Tech Problem Aggregator

Problem visiting mcafee site

Q: Problem visiting mcafee site

I made a search for the above problem with google and lead me here. I downlowded Combo fix and I finally got this log:ComboFix 10-04-21.01 - vasilis 26/04/2010 11:39:37.1.2 - x86Microsoft Windows XP Professional 5.1.2600.3.1253.30.1033.18.2047.1558 [GMT 3:00]Running from: c:\documents and settings\vasilis\Desktop\ComboFix.exe.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).C:\0fkk02x.exeC:\9jyhdim8.exeC:\autorun.infC:\chxnxyx.exec:\docume~1\vasilis\LOCALS~1\Temp\cvasds0.dllc:\docume~1\vasilis\LOCALS~1\Temp\cvasds1.dllc:\docume~1\vasilis\LOCALS~1\Temp\herss.exec:\documents and settings\vasilis\Recent\.pifC:\dqm.exeC:\utcddeq.exec:\windows\system32\SHELLLNK.TLBC:\wyskq6lt.exe.((((((((((((((((((((((((( Files Created from 2010-03-26 to 2010-04-26 ))))))))))))))))))))))))))))))).2010-04-26 06:08 . 2010-04-26 06:08 128512 --sh--r- C:\hc3hvi0.exe2010-04-24 05:58 . 2010-04-24 05:58 128000 --sh--r- C:\twhvna.exe2010-04-22 06:03 . 2010-04-23 06:32 128512 --sh--r- C:\vgyn6ewc.exe2010-04-19 06:27 . 2010-04-21 06:26 127488 --sh--r- C:\r3fhr.exe.(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))).2010-04-26 07:55 . 2009-02-09 14:05 10 ----a-w- c:\windows\popcinfo.dat2010-04-08 07:54 . 2008-09-02 10:17 13104 ----a-w- c:\documents and settings\vasilis\Local Settings\Application Data\GDIPFONTCACHEV1.DAT2010-02-12 10:03 . 2010-03-16 08:03 293376 ------w- c:\windows\system32\browserchoice.exe2010-02-02 10:22 . 2008-09-02 09:51 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat2009-03-21 14:06 . 2004-08-04 00:56 157130 --sha-r- c:\windows\system32\atgoe.dll.((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))..*Note* empty entries & legit default entries are not shown REGEDIT4[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]"DT HPW"="c:\program files\Portrait Displays\HP My Display\DTHtml.exe" [2007-06-29 278528]"WheelMouse"="c:\progra~1\A4Tech\Mouse\Amoumain.exe" [2004-08-25 147456]c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]BlueSoleil.lnk - c:\program files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2007-1-19 690448]GxStart.lnk - c:\program files\Gendex\VixCfg\gxstart.exe [2008-9-2 237568][HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]"%windir%\\system32\\sessmgr.exe"="c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\HP1006MC.EXE"="%windir%\\Network Diagnostic\\xpnetdiag.exe"=[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]"1571:TCP"= 1571:TCP:eqlzgjwwR3 Amps2prt;A4Tech PS/2 Port Mouse Driver;c:\windows\system32\drivers\Amps2prt.sys [03/09/2008 12:12 ????? 9984]S2 ccuwv;Manager Microsoft;c:\windows\system32\svchost.exe -k netsvcs [04/08/2004 3:56 ????? 14336]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcsccuwv..------- Supplementary Scan -------.uStart Page = hxxp://www.google.com/TCP: {2E29DA9C-EA41-47A0-811B-2EBFF490E189} = 192.168.10.254.- - - - ORPHANS REMOVED - - - -AddRemove-Go_There_Games.exe - D:\Go_There_Games.exe**************************************************************************scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfullyhidden files: **************************************************************************[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ccuwv]"ServiceDll"="c:\windows\system32\atgoe.dll".--------------------- DLLs Loaded Under Running Processes ---------------------- - - - - - - > 'winlogon.exe'(916)c:\windows\system32\Ati2evxx.dll.Completion time: 2010-04-26 11:43:36ComboFix-quarantined-files.txt 2010-04-26 08:43Pre-Run: 149,219,815,424 bytes freePost-Run: 149,548,019,712 bytes freeWindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe[boot loader]timeout=2default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS[operating systems]c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdconsmulti(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect- - End Of File - - 9968F106E12BE742343CC35E4C4557BCany advice how I fix those problems?Thanks in advance.EDIT: Moved from XP to Malware Removal Logs, more appropriate ~ Hamluis.

A: Problem visiting mcafee site

When I try to visit mcafee side or other antivirus sides as well as microsoft pages I get the following answer:The page cannot be displayed The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings. To attempt fixing network connectivity problems, click Tools, and then click "Diagnose Connection Problems..." Dont know how to repair my pc. Please help me.Here follows The DDS text DDS (Ver_10-03-17.01) - NTFSx86 Run by vasilis at 10:48:40.59 on 30/04/2010Internet Explorer: 6.0.2900.5512Microsoft Windows XP Professional 5.1.2600.3.1253.30.1033.18.2047.1676 [GMT 3:00]============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\A4Tech\Mouse\Amoumain.exeC:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exeC:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exeC:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exeC:\Program Files\Gendex\VixCfg\gxstart.exesvchost.exeC:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exeC:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exeC:\Program Files\internet explorer\iexplore.exeC:\WINDOWS\System32\svchost.exe -k HTTPFilterC:\Documents and Settings\vasilis\Desktop\mallware romovers\dds.scr============== Pseudo HJT Report ===============uStart Page = hxxp://www.google.com/BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dllmRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exemRun: [DT HPW] c:\program files\portrait displays\hp my display\DTHtml.exe -startup_foldermRun: [WheelMouse] c:\progra~1\a4tech\mouse\Amoumain.exeStartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\reader 8.0\reader\reader_sl.exeStartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~2.lnk - c:\program files\adobe\reader 8.0\reader\AdobeCollabSync.exeStartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueso~1.lnk - c:\program files\ivt corporation\bluesoleil\BlueSoleil.exeStartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\gxstart.lnk - c:\program files\gendex\vixcfg\gxstart.exeIE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exeIE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exeDPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabTCP: {2E29DA9C-EA41-47A0-811B-2EBFF490E189} = 192.168.10.254Notify: AtiExtEvent - Ati2evxx.dll============= SERVICES / DRIVERS ===============R3 Amps2prt;A4Tech PS/2 Port Mouse Driver;c:\windows\system32\drivers\Amps2prt.sys [2008-9-3 9984]S2 ccuwv;Manager Microsoft;c:\windows\system32\svchost.exe -k netsvcs [2004-8-4 14336]=============== Created Last 30 ================2010-04-30 07:41:55 0 ----a-w- c:\documents and settings\vasilis\defogger_reenable2010-04-26 08:38:34 0 d-sha-r- C:\cmdcons2010-04-26 08:37:22 98816 ----a-w- c:\windows\sed.exe2010-04-26 08:37:22 77312 ----a-w- c:\windows\MBR.exe2010-04-26 08:37:22 261632 ----a-w- c:\windows\PEV.exe2010-04-26 08:37:22 161792 ----a-w- c:\windows\SWREG.exe2010-04-26 08:37:16 0 d-----w- C:\ComboFix2010-04-26 06:08:28 128512 --sh--r- C:\hc3hvi0.exe2010-04-24 05:58:35 128000 --sh--r- C:\twhvna.exe2010-04-22 06:03:02 128512 --sh--r- C:\vgyn6ewc.exe2010-04-19 06:27:35 127488 --sh--r- C:\r3fhr.exe==================== Find3M ====================2010-02-12 10:03:03 293376 ------w- c:\windows\system32\browserchoice.exe2009-03-21 14:06:58 157130 --sha-r- c:\windows\system32\atgoe.dll============= FINISH: 10:48:59.31 ===============

10 more replies
Answer Match 65.52%

Hello.

I've not had this happen to me before. On visiting "RosariansCorner" I receive the attached message.

I can get to the site through the cached sites in Google but can't navigate the actual site.

Have you come across this before. Other sites are fine. I'm using Firefox and Windows XP.

Thank you.

Penny.
 

More replies
Answer Match 64.68%

Hello,

I am running a P4 Q6600 with Windows XP SP2. I use Firefox, just updated to 12, and have AVG 2012 loaded
(unfortunately, it lists my current AVG Safe Search as incompatible with Firefox 12).
I went to a legitimate business website, and apparently the website has been recently hijacked because
instead of the expected content (that was in the Google cache), an illegitimate-appearing virus warning
appeared in the browser window. I closed the window, but found thereafter that when visiting google.com with Firefox,
Firefox always said it was "Connecting to 213.174.137.82...". This is my main symptom. I didn't observe
this on other intact computers, but I found others on BleepingComputer that had infections associated
with this address (such as http://www.bleepingcomputer.com/forums/topic445802.html, but with slightly different
symptoms -- Google seems to work okay for many searches in my case). I don't perceive significant slowing,
but strangely after running DDS and GMER for a while, my mouse stopped working (I plugged in another one
and it worked for a short while but also stopped) and I started getting delayed write errors. Upon rebooting, the computer
seems to work okay but it still displays the "Connecting to 213.174.137.82..." message with Firefox browsing google.com.

I visited the business website that seemed to initiate the problems again but on a Linux computer, and
I found the URL redirected to a suspicious-appearing .ru address, wher... Read more

A:"Connecting to 213.174.137.82..." appears after visiting hacked site

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At t... Read more

14 more replies
Answer Match 64.68%

Hey all Iam tryinng to fix my parents computer. They keep getting "warning visiting this site may harm your computer" when in I.E. I understand this is Malware but shouldnt of Norton 360 have caught this?Anywayz here's the HiJack this LOG, Iam also trying to learn so If someone can explain what iam looking for in this log?Here it is:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:03:07 AM, on 7/30/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Microsoft LifeCam\MSCamS32.exeC:\Program Files\Norton 360\Engine\3.0.0.135\ccSvcHst.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\RealVNC\VNC4\WinVNC4.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Expl... Read more

A:warning visiting this site may harm your computer

Here is the DDS Log:
DDS (Ver_09-07-30.01) - NTFSx86
Run by Administrator at 10:49:09.23 on Thu 07/30/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1534.996 [GMT -4:00]

AV: Norton 360 *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Norton 360\Engine\3.0.0.135\ccSvcHst.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton 360\Engine\3.0.0.135\ccSvcHst.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\vVX... Read more

3 more replies
Answer Match 64.68%

Hi,

I need your help. My website "http://www.how-to-manifest-your-desires.com/" is listed by Google as a dangerous site that may harm your computer. The problem is that I don't know how to fix the problem. I have looked through the code to see any suspicious code but cannot see anything suspicious.

