Strange program connections

[wolvenreign]

Strange ethernet access problem; some programs connect, others don't.
Hey, everyone. I have a dual boot on my desktop, one half Ubuntu Linux and one half Windows 7 (for gaming compatibility). My Ubuntu Linux side has no problems with any and all of it's programs connecting to the internet using auto eth0. On the other hand, my Windows 7 side has a few programs that can connect and others that cannot.

Programs which can connect:
Firefox
osu!
Steam Games
Skype
TeamSpeak 3
Programs which cannot connect:
Google Chrome
Steam Browser
Yahoo Messenger
Dungeons and Dragons Online
Here are my computer specs.

Windows: Microsoft Windows 7 6.1.7600
Internet Explorer: 8.0.7600.16385
Memory (RAM): 4096 MB
CPU Info: AMD Phenom(tm) II X2 550 Processor
CPU Speed: 3107.7 MHz
Sound card: Speakers (High Definition Audio
Display Adapters: NVIDIA GeForce GTS 250 (Microsoft Corporation - WDDM v1.1) | NVIDIA GeForce GTS 250 (Microsoft Corporation - WDDM v1.1) | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver
Monitors: 1
Screen Resolution: 1680 X 1050 - 32 bit
Network: Network Present
Network Adapters: Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
CD / DVD Drives: E:SONY DVD RW DRU-V202A
COM Ports: COM1
LPT Ports: NOT Present
Mouse: 3 Button Wheel Mouse Present
Hard Disks: C: 431.8GB | D: 0.0MB
Hard Disks - Free: C: 103.5GB | D: 0.0MB
USB Controllers: 7 host controllers.
Firewire (1394): 1 host controllers.
PCMCIA (Laptops): Not Installed
Manufacturer: American Megatrends Inc.
Product Make: MS-7576
AC Power Status: OnLine
BIOS Info:
Time Zone: US Eastern Standard Time
Battery: No Battery (Desktop)
Motherboard: MICRO-STAR INTERNATIONAL CO.,LTD 790GX-G65 (MS-7576)

Thank you in advance for your assistance.

 

[zigzag3143]

Strange ethernet access problem; some programs connect, others don't.
Hey, everyone. I have a dual boot on my desktop, one half Ubuntu Linux and one half Windows 7 (for gaming compatibility). My Ubuntu Linux side has no problems with any and all of it's programs connecting to the internet using auto eth0. On the other hand, my Windows 7 side has a few programs that can connect and others that cannot.

Programs which can connect:
Firefox
osu!
Steam Games
Skype
TeamSpeak 3
Programs which cannot connect:
Google Chrome
Steam Browser
Yahoo Messenger
Dungeons and Dragons Online
Here are my computer specs.

Windows: Microsoft Windows 7 6.1.7600
Internet Explorer: 8.0.7600.16385
Memory (RAM): 4096 MB
CPU Info: AMD Phenom(tm) II X2 550 Processor
CPU Speed: 3107.7 MHz
Sound card: Speakers (High Definition Audio
Display Adapters: NVIDIA GeForce GTS 250 (Microsoft Corporation - WDDM v1.1) | NVIDIA GeForce GTS 250 (Microsoft Corporation - WDDM v1.1) | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver
Monitors: 1
Screen Resolution: 1680 X 1050 - 32 bit
Network: Network Present
Network Adapters: Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC (NDIS 6.20)
CD / DVD Drives: E:SONY DVD RW DRU-V202A
COM Ports: COM1
LPT Ports: NOT Present
Mouse: 3 Button Wheel Mouse Present
Hard Disks: C: 431.8GB | D: 0.0MB
Hard Disks - Free: C: 103.5GB | D: 0.0MB
USB Controllers: 7 host controllers.
Firewire (1394): 1 host controllers.
PCMCIA (Laptops): Not Installed
Manufacturer: American Megatrends Inc.
Product Make: MS-7576
AC Power Status: OnLine
BIOS Info:
Time Zone: US Eastern Standard Time
Battery: No Battery (Desktop)
Motherboard: MICRO-STAR INTERNATIONAL CO.,LTD 790GX-G65 (MS-7576)

Thank you in advance for your assistance.

What windows firewall and anti virus??

 

[wolvenreign]

Avast! Pro (lastest) for both firewall and antivirus.

It's strange since these programs suddenly stopped working, really. They all once worked fine, then all of a sudden, stopped. :huh:

Edit: Oh, and they all worked under that firewall as well.

 

[wolvenreign]

I've done some troubleshooting with Windows 7's automatic troubleshooting tool, and it says, "The configured proxy server is not responding." I have no recollection of ever setting up a proxy. The problem started rather suddenly as well.

 

[Jacee]

Have you run a virus scan? Download MBam and see what it reports:

Download Malwarebytes' Anti-Malware to your desktop
|MG| Malwarebytes Anti-Malware 1.46 Download
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.

 

[wolvenreign]

Ah, yes, I just finished those steps. Coincidentally, I did it before you suggested it.

There were a few trojans found. (Strange that Avast! Pro didn't pick them up. Is there something wrong with Avast! Pro, I wonder?) I removed them and restarted Windows 7, but the problem remains, unfortunately. Man, I miss Google Chrome on my Windows side.

 

[CarlTR6]

No anti-malware software is 100% perfect. Some find things that others don't and vice versa. Some yield more false positives than others. I scan with a couple and every now and then do an online scan with Trend Micro's Housecall

 

[ickymay]

i have started to see some strange behaviour dual booting Ubuntu Linux and half Windows 7 , if it's not too long a process I would try running windows 7 without ubuntu installed ?

 

[wolvenreign]

Oh, I can't possibly afford to remove my Ubuntu partition. (For anyone who's interested, 10.04 is what I'm currently using since its LTS release, not 9.10.)

Far too much data is stored on my Linux side. Truth be told, I don't trust Windows as a storage medium, especially since EXT4 outdoes NTFS by a mile at the moment. Windows 7 is just a gaming platform for me.

I do also have a problem with the MBR only running the Vista/7 bootmanager, even though I've tried everything to put GRUB back on there. I installed 7 AFTER Ubuntu. But that's probably a story for another thread.

 

[Jacee]

There were a few trojans found

What were/are the Trojans? Backdoor Trojans are designed to steal personal information such as passwords, credit card numbers, compromise your computer to their advantage.

 

[wolvenreign]

Here's the log from Malwarebytes.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4085

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

5/10/2010 11:03:37 AM
mbam-log-2010-05-10 (11-03-37).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 490557
Time elapsed: 8 hour(s), 46 minute(s), 4 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 7
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\BMIMZMHMFM (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\ROUA3O12PW (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bmimzmhmfm (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\roua3o12pw (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

Do you need any more information?

Edit: Oh, and they won't get anything from me. I don't store information on my Windows side because of it's many security vulnerabilities.

 

[Jacee]

Yep, you got a dandy rootkit ThreatExpert Report: Trojan.Generic, Packed.Win32.TDSS.z, Packed.Win32.Krap.x..

 

[wolvenreign]

Whew, nasty. Did Malwarebytes take it out completely? Is there still something I must do to restore functionality?

 

[Jacee]

I would re-install Windows 7 and change all passwords using a known 'clean' computer... not the infected one.

You may also need to flush your DNS cache and restore the Hosts file. Do this:

Copy and paste these lines in Note pad.
@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0
Save as flush.bat to your desktop.

Right click on the batch and run as Administer. Your computer will reboot itself.

 

[wolvenreign]

Hmm, I just completed that second step you asked for. The problem persists. Must I really reinstall Windows 7? It would be quite the pain. I can see how it would restore functionality, but...if there is a less nuclear option, I would be most rapt to hear it.

 

[Jacee]

I don't mess with rootkits. You may be able to work around it, but your computer will never be stable again.

 

[wolvenreign]

Very well. I will reinstall and edit this post when I am finished.

 

[CarlTR6]

I don't mess with rootkits. You may be able to work around it, but your computer will never be stable again.

Excellent advice.