Over 1 million tech questions and answers.

Accidentally visited a hacker site

Q: Accidentally visited a hacker site

I was perusing a site forum, and opened the link to a member's personal webpage, which turns out to be a known hacker site (which I found out after the fact). The site triggered an insane reaction from my browser, which cuased hundreds of pop-ups and audio. The pop ups were halted by my comp/antivirus/etc, causing them to never display any images, but the boxes multipled endlessly until I used ALT+F4 to close the browser. Since then, my comp has been working poorly, and CCLEANER ended up "cleaning" a size of 70 MB the other day when it normally never exceeds 16 MB after a comp restart. Many of the files in the cleanup process were labeled binaries, which may be good or bad. (Right?)Anyway, I've run mrt, defender, and did a mcafee scan (all FULL scans) for the past 2 days but nothing "negative" has been found. But my comp is acting different and I am slightly paranoid, so I ran hijackthis today and was wondering if someone could analyze the results and ease my mind.Any help is GREATLY appreciated.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:59:52 AM, on 6/24/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\system32\taskeng.exeC:\Program Files\McAfee.com\Agent\mcagent.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\SiteAdvisor\6172\SiteAdv.exeC:\Windows\RtHDVCpl.exeC:\Windows\System32\igfxpers.exeC:\Program Files\Toshiba\ConfigFree\NDSTray.exeC:\Windows\System32\igfxtray.exeC:\Windows\System32\hkcmd.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Windows\System32\spool\drivers\w32x86\3\EKIJ5000MUI.exeC:\Windows\system32\igfxsrvc.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exeC:\Windows\ehome\ehtray.exeC:\Program Files\Windows Sidebar\sidebar.exeC:\Program Files\Windows Media Player\wmpnscfg.exeC:\Windows\ehome\ehmsas.exeC:\Windows\system32\wbem\unsecapp.exeC:\Program Files\Toshiba\ConfigFree\CFSwMgr.exeC:\Program Files\Synaptics\SynTP\SynTPHelper.exeC:\Windows\Explorer.EXEC:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Windows\system32\SearchFilterHost.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshibadirect.com/dpdstartR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhostO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6172\SiteAdv.dllO2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dllO2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dllO2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dllO2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6172\SiteAdv.dllO3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dllO4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkeyO4 - HKLM\..\Run: [MSConfig] "C:\Windows\System32\msconfig.exe" /autoO4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exeO4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hideO4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXEO4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exeO4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exeO4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6172\SiteAdv.exeO4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exeO4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exeO4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exeO4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exeO4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"O4 - HKLM\..\Run: [Skytel] Skytel.exeO4 - HKLM\..\Run: [EKIJ5000StatusMonitor] C:\Windows\system32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exeO4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottimeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLLO4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exeO4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exeO4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exeO4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRunO4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exeO4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-18\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synth' /w:'SB Audigy 2' (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synth' /w:'SB Audigy 2' (User 'Default user')O4 - Startup: VZAccess Manager.lnk = C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exeO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dllO9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLLO13 - Gopher Prefix: O17 - HKLM\System\CCS\Services\Tcpip\..\{989AD7B7-534E-4509-85D5-DAB3D76CFAC3}: NameServer = 66.174.92.14 69.78.96.14O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLLO23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exeO23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exeO23 - Service: Intel? PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exeO23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: Kodak AiO Device Service (KodakSvc) - Eastman Kodak Company - C:\Program Files\Kodak\printer\center\KodakSvc.exeO23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exeO23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exeO23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeO23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeO23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeO23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exeO23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exeO23 - Service: pinger - Unknown owner - C:\TOSHIBA\IVP\ISM\pinger.exeO23 - Service: Intel? PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exeO23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exeO23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exeO23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exeO23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe--End of file - 9316 bytes

RELEVANCY SCORE 200
Preferred Solution: Accidentally visited a hacker site

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Accidentally visited a hacker site

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE

Read other 2 answers
RELEVANCY SCORE 61.6

About a year ago I heard an ad for a free laptop on the radio and it gave a website to look. I started to register but got worried I was going to receive a bunch of spam and "X"ed out without completely regristrating. The problem is, I did not delete my email address before "X"ing out. Ever since then I've been bombarded, at least 20 emails daily, for the past year. Marking them as spam has no effect. Does any body have any idea how I can get the emails to STOP!!!!! Thanks much.

A:Worst Site I Almost Visited

Have you tried contacting someone from your E-mail provider

Read other 2 answers
RELEVANCY SCORE 61.6

out of pure stupidity, i allowed scripts to run on a known dodgey website. spybot, and avg come back as nothing wrong. i'm hoping the following pasted log scan agrees with that assesment. any help would be greatly appreciated. the know dodgey site supposedly injects a keylogger in the script.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:21:47 PM, on 4/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Network Adapter with SpeedBooster\WMP54GSv1_1.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\Common Files\Ins... Read more

Read other answers
RELEVANCY SCORE 61.6

Something is way wrong. I'm getting multiple repeat messeges from Symantec email proxy stating "your emial was unable to be sent" I can persist in closing these windows and after a while they stop. Somewhere along the way I'll get a pop up saying I need to install an "Adobe" product - "Flash Player" I believe. and after a while later I get multiple web pages pop up when I haven't opened my browser. Any Help would be appreciated. I have included my Highjack This log: confused:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:11:38 AM, on 6/29/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Rick\obrfkm.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files... Read more

A:Visited wrong site

Welcome to TSG

Sorry for the delay


Download DDS and save it to your desktop from here or here or here
Disable any script blocker, and then double click dss.scr to run the tool.

When done, DDS will open two (2) logs:

DDS.txt
Attach.txt

Save both reports to your desktop
In your next reply, please attach both logs. Thanks

===========================================================
Please download Malwarebytes' Anti-Malware from Here.

Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded, select "Perform Quick Scan", then click Scan.

The scan may take some time to finish,so please be patient.

When the scan is complete, click OK, then Show Results to view the results.

Make sure that everything is checked, and click Remove Selected.

When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)

The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

Copy&Paste the entire report in your next reply.
Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, pleas... Read more

Read other 1 answers
RELEVANCY SCORE 60.8

Accumulation of spyware and other junk has seized my workstation.I started killing processes and removing files after Adaware et al. were at least partially ineffective. Random popups when browsing are the major complaint, though I'm concerned there are plenty of other items floating around. NAV reported some Trojan viruses, but it was never clear as to whether or not they were ever cleaned. As I began poking at the bad software, they just seemed to get angrier and multiplied faster. At one point, I was certain that I had won, as no ill effects struck me as I continued working - until I opened a web browser, then the proverbial bleep hit the fan.For a while, I was unable to load Explorer.exe, and thus had little way to use the computer, though I was able to run other programs through the task manager, since the Start bar was missing. I finally renamed the file iuput.dll and was able to start explorer.exe and can now use the computer as normal.I followed some of the procedure listed on this site, but I need to get this computer clean of all active baddies.Here's my HijackThis log file contents:Logfile of HijackThis v1.99.1Scan saved at 4:24:10 PM, on 7/7/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system3... Read more

A:Visited The Wrong Site, Now Infected

Hello there, It is a good idea to print off these instructions - they will be needed later when internet access is not available. You may also like to save these instructions in word/notepad to the desktop where they can be easily found for the same reasons as above. It is important that you complete the following instructions in the correct order, and also that you don't miss anything out! Your system is terribly infected. Problem with these infections nowadays is, it causes a lot of damage. Even if we clean the malware off your system, I can't guarantee that your system will be clean afterwards, because these infections/bundles leave a lot of leftovers behind that most scanners won't even recognise and logs won't show. Also, I can't promise you we can repair all the damage it caused... Even after cleaning the malware, you can still get errors afterwards because of the damage. Solving these is not always possible since it will be searching for a needle in a haystack to find the right cause and solution. So, we can try to clean this up and do what we can, but keep in mind that we can't solve ALL problems this malware already caused. * Go to start > controlpanel > software > add/remove programs and uninstall next if present:SurfSideKick 3OinYazzle by OinPurityscan by OinSnowballwars by OinCowabanga by OIN or anything similar with Oin in it.* Please run the uninstaller by using the tutorial found here:http://www.outerinfo.com/howto.htmlThen Reboot! (v.important... Read more

Read other 3 answers
RELEVANCY SCORE 60.8

Hi

I visited a web site last night to check if the address had already been taken.

When I arrived at the site I got a pop-up saying I had been hacked and then got a warning from Avira in the mozilla cache folder. I selected the option to deny access.

The offending site's address: hxxp://nexus.webs.com (if I am not allowed to post the address, I'll edit the post) - is there a way for someone here to please tell me what exactly the website did to my computer?

Did it install a keylogger on my computer? I'm on a different computer at the moment just to be safe.

Mozilla Firefox
Windows Vista
Avira

Thank you

A:I visited a web site and got a warning from Avira.

Hello, the first thing to do is Update your Avira and run a Safe Mode scan. You can post the log here for review.How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. Next:Please download TFC by Old Timer and save it to your desktop. alternate download linkSave any unsaved work. TFC will close ALL open programs including your browser! Double-click on TFC.exe to run it. If you are using Vista, right-click on the file and choose Run As Administrator. Click the Start button to begin the cleaning process and let it run uninterrupted to completion. Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.Next run MBAM (MalwareBytes):NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert ... Read more

Read other 7 answers
RELEVANCY SCORE 60.8

Hi,

i have a problem where i type a search term in google for example, clicking on the search results takes me to a completely different page, but trying it a second time takes me to the correct page, this happens in all search engines ive tried.

I have ran adware SE which found a fixed a few problems, but it still have this search engine problem.
I have attached my hijack this log to see if there is anything in there that needs removing.

thanks

Logfile of HijackThis v1.99.1
Scan saved at 12:24:18, on 25/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton In... Read more

A:Google need to be visited twice to get the correct site.

Welcome to TSF.

You have picked up the WareOut infection.

Please subscribe to this thread to be notified of fixes as soon as they are posted by our Team. To do this, please click the "Thread Tools" button located in the original thread line and selecting "Subscribe to this Thread".

Before you begin, take a read through these instructions and download the programs that I've advised. Save the below instructions in notepad or wordpad, because you also have to work in safe mode without networking support, so this page wouldn't be available then. You should not have any browsers open during the cleaning process unless otherwise prompted.

If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are carrying out the procedures below.

Please allow yourself a few spare hours. Below are instructions for a virus scan(s) that can take longer then 2 hours.

It is also important you don't miss a step and perform everything in the right order!! .

********************************FOR YOUR INFORMATION*************************

Please do not run Hijackthis from it's current location. Create a permanent directory - C:\Program Files\HiJackThis\
Re-locate all files to the new directory

********************************DOWNLOADS********************************

Please download these additional files/programs. Do not run them unless instructed to do so.
Unle... Read more

Read other 7 answers
RELEVANCY SCORE 60.8

Hi there
Is it possible in IE8 / IE9 to make the History page show sites in LAST VISITED order. I.e the site you just visited is AT THE TOP of say todays date.

The default alphabetical method IMO is totally useless if you've visited a lot of sites and you want to go back to one you've forgotten the name of but you remember it was probably for example in the last 5 or 6 sites visited.

I can get the info from a server log but I should be able to get it directly in the history page in the browser.

cheers
jimbo

A:IE8 / IE9 History in Site Visited order ?

The history window has a "view by" drop list at the top and one of the choices is "order visited" which does that very thing

Read other 2 answers
RELEVANCY SCORE 60

I stepped away from my computer for awhile and when I came back my computer was turned off. Then when I turned it back on I checked HiJackFree. And it showed an open port for an Online Keylogger. I ran a virus scan with no results. But After shutting down for awhile. And coming back. Im very concerned about something still infecting my computer even though I ran HiJackFree again and have found nothing that I can notice. What security hole did they use and how do I patch something that seems to have been able to shutdown my computer remotely. I dont have most of my remote services enabled if not all of them. Some sites are just down right evil.

However, I do not have Java installed but I did install it awhile ago and removed it and I have 2 Browser Helper Objects (BHOs) for Java in my registry I noticed from the HiJackFree logs. I also had javascript running when I visited the site so I really need a run down on what to do.

A:Visited Bad Site and Online Keylogger Detected

Hello... Please go here....Preparation Guide ,do steps 6-9.Create a DDS log and post it in this topic.

Read other 3 answers
RELEVANCY SCORE 60

i have downloaded microsoft works 2000 on my computer to be able to obtain my pool stats weekly. have been able to do this for almost 3 years....now i can't...it starts downloading then freezes everything up...have to reboot to get on my computer again...why why why?????
 

Read other answers
RELEVANCY SCORE 60

Using XP home edition.
I recently joined a Christmas card site to send E-cards and everything went okay.
Today I wanted to send a New Years E-card but upon revisiting the site, I found I couldn't view any of the cards and got a blank screen with a small red 'x' in the top left-hand corner. I refreshed the screen but no joy. Then I altered security levels to minimum to see if that'd fix things - it didn't so I altered them back to default.
Any ideas what could be wrong please?

Thanks in anticipation,

Graham F Cutler.
 

A:Unable to view pics on a site already visited.

Hello and welcome,
Have you tried clearing personal data? If you use IE, click tools, internet options, delete cookies, delete files (include the cehckbox for offline content), click settings button, check the button for every visit to the page (for new content), click apply, the restart Internet explorer and go to your site.

If you use Firefox, click ctrl+shift+del keys, This loads the persoanl data box, click clear all, then close and retry the site.
If your using an older version, then click tools, options, privacy, clear all data.

It could be an error on the servers part, can you post a url to the site?
 

Read other 2 answers
RELEVANCY SCORE 58.8

Following a visit to a site upon which a 'gif' file dodged my popup blocker I decided to do some scans. I did a Kaspersky scan and it found nothing, my sister nagged me into doing a panda online scan...the scan is ongoing and has so far found two suspicious files and three infected, it's under thirty per cent done. When the panda scan is done I'll post more about it.I'm running an A squared scan now also and another Kaspersky scan. When the A squared scan is done, I'll post again about its findings. Kaspersky found nothing on the second scan. A squared found a high risk virus called Virus.Win32.Virut!IK, I have quarantined it but not deleted. I'm now including the A squared report in the attachments.There is no unusual internet activity, the only thing that worried me a bit was that my laptop started up slowly...but it's been doing that for a while.Don't hesitate to tell me if I've done anything wrong or need to do/can do more....just posting this has made me feel better DDS log:DDS (Ver_09-12-01.01) - NTFSx86 Run by Sarah at 16:57:54.33 on 29/01/2010Internet Explorer: 8.0.6001.18882Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.3034.881 [GMT 0:00]AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}SP: Spybot - Search and Destroy *enabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E4... Read more

A:Visited unsafe site, panda scan is finding infection

Sorry to be posting again on my topic, I have important information to add and can't find the 'edit' button I acted on some advice I was given to get rid of the virus that a Squared found and reformatted my hard drive (my brother did this for me....restore factory image is what exactly).I did another A squared scan and have found nothing...however, Kaspersky found this as a threat:04/02/2010 17:17:35 Detected: http://www.viruslist.com/en/advisories/28506 c:\program files\microsoft office\office12\excel.exe I'm posting new DDS and rootrepeal information now to make sure I'm clean.DDS (Ver_09-12-01.01) - NTFSx86 Run by Mister Awesome at 18:51:58.13 on 04/02/2010Internet Explorer: 7.0.6001.18000Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.44.1033.18.3034.1885 [GMT 0:00]AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}SP: Kaspersky Internet Security *enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k se... Read more

Read other 12 answers
RELEVANCY SCORE 58

How to force IE 11 to ask for saving credentials again for just one web site, after having accidentally sellect not to remember password for that particular site. Please, take into account that:


- I'm totally aware that storing credentials is not a good security practice, but in my particular case this is what I need to do.

- I know that reseting IE or similar approachs will do the job, but doing that I'll lost more tan 70 web sites credentials. I need a solution not involving loose all the web credentials stored.
- I also know that there is way to do the trick "lying" to IE using a modified but similar username, but this only works in some web sites, depending on the kind of login mechanism used. In my particulare case this trick also does not work.
- I also know that there was a registry hack for this particular problem, but this does not work with IE last versions.


Any help would be very apreciated.

Read other answers
RELEVANCY SCORE 57.2

Hey all,

I got nailed going to some site 3 days ago and had bunch of stuff installed and all without me ever clicking on anything other than link taking me to the site. Anyway, I eventually recovered using System Restore point in XP. I have read this site and done the Ad-Aware/Spybot bit and downloaded HijackThis. Could someone here take a look at my log and see what things I should remove?

Any help is much appreciated.

Logfile of HijackThis v1.97.7
Scan saved at 10:32:42 PM, on 2/18/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Logitech\Mouse\SYSTEM\EM_EXEC.EXE
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Symantec_Desktop_Firewall\IAMAPP.EXE
C:\WINDOWS\System32\taskswitch.exe
C:\WINDOWS\System32\fast.exe
C:\PROGRA~1\DAP\DAP.EXE
C:\Program Files\PopUp Killer\PopUpKiller.EXE
C:\WINDOWS\System32\CTHELPER.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\NavNT\defwatch.exe
C:\WINDOWS\runservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Symantec_Desktop_Firewall\NISSERV.EXE
C:\Program Files\NavNT\rtvscan.exe
C:\WIND... Read more

A:Got nailed by some hacker site

Go to http://www.spywareinfo.com/~merijn/downloads.html and download CWShredder. you may have the coolwebsearch trojan.
 

Read other 2 answers
RELEVANCY SCORE 55.2

The Internet Storm center reports that a highly automated home page hijacking attack is occurring on vulnerable servers and workstations using MS05-001 and MS05-002 exploits. A Google search this morning notes that the 7sir7 hacker site is shutdown but affected PCs would still attempt to go there. Entire web farms hacked to serve up the 7sir7 redirect http://isc.sans.org//diary.php?date=2005-03-13http://www.google.com/search?&q=7sir7We have received reports and evidence that a number of companies that provide shared hosting web servers have had their servers exploited and all of the customer homepages modified so that visitors are attacked. In one case, a Perl script was used to modify each customers homepage with the additional IFRAME snippet that fellow handler Lorna had already reported in the diary two days ago. The Perl script reads in the web server configuration (httpd.conf) on a compromised server, and then appends the malicious iframe code to all the index.html pages of all the virtual hosts available on this server. The same reader who managed to isolate this script has also contributed a script written by himself to clean up the affected pages. If you shout loud enough, we might include it in tomorrow's diary :-) The page at 7sir7 is making use of several recent vulnerabilities in order to download and install malware on the PC of whoever visits the site. - Exploits the .ANI cursor vulnerability (MS05-002)- Exploits the HTML Help Cross Domain Vulnerability (MS... Read more

Read other answers
RELEVANCY SCORE 54.8

Basically every page I visit has 'Clicksor' intextual ads (I think thats what they're called) linking me to various shopping sites. I've tried everything in my knowledge to remove them but as soon as one thing works it comes back again and again.

I get a lot of fake virus scan pop-ups that disable my browser and no matter how I try to quite the program it basically freezes my computer and I usually have to restart. Any help is greatly appreciated. Thank you in advance!

DDS (Ver_09-07-30.01) - NTFSx86
Run by Ryan at 9:15:31.50 on Sun 08/02/2009
Internet Explorer: 8.0.6001.17184 BrowserJavaVersion: 1.6.0_02
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.2038.928 [GMT -4:00]

SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkServi... Read more

A:Infected-Clicksor links on every page visited, fake virus scans on many pages visited

Hello iamdawlrs,Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update. Updating Java: Download the latest version of Java SE Runtime Environment (JRE) 6 Update 14. Click the "Download" button to the right. At the Select Platform and Language for your download drop down box
Select Windows and Mult-Language Check the box that says: "Accept License Agreement" then press Continue ( Selecting Windows will give you the 32 bit version. ) The page will refresh. Click on the link to download Windows Offline Installation, Multi-language jre-6u13-windows-i586-p.exe and save to your desktop. Close any programs you may have running - especially your web browser. Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Examples of older versions in Add or Remove Programs:
Java™ 6 Update 2
Java™ SE Runtime Environment 6
Java™ SE Runtime Environment 6 Update 1 Check any item with Java Runtime Environment (JRE or J2SE) in the name. Click the Remove or Change/Remove button. Repeat as many times as necessary to remove each Java versions. Reboot your computer once all Java components are removed. Then from your desktop double-click on jre-6u14-windows-i586.exe to install the newest version.*************Download Security Check by screen317 from here or here.Save it to your Deskto... Read more

Read other 4 answers
RELEVANCY SCORE 54.8

Went on an old fansite I used to go on but when I did the page was blank and looked like a scanner or loader had just appeared. Went off. Stupid me then hit cached under it in google and it looked like my ip address was in the top bar of the window. Found out it might have been an attack site now. I called m company right away and they changed the up address (And said it didn't mater if the router wasn't through them) Am I safe?

Tried downloading AVG but got errors (I have no disk space) then it said no internet conectivity, even though I have it, then finally no matter how many times I downloaded it, it was corrupted. (Maybe because it never installed all the way) Downloaded Malaware bytes (Heard if it doesn't install tha's a problem but it did).

So far: Internet connects. Same homepage. No added toolbars. No added desktop icons. No redirects. Can go on antivirus protection sites. No pop ups. Seems to run at the same speed.

went on an old fansite I used to go on but the page was blank and looked like a scanner or loader type thing displayed. When I hit cached under google it looked like it had my ip address in the top bar. Freaked out I asked a friend who found it listed as an attack site. So I instantly called my cable company that managed to switch my ip address (They said it didn't matter if my router wasn't through them when I asked and that it should be safe now) Tried loading avg but got errors (My compouter has no hard disk space) and then when I tried redo... Read more

A:Went on attack site accidentally

the link is

aaron-ashmore.com

Read other 2 answers
RELEVANCY SCORE 53.2

If by chance you visited "Rons Place" lately please have a look at this article at Aumha.org E-list under topic "SECURITY WARNING No. 2: DONíT BLAME RON BADOUR!" Seems JS Seeker was spread around inadvertantly.
http://www.aumha.org/elist.htm
Dave
 

A:Visited Ron Badours site "Rons Place" lately

Dave: Pretty interesting! Thanks. Marlene
 

Read other 2 answers
RELEVANCY SCORE 38.8

Windows7, IE8
History Browsing: "View By Order Visited Today"

Hello,
Instead History will show Recents Pages by X pages (Recent FIFO method), it shows by "Today".

Every time when it is 00:00 (midnight), it resets all the history I've had.

I want to change it to "View By Order Visited" or "View By Order Visited for couple days", instead of "View By Order Visited Today" (Browsing History displays only for one day), So that If it pass midnight - I could still see the last links.

Any Edit Reg / Tweaking ?

Thank You

A:Replacing "View By Order Visited Today" to "View By Order Visited"

Wow that is so bad why on earth did they add Today to View by Order Visited
I don't want to depress you but it is the same in IE9
I doubt theres anything you can do: anybody know different ?

You could switch to another browser that has better options

Read other 1 answers
RELEVANCY SCORE 37.6

I just recieved a new wireless web PC card that was was preactivated by my employeer. is there a way to tell if this way of connecting to the internet is allowing my employeer to view both the sites visited and any other files on my computer? Thank you for any information and help.

A:Web-sites Visited

If your employer has never had access to your computer.. in short ...no.If your employer doesn't know your ip address of your internet connection, ... no.If he has any of the above,.. then theoretically, yes.But from what you explained, it appears that the employer payed for a wireless pc web card, and activated it, probably so he/she can get a rebate back. That's my take on it.If you feel game, just reinstall your os, and you'll know from then on he/she can't be monitoring you.If the computer belongs to them, then yes, they can see everything you do it, if they installed the programs. And when I say everything... that's what I mean. They can install key-loggers and other monitoring software on that computer... and at any given time, all they have to do is hit a button or 2, and they can sit back and watch every-single thing you've done on your computer... all the way down to showing them the web sites in plain view. And they can track you by your keystrokes and mouse clicks. In other words, they can tell everything you typed, all the way down to the capital H and the lowercase h.But if it's a job related computer or it belongs to them,.. just be careful as to what you do on it, because it's not hard to tell what you've been doing on it.

Read other 7 answers
RELEVANCY SCORE 37.6

Hello there !!!

I am having four devices with me.
A 40gb HG, a 2.1gb HD, a CD ROM and a CD WRITER.
I tried to connect them all at the same time.
But the system detects only 40gb master HD and cd writer.

Guys, tell me what shall I do to detect all of them.
 

A:Connections re-visited

Rearrange your jumpers to have your 40gig HDD and your CD WRITER as master and the other 2 as slave. It sounds like they are all tyring to be master.
 

Read other 1 answers
RELEVANCY SCORE 37.6

hi there i hope someone can help me.

when i opened a new tab in my browser it used to have icons of my most visted sites, which was quite convenient to just click on. But for some or other reason it is no longer the case it only gives me this page now res://ieframe.dll/tabswelcome.htm.

please can someone help me, i've searched on forums but haven't been able to find anything.

cheers

A:most visited sites on new tab

what browsers are you using? FF,IE,Opera?

Read other 1 answers
RELEVANCY SCORE 37.6

on my url box every time i type www. a huge list of sites a appears and i cannot get rid. i have deleted one by one, shift deleted, i have cleared history. i have used software to remove all internet traces. but i cannot get rid of this list.

any ideas?

A:i cant get rid of visited sites

Google "disable firefox smartbar" and you'll find loads of ways to rid of this. Sometimes it's history only, sometimes only bookmarks.

Cheers,
Jamey

Read other 2 answers
RELEVANCY SCORE 37.6

Hi All.

I'm using Windows 7 Ultimate. I would like to know if there is an application or service that shows which
websites/servers are currently being accessed by your network?

Thanks
 

A:How do I see which Websites are being visited?

Read other 12 answers
RELEVANCY SCORE 37.6

Hi ,

Please let me know how to find Last websites visited by REGEDIT Option through RUN command .

Thanks...
 

A:WebSites Visited

Read other 7 answers
RELEVANCY SCORE 37.6

I am presently using a rented laptop in an overseas location.
I do not have administor rights. Computer has Windows NT 2000 Pro (japanese Version). How can I remove all of the web sites I have visited before I return the computer. It is using Internet Explorer Ver 6.2. The Jap IE seems to be virtually the same as US Version, xcept commands, etc. which are all written in the Japanese Language.
I have my own laptop as well, with no internet connetion, but it also has IE 6.2, so I can compare relative locations to some extent. BTW please email any response to my temporary email location at: [email][email protected] as well as to regular email address, (tampabay.rr.com)- (which is not working too well over here).
Thanks,
Nick G. (mudkik)
 

Read other answers
RELEVANCY SCORE 37.6

Some time way back I had a thread going about problems I had with it. Well, to make a loooong story short, I just took them out of the closet & reconnected everything & whatever the sound problem I had, its gone .
I'm wondeing if anybody else in here has the same ones http://www.logitech.com/en-roeu/support/x-530 & might know why two of the speakers don't work. I know I've had it cranked quite loud, but that shouldn't matter. TIA







This bottom picture is not mine, its just a similiar one I googled
 

A:Logitech X-530 re visited

Are they connected to a different computer. Then when you first tried.
 

Read other 21 answers
RELEVANCY SCORE 37.6

Besides temporary internet files, where else are the web sites I've visited stored? I am using Internet Explorer.

A:Visited web sites

View>explorer bar>history.

Read other 2 answers
RELEVANCY SCORE 37.6

The title says it all. I've been looking for the "button" that will let me change my open new tab options to show my most visited sites but I can't find it. I'm sure it exists because I've seen it and my Internet is up to date.
Any help?

A:New Tab: Most visited sites

Nevermind. I was fiddling with my tab settings and when I changed it back to the original settings the option I was looking for appeared. XD I have no idea how. It used to just be a page where it would ask what'd I'd do next and then give me options. Sorry for the waste of space!

Read other 1 answers
RELEVANCY SCORE 37.6

Thanks MattG and Everybuddie

What I want to achieve is this
I want to be using my firewall (as router, running Linux Redhart 8, iptables v1.2.6a) to accept packet from from a specific IP address say "10.10.0.35" ELSE drop the packet

If accepted, Route same packet to a specific IP address(A host) say with IP address 199.200.5.1
Takes(I mean the firewall in reverse direction) packet from The Host(199.200.5.1) and route it to the the specific IP address(10.10.0.35)
Every other -s packet should not be allowed

And One other thing

If I re install A linux box, I understand Iptables comes bundled with the package and that you don't need to re compile the kernel again? b'cos I have not mastered the kernel stuff and do't want to mess the one already install.

Kindly give me a step my step rule to achieving what I want. I have hrs left to get this thing DONE for good

If you can spare a chat period I am available on yahoo messenger for possible chat assistance. You cant believe I have not rested for the past 36 hrs trying to figure this out

Thanks


__________________
GOD is the giver of Wisdom! you care to have, Give him a call

:grinthumb
 

A:Firewall re-visited

Please read my response to your other thread, Urget and Fast..

Thanks

Matt
 

Read other 1 answers
RELEVANCY SCORE 37.6

Greetings,
I am using IE 6 browser and when I visited web site links they showed purple color. But apruptly When I now use the browser all visited links shows blue color only but not purple color. How can I set this to highlight, so to speak the visited pages?

Thanks,
Jack
 

A:Visited Pages

In IE, Tools> Internet Options> General tab, click the Colors button. Click on the Visited or Unvisited button and select the color you want
then OK your way out.
 

Read other 3 answers
RELEVANCY SCORE 37.6

Greetings,
I am using IE 6 browser and when I visited web site links they showed purple color . But apruptly When I now use the browser all visited linkes shows blue color only but not purple color . How can I set this to highlight, so to speak the visited pages?

Thanks,
Jack

A:Visited Pages

Hi Jack

In IE, go to Tools>General tab and at the bottom click "Colors".

In the new window that opens, you should see Visited = Color and Unvisited = Color.

Click each color to to change it>Apply>OK and it should be done.

Read other 3 answers
RELEVANCY SCORE 37.2

I am using IE8. WHen I open a new tab I used to get thumbnails of 10 (+/-) most frequently visited web sites. Now I get "whatdo you want to do next?"

These are the sites that you see when you right click the IE8 icon in the system tray under "frequent".

I have restored new tab options to default setttings with no luck.

Any thoughts?

A:New Tab: Frequently visited sites

  
Quote: Originally Posted by bmchan


I am using IE8. WHen I open a new tab I used to get thumbnails of 10 (+/-) most frequently visited web sites. Now I get "whatdo you want to do next?"

These are the sites that you see when you right click the IE8 icon in the system tray under "frequent".

I have restored new tab options to default setttings with no luck.

Any thoughts?


"What...next?" is the normal new tab dialog. But if during a browsing session you open and close say 10 tabs, the new tab will include the option to reopen any of the previously viewed web pages during that session.

BTW, I've never seen an IE icon in the system tray (clock area). But in Windows 7 the IE icon in the task bar can be right clicked to choose which of the currently open web pages you want to view.

Read other 3 answers
RELEVANCY SCORE 37.2

I'm suddenly unable to access my most visited websites - namely AOL Mail, Facebook, and some of the blogs I visit most often. Everything else, even graphic-intensive sites, seem fine. My firewall is not blocking Firefox.

System info:
Advent
Intel Core 2 Duo CPU T5750 @ 2.00GHz
4.0GB RAM
32-bit OS
Vista Home Premium
Service Pack 1
 

A:Can't access most visited websites?

Hmm... Did you tried disableing the firewall and the typing this sites? Do you run an antivir. program? if yes, which?
 

Read other 3 answers
RELEVANCY SCORE 37.2

Hey, im looking for software that will show me what links have recently and are been visited. I dont mean the actual website I mean things like what scripts are been executed on a site when you click a button.

For example, sometimes when your downloading software and you click a button it redirects you to the download but you cant see what address it went to, to get it. So I need something that shows every single address that was visited.

Any ideas?
Thanks

Read other answers
RELEVANCY SCORE 37.2

Hello, you know how in IE visited links have a different colour to links not clicked, but after a set time, they change back to normal colours. Is there any way to change the length of time they remain as visited links?

Read other answers
RELEVANCY SCORE 37.2

[size=3]Hi I have a question : can someone (who has sufficient computer knowledge ) go to my computer when i'm away and see the websites i visited and etc ..? i don't mean in the way of looking in the history toolbar cuz i already deleted that .what about the emails and chats in yahoo messenger ? supposing the fact that there was no keylogger and those stuffs .how can i delete those information in my computer?please helpthanks a lot

A:Need Help About The History And Visited Websites

Download Tweak UI 1.33 at http://www.pcworld.com/downloads/file_desc...fid,2803,00.aspUse the Paranoia tab of Tweak UI 1.33, (PowerToys for Windows XP's version of Tweak UI lacks this tab, but the tab in Tweak UI 1.33 works fine in XP. The two versions of Tweak UI can coexist on an XP-based system, as long as you don't try to use them at the same time.)You'll find a number of options in the 'Covering your tracks' list. If you check any of these items and click OK, Windows will clear them each time you boot.Document history: This is the list of recently opened documents you get by selecting Start, Documents (or in XP, Start, Recent Documents).Internet Explorer history: This clears visited links and the drop-down list of recently visited URLs in IE's Address Bar toolbar. It does not reliably clear the browser's history list; to empty that, select IE's Tools, Internet Options, click the General tab, and select Clear History.Run history: This option removes the list of commands that you typed in the Start, Run dialog box.

Read other 5 answers
RELEVANCY SCORE 37.2

Hello guys,

I need some advice it it exists some third part program that I could use to integrate Internet Explorer 6 , that help me to browse easier my favourite picture/video forum.

I mean , the forum that I visit , has a lot of threads full of pics and vids , but the forum , does not help me to understand if I already visited that thread. I should remeber the name of the thread or the pics in it , to understand if I already visited that thread before.

So I was wondering if does it exist a program that let me select the thread that I already visited , maybe adding some kind od sign to the thread that could help me to understand that I already visited the thread.

Any help on this please ??

thak u
 

A:Already visited thread marker ??

You probably need to change the 'cookie' settings. Allow all cookies from that specific forum, it will then automatically 'mark' the threads you have visited, by showing them in a different color (or go from e.g. bold to normal script)
 

Read other 5 answers
RELEVANCY SCORE 37.2

i need to delete all visited sites in my personal computer, also down loaded files

A:delete visited sites

In your browser:

for Mozilla Firefox - go to Tools > Clear private data > check the boxes you need - Browsing History, Download history, Cache, Cookies, Offline website data
You can set your browser to do this after each session of net browsing by going to Tools > Options > Privacy tab > Private data > tick the box for "always clear........" > settings button and check those boxes mentioned above ( browsing history etc.)
This will mean you will have to login to sites requiring passwords each time.

for Internet Explorer - go to Tools > Internet Options > General tab > Browsing History > Delete... and choose either "delete all" if you want all things gone or choose the ones you think you need to be rid of.
You can also go into Start > All programs > accessories > system tools > disk cleanup and tick (among others) Downloaded program files, Temporary internet files, offline webpages, temporary files, thumbnails

Hope this helps

Read other 2 answers
RELEVANCY SCORE 37.2

I've heard that even after you delete your history on IE a record remains and can be accessed to see your surfing habits. Is this true and if so is there any way to stop it? I also use Firefox - does the same thing apply there?

Hope someone can help.
 

A:History of Sites Visited

It's true as far as IE is concerned but I don't know about Firefox.

There is a viewer called @Winspy which allows you to see what is being stored, particularly in index.dat files. Scroll down this page and d/l the free viewer referred to there;http://www.acesoft.net/delete_index.dat_files.htm

Index.dat files can't be cleaned/deleted while Windows is running, but various tools, some free, claim to do it at reboot. Javacool's MRU Blaster has an option to clean index.dat, as does CCleaner. Both of them also claim to clear things called User Assist files, which (allegedly) also store similar information to that found in index.dat files.

Have a look at the third item on this page;http://www.utdallas.edu/~jbs024000/software/index.html
 

Read other 3 answers
RELEVANCY SCORE 37.2

hi!
I can't delete a page I have visited on the web,
do u see something wrong in the logfile?
thanks!


