Problem signing into Myebay, online banking Please Help!

[berty7]

Hi all, was recomended by AcroBaze to post my problem here:

Would be very grateful for some help with a PC problem I have as I have no idea how to fix it :upset:


I think I have picked up a virus through my broadband connection whilst online. All of a sudden my connection was cut off. My PC then reconnected itself, but after 5-10 minutes - the same thing happened. This cycle contiuned for around 1hour - I then turned my PC off.
Here is where the problem began, when I reconnected to the internet - I found that when I tried to sign into myebay or online banking I was taken to a ''this page can not be displayed page'. I am also unable to sign into MSN messenger. I do have Norton Antivirus - but this seems to have turned itself off. I ran MSantispyware and AdAware - which found 2 threats, but when deleted the problem perisists.



Any help/advice would be warmly appreciated,

Thx, Berty

[AnnMarie]

Hi Berty, I see that no problems were found in your logs. Just to eliminate other issues, try this, go to Start > Run and type the following lines and press Enter after each line:

regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll

Click OK when you receive the message that "DllRegisterServer in FileName" succeeded.

Reboot and let us know if this helped.

[berty7]

Hi AnnMarie,

Thank you for your help, I typed in all the commands and rebooted but the problem persists. Still unable to access the myebay page, MSN messenger sign in or HSBC Online Banking sign in... This is the message that appears:
The page cannot be displayed

The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.
Underneath this message is tells me to go to internet options to check my security settings:

If you are trying to reach a secure site, make sure your Security settings can support it. Click the Tools menu, and then click Internet Options. On the Advanced tab, scroll to the Security section and check settings for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.

I checked this and found that PCT 1.0 was unchecked - so I ticked it, but this didn't do the trick either.

I really don't know what else to do :(

Should I run a few more scans which I haven't tried yet?
So far I have run MS antispyware, AdAware and House Call,

Here are my results for HouseCall:
We have detected 3 spywarehttp://forums.thetechguys.com/images/smilies/moon.gif on your computer

COOKIE_45

ADW_WINAD.Q

ADW_APROPOS.O


We have detected 4 vulnerability/vulnerabilities on your computer.


Important...........This remote code execution vulnerability could allow a malicious user or a malware to take complete control of the affected system if the affected user is currently logged on with administrative privileges. The malicious user or malware can execute code on the system giving them the ability to install or run programs and view or edit data with full privileges. Thus, this vulnerability can conceivably be used by a malware for replication purposes.;The vulnerability is caused by an unchecked buffer in the Microsoft Office WordPerfect Converter.
MS04-027

Critical..............This vulnerability lies in the way the affected components process JPEG image files. An unchecked buffer within this process is the cause of the vulnerability.;This remote code execution vulnerability could allow a malicious user or a malware to take complete control of the affected system if the affected user is currently logged on with administrative privileges. The malicious user or malware can execute arbitrary code on the system giving them the ability to install or run programs and view or edit data with full privileges. Thus, this vulnerability can conceivably be used by a malware for replication purposes.
MS04-028

Important.............A vulnerability in ASP.NET allows an attacker to bypass the security of an ASP.NET Web site, and access a machine. The attacker gains unauthorized access to some areas of the said Web site, and is able to control it accordingly. The actions that the attacker could take would depend on the specific content being protected.
MS05-004

Critical..............A remote code execution vulnerability exists in MSN Messenger that could allow an attacker who successfully exploited this vulnerable to take complete control of the affected system.
MS05-022

I don't really know what to make of this, could these 4 vulnerabilities be causing the problem?

ThX again :blush:

Berty

[berty7]

Hi AnnMarie,

I found this link to the MS support website which suggests changing the DNS server, do you think this could help?
I through it best to ask an expert before going ahead and changing for fear of doing more damage :(

http://support.microsoft.com/default.aspx?scid=kb;en-us;812336 (http://support.microsoft.com/default.aspx?scid=kb;en-us;812336)


Thx again!

Berty

[AnnMarie]

Hi Berty, I would very much doubt that those alerts have anything to do with your problem. Do you have a XP Installation disk?

[berty7]

Hi AnnMarie,

Yes I do, but I am not great at Computers and would not really know how to reinstall XP without doing damage :(
Or maybe you want me to do something different?

Thx again

Berty

[just_a_nobody]

Do you have a DSL, or cable modem? If so, try disconnecting the power jack, from the modem, for a couple minutes, and then plug the power back in. That will reset your modem, I hope this helps. It could also be your ISP working on their system.

