Can only connect locally

Hopefully the smart guys will check in, but to me, that makes me think that the issue isn't the computer, but it is being blocked from the internet by the wi-fi side of your router.  I'm thinking there is a good chance it will work on an open router - but the Tech boys will know more about that.

This is really odd. I am glad you were able to connect via Ethernet but am concerned MBAM found 33 more items when you system was just cleared through Malware Removal. What sort of items?

You said you were using "Windows Antivirus". I am not familiar with any such product. Do you mean Microsoft Security Essentials (MSE)?

What firewall?

Wireless networking and Ethernet networking use different ports on your computer and go through different ports on your router. If you are certain you are connecting to your local network where other computers can see this computer and this computer can see them - but you still cannot access the Internet, then I am still leaning towards a configuration problem with the computer.

What is the assigned IP address to this computer when using wireless? It should start with 192.

Digerati,

 

I had just obtained a update for MBAM and reran.  Not sure what they were.  pup items I think.

 

Yes I do in fact mean MSE.  I can never remember the name of it.  Unless it is Windows Defender?  Icon is a green fort/castle in the systray.

Windows firewall.

 

I did bring the laptop with me to work. (Library) and on lunch I tried to connect to the library's wifi.  I received the same type of connection.  "Local only".

 

I will have to check the IP when I get home. 

pup items I think

 

Hopefully that is all.

 

Yes I do in fact mean MSE.  I can never remember the name of it.  Unless it is Windows Defender? 

 

Yeah, well Microsoft sure does not help to avoid confusion with their naming schemes.

 

Note there are two different Windows Defenders. The one that works with W7 and before is an anti-spyware program only. If you have MSE installed in W7, Vista and earlier Windows, you don't need Windows Defender because anti-spyware code is built into MSE.

 

If you have Windows 8 or Windows 10, they come with the new Windows Defender which is really an enhanced MSE.

 

So with Vista you have MSE.

 

I did bring the laptop with me to work. (Library) and on lunch I tried to connect to the library's wifi.  I received the same type of connection.  "Local only".

 

Then this is again pointing to a Windows Firewall setting.

OK so when I get home, I should go into the security setting and take a look at the firewall settings?

If me, I would disable the firewall, and as quickly as possible, try to visit www.google.com then exit my browser and enable the firewall again. If I can reach Google, the problem is a firewall setting. Do NOT leave your firewall disabled.

 

Have you tried a different browser?

Hi Digerati,

 

Just so you know this was one heck of an infected computer, the owner did a real job on this one, removed so much stuff it was unbelievable . I am sure it left damage behind.

 

Under Firewall Rules on the FRST Additions log,  IE was blocked and I unblocked it with a FRST Fixlist. I didnt see any mention or FF or Chome being blocked

 

FirewallRules: [TCP Query User{B7F8A776-007E-4C64-A28F-550E9D4602C5}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{875B22E8-B606-4C64-98EB-E19F3D004A9B}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exe

 

Under installed programs I dont see a firewall so it must be just the windows firewall

IE was blocked? Not good.

 

I might suggest running sfc /scannow and also try a different browser and see what happens.

 

Sadly, when a computer is so highly infected there is too much collateral damage from the malware itself, and from the malware removal process. I really hate to suggest a format and OS re-install in these malware cases because (1) that is pretty much admitting defeat and (2) many users today don't have the Windows installation disks. But that may be what is needed in this case.

Ok here is the firewall test results:

 

Booted up. Turned wifi button off.  Went in and turned windows firewall off.  Connected to my guest login in.  Got full connection.  Disconnected the connection.  Turned windows firewall back on and reconnected to my guest connection.  Still was able to get a full connection. 

Disconnected this connection and tried to connect to my secured regular home connection.  Only received a local connection.  Tried the guest again right away and received again a full connection.

Disconnected again.  Turned off once again the firewall, and retried to connect to the secured connection.  Once again only able to get a local connection. 

 

So I am confused.  Is the laptop "ok" (for what it has been through)? And there is just some 'glitch' with my secure connection or is there something still very wrong?  With regard to formatting and reinstalling, have no access to any discs etc… to do that.  Would a system restore to factory settings accomplish this near enough?

 

Thoughts?

 

Oh and Bill?  Thank you for your service!!! {Army brat here, with LARGE family presence past and present service}

Interesting topic here!

 

As I understand it, the situation is as follows:

 

1 Internet works fine on Ethernet connection to your router

2 Internet works fine on wifi connection to your router using "Guest" account on the router

 

3 Internet will not connect on regular secured account on router via wi fi (but will on Guest account)

4 Internet will not connect at local library

5 The computer is running Vista…

 

This is how we would proceed if this machine came into our workshop;

 

1 Try a different router/modem/wireless access Point making sure its using wireless 802b and not being restricted to "N"….. and without any encryption (for a short test only) if this works Ok then apply WAP TKIP encryption and check again (not WAP2) if this doesn't work at all using the different router/modem/wireless access Point then its a format and reinstall of the operating system (making sure that the back ups are comprehensive, include everything needed or wanted on the computer, all up to date and with at least one copy kept securely, validated, and offsite.

 

2 if you do get a result from step 1 then its likely your router is set up incorrectly… double check that transmission is not being restricted to wireless "n" only  here's what my data sheets say..

 

NOTE
If you select Wireless-N Only, you may need to temporarily change
your network settings to Mixed to provide access to guests without
Wireless-N networking.

 

If you find you do need to format and reinstall your operating system then there is a fair chance that there is a hidden system partition on the hard drive that will allow this to be done easily and quickly ( often it takes only 15 minutes or so) HOWEVER if this is an older computer as is likely it will be necessary to do all relevant Windows updates and depending on the speed of your Internet connection this could take many many hours of work (there will be several hundred updates to do)  with a fair few reboots and configurations to be done, well over a Gb of data to be downloaded, and then there is the installation of your security products, anti virus etc., and their updating and then the job of reinstalling all your applications, Microsoft Office, image editing applications and the like. finally its the copying across of all the backed up data files, (docs photos music videos etc that can seem to take forever.

 

It would be wise to allow for several days of fairly continuous work, to complete everything to a fair standard.

 

If you post back with details of your computer, make and exact model number then we will check if there machine was usually shipped with a recovery partition and provide you with details on how to access it.

 

regards

paws

Was not able to complete step 1 above.  Did not have access to a router other than mine where I could make any changes and/or switch from secure to guest/open modes.

 

I did however go my my routers admin page and checked the settings.  All things are currently MIXED.  No changes have been made.

 

As for the culprit laptop:

HP Pavilion dv-7-1232nr Entertainment Notebook PC

ATI Raedeon HD 3200 Graphics with 1918MB

AMD Turion X2 Dual Core Mobile RM-74 2.0 GHz

Windows Vista Home Premium, Service PAck 2

Memory 4.0 GB

64 Bit Operating System

s/n CND852263M

Ok, all understood.

Its your call on how you want to proceed, but I'd recommend you get hold of a known working modem/routerwireless/access point as a first step.

Maybe you can borrow one from a chum?

 

If you do decide to "restore to factory" (yes the computer does normally ship with a restore partition) then i'd recommend you first use chkdsk with the r switch from a command prompt with elevated privileges to make sure there are no obvious faults with the hard drive. The command is chkdsk /r

note the space it needs to be there accept the warning press Y press enter type

exit

press enter and restart your computer

 

Chkdsk will need several hours to run ( DO NOT try and interrupt it or allow power to be removed from the computer whilst chkdsk is running) when its finished it will restart your machine. You could then run sfc /scannow from the same elevated privileges command prompt and this will check for any missing or damaged windows protected system files…. Both of these tools are automatic in their actions they will repair what they can without you having to take any extra actions.

 

Once you have tried a fresh router and if you want to restore to factory then here's the instructions… but do make sure your back ups including your wireless and wired network drivers are included in your back ups and everything in in good shape and that your have made the "recovery discs" as these are useful extra "insurance"

 

http://support.hp.com/us-en/product/HP-Pavilion-dv7-Entertainment-Notebook-PC-series/3837623/model/3866476/document/c00809678

 

Regards

paws

.

Will look into those options when I get off work thanks for the suggestions.

 

Do you think that they will be able to use it at this point?  Since I can connect and surf etc on a guest.  Do you think it "unkind" or unfinished,  if I gave it back to them and asked to see how it responds on their set up?

 

Or could I do a restore without having tried the alternate router? Should I restore it?   And would it be possible for a "visual" of the elevated privileges?  I have not heard that expression before.  Is it just from the plain C:\ prompt?  And do you suggest running these checks no matter what choice are made, as another check on the machine?

 

Thank you…

Hi Mickey

No, I certainly don't think its unkind…. they messed up the computer, failed to give you a clear indication of the issues and with Ken's and the other experts help here on the forum have done a good job.

 

As to running chkdsk /r and also sfc /scannow, its not a bad idea to do this fairly regularly (say every 3 months or so)

for the command prompt with elevated privileges try this:

 

to launch an elevated command prompt, simply press the Win key; type cmd; press Ctrl+Shift+Enter; and then hit Alt+C to confirm the elevation prompt

 

As to restoring to factory, its a good idea to check the hard drive for consistency using chkdsk /r before undertaking several days of work doing all the updating work required…( no point in restoring to factory if the hard drive is on its way out and will need replacing in the near future)

 

Having the owners test the machine on their own router/home network is a useful test in itsself….

 

Dont' forget also that Vista has considerably less than 2 years of life left in it, before Microsoft pulls the plug on supporting it….. when it will be wise to either not use that computer unless totally isolated from other computers and the Internet, or a new operating system is installed or a new computer purchased.

 

Regards

paws

Didn't watch the whole running of the scans but I did look like it reclaimed some stuff and I do know there were no bad sectors and the like.  Will be contacting the owners to have them take it for a home test.  Hopefully I can report back to close this in the next few days.