Can't make new connections to internet and programs can't update

[ansley]

I installed Window 7 on a new system a little less than a month ago. Thursday afternoon, my wife tried opening a new tab in Firefox and was unable to connect to any sites in the new tab. Interestingly, she was able to see updates in her gmail account in one of the other tabs which she already had open. Additionally, I was able to access her system through my laptop in our home network. And I was able to successfully ping external IP addresses. However, MalwareBytes and other applications are not able to get out to download updates.

While this began happening, Firefox and other applications began "Not Responding" frequently. When attempting to do almost anything, the application will freeze for at least a minute and then allow a few actions before freezing again.

Kinda smells of a malware, but MalwareBytes can't detect it and it got past my antivirus and firewall.

I'm using the free version of BitDefender as my antivirus and was using Comodo Firewall, but have since uninstalled it as I started having trouble getting my USB mouse to connect consistently after reboots right after I installed it (weeks ago). However, that probably has not resolved. I'll focus on this issue later as my most pressing issue is that there's an issue connecting to the internet and applications frequently "Not Responding."

Please help as the system is basically useless at the moment.

 

[DocBrown]

Did you run MalWareBytes in Windows Safe Mode w/ a Full Scan ? Ususally it will find more malware than when run in Windows regular operating mode.

 

[ansley]

I ran a Full Scan, but not in Safe Mode. I can kick that off now.

Thanks for the quick response.

 

[ansley]

Full Scan in Safe Mode detected nothing.

 

[Sir George]

I installed Window 7 on a new system a little less than a month ago. Thursday afternoon, my wife tried opening a new tab in Firefox and was unable to connect to any sites in the new tab. Interestingly, she was able to see updates in her gmail account in one of the other tabs which she already had open. Additionally, I was able to access her system through my laptop in our home network. And I was able to successfully ping external IP addresses. However, MalwareBytes and other applications are not able to get out to download updates.

While this began happening, Firefox and other applications began "Not Responding" frequently. When attempting to do almost anything, the application will freeze for at least a minute and then allow a few actions before freezing again.

Kinda smells of a malware, but MalwareBytes can't detect it and it got past my antivirus and firewall.

I'm using the free version of BitDefender as my antivirus and was using Comodo Firewall, but have since uninstalled it as I started having trouble getting my USB mouse to connect consistently after reboots right after I installed it (weeks ago). However, that probably has not resolved. I'll focus on this issue later as my most pressing issue is that there's an issue connecting to the internet and applications frequently "Not Responding."

Please help as the system is basically useless at the moment.

Try "Hitman Pro" from the following site;

http://www.surfright.nl/en/hitmanpro/

The program is free to install and run a scan, but for removal of any infection you have to purchase the license.

 

[ansley]

I ran HitmanPro in Safe Mode. It found 123 tracking cookies, but indicated no threats. I let it remove the cookies. Then after clicking Next a few times to get to the blue Results screen, I see it says 983 threats detected. I'm not sure how to interpret this.

 

[AddRAM]

I would recommend installing MSE and MBAM , run full scans, and delete anything found

Microsoft Security Essentials - Microsoft Windows

and you said you already have Malwarebytes.

Windows Defender Offline is a good option also.

http://windows.microsoft.com/en-us/windows/what-is-windows-defender-offline

 

[Sir George]

I ran HitmanPro in Safe Mode. It found 123 tracking cookies, but indicated no threats. I let it remove the cookies. Then after clicking Next a few times to get to the blue Results screen, I see it says 983 threats detected. I'm not sure how to interpret this.

Hitman Pro has never detected a problem with the systems I use other than tracking cookies. So, I have never encountered the issue you describe. Can you run the program in a normal Windows environment; ie, not Safe Mode? If so, what are the results? Please post back a reply.

 

[ansley]

I'll re-run HitmanPro in normal Windows environment and provide results.

I'll also MSE in safe and normal modes.

Regarding Windows Defender Offline, the system which is having issues is running Windows 7 64-bit while my laptop which I will use to create the disk is running Windows XP. I assume I'll want to download the 64-bit version, but would like to get confirmation that I won't be creating an issue using 32-bit XP to create the CD.

 

[derekimo]

Regarding Windows Defender Offline, the system which is having issues is running Windows 7 64-bit while my laptop which I will use to create the disk is running Windows XP. I assume I'll want to download the 64-bit version, but would like to get confirmation that I won't be creating an issue using 32-bit XP to create the CD.