I'd appreciate if someone perhaps has experience with this sort of thing. See warning message below!

Thanks,
Jimmy

---------------------------

Warning - visiting this web site may harm your computer!
Suggestions:
Return to the previous page and pick another result.
Try another search to find what you're looking for.
Or you can continue to http://www.how-to-manifest-your-desires.com/ at your own risk. For detailed information about the problems we found, visit Google's Safe Browsing diagnostic page for this site.

For more information about how to protect yourself from harmful software online, you can visit StopBadware.org.

If you are the owner of this web site, you can request a review of your site using Google's Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.
Advisory provided by GOOGLE
 

More replies
Answer Match 64.68%

after i restarted my computer everything looked to be fine until i went on to craigslist and all of the sudden this malwareweblink.com (http://malwareweblist.com/block.php?id=2036-2&url=http://vancouver.en.craigslist.org/forums/?act=Q&ID=144014843)

took over the screen and says my computer is at risk and it gives me two options

continue unprotected or get security software

i am running avg for firwall spyware and antivirus. this doesnt only happen with only craigslist it happens with almost every website i go to. not every time either but 50% of the time.

if i click continue unprotected it goes back to the website i was previously at but then pops up again. so i tried to click get security software and it takes me to a website to purchase antivir antivirus (http://malwareweblist.com/1/?id=2036-2)

so i belive this is a virus or somthing so if anyone can help me with this problem would be great thank you

please see the attachments as well

A:Warning! Visiting this site may harm your computer!

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

2 more replies
Answer Match 63.84%

I have a problem when visiting Friendster webpage with my Microsoft Internet Explorer 6.0.

Whenever i type in the url of Friendster the webpage will automatically redirect to an unknown website.


It's getting on my nerves as i can't go to Friendster. However, there's no problem if i'm using the web browser of RealPlayer.
 

A:Auto redirect to unknown site when visiting Friendster

Hello and welcome to Techspot.

I have just checked out the site you refer to with both Firefox and IE with no problems.

I would suggest therefore that your IE may have been hijacked.

Go Here and follow the instructions.

Regards Howard :wave: :wave:
 

1 more replies
Answer Match 63.84%

My friend's computer got infected with some worm after visiting some porn site and as a result internet explorer would ot start. Everytime we tried to start iexplorer, it would say "C:\WINDOWS\mslk.exe
the NTVDM CPU has encountered an illegal instruction
CS:Odc9IP:011aOP;65 63 75 72 69 Choose 'Close' to terminate the application"
and a variations of other names like "C:\Windows\sdklg.exe or ~mfcrd.exe and poj32.exe...keeps
changing everytime wetry it. Well this is the hijackthis log and it would be nice if someone could help. Thanks!!!

"Logfile of HijackThis v1.97.7
Scan saved at 2:14:03 AM, on 6/27/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Music\SSSvr.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Photo\appsrv\PhotoAppSrv.exe
C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
C:\Program Files\Sony\VAIO Medi... Read more

A:internet explorer not starting after visiting porn site

Download and install APM from here: http://www.diamondcs.com.au/index.php?page=apm

Run HJT again and put a check in the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://tcjwo.dll/index.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\tcjwo.dll/sp.html#96676
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\TRIHO~1\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {5C397BB2-36D2-F787-9AA2-DB56173763F4} - C:\WINDOWS\msbb.dll
O2 - BHO: (no name) - {38F40F5F-D7CE-40CE-88E6-C0F5381FA3B6} - C:\WINDOWS\System32\nakob.dll
O4 - HKLM\..\Run: [appwh32.exe] C:\WINDOWS\appwh32.exe
O4 - HKLM\..\RunOnce: [ieuu.exe] C:\WINDOWS\system32\ieuu.exe
O8 - Extra context menu item: &iSearch The Web - res://C:\WINDOWS\S... Read more

3 more replies
Answer Match 63.84%

This problem has been very persistent and whatever I do I can't seem to get rid of it! I've included screen shots below. The jist of this is whenever I go to a website (doens't really matter which one) i get those errors! I am running Windows XP Service Pack 2. If you would like more information just ask.http://i16.photobucket.com/albums/b40/boog...galz92/wth2.jpghttp://i16.photobucket.com/albums/b40/boogaboogalz92/wth.jpgI'm guessing it's the same problem as this guy had... http://www.bleepingcomputer.com/forums/t/167891/what-if-i-dont-want-to-buy-their-anti-spyware/Stating that, I've already done what the guy said in post number 2 (with the Malwarebytes' Anti-Malware program) Here's my log:Malwarebytes' Anti-Malware 1.28Database version: 1166Windows 5.1.2600 Service Pack 22008-09-17 20:14:11mbam-log-2008-09-17 (20-14-11).txtScan type: Quick ScanObjects scanned: 47395Time elapsed: 3 minute(s), 53 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 5Registry Values Infected: 2Registry Data Items Infected: 0Folders Infected: 1Files Infected: 3Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{7221E2B7-FFBF-337E-7121-006F0D253BCC} (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\logons (Fake.Dropped.Malware) -> Quarantined and deleted successfully.HKE... Read more

A:Warning! Your Pc Possible Infected Due To Visiting Exploited (hacked) Site...

Hi, you know it's bogus when you see the grammar they used in link two.Warning! You infected by this siteOk good did you do the needed reboot? If not do that. Then check for an update to MBam,rescan and post another log.

12 more replies
Answer Match 63.42%

Was on a website called coolwallpaper.com or something like that and as soon as I got on it spyware doctor went off blocking threats, then a window popped up which appeared to be scanning my pc for viruses which was a program I dont have on my pc. I ran malwarebyes and tried to remove some of the stuff wanted to make sure I got every thing.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:52:21 PM, on 1/25/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16762)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\Explorer.EXEC:\Program Files\HP DigitalMedia Archive\DMAScheduler.exeC:\Program Files\Java\jre1.6.0_06\bin\jusched.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Spyware Doctor\pctsTray.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\AIM6\aim6.exeC:�... Read more

A:PC under attack after visiting a wallpaper site, Hijack report included

Please download Malwarebytes' Anti-Malware from HERE or HERENote: If you already have Malwarebytes' Anti-Malware, just run and update it.. Then do a "Perform Full Scan"Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Full Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.NEXTPlease download RSIT by random/random and save it to your Desktop.Double click on RSIT.exe to run RSITBefore you click "Continue", make sure you change the List files/folders created or modified in the last 3 monthsClick Continue at the disclaimer screen.Once it has finished, two lo... Read more

2 more replies
Answer Match 63.42%

I downloaded a re-direct anti-virus program.
I was able to kill it with RKill, but there are still some lingering issues going on.
When I try to connect to the internet via Google.com I get this message "Internet Explorer Warning - visiting this web site may harm your computer!"
I have run Malwarebytes and Microsoft Security Essentials.
They have removed numerous Trojans etc, but I still get the Internet Explorer Warning - visiting this web site may harm your computer!
When I tried running HIJackThis, I get a message "For some reason system denied write access to the Hosts file...."

Any clue how bad it really is?

Thanks,

Gilly68

A:Internet Explorer Warning - visiting this web site may harm your computer!

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the ... Read more

2 more replies
Answer Match 63.42%

Any time I try to access the internet I get " Internet Explorer Warning - visiting this web page may harm your computer".
I can't access the internet from that computer.

If I try to run any programs I get "Security Warning - Application cannot be executed. The file is infected. Do you want to activate your antivirus now?"

Can you guys help?

Thanks
Tim

A:Internet Explorer Warning - visiting web site may harm your computer

Never mind fellas... I fixed it myself!

Thanks anyways!!

1 more replies
Answer Match 63.42%

I have an infected laptop running XP Pro SP3. It had Spyware Protect 2009 on it but I was able to stop the sysguard.exe process and delete sysguard.exe from the Windows subdirectory and from the HKEY_CURRENT_USER\....\Run registry hive. There is still at least one other major problem. IE 7 is redirected to display "internet explorer warning visiting this web site may harm your computer" most of the time. I can get to google sometimes and even search something but when I try to follow a link - I get the redirection message. It also prevents me from running a system restore and most of the scanning software such as malwarebytes, SDfix and several others. I was able to run HijackThis but when I tried to post the report, it redirected me again so I saved the log file to a thumbdrive and logged onto an uninfected computer to post this.

I'm attaching the log file.
 hijackthis.log   10.75KB
  9 downloads

I've heard great things about this forum. Thanks for your help in advance.

A:internet explorer warning visiting this web site may harm your computer

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

2 more replies
Answer Match 62.58%

Hello,

I have Windows XP with Mcafee virus protection and Firewall. The virus software fails to update because it can not connect to the Mcafee site. I use windows explorer 8 and can access all sites except Mcafee. Do I have a virus or malware? Need help to remove. I contacted Mcafee and they had me download their Stinger tool, but that did not find any virus.

Thanks.

A:Mcafee Virus software update - unable to access Mcafee site

Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The... Read more

5 more replies
Answer Match 60.48%

Hi there, can someone please tell me why is McAfee site advisor "labels" RED the site giveawayoftheday.com? Does it mean it's a "no-no" visit site? Thanks!

A:Mcafee Site Advisor Sayd Red On Giveawayoftheday Site

The site itself might be in the green (safe) zone, but the link you are searching may be otherwise.Try using this little free utility on all links?http://linkscanner.explabs.com/linkscanner/default.aspI use the paid version, but there really is no difference.

9 more replies
Answer Match 58.38%

The Mcafee icon is no longer in the lower right part of the screen. The update icon (the rotating arrow) appears, but it stops and I am told I need to reinstall the program. However, I cannot get to the Mcafee site (I can get to other sites). Other icons have also disappeared, including the one for Zone Alarm (I need to start that up each time). I had this problem last week and ran Malwarebtyes' Anti-Malware; it found problems, removed them, and everything was fine. Now the problem is back, and MBAM finds no problem. I also find that using the internet is now very slow.

I have put the latest Hijack This log below. Below that, I put the MBAM log from last week (when it found problems).

Thanks for any assistance.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:45:52 AM, on 4/16/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\Bo... Read more

More replies
Answer Match 56.7%

Hello all.

Everytime I go to a websitr I get an antivirus popup, or a popup that has something to do with the site I visited.

For example if it was a Sports site, I may get a popup for NFL clothing.

Please help.

Here is my LogFile, Thanks.






Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:39:56 PM, on 9/8/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\PROMon.exe
C:\WINDOWS\GWMDMMSG.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
C:\Program Files\MarkAny\ContentSafer\MAAgent.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\NMSSvc.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost... Read more

A:Antivirus Popups, popups that are similar to the site I am visiting

bump, anyone?

2 more replies
Answer Match 53.76%

Anyone else getting that old Google bar when visiting a Google site with Edge?

A:Anyone else getting that old Google bar when visiting a Google site ..

Yup..shows up here.

20 more replies
Answer Match 52.92%

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:04:36 PM, on 5/17/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Network Associates\Common Framework\FrameworkService.exeC:\Program Files\Network Associates\VirusScan\mcshield.exeC:\Program Files\Network Associates\VirusScan\vstskmgr.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spupdsvc.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exeC:\WINDOWS\system32\reg.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Network Associates\VirusScan\SHSTAT.EXEC:\Program Files\Network Associates\Common Framework\UpdaterUI.exeC:\Program Files\Common Files\Network Associates\Tal... Read more

A:I cannot open Mcafee site on IE,

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Answer Match 52.92%

How Do I Unistall it. When I Try TO remove It , it says That it couldnt unistall it succesfully. and that i should go to their site. i did. i said nothing. the message says something about its in use with someone els , i have a guest account , do i delete that ?

AHH HELP?

A:Mcafee Site Advisor

Did you disable it before trying to uninstall it?If not, try reinstalling it, disable it, then uninstall it.To uninstall in Firefox:Open Firefox.Click the dropdown arrow next to the SiteAdvisor icon.Select Disable SiteAdvisor.Click Tools / Add-ons / Extensions tabScroll down to MacAfee SiteAdvisor, click it, to highlight it, and select Uninstall.Restart Firefox, for the change to take effect.

1 more replies
Answer Match 52.92%

hI

How do i fix this issue? I forgot my McAfee Site Advisor password. The Advisor is on and I wanted to "unprotect" it so that i can use other browsers. thanks

A:McAfee Site Advisor

Originally Posted by springrobin


hI

How do i fix this issue? I forgot my McAfee Site Advisor password. The Advisor is on and I wanted to "unprotect" it so that i can use other browsers. thanks




What version do you have, is it the free or Plus one.?

I don't remember anything to do with a password when I installed it on my machine, and even when I used it on XP I didn't have to do anything about a password when using it with IE or Maxthon.

3 more replies
Answer Match 52.92%

I have loaded Site Advisor twice on my desktop (WinXPsp3), and uninstalled twice.
I could see the Site Advisor Search box in lower right of Firefox (3.5.3), but no markings next to each web site/page.
But nothing loaded (at all) in the IE8 (even though everything appeared to load okay on my 17" laptop, with IE8 and Firefox also).
Both machines have same things - WinXPsp3; IE8; Firefox; same AV/AS programs, etc.
#1- Any suggestions why Site Advisor does not work on the desktop?
#2- P.S. After removing Site Advisor from the desktop, I ran CCleaner. Does anything else remain of the Site Advisor on the desktop after the unnstall? Some fragments that I need to delete manually, etc.?
 

A:McAfee Site Advisor

8 more replies
Answer Match 52.92%

I am trying to get to a page of a known and trusted site from a link and McAfee Site Advisor comes up and says "Whoa - are you sure you want to go there?" but gives me no option to say yes and override the block!

I have uninstalled the program from the startup menu and I don't see it in Add/Remove programs but it is still doing it to every browser I use. I also checked the browser add-ons and I can't see it there either. I have of course restarted my computer.

I'm at my wit's end and furious - I never wanted this program anyway, it just snuck in unnoticed.

When I search the C drive I can't find anything related to McAfee so I guess it must be named something else.

Can anyone help?

A:McAfee Site Advisor

I am now thinking that this is a problem with the link from the website, which is being redirected to McAfee.

??

2 more replies
Answer Match 52.92%

http://www.siteadvisor.com/

Hi anyone use this? Lke it? easy uninstall if required?

Thx
 

A:McAfee Site Advisor?

14 more replies
Answer Match 52.92%

So Siteadvisor (McAfee's internet software) will not load. I tried downloading a new version of it from my McAfee account, but I was told that I had to uninstall the old version and install the new.

The problem is that I cannot get the uninstall program to load. Every time I try to open any program in the siteadvisor folder, I get a message that it cannot be initialized.

This is new to me, any suggestions out there?

A:Mcafee Site Advisor

Have you tried doing it from Safe Mode?How to start Windows in Safe Mode

2 more replies
Answer Match 52.92%

Hi,I seem to be running on to similar issues than the one described in the following URL:http://www.bleepingcomputer.com/forums/ind...ee+site+blockedMy computer is an Emachine that runs Windows XP. The McAfee AV suite started to display messages that the protection was not activated and i was not able afterwards to access McAfee website.I did a few things that a non computer savvy person would do, e.g. restoring to a previous date, uninstall McAfee, run a few free antivirus (kept no log of course), installed Norton but to no avail. Norton seems to be working fine but the McAfee web site still cannot be accessed.Help please. By the way, it is my girlfriend computer so it is all her fault :-)

More replies
Answer Match 52.92%

I wanted to uninstall McAfee to install a different antivirus. I did the normal add/remove Mcafee and it doesn't show up anywhere on my machine aside from when I try to install my new antivirus it tells me that it detects the Site Advisor and to remove it. I can't find it one my machine so how can I remove it?

A:McAfee Site Advisor

Step 2 should do it http://service.mcafee.com/FAQDocument.aspx?id=TS100507

3 more replies
Answer Match 52.08%

hi there,can anyone help please,Ive got mcafee site adviser on ,I run windows XP sp2, for some reason its stoped working,not showing the sights that are good or bad,dont know if Ive clicked on something or not to stop it working ,it was working last week ok,Ive just changed my anitvirus from avg,to avira,birdman1

A:[SOLVED] mcafee site advisor

Hello birdman1, Welcome to TSF!

Considering that you have changed your Anti Virus Program, you may need to uninstall and re-install the McAfee Site Advisor?, so that it can co-ordinate with your 'new' AV.

Try this and post back with the results.

Kind Regards,

3 more replies
Answer Match 52.08%

Short from tossing this computer out the 2nd story window I am hoping you all can help. I have a Vundo virus or spyware or something chowing in my puter and I can't seem to find out how to get rid of it. Code_green had given me a few options to do but they didn't work. So he said to do Hijack this and post the log here maybe someone can figure it out. I have NO idea what any of it means. Computer tech for me would be throw out the old computer and buy a new one.lol
I have McAfee Build 9.0.10
Engine 4.4.00
DAT 4.0.4443
have XP sevice pack 2 nd running broadband too.
Now I just had a pop up from mcafee saying I have been infected but deleted the downloader-LG trojan soooo I domn't know what to do.
Helllllppppp....TIA
Jenn
Logfile of HijackThis v1.99.1
Scan saved at 10:09:50 AM, on 3/15/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\NVATray.exe
C:\WINDOWS\Syst... Read more

A:Hi Code_Green from McAfee site said to post this here for some help..:)

You have one very badly compromised system

You have the latest version of VX2/L2M trojan.
The Narrator (AKA) qoologic trojan.
And Bube.d aka Win32.Beavis

All of these will download more Malware like a magnet.........first of all im giving you a link to detailed instructions for removing the Bube.d
infection (courtesy of CalamityJane)you will not be able to post there as the thread is locked.You will also need to disable your McAffee antivirus.Please follow ALL instructions and when finished,post back here.

Its best that you do not try to remove anything using Adaware or any spyware scanners......and please keep from browsing the net except for these forums.

Heres the link: http://forum.gladiator-antivirus.com/index.php?showtopic=23364&hl=bube

Good luck.
 

3 more replies
Answer Match 52.08%

I run McAfee Site Advisor primarily for it's ability to flag websites in my Google searches. It's effectiveness can be debated no doubt. It's the only McAfee product I have ever considered running.
 
Today upon coming to BleepingComputer, McAfee flashed it's standard warning, "Whoa! Are you Sure You Want To Go There?" Of course I said Yes.
 
Now McAfee is displaying RED instead of the Green it always had previously for this website. Of course I feel that McAfee is way out in left field on this one. Perhaps Admin would like to check it out & contact McAfee regarding this.
 
Upon clicking the RED McAfee warning it takes me to this information page....
 
https://www.siteadvisor.com/sites/http://www.bleepingcomputer.com/forums/f/25/anti-virus-and-anti-malware-software/?pip=false&premium=false&client_uid=2402041908&client_ver=3.6.5.135&client_type=IEPlugin&suite=false&aff_id=0&locale=en_us&ui=1&os_ver=5.1.3.0
 
I feel this is completely in error & McAfee is doing a disservice to those seeking help for computer issues, from what has to be one of the best forums. 

A:McAfee Site Advisor & BleepingComputer

Hi,
Thanks for reporting this. I sent a message to the site owner, Grinler, to inform him. This is not the first time as well...
xXToffeeXx~

8 more replies
Answer Match 52.08%

I use Opera Browser mostly, and McAfee Site Advisor doesn't work.
Can any Member suggest a site advisor that does work,with this Browser? Thanks.

