Over 1 million tech questions and answers.

your request originated from a website that livelink identified as potentially unsafe

Q: your request originated from a website that livelink identified as potentially unsafe

Hi,
Getting the below message when clicking a link in a website which opens in New Tab. I checked that both sites are in Trusted Sites


But the same URL works http://validateddms.abc.net/OTCS/cs.exe?func=llworkspace copied to new tab. Please advise why the error happens
in it automatically opens in new tab

Regards, Boopathi

Read other answers
RELEVANCY SCORE 200
Preferred Solution: your request originated from a website that livelink identified as potentially unsafe

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 75.2

Is there any way of peeking inside an exe?
 
There is this "Free steam games exe" file. Now I know these are all risky, however this video I'm seeing is the first legitimate one I have ever seen.
 
The vast majority of people I see making comments like it very much, and only a few report a virus. Those may be false alerts, or perhaps true ones.
This channel isn't some trash channel either, it's actually doing rather alright
 
The video has a quarter of a million views and instead of a red lightsaber, it' nearly the other way around. I'm tempted to believe that this is real. But how.... can I inspect its exe file?

A:Testing a potentially unsafe exe

You can upload a file to a scanner such as VirusTotal.However as a Steam gamer I wouldn't touch it with a ten foot pole... there is no such thing as "free Steam games".If something sounds too good to be true, it probably is.

Read other 18 answers
RELEVANCY SCORE 72.8

I am attaching the detected threats log files from  ESET antivirus scans. ESET state that there are no infections on my computer.
 
My computer has slowed down and I think that it's because of the Potentiallt Unwanted and Unsafe Applictions (PUAs) as shown in the log file.
 
I have checked on my control panel and there are no softwares which I don't recognise.
 
Is there a way to manually delete the PUAs from my computer and would this bring my computer back to normal.
 
I have attached the Detected Threats log file.
 detected threats.txt   45.31KB
  5 downloads

A:Potentially Unwanted and Unsafe Applications on ESET antivirus

I've checked that log out & you need to scan with a more powerful tool.
 
Do you have Malwarebytes (MBAM) Free installed? If not, download, install & update it, then run a Custom Scan (this is the only way to scan all drives, be sure to place a check mark in all). Make sure that in the Advanced options, scan for rootkits, quarantine all threats automatically & scan within archives are selected.
 
https://www.malwarebytes.org/free/
 
Cat

Read other 9 answers
RELEVANCY SCORE 72

My computer has slowed down a lot and I think it's because of Potentially Unsafe/Unwanted Applications (PUAs0 which have shown up in a ESET scan and are in the detected threats log which I have attached.
 
ESET state that there are no infections on my computer but i think that someway the PUAs are the cause of the problem.
 
I have attached the dds logs and detected threats log
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702  BrowserJavaVersion: 10.25.2
Run by UserA at 16:37:40 on 2014-04-28
Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.3325.1791 [GMT 7:00]
.
AV: ESET NOD32 Antivirus 7.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
============== Running Processes ================
.
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Nuance\dgnsvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe
C:\Program Files\Genie9\Genie Timeline\GenieTimelineService.exe
C:\WINDOWS\system32\KaraokeSer.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Documents and Settings\All Users\Applic... Read more

A:Potentially Unwanted/Unsafe Applications on ESET antivirus and possible malaware

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).===Download the correct version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The... Read more

Read other 8 answers
RELEVANCY SCORE 70.4

I am using Outlook 2007.

I click on a vendor's websites contact link .

Outlook is launched and I compose the message. When I click on the send button, Outlook closes and the message just goes to the Outbox and will remain there until I reopen Outlook and manually send the message.

Why does this happen?

Is there a way to setup Outlook so that I don't have to manually send the message ?

Thanks

A:Mail is in outbox when originated from link in vendor's website

Take a look at these links:
How to troubleshoot mail stuck in the Outbox
Delete a message stuck in the Outbox - Outlook - Office.com

You may also try changing server time-out from account settings.

Read other 9 answers
RELEVANCY SCORE 61.6

I'd like to get a quicker boot time if possible on my machine. I know ive got a few things running and it appears a lot of things that probably arent system related.

Is there some place I can check to see what is safe or not safe to uncheck within Autoruns?

A:Is there a website to see what is safe/unsafe to check in Autoruns?

autoruns is a dangerous program to play about with if you aren't sure what you are doing.

a safer tool to use is probably the microsoft system configuration tool. type msconfig into your startmenu searchbox, and check out the 'Startup' tab, where you'll see a list of (mostly) third-party software that is set to autostart with windows.

you'll be able to untick any you don't need, which may well be most of them. make sure you don't disable anything associated with your antivirus software. it's simple to untick and reboot to see if everything still works as you want - if it doesn't then simply tick them back on.

Read other 9 answers
RELEVANCY SCORE 61.6

I checked to see if this particular topic had been covered here at BC, and did not find any info.  (Could have missed it.)  Yesterday, started to receive this notice when I try to access one particular website (my Home Page).  So far, this does not pop up when I access other websites.  I've Googled the topic and it appears this is a fake notice.  I tried to fix the problem, myself.  I thought I was successful late last night (it worked for a while) -- but notice started popping up, again today.  Here's what the page looks like.   
https://fbcdn-sphotos-b-a.akamaihd.net/hphotos-ak-frc3/t1/s403x403/1505183_725399287499713_1248234342_n.jpg
 
Can someone help?  Thanks, AnaL

A:Fake notice: "This website has been reported as unsafe"

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwarebytes' Ant... Read more

Read other 55 answers
RELEVANCY SCORE 59.6

Hi --

Hoping you can help us.

We have a couple of websites on two different servers with the same host company. In the past few months, both sites have been infected. We have cleaned the affected files, changed the passwords, and upgraded the software, but the infections return. While we are diligent about scanning and updating the Anti-Virus software on our computer, as well as running Ad-Aware and Spybot, we are concerned that the infection may be in our computer, and not on the server as originally thought. Before we go about changing passwords again, we would like to verify that our computer is clean.

We have also noticed that some Internet access tends to be sluggish. Not sure if it is at all related, but just thought I would add that observation.

We can't quite figure out where to look, so we are hoping you will be able to help us.

Here is the log from HijackThis.

Thanks so much.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:35:06, on 06/14/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResp... Read more

A:Potentially compromised PC - website infected

Read other 15 answers
RELEVANCY SCORE 58

I have been having an issue with my assembled desktop computer running on Windows 7 32 bit. I have installed MalwareBytes Anti-malware. Recently, it started showing pop ups saying "Successfully blocked access to a potentially malicious website (IP No. 37.1.206.9)" and the process is shown to be  svchost.exe (outgoing). I have tried scanning with Malwarebytes, both quick and full scan, but still the pop ups come back time and again. I fear there is some serious breach of security. Please advise.

A:Successfully blocked access to a potentially malicious website: 37.1.206.9

No no...that's Malwarebytes doing it's job of blocking bots looking for backdoors to infiltrate your system....those popups are normal. I see them all the time...especially more so on certain websites and forums I use. It just depends on what kind of security those website have in place...some have better protection than others.

Read other 7 answers
RELEVANCY SCORE 58

Okay well i don't know what to do about this... I ran my AVG and Malwarebytes about 2 times each to try and get rid of this however i had no luck ):Please help me I have Windows VistaI have about 3 different IP's that keep popping up

A:Succesfully blocked access to a potentially malicious website:IP HERE

Anyone ? );

Read other 1 answers
RELEVANCY SCORE 58

Hello computer experts!

My laptop appears to be infected with a plethora of virus/ torjans etc and i have tried all scans etc but things just keep reapprearing.

The problems are:

1) something reconfigured my internet settings

2) continutal blocking by anti malware of 'potentially malicious websites', e.g. 208.87.33.151

3) trojan horses are continally being found by avira anti-vir, e.g tr/kazy.35735.1 (which is flagged as a torjan horse generic 24.bkkc

Please advise guys, i would greatly apprehciate it as i have no idea what else to do.

sam

A:potentially malicious website keeps being blocked by anti-malware

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

Read other 50 answers
RELEVANCY SCORE 58

I've been having this pop up for a while now, with different IPs each time.
The only one I remember is 194.156.0.3.
Any help would be appreciated.
EDIT: 194.156.0.3 is a recurring IP.

A:Successfully blocked access to a potentially malicious website.

Bumpitybump?

Read other 2 answers
RELEVANCY SCORE 58

I am a tech; I have a customer's PC that while using WIFI (only) recieves constant pop up's from Malwarebytes AntiMalware v1.56 that it has "Successfully blocked access to a potentially malicious website....

No way to stop it that I know of or can find. Malwarebytes.org is no help at all. Anyone have a clue? Maybe a good app that shows/deletes svchosts or finds what to do next. Kills processes, etc

A:"Successfully blocked access to a potentially malicious website

Malwarebytes.org is no help at all.Hi cpu doc -What was the reply from the Malwarebytes forum on that issue ??To stop the notifications on Malwarebytes Anti-Malware Pro version, first make sure it is fully updated (V1.56 was outdated about Christmas time)When the pop up of the IP occurs (first it means a bad site that is being blocked) you Right click on the Tray Icon and "add the IP to Allowed sites".These pop ups are telling you that the computers are accessing Blacklisted sites. Next check that the correct exclusions are added to the installed Antivirus program.All this information is available from the MBAM forum, and will depend on certain specific items. None of which you have supplied yet.Thank You -

Read other 1 answers
RELEVANCY SCORE 57.6

I malwarebytes pro and continually get popups that say "Successfully blocked access to a potentially malicious website and then give a code of incoming or outgoing.

many different codes show up:
83.133.124.245 incoming
83.133.121.147 outgoing
63.223.106.17 outgoing
89.28.105.113 outgoing

what should I be doing to stop these popups or successfully deal with the issues?

I do full scans of my system with malwarebytes and it shows nothing.

many thanks,

Ken

A:successfully blocked access to a potentially malicious website 83.133.124.245 incoming

Please follow the instructions in ==>This Guide<== starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Read other 1 answers
RELEVANCY SCORE 57.6

I have Malwarebytes installed and I keep getting the message pop up: Successfully blocked access to a potentially malicious website type incoming and outgoing.
Is my computer infected?

A:Malwarebytes: Successfully blocked access to a potentially malicious website

" To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. "

You might wanna do this tis' a rule here

Read other 4 answers
RELEVANCY SCORE 57.6

Hi, I am new to this but seem to have a problem with Malwarebytes & I currently cannot standby or sleep my computer.  My mbamservice.exe seems to be running high (~120,000 K mem usage) and every few mins I get a pop-up from Malwarebytes saying: "Successfully blocked access to a potentially malicious website: 66.150.14.?? Type: outgoing" ??=.12, or .40 or .41 or .42.
 
I have seen a post here from someone else who had this same message on Oct 12 2012 http://www.bleepingcomputer.com/forums/t/471136/browsers-trying-to-connect-to-potentially-malicious-websites/
Forum Addict BC Advisor said to download & scan with TDSSkiller. Launch it. Click on change parameters-Select TDLFS file system. Click on "Scan".Please post the LOG report(log file should be in your C drive). Do not change the default options on scan results. Download.  
This found 0 threats.
aswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan. After scan finishes,click on Save logPost the log results here. If you get crashes in normal mode,run it in safemode with networkingDownload
Log results attached
ESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threats
Export the list to desktop,copy the contents of the text file in your reply
Note: this said “Another anti-virus software was detected. This may affect t... Read more

A:Malwarebytes potentially malicious website 66.150.14.?? + mbamexe high mem usage

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.
 