Logfile of HijackThis v1.99.1
Scan saved at 11.21.29, on 25/05/2005
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP3 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\regsvc.exe
C:\Programmi\Norton AntiVirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\atiptaxx.exe
C:\Programmi\File comuni\Symantec Shared\ccApp.exe
C:\Programmi\Logitech\MouseWare\system\em_exec.exe
C:\WINNT\System32\internat.exe
C:\Programmi\Kazaa Lite K++\KazaaLite.kpp
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\ACDSee32\ACDSee32.exe
C:\Programmi\AutoCAD LT 2000i Ita\aclt.exe
C:\Documents and Settings\Administrator\Documenti\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virgilio.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-7... Read more

A:can't delete visited page

has someone a short answer for me please?

Read other 8 answers
RELEVANCY SCORE 37.2

Hi everyone! I'm in Toronto and just picked up this virus. I've done some searching on these forums, downloaded Hijack This, and put it in its own folder. I've copied this info from the scan. I'm using AVG, Norton, and Spybot, but this virus is hard to beat. Any tips would help. Thanks! dp.s. Sorry about the length of this...Logfile of HijackThis v1.97.7Scan saved at 12:58:58 PM, on 5/20/2004Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\Ati2evxx.exeC:\WINNT\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINNT\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG6\avgserv.exeC:\WINNT\system32\cisvc.exeC:\WINNT\System32\svchost.exeC:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exeC:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXEC:\WINNT\system32\regsvc.exeC:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exeC:\WINNT\system32\MSTask.exeC:\Program Files\Analog Devices\SoundMAX�... Read more

A:Trojan Virus re-visited...

I want you to fix some of those entries. Please do the following:Please make sure that you can view all hidden files. Instructions on how to do this can be found here:How to see hidden files in WindowsRun Hijackthis again, click scan, and Put a checkmark next to each of these. Then click the Fix button:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.websearch.com/ie.aspx?tb_id=50073R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/saR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50073R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50073R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/saR3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dllO2 - BHO: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dllO3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - C:\PROGRA~1\Toolbar\toolbar.dllO4 - HKLM\..\Run: [Skynetwork] C:\WINNT\SYSTEM32\fvde.exeO4 - HKLM\..\Run: [NiCQ] C:\WINNT\SYSTEM32\e... Read more

Read other 16 answers
RELEVANCY SCORE 37.2

how I can remove previous visited web sites from the harddrive using win xp-home edition. Thank you
 

A:removing visited web sites

Hi macleriv

That depends on how deep you want to go

Go to tools\internet options\ click "delete files" and "clear history"
You can also delete cookies from here - but remember to keep a list of website passwords - you'll need to use them again after deleting cookies

steam
 

Read other 3 answers
RELEVANCY SCORE 37.2

In XP, How can I set windows to mark the links I have visited while surfing with IE ? Some pages mark O.K., but others don't. When I had 95 and 98, windows had a feature to change the color of visited links, etc. can this be done with XP ?

Also, when I go to Internet Options, and set "Connections" to always dial my default connection, it changes by itself to " Never Dial a connection" when I shut down and reboot. What's the problem?
 

A:Marking Visited Links

Try Tools, Internet Options, General tab, press the Colors button, That will enable you to change the visited color.
Not sure on your second problem, sorry.
 

Read other 1 answers
RELEVANCY SCORE 37.2

I'm running WINDOWS XP 'Professional' (SP 3)

I'd like to save all the Websites I visit on 'Windows Internet Explorer'. I can simply click on the Site without having to manually enter it each time.
I used to be able to do it, but maybe I've disabled something ???. Please be detailed in your response.

Another thing, is I'd like to be able to view my USB Files in the 'Thumbnail' format, but it keeps coming up as 'Tiles'. How could 'Thumbnails' be made permanent ?.

Hoping someone can help.

Cheers.
 

A:Saving visited Websites.

Hiya Tony.

The IE saving problem should be easy enough if I`ve read it correctly. You want to save any (or all) chosen websites to Favourites ... just hit Ctrl + D when you`re on the site to add them to the Favourites folder. Now you can access them by going to Favourites and clicking on the site link.

Thumbnails format ... Open any folder and after right-clicking in a blank area, choose View / Thumbnails. Now with the folder still open, go to the top and navigate to Tools / Folder Options and click the View tab. Now click the `Apply to All Folders` button, confirm and then close the folder. That should then open folders in thumbnail format.

Jenny
 

Read other 1 answers
RELEVANCY SCORE 37.2

I have had a situation in the past when I went to a webpage and ended up getting hit with a virus, but that made my windows instaler go crazy, but this hasn't happened as of yet? And I see nothing out of the ordinary with my Laptop.

I went on a webpage and it said something like hacked by Web Devils or something, I clicked off the page as soon as I saw mention of the word hacked, but I would still like to be sure.

If someone could please check my HJT log that would be great.

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 20:08:20, on 04/02/2008
Platform: Windows Vista (WinNT 6.00.1904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\COMODO\Firewall\cfp.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Grisoft\AVG7\avgwb.dat
C:\Users\Jim\Documents\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Interne... Read more

A:Webpage just visited said something about being Hacked?

bump
 

Read other 1 answers