[earajesh]

Hi,

I am unable to open MyTutor24.com from my PC. It works from another computer at home connected to the same router! Other friends can access the website as well. I have had no problems accessing this website at all previously. The site now does not load and I get a connection timed out message.

The only change in software I did was load Office 2003 last week after removing Office 2000.

I run XP and have done EVERYTHING suggested in this forum. (Clean, WinSock, Ad-AwareSE, Spybot S&D, EWIDO ....)

Here is the HijackThis log file. Any help will be greatly appreciated!

Logfile of HijackThis v1.99.1
Scan saved at 8:17:04 AM, on 7/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\Convoq\ASAP\ASAPSvc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\McAfee\McAfee QuickClean\Plguni.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ePlus48U\ScanPanel\ScnPanel.exe
C:\WINDOWS\SYSTEM32\Wtablet\TabUserW.exe
C:\Program Files\TextBridge Pro 8.0\Ereg\REMIND32.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Network ICE\BlackICE\blackd.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\PROGRA~1\NETWOR~2\COMMON~1\naPrdMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\mnmsrvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\System32\alg.exe
C:\Documents and Settings\Rajesh\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.thehungersite.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
O2 - BHO: (no name) - {3981EF59-469F-4CD1-AEE8-33237B3BAEEA} - C:\WINDOWS\SYSTEM32\y3l.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7A1693A1-AFAF-4F1E-9B05-EEC38A85FBF3} - C:\WINDOWS\SYSTEM32\ppnq6vx.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [CProgramFile0] C:\Program Files\ViaVoice\bin\prtStart.exe 19 51 9 01 2005 "C:\Program Files\ViaVoice\bin\PRTIBM.exe" /splashDelay=3
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\RunOnce: [!CleanupNetMeetingDispDriver] "C:\WINDOWS\system32\rundll32.exe" msconf.dll,CleanupNetMeetingDispDriver 0
O4 - HKCU\..\Run: [ASAPSvc.exe] "C:\Program Files\Convoq\ASAP\ASAPSvc.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [McAfee QuickClean Imonitor] C:\Program Files\McAfee\McAfee QuickClean\Plguni.exe /START
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: ASAP.lnk.disabled
O4 - Startup: reminder-ScanSoft Product Registration.lnk = C:\Program Files\TextBridge Pro 8.0\Ereg\REMIND32.EXE
O4 - Startup: Webshots.lnk.disabled
O4 - Global Startup: ScanPanel.lnk = C:\Program Files\ePlus48U\ScanPanel\ScnPanel.exe
O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\SYSTEM32\Wtablet\TabUserW.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Si&milar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft....204&clcid=0x409
O16 - DPF: {3299935F-2C5A-499A-9908-95CFFF6EF8C1} (Quicksilver Class) - https://scpwka.ops.p...quicksilver.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.c.../ymmapi_416.dll
O16 - DPF: {E5168F0C-8591-11D4-BCDF-006008B7FEA4} - http://www.pwlndemo....ab/pwlninst.cab
O16 - DPF: {F10721FD-18E3-49FE-9F4B-5D47FAEF504E} - http://collaborate.i...l/InstaColl.cab
O23 - Service: BlackICE - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\blackd.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: RapApp - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\RapApp.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe

____
This is a great forum and I look forward to your help.
Thanks,
EAR

[Advertisements]

did you clean out your browser cache (files & cookies) ?

did you run ipconfig/flushdns & ipconfig/registerdns ?

what happens when you ping MyTutor24.com?

check your hosts file for an MyTutor24.com entry.
- ref: http://www.dslreports.com/faq/10131


P2E

[Press2Esc]

did you clean out your browser cache (files & cookies) ?

did you run ipconfig/flushdns & ipconfig/registerdns ?

what happens when you ping MyTutor24.com?

check your hosts file for an MyTutor24.com entry.
- ref: http://www.dslreports.com/faq/10131


P2E

[earajesh]

I did all the things you have suggested.

Here is what I get when I ping mytutor24.com

"Pinging mytutor24.com [63.247.81.242] with 32 bytes of data:
Request Timed Out."

My hosts file is clean with just one entry for local hosts.

My cache is clean.

No change yet in ability to access

THX,
EAR

[EMCguy]

Are you able to access other websites. Is your acess to MYtutor24.com thru some sort of paid subscrption, or thru some special software/appliaction. (I checked - the site is up, and it does look like you do pay for the service). If so, maybe you can uninstall and reinstall any apps from Mytutor24.com? Could your firewall be blocking access to the program or site?

Its hard to imagine how the change from office 2000 to office 2003 would change your access to a website.

If you tried a system restore to before you changed your office porgram, does it work then?

EMCguy

[earajesh]

I am able to access all other websites.

Here are a few more things I have done so far after I read a few more posts on this topic elsewhere. They said that a Flash add on on IE could interfere if the Flash program is corrupted. I undid all the add-on on IE through the add-on's manager.

