REALLY Frustrating Problem PLEASE help.

Savestheday1703 · #1 (**permalink**) 02-10-2004, 01:57 PM

Ok. This problem is REALLY REALLY weird and very annoying. It seems like there is NO internet connection to any program in my computer that REQUIRES a connection other than Internet Explorer, and AOL Instant Messanger. The Guide in Media PLayer won't load NOR will it play files linked from any website such as Ebaumsworld.com (video files.) Any music downloading programs are unable to establish a connection with the internet. Windows is unable to make updates from the websites, and I am unable to get into my AOL or Hotmail E-mail accounts.

Is there a possibility that perhaps when I was deleting spyware I deleted some sort of Protocol needed for these things? I am COMPLETELY out of ideas as to what the problem is or how to fix it, and it's really frustrating.

Edit:

Yeah, and now I just updated my version of AOL Isnatnt messanger and it won't let me sign on. Something is seriously wrong with the connection of the internet to my software on my computer. I'm ready to cry.

DJNafey · #2 (**permalink**) 02-10-2004, 04:36 PM

Definitely sounds like spyware issues could be the cause of the problem. Could you please download HiJack This, run a system scan through it and post a copy of the results log back into a reply to this message? Full details of how to do this can be found here:

http://www.isecurity.org.uk/misc/hijackthis.html

We'll then be able to see if there's any nasty stuff still on your PC that we can identify and remove.

Savestheday1703 · #3 (**permalink**) 02-10-2004, 04:45 PM

Logfile of HijackThis v1.98.2
Scan saved at 11:44:50 AM, on 10/2/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Chels\My Documents\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: C:\WINDOWS\lbbho.dll - {DCE30602-4AA2-4214-94CE-124031351C75} - C:\WINDOWS\lbbho.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1095704724281
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {FE4BBEA8-1EFD-4B8A-BD1B-341CCDBEEAA6} (Dhsigned Control) - http://ads.dealhelper.com/updates/DealHelperNew.cab

DJNafey · #4 (**permalink**) 02-10-2004, 07:32 PM

Is that all of it? That seems very short and the last line that I could see on the email notification got cut off on this web page for some reason.

Anyway, run HiJack This again and select the following entry to be removed:

O16 - DPF: {FE4BBEA8-1EFD-4B8A-BD1B-341CCDBEEAA6} (Dhsigned Control) - http://ads.dealhelper.com/updates/DealHelperNew.cab

Then reboot and see if you've got the same issue. If it's fixed, let us know. Otherwise, post an updated HJT log (the 'fixed' entry shouldn't be there any more). Thanks