Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

My computer is sending spam and getting me blacklisted

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: My computer is sending spam and getting me blacklisted

Unread postby chryssi2001 » December 9th, 2007, 12:55 pm

Hi Joe,

Try to remove Ask Toolbar in safe mode.
-------------------------------------------
Safe Mode

Print out these instructions or save them into a notepad on your desktop, because you will not have internet access while in Safe Mode.

Go in Safe Mode by restarting your computer, then continually tapping F8 until a menu appears. Use your up arrow key to highlight Safe Mode, then hit enter.

Now use Add/remove programs and remove Ask Toolbar.

While in safe mode:
Using Windows Explore by right-clicking the Start button and left clicking Explore navigate to and find the following folder:

C:\Program Files\AskTBar

Right-click and delete it.

If you still can't uninstall the program please remove the folder.
-------------------------------------------
As far as the other Firewalls, do any of them prevent waves of emails from being sent out (SPAM) so that the IP doesn't get blacklisted?


Not preventing spam emails, but they record the activity, and they do prevent sending private information outside.

Please check with your ISP and you should not be blacklisted any more, except if that sample.exe is infected.
Your main infection has gone away.
You were infected by Smitfraud, and as it needs a certain tool to be removed, that's the reason the scanners you used didn't find anything.
User avatar
chryssi2001
MRU Teacher Emeritus
 
Posts: 14395
Joined: September 24th, 2006, 2:11 am
Location: far away
Advertisement
Register to Remove

Re: My computer is sending spam and getting me blacklisted

Unread postby Joe28732 » December 10th, 2007, 1:45 pm

Sorry for my delay in getting this to you.
I have downloaded the COMODO fire wall. I am interested in finding out if my system is still sending out spam. Do you know how I can get this info from the COMODO program?
I tried removing the Ask Toolbar through the safe mode with no luck. The only thing I could do was remove it from the file C:\programfiles\
It still shows up under the Add/Remove Programs list. However, even after I deleted the file from the C: drive, I still cannot remove it through the Add/Remove list.

Here is the find file list for Sample. I have discovered that this file only comes up when I shut down from Safe Mode. It also happens every time I shut down from Safe Mode. I ran the Process Explorer program while in Safe Mode and the Sample program doesn't show up there at all. I have included the list I logged from the Process Explorerer for your use. Even though it did not show up on Process Explorer, as soon as I shut down the computer it showed the error:
Not able to end program Sample
So, all I can do is "end now" and everything shuts down as it should.