From our tutorial,

http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

Bootable media created on any version of Windows can be run on any other version of Windows. The only thing that needs to match is the architecture of Windows Defender Offline and the OS of the infected machine

 

[chev65]

It sounds like either winsock or TCP/Ip has been corrupted with the browser not responding etc.

The Op may want to run the IP reset file to fix these problems..

 

[ansley]

I'll try running Windows Defender Offline next.

HitmanPro will not run in normal Windows mode as it can't access the internet (part of my problem). I tried unchecking the 2 setup options which suggest the need for an internet connection and it still did not run.

I'm sure you know this, but I found MSE does not work in safe mode. So I attempted to run it in normal mode, but cancelled when it suggested I first need to uninstall my current antivirus (the free version of BitDefender). Is the recommendation that I should uninstall?

 

[derekimo]

I'll try running Windows Defender Offline next.

HitmanPro will not run in normal Windows mode as it can't access the internet (part of my problem). I tried unchecking the 2 setup options which suggest the need for an internet connection and it still did not run.

I'm sure you know this, but I found MSE does not work in safe mode. So I attempted to run it in normal mode, but cancelled when it suggested I first need to uninstall my current antivirus (the free version of BitDefender). Is the recommendation that I should uninstall?

You should only have one antivirus installed, pick one and uninstall the other.

Have you tried the suggestion from chev65 above yet?

 

[ansley]

Derekimo,

The reviews I've read suggest that the free version of BitDefender is better than most antivirus applications including MSE. However, I'm open to additional input. Are you guys suggesting I should use MSE instead?

I had overlooked the suggestion from chev65, but I've since run it. It ran very quickly, so I can't say exactly what it did except that it rebooted the system. I ran it a second time to try to catch what happened, but again it was too fast. Afterward, I attempted to run HitmanPro again and again it failed because of lack of internet connection.

I'm having difficulty getting Windows Defender Offline burned to a CD as I'm my clean system is running XP and I need Image Mastering API v2 and the online check for genuine Windows only gives the option to save instead of running it from the Windows site. <sigh>

 

[derekimo]

If you want to keep BitDefender then you need to uninstall MSE, running two real time AV's is not a good idea, they end up fighting each other.

I can't comment on how chev65's suggestion is supposed to run.

Hold off on the Windows Defender right now, it will need an internet connection as well when it tries to update the definitions.

 

[ansley]

OK. I never installed MSE as I didn't want to have 2 AV's.

So I'm not sure what to try next.

 

[derekimo]

I'll be honest, I don't either. I've requested some fresh eyes to look at this.

 

[Shadowjk]

I think everyone is correct with malware or some application causing the issue. Just a question, when running the OS in Safe Mode with Networking do you receive any connection issues or application instability?

Please follow this tutorial (OPTION ONE ONLY) - http://www.sevenforums.com/tutorials/69585-safe-mode.html

   Note

Please replace all references of 'Safe Mode' with 'Safe Mode with Networking'

I'm no security expert and this may be one for the security people but any suspecting malware infection I personally always do a clean install. Just a personal note from me

Hope This Helps,
Josh

 

[ansley]

I booted in Safe Mode with Networking.

The Windows window that pops up explaining what safe mode is indicated that it was unable to access the internet.

However, I launched MalwareBytes and was able to get updates (an improvement). I ran another full scan which again turned up nothing.

I then reran HitmanPro. It turned up 7 "threats." They are:
C:\Users\Bob\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\42U3GZOH\SPSetup[1].exe which is marked as Malware and recommends Quarantine
C:\Program Files (x86)\Conduit\Community Alerts\Alert.dll which is marked as Conduit and recommends Ignore (what is a Conduit?)
C:\Program Files (x86)\Conduit\ marked as Conduit and Ignore
C:\Program Files (x86)\Conduit\Community Alerts\ marked as Conduit and Ignore
C:\Users\Bob\AppData\LocalLow\Conduit\ marked as Conduit and Ignore
C:\Users\Bob\AppData\Local\Conduit\ marked as Conduit and Ignore
and
HKU\S-1-5-21-2577831617-578804045-2162281527-1001\Software\AppDataLow\Software\Smartbar\ marked as Conduit and Ignore

Do I need to get rid of this SPSetup[1].exe? I can't tell from my searches that it's a problem.
What are these Conduits?
Should I quarantine these Conduits or ignore them?

 

[derekimo]

I'm requesting this be moved to the security forum and let the experts there guide you.