Can't post on cB. Options

[*Azarel*]

Alrighty then, so something's up with Roxanne's IE and she can't post new topics or with add reply on createBlog. I think she cleared her cookies so that she can reply with fast reply now.. but uh. Does anyone know what's wrong?

Feel free to post to clarify, Roxanne.

[*kryogenix*]

time for firefox!

so what's the problem? what error messages come up?

[*Azarel*]

time for firefox!

so what's the problem? what error messages come up?

[19:18:21 PM] FemmeFatale1983: like on ie, i just go to the ie error page thingie
[19:18:27 PM] FemmeFatale1983: "this page cannot be displayed"
[19:18:54 PM] FemmeFatale1983: and on firefox
[19:19:01 PM] FemmeFatale1983: i get an alert box
[19:19:07 PM] FemmeFatale1983: "The document contains no data."

[19:19:30 PM] FemmeFatale1983: i can fastreply
[19:19:49 PM] FemmeFatale1983: but not via "add reply" or create a new topic or even accept/reject skins

[dispn0ygonekrazy]

Alright im guessing she might have some kind of infection so look at my signature and download HiJAck This and Spybot S&D (for spybot install it and update all its definitions or what it needs then do a scan.

[xquizit]

^ gotcha. running spybot now.

[xquizit]

didn't work guys. still need help.

[jnukes]

hey i gett those errors on firefox all tha time .. but usually, i just wait a few seconds .. & then refresh & tha page loads up

i dont think its any virus, just internet problems ?

[dispn0ygonekrazy]

all right roxanne if its an internet problem then it has something to do within your computer if you downloaded JiJack This earlier I would like you to save it in a permanent folder(I.E C:\Hijack This) for backup issues and click on do a scan and save logfile, when notepad pops up after the scan copy and paste all the things in notepad and post it here in the same thread.

[*mipadi*]

[19:18:21 PM] FemmeFatale1983: like on ie, i just go to the ie error page thingie
[19:18:27 PM] FemmeFatale1983: "this page cannot be displayed"
[19:18:54 PM] FemmeFatale1983: and on firefox
[19:19:01 PM] FemmeFatale1983: i get an alert box
[19:19:07 PM] FemmeFatale1983: "The document contains no data."

[19:19:30 PM] FemmeFatale1983: i can fastreply
[19:19:49 PM] FemmeFatale1983: but not via "add reply" or create a new topic or even accept/reject skins

Sometimes if you hit refresh a couple times, that error goes away. It has something to do with a dropped connection to the database.

[xquizit]

I've been hitting refresh for 2 days. Still not working. I'm trying to fast reply my error log from Hijack This but it won't let me. But yet, I can fast reply this.

Oh yeah, and it's not only Createblog. I can't post in other forums and my sister hasn't been able to post new entries in Xanga either. I can't edit my posts, I can't quote others' posts, I can't reply unless I use Fast Reply, etc. etc.

[xquizit]

oh, and i think this is probably related but i can't log into hotmail either....

[*kryogenix*]

did you make a restore point from when before things went awry?

[racoons > you]

I can't quote others' posts

have you tried manually typing out the quotes tag things?

its tedious, but it might do as a temporary measure to at least cure part of the problem

[xquizit]

kryo, no i didn't, unfortunately.

james, i usually just hit the quote link and it takes me to the add reply page. i copy the quoted text, hit back, and paste it in fast reply. heh. but i just brought it up so those who can help can get a better description of the problem.

see, the problem is hitting submit.

[xquizit]

Logfile of HijackThis v1.99.1
Scan saved at 1:34:51 PM, on 6/3/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
D:\WINNT\System32\smss.exe
D:\WINNT\system32\winlogon.exe
D:\WINNT\system32\services.exe
D:\WINNT\system32\lsass.exe
D:\WINNT\system32\svchost.exe
D:\WINNT\system32\spoolsv.exe
D:\WINNT\System32\msdtc.exe
D:\CFusionMX\runtime\bin\jrunsvc.exe
D:\CFusionMX\db\slserver52\bin\swagent.exe
D:\CFusionMX\runtime\bin\jrun.exe
D:\CFusionMX\db\slserver52\bin\swstrtr.exe
D:\CFusionMX\db\slserver52\bin\swsoc.exe
D:\WINNT\System32\svchost.exe
D:\PROGRA~1\Iomega\System32\AppServices.exe
d:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFSERVICE.exe

[xquizit]

D:\WINNT\Explorer.EXE
D:\WINNT\system32\regsvc.exe
D:\WINNT\system32\MSTask.exe
D:\WINNT\System32\tcpsvcs.exe
D:\WINNT\System32\snmp.exe
D:\WINNT\system32\stisvc.exe
D:\WINNT\System32\WBEM\WinMgmt.exe
D:\WINNT\System32\mqsvc.exe
D:\WINNT\System32\svchost.exe
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
D:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
D:\PROGRA~1\mcafee.com\agent\mcagent.exe
d:\progra~1\mcafee.com\vso\mcvsescn.exe
D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFTRAY.EXE
D:\Program Files\iTunes\iTunesHelper.exe
D:\Program Files\MSN Messenger\msnmsgr.exe

