0

Hey there. I have been unable to access my Yahoomail for sometime now. I have no idea why. Can anyone please help me? My Yahoomail is my main email address and it's kind of a hassle not being able to access it.

Here is my latest HiJackThis log. Maybe it can help solve the problem:


------------------

Logfile of HijackThis v1.99.1
Scan saved at 11:59:09 PM, on 2/5/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Citrix\ICA Client\pnagent.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\HiJackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =

http://msg.edit.yahoo.com/config/reset_cookies?&.y=Y=v=1%26n=a5ittkh755ovf%26l=a0jhed8/o%26p=f2evvph113200g00%26ig=1

8dqe%26iz=1485%26r=3t%26lg=us%26intl=us&.t=T=z=qX40BBqdN1BBij9RYpbOh6MMjQyBjM3MzM0MzUwMQ--%26a=YAE%26sk=DAA13ejrNluh

lx%26d=c2wBTlRNMUFUUXdORFF6TkRJM05nLS0BYQFZQUUBb2sBWlcwLQF0aXABTHowODZBAXp6AXFYNDBCQmdXQQ--&.ver=2&.done=http%3a//us

.rd.yahoo.com/messenger/client/%3fhttp%3a//mail.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O1 - Hosts: 66.218.75.184 mail.yahoo.com
O2 - BHO: Creata Mail - {9FEA5BDA-695A-417B-AA31-B54A06570053} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program

Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [ChikkaIM] C:\Program Files\Chikka\Chikka.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop

Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Program Neighborhood Agent.lnk = C:\Program Files\Citrix\ICA Client\pnagent.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program

Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program

Files\UltimateBet\UltimateBet.exe
O9 - Extra 'Tools' menuitem: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program

Files\UltimateBet\UltimateBet.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\MSMSGS.EXE
O16 - DPF: Chikka Text Messenger - http://java.chikka.com/library/chikkaLIB_v2.cab
O16 - DPF: {09883431-7429-11D5-8B69-0050049F5256} (VBAuthentic.Authentic) -

https://www.metrobankdirect.com/download/Authentic/VBAuthentic.cab
O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} (DASWebDownload Class) -

http://das.microsoft.com/activate/cab/x86/i486/NTANSI/retail/DASAct.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -

http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://210.1.70.65/nProtect/KeyCrypt/npkcx.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common

Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton

AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton

AntiVirus\IWP\NPFMntor.exe
O23 - Service: npkcsvc - INCA Internet Co., Ltd. - C:\WINDOWS\System32\npkcsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation -

C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common

Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program

Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\CCPD-LC\symlcsvc.exe

----------------------------

Thanks, all!

4
Contributors
8
Replies
9
Views
11 Years
Discussion Span
Last Post by LeeD
0

Alrite, several things. First, is it one of those things, where ya put in your username/pass, hit enter, and it basically reloads the page?

First off, I'd try doing this and following the directions here:
http://www.daniweb.com/techtalkforums/thread27570.html

Then, I'd try converting and switching to use Firefox instead of IE. Overall, it has better safety and fixed the problem mentioned above (first paragraph) for me.

0

Alrite, several things. First, is it one of those things, where ya put in your username/pass, hit enter, and it basically reloads the page?

Thanks for the reply. But no, this isn't that kins of problem. Mine is whenever I try to access the Yahoomail page, an Alert pop-up appears, saying that "The operation timed out when attempting to contact mail.yahoo.com"

Doesn't matter whether I key in the yahoomail URL or whether I try accessing the site from the Yahoo main page; the same message always appears.

First off, I'd try doing this and following the directions here:
http://www.daniweb.com/techtalkforums/thread27570.html

Then, I'd try converting and switching to use Firefox instead of IE. Overall, it has better safety and fixed the problem mentioned above (first paragraph) for me.

Thanks again. Will follow the instructions and then will post again as to whether doing so solved the problem. By the way, I have been using Firefox, so I guess IE isn't part of the problem. I may be wrong, though.

Have a great day!

