the following names: google.com, *.2mdn.net, *.android.com, *.appengine.google.com, *.au.doubleclick.net, *.cc-dt.com, *.cloud.google.com, *.de.doubleclick.net, *.doubleclick.com, *.doubleclick.net, *.fls.doubleclick.net, *.fr.doubleclick.net, *.google-analytics.com, *.google.ac, *.google.ad, *.google.ae, *.google.af, *.google.ag, *.google.al, *.google.am, *.google.as, *.google.at, *.google.az, *.google.ba, *.google.be, *.google.bf, *.google.bg, *.google.bi, *.google.bj, *.google.bs, *.google.bt, *.google.by, *.google.ca, *.google.cat, *.google.cc, *.google.cd, *.google.cf, *.google.cg, *.google.ch, *.google.ci, *.google.cl, *.google.cm, *.google.cn, *.google.co.ao, *.google.co.bw, *.google.co.ck, *.google.co.cr, *.google.co.hu, *.google.co.id, *.google.co.il, *.google.co.im, *.google.co.in, *.google.co.je, *.google.co.jp, *.google.co.ke, *.google.co.kr, *.google.co.ls, *.google.co.ma, *.google.co.mz, *.google.co.nz, *.google.co.th, *.google.co.tz, *.google.co.ug, *.google.co.uk, *.google.co.uz, *.google.co.ve, *.google.co.vi, *.google.co.za, *.google.co.zm, *.google.co.zw, *.google.com, *.google.com.af, *.google.com.ag, *.google.com.ai, *.google.com.ar, *.google.com.au, *.google.com.bd, *.google.com.bh, *.google.com.bn, *.google.com.bo, *.google.com.br, *.google.com.by, *.google.com.bz, *.google.com.cn, *.google.com.co, *.google.com.cu, *.google.com.cy, *.google.com.do, *.google.com.ec, *.google.com.eg, *.google.com.et, *.google.com.fj, *.google.com.ge, *.google.com.gh, *.google.com.gi, *.google.com.gr, *.google.com.gt, *.google.com.hk, *.google.com.iq, *.google.com.jm, *.google.com.jo, *.google.com.kh, *.google.com.kw, *.google.com.lb, *.google.com.ly, *.google.com.mm, *.google.com.mt, *.google.com.mx, *.google.com.my, *.google.com.na, *.google.com.nf, *.google.com.ng, *.google.com.ni, *.google.com.np, *.google.com.nr, *.google.com.om, *.google.com.pa, *.google.com.pe, *.google.com.pg, *.google.com.ph, *.google.com.pk, *.google.com.pl, *.google.com.pr, *.google.com.py, *.google.com.qa, *.google.com.ru, *.google.com.sa, *.google.com.sb, *.google.com.sg, *.google.com.sl, *.google.com.sv, *.google.com.tj, *.google.com.tn, *.google.com.tr, *.google.com.tw, *.google.com.ua, *.google.com.uy, *.google.com.vc, *.google.com.ve, *.google.com.vn, *.google.cv, *.google.cz, *.google.de, *.google.dj, *.google.dk, *.google.dm, *.google.dz, *.google.ee, *.google.es, *.google.fi, *.google.fm, *.google.fr, *.google.ga, *.google.ge, *.google.gg, *.google.gl, *.google.gm, *.google.gp, *.google.gr, *.google.gy, *.google.hk, *.google.hn, *.google.hr, *.google.ht, *.google.hu, *.google.ie, *.google.im, *.google.info, *.google.iq, *.google.ir, *.google.is, *.google.it, *.google.it.ao, *.google.je, *.google.jo, *.google.jobs, *.google.jp, *.google.kg, *.google.ki, *.google.kz, *.google.la, *.google.li, *.google.lk, *.google.lt, *.google.lu, *.google.lv, *.google.md, *.google.me, *.google.mg, *.google.mk, *.google.ml, *.google.mn, *.google.ms, *.google.mu, *.google.mv, *.google.mw, *.google.ne, *.google.ne.jp, *.google.net, *.google.ng, *.google.nl, *.google.no, *.google.nr, *.google.nu, *.google.off.ai, *.google.pk, *.google.pl, *.google.pn, *.google.ps, *.google.pt, *.google.ro, *.google.rs, *.google.ru, *.google.rw, *.google.sc, *.google.se, *.google.sh, *.google.si, *.google.sk, *.google.sm, *.google.sn, *.google.so, *.google.sr, *.google.st, *.google.td, *.google.tg, *.google.tk, *.google.tl, *.google.tm, *.google.tn, *.google.to, *.google.tt, *.google.us, *.google.uz, *.google.vg, *.google.vu, *.google.ws, *.googleadapis.com, *.googleapis.cn, *.googlecommerce.com, *.googlevideo.com, *.gstatic.cn, *.gstatic.com, *.gvt1.com, *.gvt2.com, *.jp.doubleclick.net, *.metric.gstatic.com, *.uk.doubleclick.net, *.urchin.com, *.url.google.com, *.youtube-nocookie.com, *.youtube.com, *.youtubeeducation.com, *.ytimg.com, ad.mo.doubleclick.net, android.com, doubleclick.net, g.co, goo.gl, google-analytics.com, google.ac, google.ad, google.ae, google.af, google.ag, google.al, google.am, google.as, google.at, google.az, google.ba, google.be, google.bf, google.bg, google.bi, google.bj, google.bs, google.bt, google.by, google.ca, google.cat, google.cc, google.cd, google.cf, google.cg, google.ch, google.ci, google.cl, google.cm, google.cn, google.co.ao, google.co.bw, google.co.ck, google.co.cr, google.co.hu, google.co.id, google.co.il, google.co.im, google.co.in, google.co.je, google.co.jp, google.co.ke, google.co.kr, google.co.ls, google.co.ma, google.co.mz, google.co.nz, google.co.th, google.co.tz, google.co.ug, google.co.uk, google.co.uz, google.co.ve, google.co.vi, google.co.za, google.co.zm, google.co.zw, google.com.af, google.com.ag, google.com.ai, google.com.ar, google.com.au, google.com.bd, google.com.bh, google.com.bn, google.com.bo, google.com.br, google.com.by, google.com.bz, google.com.cn, google.com.co, google.com.cu, google.com.cy, google.com.do, google.com.ec, google.com.eg, google.com.et, google.com.fj, google.com.ge, google.com.gh, google.com.gi, google.com.gr, google.com.gt, google.com.hk, google.com.iq, google.com.jm, google.com.jo, google.com.kh, google.com.kw, google.com.lb, google.com.ly, google.com.mm, google.com.mt, google.com.mx, google.com.my, google.com.na, google.com.nf, google.com.ng, google.com.ni, google.com.np, google.com.nr, google.com.om, google.com.pa, google.com.pe, google.com.pg, google.com.ph, google.com.pk, google.com.pl, google.com.pr, google.com.py, google.com.qa, google.com.ru, google.com.sa, google.com.sb, google.com.sg, google.com.sl, google.com.sv, google.com.tj, google.com.tn, google.com.tr, google.com.tw, google.com.ua, google.com.uy, google.com.vc, google.com.ve, google.com.vn, google.cv, google.cz, google.de, google.dj, google.dk, google.dm, google.dz, google.ee, google.es, google.fi, google.fm, google.fr, google.ga, google.ge, google.gg, google.gl, google.gm, google.gp, google.gr, google.gy, google.hk, google.hn, google.hr, google.ht, google.hu, google.ie, google.im, google.info, google.iq, google.ir, google.is, google.it, google.it.ao, google.je, google.jo, google.jobs, google.jp, google.kg, google.ki, google.kz, google.la, google.li, google.lk, google.lt, google.lu, google.lv, google.md, google.me, google.mg, google.mk, google.ml, google.mn, google.ms, google.mu, google.mv, google.mw, google.ne, google.ne.jp, google.net, google.ng, google.nl, google.no, google.nr, google.nu, google.off.ai, google.pk, google.pl, google.pn, google.ps, google.pt, google.ro, google.rs, google.ru, google.rw, google.sc, google.se, google.sh, google.si, google.sk, google.sm, google.sn, google.so, google.sr, google.st, google.td, google.tg, google.tk, google.tl, google.tm, google.tn, google.to, google.tt, google.us, google.uz, google.vg, google.vu, google.ws, googlecommerce.com, gstatic.com, urchin.com, youtu.be, youtube.com, youtubeeducation.com (Error code: ssl_error_bad_cert_domain)
I think I ought to go the recover route. This sucks. I'll go download Comodo, and add it to my security software installers for after the recover, if no one has a better idea before tomorrow morning.
Ok, I see no infection (and by the way, why do you have Java (not Javascript) on your tablet ? ), even if I don't like DptfPolicyLpmServiceHelper.exe and tabtip.exe .
But your new problem is a good step for me : now we can see there is a problem of certificate : ssl_error_bad_cert_domain , that could explain the first problem too. Question with same problem : https://support.mozilla.org/fr/questions/948317 Or try https://support.mozilla.org/en-US/kb/connection-untrusted-error-message in the "Certificate is only valid for (site name)" section.
If it doesn't help, before the recover route, try again Ideato's advice : https://support.mozilla.org/fr/questions/1034452#answer-661260 , I'd like to know the result with the safe mode for Windows and Firefox.
Hi guys,
I cannot keep on doing this sorry, I really wanted to get to the bottom of this, but I need the device to do some work, which is why i bought it. I have to do the restore then install the software first thing after it's done.
at least if I could recreate the problem consistently, and track down the source, right now i will be blaming google, lol.
FWIW I tried restarting in safe mode, but apparently bitlocker needs a key for me to proceed... WTH ???
I'll report tomorrow, testing after the restore, who knows maybe it's a OS issue, or hardware??? beats me for now
Later guys
@Gnarrk: BTW about the java, I have no idea, all i know at some point i remeber in order to run a video or a game, it said i had to install java, i clicked on the link, and installed the software...
If you don't need Java, erase it from your tablet, it could create more problems than resolve. And if Bitlocker is a pain in the a.., then threw it too. ;)
But first, try to resolve the certificate problem.