More replies
Answer Match 52.08%

Hi I have removed 'McAfee Site Advisor' using windows & also 'IObit Uninstaller, which seemed fine. Noticed in Programs (x86)/McAfee, SiteAdvisor folder still there. There was an uninstall there which deleted some remains but not others? How best should I get rid of these remnants left? If I try & shred, it says it can't because still in use or some other program using? Firefox or IE are not using this now.

Appreciate your help

Thx
__________________
 

A:McAfee Site Advisor Removal?

8 more replies
Answer Match 52.08%

Hi 'am using 'Firefox 6.01' at present just wondered if the latest 7.0.1 was compatible with 'McAfee Site Advisor'

Had problems with previous versions, if not will stick with 6.0.1

Appreciate any help

Thx
 

A:Firefox & McAfee Site Advisor?

7 more replies
Answer Match 52.08%

It appears I may have the Conficker worm but none of the virus scans I have attempted pick up any issues (Trend Micro, Symantec, McAfee) and I am unable to execute cmd or regedit along with not being able to access the McAfee to re-install McAfee after Comcast suggested I uninstall McAfee since I was being prompted with a message to re-install the McAfee Security Suite. Any help would be greatly appreciated! Here is the HiJack log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:42:12 AM, on 5/18/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0013)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeC:\Program Files\Internet Explorer\IEXPLORE.EXER1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.comcast.net/toolbar2.0/search/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msnbc.msn.com/R1 - HKLM\Software\Microsoft\Internet Explorer\... Read more

A:Conficker? Can't access McAfee site.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Answer Match 51.66%

Hi, I need some help removing the Mcafee Site Advisor Enterprise via the Mcafee EPO 4.5. We created a batch file designed to remove the Antivirus agent from the local PC's problem is it removes the agent but not the Site Advisor. This change would need to be deployed to about 150 PC's in an active directory domain. All computers in the domain are running Windows 7 64 bit OS'. Can anyone help with this issue as I am pulling my hair to get this to work. Any ideas will be much appreciated!

More replies
Answer Match 51.66%

I need help! I have McAfee Security Site installed on my computer (Dell Deminsion 4600 Windows XP-Home , SP-3) and am unable to open the site. When i try i get a partial screen that say's Navigation to this--------- and that's all i get. The rest of the info is cut off and all that is there is the blue border of the box. I can close the box by clicking on the -x- in the top right corner.The program seems to be working ok and gets updates when i am on line but i can not access any function of the suite. I had trouble installing the program, it would not auto install i had to open the EN-US folder and click on install and then it installed. I have used McAfee in the past and this is an update for an older version. Can anyone help with this problem? I do not have any problem installing and opening any other prograns. Thanks, fairville3
 

A:Solved: can't access McAfee Security Site

Welcome to TSG Fairville!

If you haven't paid for McAfee, I'd recommend just downloading another program in it's place. I like Avast (free), AVG is a resource hog, but also OK (and free), and tons more that you can find listed HERE that will keep you protected.

As to the McAfee site, are you sure you have the security levels turned down enough to access them and/or have scripts turned on for the site? And you are sure that you are on the right page and not a fake one? Maybe someone else will know more about your situation as I haven't seen anyone use McAfee in years.

Sorry I'm not more help! If you don't get it worked out, you could try posting in the General Security forum located HERE.
 

3 more replies
Answer Match 51.66%

Hi, I need some help removing the Mcafee Site Advisor Enterprise via the Mcafee EPO 4.5. We created a batch file designed to remove the Antivirus agent from the local PC's problem is it removes the agent but not the Site Advisor. This change would need to be deployed to about 150 PC's in an active directory domain. All computers in the domain are running Windows 7 64 bit OS'. Can anyone help with this issue as I am pulling my hair to get this to work. Any ideas will be much appreciated!

More replies
Answer Match 51.66%

Hi --I have a problem on a home Dell Inspiron 700m laptop running Windows XP-SP3.SYMPTOMSHere is a short list of the discovered symptoms:1. Something is tampering with most mcafee.com web page retrievals. When I use Firefox to attempt to reach http://www.mcafee.com/, I get "The specified method is not supported".When I use IE7.0 to attempt to reach http://www.mcafee.com/, I get "The website is unable to display the webpage" and"This error (HTTP 501 Not Implemented or HTTP 505 Version Not Supported) means that the website you are visiting doesn't currently have the ability to display the webpage, or support the HTTP version used to request the page."(All other comments are when using Firefox)Upon googling "mcafee" and getting some links within the mcafee web site, when I click on, e.g., "http://www.mcafee.com/us/support/index.html", I get something that looks like a stripped-down text only web page, with only a hierarchical list of links and no graphics.However, when I retrieve "http://community.mcafee.com/", it appears that most of the page content is retrieved, although no graphics. It was from this post http://community.mcafee.com/showthread.php?t=229619 that convinced me that I had some type of malware and that mentioned ComboFix that led me here to bleepingcomputer.com.2. I have not found any other web sites that are blocked or tampered.2. I cannot get a DOS cmd prompt to run. 3. I cannot run regedit from the "Run..." menu or a folder, but if I rename regedit.exe. t... Read more

A:Mcafee site blocked. DDS.scr, cmd prompt, regedit don't run

Malwarebytes' Anti-Malware 1.36
Database version: 1945
Windows 5.1.2600 Service Pack 3

4/25/2009 12:00:11 PM
mbam-log-2009-04-25 (12-00-11).txt

Scan type: Quick Scan
Objects scanned: 83451
Time elapsed: 7 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{549b5ca7-4a86-11d7-a4df-000874180bb3} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{549b5ca7-4a86-11d7-a4df-000874180bb3} (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)
... Read more

15 more replies
Answer Match 51.66%

Hi. I have been having puter problems for about 3 days. If I google anything when I click on the website I want, I am redirected to an ad site with a similar name. I can get the site I want by hitting the back button. I got an error message from mcafee saying I needed to reinstall because there was an error - I can't get onto any mcafee sites, totally blocked. Also unable to run virus scan. The computer also has been slow during this time period and doing other strange things. Sometimes the pointer doesn't jive with the mouse. I tried to go back to a restore point before the problems, was able to restore to Saturday. Mcafee worked at that spot, but I could not get on the internet, so had to undo my restore. I did a Mcafee scan before undoing though and that was clean. I could not go to restore points farther back than Saturday, it just wouldn't do it. I've tried spybot and malware scans. I downloaded hijackthis and will post the log. I use windows XP. Whoever tries to help, let me warn you, I am very computer illiterate. Here is the log from hijackthis. Thanks for helping.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:29:16 PM, on 4/15/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svc... Read more

A:blocked from mcafee site and redirected to ad sites

Hi. This is an updated hijackthis log. I'm still having all the problems I had early in the week plus new ones. I have no desktop anymore and no start button, I have to navigate using the windows task manager. My popup blocker says a popup is blocked, yet the popup plays on my screen. Still can't get on mcafee or several other sites. Malware bytes still says clean. Ran windowslive scan last night, claimed to remove/fix one item, but wouldn't tell me what that was. Not trying to bump by replying, just updating info. Hoping for help, getting close to just buying a new puter which I can't afford, but I use this for 2 of my part time jobs and its getting worse every day/ Thanks.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:43:51 AM, on 4/19/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightSc... Read more

1 more replies
Answer Match 51.66%

Today on my laptop , XP -SP3, I started getting a pop-up saying that McAfee site adviser had "teamed up" with Ebates. Gives an option of OK, nothing more.
Pretty sure this is not malware as a Google search finds the same thing mentioned over the last few days.
Other then getting rid of site adviser is there any way to kill this pop-up?

A:McAfee Site Adviser , Ebates pop-up how to block?

McAfee has teamed up with EBATES to offer you cash back for safely shopping online!McAfee is piloting a new feature called Safe Shopping Rewards* - a way for you to actually earn cash back from Ebates when you shop on select McAfee SECURE sites.How it works...McAfee - EBATES FAQsEbates gives you Cash Back when you shop online with participating merchants. Need more information? Go to the Ebates site for a full explanation.From what I have read, many users are complaining about the same thing. It does not sound like a good consumer oriented move but apparently McAfee thinks the partnership is a good business move. The best why to send them a message about this is to remove McAfee and inform others.

4 more replies
Answer Match 51.66%

Dear Community
I recently installed Fire Fox 3. Since I did this the McAfee Site advisor check marks that use to be adjacent to Google search results are no longer there. I have site advisor 26.6 . The icon for site advisor is in a tool bar at bottom right. Under settings the ?Enable safe browsing button? and ?Display safe search icons? items are sill checked.
I assume that there is some sort of comparability issue with either McAfee or Fire Fox 3. Does anyone know if a fix or update will be coming out to address this issue?
Thanks
Nawtheasta

A:Firefox3 And Mcafee Site Advisor Problems

This happens every now an then for me, it usually comes back on it's own eventually. Not really sure what the cause behind it is though.

1 more replies
Answer Match 51.24%

I just wanted to ask if that I have Avast antivirus Home Edition installed and can I use Mcafee site advisor without any conflicts. Thx
 

A:Mcafee site advisor and Avast Home Edition

There shouldn't be any conflicts between Avast and McAfee Site Advisor.

I used to McAfee Site Advisor when it was just a browser plugin but then they added a background process, so now I use WOT, Web Of Trust.
 

1 more replies
Answer Match 51.24%

I could download McAfee SiteAdvisor for Firefox, but cannot install into the browser. In the Extention section of firefox, it says "McAfee SiteAdvisor Firefox will be upgraded when Firefox is restarted"; when I restart the firefox, nothing happens...even I restarts my PC, nothing happens....

I would really appreciate if anyone would help me on this issue.

Thank you for your time and assistance!

A:Unable to install McAfee Site Advisor for Firefox

lets move it to the firefox section. there will be more people o help you there.

