Http 400 bad request invalid hostname

[techlabco]

HTTP 400 BAD REQUEST INVALID HOSTNAME
This problem is driving me up the fraking wall! It only shows when the client is using the search bar in either Firefox and EI 8/9.
I have searched for malicious stuff using Spybot;MMB; SuperAntiSpyware.
I have reset the HOST files in EI.
I have cleared every imaginable caches including offline caches.
I have scanned for rootkits using TDSSKILLER.
I have uninstalled the "Family Protection" in Windows Live Essentials (caused problems before)
I have uninstalled every toolbar and any extensions in both browsers.

It ONLY does it when I use the search bar and searches inside websites with exception to download.com BUT will not bring up Google.com..i have switched search hosts. The client can browse fine.

I have used CCleaner to "maybe" clean up some bad registry keys??

Does anyone have this problem or have had this problem??
It is a Samsung Laptop
i5; 4gb RAM; 64-bit; win 7 Home premium

I am now currently running sfc /scannow...just waiting...

any thoughts or solutions?

Thanks in advance!!

-g

 

[MobileTechie]

So, to be clear, they use the search bar to search for a term and then what happens exactly? Do they get the error from the search provider e.g. google as soon as they click to search or is it when they try to visit sites which come up in the search?

 

[Rafael]

HTTP 400 BAD REQUEST INVALID HOSTNAME
This problem is driving me up the fraking wall! It only shows when the client is using the search bar in either Firefox and EI 8/9.
I have searched for malicious stuff using Spybot;MMB; SuperAntiSpyware.
I have reset the HOST files in EI.
I have cleared every imaginable caches including offline caches.
I have scanned for rootkits using TDSSKILLER.
I have uninstalled the "Family Protection" in Windows Live Essentials (caused problems before)
I have uninstalled every toolbar and any extensions in both browsers.

It ONLY does it when I use the search bar and searches inside websites with exception to download.com BUT will not bring up Google.com..i have switched search hosts. The client can browse fine.

I have used CCleaner to "maybe" clean up some bad registry keys??

Does anyone have this problem or have had this problem??
It is a Samsung Laptop
i5; 4gb RAM; 64-bit; win 7 Home premium

I am now currently running sfc /scannow...just waiting...

any thoughts or solutions?

Thanks in advance!!

-g

May i see in teamviewer?
The malware can be in the Master boot record.
Try scanning using ComboFix.
Try using portable firefox.

 

[commentator8]

Not quite understanding your post - are you trying to say that the firefox internal search is giving a problem? Because i can't see how it could result in a 400 code. Try complete internet repair (caveat - i found that it didnt perform a full winsock/lsp fix as i had to run whichever one it was manually to fix a connectivity issue on one system), and setting the dns to google's (8.8.8.8, 8.8.4.4) in the tcp ip settings for the connection.

As well try firefox portable as a poster above mentioned.

 

[Xander]

What are the R1/R0 lines in HijackThis, specifically those search related? Are they the defaults?

 

[techlabco]

Sorry for tardy response. Thanks for responses.

Yes, when using either IE or Firefox toolbar search on top right of browser--this error comes up. Interestingly enough, when I type in www.google.com in the URL bar--it invokes this error again.
I decided to switch the search provider to Bing, Yahoo and Ask and they all did the same thing.
I went to MSN.com and used it's internal search bar (on the actual website) and it invoked this error.

Try complete internet repair (caveat - i found that it didnt perform a full winsock/lsp fix as i had to run whichever one it was manually to fix a connectivity issue on one system), and setting the dns to google's (8.8.8.8, 8.8.4.4) in the tcp ip settings for the connection.

Haven't tried this but I will try. Hmmm...winsock? That's an angle.

I could try the portable firefox but the client is out of town until the first.

IDK...if an MBR was lurking...I would think I would have found it...tried to scan the entire system and that covered the MBR....

This is a crazy problem...lol

 

[ZenTree]

The times we've had this it's all been malware related, even if you've removed the main infection, maybe just something residual. I won't go telling you how to run malware scans as the above posts cover the angles, good luck with hunting.

 

[Rafael]

download this program called d7 from http://www.foolishit.com/
follow the instructions on the d7 page and the program has alot of features, look under the repair & malware tab.

 

[phaZed]

Probably not it.. but have you checked to make sure your not running through a proxy?

 

[BDPCR]

Check proxy settings as stated. check for hooks to browser, check DNS settings on router and machine reset winsock, make sure no rootkits are there GMER, or traffic sniffer, and hijack this, cehck in safe mode and install another browser to test.

 

[MobileTechie]

Any update on this?

...........................