[xquizit]

D:\Program Files\AIM\aim.exe
D:\Documents and Settings\alfcyn labajo\Desktop\FreeRAM XP Pro 1.40.exe
D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
D:\Program Files\LimeWire\LimeWire 4.2.6 Pro\LimeWire.exe
D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFAGENT.EXE
d:\PROGRA~1\mcafee.com\vso\mcshield.exe
D:\Program Files\iPod\bin\iPodService.exe
d:\progra~1\mcafee.com\vso\mcvsftsn.exe
D:\PROGRA~1\HEWLET~1\PHOTOS~1\HPSHAR~1\hpgs2wnf.exe
D:\Program Files\Maxthon\Maxthon.exe
D:\Program Files\Macromedia\Dreamweaver MX\Dreamweaver.exe
D:\Program Files\Adobe\Photoshop CS\ImageReady.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\PROGRA~1\WINZIP\winzip32.exe
D:\HiJackThis\HijackThis.exe

[xquizit]

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R3 - URLSearchHook: (no name) - _{20EC3D2D-33C1-4C9D-BC37-C2D500688DA2} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {3EF86E29-C166-28B3-875E-67557BA67A3C} - D:\WINNT\system32\sfsmjsmo.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Cyber-Defender for Internet Explorer - {68E69D9D-63C9-4C32-A53B-CBE1D5A5903E} - D:\Program Files\UWCDS\uwcdsbho.dll (file missing)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar2.dll

[xquizit]

O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINNT\System32\msdxm.ocx
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - D:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - d:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll

[xquizit]

O4 - HKLM\..\Run: [WinUpdateProtection] c:\windowsupdate\ufp\mw7\csrss.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SSC_UserPrompt] D:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NAV Agent] D:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [VSOCheckTask] "d:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "d:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] d:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] D:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPFExe] D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFTRAY.EXE

[xquizit]

O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] D:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [McRegWiz] d:\PROGRA~1\mcafee.com\agent\mcregwiz.exe /autorun
O4 - HKLM\..\RunServices: [SchedulingAgent] D:\WINNT\system32\mstask.exe
O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AIM] D:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [] c:\windowsupdate\ufp\irs7\csrss.exe
O4 - HKCU\..\Run: [WinUpdateProtection] c:\windowsupdate\ufp\mw7\csrss.exe
O4 - HKCU\..\Run: [FreeRAM XP] "D:\Documents and Settings\alfcyn labajo\Desktop\FreeRAM XP Pro 1.40.exe" -win
O4 - HKCU\..\Run: [RoboForm] "D:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Global Startup: LimeWire 4.2.6 Pro.lnk = D:\Program Files\LimeWire\LimeWire 4.2.6 Pro\LimeWire.exe

[xquizit]

O8 - Extra context menu item: &Google Search - res://d:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://d:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Customize Menu - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Cyber-Defender - D:\Program Files\UWCDS\uwcds4ie.htm
O8 - Extra context menu item: Fill Forms &] - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Save Forms &[ - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Similar Pages - res://d:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://d:\program files\google\GoogleToolbar2.dll/cmtrans.html

[xquizit]

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: TREND MICRO HouseCall - {2B5EA4F8-620A-4A8B-B003-4C8C5EBEA826} - http://uk.trendmicro-europe.com/enterprise...usecall_pre.php (file missing)
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms &] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html

[xquizit]

O9 - Extra 'Tools' menuitem: Save Forms &[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: UCmore Info - {33740AEB-2856-4004-B84B-37E2C0D4F13D} - D:\Program Files\UC Info\WebBand.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: (no name) - {68E69D9F-63C9-4C32-A53B-CBE1D5A5903E} - D:\Program Files\UWCDS\uwcds4ie.htm (file missing)
O9 - Extra 'Tools' menuitem: Cyber-Defender - {68E69D9F-63C9-4C32-A53B-CBE1D5A5903E} - D:\Program Files\UWCDS\uwcds4ie.htm (file missing)
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar &R - {724d43aa-0d85-11d4-9908-00400523e39a} - file://D:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

[xquizit]

O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\AIM\aim.exe
O9 - Extra button: Help - {362F3629-2906-49FA-8084-1AC4309474E5} - http://www.comcast.net/memberservices/ (file missing) (HKCU)
O9 - Extra button: Support - {7CD5773D-E635-4653-A660-4CD76617B0AD} - http://www.comcastsupport.com (file missing) (HKCU)
O9 - Extra button: ComcastHSI - {F83DAA10-3072-4412-ACA4-B9B8D320AA48} - http://www.comcast.net (file missing) (HKCU)
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net

[xquizit]

O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z.net/content.info.apple...iTunesSetup.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m...84/mcinsctl.cab
O16 - DPF: {7ED7005B-4AF6-4CFF-9AE0-F243C4B8260F} (HouseCallButton.setup) - http://de.trendmicro-europe.com/file_downl...eCallButton.CAB
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m...,21/mcgdmgr.cab

[xquizit]

O23 - Service: Adobe LM Service - Unknown owner - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ColdFusion MX Application Server - Macromedia Inc. - D:\CFusionMX\runtime\bin\jrunsvc.exe
O23 - Service: ColdFusion MX ODBC Agent - Unknown owner - D:\CFusionMX\db\slserver52\bin\swagent.exe
O23 - Service: ColdFusion MX ODBC Server - Unknown owner - D:\CFusionMX\db\slserver52\bin\swstrtr.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - D:\WINNT\System32\dmadmin.exe
O23 - Service: Iomega App Services - Iomega Corporation - D:\PROGRA~1\Iomega\System32\AppServices.exe

[xquizit]

O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - d:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - D:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - d:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFSERVICE.exe
O23 - Service: Pml Driver - HP - D:\WINNT\system32\HPHipm09.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

[xquizit]

whew. that took forever. it wouldn't even let me fast reply the entire thing. so i had to do it in sections. sorry about that.

[ryanoman]

Hi Roxanne... please place a check (in HijackThis) next to anything related to Siber Systems or RoboForm (unless you want it, but it seems like spyware). See if that works.

[*kryogenix*]

i'm looking at some of those BHOs. Are all of those legit?

[xquizit]

The only ones I recognize are SpyBot and Roboform. Should I go ahead and fix them? How about that URLSearchHook thing?

[ryanoman]

Nevermind, Roboform should be okay. I would fix:

O9 - Extra 'Tools' menuitem: Cyber-Defender - {68E69D9F-63C9-4C32-A53B-CBE1D5A5903E} - D:\Program Files\UWCDS\uwcds4ie.htm (file missing)

O9 - Extra button: UCmore Info - {33740AEB-2856-4004-B84B-37E2C0D4F13D} - D:\Program Files\UC Info\WebBand.dll

O9 - Extra button: (no name) - {68E69D9F-63C9-4C32-A53B-CBE1D5A5903E} - D:\Program Files\UWCDS\uwcds4ie.htm (file missing)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {3EF86E29-C166-28B3-875E-67557BA67A3C} - D:\WINNT\system32\sfsmjsmo.dll (file missing)

O2 - BHO: Cyber-Defender for Internet Explorer - {68E69D9D-63C9-4C32-A53B-CBE1D5A5903E} - D:\Program Files\UWCDS\uwcdsbho.dll (file missing)

If you know what they are, then feel free to leave them.

[dispn0ygonekrazy]

hold on buddy you missing important steps, Roxanne hold on dont remove anything from ryanamo yet. I will put a fix for you becuase you have some quite infections

[dispn0ygonekrazy]

Hello Roxanne,

Please following the following steps below so we can get your computer fixed up

Download, install, DOnt Run YET! CleanUp!

Run this online virus scan: ActiveScan - Save the results from the scan!

Download CWShredder here to its own folder.

Update CWShredder

* Open CWShredder and click I AGREE
* Click Check For Update
* Close CWShredder

Please download ewido security suite it is a trial version of the program.

• Install ewido security suite
• When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will prompt you to update click the OK button
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Click on Start

The update will start and a progress bar will show the updates being installed.
Once the updates are installed do the following:

• Click on scanner
• Make sure the following boxes are checked before scanning:
  • Binder
  • Crypter
  • Archives
• Click on Start Scan
• Let the program scan the machine

While the scan is in progress you will be prompted to clean files, click OK

Once the scan has completed, there will be a button located on the bottom of the screen named Save report

• Click Save report
• Save the report to your desktop

Boot into Safe Mode:
Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

Now run CWShredder. Click I Agree, then Fix and then Next, let it fix everything it asks about.

Now also run CleanUp! while your in safe mode and do a scan.

Reboot your machine and post back a new HJT log and the ewido .txt log file you saved.

[xquizit]

http://www.createblog.com/forums/index.php?showtopic=83878





So... I figured out what the problem was. I told my dad that my internet's been acting funny since yesterday and then he mentioned that he just connected the router yesterday. So he removed the router, installed a cable connection, and voila... everything is back to normal. Think you guys know what the problem may have been?

But I really do appreciate the help you've offered. Thanks a lot! Now I know where to go if I ever have any more weird computer problems. I'm going to clean up my computer as you guys had suggested anyhow. Thanks again!

[ryanoman]

Maybe your router had some kind of firewall or something, but I don't know if it would cause this kind of problem or not. Anyway, I'm glad that you got the problem fixed.

[*kryogenix*]

maybe it was a problem with the NAT configuration on the router.

[ryanoman]

Actually I think Cyber-Defender is good.

[moomoognu]

maybe it was a problem with the NAT configuration on the router.

As I read this topic, that's what I was thinking all along. I don't know if it's right, but it's what came to mind.

[dispn0ygonekrazy]

Sometimes if it is the router you have to the updates for it online, happens to me with my linksys if it starts acting up i have to update the Frame.