If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===
Please download ComboFix from one of these locations:
IMPORTANT !!! Save ComboFix.exe to your DesktopDisable your Anti-Virus and Anti-Spyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools.Double click on ComboFix.exe & follow the prompts.As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal.  It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.Some Rookit infection may damage your boot sector. The Windows Recovery Console may be needed to restore it. Do not bypass this installation. You may regret it.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Wi... Read more

Read other 18 answers
RELEVANCY SCORE 57.6

For the last 5 minutes I have been getting this pop-up every 10 seconds, the website is 195.161.25.18, type:incoming, process: svchost.exe.
I ran SuperAntiSpyware which found 18 tracking cookies which I removed, MalwareBytes found nothing and I did a CCleaner sweep. Advice?

Another one just showed up, the website is different: 77.78.229.60, also svchost.exe
Thank you.

edit: another pop-up, website 91.188.38.18 (don't know if this is relevant, so just in case)

A:MalwareBytes: Successfully blocked access to a potentially malicious website

Hello, well the IP is not a good one.http://myip.ms/view/ip_addresses/3282114816/195.161.25.0_195.161.25.255#p_ownerYou have the Paid MBAM?Please Download TDSSkiller Launch it. Click on change parameters-Select TDLFS file system Click on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan results.ADW CleanerPlease download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on adwcleaner.exe to run the tool.Click on Delete.Confirm each time with Ok.You will be prompted to restart your computer. A text file will open after the restart.Please post the contents of that logfile with your next reply.You can find the logfile at C:\AdwCleaner[S1].txt as well.>>>>I'd like us to scan your machine with ESET OnlineScanHold down Control and click on this link to open ESET OnlineScan in a new window.Click the button.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.Double click on the
icon on your desktop.Check "YES, I accept the Terms of Use."Click the Start button.Accept any security warnings from your browser.Under scan settings, check "Scan Archives" and "Remove found threats" Click Advanced settings and select the following:Scan potentially unwanted applicationsScan for potentially un... Read more

Read other 25 answers
RELEVANCY SCORE 57.6

I have Malwarebytes installed and I keep getting the message pop up: Successfully blocked access to a potentially malicious website type incoming and outgoing.
Is my computer infected?

A:Malwarebytes: Successfully blocked access to a potentially malicious website

Are you browsing a specific website when this appears?

Read other 7 answers
RELEVANCY SCORE 56.8

Malwarebytes successfully blocked access to a potentially malicious site website 88.214.193.54.  I am getting this message every couple of seconds and doing a search I see this is a virus.  I need help as I have never had a virus and the removal appears to be complicated.  Can someone help?
 
Thanks!!!

A:Malwarebytes successfully blocked access to a potentially malicious site website

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
At the end, be sure a checkma... Read more

Read other 15 answers
RELEVANCY SCORE 56.8

Hi guys, I need some help. Everytime I open my chrome I got the pop up and I think the IP is not the good one. I already ran some anti malware and found nothing. 
I was attacked last week with trojan, malware, etc. So I though my pc isn't clean enough.
 
Below are the 2 DDS logs:
 
 
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 8 Pro with Media Center
Boot Device: \Device\HarddiskVolume1
Install Date: 7/26/2012 8:45:45 AM
System Uptime: 5/31/2013 7:22:24 PM (0 hours ago)
.
Motherboard: MICRO-STAR INTERNATIONAL CO.,LTD |  | 785G-E53 (MS-7576)
Processor: AMD Phenom™ II X4 955 Processor | CPU1 | 3200/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 119 GiB total, 17.249 GiB free.
D: is CDROM ()
E: is FIXED (NTFS) - 1863 GiB total, 1502.878 GiB free.
F: is FIXED (NTFS) - 270 GiB total, 2.164 GiB free.
G: is FIXED (NTFS) - 195 GiB total, 15.508 GiB free.
H: is FIXED (NTFS) - 1863 GiB total, 4.264 GiB free.
I: is CDROM (CDFS)
J: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP24: 5/22/2013 2:20:59 AM - Cloud System Booster 
RP25: 5/23/2013 8:28:08 PM - RegRun Virus Scan
RP26: 5/26/2013 9:04:09 PM - RegRun Virus Scan
.
==== Installed Programs ======================
.
Ad-Aware Antivirus
Ad-Aware Security Add-on
AD Blocker
Adobe AIR
Adobe Creative Suite 6 Mas... Read more

A:Chrome error 138 and MBAM blocked access to a potentially malicious website

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Search and delete the AdWare, PUP (Potentially Unwanted Program) installed on your computer.Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete tab follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Rn].txt (n is a number).=== Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete, depending on your system's specifications.On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.Please post the contents of JRT.txt into your reply.===--RogueKiller--Download & SAVE to your Desktop RogueKiller for 32bit or Roguekiller for 64bit Quit all programs that you may have started.Please disconnect any USB or external drives from the computer before you run this scan!For Vista or Windows 7, right-click and select "Run as ... Read more

Read other 6 answers
RELEVANCY SCORE 56.8

Hello. My computer had gotten extremely slow and opening new tabs on Firefox that I don't think I opened, so I downloaded Malwarebytes today. Ever since I downloaded I keep getting a pop up message that states "Successfully blocked access to a potentially malicious website (then the ip address) Type: outgoing. The IP address changes frequently but I have noticed a couple that keep appearing. My scan did show 2 trojan viruses: FakeMS and Agent.MIO. The most common of the IP addresses is 217.23.9.140. Thank you for your assistance.

Sherry

A:Malware popup access to potentially malicious website blocked: outgoing

Hello,would you post that log.Please DownloadTDSSkillerLaunch it. Click on change parameters-Select TDLFS file system Click on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan results.Please download aswMBR ( 4.5MB ) to your desktop.Double click the aswMBR.exe icon, and click Run.When asked if you'd like to "download the latest Avast! virus definitions", click Yes.Click the Scan button to start the scan.On completion of the scan, click the save log button, save it to your desktop, then copy and paste it in your next reply.I'd like us to scan your machine with ESET OnlineScanHold down Control and click on this link to open ESET OnlineScan in a new window.Click the button.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.Double click on the
icon on your desktop.Check "YES, I accept the Terms of Use."Click the Start button.Accept any security warnings from your browser.Under scan settings, check "Scan Archives" and "Remove found threats" Click Advanced settings and select the following:Scan potentially unwanted applicationsScan for potentially unsafe applicationsEnable Anti-Stealth technologyESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take s... Read more

Read other 12 answers
RELEVANCY SCORE 54.4

Hi people,

I was reading something somewhere in a CD about e-mail and what to do and what not to do and came across this word "LiveLink .

In this interactive CD, it is stated that the efficient way to send attachments to someone on the other side of the word is LiveLink .

And thats it. Nothing else. No description whatsoever.

Does anyone knows what this is and how do I go about using this.

If I can get to know who to use LiveLink whatever it is, I think the problems I have when sending attachments would be solved.

Rdgs
 

A:LiveLink...Any Idea???

LiveLink is a term used by many, many companies and applications - all of them quite different.

More info needed.
 

Read other 2 answers
RELEVANCY SCORE 50.8

I want to somehow set up a browser to bypass annoying web pages that ask if I want English or French etc because I always select English. For example, http://www.ppt.gc.ca/
 
Is there any way to automate this process? Maybe a Chrome/Firefox extension?

A:how can i bypass language request from website?

Note the link that goes to the English site and bookmark it.
 
The site you linked to above has as the English homepage this: http://www.ppt.gc.ca/index.aspx?lang=eng
 
Orange Blossom

Read other 9 answers
RELEVANCY SCORE 50.8

Please review my site @ www.rytrix.com
Go easy on me i'm only 14
 

A:Website Review Request: RyTRiX.com

Read other 11 answers
RELEVANCY SCORE 50.8

Hi there.

I have an unusual request, and this seemed the best forum to post it to.

I am a musicologist/musician and frequently visit a fantastic (Korean) website dedicated to the music of J.S. Bach, http://www.greatjsbach.net/ , where it is possible to consult the composer's scores and hear recordings of everything he composed (the majority of files are presumably mp3, but there are also some MIDI files).

Last week, however, I bought a new laptop with Windows 7 Home Premium (I'd previously been using Vista Home Premium), and since changing computers I can no longer listen to recordings via this website; the music is obviously playing, but I hear nothing. When I first accessed the site with the new computer, I was told that I needed to download Active X, and so I clicked on the link and allowed the download. But even after having downloaded the Active X, I was unable to hear anything.

Would someone mind checking out the site and reporting back if they are able to hear the recordings? When the homepage opens, you have to click on W (works), from there you can choose from various categories. Pick a specific composition, and there you will find links for listening to a recording of it.

I'd be interested to see if other people have problems listening to the music, and if they are able to solve the problem.

Florio

P.S. I would have posted on the website's own forum, but it's all in Korean!
 

A:Unusual request (no sound on website...)

What browser were you using when you could listen to music?

I'm using IE8 with Windows XP Pro SP3 and cannot listen to music either on your website.
 

Read other 3 answers
RELEVANCY SCORE 50

Hi I have "request timed-out" problem at our business location yesterday out of sudden. ( We have 5 PCs, 1 MAC, 1 Linux and none works)
We have Verizon High Speed For Business.

I have called the tech support for our ISP and also hosting provider.
Both of them said it is fine at their end.

ISP : There's nothing they cant do because I can obviously go online.
Hosting : Server is working fine.
Those site works fine from my home location, from my friend house, and
another location BUT our business location.

I am at lost. Im not sure if this is ISP or Hosting problem

Below is trace route result for few of my website (hosted by the same company)
Website 1)
----------------------------------------------------------
C:\Documents and Settings>tracert bigofi.com

Tracing route to bigofi.com [216.240.157.4]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms dslrouter [192.168.1.1]
2 10 ms 9 ms 10 ms 72.87.158.1
3 9 ms 9 ms 8 ms G3-2-2115.LCR-11.LSANCA.verizon-gni.net [130.81.
46.46]
4 10 ms 11 ms 11 ms 130.81.29.244
5 10 ms 10 ms 11 ms 0.so-6-2-0.XT1.LAX7.ALTER.NET [152.63.112.45]
6 11 ms 11 ms 11 ms 0.so-6-0-0.BR1.LAX7.ALTER.NET [152.63.112.41]
7 12 ms 11 ms 11 ms 204.255.169.70
8 12 ms 11 ms 11 ms ber1-tenge-3-1.losangeles.savvis.net [204.70.193
.50]
9 21 ms 21 ms 22 ms 206.155.32.6
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 ... Read more

A:Problem Accessing Few of my website - Request Timed Out

I have Verizon FiOS, and I get the following results, doesn't seem it's blocked by them.

