Non of the web browser will log onto hotmail

G

Graham

I had a trojan , which seems to of sent a batch of emails to
russian addresses ..

I ran avsast boot scan that reported it was removed , , ran
malwarebytes , thas ok , run panda cloud , thats ok , trend micro
on line scan , thats ok , trend micro RU boted , thats ok .... the
''non delivered'' email have stopped ... but logging onto web-
hotmail is not stable . work's fine , then , next thing it
'jams' .. this is the error message :

This error (HTTP 403 Forbidden) means that Internet Explorer was able
to connect to the website, but it does not have permission to view the
webpage.

firefox and chrome gives

http://du106w.dub106.mail.live.com/default.aspx

Services for this domain have been discontinued

This pc is connected directly to the BB router , If I use
of of the network PC's then the mail service works fine ..

Other problem is some web sites work, then reduce to a 'text'
version with no formatting , as if the java scrip has not
exicuted .....Non of these situations are permanat ........ebay
dose this

Is there any other scans than might find something ??

Tnx -G.
 
G

Graham

I had a  trojan , which seems to  of  sent a  batch  of emails to
russian addresses ..

I ran avsast  boot  scan that  reported  it  was  removed , ,ran
malwarebytes , thas  ok ,  run panda cloud  , thats  ok , trend micro
on line scan , thats  ok , trend  micro RU boted , thats  ok .... the
''non delivered''  email have  stopped ... but  logging  onto  web-
hotmail  is not  stable  . work's   fine  , then , next  thing  it
'jams' .. this  is the  error message :

This error (HTTP 403 Forbidden) means that Internet Explorer was able
to connect to the website, but it does not have permission to view the
webpage.

firefox   and  chrome  gives

http://du106w.dub106.mail.live.com/default.aspx

Services for this domain have been discontinued

This  pc  is  connected  directly  to  the  BB  router  , If  I use
of  of the  network PC's   then  the  mail  service  works  fine  ..

Other  problem  is  some  web  sites  work, then reduce  toa  'text'
version  with  no  formatting , as if the  java  scrip  has  not
exicuted .....Non of these situations  are  permanat ........ebay
dose this

Is there  any  other  scans  than might  find something ??

Tnx -G.
Click to expand...

QQ Are the browsers being re-directed ??
 
N

Nil

Is there any other scans than might find something ??
Click to expand...

I will guess that the trojan/malware has been removed, but you need to
undo some change that it made.

Check Control Panel | Internet Options | Connections | LAN Settings and
make sure all options are unchecked, especially the "Use a proxy
server" setting.

Also, check your HOSTS file (usually found in
\Windows\system32\drivers\etc) for suspicious entries. A barebones one,
as it comes from the factory, will have only one entry (besides the
comments)

127.0.0.1 localhost

Other entries may have been put there by a benign program, or by
malware.
 
G

Graham

I will guess that the trojan/malware has been removed, but you need to
undo some change that it made.

Check Control Panel | Internet Options | Connections | LAN Settings and
make sure all options are unchecked, especially the "Use a proxy
server" setting.

Also, check your HOSTS file (usually found in
\Windows\system32\drivers\etc) for suspicious entries. A barebones one,
as it comes from the factory, will have only one entry (besides the
comments)

127.0.0.1       localhost

Other entries may have been put there by a benign program, or by
malware.
Click to expand...

Ok Thanks for the info, to day , between clicking start and the
menue showin , there was a delay of 1 or 2 seconds before the
action happens ... ran system restore , 1 month , pc seems to
be running normally .. hotmail function -ok- (at the moment)

Searched for the host file .. but it has something like 300
pages of listing , with a heading # Start of entries inserted by
Spybot - Search & Destroy

... is this expected .. cold rename the file and remove all ?

Tnx G.



HOST File ........

# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
 
D

Don Phillipson

Searched for the host file .. but it has something like 300
pages of listing , with a heading # Start of entries inserted by
Spybot - Search & Destroy

.. is this expected .. could rename the file and remove all ?
Click to expand...

If you (1) are satisfied the malware has been wholly
removed and (2) need the drive space occupied by
the error log, you can follow standard procedure.
1. Rename this file with prefix x (e.g. xFILENAME.TYP)
and reboot.
2. Run as normal. If some error message invokes
xFILENAME.TYP you can evaluate this. Alternatives
include:
-- restoring the original file name;
-- removing the Registry item that calls it (if any.)
-- reconfiguring what ever app calls the file.
2b. If your PC runs normally, delete xFILENAME.TYP
later when you think of it.
 
N

Nil

Searched for the host file .. but it has something like
300 pages of listing , with a heading # Start of entries
inserted by Spybot - Search & Destroy

.. is this expected .. cold rename the file and remove all
?
Click to expand...

Since you apparently use Spybot's Immunize feature, that's to be
suspected. You might try deleting all bit the "127.0.0.1      
localhost" line and see if that improves performance. The next time you
run Immunize, Spybot will replace the deleted entries.
 
