Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Can not browse in Normal Mode


  • Please log in to reply
6 replies to this topic

#1 marcwtf

marcwtf

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 06 November 2009 - 11:15 AM

I can usually get these, but this one is giving me problems. It is a customers computer that I can browse fine in Safe Mode, and Diagnostic Mode. I can not browse in Normal mode. Normal Mode does have a valid IP, I can ping, sync outlook, and even receive updates and run messengers.

Issue started with a blue screen. chkdsk /r fixboot fixmbr got it back up. But wouldn't browse. So far I have:

Ran Malwarebytes, cleaned out a couple of things.
Ran HiJackThis, cleaned out a couple of things.
Upgraded to IE 8
Is using service pack 3
Checked Proxy
Installed Chrome and FireFox, same issue
Winsockfix
LSPFix
Smitfruadfix
Microsoft's fixit tool for Winsock issues
A repair install for Windows
Uninstalled all firewalls and Antivirus
Used the Norton Removal Tool, McAffe Removal Tool,
And used the AOL Removal Tool
Checked TCP/IP settings
Tried wireless and hardwired
sfc /scannow

My guess is a service is running to block browsing? Cause it works fine in Safe and Diagnostic mode which loads the basic services and drivers.

Any ideas would be a big help, willing to try anything at this point, just trying to avoid wiping it and reinstalling.

BC AdBot (Login to Remove)

 


#2 Picollo30

Picollo30

  • Members
  • 44 posts
  • OFFLINE
  •  
  • Local time:10:00 PM

Posted 06 November 2009 - 11:50 AM

im having a problem of the same type

#3 hamluis

hamluis

    Moderator


  • Moderator
  • 56,274 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:04:00 PM

Posted 06 November 2009 - 01:06 PM

Not that I agree...but if you think it's a service problem...have you bothered to check those and to check Event Viewer for errors that might spotlight such?

When you say that it works in safe mode...you mean safe mode with networking, right?

Louis

#4 marcwtf

marcwtf
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 06 November 2009 - 01:20 PM

Yes the networking works fine in Safe Mode. I can browse and route to any page no problem. Yes also checked Event Viewer and nothing stands out there as causing the issue

I have also reinstalled all network driver
No windows firewall is not on
Disabled all start up items
Hide all Microsoft services and disabled all non Microsoft services
I have tried these commands:
regsvr32 Softpub.dll
regsvr32 Mssip32.dll
regsvr32 Initpki.dll
regsvr32 Msxml3.dll
regsvr32 mshtml.dll
regsvr32 urlmon.dll
regsvr32 msjava.dll
regsvr32 shdocvw.dll
regsvr32 browseui.dll
regsvr32 actxprxy.dll
regsvr32 oleaut32.dll
regsvr32 shell32.dll

And probally some other stuff I can't remember


Current HiJackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:15:07, on 11/6/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 3706 bytes





Current ipconfig all in Normal Mode:


C:\>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Dawn
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Cont
roller
Physical Address. . . . . . . . . : 00-15-C5-67-55-49

Ethernet adapter Wireless Network Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel® PRO/Wireless 2200BG Network
Connection
Physical Address. . . . . . . . . : 00-16-6F-AA-E4-22
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.118
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Lease Obtained. . . . . . . . . . : Friday, November 06, 2009 12:46:49
Lease Expires . . . . . . . . . . : Friday, November 13, 2009 12:46:49

Edited by marcwtf, 06 November 2009 - 01:26 PM.


#5 hamluis

hamluis

    Moderator


  • Moderator
  • 56,274 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:04:00 PM

Posted 06 November 2009 - 02:46 PM

To be honest...I see multiple instances of your situation...but I don't see a single clear-cut resolution or even definition of the problem.

Worth reading, IMO: http://www.malwarebytes.org/forums/index.p...26691&st=20.

Louis

#6 marcwtf

marcwtf
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 06 November 2009 - 05:01 PM

Well I decided to hook up a Clickfree, wiped it, and reinstalled. Thanks for the input.

#7 hamluis

hamluis

    Moderator


  • Moderator
  • 56,274 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:04:00 PM

Posted 06 November 2009 - 05:35 PM

Undoubtedly, that is what I would have done...happy computing :thumbsup:.

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users