No Internet in Normal Mode; Works in Safe Mode

anamatics · 03 Jan 2010

Hello,

I'm running a Gateway NV Series and as of last night I have fallen victim to the problem that Windows 7 seems to be plagued with. My internet has completely stopped working, both Ethernet and Wireless. I have tried many of the fixes suggested in this forum and others, but none of them have worked. So I booted into safe mode with networking and low and behold, the wireless and Ethernet work just fine here.

Why is this?

I don't like to run the internet on safe mode, and I would to have my computer back working at normal capacity. How can I fix this?

Specs on my laptop are here:
Gateway - Laptop with AMD Athlon™ X2 Dual-Core Processor - NightSky Black - NV5211u

aem · 03 Jan 2010

Hi and Welcome to SF.

Your safe mode loads up with the bare essentials to get things working. Using builtin drivers i would think and no third party softwares. If your safe mode don't work, more than likely u have a system/hardware issue.

As for your normal mode, go into Device Manager, any noticable issues?

Orpheous · 03 Jan 2010

Please list the steps that you have tried so far in trying to fix the issue. This will help us to understand the problem better and find a resolution for you.
As aem mentioned, third party software will load in normal mode and not in safe mode, which I believe is the most likely cause of your problem.
Did you install any new software just prior to the problem occurring? It may have been installed just before, or before the last shutdown/reboot.
If you have installed something new, and you think it may be likely that it's causing a startup issue in normal mode: Please download and install CCleaner. if you don't want to download it in safe mode, It can be installed to a USB memory stick after downloading it on another pc. (uncheck "install Yahoo Toolbar" during installation). After install, open CCleaner, click tools - startup. Expand all columns so they are visible on the one page, take a screen snip using the snipping tool and paste it back here. This way we can check to see if there are any conflicting programs that may be blocking your internet access.

Like I said earlier, with limited information to go on, this is my first guess, my apologies in advance if I'm off the mark :P Post back and we can investigate further

anamatics · 03 Jan 2010

Okay - here's what I have tried.

I am posting in Safe Mode with networking currently, the wireless works fine here.

1] I have tried removing the program bonjour from my computer at the suggestion of this and other forums, after several attempts, I was able to fully remove it.

2] I have rebooted the wireless router that I'm using, a netgear model that was giving me NO problems until yesterday night.

3] I have troubleshot the wireless connection from the connection center only to get a response of 'Windows detects that you are connected to the internet, but microsoft.com isn't loading' error.

4] I have attempted, numerous times, to run my ispconfig to see if I have a missing value to no avail.

5] I have both set back and updated my wireless and motherboard drivers with no effect.

Last night, I installed a program used for blocking isps that I have used on several different XP machines with none of these problems - I was downloading things on iTunes on a public network and wanted to keep my information protected.

This morning I used a separate computer to install and run malwarebytes thinking that this issue was malware messing with my connection.

Here are CC Cleaner caps:
http://img.photobucket.com/albums/v1...a/Capture1.png
http://img.photobucket.com/albums/v1...a/Capture2.png

aem · 03 Jan 2010

Lets see. If you boot into normal mode, you loose all your adapters, hence can't access the internet via direct cable to modem/router or through wireless (that's what i meant by losing all your adapters). Correct?

Have you tried restoring the OS to prior date?
Maybe try Last Know good configuration..?

If you have, then just log back onto normal. Go to Event Logs see what errors there are. then Go to Device Manager, and see if there are any issues. You don't need to be connected to the internet to download the drivers if any is missing. We can do that for u (or you can relog back in safe mode to do that yourself).

Sust out out your event logs and Device Manager first.

Orpheous · 03 Jan 2010

Thanks for replying with further info. See How to Post a Screenshot in Seven Forums for an easier way to attach screen snips

What is the IP blocking program that you installed? Have you tried disabling/uninstalling it? I didn't see any reference to it in your startup lists.
The first entry in your first capture produces some suspicious looking search results:
Associated Malware Groups

The unsafe files using this name are associated with the malware groups:

System Back Door
Cloaked Malware

File Behavior

GREG.EXE has been seen to perform the following behavior:

The Process is packed and/or encrypted using a software packing process

GREG.EXE has been the subject of the following behavior:

Added as a Registry auto start to load Program on Boot up
Created as a process on disk
Deleted as a process from disk

Do you know what the Program Files(x86)\Gateway folder/program was installed for?
If not, I would be inclined to disable it in CCleaners startup (also disable Adobe speed launcher) then run a full antivirus scan using you installed av product, followed by a full malwarebytes scan. Preferably do these scans in safe mode.
Post back and let us know the results of your scan, attach logfiles if possible.

Orpheous · 03 Jan 2010

Just for convenience sake, I'm attaching your screen snip:
Also search results for full folder destination of GREG.exe seem to show that it's not common

anamatics · 04 Jan 2010

Will do. Turned off greg.exe. No idea what it was installed for, so I'll disable that and the Adobe thing and run the scans in safe mode. Will see what happens and report back.

edit: I removed the programs that I'd put on yesterday right off the bat thinking that they'd been the issue. No luck.

Ch@n · 04 Jan 2010

You can try this..
Start - Run - msconfig - services tab - check mark hide all ms services - uncheck all the listed.
Startup tab - uncheck all. Apply - Close and restart machine. Now try.

Have you installed any third party firewall?

Orpheous · 04 Jan 2010

dre@ms said:

You can try this..
Start - Run - msconfig - services tab - check mark hide all ms services - uncheck all the listed.
Startup tab - uncheck all. Apply - Close and restart machine. Now try.

Have you installed any third party firewall?

Doing this will stop all of your installed programs from starting... including theati control centre, acer launch manager, java update service, audio centre and antivirus.... not recommended or really necessary.

I think for now we should maybe concentrate on getting a clean bill of health for your system, as GREG.exe has been known to be malicious and could be part of the problem.

Once you have completed the full system scans, please post back the results here in a reply, add the logs as an attachment if possible.
After you have done that, please download HijackThis. You can either use the installer or download the executable and save it onto a usb stick to run on the system. After installation, run it and save a logfile - attach the logfile here or copy paste it into a reply. IMPORTANT - close the program after saving the logfile and don't remove/fix anything... I'll analyse the file and let you know what you should fix, if anything. You can seriously wreck your installation if you randomly fix entries...