19 more replies
Answer Match 51.24%

Hi need some help i am new at this computer thing i have windows vista home premium yesterday microsoft sent out new updates for vista i downloaded the update # KB978207 and my McAfee site advisor turned from green to gray i went and unloaded it and it turned back green how do i fix this problem or do i really need this update

More replies
Answer Match 51.24%

Guys,

I just installed AdBlock+ for IE and it works great! The only problem is that I can not get the coded balloons for sites to come up now during a search. How do I change this?

Jack
 

A:Solved: Question About AdBlock+ for IE and McAfee Site Adviser

Solved it!

Just right-click for ANY Site that you want to disable Add-Block+ on and check disable on (site name.) You should do that for the big trusted sites you go to and the major search engines like Yahoo, Google, and MSN. You can also add the site by clicking on the plug in icon, selecting Add, than enter the site name. You can choose to allow all content to be accepted (i.e Whitelist) or Block Content. Nice Plug in. But turn it off for sites that you really trust. Otherwise, you may inadvertently be blocking good content.

Jack
 

1 more replies
Answer Match 51.24%

McAfee Total Protection w/ Site Advisor Plus

About to buy it cheap, (free after rebate-can't beat that - buy.com). I was wondering if it is any good. I know for free it's probably worth it, but don't want to get something that sucks just becuase it is free.

Thanks!

A:Mcafee Total Protection W/ Site Advisor Plus Any Good?

i had McAfee for awhile and it's o.k,but i've started using free aps and i find them more useful and less bloated than mcafee is. i also have the site advisor plugin - for free. i've also noticed that my computer runs better without mcafee. take a look at the free security apps first and maybe you'll find something you like.

2 more replies
Answer Match 51.24%

Hi All,

I have begun to study the different features of the new AVG 8.0 Anti-Virus, who's Free Edition was just released. I understand that there is a "Search Shield" in the program that when activated, displays warning icons about the content of a site similar to Site Adviser. For users with Site Adviser, have you noticed any conflicts with regards to this feature? Can these two plug ins work together?

Another slightly related question, I bought the paid version of AVG Anti-Spware 7.5 and my license is good through the end of February next year. How will AVG plan to update paid customers in regards to this product?

Also, how long will AVG Anti-Virus Free be supported before an automatic update to 8.0 becomes available?

Jack
 

A:Questions About AVG's Search Shield in AV 8.0 and McAfee Site Adviser?

search shield isn't available in the free version of AVG 8. Instead you get something called Link Scanner. Which is just a database of "bad" sites that search results from popular search engines (like Google, Yahoo .. don't know if it works with any others) is compared to, you then get a rating that shows beside the links on the search page. Link Scanner works by placing a browser add on in firefox and IE7 and can be disabled in the browsers themselves (which I already have done)

AVG free 8 is now available and contains an antispyware module, doesn't sound like the update is going to be pushed. Instead if you want to go from 7.5 to 8 you will have to go to their site and download it.

edit- looks like I made a small mistake there, it's the "active search shield" that isn't available. Search Shield is the Link Scanner I described above.
 

2 more replies
Answer Match 51.24%

I subscribe to Panda Active Scan Pro I use it as a back up to my anti-virus software I already have (Norton Internet Security). I recently downloaded McAfee 's site advisor which I found to be very helpful in avoiding bad sites. But when I came to use Panda Active Scan I couldn't use it, when I entered my Username and password instead of the usual pop-up window opening nothing happened. I eventually discovered through trial and Error that it was the McAfee site advisor that was somehow interfering with the Panda Scan. I disabled the helper in Internet Options>Programs>Manage Add-ons. Now I am having Problems Re-enabling McAfee site Advisor, I have re-anbled the add-on but it is not showing on the tool bar in IE. Can somebody please Help

A:Panda Active Scan Pro & Mcafee Site Advisor

I am sorry Ignore the last post I figured it out! Duh! I just right clicked the toolbar then a list dropped down with ticks by them and Site Advisor didn't have a tick by it so I Highlighted it and Hey Presto! Site Advisor Re-appeared in the tool bar. I am Sorry If I wasted anybody's time.

2 more replies
Answer Match 51.24%

Sorry, but I don't know what type of infection I have except that it's malecious...The PC will reboot on it's own. Has a matrix like screen flash when booting up... If trying to go to a mcafee site get redirected to microsoft site. The zonealarm install would not complete.. when it came to the screen to click Finish, it went away just before I could click on finish. I have tried to follow the steps in Grinler's post to clean things off. That found and removed a lot, but it seems that when I reboot more stuff comes back. Obviously I'm in over my head with this, and any help is appreciated.My hjt log is pasted below. By the way I couldn't log into this site from that computer either. I had to e-mail the log to so I could connect on another pc to post this. Is the best way to post an HJT log to paste it, or can it be attached?Again thanks for any and all help.APLogfile of HijackThis v1.99.1Scan saved at 9:26:30 PM, on 11/19/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WIN_NEW\System32\smss.exeC:\WIN_NEW\system32\csrss.exeC:\WIN_NEW\system32\services.exeC:\WIN_NEW\system32\lsass.exeC:\WIN_NEW\system32\svchost.exeC:\WIN_NEW\System32\svchost.exeC:\WIN_NEW\System32\svchost.exeC:\WIN_NEW\System32\svchost.exeC:\WIN_NEW\system32\spoolsv.exeC:\Program Files\Analog Devices&#... Read more

A:Pc Reboots, Can't Get To Mcafee Site, Zonealarm Won't Complete Install

Hi ape,

We're studying your log right now and will be back to you a.s.a.p.

Thanks for your patience.

4 more replies
Answer Match 50.82%

Whenever I visit personal myspace pages I get redirected to

http://www.google.com/hws/gateway/afe?hl=en&s=http://ad.yieldmanager.com/imp?z&rdr=afe

and receive the following message:

Sorry, we couldn't find http://ad.yieldmanager.com/imp?z. Here are some related websites: Click to expand...

Below please find my cut-and-pasted hijackthis log file:

Logfile of HijackThis v1.99.1
Scan saved at 10:29:06 AM, on 4/23/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM... Read more

More replies
Answer Match 50.82%

I am running win 7, 64bit professional. Whenever my web browsers try to open clips on dailymotion.com (i use mainly google chrome and mozilla firefox) they crash. Earlier none of them could load videos on dailymotion.com but now they crash.

The error report from chrome about the crash said the following:

Problem signature:
Problem Event Name: APPCRASH
Application Name: chrome.exe
Application Version: 0.0.0.0
Application Timestamp: 4cffee6d
Fault Module Name: ntdll.dll
Fault Module Version: 6.1.7600.16559
Fault Module Timestamp: 4ba9b29c
Exception Code: c0000005
Exception Offset: 00038c19
OS Version: 6.1.7600.2.0.0.256.48
Locale ID: 1053
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789


The error report on firefox said the following:

Add-ons: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13,{e213bb8f-8ebd-11db-96b7-005056c00008}:3.0.0.91,[email protected]:1.5.8
BuildID: 20101203075014
CrashTime: 1294363506
EMCheckCompatibility: true
FramePoisonBase: 00000000f0de0000
FramePoisonSize: 65536
InstallTime: 1293035126
ProductName: Firefox
ReleaseChannel: release
SecondsSinceLastCrash: 120
StartupTime: 1294363413
Theme: office-2007-black
Throttleable: 1
URL: http://www.dailymotion.com/video/xg2...elin_lifestyle
Vendor: Mozilla
Version: 3.6.13


The crazy thing is - I... Read more

A:browsers crash when visiting dailymotion - ntdll.dll is the problem?

There could be a lot of things that are causing this, something that all the browsers would be using, Flash, Antivirus or other security software. But no, ntdll.dll is not the cause a lot of things use it because it is the system. So you will see it a lot in crash dumps.

7 more replies
Answer Match 50.4%

I evidently have several viruses on my computer that my virus protection is not detecting. McAfee and Microsoft update websites are being blocked. I am getting popups when opening IE, and redirects. Also, Vimax add follows me from site to site. I have scanned twice and the result is clean (small tracking cookies were removed.) There are threads out there on these issues however they seem so situation specific i was scared to apply them to my system. I see lots of other people loading and using multiple virus detecting programs, etc. If I should try this first as well please advise. I am attaching my Hijack log for a review.

Thanks
Hijack Log Reads:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:32:38 AM, on 12/28/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\mm_tray.... Read more

A:Pop-ups, Redirects, Microsoft Update site blocked, McAfee Update Site blocked

6 more replies
Answer Match 50.4%

I went through the control panel to uninstall mcafee site advisor. It said it had uninstalled. I left some fairly angry feedback for them, too. Now, I cannot access my control panel. At all. Help?

A:Lost Win 8 control panel by uninstalling mcafee site advisor

The control panel is part off Windows not McCaffe, you may have done some damage it. Best advice is to go back to a previous restore point.

3 more replies
Answer Match 50.4%

Site Advisor should install with McAfee VirusScan 12.
I de-installed the Site Advisor from Firefox 3.0.5. I have been unable to get it re-installed. The download file from the website saSetup64.exe installs in IE.
I re-installed the full McAfee VirusScan 12 package, but still no Site Advisor in Firefox.

How can I solve this?

Bart

More replies
Answer Match 47.04%

hello everyone
i hope you are well
i can find the problem in my site with help dear cchamberland
that is  an iframe injection at the bottom of my pages, in index.php, footer.php,etc
then i removed the iframe,And also i was applied some other security  to the site.
< iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://highperformancetraining.org/chhd.html?i=1526587 >< /iframe >
but now after 1 day My site was infected again the same iframe.
I really do not know what should i do?
Is there anyone who can help me?
 
my site is   www.pasak.org
regards.
Pasak Sh
 

A:problem in my site , google alarm that my site is Suspicious

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. Click the Watch This Topic button at the top on the right.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

2 more replies
Answer Match 46.2%

I was wondering,my site adviser button was up there with my other buttons before the update,now,although there is space with my other buttons on my tool bar,it takes up a whole slot,reducing my viewing space.
Can anyone tell me how to get it in line with the others please?
Thanking you

A:Page switching to advertising page?/Also McAfee site adviser tool bar

Right click on the IE7 toolbar (area between home page icon and tab) and scroll down to "customize command bar" then go to "add or remove commands". See if you see the siteadvisor icon in the "available toolbar buttons". If so just move it to the "current toolbar buttons" area. You may want to then "lock" your toolbar.In Internet Explorerright click somewhere on the toolbaruncheck lock toolbarleft click and drag the items anywhere you want them to be.right click anywhere on the toolbar and choose lock toolbar.

