help! smtp denies access with submit forms?

[psh]

right then!
i can now safely say it is a problem with i.e!
i have downloaded firefox and enter the comp again and bingo it submitted!
the reason i didnt have firefox before was i thought i was getting a returning malware called nsis media extension, so i uninstalled firefox.
but now i can see it does have its benefits.

so now we have established this,
what could it be on i.e thats not allowing access?
should we try and solve this or do you think i should just use both and make do with the i.e problem?

as for that being my next song?
at least there can be some progress in that area now!
thanks i owe you one.

i will try the fix program you linked me and see what happens.
in the mean time any other ideas?
psh

ok tried the i fix program and its made no difference what so ever.
i am wondering if i should uninstall i.e and re install?
what you think?
psh

[psh]

hello again,
just wondering, whilst using firefox for about an hour last night it started to show some error pages whilst trying to upload music files.
it mentioned about proxy server settings not configured!
i have contacted bulldog and they say i do not use them,
is this correct? if so then no worries.
also on looking into this i ventured into my dr speedtouch diagnostics area.
and ran a test.
the results showed that i had a problem with the internet connection even though i was at the time connected to the internet!
why is this and could this be related to my original problem?
if not then just ignore me im clutching at straws!
cheers
psh

[TurcoLoco]

Even though the previous posts confirmed that you had a browser specific issue with IE you latter message gave me the feeling that there might be more to this such as some sort of a malware infection perhaps?

Here is what I would like you to do to get you going in the right direction:

Read through the steps in this sticky and then submit your HijackThis log (attach the .txt file to your post rather than copy/pasting it in the post please). Feel free to download and use my customized version of HijackThis which automates some of the processes such as creating the program folder and retrieving/renaming the log file. It is available at the bottom of this thread.

Also, please provide more info on your Internet connection (DSL, Cable, Dial-up, use Ethernet cable, USB cable, you have a hardware router/firewall, you use a software firewall or Windows firewall, etc. More info the better.

~TL

[psh]

ok this looks pretty bad considering i scan my computer at least twice a week with various programs.
but it just goes to show that different scanners find different things!

i scanned with pc tools anti virus and came up with zero results!
spybot also came out negative.

another thing ive noticed with pc tools antivirus is a run time error message popping up every now and then,
and it basically shuts pc tools down!
i think that may be a virus dont you?

ok so here are the results;
can i just say avg anti virus did quarantine a couple of things,
so should i leave it installed on my computer for now?
will they restore themselves back into my comp if i uninstall avg?
please let me know how bad it looks.
cheers
psh

[psh]

sorry i thought they had attached but i had to zip them.
cheers
psh

[jholland1964]

As you say, things don't look wonderful. Let me go through all these logs and I will get back to you ASAP.
You are correct when you say different tools look for different things. That is why a person shouldn't rely on just one. That isn't AVG Ant virus but AVG anti-spy...yes, leave it on the computer, you will find it invaluable.
Give me a bit and I will get back to you.
I am going to move this thread to our SpywareCentral Forum since this is now what you know for sure what you are dealing with.
Judy

[psh]

ok i will leave it installed for now but it is only a trial version right so in thirty days its no good anyway!
i already have pc tools spyware doctor monitoring constent.
is that not enough?
i guess its the big arguement of too many virus programs etc running against each other right?
but i think one of each is sufficient isnt it?
saying that ive still got viruses so god knows!
i look forward to your advice.
psh

[jholland1964]

With AVG Anti-spy at the end of the 30 day trial, certain extensions will be deactivated and the program will turn into a feature-limited freeware version. This can be used as a scanner and can be updated for new threats found. If you look at PP's instructions he specifically says;

-- Uncheck Resident Shield
-- Uncheck Automatic Updates
-- Uncheck Start with Windows

so if you followed the instructions above it WILL not be acting as a constant scanner or shield. I would keep the program, it should be updated manually to add new definitions before each scan. It does find and remove many Trojans, an anti-virus program does not generally protect against, locate or remove Trojans. Which you now have on the computer and some were found and all ready cleaned by AVG. Keep the program.

