prophet001
asked on
Comp can browse websites in safemode but not normal mode
I have a laptop that can browse the internet in safemode but not in normal mode. I have uninstalled Endpoint Protection. I have booted the machine in diagnostic mode (no services, no startup items), I have tried to reset firewall and winsock (netsh winsock reset, netsh firewall reset). The machine can ping websites (ping www.google.com replies no loss) in both normal and safe modes but cannot browse in normal. I'm at a serious loss. Any help would be greatly appreciated.
Thank you,
Preston
p.s. i have tried wireless and lan adapters, i have tried firefox. the machine can also send/receive emails but epic fail on the website browsing from any source.
Thank you,
Preston
p.s. i have tried wireless and lan adapters, i have tried firefox. the machine can also send/receive emails but epic fail on the website browsing from any source.
Is there anything in the event viewer after you try to go to a website?
I assume it used to work. Did you do anything to your PC right before it started happening? (Install new software, did Windows Updates run, did you apply new drivers? Loan the laptop to a friend with a off-shore gambling problem? haha... kidding)
Have you tried running System File Checker?
sfc /scannow
Or it could be malware:
http://malwarebytes.org/
Also, I like the suggestion Warturtle usually makes of booting from a CD that will run a virus scan outside of Windows - he recommends Dr Web CureIt Live CD: (http://www.freedrweb.com/livecd/) ...and I'd agree with him, it's a good product, and a good idea if you're at a loss of what to do.
I assume it used to work. Did you do anything to your PC right before it started happening? (Install new software, did Windows Updates run, did you apply new drivers? Loan the laptop to a friend with a off-shore gambling problem? haha... kidding)
Have you tried running System File Checker?
sfc /scannow
Or it could be malware:
http://malwarebytes.org/
Also, I like the suggestion Warturtle usually makes of booting from a CD that will run a virus scan outside of Windows - he recommends Dr Web CureIt Live CD: (http://www.freedrweb.com/livecd/) ...and I'd agree with him, it's a good product, and a good idea if you're at a loss of what to do.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Here is the hijack this log. What does safemode do differently than the diagnostic startup? (diagnostic startup loads no services and no startup items). The virus protection was Endpoint Protection 11. However, when i booted into safemode and was able to browse Endpoint Protection was still installed and loaded on the safemode boot. I uninstalled it anyway just to be sure. Format and reinstall is possible but I would like to exhaust all other avenues.
Thank you for your help,
Preston
hijackthis.log
Thank you for your help,
Preston
hijackthis.log
That's why LeeTutor's a 'Genius'
I don't know why BHOs and Add-ins are the *last* place I tend to look :D
I don't know why BHOs and Add-ins are the *last* place I tend to look :D
ASKER
i like the boot cd idea. i have a copy of UBCD4Win do you think that might be sufficient to av scan? There are no errors in the Event Viewer after attempted connections. I disabled a "zango" add on in IE but would that affect FF too? If i can't get ubcd to pick something up then i'll give the warturtle suggestion a shot
thank you guys
thank you guys
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
no go leetutor :( sweet idea though. i didn't even know that existed.
I haven't used the Ultimate Boot CD, but I've heard good results from others. If it's updated with recent virus scanner patterns, I'd say to give it a shot.
ASKER
i think there is something to be learned from the fact that it browses from safemode but not normal?? what does safemode do differently that normal or even diagnostic mode for that matter?
That's seemed weird since I first read the question. I assume it's safe mode with networking, right? (Stupid question, I know. Otherwise how would you even use your NIC :)
The best (free) antimalware programs I am experienced with are Malware Bytes (mentioned above by spamster) and SuperAntiSpyware. You might try "fixing" what the HijackThis log shows, just in case it has any effect somehow...
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
My last post seems to be ignoring the fact that email goes out just fine... but it's worth it if it works! :)
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
prophet001, any feedback?
ASKER
nothing suggested thus far has worked. someone on the microsoft xp forum suggested group policy. the laptop is being used until tuesday next week. i will resume the troubleshooting and update the post if i find anything.
thank you all for your suggestions.
Preston
thank you all for your suggestions.
Preston
ASKER
ok well i had to wipe reinstall. just so you know, i tried win xp installation repair and even tried installing suspect offending apps then uninstalling. i hoped that that might reset some registry key that was corrupt. no such luck. wipe reinstall did it (actually it was hp so restore from partition)
thank you all again for your help
thank you all again for your help
now you have to locate it.
one option; can you format the haddrive and reinstall (might be the quickest way to resolve this)?
if not, download hijackthis and look for suspicious registry entries.
you may also want to look at the task manager in standard mode and look for processes that look suspicious.
what virus protection are you using? if you can update the virus protection, can you also do a complete scan?