Jump to content

Still having problem after opening a port


Recommended Posts


When i try to download something using utorrent the indicator in the below goes to red saying that 'Not connectable A firewall/router is limiting your network traffic.You need to open up a port so others can connect to you.' So i logged in to my router(DI-524) and followed the steps mentioned in http://www.portforward.com to open a port but still the message is displayed as port number 59538 is not open...

I dont know if i am using any firewall or not..How do i know that..

Please help me..

Thanks & Regards,

Sudhakar Karnati

Link to comment
Share on other sites

This is the log of Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 11:30:05 PM, on 7/16/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:











C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe






C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\Java\jre1.5.0_13\bin\jusched.exe





C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe



C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Windows Media Player\wmplayer.exe


C:\Program Files\uTorrent\uTorrent.exe


C:\Documents and Settings\RAMESH ALE\Desktop\HijackThis.exe


R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ptec/defaults/sb/*http://www.yahoo.com/search/ie.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ptec/defaults/sp/*http://www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ptec/defaults/su/*http://www.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.yahoo.com/

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Dipak Bhattarai

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe C:\WINDOWS\system32\VirusGuard.vbs

O1 - Hosts: 972.aksjd11.com

O1 - Hosts: w3og.cn

O1 - Hosts: qazc.fourtw.cn

O1 - Hosts: www.aujoy.cn

O1 - Hosts: www.hao601.cn

O1 - Hosts: www.psp476.cn

O1 - Hosts: 222.1212l112.net

O1 - Hosts: 444.1212l112.netn

O1 - Hosts: 555.1212l112.net

O1 - Hosts: 111.1212l112.net

O1 - Hosts: 111.3243l24.com

O1 - Hosts: 222.3243l24.com

O1 - Hosts: 333.3243l24.com

O1 - Hosts: kao2.gmwo03.com

O1 - Hosts: kao.gmwo06.com

O1 - Hosts: 444.gmwo07.com

O1 - Hosts: ru.update365.us

O1 - Hosts: ad.update365.us

O1 - Hosts: popmails.net

O1 - Hosts: 3.goodhh.com

O1 - Hosts: down.rwixr.com

O1 - Hosts: www.xdj2008.com

O1 - Hosts: www.revtr.cn

O1 - Hosts: qq.ljsll.com

O1 - Hosts: www.aassccwe.cn

O1 - Hosts: 973.aksjd11.com

O1 - Hosts: 974.aksjd11.com

O1 - Hosts: 971.aksjd11.com

O1 - Hosts: 975.aksjd11.com

O1 - Hosts: user1.12-39.net

O1 - Hosts: www.infomt.net

O1 - Hosts: ata1.sysions.net

O1 - Hosts: ata2.sysions.net

O1 - Hosts: ata3.sysions.net

O1 - Hosts: ata4.sysions.net

O1 - Hosts: 8nnnnn99.cn

O1 - Hosts: www.haoaoao.cn

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_13\bin\ssv.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit


O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_13\bin\jusched.exe"

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm

O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_13\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_13\bin\ssv.dll

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O17 - HKLM\System\CCS\Services\Tcpip\..\{D039F071-0A9B-48B5-B6E5-926FFD8541F9}: NameServer =,

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL

O21 - SSODL: DesktopWin - {DA191DE0-AA86-4ED0-4B87-292A3D48BE99} - C:\WINDOWS\AppPatch\DesktopWin.dll

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Please advice me if anything is wrong.

Link to comment
Share on other sites

... virusguard.vbs on the userinit?? Did you do that? If not, you're infected.

I think i am infected please tell me some tool to remove that..When i opened my internet explorer title is showing as 'Deepak Bhattaraj' and i could not find the virusguard.vbs under this directory C:\windows\System32 though it is shown by Hijackthis tool..

The rerouted Hosts ips are troubling too.

How do i resolve this problem..Please help me..

Thanks & Regards,

Sudhakar Karnati

Link to comment
Share on other sites


This topic is now archived and is closed to further replies.

  • Create New...