0

Well, first off, ya should correct these on youre HJT:

O1 - Hosts: 66.218.75.184 mail.yahoo.com
O2 - BHO: Creata Mail - {9FEA5BDA-695A-417B-AA31-B54A06570053} - (no file)
O9 - Extra button: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program
Files\UltimateBet\UltimateBet.exe
O9 - Extra 'Tools' menuitem: UltimateBet - {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - C:\Program
Files\UltimateBet\UltimateBet.exe

That might clear something up.
Hmmm if none of that cleaning helps... I'm more of a spyware guy, it probably wouldnt hurt to mabe reset your router if ya use one, and do the same if ya have a modem (if ya got one). Sometimes the hardware inside the modem/router autoblock certain sites.

After you're done with that, post a new log please.
thanks.

1

You can't access Yahoo mail because it is in your HOSTS file. Fixing it in HijackThis will not remove it.

Also - it appears you may have a Lop Infection so let's check that as well

Download ISeeYou and save it to your desktop for now.


First I recommend looking in Add/Remove Programs and uninstalling

LimeWire

Download Hoster from here:
http://www.funkytoad.com/download/hoster.zip

-Unzip it to it's own folder
-Run Hoster.exe click Restore Original Hosts and then click OK.

Now scan and check the following in HijackThis

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://msg.edit.yahoo.com/config/re...13200g00%26ig=18dqe%26iz=1485%26r=3t%26lg=us%26intl=us&.t=T=z=qX40BBqdN1BBij9RYpbOh6MMjQyBjM3MzM0MzUwMQ--%26a=YAE%26sk=DAA13ejrNluh
lx%26d=c2wBTlRNMUFUUXdORFF6TkRJM05nLS0BYQFZQUUBb2sBWlcwLQF0aXABTHowODZBAXp6AXFYNDBCQmdXQQ--&.ver=2&.done=http%3a//us
.rd.yahoo.com/messenger/client/%3fhttp%3a//mail.yahoo.com/
O1 - Hosts: 66.218.75.184 mail.yahoo.com
O2 - BHO: Creata Mail - {9FEA5BDA-695A-417B-AA31-B54A06570053} - (no file)
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://210.1.70.65/nProtect/KeyCrypt/npkcx.cab

Now reboot to Safe Mode and delete the following

C:\Program Files\Limewire

Now double-click ISeeYou.bat and let it run
-Notepad will open when it is finished
-Attach that log for me when you return

Votes + Comments
Heh thanks dude, take some rep. By the way, how'd ya kno it was a Lop inf.?
0

was wondering if any of these suggestions have helped the thread starter.

I'm having similar issues, but I have trouble accessing yahoo.com.tw (Taiwan) email. Accessing another emailbox at yahoo.com is not a problem. Just yahoo.com.tw. Doesn't work on 3 different computers (firefox & IE), and have tried creating a new account, and that doesn't work either. Doesn't work with security fully open on IE/firefox and fully open on Zone Alarm.

Been troubleshooting this for over a month now. A few brief items I've already tried.
- Cleared/deleted browser cache/cookies/history/etc.
- ran Virus Checkers, Spybot S&D, Adware SE, XoftSpy.
- upgraded router firmware and played with MTU # extensively.
- don't run/install any filesharing, p-p software.

Not trying to hijack this thread, but am just trying to find out if the suggestions given have help you.

Thanks,

0

Yes - they seemed to have solved his problem, although he did not come back and attach another log I requested, he did send me a message saying thanks.

0

was wondering if any of these suggestions have helped the thread starter.

I'm having similar issues, but I have trouble accessing yahoo.com.tw (Taiwan) email. Accessing another emailbox at yahoo.com is not a problem. Just yahoo.com.tw. Doesn't work on 3 different computers (firefox & IE), and have tried creating a new account, and that doesn't work either. Doesn't work with security fully open on IE/firefox and fully open on Zone Alarm.

Been troubleshooting this for over a month now. A few brief items I've already tried.
- Cleared/deleted browser cache/cookies/history/etc.
- ran Virus Checkers, Spybot S&D, Adware SE, XoftSpy.
- upgraded router firmware and played with MTU # extensively.
- don't run/install any filesharing, p-p software.

Not trying to hijack this thread, but am just trying to find out if the suggestions given have help you.

Thanks,

I just wanted to pass along that I was able finally fix my issue above (after 2months) by changing the following settings on my Netgear router,

RIP Direction: None -> In Only
RIP Version: Disabled -> RIP 2B

This question has already been answered. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.