Major Problem!!!!

shaikh_adeel · 08-06-2005, 05:59 PM

Suddenly my MSN stopped Signing in ... giving the following error:

"Sorry we were unable to sign u in at this time, please try again later. Error 80072efd."

Ok ... i was pissed .... but soon I realized that Trillian wont work any more, I couldnt sign into web.messenger, Kazaa setup cant connect to the internet to install, some softwares couldnt auto update ... etc etc.

I tested MSN Messenger's settings and it said I had no connectivity!!!
Its the latest version by the way.
All kind of browsing goes well.

I tried disabling windows firewall ... no luck!!
I uninstalled BulletProof Spyware/Adware remover (coz it has its own firewall) ... but no luck!!

ANY IDEA WHATS WRONG HERE ????

Heres my Hijack This Log (I dint find anything fishy in it):

Logfile of HijackThis v1.99.1
Scan saved at 3:57:00 AM, on 8/7/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\basfipm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\RegSrvc.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\1XConfig.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\mIRC\mirc32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\Adeel\Backup\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.com/
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = FMA.COM
O17 - HKLM\Software\..\Telephony: DomainName = FMA.COM
O17 - HKLM\System\CCS\Services\Tcpip\..\{1B77BDAE-719A-460A-902C-945601ACCFA1}: NameServer = 192.168.0.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{C32ABACA-9EA4-47B1-8EF3-1E2BC89328CC}: NameServer = 203.135.1.117 203.135.0.5
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = FMA.COM
O17 - HKLM\System\CS2\Services\Tcpip\..\{1B77BDAE-719A-460A-902C-945601ACCFA1}: NameServer = 192.168.0.10
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = FMA.COM
O17 - HKLM\System\CS3\Services\Tcpip\..\{1B77BDAE-719A-460A-902C-945601ACCFA1}: NameServer = 192.168.0.10
O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
O23 - Service: Broadcom ASF IP monitoring service v6.0.3 (BAsfIpM) - Broadcom Corp. - C:\WINDOWS\system32\basfipm.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe

I hope this prob is solv-able .. lol ... ive wasted alotta time on it!!

**greffov** · 08-07-2005, 03:46 AM

did you post this thread from the same computer you can't IM any more now?

shaikh_adeel · 08-07-2005, 04:03 AM

Quote:

Originally Posted by greffov

did you post this thread from the same computer you can't IM any more now?

Yeah I did ... I never said I cant post int forums!!!

Kungfucious · 08-07-2005, 06:09 AM

Quote:

Yeah I did ... I never said I cant post int forums!!!

Try restarting your internet connection, you could also try reinstalling your modem or going through Internet connection setup wizard. Im not sure what your problem is exactly as your Hijack this log doesnt dispaly any errors (from what i can tell)

oh and btw... Greffov only asked you a question to something you forgot to mention, you never said you posted using the computer that had problems. People are more willing to help when you leave your attitude at home.

Kf

shaikh_adeel · 08-08-2005, 06:43 PM

Quote:

Originally Posted by Kungfucious

Try restarting your internet connection, you could also try reinstalling your modem or going through Internet connection setup wizard. Im not sure what your problem is exactly as your Hijack this log doesnt dispaly any errors (from what i can tell)

oh and btw... Greffov only asked you a question to something you forgot to mention, you never said you posted using the computer that had problems. People are more willing to help when you leave your attitude at home.

Kf

Hmmm .. How do I get to know if any of the ports are being blocked?? namely the ones being used by MSN, kazaa, trillian etc ?

Lion7718 · 08-08-2005, 07:51 PM

What Trillian are you using..Trillian & MSN had a problem last month & a fix was made.
I still use Trillian Pro 2, so I had to download a new MSN.dll from the Trillian Forums...if you use Trillian Free or Pro 3...just upgrade/update if it is over 30 days old.

The rest....dunno

shaikh_adeel · 08-09-2005, 06:13 PM

Well .... I dont think its a trillian Problem ...
Coz a lot of softwares hve stopped auto updating too ... Including Windows XP ....
So ... any ideas?

technobeast · 08-09-2005, 11:24 PM

Could it be your ISP that reconfigured the allowed ports? If you can askthem..