C:\>tracert bigofi.com

Tracing route to bigofi.com [216.240.157.4]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms ZyXEL [192.168.0.1]
2 1 ms <1 ms <1 ms ActionTec [192.168.1.1]
3 3 ms 4 ms 4 ms L100.VFTTP-09.PHLAPA.verizon-gni.net [72.78.224.1]
4 3 ms 4 ms 4 ms G2-0-609.LCR-06.PHLAPA.verizon-gni.net [130.81.129.142]
5 4 ms 4 ms 4 ms 130.81.28.156
6 4 ms 4 ms 4 ms 0.so-6-0-0.XL2.PHL6.ALTER.NET [152.63.3.81]
7 13 ms 12 ms 12 ms 0.so-5-2-0.XL4.IAD8.ALTER.NET [152.63.36.209]
8 11 ms 12 ms 12 ms 0.ge-7-1-0.BR2.IAD8.ALTER.NET [152.63.41.161]
9 11 ms 12 ms 12 ms 206.111.0.121.ptr.us.xo.net [206.111.0.121]
10 11 ms 12 ms 12 ms te-2-0-0.rar3.washington-dc.us.xo.net [207.88.12.70]
11 86 ms 87 ms 87 ms te-3-2-0.rar3.sanjose-ca.us.xo.net [207.88.14.97]
12 92 ms 92 ms 92 ms 207.88.14.98.ptr.us.xo.net [207.88.14.98]
13 154 ms 163 ms 109 ms 207.88.186.46.ptr.us.xo.net [207.88.186.46]
14 101 ms 99 ms 99 ms 216.240.157.4

Trace complete.

I get the following page when I load that site.
 

Read other 1 answers
RELEVANCY SCORE 50

Hi,

So there are/were basically three issues and I'm sure they're related. But the main one that I want help with is:

I randomly receive file download requests attempting to download certain files. One example is: 'freesystemscan.exe' from ecxitdai.cc.co. I basically get the popup that asks if I would like to 'run or save the file,' which I obviously cancel. It happens randomly and not after taking any particular action. Sometimes I'll leave the computer on, with no browser or actual app open and I'll come back with several of these download requests open. This is happening through internet explorer.

And I'll mention the 2nd & 3rd issue in case they help in figuring out what it is
2nd issue: Opening Internet Explorer it redirects to another website at random times.
3rd issue: Adobe Reader was also randomly while PC was running with no activity.

All issues started around the same time (a couple months ago).

I'm running Windows XP Pro ver 2002, SP3.
Internet Explorer version 8.0

Thank you

A:Random IE Download Request & Website Popups

*bump*

any help would be appreciated -- even a point in the right direction

Read other 22 answers
RELEVANCY SCORE 49.6

Virus Total link
https://www.virustotal.com/en/file/17855548292f50b35a7de33e67580fb88fb8c661c546f89014ec9fcb841a0cf4/analysis/1455257284/
 
This was just lying around in the temp folder, don't know what it does but it's there. After doing a search, I found that there was another file called "wtf2481.tmp", which also had the same detections as my "wtfCFDB.tmp" file.
 
Does anyone know these tmp files get to your PC? Sorry if these kinds of questions are not allowed.

A:Does anyone know where this .tmp file originated from?

Have you used any security programs to find and remove malware? The link for VT certainly identifies the file as malware.
Where it came from....most likely from using a P2P program.
 
Scan using the programs below.
 
Download Emsisoft Emergency Kit and save it to your desktop. Double click on EmsisoftEmergencyKit.exe to extract its contents and create a shortcut on the desktop. Leave all settings as they are and click  Accept & Extract. A folder named EEK will be created in the root of the drive (usually c:\). .
After extraction an Emsisoft Emergency Kit window will open. Under "Run Directly:" click Emergency Kit Scanner.
When asked to run an online update, click Yes.
When the update is finished, click the Back to Security Status link in the left corner. On the main screen click the Scan Now button.
Select the malware scan option and click the SCAN button.
When the scan is finished click the Quarantine selected objects button. Note, this option is only available if malicious objects were detected during the scan.
Click the View Report button and in the Reports window double-click on the most recent log. Note, logs are named as follows: a2scan_<date>-<time>.txt.
Copy/paste the report contents in your next reply.
 
Download Malwarebytes' Anti-Malware from Here
Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).
Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then c... Read more

Read other 2 answers
RELEVANCY SCORE 49.6

Hello BleepingComputer forums! If anyone has recently seen the Virus, Trojan, Malware removal forum, one can easily see that almost the first 10 pages are nothing but Powelik infections, with myself being one of them. In order to garner more information on this Trojan, where did this recent rise in infections originate from, and what does this Trojan commonly do? Personally, I would like to know more about the virus plaguing me.

A:Where has Powelik originated? What does it do?

See this topic.

Read other 1 answers
RELEVANCY SCORE 49.2

On startup, my browser has started automatically and attempted to open the page
Code:
http://www.kana.webhop.net
. I have tried searching the internet to find out what this relates to but there seems to be nothing mentioned. The website itself doesn't seem to exist (I get the normal 'This webpage is not available' tab). I have checked all of my browser settings and cannot find anything that references it.

I thought it may have been related to the Kana Reminder program that I have, but I have been using that for many months without this coming up before.

I have checked the computer with:

Advanced SystemCare 6
Malwarebytes Anti-Malware
Spybot - Search and Destroy

and nothing is being discovered.

Is there anything else I can do? Or somewhere else I can check? I'm thinking that maybe something is in my registry but I don't want to go fiddling around without knowing exactly what I'm doing.

Any advice is gratefully received.

TIA

A:Kana webhop website opening browser on startup without request

Hello FoxIX,

What browser are you using?

If Internet Explorer, then check to see what you have set as your home page. If this site is set as it, then you can change it to what you like instead.Internet Explorer Home Page - Add or Change
Do you have any toolbars or add-ons installed that may be using their homepage instead?

Hope this helps for now,
Shawn

Read other 9 answers
RELEVANCY SCORE 48.4

Hello,

I originally received a message from avast telling me I had a trojan called wr-1-77[1].exe. The full title was \content.IE5\31Q3SELJ\wr-1-77[1].exe\[UPX]

I conducted several scans with avast, AVG, and ad-aware and removed all files they suggested. However, the problem did not go away. I consulted several threads related to wr-1-77.exe and ended up scanning my system with regrun. While frustrated and confused, I may have hit the button to remove file too many times. My computer had some problems after that, and I system restored to a time before I ran regrun, although some problems still persist (i.e., not linking Microsoft Office files to the program, and forcing me to manually choose what program I want to open Word, Excel, and PPT files).

