• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Cant load Ebay pr Paypal pages.. But all other are OK..

TrukinDave

Diamond Member
Here is what I have done so far:

Heres my Hijack this file.. No idea what the problem is.

I cant load ebay or paypal.. But every other site on the planet loads properly..

when I try to go to www.ebay.com Either 1 or 2 things occur..

(1) when I type www.ebay.com it states waiting for http://www.ebay.com/.. Then it takes me to this page http://search.live.com/results.aspx...&src=IE-address

(2) when I type www.ebay.com it also states waiting for http://www.ebay.com/.. Then it will go to a page that internet explorer cannot dispay the webpage then states most likely causes then what I can try..

Between 1 and 2 I have been fighting this now for 6 hours.. Time for the Pro's (LOL)

Heres what I have done lately.. I downloaded norton antivirus and premier system works. didnt like it deleted it ( Uninstalled properly of course

This afternoon I got on ebay, checked my auctions, and logged off.. 2 hours later tried to logon to ebay and paypal and got the responses listed above. Downloaded some windows updates ( no help ) downloaded mcafee firewall, And antivirus..

Mcafee virus found 1 virus ( new malware .j ) Mcafee Quaranteen it. but didnt change anything..

Not really sure whats causing these ebay and paypal not to work but everything else to load properly..

Any help would really be appreciated .. Thanks in Advance..

here is the log from hijack this..

Logfile of HijackThis v1.99.1
Scan saved at 12:27:24 AM, on 2/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\McAfee\MSK\MskAgent.exe
C:\Program Files\SiteAdvisor\6021\SiteAdv.exe
C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\MSC\mctskshd.exe
C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\SiteAdvisor\6021\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Dave\LOCALS~1\Temp\OnlineScanner\Anti-Virus\fsgk32.exe
C:\DOCUME~1\Dave\LOCALS~1\Temp\OnlineScanner\Anti-Virus\fssm32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.insightbb.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: McAfee Popup Blocker - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - c:\program files\mcafee\mps\mcpopup.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [syswin] C:\WINDOWS\v6.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [EAPCIStarter] C:\WINDOWS\system32\starter.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [DevconDefaultDB] C:\WINDOWS\READREG /PSCONV={NO} /NO_DEFPS
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6021\SiteAdv.exe
O4 - HKLM\..\Run: [McAfee Backup] C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: MBackMonitor - - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Task Scheduler (mctskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe
O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6021\SAService.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)
 
If you don't have antivirus, you should get some: http://www.mechbgon.com/build/kaspersky.html Free is good. Kaspersky for free is better. 😎 Make sure to configure it like I show there. If you have an antivirus software already, remove it before you install Kaspersky, so they don't clash.

After installing & configuring it, updating it and rebooting, now run a full Scan My Computer and see if it detects viruses.


Also check your computer's time of day, and the date as well. Secured websites require that your system's time and date are not too far off.

Any good?
 
does it say anything when you try to log on? what browser are you using. Give us as many details as possible.
 
What browser are you using?

Is SSL enabled?

If you are using Internet Explorer, what is the cipher strength?

Can you access other secure websites?
 
Hello

I am using internet explorer 7, When I try to log on to Ebay or paypal This is what I see.. ( Waiting for http://ebay.com/... ) OR ( waiting for http://paypal.com/... ) Then after 20 seconds it goes either to a page telling me it cant load like its not there,
or to http://search.live.com/results.aspx?q=www.ebay.com******=IE-Address

It looks like a MSN live search page..

I can go to just about anything on the net.. except to Ebay.. Either by me typing it in Direct or by a link off the net..

I downloaded Mcafee virus protection ran it.. (1) virus found ( Quaranteened it ) Then downloaded the personal firewall.. And ran everything .. but nothing has changed.. Still cant get to these 2 sites..
 
Originally posted by: TrukinDave
Hello

I am using internet explorer 7, When I try to log on to Ebay or paypal This is what I see.. ( Waiting for http://ebay.com/... ) OR ( waiting for http://paypal.com/... ) Then after 20 seconds it goes either to a page telling me it cant load like its not there,
or to http://search.live.com/results.aspx?q=www.ebay.com******=IE-Address

It looks like a MSN live search page..

