Anilrgowda

Hello everyone,
I'm working on a notebook running windows xp, it had a few viruses on it when it came to me...it also had mcafee installed. I've run vscleanuptool from mcafee to suposedly remove it. Installed AVG, updated virus definitions. They already had sypbot s&d and adaware, I updated spybot and scanned, no threats found, adaware was up to date, I scanned with it, nothing found. Scanned with avg, found and removed 11 infected files. I still have a couple strange things happening.
First, I cannot log onto msn messenger or windows messenger. When I try msn messenger (version 7.5), it indicates the firewall may be blocking access:

"Signing into msn messenger failed because the service is temporarily unavailable. Please try again later.
MSN messenger has made several attempts to sign you in. Your firewall may be blocking messenger from connecting to the service. Please review your firewall settings. See the retailer's instructions for more information"
80048883

when I click the troubleshoot button, it gives an error on "key ports". I turned off the windows firewall and the same thing is happening. The internet connection is fine, as I'm posting from the laptop.

this happens with more than one messenger account, both of which work on my other computer when connected to the exact same cable modem.

I've since uninstalled/reinstalled messenger, same problem. I've tried msmsgs.exe (windows messenger), both accounts indicate the passwords are incorrect when I try to sign in. I've scanned with AVG again, nothing found. I downloaded HJT to the notebook, but when I tried to unzip it I got a window titled "Windows security warning", the dialogue was "windows has blocked access to these files to protect your computer"
"windows blocks files that are marked as not trusted" then it has a link saying "Why were these files blocked and how can I open them"....when I click the link it says
If you are certain that you trust this file and want to open it, follow the instructions below.

Save the file onto your computer.
Click Start, click My Computer, and navigate to the file that you saved.
Right-click the file that you saved, and then click Properties.
Click Unblock near the bottom of the dialog box.

I've tried this, but there is no unblock in the properties of the file...and I've never heard of this before...what's going on?

I did manage to get HJT onto the notebook but unzipping it on my other computer, putting the exe on an external hdd and moving the exe to the notebook....here is a HJT logfile:

Logfile of HijackThis v1.99.1
Scan saved at 12:51:55 PM, on 2/19/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\(username removed)\Desktop\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: Windows Defender Service (WinDefend) - Unknown owner - C:\Program Files\Windows Defender\MsMpEng.exe (file missing)

------------------