Can not browse in Normal Mode

Discussion in 'Hardware' started by marcwtf, Nov 6, 2009.

  1. marcwtf

    marcwtf Private E-2

    I can usually get these, but this one is giving me problems. It is a customers computer that I can browse fine in Safe Mode, and Diagnostic Mode. I can not browse in Normal mode. Normal Mode does have a valid IP, I can ping, sync outlook, and even receive updates and run messengers.

    Issue started with a blue screen. chkdsk /r fixboot fixmbr got it back up. But wouldn't browse. So far I have:

    Ran Malwarebytes, cleaned out a couple of things.
    Ran HiJackThis, cleaned out a couple of things.
    Upgraded to IE 8
    Is using service pack 3
    Checked Proxy
    Installed Chrome and FireFox, same issue
    Winsockfix
    LSPFix
    Smitfruadfix
    Microsoft's fixit tool for Winsock issues
    A repair install for Windows
    Uninstalled all firewalls and Antivirus
    Used the Norton Removal Tool, McAffe Removal Tool,
    And used the AOL Removal Tool
    Checked TCP/IP settings
    Tried wireless and hardwired
    sfc /scannow

    My guess is a service is running to block browsing? Cause it works fine in Safe and Diagnostic mode which loads the basic services and drivers.

    Any ideas would be a big help, willing to try anything at this point, just trying to avoid wiping it and reinstalling.
     
  2. marcwtf

    marcwtf Private E-2

    I have also reinstalled all network driver
    No windows firewall is not on
    Disabled all start up items
    Hide all Microsoft services and disabled all non Microsoft services
    I have tried these commands:
    regsvr32 Softpub.dll
    regsvr32 Mssip32.dll
    regsvr32 Initpki.dll
    regsvr32 Msxml3.dll
    regsvr32 mshtml.dll
    regsvr32 urlmon.dll
    regsvr32 msjava.dll
    regsvr32 shdocvw.dll
    regsvr32 browseui.dll
    regsvr32 actxprxy.dll
    regsvr32 oleaut32.dll
    regsvr32 shell32.dll

    And probally some other stuff I can't remember


    Current HiJackThis log:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 13:15:07, on 11/6/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\wanmpsvc.exe
    C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\WINDOWS\stsystra.exe
    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
    O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
    O23 - Service: WLANKEEPER - IntelĀ® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

    --
    End of file - 3706 bytes





    Current ipconfig all in Normal Mode:


    C:\>ipconfig /all

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : Dawn
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No

    Ethernet adapter Local Area Connection 2:

    Media State . . . . . . . . . . . : Media disconnected
    Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Cont
    roller
    Physical Address. . . . . . . . . : 00-15-C5-67-55-49

    Ethernet adapter Wireless Network Connection 2:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : IntelĀ® PRO/Wireless 2200BG Network
    Connection
    Physical Address. . . . . . . . . : 00-16-6F-AA-E4-22
    Dhcp Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    IP Address. . . . . . . . . . . . : 192.168.0.118
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.0.1
    DHCP Server . . . . . . . . . . . : 192.168.0.1
    DNS Servers . . . . . . . . . . . : 192.168.0.1
    Lease Obtained. . . . . . . . . . : Friday, November 06, 2009 12:46:49
    Lease Expires . . . . . . . . . . : Friday, November 13, 2009 12:46:49
     
  3. cat5e

    cat5e MajorGeek

    Did you notice that the IPconfig show in valid wire NIC and a Valid Wireless NIC.

    When ever you have basic connection problems it is better to disable the Wireless, and use the wire until you resolve the issues.
     
  4. marcwtf

    marcwtf Private E-2

    Hard wired, wireless, does the same. Was on wireless at the time of the ipconfig cause I had move it.

    Well I decided to hook up a Clickfree, wiped it, and reinstalled. Thanks for the input.
     
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Are you still having problems? Are you sure you do not have a malware problem?
     
  6. marcwtf

    marcwtf Private E-2

    No I backed up and reinstalled. Seem to be most recommended.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds