Tech Support Guy banner
Cancel
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice

Connection Not Private For Google.com Only

1085 Views 3 Replies 3 Participants Last post by  DR.M, 
TDMoor
Hello everyone,

I've been struggling with a problem since 20 Jan '21. Every time I try to visit google.com, I receive the "NET::ERR_CERT_COMMON_NAME_INVALID" error. When I dig deeper, visiting google.com seems to want to redirect me to google.com.vn (I live in the country Georgia, far away from Vietnam). This google.com.vn seems to have an invalid SSL certificate.

I only have this problem when I visit google.com specifically. Other variations, like google.com.br, google.nl, or google.de work just fine. I have the same problem in incognito and in other browsers like Edge (I use Chrome normally). I also have the same problem when I connect to a different country with a VPN.

I tried clearing my SSL cache, restarting my computer, clearing browser cache and cookies, etc. Nothing works. I ran antivirus and antimalware scans and there's nothing fishy on my laptop. This problem happens on my home wifi network and only on my laptop.

Does anyone have an idea what the problem is and how I can fix this?

Attachments

See less See more
Save
Like
Status
Not open for further replies.
1 - 4 of 4 Posts
TDMoor
Okay, I have an important update on this. I solved the google.com privacy error by deleting all SSL certificates that were issued by DigiCert Global Root G1A. As far as I understand, these are the wrong certificates. google.com works fine now. But while digging a little deeper on this, I discovered that the real problem lies with some kind of malware that I'm now struggling to remove from my laptop.

Apparently there's a proxy script running on my laptop that redirects to http://127.0.0.1:86/. This address downloads a file called "download" which has some code that basically sets up the proxy whenever I visit Google, YouTube, Ebay, Amazon, etc.

So far, I've:
  • deleted the 127.0.0.1:86 in all entries in regedit.
  • deleted the "download" file everywhere on my laptop
  • used Malwarebytes' Adwcleaner to remove malware
  • used HitmanPro to delete malware
These help in removing some malware, but it fails removing in the proxy script. Every time I browse, this darn proxy activates itself again. Anyone has any suggestions here? I'm at a loss and might completely reformat my PC if required.

Attachments

See less See more
Save
Like
Couriant
I will move this to the Malware forum for assistance with this. Worse case scenario, a clean install would be needed.
Save
Like
DR.M
Hi.

Try to enable the setting Automatically detect settings, then disable the option Use setup script and restart the computer. Then check if the proxy is still enabled.
Save
Like
1 - 4 of 4 Posts
Status
Not open for further replies.
Tech Support Guy
A forum community dedicated to tech experts and enthusiasts. Come join the discussion about articles, computer security, Mac, Microsoft, Linux, hardware, networking, gaming, reviews, accessories, and more!
Full Forum Listing
Explore Our Forums
Hardware Virus & Other Malware Removal Off Topic Lounge Thread Games & Discussion Networking
Top