MY YAHOO MESSENGER WON'T OPEN UP OR START??

[wagpofafi]

my yahoo messenger wont start anymore, at my first install of it it was running completely ic ould log in and log out without any problem,but after i turn off my pc.and tried to open it, it wont open up anymore,the yahoo messenger version i first installed was V.8,i tried to uninstall at and reinstall it,it still wont open up any more,also tried
V. 8.1 it also wont start or open.i also tried reformat my pc an tried reinstalling it,but still wont open up.what should i do know please help me..

previously posted on the software section.but after doing all the advices they gave me.it still does not start up or open.so we think that the software might not be the problem it might be my unit for having viruses?hope you could help me.

im using:

win XP
professional
version 2002
Service pack 3

Amd Sempron(tm)Processor
3000+
1.81Ghz, 1g ram


[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Looking over your log, it seems you don't have any anti-virus software.

Before we continue download and install a free anti-virus software.

Remember to only install one antivirus!
 
1) Avast! Home Free Edition
2) AVG Free Edition
3) Avira AntiVir Personal
4) Comodo Antivirus
5) PC Tools AntiVirus Free Edition

Now run a new HijackThis scan and post the log.

[wagpofafi]

i had installed avg 8.0. please help me.after the installation of avg. the resident shield detected a threat.and i moved it to the volt.when i have done this.avg was telling me force removal of the said threat could cause system to crash.with this warning i still selected to force remove the object and know i cant access all my drives when i double click it or explore.is this what was avg telling me when i tried to remove it?i have tried system restore hoping that it would come back to normal but it was always restore incomplete.help me please.i dont want to format all my drives.i have files that are needed.help please.i saw the said threat.on the hijackthis log.
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe this was the file that i forced remove 

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Open HijackThis and select Do a system scan only.

Place a check mark next to the following entries: (if there)

- O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe

Important: Close all windows except for HijackThis and then click Fix checked.

Exit HijackThis.

----------

Note: the below instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your system

Go to Start > Run and type notepad.exe then click OK

Copy the text in the Code box below and paste it into Notepad.

Code: [Select]

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentVersion\Run]
"kamsoft"=-

In Notepad go to File > Save as...

Next to File name: type fixme.reg Use the dropdown box next to Save as type: and select All files. Save it to the Desktop.

There should now be a file on the Desktop that looks like this

Double-click fixme.reg it and allow it to merge with the Registry.

You may not see anything happen but give it a few seconds or so to finish.

Now delete the fixme.reg file from the Desktop.

----------

Download SDFix by AndyManchesta and save it to your desktop.

When using this tool, you must use the Administrator's account or an account with Administrative rights

• Double click SDFix.exe and it will extract the files to %systemdrive%
  
• (this is the drive that contains the Windows Directory, typically C:\SDFix).
  
• DO NOT use it just yet.

Reboot your computer in Safe Mode using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Open the SDFix folder and double click RunThis.bat to start the script.

• Type Y to begin the cleanup process.
  
• It will remove any Trojan Services or Registry Entries found then prompt you to press any key to Reboot.
• Press any Key and it will restart the PC.
  
• When the PC restarts, the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
  
• Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt.
  
• Copy and paste the contents of the results file Report.txt in your next reply.

[wagpofafi]

does this process,makes me access again my drives when i double click my drives?because i still cant open my drives when i double click it,it still asking me other programs to open my drives.and i also read the log from the last procedure that you tell me to do.and it says no trojan files found?
help me please.i want my pc to turn back to normal.and i want to use yahoo messenger 

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Run this Disable/Remove Windows Messenger to the Desktop to remove Windows Messenger.

Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Unzip the file on the Desktop. Open the MessengerDisable.exe and choose the bottom box - Uninstall Windows Messenger and click Apply.

Exit out of MessengerDisable then delete the two files that were put on the Desktop.

----------

Download ComboFix by sUBs from one of the below links. Be sure top save it to the Desktop.

Link #1
Link #2

**Note:  It is important that it is saved directly to your Desktop

Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting ComboFix.

Temporarily disable your antivirus, and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.
 
Double click combofix.exe & follow the prompts.
When finished ComboFix will produce a log for you.
Post the ComboFix log and a new HijackThis log in your next reply.

Important: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.

Remember to re-enable your antivirus and antispyware protection when ComboFix is complete.

[wagpofafi]

here are the new logs

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Note: the below instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your system

Delete these files/folders, as follows:

1. Go to Start > Run > type Notepad.exe and click OK to open Notepad.
It must be Notepad, not Wordpad.
2. Copy the text in the below code box by highlighting all the text and pressing Ctrl+C

Code: [Select]

KillAll::

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\C]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
3. Go to the Notepad window and click Edit > Paste
4. Then click File > Save
5. Name the file CFScript.txt - Save the file to your Desktop
6. Then drag the CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below. Important: Perform this instruction carefully!



ComboFix will begin to execute, just follow the prompts.
After reboot (in case it asks to reboot), it will produce a log for you.
Post that log (Combofix.txt) in your next reply.

Note: Do not mouseclick ComboFix's window while it is running. That may cause your system to freeze

[inDio™]

hi there..  i experienced the same problem for almost 3 weeks, but now my YM is working fine.. What i did? i downloaded AVG FREE 8.0 and installed it. When i restart my PC there's a threat found and moved it to vault.. after that YM appeared and seems working just fine.. I tried to close it and hoping that it will open again and it did, with a new threat found and i also moved it to vault.

Just try to do the same.. i hope it will fix your YM.. GudLuck..

[Carbon Dudeoxide]

Just try to do the same.. i hope it will fix your YM.. GudLuck..

Evilfantasy knows what he is doing...

[wagpofafi]

I've got errors during the process.when i dragged the .txt to the icon it runs the my avg detected some kind of a threat.but i just ignored it.then an error message or warning that im not allowed to do the process.but the program still runs.will it effect my log?? 

[recovering disk space -- attachment deleted by admin]

[wagpofafi]

WOW! i've tried installing yahoo messenger and it's working fine now.the tray icon does not disappear any more when i try to open it.i also tried rebooting my pc and it still runs! i'll just monitor it,if the problem appears again back again.many thanks to evilfantasy and Carbon Dudeoxide. thanks a lot!!what should i do now to prevent my previous problem from happening again?? .and can i use this procedures to other pc units with the same problem??

[evilfantasy]

what should i do now to prevent my previous problem from happening again

Wait until you are given the all clear first and I will then give final instructions.

• Click START then RUN
  
• Now type Combofix /u in the runbox
  
• Make sure there's a space between Combofix and /u
• Then hit Enter.

.

.

• The above procedure will:
• Delete the following:
• ComboFix and its associated files and folders.
• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Set a new, clean Restore Point.

.
----------

Download ATF Cleaner by Atribune to your Desktop.

Alternate download link

Note: Vista users must use Run As Administrator

• Under Main: Select Files to Delete choose: Select All.
  
• Click the Empty Selected button.
  
• If you use Firefox browser click Firefox at the top and choose: Select All
  
• Click the Empty Selected button.
  If you would like to keep your saved passwords click No at the prompt.
  
• If you use Opera browser click Opera at the top and choose: Select All
  
• Click the Empty Selected button.
  If you would like to keep your saved passwords click No at the prompt.
  
• Click Exit on the Main menu to close the program.

Note that your system will run slower for a reboot or two after having used this tool so don't panic.

Important: Restart the computer before continuing.

----------

Download OTCleanIt.exe and save it to your Desktop.

• Double-click OTCleanIt.exe.
  
• Click the CleanUp! button.
  
• Select Yes when the "Begin cleanup Process?" prompt appears.
  
• If you are prompted to Reboot during the cleanup, select Yes.
  
• The tool will delete itself once it finishes, if not delete it yourself.

.
----------

Run the Kaspersky Online Scanner

In Microsoft Windows Vista, you must open the Web browser using the Run as Administrator command. From the Desktop right click the icon to open the browser and choose Run as Administrator.

• Click on SCAN NOW
  
• Click Accept.
  
• The program will then begin downloading the latest definition files.
• Once the files have been downloaded locate the Scan Settings and have it scan My Computer.
  
• The scan will take a while, so be patient and let it finish.

.
When the scan is done, in the Scan is complete window, any infection is displayed.
There is no option to clean/disinfect, however, we need to analyze the information on the report.

To obtain the report:
Click on: Save Report As

• Next, in the Save as prompt, Save in area, select: Desktop.
  
• In the File name area use KScan, or something similar.
  
• In Save as type: click the drop arrow and select: Text file [*.txt]
  
• Then, click: Save

Copy and paste the Kaspersky Online Scanner Report in your next reply.

Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.

[wagpofafi]

sorry i thought it all alright when i have run my yahoo messenger.and access my drives.when i tried visisting the kaspersky lin with firefox.my firefox explorer has error message that tells me that my firefox needs to close.and on my internet explorer but it only happens when i close my internet explorer the same message comes out.

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

Do you know what this belongs to?

restart.exe