C:\Documents and Settings\All Users\Documents\Backup Harddirve\Desktop C drive Backup\Local Disk (C)\ACAD12\SAMPLE - 0 Bytes
C:\Documents and Settings\All Users\Documents\Backup Harddirve\Desktop C drive Backup\Local Disk (C)\Adobe\Photoshop\Samples - 0 Bytes
C:\Documents and Settings\All Users\Documents\Backup Harddirve\Desktop C drive Backup\Local Disk (C)\Adobe\Photoshop\Samples\Samples.wri - 1842 Bytes
C:\Documents and Settings\All Users\Documents\Backup Harddirve\Desktop C drive Backup\Local Disk (C)\Compumotor\Samples - 0 Bytes
C:\Documents and Settings\All Users\Documents\Backup Harddirve\Desktop C drive Backup\Local Disk (C)\Documents and Settings\All Users.WINXP\Documents\My Music\Sample Music - 0 Bytes
C:\Documents and Settings\All Users\Documents\Backup Harddirve\Desktop C drive Backup\Local Disk (C)\Documents and Settings\All Users.WINXP\Documents\My Pictures\Sample Pictures - 0 Bytes
C:\Documents and Settings\All Users\Documents\Backup Harddirve\Desktop C drive Backup\Local Disk (C)\Documents and Settings\Joe Kilpatrick.JOE\My Documents\Backup Harddrive\WINDOWS\SAMPLE.MOV - 881787 Bytes
C:\Documents and Settings\All Users\Documents\My Music\Sample Music - 0 Bytes
C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists - 0 Bytes
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures - 0 Bytes
C:\Documents and Settings\Default User\My Documents\My Music\Sample Music.lnk - 542 Bytes
C:\Documents and Settings\Default User\My Documents\My Pictures\Sample Pictures.lnk - 572 Bytes
C:\Documents and Settings\Joe Kilpatrick\Application Data\Adobe\Designer\en\Templates\Sample - 0 Bytes
C:\Documents and Settings\Joe Kilpatrick\Desktop\Photoshop 5.0\Goodies\Samples - 0 Bytes
C:\Documents and Settings\Joe Kilpatrick\My Documents\My Music\Sample Music.lnk - 542 Bytes
C:\Documents and Settings\Joe Kilpatrick\My Documents\My Pictures\Sample Pictures.lnk - 791 Bytes
C:\I386\Sample Music.lnk - 542 Bytes
C:\I386\Sample Pictures.lnk - 572 Bytes
C:\I386\SAMPLE.AS_ - 350339 Bytes
C:\jetsuite\Docs.bak\Sample Documents - 0 Bytes
C:\Program Files\Adobe\Acrobat 7.0\Designer 7.0\EN\Samples - 0 Bytes
C:\Program Files\Adobe\Acrobat 7.0\Designer 7.0\EN\Samples\Samples Index.pdf - 31627 Bytes
C:\Program Files\Adobe\Acrobat 7.0\Designer 7.0\EN\Templates\Sample - 0 Bytes
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Shared_Assets\combined_bitmaps\sample0.bmp - 3590 Bytes
C:\Program Files\AutoCAD R14\SAMPLE - 0 Bytes
C:\Program Files\AutoCAD R14\ADSRX\sample - 0 Bytes
C:\Program Files\AutoCAD R14\SUPPORT\sample.cus - 136 Bytes
C:\Program Files\Hewlett-Packard\LaserJet 33xx\fax cover pages\sample01.cvp - 4096 Bytes
C:\Program Files\Hewlett-Packard\LaserJet 33xx\fax cover pages\sample02.cvp - 232448 Bytes
C:\Program Files\Hewlett-Packard\LaserJet 33xx\fax cover pages\sample03.cvp - 164864 Bytes
C:\Program Files\Hewlett-Packard\LaserJet 33xx\fax cover pages\sample04.cvp - 168448 Bytes
C:\Program Files\Hewlett-Packard\LaserJet 33xx\fax cover pages\sample05.cvp - 144896 Bytes
C:\Program Files\Hewlett-Packard\LaserJet 33xx\fax cover pages\sample06.cvp - 144896 Bytes
C:\Program Files\Microsoft Office\OFFICE11\SAMPLES - 0 Bytes
C:\Program Files\Microsoft Office\Templates\1033\Pages\photo.tem\SAMPLE10.JPG - 98019 Bytes
C:\Program Files\Microsoft Office\Templates\1033\Pages\photo.tem\SAMPLE11.JPG - 58114 Bytes
C:\Program Files\Microsoft Office\Templates\1033\Pages\photo.tem\SAMPLE12.JPG - 84832 Bytes
C:\Program Files\Microsoft Office\Templates\1033\Pages\photo.tem\SAMPLE8.JPG - 133216 Bytes
C:\Program Files\Microsoft Office\Templates\1033\Pages\photo.tem\SAMPLE9.JPG - 87637 Bytes
C:\Program Files\Movie Maker\SAMPLE.ASF - 369565 Bytes
C:\Program Files\Movie Maker\shared\sample1.jpg - 62732 Bytes
C:\Program Files\Movie Maker\shared\sample2.jpg - 46822 Bytes
C:\Program Files\Nuance\NaturallySpeaking9\Help\enx\essntls\samplecommands.chm - 37522 Bytes
C:\Program Files\Nuance\NaturallySpeaking9\Help\enx\personal\samplecommands.chm - 37520 Bytes
C:\Program Files\Nuance\NaturallySpeaking9\Help\enx\power\samplecommands.chm - 37524 Bytes
C:\Program Files\Nuance\NaturallySpeaking9\Help\enx\pref\samplecommands.chm - 37524 Bytes
C:\Program Files\OLYMPUS\CAMEDIA Master\Samples - 0 Bytes
C:\Program Files\PIXELA\ImageMixer\VideoSample\Sample1.mpg - 2394112 Bytes
C:\Program Files\PIXELA\ImageMixer\VideoSample\Sample2.mpg - 1378304 Bytes
C:\Program Files\PIXELA\ImageMixer\VideoSample\Sample3.mpg - 10180608 Bytes
C:\Program Files\QuickTime\Sample.mov - 82395 Bytes
C:\Program Files\QuickTime\Sample.qtif - 29363 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample Bat - 0 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample C - 0 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample VB - 0 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample VBS - 0 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample C\Sources\sample.rc - 6479 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample C\Sources\sample_c.cpp - 18857 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample C\Sources\sample_c.dsp - 4204 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample C\Sources\sample_c.dsw - 701 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample VB\Sources\sample retrospecteventhandler.frm - 21017 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample VB\Sources\sampleretroeventhandler.vbp - 675 Bytes
C:\Program Files\Retrospect\Retrospect 7.5\External Scripts\Sample VB\Sources\sampleretroeventhandler.vbw - 65 Bytes
C:\Program Files\Windows Media Player\sample playlists - 0 Bytes
C:\WINDOWS\ServicePackFiles\i386\sample1.jpg - 62732 Bytes
C:\WINDOWS\ServicePackFiles\i386\sample2.jpg - 46822 Bytes
C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\My Documents\My Music\Sample Music.lnk - 542 Bytes
C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\My Documents\My Pictures\Sample Pictures.lnk - 572 Bytes
C:\WINDOWS\SYSTEM32\OOBE\SAMPLE - 0 Bytes