Presto! Was able to connect to MyTutor24. But my euphoria was short lived. I went to another website and tried to access MyTutor again and NO LUCK :-(

I decided to remove the Google Toolbar as well and re-booted my modem and router as someone said routers may have their own firewalls (?). For what it was worth I also downloaded the Windows Scripting for XP as well as re-load FireFox after uninstalling the earlier version. I also shut down the PC and re-started it.

Here is what I have now -
1. I am able to access MyTutor24.com from the new FireFox as long as I don't try to access the website from IE. Once I do this, I lose access to the site even through FireFox. So I presume that something with IE is preventing access and hoping to re-instal IE. Just reading Microsoft KB and realize that this could be an arduous process.

Any thoughts on what is happening and what I need to do?
THX,
EAR

[earajesh]

Looks like I mis-spoke. I don't have access from FireFox as well even though I did not open IE. Looks like the first time I access MyTutor from FireFox after I re-start my PC, it seems to work, but something happens for repeat access.

This is driving me nuts.

I have not done a system restore yet. How do I do this?

EAR

[EMCguy]

Lets hold off on the restore for now. It can be sort of drastic, and it doesnt make sense that it would really help here.

Do the sites use cookies for registration. Do you have to type in your ID and password each time? Could your browswers maybe be set to reject cookies?

It is at least encouraging that you can get to the site once. What do you have to do to get into the site a second time? Do you shut the computer down each time?

What happens if you visit the site, leave the site, clear your IE history and cookies and then try to get back in?

this is an odd one.

Best regards,

EMCguy

[Scooped]

Very odd indeed!

If the site isn't replying to your pings, that means it's not just your webbrowser.

Did you check your firewall?

I highly doubt it's a server side problem...

Are you sure you're not just advertising for that site?

Edited by Scooped, 21 August 2005 - 02:45 AM.

[bilko6]

Hi

I have the same problem when i try to access my website Innappropriate website removed

It was working fine and just stopped. Everytime i try to access i get the unable to find site message. I have two computers (1 a laptop on wiresless connection) they both can not get the site. All my friends computers have no problem.

I am running windows xp, and internet explorer.

I have also tried all the sugestions above with no success.

Its driving me mad!!

Edited by ScHwErV, 22 August 2005 - 08:28 AM.

[earajesh]

Thanks for both your responses.

I do not have to log in to the site. I am trying to just access it. Not sure if there are cookies that are required, but I doubt this.

I have checked the firewall that comes with XP and it still does not work.

NO - I am not trying to advt. for the site.

Here is where the status is -

1. The site now does not even load on FireFox or IE at all.
2. It does load on my work laptop connected to the same cable modem/router as well as on my kids PC connected to the same cable modem/router. This rules out any issues with connectivity I presume.
3. The fact that the site loaded after I removed a few add-on's on IE briefly suggests that some thing related to IE is responsible for denying access.
4. When I tried to re-install IE (naive me!) thinking it is an easy process, I realized that I have to re-install XP as IE comes integrated with XP. This seems to confirm that any trouble with IE is likely to prevent FireFox as well since IE is integrated with the operating system.
5. I would like to see if re-installing XP-SP2 will solve the problem. I am a little concerned about this process as apparently I have to mess with registry file. Any thoughts on a better process help than what Microsoft puts in its website?

It just bugs me that Microsoft is responsible for putting out a crappy product making us users suffer hours of pain.

Will greatly appreciate any help you can provide.

THX,
EAR

[earajesh]

FOUND THE PROBLEM!

After my last post, I uninstalled XP-SP2 and re-installed it again for IE updates. This did not change the access issues.

I then checked to see if any program I use might have Firewall built in, and I found that the VPN connection I sue to connect to my work servers has an in-built BlackICE Firewall program. Spoke to the tech. support briefly about disabling this temporarily to see if my problem will get solved. Control Panal>Administrative Tools> Services took me to BlackICE which I was able to "STOP" - available as an option.

I have access restored to MyTutor24.

I still do not know hoe BlackICE prevented access as according to my company tech. support, it kicks in only when I access VPN which I have not done for a week or two.

Looks like I might have to re-install the VPN software to see if the BlackICE issue can be resolved.

Thanks for listening and also trying to help.

Great forum. Keep up the good work.

THX,
EAR

[EMCguy]

Glad to hear you got it fixed. It did have that firewall odor about it

Best regards

EMCguy

And thanks for letting us know what it was

[going_crazy]

Hi even i am having aproblem with a site "www.pagalguy.com" .This site is not working for me since 3 months but its working fine rest everywhere .Hope so u guys can help me on this .

[Scooped]

Hi even i am having aproblem with a site "www.pagalguy.com" .This site is not working for me since 3 months but its working fine rest everywhere .Hope so u guys can help me on this .

If you scroll up to the top of any page you can read:

To avoid confusion, do not post your question in someone else's topic. Please start your own.

You gave us no information anyways, how can we be expected to help?