1 more replies
Answer Match 41.58%

I have encountered some nasty viruses etc including some that stopped my windows updates. (I am operating on w/ XP on a Inspiron 6400) - I have managed to fix the updating problem, but still have some bad stuff b/c the resolution of my screen is blurry and my system is operating very-very slowly. I have tried to remove (O23 - Service: McAfee Online Backup (MOBKbackup) - McAfee, Inc. - C:\Program Files\McAfee Online Backup\MOBKbackup.exe) a number of times but have been unsuccessful - that is my reasoning that it is bad. Am I totally off base? Also in the same regard I can not get rid of (O23 - Service: NVIDIA Display Driver Service NVSvcALG (NVSvcALG) - Unknown owner - C:\WINDOWS\system32\adsldpcy.exe (file missing) - Please advice.Also this is my first post so I am not real sure if it makes any sense - ThanksLogfile of Trend Micro HijackThis v2.0.4Scan saved at 3:10:51 PM, on 7/13/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32&#... Read more

A:IS- O23 - Service: McAfee Online Backup (MOBKbackup) - McAfee, Inc. - C:\Program Files\McAfee Online Backup\MOBK...

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until ... Read more

2 more replies
Answer Match 41.16%

file is (c:\progra~1\mcafeee.com\agent\uninstlscrem.ui)

any help appreaicted

many thanks
peter french

A:Having Problem Removing Mcafee Problem With File Removal Anidears

Looking at the location of the file you appear to have a baddy on board. Neither of the files returned any result after investigation. Are you sure about the spelling? If so :please read and follow all instructions in the pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log". You may have performed some of these steps already. About half way down are instructions for downloading HijackThis and creating a log.When you have done that, post a log in the HijackThis Logs and Analysis Forum, NOT here, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. Please include the top portion of the HijackThis log that lists version information. An expert will analyze your log and reply with instructions advising you what to fix.Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please... Read more

1 more replies
Answer Match 41.16%

Hi Everyone,
i have a problem setting up a VPN Ipsec Site-to-Site with a Customer,
Below is a brief description of my network:
network A (vlan 1 / management) 192.168.1.0/24
network B (vlan 100 / computers) 192.168.10.0/24
The network that I have to connect via VPN connection, is the network B, unfortunately, the customer with which I have to establish a vpn connection, has my same network 192.168.1.0/24 (network C)
There must be a two-way NAT (carried on both firewall, or just a NAT from my network to the remote?
I have very confused ideas about, all the guides I find, explain how to communicate two identical networks, but that's not my case because the customer has not itself a network b, so he can prepare a routing as follows: c network (local)> b network (remote) with no address conflict
 
My firewall is Zyxel USG 1100
Thanks in advice
 
 
Edi: I forgot to specify that the network in, does not need to communicate with the network c and viceversa

More replies
Answer Match 41.16%

There is a rare problem in the Sims that seems only to affect my computer. The thread has 40-some views, but no replies, and I posted more than a week ago. Please help me!

Click on the text to go to the forum

Please help,
rothn
 

A:Nobody is visiting my forum

It means that no one has an answer! I know its unfortunate, but it does happen I am afraid
 

2 more replies
Answer Match 41.16%

I keep getting this Altnet thing coming up on my Spybot and AdAware. Here's my Hijack This log:

Logfile of HijackThis v1.97.3
Scan saved at 10:40:50 AM, on 12/18/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\lxamsp32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\pctspk.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\program files\qttask.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\support.com\bin\tgcmd.exe
C:\Pro... Read more

A:Altnet is visiting me again

12 more replies
Answer Match 41.16%

I need some help--I believe my son 12 year old son is visiting inappropriate website while we are at work. At the end of the night I clean out the temporary internet folder to free up space on the computer and last night I was just scan the folder and found all kinds of porn websites!! So I clean it out and when I logged on this evening the sites he normally visits are there but so where other porn sites.

Tell if Im wrong but is it true that every website you visit is recorded in the temp internet folder? and so popups get space there and when those cookies automatically go there is the computer is just left on which is what he is trying to tell me.

So is there another way to find out a list of websites that have been visited.

I really need to get these questions asked.

Thanks
 

A:HELP-son maybe visiting XXX sites

15 more replies
Answer Match 40.74%

Lots of people on social media sites like using URL shorteners to link people to different sites. Only problem I have with this, is that I cannot see the destination. Is there anything out there that can allow me to test a links' identity before visiting it?

A:Test URLs before visiting them?

I use this site: http://longurl.org/expand

3 more replies
Answer Match 40.74%

I have a smc router, and sometimes i need to change the ip address on my dmz zone to connect to xbox live games (or it takes forever to get into games). anyway, since yesterday i can't get into the devices webpage to change my settings, everytime i try it just keeps the "internet explorer cannot display webpage".
so im wondering if there is another way to change these settings? or why is it saying that? we had a storm yesterday so I figured maybe its down due to that, but i can't imagine it not being fixed as of yet.
thanks in advance.
 

A:is there a way to get into my router without visiting the webpage?

we had a storm yesterday so I figured maybe its down due to that,Click to expand...

It may have damaged the router
you could try resetting the router - there will be a reset button on the back, this will take it back to factory condition, however, that will mean resetting all the settings, and if it resets and still will not let you log into the router, then you will probably no longer have any internet access, as you can not set this up....

If you have the Setup CD that may have come with the router - you maybe able to access the settings via setup CD.
 

1 more replies
Answer Match 40.74%

after visiting the site wowhead suddenly found that my cpu had multiple viruses, i removed them with zone alarm but it did not fix the problem with the desktop screen which now has a &quot;warning&quot; about viruses and trojans and that i should go get them fixed. there is also a bubble that appears which says something like &quot;your computer has been infected click this bubble to sort problem&quot;. and it tries to open an anti virus web page real-av.org even if i don't click the bubble. here is my hyjack this log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:57:30 PM, on 6/12/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Norton Utilities\NPROTECT.EXE C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Speed Disk\nopdb.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\frmwrk32.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - H... Read more

More replies
Answer Match 40.74%

The other day I was just following some links to a couple of sites, one was free6.com and the other nudeamateurhoes.com and now I have a weird icon on my taskbar. The icon itself says curse when moused over but has no way to exit the icon like the others on my task-bar.

Anyone every experience this problem and is it related to the sites or did I get it some other way.

Btw I did manage to find it and it in my programs folder and it is called curse.exe but when I try to delete it I am told I dont have access rights or something like that to delete this file.

Any help is greatly appreciated.

A:Problems after visiting sites!

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 40.74%

Hi, thought I'd see if all is well on the folk's PC, since I'm not up close and personal with it like this often. For one thing I think the google toolbar entries are different than they are on other machines I have it on. (Mainly want to make sure nothing sinister is going on, but would also be interested in shutting off everything that can be. For example I did install Windows Messenger and enable Remote Assistance since we are going to try that when the need arises after I leave again, but assume I should figure out how to keep Windows Messenger from being on all the time. It's not enabled in msconfig or anything.)

Here's their log. We all thank you!

Logfile of HijackThis v1.99.1
Scan saved at 3:19:25 PM, on 9/3/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\System32... Read more

A:Mom & dad's HJT ok? Good kid checkin up while visiting! :)

P.S., I don't know if peop can tell when you've chosen about:blank as your IE start page on purpose, but I did. Although I wouldn't know how to tell if there was also a bad about:blank present. I did run Housecall, just a couple tribalfusion thingies found.
 

1 more replies
Answer Match 40.74%

Hello wise ones,

I often have guests staying w/ me from around the world that I know little about other than intuition, what is on their profile and written references from other hosts. Through www.couchsurfing.com

I am very concerned letting them use my PC as they may download a virus or install a key logger. (Kapersky is installed and shows up under the guest identity on XP. But I think perhaps they could turn it off and bypass it?)

What would be the best way to allow them computer access?

1. Get an old PC for them to use? (if they are on my router can they access my other PC's personal information? If so how do I limit them from accessing my PC info?)

2. Install a software program like used at a Internet Cafe?

Any other ideas?

Kind Thanks!
 

A:Best PC Security with Visiting Guests?

8 more replies
Answer Match 40.74%

  
Quote: Originally Posted by Casuaisxtynine


Really really random bsod's. help please! :<


This is a repost.. I'm sorry for this but I need help

A:BSOD - Visiting websites

Hi Casuaisxtynine.

Click on the button below ....



It will download the DM log collector. Right click on the application and run as administrator. It will generate a .zip file on your desktop. Upload the .zip.
Screenshots and Files - Upload and Post in Seven Forums

9 more replies
Answer Match 40.74%

Really really random bsod's. help please! :<

A:BSOD - Visiting websites.

Code:
BugCheck 116, {fffffa80046bb010, fffff88003bb045c, 0, 2}
This bugcheck indicates that an attempt to reset the display within the allocated time interval failed, hence the bugcheck.
This isn't a typical bugcheck in terms that this only happens when the graphics card doesn't respond either because of a bad driver or the GPU is faulty.


Code:
2: kd> KnL
# Child-SP RetAddr Call Site
00 fffff880`05a7a1c8 fffff880`0414b054 nt!KeBugCheckEx <-- The BSOD crash
01 fffff880`05a7a1d0 fffff880`0414ad5e dxgkrnl!TdrBugcheckOnTimeout+0xec <-- Instruction telling the system to crash if the graphics card doesn't respond.
02 fffff880`05a7a210 fffff880`0400ff13 dxgkrnl!TdrIsRecoveryRequired+0x1a2 <-- Telling the system to run a display recovery.
03 fffff880`05a7a240 fffff880`0403ded6 dxgmms1!VidSchiReportHwHang+0x40b <-- This reports the graphics card has hung.
04 fffff880`05a7a320 fffff880`04023ce9 dxgmms1!VidSchWaitForCompletionEvent+0x196
05 fffff880`05a7a360 fffff880`04026be7 dxgmms1!VIDMM_GLOBAL::xWaitForAllEngines+0x1e9
06 fffff880`05a7a460 fffff880`040252d8 dxgmms1!VIDMM_GLOBAL::SetupForBuildPagingBuffer+0xd7
07 fffff880`05a7a4a0 fffff880`0402522e dxgmms1!VIDMM_GLOBAL::UnmapVideoApertureSegmentInternal+0x34
08 fffff880`05a7a630 fffff880`0402e77e dxgmms1!VIDMM_GLOBAL::UnmapVideoApertureSegment+0x13e
09 fffff880`05a7a6a0 fffff880`0402e527 dxgmms1!VIDMM_APERTURE_SEGMENT::UnmapApertureRange+0x7a
0a fffff880`05a7a6f0 ff... Read more

8 more replies
Answer Match 40.74%

My sister in law is in town and I hooked her up to our router. At home she uses timewarner roadrunner as her ISP. Her Outlook is not sending mail while connected through my wireless. Nothing should have changed in her outgoing mail provider, at least that I know of, so why would connecting to my wireless mean she gets a failure to send in outlook? Any thoughts?
 

A:relative visiting and using wireless

16 more replies
Answer Match 40.74%

Hello all,
I am having a problem with all of the browsers on my computer directing to a spam search site when I try to visit certain websites.

I believe the problem started when I installed this software to help me switch audio output very easily:
http://www.sevenforums.com/customization/65079-anyway-use-hotkeys-switch-sound-output.html

I've done the following:
1) Run updated Malware bytes Anti Malware
2) Run TDSS Rootkit Remover Tool by Kaspersky.
3) Run Virus Remover Tool by Kaspersky.
4) Reset my cookies in Chrome.
5) Read the "Before posting a log" on this forum (the sticky post).
6) Updated my notification options as recommended.
I could not run GMER as I'm running Windows 7 64 bit.

I've attached my DDS/Attach/Hijack logs.
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by Nublard at 12:30:59 on 2011-11-19
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.8187.6350 [GMT -5:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestr... Read more

A:Redirecting When Visiting Websites

Hi,

you mentioned running a number of tools in the beginning, did they all come back clean? I'd be in particular interested in the tdsskiller log.

regards myrti

12 more replies
Answer Match 40.74%

I was looking at our internet history and there are several sites on there and it seems no one is claiming visiting them. I want to believe that no one has been on these sites but I don't see any other way for them to appear on our internet history without someone viewing the site? Any ideas on how these got on there? Any possible way at all other than viewing the site....please, please help me. My trust and my marriage is potentially on the line here. I am looking for answers and I cannot think of anything, other than the worst. Any viruses or sites that hack into your computer and upload this stuff to your history, I know I'm grasping but I need answers. Please any thoughts at all?
 

A:Is there ANY way something could appear on your internet history without visiting?

6 more replies
Answer Match 40.74%

My company has 2 offices that operate total independent of each other. Each has their own domain. I have a VP that is usually in office B. Part of the time he is in Office A. His computer is part of office B domain and when he is in office A needs to use those printers and data on office A servers. How do I get that to work. He has Windows 10 Pro on his laptop.
 

More replies
Answer Match 40.32%

this is quite a long story so thanks for reading it.

hi, i need some help with some issues ive been having over the last couple of days. im going to explain everything,some parts may be irrelevant but i dont want to leave anything out.

On the 29th of september whilst on a website java 6 popped up as if to install then disappeared. my mcafee notified me it had removed a trojan ,after that it kept popping up to tell me it had removed a trojan and i continued viewing the site, i pressed stop notifying me presuming it would continue to remove trojans. later i tried to start a game i have, called minecraft, an error popped up saying couldnt start java virtual machine(maybe this isnt that relevant and could be an entirely different problem but it happened after the trojan incident and was working fine before).
i decided to restart hoping all would be well but when i shutdown windows notified me i had updates to install, i said ok. instead of saying "windows is installing update 1 of 5" etc, it just said windows is shutting down and froze. i forced a shutdown by holding the power button and when i restarted my start bar and icons where missing.

i started again in safe mode and tried restoring my pc to earlier that day and restarted again. the icons where not there nor the startbar and task manager was "disabled by my administrator" i went back to safe mode and ran superantispyware which found some horrible things like "disabletaskmanger" some trackin... Read more

A:google redirect, mcafee disabled - mcafee customer service is awful

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

3 more replies
Answer Match 40.32%

Hi - would be very grateful of some help! Running XP Media Center Edition, Version 2002, SP3. Using IE7 primarily, but also Firefox 3. :In IE, although it doesnt happen all the time, Google often re-directs to various ad-sites, although the correct site can be reached by clicking Back. It will not let me access the McAfee website - giving a "HTTP 501 Not Implemented or HTTP 505 Version Not Supported" error. Firefox randomly crashes and re-starts every now and then and gives a blank page with "The specified method is not supported" for McAfee.McAfee Security Centre does not start up automatically any more on startup even though I havent changed any settings. When the program is opened from the desktop it states the detection signiture is out of date, however when I try to update, it appears to try before giving an update error and telling me to reinstall McAfee Internet Security (which I can't do because I cant access the website!).Having looked at several topics on here and other boards, I have tried doing the following scans with the respective results - all without any success:SUPERAntiSpyware, first scan:SUPERAntiSpyware Scan Loghttp://www.superantispyware.comGenerated 04/21/2009 at 01:23 AMApplication Version : 4.26.1000Core Rules Database Version : 3854Trace Rules Database Version: 1806Scan type : Complete ScanTotal Scan Time : 01:29:29Memory items scanned : 674Memory threats detected : 0Registry items scanned : 7459Registr... Read more

A:Google redirections, McAfee update error and McAfee website blocked

Install RootRepealClick here - Official Rootrepeal Site, and download RootRepeal.zip. I recommend downloading to your desktop. Fatdcuk at Malwarebytes posted a comprehensive tutorial - Self Help guide can be found here if needed.: Malwarebytes Removal and Self Help Guides.Click RootRepeal.exe to open the scanner. Click the Report tab, now click on Scan. A Window will open asking what to include in the scan. Check the following items: DriversFilesProcessesSSDTStealth ObjectsHidden ServicesClick OKScan your C Drive (Or your current system drive) and click OK. The scan will begin. This my take a moment, so please be patient. When the scan completes, click Save Report. Name the log RootRepeal.txt and save it to your Documents folder - (Default folder). Paste the log into your next reply.

6 more replies
Answer Match 40.32%

Symptoms:
Slow system
McAfee runs very slow
McAfee is not protecting my system
After manual McAfee scans the same virus is always there, W32/Bagle
internet works
can not boot in safe mode

How it started:
I loaded a program that I downloaded and then it disableded McAfee and then the system shut down and rebooted. McAfee has never worked properly since. It tells me to
"fix" the problem and it always returns an error.

System:
XP professional version 2002 with service pack 2 and most of the updates (updates that can not be removed later are not installed on my system)
Pentium 4 CPU 2.40GHz and 1.5GB RAM

McAfee:
Protection status: FIX
Action required! for
Computer and Files
Email and IM.
Internet and Network says: Attention

Security Center
Version 8,1
Build 8.1.173
Affid: 0
Last update 4/17/2008

Virus Scan
Version 12.1
Build: 12.1.110
Affid: 0
Dat version 5280.0000
DAT date 4/23/2008
Engine Version 5200.2160

Firewall
Version 9.1
Build 9.1.108
Last update 4/17/2008

Site Advisor
Version 2.6
Anti Spam
Version 9.1
Privacy Service
Version 10.1
Data Backup
Version 1.2

I did a manual search of the system files and McAfee finds and Quarentines
Wintems.exe W32/Bagle.gen (virus)

Location is C:/Windows/System32

I go to restore and remove and I can scan again and it is always there.

System restore is diabled

I can not boot into SAFE MODE. I can choose it but it always starts the boot seqence over and asks... Read more

A:McAfee has error, W32/Bagle.gen always returns after manual McAfee removal

Hi, welcome to TSF!

Please re-enable system restore. An infected system restore cache is better than having nothing at all.

Please visit this webpage for download links, and instructions for running combofixl:

http://www.bleepingcomputer.com/comb...o-use-combofix
Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Click Yes to allow ComboFix to continue scanning for malware.
When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

Please click Here to download HijackThis to your desktop.

Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.

It will be installed by default here: C:\Program Files\Trend Micro\HijackThis

A shortcut to the application will also be placed on your Desktop.

The program... Read more

15 more replies
Answer Match 40.32%

I just had some terrific help from TSG and cleaned up my HiJackThis log, and ugh, I just found another problem with my PC.

When I try to go to www.mcafee.com or http://us.mcafee.com/root/redirects/support.asp?affid=332-05 (this is the Mcafee 'Support' button link), I receive the IE error message that the page cannot be found.

Looking into this further, when I start up the PC, the McAfee logo color is red, the McAfee security splash appears listing the active services, and then a moment later, the McAfee start up logo color changes to black, and is disabled.

I've run McAfee Update, but I don't think it's been updating successfully because the security index indicates that its detecting an older version.

I searched the TSG forums and wasn't able to find a solution...

Some back story which may be pertinent - I had NAV installed and it got corrupted, symptoms included disabled virus scan at start up. The PC was not able to connect to the internet at all. I took the laptop to a tech shop last week, and they were not able to reinstall NAV successfully. They installed McAfee instead.

I'm running on Windows 2000 SP4, IE v6, McAfee VirusScan 2004 v8. I'm also running ZoneAlarm with the privacy option disabled, and have run the comprehensive Ad-Aware scan.

Any help would be most appreciated!
Jackie
 

More replies
Answer Match 40.32%

My XP computer will use 100% CPU when visiting even very simple web pages. Any help is highly appreciated.

A:CPU usage 100% when visiting simple web pages

Hi Student,

Are you looking at the column titled CPU? Try looking at the bottom where it lists CPU Usage: Maybe?

