Hi everybody.Well this forum is my last help,as I have tried almost everything (i know) .I am encountering a login problem with my Yahoo and MSN messenger all of the sudden.This is my only problem.I can browse freely.The odd thing is I am using a Speedtouch Router connected via USB.From the same router my girlfriend is connected via Ethernet cable.From her connection there is NO problem whatsoever,logging in Yahoo and MSN messenger! So I am guessing that it's either a virus or my port is closed.The thing is i don't have a clue on what to do.I uninstalled both messengers and installed again but no luck.Maybe it's the routers firewall but 2 days ago everything was working fine.I am using ZoneAlarm and Bitdefender (was using it before without any problems and my girlfriend's laptop has them too).There firewalls are configured to allow the messengers.I will include a screenshot of what I encounter along with a report:





EWIDO found these:



I have used CCleaner too!

Any help will be very helpfull.Thank You all for your time!

Attached Files

hijackthis.log (9.2 KB, 3 views)

Hey there Malestrom welcome to Pchf,that looks like some infection you have there, none of the Secruity team is online at the moment but should be soon,

by the way can you post the ewido log too.



PS: Thanks for adding screenshots . While were waiting try some of these

Solution 1
Reinstalling the network card and strangely that seems to do the trick! If it doesn’t work for you, give the below solutions a try.
Solution 2
Try removing any proxy settings, you can do this by following these steps.
1) Open up Internet explorer
2) Click the tools menu, then Internet options
3) Select the connections tab
4) Click the “LAN Settings” button
5) Ensure “Automatically Detect Settings” checkbox is ticked
6) Untick “Use a proxy server for your LAN …” if checked
7) Click ok, then ok
8) Start up MSN and give it a whirl!
Solution 3
Check your windows System clock and ensure it’s set to the correct time and date.
Solution 4
Has your Norton subscription run out? Some people have reported this will stop MSN from working. (Not sure why … so don’t ask)
Solution 5
You can try resetting your Internet Security properties to defaults.
1) Open up Internet explorer
2) Click the tools menu, then Internet options
3) Select the security tab
4) Click the Restricted sites icon
5) Ensure MSN.com or hotmail.com isn’t on that list. If so, remove it. Click ok.
6) Select the Internet Icon and click the “Default Level” button. This will return your Security settings to the default level.
7) Click ok, close down IE and MSN and then try launching MSN.
Solution 6
Try and isolate the problem, find out whats causing the the error. If you have norton, turn it off. Does the problem still appear? If not, it looks like Norton is blocking it. Read the Norton manual and find out how to allow programs to access the Internet. This applies to Zonealarm, and other firewall programs.
Solution 7
Try to register softpub.dll using regsvr32.exe.
1.Press Start>Run
2.Type regsvr32 softpub.dll
3.Press Enter & Restart Messenger.
Solution 8
1. If you have Norton installed, run LiveUpdate, make sure you have most current version.
2. Delete your Quaruntine and Backup files in Norton.
3. Reboot computer

I am including my EWIDO report.I am using Firefox 1.5.0.2.I have included some more screenshots.





This last one is in Greek so I will tell you what it approximatly says.



You are using a "mediator" (if that's the right word,my english has gone a little rusty!) for your LAN.

Address: 10.0.0.138(I know this is my Routers configuration page because i have accsess to it)

Port:13662( Maybe this is the problem?)

I have an option for "automatic" detection,manual settings and on the bottom
I ahve an option to "bypass" these configurations above.

I hope these will help you (and me) further on.

Attached Files

Report-Scan-20060923-164032.txt (41.5 KB, 1 views)

Hya Mettalica.

Is this something you downloaded yourself and know of?

C:\Documents and Settings\Metallica\Τα έγγραφά μου\Phones Stuff\viris.rar

Either way, I would strongly advice to delete it.



Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).

Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP