Solved Browsers working in safe mode with networking but not in normal mode

[Kavitha ms]

logfile of wireless test tool

Windows IP Configuration
Host Name . . . . . . . . . . . . : kavitha-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Atheros AR8131 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
Physical Address. . . . . . . . . : BC-AE-C5-57-6E-9F
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::c930:cf42:dcec:bfee%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Friday, March 28, 2014 5:30:18 PM
Lease Expires . . . . . . . . . . : Saturday, March 29, 2014 5:30:18 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 247246533
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-15-07-85-1E-BC-AE-C5-57-6E-9F
DNS Servers . . . . . . . . . . . : 192.168.1.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{7CDCBB5E-EEA2-4407-8A2D-D2268339C299}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:2c86:10af:3f57:fefc(Preferred)
Link-local IPv6 Address . . . . . : fe80::2c86:10af:3f57:fefc%12(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled
The Wireless AutoConfig Service (wlansvc) is not running.
The Wireless AutoConfig Service (wlansvc) is not running.
Pinging 194.119.131.66 with 32 bytes of data:
Reply from 194.119.131.66: bytes=32 time=171ms TTL=44
Reply from 194.119.131.66: bytes=32 time=171ms TTL=44
Reply from 194.119.131.66: bytes=32 time=172ms TTL=44
Reply from 194.119.131.66: bytes=32 time=173ms TTL=44
Ping statistics for 194.119.131.66:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 171ms, Maximum = 173ms, Average = 171ms
Pinging plus.net [212.159.8.2] with 32 bytes of data:
Reply from 212.159.8.2: bytes=32 time=201ms TTL=240
Reply from 212.159.8.2: bytes=32 time=181ms TTL=240
Reply from 212.159.8.2: bytes=32 time=180ms TTL=240
Reply from 212.159.8.2: bytes=32 time=177ms TTL=240
Ping statistics for 212.159.8.2:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 177ms, Maximum = 201ms, Average = 184ms
Tracing route to cns1.uk.vianw.net [194.119.131.66]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms 192.168.1.1
2 11 ms 10 ms 10 ms 59.89.200.1
3 11 ms 11 ms 11 ms 218.248.173.94
4 25 ms 24 ms 25 ms 218.248.235.142
5 49 ms 49 ms * 14.141.139.145
6 * 60 ms 54 ms 172.25.81.134
7 * * 54 ms ix-0-100.tcore1.MLV-Mumbai.as6453.net [180.87.38.5]
8 177 ms 177 ms 177 ms if-2-2.tcore2.MLV-Mumbai.as6453.net [180.87.38.2]
9 173 ms 171 ms 172 ms if-6-2.tcore1.L78-London.as6453.net [80.231.130.5]
10 169 ms 169 ms 168 ms if-17-2.tcore1.LDN-London.as6453.net [80.231.130.130]
11 170 ms 170 ms 171 ms 195.219.92.61
12 170 ms 170 ms 171 ms These Windows services are started:
AMD External Events Utility
Application Experience
Application Host Helper Service
Background Intelligent Transfer Service
Base Filtering Engine
CodeMeter Runtime Server
COM+ Event System
Computer Browser
Cryptographic Services
DCOM Server Process Launcher
Desktop Window Manager Session Manager
DeviceVM Meta Data Export Service
DHCP Client
Diagnostic Policy Service
Diagnostic Service Host
Diagnostic System Host
Distributed Link Tracking Client
DNS Client
Function Discovery Provider Host
Function Discovery Resource Publication
Group Policy Client
HomeGroup Listener
HomeGroup Provider
Human Interface Device Access
HWDeviceService.exe
IKE and AuthIP IPsec Keying Modules
IP Helper
IPsec Policy Agent
Multimedia Class Scheduler
Network Connections
Network List Service
Network Location Awareness
Network Store Interface Service
Offline Files
Peer Networking Identity Manager
Plug and Play
Power
Print Spooler
Program Compatibility Assistant Service
Remote Procedure Call (RPC)
RPC Endpoint Mapper
Security Accounts Manager
Security Center
Server
Shell Hardware Detection
SSDP Discovery
Superfetch
System Event Notification Service
Task Scheduler
TCP/IP NetBIOS Helper
Themes
UPnP Device Host
User Profile Service
Windows Audio
Windows Audio Endpoint Builder
Windows Defender
Windows Driver Foundation - User-mode Driver Framework
Windows Event Log
Windows Firewall
Windows Image Acquisition (WIA)
Windows Management Instrumentation
Windows Media Player Network Sharing Service
Windows Process Activation Service
Windows Search
Windows Update
WinHTTP Web Proxy Auto-Discovery Service
Workstation
World Wide Web Publishing Service
The command completed successfully.

