Can't post on cB. Options

[xquizit]

O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z.net/content.info.apple...iTunesSetup.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m...84/mcinsctl.cab
O16 - DPF: {7ED7005B-4AF6-4CFF-9AE0-F243C4B8260F} (HouseCallButton.setup) - http://de.trendmicro-europe.com/file_downl...eCallButton.CAB
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m...,21/mcgdmgr.cab

[xquizit]

O23 - Service: Adobe LM Service - Unknown owner - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ColdFusion MX Application Server - Macromedia Inc. - D:\CFusionMX\runtime\bin\jrunsvc.exe
O23 - Service: ColdFusion MX ODBC Agent - Unknown owner - D:\CFusionMX\db\slserver52\bin\swagent.exe
O23 - Service: ColdFusion MX ODBC Server - Unknown owner - D:\CFusionMX\db\slserver52\bin\swstrtr.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - D:\WINNT\System32\dmadmin.exe
O23 - Service: Iomega App Services - Iomega Corporation - D:\PROGRA~1\Iomega\System32\AppServices.exe

[xquizit]

O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - d:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - D:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - d:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - D:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFSERVICE.exe
O23 - Service: Pml Driver - HP - D:\WINNT\system32\HPHipm09.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

[xquizit]

whew. that took forever. it wouldn't even let me fast reply the entire thing. so i had to do it in sections. sorry about that.

[ryanoman]

Hi Roxanne... please place a check (in HijackThis) next to anything related to Siber Systems or RoboForm (unless you want it, but it seems like spyware). See if that works.

[*kryogenix*]

i'm looking at some of those BHOs. Are all of those legit?

[xquizit]

The only ones I recognize are SpyBot and Roboform. Should I go ahead and fix them? How about that URLSearchHook thing?

[ryanoman]

Nevermind, Roboform should be okay. I would fix:

O9 - Extra 'Tools' menuitem: Cyber-Defender - {68E69D9F-63C9-4C32-A53B-CBE1D5A5903E} - D:\Program Files\UWCDS\uwcds4ie.htm (file missing)

O9 - Extra button: UCmore Info - {33740AEB-2856-4004-B84B-37E2C0D4F13D} - D:\Program Files\UC Info\WebBand.dll

O9 - Extra button: (no name) - {68E69D9F-63C9-4C32-A53B-CBE1D5A5903E} - D:\Program Files\UWCDS\uwcds4ie.htm (file missing)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {3EF86E29-C166-28B3-875E-67557BA67A3C} - D:\WINNT\system32\sfsmjsmo.dll (file missing)

O2 - BHO: Cyber-Defender for Internet Explorer - {68E69D9D-63C9-4C32-A53B-CBE1D5A5903E} - D:\Program Files\UWCDS\uwcdsbho.dll (file missing)

If you know what they are, then feel free to leave them.

[dispn0ygonekrazy]

hold on buddy you missing important steps, Roxanne hold on dont remove anything from ryanamo yet. I will put a fix for you becuase you have some quite infections

[dispn0ygonekrazy]

Hello Roxanne,

Please following the following steps below so we can get your computer fixed up

Download, install, DOnt Run YET! CleanUp!

Run this online virus scan: ActiveScan - Save the results from the scan!

Download CWShredder here to its own folder.

Update CWShredder

* Open CWShredder and click I AGREE
* Click Check For Update
* Close CWShredder

Please download ewido security suite it is a trial version of the program.

• Install ewido security suite
• When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will prompt you to update click the OK button
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Click on Start

The update will start and a progress bar will show the updates being installed.
Once the updates are installed do the following:

• Click on scanner
• Make sure the following boxes are checked before scanning:
  • Binder
  • Crypter
  • Archives
• Click on Start Scan
• Let the program scan the machine

While the scan is in progress you will be prompted to clean files, click OK

Once the scan has completed, there will be a button located on the bottom of the screen named Save report

• Click Save report
• Save the report to your desktop

Boot into Safe Mode:
Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

Now run CWShredder. Click I Agree, then Fix and then Next, let it fix everything it asks about.

Now also run CleanUp! while your in safe mode and do a scan.

Reboot your machine and post back a new HJT log and the ewido .txt log file you saved.

[xquizit]

http://www.createblog.com/forums/index.php?showtopic=83878





So... I figured out what the problem was. I told my dad that my internet's been acting funny since yesterday and then he mentioned that he just connected the router yesterday. So he removed the router, installed a cable connection, and voila... everything is back to normal. Think you guys know what the problem may have been?

But I really do appreciate the help you've offered. Thanks a lot! Now I know where to go if I ever have any more weird computer problems. I'm going to clean up my computer as you guys had suggested anyhow. Thanks again!

[ryanoman]

Maybe your router had some kind of firewall or something, but I don't know if it would cause this kind of problem or not. Anyway, I'm glad that you got the problem fixed.

[*kryogenix*]

maybe it was a problem with the NAT configuration on the router.

[ryanoman]

Actually I think Cyber-Defender is good.

[moomoognu]

maybe it was a problem with the NAT configuration on the router.

As I read this topic, that's what I was thinking all along. I don't know if it's right, but it's what came to mind.

[dispn0ygonekrazy]

Sometimes if it is the router you have to the updates for it online, happens to me with my linksys if it starts acting up i have to update the Frame.