Hi there, im an amateur computer user and i seem to have a problem signing in and out of my windows live messenger service (MSN) and associated hotmail account. All started happening when my antivir guard picked up some backdoor.oblivion and backdoor.Plain virus/trojan after my my windows firewall was automatically turned off and i wasnt able to activate it or enter the firewall settings in the control panel ("due to an unidentified problem windows cannot display windows firewall settings") My genius sister then played around with this computer and ended up deleting several files which has resulted in this dilemma of my msn/hotmail account not being able to be accessed. Can anyone help? i have run "hijack this" and seems as though there are some programs missing?..

Not sure if we can help, but we can try.

Do you have a xp cd.

Post your Hijack This log.

Please download SmitRemFix from this link http://siri.urz.free.fr/Fix/Smitfra... Then extract the contents to your desktop.
!!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!!
Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd"
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

SmitFraudFix v2.122

Scan done at 14:23:26.90, Sat 18/11/2006
Run from C:\Documents and Settings\Yeh\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32%ƅ

i have been trying to post the report but the second half of it always comes up jumbled?(so too does my hijack this log) or either of these msgs come up:

"Bad Request

Your browser sent a request that this server could not understand.
Request header field is missing ':' separator."

"Bad Request (Invalid Verb)" - this msg also comes up when i try to sign into my hotmail account

Does this have anything to do with anything? i also cant seem to upload i.e. onto photobucket- "internal system command error"

This is definitely giving me a real headache
Any help is much appreciated.

Try going to control panel> internet options> advanced> uncheck "show friendly HTTP error messages"> apply> ok. Maybe this will help some with the errors.

Then run this spyware/virus cleaning tool.

Please download Dr Web CureIt to your desktop from this link ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
Doubleclick the drweb-cureit.exe file and Allow to run the express scan.
This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it.
This is only a short scan.
Once the short scan has finished, mark the drives that you want to scan.
Select all drives.
A red dot shows which drives have been chosen.
Click the green arrow at the right, and the scan will start.
Click 'Yes to all' if it asks if you want to cure/move the file.
When the scan has finished, look if you can click next icon next to the files found:
If so, click it and then click the next icon right below and select Move incurable.
This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
Save the report to your desktop. The report will be called DrWeb.csv
Close Dr.Web Cureit.
Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
After reboot, post the contents of the log on your desktop.