Below is the log from Hijack This, and I have attached the extra.txt
Furthermore, Step 2 (Panda ActiveScan) could not be completed. I made sure my active virus scans were turned off and I allowed activex, but I could not make more than 50% progress on the scan. I hope I did everything correctly and am not wasting your time on this part.

Deckard's System Scanner v20071014.68
Run by Cap'n Sexy on 2008-01-02 00:40:30
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
109: 2008-01... Read more

A:Constant program updates - originated with wr-1-77[1].exe

Bump. Thank you.

Read other 9 answers
RELEVANCY SCORE 48

Hey Guys,

One of our company's websites is having a strange problem. Here's what happens:

1. In Firefox, I type in the webpage.
2. I wait for it to load, and it keeps saying "waiting for ......" in the bottom statusbar.
3. After about 10 seconds, the page will FINALLY load.
4. I have graphed the load performance in Firefox with Google's Load Time Analyzer add-on and the initial connect/search for the website is what takes a TON of time. Once that is done the items on the page (even third party images) will load quickly.

The website is SchooDoodle.com, but if you visit, you will most likely get the cached version (which loads ok). We have another method to get the dynamic page.

I have no clue to why it is doing this. The weird thing is that IE seems to load the page just fine (quick and easy).

Does anyone have any ideas what could be causing this? Thanks!
 

Read other answers
RELEVANCY SCORE 48

Here is my brain teaser:
One machine on my home LAN uploads files to other computers very slowly although the same file transfer originated from the other computer proceeds normally.
Fundamentally there are four computers. Three run Windows 7 64-bit professional or ultimate. The fourth runs Windows XP service pack three.
-
Zotac Windows 7
Mediacenter Windows 7
Deb Windows 7
Ben Dell -Windows XP

All of the computers have one gigabyte ethernet circuitry and the switch is one gigabyte. I have used the same 1 GB file to to the testing using the straightforward Windows Explorer copy and paste functions.
-
The computer named "Zotac" is a machine which seems to upload very slowly.
-
Listed below are file transfer times between the C drives of the one gigabyte file. As you can see the same file transfer differs depending on which machine originates it
-
From Zotac to Mediacenter
uploaded from Zotac-seven hours
downloaded from Mediacenter -10 seconds
-
From Zotac to Deb Windows 7
uploaded from Zotac-seven hours
downloaded from Deb Windows 7-10 seconds!
-
The Zotac machine seems to be able to upload to the Windows XP machine properly however. Interestingly the same file transfer originated from the Windows XP machine proceeds somewhat more slowly
-
From Zotac to Ben Dell-Windows XP
uploaded from Zotac 2 min.
downloaded from Bendell -15 min..

-
Because the same problematic slow file uploads from machine "Zotac" occur properly when originated from other machin... Read more

A:Same file transfer much slower when originated from one machine

The problem wasthat my antivirus was screening the files. I use Windows Security Essentials. Surprisingly when I turned off real-time monitoring and then immediately turned it on again the problem was permanently fixed.

Read other 5 answers
RELEVANCY SCORE 42

First of all Hello to all readers since I've just discovered this site, and this is my first post

I have recently set up a new computer with these parts :

mobo : P5E3 Deluxe WiFi AP
cpu : Intel Q6600
video : 8800 GTX
memory : DDR3 OCZ 2GB 1066 (kit)
power : Enermax Galaxy 850w
OS : Vista

I was very happy that everything worked and the motherboard POST'd on the first power-up, and then I installed my copy of Windows Vista and everything seemed to work great.

Then I accidentally hit what seemed like the "Sleep Mode" button in the Start menu of Vista. I couldnt get it to come back to the OS so I shut down the power to the computer and turned it back on.. but now it refuses to boot up. Actually, nothing happens. It's like the motherboard wont POST, but everything seems correctly powered on inside and I havent changed any connections or anything inside since the event..

I just hope this doesn't turn out to be a hardware problem, but I'd appreciate any hints on how I could possibly get my new rig back to normal.. this problem is very odd to me.

Thanks in advance!
 

A:Big Problem originated from "sleep" in Vista

fixed the problem by clearing CMOS.. hmph, still an odd problem. Thanks anyway.
 

Read other 1 answers
RELEVANCY SCORE 40

I have my browser set so that the Temporary Internet File Folder is emptied when my browser is closed; as B. Hesson has recommended many times in past posts. There are some files that remain;that I assume are "cookies". Being the curious person that I am; I click on these files to see just what they are.When I click on them; a warning pops up saying that "running a system command on this item might be unsafe. Do you wish to continue?" Well I may be curious, but not THAT curious. I've been down that road before. Opening something that I'm not sure of is not for me any more!! So my question is this...What is so unsafe about opening a file from the TIF folder?? I run Win 98 and Internet Explorer 5.5. Thanks in advance for your help.
 

A:Why unsafe??

It's really not unsafe in this instance but I suggest if your interested in seeing what's in a cookie, though it will be uneventful, then use WindowsExplorer and navigate to C:\windows\cookies. They are your cookies and you can just click on them to open without the warning. The "cookies" you're seeing the TIF folder are really not the cookie itself. They are just "pointers" to the actually Cookie in c:\windows\cookies.

If you ever decide to delete any cookies then be sure to do so from the TIF screen. Deleting the "pointers" in turn delete the actual cookie from c:\windows\cookies but deleting straight from c:\windows\cookies leaves the "pointers"in the TIF folder behind.
 