Microsoft Windows [Version 6.1.7600]
Image Name PID Session Name Session# Mem Usage
========================= ======== ================ =========== ============
System Idle Process 0 Services 0 24 K
System 4 Services 0 488 K
smss.exe 256 Services 0 568 K
csrss.exe 348 Services 0 3,076 K
wininit.exe 420 Services 0 2,780 K
csrss.exe 432 Console 1 4,788 K
services.exe 472 Services 0 5,968 K
lsass.exe 488 Services 0 6,300 K
lsm.exe 496 Services 0 2,528 K
winlogon.exe 588 Console 1 3,528 K
svchost.exe 668 Services 0 5,456 K
svchost.exe 744 Services 0 5,168 K
atiesrxx.exe 788 Services 0 2,456 K
svchost.exe 864 Services 0 13,680 K
svchost.exe 908 Services 0 44,092 K
svchost.exe 952 Services 0 19,944 K
svchost.exe 1096 Services 0 7,416 K
svchost.exe 1196 Services 0 9,488 K
atieclxx.exe 1276 Console 1 3,752 K
spoolsv.exe 1380 Services 0 5,980 K
svchost.exe 1408 Services 0 6,868 K
svchost.exe 1492 Services 0 4,060 K
DVMExportService.exe 1616 Services 0 2,668 K
HWDeviceService.exe 1692 Services 0 10,024 K
dwm.exe 1740 Console 1 40,388 K
DCSHelper.exe 1956 Console 1 10,512 K
svchost.exe 1968 Services 0 3,328 K
taskhost.exe 2008 Console 1 6,904 K
svchost.exe 352 Services 0 4,124 K
CodeMeter.exe 2092 Services 0 6,256 K
SearchIndexer.exe 2184 Services 0 18,360 K
VDeck.exe 2392 Console 1 4,960 K
googletalk.exe 2400 Console 1 12,572 K
uTorrent.exe 2448 Console 1 24,020 K
svchost.exe 3700 Services 0 3,288 K
Ymsgr_tray.exe 1508 Console 1 5,116 K
wmpnetwk.exe 3620 Services 0 5,052 K
svchost.exe 2728 Services 0 7,008 K
svchost.exe 3892 Services 0 4,296 K
svchost.exe 208 Services 0 26,492 K
explorer.exe 2324 Console 1 34,104 K
notepad.exe 1820 Console 1 5,504 K
SearchProtocolHost.exe 3724 Services 0 3,904 K
SearchFilterHost.exe 680 Services 0 8,860 K
iexplore.exe 4836 Console 1 20,148 K
iexplore.exe 4628 Console 1 49,648 K
iexplore.exe 2364 Console 1 31,188 K
audiodg.exe 4872 Services 0 14,308 K
wireless.exe 1944 Console 1 7,012 K
notepad.exe 2384 Console 1 5,248 K
cmd.exe 2816 Console 1 2,064 K
conhost.exe 2488 Console 1 4,092 K
tasklist.exe 5084 Console 1 4,064 K
dllhost.exe 5268 Console 1 3,964 K
WmiPrvSE.exe 2064 Services 0 4,692 K
MTU MediaSenseState Bytes In Bytes Out Interface
------ --------------- --------- --------- -------------
4294967295 1 0 39152 Loopback Pseudo-Interface 1
1500 1 2393974 518523 Local Area Connection
Querying active state...
TCP Global Parameters
----------------------------------------------
Receive-Side Scaling State : enabled
Chimney Offload State : automatic
NetDMA State : enabled
Direct Cache Acess (DCA) : disabled
Receive Window Auto-Tuning Level : normal
Add-On Congestion Control Provider : none
ECN Capability : disabled
RFC 1323 Timestamps : disabled
** The above autotuninglevel setting is the result of Windows Scaling heuristics
overriding any local/policy configuration on at least one profile.
===========================================================================
Interface List
11...bc ae c5 57 6e 9f ......Atheros AR8131 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
1...........................Software Loopback Interface 1
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.3 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.3 276
192.168.1.3 255.255.255.255 On-link 192.168.1.3 276
192.168.1.255 255.255.255.255 On-link 192.168.1.3 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.3 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.3 276
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
12 58 ::/0 On-link
1 306 ::1/128 On-link
12 58 2001::/32 On-link
12 306 2001:0:5ef5:79fd:2c86:10af:3f57:fefc/128
On-link
11 276 fe80::/64 On-link
12 306 fe80::/64 On-link
12 306 fe80::2c86:10af:3f57:fefc/128
On-link
11 276 fe80::c930:cf42:dcec:bfee/128
On-link
1 306 ff00::/8 On-link
12 306 ff00::/8 On-link
11 276 ff00::/8 On-link
===========================================================================
Persistent Routes:
None

Local Area Connection:
Node IpAddress: [192.168.1.3] Scope Id: []
No Connections
Active Connections
Proto Local Address Foreign Address State
TCP 0.0.0.0:80 kavitha-PC:0 LISTENING
Can not obtain ownership information
TCP 0.0.0.0:135 kavitha-PC:0 LISTENING
RpcSs
[svchost.exe]
TCP 0.0.0.0:445 kavitha-PC:0 LISTENING
Can not obtain ownership information
TCP 0.0.0.0:554 kavitha-PC:0 LISTENING
[wmpnetwk.exe]
TCP 0.0.0.0:2869 kavitha-PC:0 LISTENING
Can not obtain ownership information
TCP 0.0.0.0:5357 kavitha-PC:0 LISTENING
Can not obtain ownership information
TCP 0.0.0.0:10243 kavitha-PC:0 LISTENING
Can not obtain ownership information
TCP 0.0.0.0:22350 kavitha-PC:0 LISTENING
[CodeMeter.exe]
TCP 0.0.0.0:43103 kavitha-PC:0 LISTENING
[uTorrent.exe]
TCP 0.0.0.0:49152 kavitha-PC:0 LISTENING
[wininit.exe]
TCP 0.0.0.0:49153 kavitha-PC:0 LISTENING
eventlog
[svchost.exe]
TCP 0.0.0.0:49154 kavitha-PC:0 LISTENING
Schedule
[svchost.exe]
TCP 0.0.0.0:49155 kavitha-PC:0 LISTENING
[services.exe]
TCP 0.0.0.0:49157 kavitha-PC:0 LISTENING
[lsass.exe]
TCP 0.0.0.0:49176 kavitha-PC:0 LISTENING
PolicyAgent
[svchost.exe]
TCP 127.0.0.1:10000 kavitha-PC:0 LISTENING
[uTorrent.exe]
TCP 192.168.1.3:139 kavitha-PC:0 LISTENING
Can not obtain ownership information
TCP 192.168.1.3:49246 208.73.211.182:http ESTABLISHED
[HWDeviceService.exe]
TCP 192.168.1.3:49247 208.73.211.182:http ESTABLISHED
[DCSHelper.exe]
TCP 192.168.1.3:49250 208.73.211.196:http ESTABLISHED
[DCSHelper.exe]
TCP 192.168.1.3:49252 208.73.211.172:http ESTABLISHED
[HWDeviceService.exe]
TCP 192.168.1.3:49259 208.73.210.29:http CLOSE_WAIT
[DCSHelper.exe]

 

[Kaktussoft]

Service WLAN AutoConfig: Is startup type AUTOMATIC? Stat services.msc to see it.
If set to AUTOMATIC ... is it really started? Can you start it manually?
Do you have a wireless adapater? If so.. is it working?
---------
this is totally unrelated to WORD and ACROBAT crashing btw

 

[chev65]

Result log of junkware remover

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows_NT x86
Ran by kavitha on Fri 03/28/2014 at 17:34:57.84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


~~~ Services

~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page

~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\freetvradio.spointerwebdisp

~~~ Files
Successfully deleted: [File] "C:\Windows\Tasks\driver robot.job"
Successfully disinfected: [Shortcut] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Media Player Classic.lnk

~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\ammyy"
Successfully deleted: [Folder] "C:\ProgramData\pc1data"
Successfully deleted: [Folder] "C:\Users\kavitha\appdata\local\cre"

~~~ Event Viewer Logs were cleared


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 03/28/2014 at 17:40:40.73
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Ok good I figured Norton was causing the connection problem.

Thanks for posting the results of the tests.

For the programs that aren't working "Google Chrome, Adobe etc." please to simply uninstall those programs from Add/Remove Programs via the Control Panel, please to restart after removing those programs or software's that do not work.

After rebooting run the following command in an elevated command prompt.

sfc /scannow

Let me know if the scan passes and has fixed any file corruption, if it says that the corruption could not be fixed then restart and run the scan again twice more with reboots between each scan. Let me know if the machine passes the third scan....

 

[Kavitha ms]

I'm not able to uninstall any of these programs now. When i click the uninstall menu, same pop up box comes stating the program has stopped working

The sfc/ scannow.. scan doesnt find any problems.

 

[Kaktussoft]

Answer post #20
Can you uninstall in safe mode?
Or after clean startup?

 

[Kavitha ms]

no I cannot uninstall in safe mode too
And these things are not working in safe mode too..

 

[Kavitha ms]

norton is removed totally now. You told you can browse the internet now.
Please perform a memory test. http://www.sevenforums.com/tutorials/715-memory-diagnostics-tool.html
Let it run a few hours and post back results

I'll try this and post the reply soon

 

[Kavitha ms]

norton is removed totally now. You told you can browse the internet now.
Please perform a memory test. http://www.sevenforums.com/tutorials/715-memory-diagnostics-tool.html
Let it run a few hours and post back results

I tried this too and it showed no problems

 

[Kavitha ms]

This is another pop up box that comes in my pc

 

[Kaktussoft]

I still think the memory is faulty! So many problems. Most most likely do to faulty memory. Run memtest86 and post results. Let it run at least 5 hours.

 

[Kavitha ms]

Problem got solved

Hi all,

Thanks a lot for helping me. My computer is working normally now.
There was virus called "sality" in my pc which was the reason for all these problems. Now, everything is working smoothly after removing it using "sality killer"
Thank you so much everyone I'm so grateful to you for your helps and tips
Thank you sevenforums


-- Kavitha Melarcode Seetharaman --

 

[ThrashZone]

Hi,
Glad you got it fixed,
Where did you download this "Sality killer" ?
Cheers.

 

[Arnaud]

Corrupted DNS API

I just solved this problem after a lucky circumstance: a program that tried to update itself raised the error "DNSAPI.dll failing call".

The two browsers failed in normal mode while they worked as expected in safe mode.

netsh or sfc /scannow commands never solved that, neither antivirus, antimalware, spy detectors etc...
Using a selective start (via msconfig.exe) to be closest as possible to the safe boot (means starting only the same services and applications) neither solved.

Chrome displayed "DNS_PROBE_FINISHED_NXDOMAIN" error while IE did not help.
I could not imagine a DNS API problem while I thought that a corrupted dll should show the same issue in normal and safe mode... however this api was really gulty !

To solve I renamed dnsapi.dll in both system32 and syswow64 folders, downloaded a 64-bit dll for system32 and a 32-bit one for syswow64.