You are correct, too many programs running may actually lessen the protection BUT, first of all this generally refers to anti-virus programs and firewalls...and the rule is ONE of each on a computer. The spyware/malware scanner programs are just that, scanner programs, you should only use those for scanning the computer once a week OR when you notice a problem. You are NOT running multiple anti-virus programs, from what I can see in your logs you have ONE anti-virus program and that is the PC Tools Anti-virus, all the others you have run or are running are anti-malware/spyware programs, and no, you do not have too many. They don't look for, find or remove viruses.
I am still going through your logs and will get back to you asap.
Judy

[jholland1964]

Ok psh,
Have gone through your logs and you do have some not so nice items showing in both the Kaspersky and AVG Anti-spy, several show they have been removed or quarantined but we need to be absolutely certain.
These, and possibly some others, are what are showing in your logs;
Backdoor.IRC.Zapchast is a backdoor trojan that installs an Internet Relay Chat (IRC) server on the infected machine without the user's knowledge.
Backdoor.IRC.Zapchast installs IRC server script and configuration files that allow the infected machine to be used as a server. Certain IRC channels specified in the configuration files connect to the server, making the infected machine vulnerable to remote attackers. Backdoor.IRC.Zapchast is spread by email spam with a link purporting to be a postcard for the user. Backdoor.IRC.Zapchast may also install Parite.B.
C:\Documents and Settings\paul\My Documents\BitTorrent Downloads\Nero7.5.9.0 Premium Reloaded>>>infected by
Backdoor.Win32.Agent.ajy
RarSFX: infected - 5
Trojan-Downloader.BAT.Ftp.ab>>> The 'Trojan-Downloader.BAT.Ftp' trojan is usually a batch script that opens a connection to a remote ftp site (using a built-in Windows ftp client) in order to download one or more files and to activate them. Such trojans are commonly used my malware writers to update or download malicious files to an already compromised computer.
Trojan.Win32.Pakes

Now attempts were made by AVG Anti-spy to remove and Quarantine some of these, though several showed just in the Kaspersky.

Here are the steps I would like you to take.
First of all update your anti-virus program.
Update the AVG-Anti-spy, just in case there has been an update since you downloaded the program.

Download the ATF-Cleaner from the previous link
that ~TL gave you.
Save it to your desktop.

Enable Viewing of Hidden Files and Folders

Read how to Boot to Safe Mode

Once you have done that shut down the computer. Disconnect the cable from the internet if you are NOT on dial-up.
Now reboot the computer to SAFE MODE

RUN ATF-Cleaner.exe.
-- Click on ATF-Cleaner to run it
-- Where it says Select Files To Delete, Check the Select All Option
-- Click Empty Selected > OK > EXIT

Run a FULL SYSTEM SCAN with your Anti-virus program.
Allow it to FIX or Quarantine EVERYTHING found.

Please Launch AVG Anti-Spyware.
-- Click on the Scanner button and choose the Settings Tab.
---> Under How to act?, click on Recommended action and choose Quarantine to set default action for detected malware.
--->Under Reports make sure Automatically generate report after every scan is selected and UNCHECK the Only if threats were found box.
-- Leave everything else at their default settings and Select the Scan tab and CLICK Complete System Scan to scan your machine.
-- Upon completion of the scan, Click Apply all actions to place any detected baddies in Quarantine.
-- AFTER clicking Apply all actions, Click on Save Report and select Save the report to your Desktop.

Do NOT Reboot. Remain in SAFE MODE.
Once you have completed the above scans then you need to do a file search for the following files on the computer.

Double click on My Computer.
Double Click on "C" drive.
Go to;
C:\WINDOWS\system32\i
C:\WINDOWS\system32\include
C:\WINDOWS\system32\setup.dll

Delete all items noted in RED. Not the entire system32 folder just those noted in red.

Shut down the computer. Re-attach the internet hook up. Reboot the computer in NORMAL mode.
Go online and do one more Kaspersky scan and save the log.
Do a NEW HJT scan and save the log.
Post back here with the new AVG log, the new Kaspersky log, and the new HJT log.
Judy

[psh]

ok thanks i will have get back to you with them as soon as i can.
these scans take forever!
but first can i just mention about the atf cleaner program you are asking me
to save to desk top?
is there any other place i should be saving it?
because when i re-boot into safe mode its no longer on my desktop!
should i put it in program files instead?
then i can access it whatever.
let me know,
if not i will go ahead like i said.
ok thanks again
psh