Read other 3 answers
RELEVANCY SCORE 40

Please help. My computer is constantly being attacked (HTTP Tidserv Request & HTTPS Tidserv Request 2). I do not know how to keep this from happening. I've been letting others use my laptop (my first mistake), and about a week ago this all started happening. Needless to say, I'm concerned as I don't know how much damage these attacks can do. My Norton Anti-Virus/Internet Security has been blocking the attacks, but they come constantly from several attacking IP addresses and URLS. Below please find my dds.txt and attached my attach.txt and gmerlog.log as instructed. Thank you in advance for your assistance, and I look forward to hearing from someone.DDS (Ver_10-03-17.01) - NTFSx86 Run by MY NAME at 20:01:23.87 on Wed 08/25/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_12Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.132 [GMT -4:00]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exeC:\WINDOWS\system32\igfxtray.exeC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\HP\QuickPlay\QPService.exeC:\Progra... Read more

A:HTTP Tiderv Request & HTTPS Tidserv Request 2

Good evening. Take a trip to this webpage for download links and instructions for running Combofix by sUBs.* Please be aware that this tool may require the PC to be rebooted so close any programs you have open before you start. When CF has finished, it will produce a log - C:\ComboFix.txt - copy and paste it into your next reply. Let me know how the PC is behaving.* There are two points to note from the instructions page:1) The Recovery Console.It is recommended that you install this as, in certain circumstances, it may be the difference between a successful repair and a reformat. If you are uncertain as to whether or not you already have the Recovery Console installed, simply run CF and it will prompt you if it does not detect it.CF will complete some, but not all, of it's removal tasks without the installation of the Console so, should you choose not to allow the installation, you may not get the results you hoped for.2) Disabling your Anti-Virus.CF has been the victim of false-positive detections on occasion and a resident AV may incorrectly identify and delete part of the tool which won't do it much good. If you don't disable your AV, you may not get the results you hoped for either.

Read other 2 answers
RELEVANCY SCORE 40

Norton Internet Security has been reporting that it blocks an intrusion attempt from a variety of addresses and reports the risk name as either HTTP Tidserv Request or HTTPS Tiderv 2 Request. I get a few unrequested webpages, but the main symptom is the warning messages from Norton. In attempting to fix the problem myself, I learned that I can not boot to Safe Mode because my system hangs at amdagp.sys and returns to the "how would you like your computer to boot" screen. I think this is an unrelated problem, but thought I'd mention it.Thanks! I appreciate your time.DDS (Ver_10-03-17.01) - NTFSx86 Run by Ann Nymous at 23:19:25.80 on Sun 04/18/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1534 [GMT -5:00]AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\BroadJump\Client Foundation\CFD.exeC:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exeC:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi... Read more

A:http tidserv request and https tidserv2 request

Hello and and Welcome to BleepingcomputerPlease note we are very busy, so if I don't hear from you within 5 days the topic will be closed, If you have sinceresolved your issues I would appreciate if you would let me no so I can close this topic.Please download ComboFix from one of these locations:Link 1Link 2* IMPORTANT !!! Save ComboFix.exe to your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our toolsDouble click on ComboFix.exe & follow the prompts.As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.Once the Microsoft Windows Recovery Console is installed, click on Yes, to continue scanning for malware.When finished, it wi... Read more

Read other 16 answers
RELEVANCY SCORE 40

Bad Request. Your browser sent a request that this server could not understand. Size of a request header field exceeds server limit. Cookie /n

I have read about some fixes in Google. Some I don't trust. Some I don't understand.

I have used ATF cleaner to clear away the cookies and all the things it clears.

I cannot reach Photobucket using Google Chrome. I can reach Photobucket with IE9, but IE9 is incompatible with another site I visit daily.

Sure hope you can help me. Thanks a lot.

A:How do I fix a 400 Bad Request? Size of a request header field exceed

Thanks a lot guys. Just wanted to say thanks for being here when we need you. I got lucky and got this figured out by myself.

Read other 1 answers
RELEVANCY SCORE 40

Norton Internet Worm Protection (in Norton AntiVirus) has detected and blocked two different Intrusion Attempt ("ISearch DNS Request" and "Goidr DNS Request")
Norton has blocked it and that?s all fine but does this mean I have some kind of malware (spyware/adware) on my computer?

I have had problems with Trojans, Downloaders, Adware (Virtumonde is one of them) since Aug. 26th. I thought I had got rid of all the bad stuff but a few days ago Norton stated to give me these warnings.
Norton have also recently detected "Infostealer.Gampass" (and deleted it).

So now I wonder if this is serious and if I need to do more to clean up my computer?

I am just an average computer user that is trying to understand and solve this problem so I would be very thankful for some expert advice on this.

(I have Norton Antivirus, expired version of Webroot SpySweeper, Spybot - Search and Destroy, Ad-Aware, Windows Defender and AVG Anti-Spyware installed on my computer right now to try to find any still remaning "bad stuff".)

P.S. I have tried to find help on Symantec?s website but all it says is to uninstall some program that is causing this (there is none as far as I can see) and do a virus scan (I have! SEVERAL times!! Norton finds nothing).

Once again, thankful for any help and advice I can get.

A:Attempted Intrusion From Isearch Dns Request" And "goidr Dns Request

Hi, welcome to Bleeping Computer. The short answer to your question is Yes.Virtumonde is a difficult thing to get rid of with ordinary tools.Then you seem to have other infections complicating the situation. One of them is a password stealer.I suggest you take this machine offline as much as possible, and change all your passwords from a clean computer. Go ahead and scan with those free tools you have downloaded, they will clear out some of the malware, but I think you are going to need help to get your computer clean.Remove your expired version of SpySweeper, it's useless without current definitions.Please follow the instructions in this preparation guide and post a HijackThis log in the HijackThis forum, not here. Be patient, there is quite a backlog there at the moment. If after five days, you have not received a reply, post a note with the URL of your topic here. Good luck.

Read other 2 answers
RELEVANCY SCORE 39.6

I keep receiving notices saying "OE has removed an unsafe attachment". Dont know how to stop this.