Another idea.... what does 'netstat /a' in command prompt (StartMenu->Run->cmd) give as an output?

shaikh_adeel · 08-10-2005, 03:29 PM

well ... cant be the ISP ... coz ive got 4 PCs at my house .... and the problem is only on one of my laptops .... on the other 3 it works fine ...

Will tell u abt the netstat thing when im on tht PC. Now im on another one.

shaikh_adeel · 08-11-2005, 12:46 PM

It runs a at once closes down ... No chance ro see wht it says ,,,

Lion7718 · 08-11-2005, 01:09 PM

Don't use it fro Run/CMD got to Start/Program/Accessories click on Command Prompt run it from there, the Window will stay open.

shaikh_adeel · 08-11-2005, 01:21 PM

well it says alltta things ...
What shoulld i look for ?

ac19189 · 03-04-2006, 01:31 PM

Just a fast question did you try updating or reinstalling msn? I myself had this issue with the new version of msn and it totally jacked up everything something about host files.

If you did update you msn you can always try going back to an older version. I just formated my computer and reinstalled 7.0 because so far its the only version I have found to be stable to say the least.

Do you have a router or proxy seeing as you ruled out the firewall if you have a router I would recommend running over the settings really fast see what you get. If you dont have one or the other and your directly connected to the net try reseting your modem if your on highspeed if not and your using 56k....

Well then I have no clue and the smart people will need to fix it. ^.^

ac19189 · 07-08-2006, 12:47 PM

Ok sorry for the double post here but I see that this hijackthis list has a worm so...

C:\WINDOWS\system32\basfipm.exe < Select and clear.
C:\mIRC\mirc32.exe < Clear o.O Unno why its saying mirc is bad but meh. Might be.
O23 - Service: Broadcom ASF IP monitoring service v6.0.3 (BAsfIpM) - Broadcom Corp. - C:\WINDOWS\system32\basfipm.exe < Clear

Now to be honest I dont know why ur domain name is setup as FMA.com
Sounds like network settings is use issue if you ask me but meh.
Another question is have you installed panda?
I had this issue with a computer running panada and omg that was a bitch to fix.

08-06-2005, 05:59 PM	#1 (permalink)
shaikh_adeel Registered User Join Date: Aug 2005 Posts: 7	Major Problem!!!! Suddenly my MSN stopped Signing in ... giving the following error: "Sorry we were unable to sign u in at this time, please try again later. Error 80072efd." Ok ... i was pissed .... but soon I realized that Trillian wont work any more, I couldnt sign into web.messenger, Kazaa setup cant connect to the internet to install, some softwares couldnt auto update ... etc etc. I tested MSN Messenger's settings and it said I had no connectivity!!! Its the latest version by the way. All kind of browsing goes well. I tried disabling windows firewall ... no luck!! I uninstalled BulletProof Spyware/Adware remover (coz it has its own firewall) ... but no luck!! ANY IDEA WHATS WRONG HERE ???? Heres my Hijack This Log (I dint find anything fishy in it): Logfile of HijackThis v1.99.1 Scan saved at 3:57:00 AM, on 8/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\basfipm.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\RegSrvc.exe C:\WINDOWS\system32\ZCfgSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\1XConfig.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\mIRC\mirc32.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\WinRAR\WinRAR.exe C:\Adeel\Backup\Hijack This\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.com/ O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = FMA.COM O17 - HKLM\Software\..\Telephony: DomainName = FMA.COM O17 - HKLM\System\CCS\Services\Tcpip\..\{1B77BDAE-719A-460A-902C-945601ACCFA1}: NameServer = 192.168.0.10 O17 - HKLM\System\CCS\Services\Tcpip\..\{C32ABACA-9EA4-47B1-8EF3-1E2BC89328CC}: NameServer = 203.135.1.117 203.135.0.5 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = FMA.COM O17 - HKLM\System\CS2\Services\Tcpip\..\{1B77BDAE-719A-460A-902C-945601ACCFA1}: NameServer = 192.168.0.10 O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = FMA.COM O17 - HKLM\System\CS3\Services\Tcpip\..\{1B77BDAE-719A-460A-902C-945601ACCFA1}: NameServer = 192.168.0.10 O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll O23 - Service: Broadcom ASF IP monitoring service v6.0.3 (BAsfIpM) - Broadcom Corp. - C:\WINDOWS\system32\basfipm.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe I hope this prob is solv-able .. lol ... ive wasted alotta time on it!!

08-07-2005, 03:46 AM	#2 (permalink)
greffov Da House Nerd Join Date: Dec 1969 Location: One CPU Lane Posts: 3,512	did you post this thread from the same computer you can't IM any more now? __________________ Linux virusscanner detected a virus: Windows 95 ... delete [Y/n] y ~ ~ :wq

08-08-2005, 07:51 PM	#6 (permalink)
Lion7718 Staff Join Date: Mar 2003 Location: Florida Posts: 2,317	What Trillian are you using..Trillian & MSN had a problem last month & a fix was made. I still use Trillian Pro 2, so I had to download a new MSN.dll from the Trillian Forums...if you use Trillian Free or Pro 3...just upgrade/update if it is over 30 days old. The rest....dunno __________________ "Protect me from my friends, I can take care of my enemies" You better not be touching my mannequin

08-09-2005, 11:24 PM	#8 (permalink)
technobeast The Grim Reaper! Join Date: May 2002 Location: Bulgaria Posts: 2,387	Could it be your ISP that reconfigured the allowed ports? If you can askthem.. Another idea.... what does 'netstat /a' in command prompt (StartMenu->Run->cmd) give as an output? __________________ Liked this post and found it helpful? Click on the image under my avatar to add to my reputation

08-11-2005, 01:09 PM	#11 (permalink)
Lion7718 Staff Join Date: Mar 2003 Location: Florida Posts: 2,317	Don't use it fro Run/CMD got to Start/Program/Accessories click on Command Prompt run it from there, the Window will stay open. __________________ "Protect me from my friends, I can take care of my enemies" You better not be touching my mannequin

08-09-2005, 06:13 PM	#7 (permalink)
shaikh_adeel Registered User Join Date: Aug 2005 Posts: 7	Well .... I dont think its a trillian Problem ... Coz a lot of softwares hve stopped auto updating too ... Including Windows XP .... So ... any ideas?

08-10-2005, 03:29 PM	#9 (permalink)
shaikh_adeel Registered User Join Date: Aug 2005 Posts: 7	well ... cant be the ISP ... coz ive got 4 PCs at my house .... and the problem is only on one of my laptops .... on the other 3 it works fine ... Will tell u abt the netstat thing when im on tht PC. Now im on another one.

08-11-2005, 12:46 PM	#10 (permalink)
shaikh_adeel Registered User Join Date: Aug 2005 Posts: 7	It runs a at once closes down ... No chance ro see wht it says ,,,

08-11-2005, 01:21 PM	#12 (permalink)
shaikh_adeel Registered User Join Date: Aug 2005 Posts: 7	well it says alltta things ... What shoulld i look for ?

03-04-2006, 01:31 PM	#13 (permalink)
ac19189 Registered User Join Date: Mar 2006 Posts: 66	Just a fast question did you try updating or reinstalling msn? I myself had this issue with the new version of msn and it totally jacked up everything something about host files. If you did update you msn you can always try going back to an older version. I just formated my computer and reinstalled 7.0 because so far its the only version I have found to be stable to say the least. Do you have a router or proxy seeing as you ruled out the firewall if you have a router I would recommend running over the settings really fast see what you get. If you dont have one or the other and your directly connected to the net try reseting your modem if your on highspeed if not and your using 56k.... Well then I have no clue and the smart people will need to fix it. ^.^

07-08-2006, 12:47 PM	#14 (permalink)
ac19189 Registered User Join Date: Mar 2006 Posts: 66	Ok sorry for the double post here but I see that this hijackthis list has a worm so... C:\WINDOWS\system32\basfipm.exe < Select and clear. C:\mIRC\mirc32.exe < Clear o.O Unno why its saying mirc is bad but meh. Might be. O23 - Service: Broadcom ASF IP monitoring service v6.0.3 (BAsfIpM) - Broadcom Corp. - C:\WINDOWS\system32\basfipm.exe < Clear Now to be honest I dont know why ur domain name is setup as FMA.com Sounds like network settings is use issue if you ask me but meh. Another question is have you installed panda? I had this issue with a computer running panada and omg that was a bitch to fix.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode