Amazon Problem

[Donger]

For some reason, when I try to get to Amazon recently, nothing loads on any browser. Just a blank screen. Watching the traffic, it looks like the final thing trying to load is "keitds.com"

If I reboot, Amazon will load one time, then the above.

I've run an Avast scan, along with SpyBot and MalwareBytes a few times with no luck.

Any ideas, please? Thanks.

[RippedmyFlesh]

I think its malware even though you have scanned. I find it hard to believe messed up security software would only affect 1 site. And working in safe mode only is how most infected machines behave.

[Donger]

Originally Posted by Fish

Forefront is a wildcard. Its configuration is highly dependent on your admin, so it's hard to say whether it's the culprit. But it definitely could be that or some other group policy. If you don't have control of that, then I'd direct your queries to said admin. Tell them to get their shit up to speed and install Windows 10 already...

Worse comes to worse, I could always Bomgar into your machine and manually disable SCEP for you. Win7 is weak. Don't want to get you in trouble with your admin though....

Thanks Fish. Meh, I'll just leave it alone for now.

[RippedmyFlesh]

google the site you named in the op.
its malware not a security setting

[Donger]

Originally Posted by RippedmyFlesh

google the site you named in the op.
its malware not a security setting

I have. It's all greek to me.

[Fish]

Here's an easy way to see if it's malware...

Click Start > All Programs > Accessories.
Right-click Notepad and select Run as administrator.
Click Continue on the Windows needs your permission UAC window.
When Notepad opens, click File > Open.
In the File name field, type/copypaste: C:\Windows\System32\Drivers\etc\hosts.
Click Open.

Take a look at the hosts file, and see if you see any entries for either amazon.com or the IP address 54.239.25.200. Or just copy and paste the contents here...

Another test... what happens when you click either of these:
https://54.239.25.200/
https://www.amazon.ca/

[Donger]

Originally Posted by Fish

Here's an easy way to see if it's malware...

Click Start > All Programs > Accessories.
Right-click Notepad and select Run as administrator.
Click Continue on the Windows needs your permission UAC window.
When Notepad opens, click File > Open.
In the File name field, type/copypaste: C:\Windows\System32\Drivers\etc\hosts.
Click Open.

Take a look at the hosts file, and see if you see any entries for either amazon.com or the IP address 54.239.25.200. Or just copy and paste the contents here...

Another test... what happens when you click either of these:
https://54.239.25.200/
https://www.amazon.ca/

Thanks Fish:

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost

The second link resulted in the same thing. Looked like it was trying to load, then a blank white screen.

The first link resulted in a Firefox warning that the site wasn't secure.

[Donger]

I tried this and it works fine:

https://www.amazon.co.uk/

[Fish]

Well there's nothing in your hosts file. So I'm not really sure what might be going on. You might try creating a test account on the computer, and log in with that account and see if it does the same thing. That would tell you whether it's an issue with your specific user account or profile.

I'd take it up with your IT department, since you don't have full control.

[DaneMcCloud]

Maybe your employer doesn't want its employees dicking around on Amazon during work?

[Beef Supreme]

I also have an Amazon problem. Different one than Donger. Took a screenshot of it.

[Donger]

Originally Posted by Fish

Well there's nothing in your hosts file. So I'm not really sure what might be going on. You might try creating a test account on the computer, and log in with that account and see if it does the same thing. That would tell you whether it's an issue with your specific user account or profile.

I'd take it up with your IT department, since you don't have full control.

Thanks for the help, Fish.

[Donger]

Originally Posted by DaneMcCloud

Maybe your employer doesn't want its employees dicking around on Amazon during work?

I don't. I watch stuff on Prime after work when I'm traveling.

[Donger]

Okay, so here's an interesting wrinkle...

I just rebooted, and logged into Amazon and started watching a movie. After an hour, Amazon is still working. But, if I pause the movie and open a new Firefox window and try to open Amazon, the blank screen shows up in that window. But, if I go back to the movie and hit play, it does and it isn't doing the blank screen thing.

Ideas?

[Donger]

Oh, and I think I figured out how to disable Microsoft Forefront Endpoint Protection through Task Manager. But, I tried opening Amazon with it stopped and it still didn't work.

[Donger]

Since someone else was having this problem too, I thought I'd update. I had a nasty virus, apparently "tor.exe" IT managed to remove it but it wasn't easy.