Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help Needed


  • Please log in to reply
8 replies to this topic

#1 nickkucera

nickkucera

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 13 December 2005 - 11:52 PM

Ok, this has gone on long enough.

For the last maybe year or so I haven't been able to log into secure networks.
It all started when I lost the ability to log onto my hotmail account, and at the same time my Amazon.com accounts and other "log-ins". I created a yahoo mail account to take care of that problem, but recently I've lost the ability to log onto that!

Additionally, I cannot get rid of this Symantec Security Alert that tells me my virus protection is off. When I select "don't tell me this again" and press OK, it still pops up maybe half a minute later. I just have to drag it off the screen and hide it every time. I checked my Control Panel, and my Virus Protection is turned on... so I don't really know what to do about that. Oh yeah, and I am unable to update that whole group of programs.

I use ZoneAlarm Firewall, Spyware Doctor, and occasionally Ad-Aware for internet defense.

This is my Hijackthis reading:

Logfile of HijackThis v1.99.1
Scan saved at 10:46:28 PM, on 12/13/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSCNo.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: Drempels Desktop.lnk = C:\WINDOWS\drempels.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) - http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe




Any help would be, well, a help.
Thanks

BC AdBot (Login to Remove)

 


#2 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:02:00 AM

Posted 14 December 2005 - 12:26 AM

You need to post your HJT log in the following forum in order to get a response:

Please read the pinned post in our “HijackThis” forum, here
Carefully read and follow all directions explicitly.

Following instructions, run a HJT log and post it in our HJT forum, at this link.

Do not as yet attempt to fix anything by yourself using Hijack This.

A member of our HJT Team will analyze your log, make recommendations and offer assistance.

It may take a period of time to get a response to the log you posted because the members of our HJT Team are kept very busy.
Please be patient as this team is manned by volunteers. They will help you as soon as possible.

NOTE
Once you have posted your HJT log, please DO NOT make any additional posts in the HJT thread in which you posted your log until you get a response from a member of our HJT expert team.

The first criteria they have when looking for logs that need replies are posts showing 0 replies. If you make an additional post, it will show as having 1 reply.

A team member, looking to see if a reply has been made might well assume another HJT Team member is already assisting you and might not open the thread to respond.

So, make your post and wait for a response from a team member.

#3 missbitti

missbitti

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 17 December 2005 - 09:37 PM

Oh my gosh!! I just had that same problem where ultimately I couldn't "log in/on" to anything. (See postings around end of Nov. pretty well worded with the "can't login/on anything".) Was given AWESOME advice there. After fighting with the problem and not even being able to msn or banking, I removed the expired norton that kept telling me it had expired and viola...instant logging on. Rimmer also told me
1 firewall
1 virus protector
Many spy guys
I will find the posting and send you exact date to look at my troubleshooting options, but in the meantime maybe...who knows.
Also, I kept getting that "page cannot be displayed" message and when I'd troubleshoot it would give me error 80048820, then eventually, error (I think?) 800CCCOE. key ports problem
I googled both of these and got exact problems but of course couldn"t login to communicate with them.Go figure!
Anyway, give the removal thing a go if its the Norton/symantec and its expired. chances are you have a windows firewall and they are conflicting.

#4 missbitti

missbitti

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 17 December 2005 - 09:57 PM

Nick
The postings I was referring to were started on December 3rd. Also, my hot mail was also the first to go. I removed expired programs, in my case, Norton. I think the 1 firewall, 1 antivirus, many spyfighters thing is important though. Read the postings started on the 3rd dec. "can't login/on trouble".
Hope all gets better :thumbsup: happy holidays

#5 iwaod

iwaod

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:00 AM

Posted 25 December 2005 - 02:52 PM

I had the same problem this week at a popular online store. I researched a bit and ended up replaceing my ethernet card, ran the "network wizard" to complete the install and away I went. I had spent months with hotmail problems which didn't bother me enough to pursue a fix. But now that I am purchasing components to build a new system from online, the problem with https had to be resolved.

worked for me hope it helps someone else

iwaod

#6 phawgg

phawgg

    Learning Daily


  • Members
  • 4,543 posts
  • OFFLINE
  •  
  • Location:Washington State, USA
  • Local time:11:00 PM

Posted 25 December 2005 - 03:05 PM

I hafta admit, I'm one for uninstalling Norton/Symantec ...
using the free AVG and being done with much of the bother that can develop , for one reason or another, with recent Norton products.

Good advice to read, read, read those previous threads, and it does help to know about "cleanly uninstalling" anything.

Basically practice using the add/remove programs, reboot a couple times.
Then use windows explorer to doublecheck the C:\Program Files for leftovers.

Practice using safe mode for these actions as a extra precaution.

You might try downloading jv16 Power Tools 1.3.0.195, the last freeware registry tool made by a fellow who knows what he's doing and selling one of the best currently available.

Using it to cleanup the registry kinda completes the package, when uninstallingapps like Norton that tend to be difficult to totally uninstall.

http://www.321download.com/LastFreeware/

Again, though, take the time to read, read, read.

You'll find that deletion of old temp files & prefetch files should be done, also, when making changes that the computer has been accustomed to for a long time especially. Same drill, do it in safe mode for an extra measure of reliability and out of the presence of many drivers operating like they normally do ....

Edited by phawgg, 25 December 2005 - 03:09 PM.

patiently patrolling, plenty of persisant pests n' problems ...

#7 nickkucera

nickkucera
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Local time:02:00 AM

Posted 25 December 2005 - 03:14 PM

Thanks a lot! I have one more question though. SORRY! :-)
Do you prefer diarrhea or constipation?

#8 phawgg

phawgg

    Learning Daily


  • Members
  • 4,543 posts
  • OFFLINE
  •  
  • Location:Washington State, USA
  • Local time:11:00 PM

Posted 25 December 2005 - 03:19 PM

:thumbsup: neither, so maybe seek another anti-virus over AVG.
I used Ewido for quite a while, and manually ran the scans and updates. A lot less involvement of files ... something both AVG & Norton do.

The clean uninstalls are matter-of-fact routine now, and defrags are quick and done routinely too, so the sh*t movin' is 'bout normal for win-anything on my PC.

If you have multiple users, make sure the temp internet files are cleared for each ...

Edited by phawgg, 25 December 2005 - 03:25 PM.

patiently patrolling, plenty of persisant pests n' problems ...

#9 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:01:00 AM

Posted 25 December 2005 - 03:49 PM

Here are several good antivirus that happen to be free. All have paid verison if you just have to spend money. I'm sure they wouldn't mind.

Antivirus (Run only one.)
AVG Free Edition Antivirus (I personally use)
Avast Home Edition Antivirus Freeware
AntiVir Personal Edition Classic Freeware
BitDefender 8 Free Edition


Merry Christmas.
"2007 & 2008 Windows Shell/User Award"




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users