Good Luck, Jim

5 more replies
Answer Match 40.32%

Hello,
 
So I've always wondered if you can get a virus/malware just by visiting a website?
 
I always thought this was a No, because I believe a user is only infected when he/she opens up that malware/virus FILE, once you open it up and install it then you are infected.
 
I know there are drive by downloads, but your anti-virus or anti-malware program should detect the file and automatically delete it.
 
Malware/virus can't infect your computer unless you open the file, right?

A:can you get a virus/malware just by visiting a website?

Hi NEMS Yes, it's entirely possible to get infected by simply visiting a website. Most commonly via what we call "Exploit Kits". Right now, EK are used to deliver a lot of dangerous malware (such as banking trojans and Cryptoware) to computers worldwide. So using a standard Antivirus and Antimalware won't cut it. Using a program that protects your web browser against such threats, like Malwarebytes Anti-Exploit will. but your anti-virus or anti-malware program should detect the file and automatically delete it.This is assuming that the file pushed on your system is already known to your Antivirus or Antimalware (in its database). If it's not, it won't do anything. And we all know that no products have a 100% detection ratio.Edit: For more information on Exploit Kits and how they work, see the article below.Tools of the Trade: Exploit Kits

27 more replies
Answer Match 40.32%

I joined an on-line forum and for some reason I am unable to post any messages, or reply to any posts. When I attempt to do either one, I received an error message from Internet Explorer which says it has encountered a problem and must close. It only closes that forum"s window, all other windows using IE are up and running. I belong to numerous other on-line forum and have no problems in posting.

The site recognizes me and I am able to read all postings; and I am able to use the forum?s personal message program. Using the PM program, I explained my problem to the site administrator??..this is her response:


?I understand now, but I'm not sure I can help. It may be a security setting, but I also fear it may be malware. I might start with lowering your security (if you're comfortable) and a virus scan?

I have no virus, at least not one that Norton product can detect, my security setting is set at a medium setting. I do not use any other browser.

I would appreciate any help you can provide me. Thanks.

A:Exlporer closes while visiting a forum

Hello

Do you have these problems in any other browsers? Please try one of the below (both are free):

Firefox
http://www.mozilla.com/en-US/firefox/
Opera
http://www.opera.com/

Please also do this:

http://blogs.msdn.com/ie/archive/2006/06/12/628499.aspx

1 more replies
Answer Match 40.32%

Hi Guys,

Recently i have been having a lot of BSOD issues while visiting a certain website on all browsers.The said website access my webcam as well as microphone.After few BSOD's i thought maybe its a adobe flash player issue so i uninstalled flash player.

Now to test my system further i visited the said website using IE and google chrome which have built-in flash player plugin and i got the same BSOD error.Tried the same in Guest account with the same BSOD error repeating itself.

I am attaching the relevant zip file.

Oh my system is DELL Inspiron 14 laptop with windows 8.1 installed.

TIA

A:BSOD while visiting certain website on all browsers

All of your dumpfiles blames Probably caused by : RTKVHD64.sys ( RTKVHD64+1af077 )
This is the driver for your Realtek High Definition Audio Function Driver

Your Dell model only supports windows 7 drivers see here
Product Support | Dell US

But maybe the generic driver from Realtek will also work on your Dell machine. Try updating to the latest windows 8.1 compatible driver from here.
Driver Description: Realtek High Definition Audio Function Driver
Driver Update Site: Realtek

2 more replies
Answer Match 40.32%

I'm usually a lot smarter than this.. but I read someones post in a forum about how a website has set up a popular game, San Andreas Multiplayer, in a frame that remotes a machine so you can play in the browser. The game is a bit more involved than a typical browser game, so of course i figured it would be unplayable at best, but curiosity got the best of me and I visited the site.I immediately figured out that it was just a video of someone logging into a server, and i was most likely being infected while watching.. I checked around and saw some minimal info about the site including this post:http://www.gtaforums.com/index.php?showtopic=538035The site I visited was: www,sampfreeonline,tk .. which points to: samponlinefree,orq,pl(dots were replaced with commas so no one clicks by accident)Can anyone verify if this is indeed a malicious site.. I'm thinking I have a keylogger installed now and its just waiting for me to join a server... ..or even worse..Any help is greatly appreciated!Thanks!!
 

A:Tricked into visiting fake website...

Welcome aboard  There is not much info about those sites.  Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At th... Read more

5 more replies
Answer Match 40.32%

I saw reunion.com posting my personal info on a google search of my name. I never gave that info. I called and they said they created that account for me from public info. However, when I clicked on the site, something downloaded and now my PC is slow!

IBM ThinkPad T41 / Win XP.
HJT below!

Thank You!!!!!!!!!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:11:50 PM, on 8/18/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\RegSrvc.exe
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
c:\program files\lenovo\system update\suservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_pr... Read more

More replies
Answer Match 40.32%

Hi everyone. I am getting a Configuration Error on some sites. What does this mean?

Here's the text of the error:

Server Error in '/' Application.
--------------------------------------------------------------------------------

Configuration Error
Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: Failed to decrypt using provider 'RsaProtectedConfigurationProvider'. Error message from the provider: The RSA key container could not be opened.

Source Error:
Line 12: </configSections>
Line 13: <connectionStrings configProtectionProvider="RsaProtectedConfigurationProvider">
Line 14: <EncryptedData Type="http://www.w3.org/2001/04/xmlenc#Element"
Line 15: xmlns="http://www.w3.org/2001/04/xmlenc#">
Line 16: <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />
Source File: C:\www.songtouch.com\web.config Line: 14
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.42; ASP.NET Version:2.0.50727.42
 

A:Configuration Error While Visiting Certain Sites?

*bump*
 

1 more replies
Answer Match 40.32%

I am working on this for someone. They try to log in to their online banking, and Internet Explorer 7 will shut down their browser and give the following message displayed on their desktop: Data Execution Prevention. Vista was recently installed, error came about at that time. Suggestions? What is this feature?

A:Error Message when visiting website

Does anyone know what this is? I have tried working with it, but I'm not having any luck. Any advice would be greatly appreciated.

1 more replies
Answer Match 40.32%

Hello all, I'm new at this so please excuse any mistakes.

Over the past two weeks, I've received occasional virus warnings when I go to Foxnews.com.
Avast warns me about "http://iwqoxiaw.info/ng/pdf.php" and provides a name of: JS:Pdfka-BG.
This has not happened on any other websites.

I'm running XP Pro, Avast virus, and Zone Alarm.

I'm a bit concerned as I can't find any info about this that I understand and was wondering if anyone could help.

I've attached the "attach.txt file and a hijack this log.

Thanks in advance.

Below is the DDS.txt

DDS (Ver_09-03-16.01) - NTFSx86
Run by Administrator at 11:01:50.10 on Tue 03/24/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1548 [GMT -4:00]

AV: avast! antivirus 4.8.1335 [VPS 090323-0] *On-access scanning enabled* (Updated)
FW: ZoneAlarm Firewall *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1 ... Read more

A:Avast warning when visiting Fox News

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

2 more replies
Answer Match 40.32%

I am rephrasing the question to be more specific. I cannot see how my first request was inappropriate. I have not needed to set up a network in years, so I hope someone has the answer to my question.

I am paying for my home internet, and I do not want anyone visiting pron websites. Is their any tool that can alert me if one of my friends is accessing inappropriate material on the website. Someone closed my question before, so I guess knowing how to share their internet histories is NOT the proper answer.

I will not stand for people looking at bad websites, so I hope someone can point me to a decent solution.
 

A:I need to make sure users are not visiting bad websites

6 more replies
Answer Match 40.32%

Hi all. Ive been battling this issue for a few days now. whenever i visit sites such as myspace or espn.com, when im either searching around on the sites my computer will lock up. i can hear it processing information as if it were getting sent massive amounts of information, yet when i check the sites on another computer in my house i dont have these issues. i tried disabling javascript and it worked for part of the problem, but when i started to search the website further, i encountered the issue again. This occurs with both internet explorer and firefox, and my flashplayer and windows media player are both updated. ive searched my computer with spybot and adaware.

A:Computer locking up when visiting certain sites

Try reseting you security permissions. Goto tool > internet options > security tab. Click on default level, then set it to low hit apply, then move it right back to medium and hit apply. This will put it back to microsoft recommended settings. let us know if that works.

2 more replies
Answer Match 40.32%

I have a:
Gateway laptop Gateway Laptop
MX6433
AMD Turion 64 mobile
Technology ML-30
1.59 GHz, 448 MB of RAM
Windows XP Media Center edition (service pack 3).

I bought it two years or so ago. Since as long as I can remember I have had this problem.

when I am on my browser (I use chrome, firefox, and IE) my wireless connection will cut out after a while. I have noticed that if I am on just one site (example: Pandora.com) it can be fine for hours. But once I start going to different sites, I eventually get kicked off. It can be any website, Facebook, youtube, etc.

When I lose connectivity, I refresh my wireless connections and only the printer comes up. If I try to right click on the tray icon to repair internet connection, it freezes. I am guessing that this is a hardware problem. (?) Though I'm not extremely technical with computers, I know my way around most issues that can arise.

I have reformatted my hard drive (twice) and all my software is up to date. I have run AVG scan and Ad Aware scan hundreds of times. Can anyone offer assistance? Thank you very much!
 

More replies
Answer Match 40.32%

I've had this problem for quite some time. Last time there's just no video showing even though there's audio playing in the background. But now when I open Dailymotion on my mozilla firefox, it crashes immediately.

I've uninstalled MF and Flash player and reinstall them again but it's still not working. Dailymotion is working fine with IE, and this depends as well.

Please help me thanks a lot.

Version of mozilla - 3.6.24 (i'm using the old version one cause there are some add on that are disabled in the latest verion)
Version of IE - 8.0

A:Mozilla keeps crashing when visiting Dailymotion

New browsers.
Monzilla Firefox new one is 10.0.2
I.E. 8 new one is #9
Your old browsers can be causing this problem. I have no problem going to the website.

3 more replies