Dont think this is virus related, as I sent a "clean" attachment to myself and got the same message.

Would appreciate any advice

Jimmy
 

A:unsafe attachments

Sounds like this should work:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q329570

sekirt
 

Read other 3 answers
RELEVANCY SCORE 39.6

hey Guys,
 
To begin I must tell you what hapened to me 1 month ago. I was installing & reinstalling Windows Vista after many trials, and there seemed
to have a bleepware (adware,malware or whateverware) judging by  pc performance. I was installing Windows & removing pre-installed software like Norton etc.
and rightaway installing Avast & my basic stuff via a USB key.
 
So after 7-8 times, i said fook it i'll install those tomorrow with out creating an internet connection.
I decied to look at movie on DVD before sleep, instead of using  Windows Media Center or the  HP reader
I use VLC it's just better. my VLC.exe is on that same USB key. Has soon as i pluged in the USB key
Norton went on Alert mode, saying malware behavior tried to change this & that,  so Norton corrected that
and put the source of infection file in Quarantine. The file was the Privazer Setup & the Trojan was Zango,
a valant virus from 2005, since i had not made any updates Norton virus definition was dated in 2007.
Maybe that's why it detected it. That virus signature not being overwriten by newer definitions.
 
Surprised i went ahead and pluged in another USB key with Privazer Steup on it (an older version),
same Alert same virus. So i tought Zango attached itself to Privazer. However i stopped using privazer
for a few weeks. But insalled again last week, after sacnning it with VThash*, result was clean.
 
But i used HerdProtect san tonite and it g... Read more

A:Privazer looks unsafe

Hello  Thunderflash, 
 
here is the PrivaZer Team. 
 
When we release a new release, we always submit it  to Virustotal.com
Please see here the result :
https://www.virustotal.com/fr/file/fcdedced088ebbb9c39b5e9e22d04aaeb326f737092bf41e65a04a7b3fbb4062/analysis/
 
There is no virus/malware in the new release (v2.14).
 
We have just reported this false-positive case to Reason Software, Trend Micro, and Jiangmin and 
we will inform you as soon as we'll get an a reply....
 
Hope it helps.

Read other 8 answers
RELEVANCY SCORE 39.6

I am having an IBM laptop. Recently I have started having this problem- a windows pop up message comes up reading "Unsafe removal of MATSHITA DVD-ROM SR-8175"... Well I dont remove the DVD ROM until I want to use the floppy drive. But this message pops up even when I have not 'touched' my DVD ROM....
Whats the problem??? How do I rectify it???
Sometimes it comes up too often and this bugs me.....
 

A:Unsafe Removal...???

Check the connections for something loose maybe.
 

Read other 1 answers
RELEVANCY SCORE 39.6

If I recieve any emails with an attachment my Outlook Explorer gives me a message that " OE has removed access to the following unsafe attachments in your mail" ? The attachmens that I have been recieving are all genuine and not from unknown sources.
I I forward the email to my yahoo account I can get the attachments.

Can anyone assist in getting OE back to normal.
I am runnung XP Pro with OE 6
 

A:Unsafe Attachments in OE

This will sort out your problem.

http://www.updatexp.com/blocked-outlook-express-attachments.html
 

Read other 1 answers
RELEVANCY SCORE 39.6

All of the e-mail attachments from my friends are coming through with the line, OE removed access to the following unsafe attachment in your mail. I don't know how to stop it. It started about a month ago and has taken over all of my addresses. I will need detailed instructions as I am not computer savy. Thanks anyone, pjmaxx
 

A:unsafe attachments

Read other 6 answers
RELEVANCY SCORE 39.6

Hi a forum i use always gives me the error,
 
This page is trying to load scripts from unauthenticated sources ( Chrome)
 
Blocked content ( IE)
 
The forum owners have stated this is nothing to worry about because they use a mixture of http and https. Is this normal? When I accept unsafe scripts a red line goes through the padlock in the address bar.
 
Secondly the forum suffers from regular downtime with SQL errors, this has been going on for at least a year.
 
My questions are if the forum safe to use from an independent viewpoint?
 
The forum has had many problems over the years, so was bit concerned abut the current issues and how the owners seem to be sweeping the issues on the carpet.

A:Unsafe scripts

Personally I would not use this site.  To me that sounds a bit fishy, if they are unstable there is a good chance they have been compromised.  If you really wanted to get information that site, it would be a good idea to use a live linux distro to do so.  That is my two cents

Read other 3 answers
RELEVANCY SCORE 39.6

Firefox' authors claim it is the safest browsing experience around. I wish to complain about it. Internet explorer lets you set your security level to high, which prevents active x controls from running downloading malware. There doesn't seem to be any way to stop active x controls from running in firefox. Recently, an ad on salesspider.com completely closed the firefox browser and started running a fake scan on my computer. Just today, an ad on the chicago tribune website downloaded a virus/malware on firefox. I even have spyware blaster running, but perhaps javacool is not up to snuff anymore. In vista, internet explorer runs in protected mode, which absolutely prevents malware from installing via drive by downloads. Firefox has no such protected mode. I'm switching back to internet explorer, since firefox is quite an unsafe experience.
 

A:Unsafe Firefox

Sorry to hear you don't care for Firefox. I have been using it for over four years, safely. It appears you weren't aware of the add-ons you can use to customize Firefox, add-ons such as AdBlock Plus and Easy List. No Script or Flaskblock and so on.

And please don't blame Firefox for what happened when you clicked on <<salesspider.com>>. I gave that site three minutes to load and it never finished, so likely mt security prevented it.

Firefox is very customizable, but it is in a different way.

And not matter which browser you use or how much protection you have, it all comes down to the habits of the user. If you expose yourself to dangerous territory, eventually you're going to get burned! But it will be sooner on IE than on Firefox!
 

Read other 4 answers