help! smtp denies access with submit forms?

[jholland1964]

Have no idea why ATF wouldn't show on desktop in safe mode, it should. You can put it anywhere that is easy for you to find.
Those scans shouldn't take that long in safe mode as there is nothing to interfere with them running in safe mode. ATF will take no time at all.
The other two of course will take longer.
Just want to remind you that these trojans on your system do have the ability to "call home" and bring in more nasties. So the longer you wait the more infected your computer can become.
Whenever you get the time somebody will be here.

[psh]

ok heres the next scan results.
not as bad but theres still a couple of bad ones there.
they were only detected by kaspersky!

i deleted the files you listed in system 32,
but couldnt seem to find the "include" one?
but then i noticed a folder with that name,
is that what i still need to delete?
or is it not important now?

let me know as soon as as it may still be doing some damage!
thanks
psh

[jholland1964]

Please Empty the Quarantine folders of your anti-virus program and also the Quarantine folder of AVG Anti-spy.
Please run the ATF-Cleaner again.
-- Click on ATF-Cleaner to run it
-- Where it says Select Files To Delete, Check the Select All Option
-- Click Empty Selected > OK > EXIT
Now open ATF-Cleaner one more time.
This time click on Firefox at the top.
Again choose Select All. You will be asked if you wish to save passwords stored in Firefox. You may choose YES if you wish.
Click Empty Selected>OK>Exit

Please reboot into Safe Mode.
Yes, that C:\WINDOWS\system32\ include folder is the one that should be deleted so please delete that when you get into safe mode.

While in Safe Mode you also need to go into "C" drive and find the Recycler folder. It may look somewhat shaded. Open that folder and delete the files in there also. That is where the two trojans showing in the Kaspersky log are located.

Now run AVG Anti-spy once more. Have it fix anything it finds.

Reboot to normal mode and then run one more HJT scan. Save the log.
Save it as a text file. Then please UPLOAD both the AVG log and the HJT log here. You don't need to zip them, just upload both as text files.

[psh]

ok,
all instructios followed,
"include" folder deleted!
recycler folder contents deleted and scanned with kaspersky= nothing found!
avg anti spyware scan nothing found!
attached latest hjt log.(sorry i have had to zip it as it would not accept it otherwise!, it kept saying invalid file?)

everything looks ok on the virus front now, but!
my initial problem still stands.
i was having problems submitting forms on web sites and when pressed it was saying no data xml found could be problem with sendmail or smtp provider!
i first thought it was gmails configurations,
but then i was directed to find out if malware was the cause,
but now all viruses are cleared and the problems still there what do you suggest it is?
i did try another browser (firefox) and it did allow me to submit for a while,
but then that started showing error pages!
so there is still obviously some settings i have wrong somewhere.
also my dr speedtouch is showing a problem connecting to the internet on the diagnostics!
even when i am on the internet?
psh

[jholland1964]

I am going to get one of the other fellows here, more familiar with this type of error to look at this but will say one thing I have found is this:
Your sentence in your post

attached latest hjt log.(sorry i have had to zip it as it would not accept it otherwise!, it kept saying invalid file?)

[psh]

yes i added betfair my self,
well it was advised by betfair to do this as it might solve the problem of the dodgy submit forms!
but it did not help at all.
but its not just that site that im having problems with,
i did send a link to one of the sites for one of your colleagues to try the submit form and he did and it worked for him!
so thats why i tried a different browser, but then that showed errors too!

yes i wrote that sentence in my last post why?
i was stating that your upload form would not take my latest hjt log file,
it kept saying invalid file?
so i had to put it in a zip file.
psh

[jholland1964]

How long have these problems been happening? Right before this began did you change ISP's or add something to the computer that you have possibly forgotten about...new software, hard ware...etc?
It is possible that one of these trojans has changed some setting to cause the problems...
Go through your I.E. settings concering servers, etc and post here what those settings are.
Give us your actual internet settings also.

[Gizmokid2005]

psh - What is the file extension when you try to upload it? Is it a .txt file?

[psh]

its a text document.
its what comes straight out of hjt.
any good?
psh

[Gizmokid2005]

slightly. Go to any folder window and go up to Tools > Folder Options > "View" > Make sure "Hide extensions for known files types" is UNchecked.

Then look at that file. What is the extension on it?