[bAdWaYz]

I'll let Annie keep helping with the security end of things but as for networking do you share this connection with a router, switch, or hub maybe? Or is this a computer thats not networked with any others? As far as dns servers go most isp's will give you two ip's one for the main dns and another as an altern. If you swap the order they are used in lan settings it won't hurt anything. I don't know that it will fix anything but as long as its the isp's dns ip it won't hurt. The reason I ask about if a router is in place is two fold. One would be firewall settings and the other would be the MTU settings. Sometimes if the MTU settings in the router is too high or too low you can't access secure login sites. For dsl it should be between 1400 and 1492 for cable default is 1500.

[AnnMarie]

Try the above suggestions Berty and let us know how you get on.

[berty7]

Thx for the advice everyone,

I tired disconnecting the power, but no luck im afraid.

To bADWaYz, Yes I do share this connection with a router, it is a Vigor2600G Wireless ADSL router from DrayTek. This is connected to my PC by a cable, and wirelessly to another computer. The other computer is fine. Another thing that I have noticed is that my Norton Antivirus has turned itself off, it is still switched on, on the other computer. I was able to run a check online, but no viruses were found.

Could you tell me how do check the MTU settings?

Another thing that may help is if I tell you that the error message on MSN is 0x81000370,

Thx again

Berty

[z1p]

Not sure if it applies here, but M$ seems to recommend registering one more DLL than was in Ann Marie's list. I thought it wouldn't hurt to try it too.

regsvr32 Mssip32.dll

[berty7]

That one didnt work either - but thanks for trying ; )

[AnnMarie]

While you are waiting for bAdWaYz to reply, try some of the troubleshooting steps here (http://support.microsoft.com/kb/870700) Berty.

[bAdWaYz]

I'm not as up to speed on that brand router but did manage to find some info on it. To get into the routers config just use a browser and type in the address bar http://192.168.1.1 hit the enter key and a password login box should come up. The default is to leave login blank and use admin as a password "you should change that at some point". Now that should let you into to routers config area. There are alot of tabs and settings but don't bother with any of them the one you are looking for is MTU. Once you find it you can change the value if need be based on my post above. When done exit the browser and try to go to a secure login page.

[berty7]

I managed to enter the Router Web Configurator, but could not find anything on MTU settings, is there another name for these?

Here is the Setup menu as shown to me:
Basic Setup (Setup First) >> Administrator Password Setup (http://192.168.1.1/doc/chglog.sht)>> LAN TCP/IP and DHCP Setup (http://192.168.1.1/doc/enet.sht)>> Wireless LAN Setup (http://192.168.1.1/cgi-bin/v2x00.cgi?fid=12) Quick Setup >> Internet Access Setup (http://192.168.1.1/doc/internet.sht) Advanced Setup >> Dynamic DNS Setup (http://192.168.1.1/doc/ddns.htm)>> Call Schedule Setup (http://192.168.1.1/doc/schedule.sht)>> NAT Setup (http://192.168.1.1/doc/ip.sht)>> RADIUS Setup (http://192.168.1.1/doc/radius.htm)>> Static Route Setup (http://192.168.1.1/doc/ipstatrt.sht)>> IP Filter/Firewall Setup (http://192.168.1.1/cgi-bin/ipf.cgi)>> VPN and Remote Access Setup (http://192.168.1.1/doc/VRmtAcc.htm)>> UPNP Service Setup (http://192.168.1.1/doc/upnp.htm)>> VLAN/Rate Control (http://192.168.1.1/cgi-bin/vlan.cgi) System Management >> Online Status (http://192.168.1.1/cgi-bin/v2x00.cgi?fid=168)>> VPN Connection Management (http://192.168.1.1/cgi-bin/v2x00.cgi?fid=34)>> Configuration Backup / Restoration (javascript:cfgRestore())>> SysLog / Mail Alert Setup (http://192.168.1.1/doc/syslog.htm)>> Time Setup (http://192.168.1.1/cgi-bin/V2X00.cgi?fid=6)>> Management Setup (http://192.168.1.1/doc/acontrol.sht)>> Diagnostic Tools (http://192.168.1.1/doc/diglan.sht)>> Reboot System (http://192.168.1.1/doc/reboot.sht)>> Firmware Upgrade (TFTP Server) (http://192.168.1.1/doc/frmup.sht)

I entered all of the different menus but could not find the words MTU, am I missing something here?

Thx again,

Berty