G

Graham

If you (1) are satisfied the malware has been wholly
removed and (2) need the drive space occupied by
the error log, you can follow standard procedure.
1.  Rename this file with prefix x (e.g. xFILENAME.TYP)
and reboot.
2.  Run as normal.  If some error message invokes
xFILENAME.TYP you can evaluate this.  Alternatives
include:
    -- restoring the original file name;
    -- removing the Registry item that calls it (if any.)
    -- reconfiguring what ever app calls the file.
2b.  If your PC runs normally, delete xFILENAME.TYP
later when you think of it.
Click to expand...

No problem with drive space .. so I asume the file is ok as
it is , with the 100's of links listed ?


This error (HTTP 403 Forbidden) means that Internet Explorer was able
to connect to the website, but it does not have permission to view the
webpage

Well it worked ok for most of the day , then a few hours
ago, hotmail failed , same error message .. now will not log
into hot mail ..pc appeares to be running normally, navigation
seems to be ok ,, but .. why cannot log on to the web based
mail with this pc , when other pc's using the same router,
via radio can .. same with all the web browsers ...... what
controls the permission to view ??

Tnx -G..
 
G

Graham

If you (1) are satisfied the malware has been wholly
removed and (2) need the drive space occupied by
the error log, you can follow standard procedure.
1.  Rename this file with prefix x (e.g. xFILENAME.TYP)
and reboot.
2.  Run as normal.  If some error message invokes
xFILENAME.TYP you can evaluate this.  Alternatives
include:
    -- restoring the original file name;
    -- removing the Registry item that calls it (if any.)
    -- reconfiguring what ever app calls the file.
2b.  If your PC runs normally, delete xFILENAME.TYP
later when you think of it.
Click to expand...

On power up the pc ran very eratically , click start , wait 1
second before next screen showed , virus scans ok.

Ran system restore , back 4 weeks , pc operation 'normal'

then

Same thing happend last night , could not log onto hotmail
using this PC . but could on other PC lined via the radio-
network .. now , the next day , its working again .. installed
fire-fox thunderbird mail , last night and could view mail
using that

assume the host file content is 'ok' ?

ran ccleaner , that removed various files , the reg scan
'fixed' a couple of pages of 'faults' , the pc seems to be
running normaly

looking on the web about denied access , this may be a known
problem ... but why this pc and not the linked ones ?

tnx -G.
 
G

Graham

If you (1) are satisfied the malware has been wholly
removed and (2) need the drive space occupied by
the error log, you can follow standard procedure.
1.  Rename this file with prefix x (e.g. xFILENAME.TYP)
and reboot.
2.  Run as normal.  If some error message invokes
xFILENAME.TYP you can evaluate this.  Alternatives
include:
    -- restoring the original file name;
    -- removing the Registry item that calls it (if any.)
    -- reconfiguring what ever app calls the file.
2b.  If your PC runs normally, delete xFILENAME.TYP
later when you think of it.
Click to expand...

Assume then , the host file is ok with the 100's of web
links ..?


Start pc , ran erratically , click start , 1 second before the
menu displayed
virus checks ok

ran system restore 4 weeks back
pc running normally

ran cclean hd and reg

all -ok log into hotmail

then later in day same thing again - no access to hotmail
this pc ..but ok from other net worked pc

installed Firefox Thunderbird , access hotmail ok

next day , hotmail web access ok

looking on net , some issues over access to hotmail /
msoffice plug in ?

Why this pc , no log in , while others can ? .. I have noticed
the windows live mail some times fails to access a second
hot mail account during its get mail actions ........

all virus scans show -ok-

Is it some timing problem , or is there still some 'code' in
the pc , if so any ideas as to possible scan software as
all the ones I have
used since avast boot scan have not reported any findings ?
 
G

Graham

If you (1) are satisfied the malware has been wholly
removed and (2) need the drive space occupied by
the error log, you can follow standard procedure.
1.  Rename this file with prefix x (e.g. xFILENAME.TYP)
and reboot.
2.  Run as normal.  If some error message invokes
xFILENAME.TYP you can evaluate this.  Alternatives
include:
    -- restoring the original file name;
    -- removing the Registry item that calls it (if any.)
    -- reconfiguring what ever app calls the file.
2b.  If your PC runs normally, delete xFILENAME.TYP
later when you think of it.
Click to expand...

Assume then , the host file is ok with the 100's of web
links ..?


Start pc , ran erratically , click start , 1 second before the
menu displayed
virus checks ok

ran system restore 4 weeks back
pc running normally

ran cclean hd and reg

all -ok log into hotmail

then later in day same thing again - no access to hotmail
this pc ..but ok from other net worked pc

installed Firefox Thunderbird , access hotmail ok

next day , hotmail web access ok

looking on net , some issues over access to hotmail /
msoffice plug in ?

Why this pc , no log in , while others can ? .. I have noticed
the windows live mail some times fails to access a second
hot mail account during its get mail actions ........

all virus scans show -ok-

Is it some timing problem , or is there still some 'code' in
the pc , if so any ideas as to possible scan software as
all the ones I have
used since avast boot scan have not reported any findings ?
 
Top