Internet works in safe mode only

tanay97 wrote:

I installed Malwarebytes yesterday and scanned it but no malware detected.

That's unfortunate.

What steps to follow?

Proxies---- Yes 8 of them.

I wrote a little diagnostic program to help show what malware is installed. Download EtreCheckPro from https://www.etrecheck.com and run it. Create a new reply and use the "Notes" tool below to add your EtreCheck report. Using the link above, you can download EtreCheck from the Mac App Store or download EtreCheckPro directly. The Mac App Store version has not yet been updated, so download EtreCheckPro instead. All of EtreCheck's security and malware removal features are available for free.

If malware is installed, EtreCheck will help you remove it, although you may have to supply a password. If you aren’t comfortable with that, just post the EtreCheck report here and other helpers can tell you exactly what files need to be deleted and how to do so.

Disclaimer: EtreCheckPro is my own app. EtreCheckPro is free to use but has in-app purchases available. Downloading EtreCheckPro or using it could give me some form of compensation, financial or otherwise.

Download and run Etrecheck. Etrecheck is a diagnostic tool that was developed by one of the most respected users here in the ASC and recommended by Apple Support  to provide a snapshot of the system and help identify the more obvious culprits that can adversely affect a Mac's performance.

Copy the report

and use the Add Text button to include the report in your reply. How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report

IMPORTANT:

Before running Etrecheck assign Full Disk Access to Etrecheck in the app's Privacy preference pane so that it can get additional information from the Console and log files for the report:

ALSO IMPORTANT:

Then we can examine the report and see if we can determine the root of the problem.

In general, when something only works in Safe Mode that means a third-party app is running in Normal Mode that is causing a problem. It doesn't have to be in log in items. The first culprits would be antivirus, VPN or firewall apps. It could be something else.

It sounds like malware. There has been a big spike recently due to everyone being home. Check your network settings while not in safe mode. Go to System Preferences > Network > Advanced > Proxies. Do you have a bunch of proxies? If so, that’s malware. You will need to remove the malware and then remove the proxies.

Dancin' Brook wrote:

I’d caution about using software being promoted here. If it were available from the App Store at least it would be scanned by Apple. I’m not saying it is bad but promoting an app here after being the only person suggesting malware seems a bit off, and perhaps even against forum guidelines.

EtreCheck is on the App Store. Here is the direct link: https://itunes.apple.com/app/etrecheck/id1423715984?ls=1&mt=12

But I just released an update yesterday. And since everyone at Apple is working from home, it may be some time before the update arrives in the store. One of the bug fixes in these new builds is to report these proxies as a major issue. Additionally, the Mac App Store version runs in the Mac App Store sandbox. One of the biggest impacts on this is with adware and malware removal. Sometimes it can still remove adware and malware, but sometimes I can only provide buttons to access the relevant files in the Finder, from whence the user can drag them to the trash. Alas, in some cases, this it NOT sufficient to remove adware and malware. EtreCheckPro doesn't have those Mac App Store limitations, so it can more easily remove adware and malware.

To be honest, this does sound like the malware proxy issue. It is becoming more and more popular. Normally, when I suspect malware is involved, I will post a link to Malwarebytes myself. I thoroughly despise adware and malware and don't want to deal with it. But it is a significant problem, so EtreCheck does what it can to help the user detect and remove it. I only suggested EtreCheck because the OP had already tried Malwarebytes and it didn't work.

And in any case, EtreCheck won't do any harm. I would be happy to provide any additional information or evidence. But I would ask that you start a new question or e-mail directly to avoid side-tracking the OP's problem.

And speaking of forum guidelines, since I included that link, I need another disclaimer...

Disclaimer: EtreCheck is my own app. EtreCheck is free to use but has in-app purchases available. Downloading EtreCheck or using it could give me some form of compensation, financial or otherwise.

tanay97 wrote:

Sirji, It shows me to pay for all the reports... :D

I’m not sure what you mean. All of the security and malware removal features of EtreCheck are free. Just go to the “Security” page.

The idea is that you will post your EtreCheck report here. Then we can give you precise instructions about exactly what files to remove.

tanay97 wrote:

He is the person who helped lot of people like me and not you lot.

I'm glad you found the problem. However, had you followed etrecheck's advice…

etresoft wrote:

It sounds like malware. There has been a big spike recently due to everyone being home. Check your network settings while not in safe mode. Go to System Preferences > Network > Advanced > Proxies. Do you have a bunch of proxies? If so, that’s malware. You will need to remove the malware and then remove the proxies.

…and posted an etrecheck report as suggested, the problem could have been fixed 15+ hours earlier.

It wouldn't be VLC. When you uninstalled Zoom & Lingo did you uninstall all their components or just delete the apps from the Applications folder?

It's possible, even likely, that Internet communications have been affected by an unprecedented amount of activity at times that weren't so affected before. You may be experiencing a manifestation of that. Peak activity periods have shifted. There hasn't been any overwhelming increase (data consumption is on the order of 10% greater than a year ago), but when it doesn't work... it doesn't work. You're not likely to get any warning signs.

It's also possible, quite certain in fact, that bad guys seeking to exploit others now have a lot of idle time on their hands. The usual phishing and related social exploits that existed since the dawn of civilization have increased in popularity. Additional exploits are certain to arise. So, even though it's unrelated to your present difficulties it's a good time to review your defenses.

"Basic Connectivity Failure" is what it says. The other "Review..." entry is always present.

Given the fact that you don't have the problem in "Safe Mode" EtreCheck is likely to provide additional information that you can act upon. Be sure to run it in normal mode (not "Safe Mode").

---

It's unfortunate this Discussion became derailed but that happens from time to time. It's wise to question people's motivation for recommending this or that product, but everyone's been above board in that regard. That is not always the case. There aren't any bad guys here, just a bit of information asymmetry that will vanish in the light of knowledge.

If you have reason to believe this Discussion has become distracted to the point it is no longer helpful to you though, just start another. No one will mind.

Alway use app developers instructions for removing apps. Or use something like App Zapper.

Try following additional steps here:

https://support.apple.com/en-us/HT201262

Try Kappy’s list here?:

https://discussions.apple.com/thread/251220048?answerId=252339719022#252339719022

https://support.apple.com/en-us/HT201262

Alright. Now at the moment, what else steps I should follow to troubleshoot it except installing the OS again?

Installing the OS again will not remove any third-party system mods that are causing the problem. You must remove them yourself.