Process Explorer:
Process PID CPU Description Company Name
System Idle Process 0 99.01
Interrupts n/a Hardware Interrupts
DPCs n/a Deferred Procedure Calls
System 4
smss.exe 184 Windows NT Session Manager Microsoft Corporation
csrss.exe 232 Client Server Runtime Process Microsoft Corporation
winlogon.exe 256 Windows NT Logon Application Microsoft Corporation
services.exe 300 0.99 Services and Controller app Microsoft Corporation
svchost.exe 464 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 528 Generic Host Process for Win32 Services Microsoft Corporation
aawservice.exe 596 Ad-Aware 2007 Service Lavasoft AB
guard.exe 668 AVG Anti-Spyware guard GRISOFT s.r.o.
svchost.exe 792 Generic Host Process for Win32 Services Microsoft Corporation
lsass.exe 312 LSA Shell (Export Version) Microsoft Corporation
ZCfgSvc.exe 696 ZeroCfgSvc MFC Application Intel Corporation
explorer.exe 824 Windows Explorer Microsoft Corporation
procexp.exe 1336 Sysinternals Process Explorer Sysinternals

Thanks for your support.
Joe
Joe28732
Active Member
 
Posts: 14
Joined: December 2nd, 2007, 12:02 am

Re: My computer is sending spam and getting me blacklisted

Unread postby chryssi2001 » December 10th, 2007, 3:40 pm

Hi Joe,

I will seek some advice from other helpers about your problems, and will be back asap.
User avatar
chryssi2001
MRU Teacher Emeritus
 
Posts: 14395
Joined: September 24th, 2006, 2:11 am
Location: far away

Re: My computer is sending spam and getting me blacklisted

Unread postby Joe28732 » December 10th, 2007, 3:44 pm

:bounce: Thanks agian. I will wait for your response.
Joe
Joe28732
Active Member
 
Posts: 14
Joined: December 2nd, 2007, 12:02 am

Re: My computer is sending spam and getting me blacklisted

Unread postby Joe28732 » December 10th, 2007, 5:08 pm

:? I just ran into a problem. I pulled up the website for the Real Estate MLS here in NC and once I signed on, the home page loads up but the tool bar across the top does not.
The tool bar usually has the "search, edit, maintenance, ect." pull downs. Instead the box has a shadow frame around it and a small white box with a red X in it on the left. Could I have removed something I shouldn't have? I check with my other two computers and they both work fine with the site http://www.wncmls.com.
The sign in page appears normal. It is the home page after login that is missing the tool bar.
I checked both systems and didn't see the "ask toolbar" program on either one, so I don't expect that is a problem. Is there anything else I should look at? I need this system to work for my real estate office.
Thanks,
Joe
Joe28732
Active Member
 
Posts: 14
Joined: December 2nd, 2007, 12:02 am

Re: My computer is sending spam and getting me blacklisted

Unread postby chryssi2001 » December 12th, 2007, 7:55 am

Hi Joe,

RESTORE ENTRIES

Open HijackThis.
Open the Misc Tools section.
Click on backups tab.
Find the lines below.

