Spamcop Blacklist

Hello all,

It started a week ago when I could not send an email because my IP was blacklisted on spamcop.

I followed the Read & Run me first procedure. I found several things I believe were corrected.

I still continue to be blacklisted almost immediately after automatic delisting. And since I have been trying to troubleshoot this problem, spambayes no long filters my outlook email (I have uninstalled and reinstalled several times) and Firefox can't find the server at en-us.start.mozilla.com. (or any other).

I have 10 PCs connected to the network. How do I figure out which one is the problem if it's not this one?

Jeff

Edit: I forgot to attach the files.

 

And another file. Note:Runkeys.txt is zero length

 

Please post the shownew and runkeys logs.

NOTE: you need to extract all the files in the zip file or they won't run properly. This is probably why your runkeys is zero bytes

 

I unzipped shownew and runkeys. I attached newfiles.txt.

When I run getrunkeys.bat I get the following message:


---------------------------
Notepad
---------------------------
Cannot find the C:\runkeys.txt file.

Do you want to create a new file?
---------------------------
Yes No Cancel
---------------------------


The command window says:

find: Windows 2000: No such file or directory
The process tried to write to a nonexistent pipe.
The process tried to write to a nonexistent pipe.
find: Windows XP: No such file or directory
The process tried to write to a nonexistent pipe.
The process tried to write to a nonexistent pipe.
find: Version 5: No such file or directory
The process tried to write to a nonexistent pipe.
The process tried to write to a nonexistent pipe.
find: Windows 95: No such file or directory
The process tried to write to a nonexistent pipe.
The process tried to write to a nonexistent pipe.
find: Windows 98: No such file or directory
The process tried to write to a nonexistent pipe.
The process tried to write to a nonexistent pipe.
find: Windows Millennium: No such file or directory
The process tried to write to a nonexistent pipe.
The process tried to write to a nonexistent pipe.
Your OS Version is Unsupported

 

Sorry for the delay

hmm thats a little odd, the OS finding worked in shownew fine and its exactly the same code, can you try copying the files to a different location and rerunning them...

 

I extract the files to a directory c:\test using 7-zip and windows and both times I ran it, I got the same messages and no c:\runkeys.txt file.

The whole thing is very strange.

 

I have attached the txt files.

I will rename the Hijack and attach it to my next post.

I installed UltraVNC for a clients IT tech to setup a Cytrix instance. I was not aware it was running, it's only on this PC, I don't know if it is password protected.

 

I tried to use Startup Inspector for Windows to disable UltraVNC but it doesn't show as being on the list of items to run at start-up.

Jeff

 

Ok, I uninstalled UltraVNC, J2SE and FF 1.5.0.8.

I could not find an uninstall for MarketResearch and where do I modify the Dos Path variable. My Config.sys and Autoexec.bat files are empty.

I then installed the current versions of J2SE and FF.

 

I modified the path variable. "MarketResearch" did not show as a program I could uninstall with Your Uninstaller 2006 or SAFARP or Windows Add/Remove.

Do you know what publisher it would be listed under?

My IP is still being regularly blocked by spamcop. Do you know a way I could monitor my network and determine which computer is the culprit?

Jeff

 

I found MarketResearch in the much shorter install list from my wife's notebook. I found it in Spybot - Search & Destroy -> Tools -> Uninstall Info.

The info there:

--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

----CUT HERE----

MarketResearch 60.0.155.000 ({AAA11090-6E99-4655-AAF5-57EB5F677D0C})
version: 1006633115
version (major): 60
estimated size: 3384
install date: 20061020
install source: D:\setup\MarketResearch\
publisher: Hewlett-Packard

----CUT TO END----


The install date shown would be when I purchased and installed my new HP Color LaserJet 2605dn.

The Wireshark is really cool! I have to explore it more, but I would like to be able to show a realtime graphically display of the activity broken down into different IPs and protocols.

Jeff

 

GetUnkey file