I can go to just about anything on the net.. except to Ebay.. Either by me typing it in Direct or by a link off the net..

I downloaded Mcafee virus protection ran it.. (1) virus found ( Quaranteened it ) Then downloaded the personal firewall.. And ran everything .. but nothing has changed.. Still cant get to these 2 sites..
1) what virus did it find, exactly? Knowning what virus may help.

2) so at this point, do you have an active, always-on antivirus software, or not? I'm not clear on this yet 🙂 If you don't have an active antivirus program providing non-stop protection, then try my suggested one.
 
Try flushing your DNS cache with ipconfig /flushdns at the command prompt to make sure your system is not using an outdated DNS entry for ebay/paypal.

Also, perhaps try power cycling your router/modem.

Unfortunately, there's many possibilities for the issue you are facing 🙁
 
Originally posted by: TrukinDave
Hello

The Trojan it found was ( new malware .j ) Thats the one that Mcafee quaranteened..
Ok, now do steps 3 and 4 that I mentioned above.

Also:

1) open Notepad (Start > All Programs > Accessories > Notepad)

2) in Notepad, click File > Open and open C:\Windows\System32\Drivers\Etc\HOSTS. This file should have a couple remarks at the top, and then a single line that says 127.0.0.1 localhost. Scroll down to make sure there's nothing else beyond that. If there is, delete it all.

3) since the virus that was detected is a generic detection, get a "second opinion" by going to http://support.f-secure.com/enu/home/ols.shtml, scroll down to the bottom, and click Start Scanning. Run a full scan, including rootkit detection, and note down the exact names of anything that is found.

 
Hello

I went to use the F-secure online scanner... It stated that I have insufficient rights to use active x controls and internet explorer security settings?? I am completely lost (LOL)
 
Hello

I finally got it to run f-secure.. I will let you know how it turns out.. All the windows upgrades were allready installed..
 
Did the F-Secure online scanner find anything amiss? Your HJT log doesn't look bad, although I'm not a specialist in HJT analysis.
 
Click on the Start button > Run > cmd and click OK. A command-line window opens.

Type the command tracert www.ebay.com and press the Enter key. What's it say? Should be something sort of like this (and it will keep going)
Tracing route to hp-core.ebay.com [66.135.192.123]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 10.0.0.1
2 3 ms <1 ms 1 ms
 
Originally posted by: TrukinDave
Hello

I did that and took me to the msn page again??
I don't understand. You're typing a command (namely tracert www.ebay.com) into a black command-line box similar in appearance to this one, pressing the Enter key on the keyboard, and watching for a result. What result do you get?

 
CCleaner 3.37

Download and install this and run it a couple of times. This will go through and delete all temp files, internet caches and cookies, etc. You may have a corrupted file in there somewhere that needs to be cleared out.

I use CCleaner on a regular basis and love it.

Also, if this doesn't fix your particular problem, try Firefox as mentioned above.

Good luck!
 
Originally posted by: mechBgon
Click on the Start button > Run > cmd and click OK. A command-line window opens.

Type the command tracert www.ebay.com and press the Enter key. What's it say? Should be something sort of like this (and it will keep going)
Tracing route to hp-core.ebay.com [66.135.192.123]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 10.0.0.1
2 3 ms <1 ms 1 ms

Yeh, or tracert ebay.com>ebaytest.txt and press Enter. Then copy and past the contents of ebaytest.txt here
 
Hello, Ebay started working again as well as Paypal.. But no more chances.. I just redid the PC and did a low level format of the hard drive and wiped it clean with "0000000"'s all through the drive, removed my RAM, And cleaned the PC cache and everything.. So I started new 🙂

Thanks for all the help..

Actually when you told me to type tracert www.ebay.com I was doing that in IE instead of at a command promt.. No wonder I went back to msn (LOL) that me for not looking ..


Thanks all..
 
Hello, Its doing it again (LOL) I did the tracert www.ebay.com everything looked good till it got past 10 then it went like this

11 * * * request times out
12 * * * request times out

And it kept doing it all the way up..

I dont understand what this PC is doing (LOL)
 
Back
Top