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03)

Put a tick and click on Restore.
--------------------------------------------
Try to login to that site again, and tell me if it's working.
--------------------------------------------
Now about that sample program problem - do you have the installation disk/program for Intel(R) PROSet?
Can you check that you have the latest version (v10.5 - see >here<)
If you don't have the latest version of Intel(R) PROSet, it can be downloaded from >here<. Ensure you select the correct manufacturer.
Please uninstall Intel(R) PROSet via Start > Control Panel > Add/Remove Programs
Then re-install Intel(R) PROSet

Has that stopped the sample program problem?
--------------------------------------------
You should contact your ISP now you are clean, because there is nothing I or you can do about the blacklisting part.
User avatar
chryssi2001
MRU Teacher Emeritus
 
Posts: 14395
Joined: September 24th, 2006, 2:11 am
Location: far away

Re: My computer is sending spam and getting me blacklisted

Unread postby Joe28732 » December 12th, 2007, 12:48 pm

I followed the steps you provided but the problem with the toolbar on the MLS still exists. I have to use one of the other computers in the office to access it now. I really need to get this corrected soon. I'm sure it will be something simple, what I'm not sure.

I went through the Dell site and entered in may computer info to get the latest update for the PRO/Wireless card I have installed. This took me to a newer version of the software. I did the install and it automatically did the uninstall. I rebooted the computer to Safe Mode and then rebooted to normal and there was no sign of the "Sample" program :cheers: .

Now if we can just get the tool bar to work on the Real Estate Multiple Listing Service (MLS) site I will be finished.

I have been working to get delisted from SPAMCOP and CBL as well as others. My info from SPAMCOP shows that they are still getting SPAM from my IP address. Could it be that someone could be using my ISP at a remote site? I am 100's of yards from any other computers so I don't expect anything else is using my wireless hub. My other two computers are showing clean. The one I use as the printer server hasn't had any new software loaded on it in some time other than Anti-virus updates. I don't even have the email on it set up. Any suggestions?

Here is the HIJACKTHIS log from the server computer. Do you see anything of interest on it?
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:59:19 AM, on 12/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Hewlett-Packard\LaserJet 33xx\hppdirector.exe
C:\WINDOWS\system32\hppapml0.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [HP SchedIndexer] C:\Program Files\Hewlett-Packard\LaserJet 33xx\hppschedindexer.exe
O4 - HKLM\..\Run: [HP AutoIndexer] C:\Program Files\Hewlett-Packard\LaserJet 33xx\hppautoindexer.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: HP LaserJet Director.lnk = C:\Program Files\Hewlett-Packard\LaserJet 33xx\hppdirector.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 4355168131
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {D6376DD2-C2BD-49B2-A1B1-138F869633F3} (ASPRO Installer Class) - http://acs.pandasoftware.com/activescan ... roinst.cab
O20 - Winlogon Notify: avgwlntf - C:\WINDOWS\SYSTEM32\avgwlntf.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)

--
End of file - 5206 bytes


Thanks for your help. And I will certainly be providing $'s to you for all your efforts. Just let me know the best way to donate.

Joe
Joe28732
Active Member
 
Posts: 14
Joined: December 2nd, 2007, 12:02 am

Re: My computer is sending spam and getting me blacklisted

Unread postby chryssi2001 » December 12th, 2007, 4:26 pm

Hi Joe,

I am happy we resolved one of your problems.:)
------------------------------------------
I check with my other two computers and they both work fine with the site http://www.wncmls.com


Do you know if the other two computers have msjava installed? Are they connected with the server from which you posted the latest HijackThis?
Some programs are not updated to work with the latest java version.
So there is a chance that the MSL Toolbar needs msjava to work.

Please check both computers going into Add/Remove programs, and let me know.
------------------------------------------
Nothing bad in the server log you posted.
I can see only a remainant of Symantec AV which you should remove.

REMOVE NORTON

Please click HERE and follow the instructions to download and run the norton removal tool for your own version.

It is strongly recommended that you run only one antivirus program at a time. Having more than one antivirus program active in memory uses additional resources and can result in program conflicts and false virus alerts.
------------------------------------------
Please post back telling me about msjava.
User avatar
chryssi2001
MRU Teacher Emeritus
 
Posts: 14395
Joined: September 24th, 2006, 2:11 am
Location: far away

Re: My computer is sending spam and getting me blacklisted

Unread postby Joe28732 » December 13th, 2007, 1:53 am

I am certain it is not the MSJava. I had removed it from the other computer (desktop) along with an older version of Java. I then downloaded the new Java(TM) 6 Update 3 as you had suggested on the earlier posts for the laptop and istalled it.
I just tried logging into the MLS program with the desktop and it still works fine. The toolbar is as normal even though the only Java I have on the system is the Java(TM) 6 Update 3.
This sounded like a real possibility, but I know for certain that it is something else.
What else do you want me to look for?
Joe
Joe28732
Active Member
 
Posts: 14
Joined: December 2nd, 2007, 12:02 am

Re: My computer is sending spam and getting me blacklisted

Unread postby chryssi2001 » December 13th, 2007, 4:18 am

Hi Joe,

This sounded like a real possibility, but I know for certain that it is something else.
What else do you want me to look for?

Just some things for you to check:
Do you use the same browser on each computer to access the toolbar?
Are the browser settings the same? (allow pop-ups, javascript enabled, etc.) Compare the browser settings of the one that's not working to one that is working.

There is nothing else we did which could create this problem.
This is not a malware problem, either is the problems you have with the spam emails, because you are clean now.

I am afraid there is nothing more we can do with these 2 problems.

You must visit a General Troubleshooting Forum in order to get help for these matters.

Here are some links:
http://forums.whatthetech.com/forums.html
http://www.techguy.org/
http://www.bleepingcomputer.com/forums/

Please refer to this post so the helpers there know what we did about these problems.
----------------------------------------------
If you are interested in Donating at MWR, you can find the link below my signature.
----------------------------------------------
Let's clear out the programs we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if used inappropriately.
Download OTMoveIt by OldTimer to your Desktop.
  • Double click OTMoveIt.exe to launch it.
  • Click on the CleanUp! button.
  • OTMoveIt will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
  • You will be prompted to allow the clean up procedure, click Yes
  • When finished exit out of OTMoveIt
  • Now delete OTMoveIt.exe (if still present)
----------------------------------------------
Congratulations you are clean!
Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

This is a good time to clear your existing system restore points and establish a new clean restore point:
  • Go to Start > All Programs > Accessories > System Tools > System Restore
  • Select Create a restore point, and Ok it.
  • Next, go to Start > Run and type in cleanmgr
  • Select the More options tab
  • Choose the option to clean up system restore and OK it.
This will remove all restore points except the new one you just created.

Here are some free programs I recommend that could help you improve your computer's security.

Install Spyware Guard
Download it from here
Find here the tutorial on how to use Spyware Guard here

Install SpyWare Blaster
Download it from here
Find here the tutorial on how to use Spyware Blaster here

Install WinPatrol
Download it from here
Here you can find information about how WinPatrol works here

Install FireTrust SiteHound
Download it from here

Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.

Visit Microsoft often to get the latest updates for your computer.
http://www.update.microsoft.com

Please check out Tony Klein's article "How did I get infected in the first place?"

Happy safe surfing!
User avatar
chryssi2001
MRU Teacher Emeritus
 
Posts: 14395
Joined: September 24th, 2006, 2:11 am
Location: far away

Re: My computer is sending spam and getting me blacklisted

Unread postby Joe28732 » December 14th, 2007, 11:42 am

I couldn't find any differences with the Java settings from one system to the other. I checked with the MLS site and they suggested re-installing Java. I did this and now everything works great. :roll:
I am still showing issues with the Blacklists telling me that I am still spaming. Is there any way to know if I am spamming?
Can the Comodo Firewall Pro help show this?
Joe28732
Active Member
 
Posts: 14
Joined: December 2nd, 2007, 12:02 am

Re: My computer is sending spam and getting me blacklisted

Unread postby chryssi2001 » December 15th, 2007, 4:49 am

Hi Joe,

I couldn't find any differences with the Java settings from one system to the other. I checked with the MLS site and they suggested re-installing Java. I did this and now everything works great.

Very good! So it seems is was java after all. :)

Can the Comodo Firewall Pro help show this?

You can check the outgoing traffic using your Comodo.

Here is the link for FAQ about Comodo Firewall. You can create a post there and ask about this, or have a read, someone else might had this problem too.
http://forums.comodo.com/frequently_asked_questions_faq_for_comodo_firewall-b32.0/

Do you have any more questions?
User avatar
chryssi2001
MRU Teacher Emeritus
 
Posts: 14395
Joined: September 24th, 2006, 2:11 am
Location: far away

Re: My computer is sending spam and getting me blacklisted

Unread postby NonSuch » December 25th, 2007, 6:17 am

As this issue appears to be resolved, this topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
NonSuch
Administrator
Administrator
 
Posts: 27236
Joined: February 23rd, 2005, 7:08 am
Location: California
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 43 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware