browser redirect

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - PopupEliminator and spyware? Hey guys and gals, I'm thinking about downloading PopupEliminator (by SurfSecret Software). I've heard good things about it. Looks like a good program to stop annoying and invasive pop-ups, BUT...I want to make sure I'm not adding spyware along with it. (Some programs that are suppose to protect you from spyware, such as SpyBan, SpyHunter, SpyGone, etc., actually PUT more spyware on your computer). Call me paranoid but I just wanted to make sure. Tag: browser redirect Tag: 51848
  - 2
    - nachi a friends pc has nachi virus which avg can not remove he can not stop online long enough to down load any patches or fixes because the virus reboots his pc Tag: browser redirect Tag: 51841
  - 3
    - Do I really need this ?? Hello : I am just your everyday email sender and not into much else . Do I really need THIS ; Microsoft .NET Framework version 1.1 Download size: 23.1 MB, 1 hour 16 minutes The .NET Framework is a component of the Windows operating system. For developers, the .NET Framework makes it easy to rapidly create powerful software that maximizes performance, scalability, opportunities for integration, reliability, security, Regards Bill Davis Tag: browser redirect Tag: 51838
  - 4
    - Salary Negot. I'm thinking around 70K. What is the going rates today for a Security position? What are the best salary negot. techniques? What if I walk in with a higher salary than expected? a) walk out and think about it for a later meeting. Thanks, T. Tag: browser redirect Tag: 51834
  - 5
    - Error 53 when installing KB835732 I am receiving an error 53 from the installation of K835732 anyone know why? I am having trouble finding the error codes on it Thanks in advanced Matt Tag: browser redirect Tag: 51829
  - 6
    - iexplorer I put zone alarm firewall up. spy-bot said I had a hole in ie and told me to go to mirosoft for a ie patch. I did. I found a patch it suggested but it's 2yrs. old. I just bought this computer from gateway. should this version not already have this update patch? I looked up the version i have of xp and it has some patches included Q330994,q822925,q824145,q832894.the patch it says I need (spy-bot) is q319182. i can't find if these updates include this patch. My computer keeps locking up and i cannot go to any pages after about 1/2 hr of use. Does anyone have any suggestions? Thanks very much in advance, Holly Tag: browser redirect Tag: 51825
  - 7
    - Password Complexity I'm running 03 Enterprise that is a DC. I'll have two types of users on it. Users that will actually log onto computers on the network; Users that will only have an account for an exchange mailbox. So what I would like to do is have seperate password complexity requirements for these users. Can I do this? I know how to change the requirements under Domain Security Policy, but is there way to create another security policy and apply it to a serperate OU? Tag: browser redirect Tag: 51824
  - 8
    - microsoft.public.security.crypto newsgroup is now live! We now have a dedicated newsgroup to address/discuss cryptography related issues (capi1, capi2, capimon, cert,etc). I encourage you to post all crypto related issues in the new "microsoft.public.security.crypto" newsgroup. Thanks Raj -- Rajkumar Mohanram [MSFT] Windows Core Security This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm --------------------- Tag: browser redirect Tag: 51822
  - 9
    - Problems with installing Security patch Q837009 I am running Windows XP Pro and Internet Explorer 6, along with Outlook Express 6 and am having problems installing Security patch Q837009. Each time I try to install the patch I get a Microsoft Internet Explorer Update message telling me that Outlook Express 6.0 needs to be installed - Surely OE6 is part of IE6 and therefore installs when Windows is installed?? I have tried to download OE 6.0 as a separate download from IE and on trying to install it I am told that I have a newer version already on my PC! This is not the first time that I have experienced problems with installing patches relating to Outlook Express - The problem seems to occur whenever I download and install individual patches. Whenever I download and install patches using Critical Updates on the Microsoft Update site, I don't seem to have this problem. Can anyone advise why this happens? alba. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.676 / Virus Database: 438 - Release Date: 03/05/2004 Tag: browser redirect Tag: 51816
  - 10
    - StrongNameIdentityPermission does not working with WinForm I'm invoking the same Dll from Console application and WinForm application Both signed with SrongName. the class that I'm invoking is protected with StrongNameIdentityPermission Demand and hear is what happened: the console application pass the demand but the WinForm failed i had try to union the StrongNameIdentityPermission blob with the mscorlib StrongName but it still behave is the same way. Do someone know to solve this issue ???? TNX Bnaya Eshet Tag: browser redirect Tag: 51813
  - 11
    - HELP - StrongNameIdentityPermission does not work on WinForm I calling the same DLL (which is protected by StrongNameIdentityPermission) Once from console application and The second time from WinForm Both WinForm and the Console are signing with the same StrongName. But the Console pass the permission Demand and the WinForm failed. I had tried to union the WinForm Strong Name with mscorlib StrongName But its still crashing. Does any one has any idea??? TNX Tag: browser redirect Tag: 51811
  - 12
    - Software Update Services Server Synch Problem We have been successfully using the MS SUS server to update all the clients in our domain for almost a year. Suddenly, in the middle of February the system stopped being able to pull down the synch. Whether it is manually run or on auto run, we get the same error message: "Failed to generate the list of files to synchronize. (Error 0x80070003: The system cannot find the path specified.)". The only article I can find talks about having used TweakUI to have changed the path of Program Files - which we didn't do (I'd never use that program on a server!). Anyone having a similar problem This is a critical issue because of the current worm. Norton Enterprise is protecting us now, but I'd feel a whole lot better if I could update the desktops. Greg Tag: browser redirect Tag: 51807
  - 13
    - Printer How can I hook up my printer to my computer? Tag: browser redirect Tag: 51806
  - 14
    - CertServices 2003 - Web Enrollment and Key Archival We have a new certificate template with Key Archival enabled, and this can be used via the Certificate Web Enrollment pages to successfully get a certificate with archive key. I want to make the certrqbi.asp page issue these certificates to users as a default, to stop them having to go via the advanced request form. I thought this might be as easy as forcing XEnroll.GenKeyFlags|=CRYPT_EXPORTABLE;, but this still gets a denied by policy module error (Private Key missing). In short - has anyone already written a page to issue Key-archivable-certificates based on the web enrollment basic request, or should I start picking through certrqbi.asp in more detail? Any advice much appreciated, Richard Tag: browser redirect Tag: 51803
  - 15
    - Instructions for removing Sasser infection and patching affected machines Instructions for patching and cleaning vulnerable Windows 2000 and Windows XP systems: Vulnerable Windows 2000 and Windows XP machines may have the LSASS.EXE process crash every time a malicious worm packet targets the vulnerable machine which can occur very shortly after the machine starts up and initializes the network stack. When cleaning a machine that is vulnerable to the Sasser worm it is necessary to first prevent the LSASS.EXE process from crashing, which in turn causes the machine to reboot after a 60 second delay. This reboot cannot be aborted on Windows 2000 platforms using the Shutdown.exe or psshutdown.exe utilities and can interfere with the downloading and installation of the patch as well as removal of the worm. 1. To prevent LSASS.EXE from shutting down the machine during the cleaning process: a. Unplug the network cable from the machine b. If you are running Windows XP you can enable the built-in Internet Connection Firewall using the instructions found here: Windows XP http://support.microsoft.com/?id=283673 and then plug the machine back into the network and go to step 2. c. If you are running Windows 2000, you won't have a built-in firewall and must use the following work-around to prevent LSASS.EXE from crashing. This workaround involves creating a read-only file named 'dcpromo.log' in the "%systemroot%\debug" directory. Creating this read-only file will prevent the vulnerability used by this worm from crashing the LSASS.EXE process. i. NOTE: %systemroot% is the variable that contains the name of the Windows installation directory. For example if Windows was installed to the "c:\winnt" directory the following command will create a file called dcpromo.log in the c:\winnt\debug directory. The following commands must be typed in a command prompt (i.e. cmd.exe) exactly as they are written below. 1. To start a command shell, click Start and then click run and type 'cmd.exe' and press enter. 2.Type the following command: echo dcpromo >%systemroot%\debug\dcpromo.log For this workaround to work properly you MUST make the file read-only by typing the following command: 3. attrib +R %systemroot%\debug\dcpromo.log 2. After enabling the Internet Connection Firewall or creating the read-only dcpromo.log you can plug the network cable back in and you must download and install the MS04-011 patch from the MS04-011 download link for the affected machines operating system before cleaning the system. If the system is cleaned before the patch is installed it is possible that the system could get re-infected prior to installing the patch. a. Here is the URL for the bulletin which contains the links to the download location for each patch: http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx b. If your machine is acting sluggish or your Internet connection is slow you should use Task Manager to kill the following processes and then try downloading the patch again (press the Ctrl + Alt + Del keys simultaneously and select Task Manager): i. Kill any process ending with '_up.exe' (i.e. 12345_up.exe) ii. Kill any process starting with 'avserv' (i.e. avserve.exe, avserve2.exe) iii. Kill any process starting with 'skynetave' (i.e. skynetave.exe) iv. Kill hkey.exe v. Kill msiwin84.exe vi. Kill wmiprvsw.exe 1. Note there is a legitimate system process called 'wmiprvse.exe' that does NOT need to be killed. c. allow the system to reboot after the patch is installed. 3. Run the Sasser cleaner tool from the following URL: a. For the on-line ActiveX control based version of the cleaner you can run it directly from the following URL: http://www.microsoft.com/security/incident/sasser.asp b. For the stand-alone download version of the cleaner you can download it from the following URL: http://www.microsoft.com/downloads/details.aspx?FamilyId=76C6DE7E-1B6B-4FC3-90D4-9FA42D14CC17&displaylang=en 4. Determine if the machine has been infected with a variant of the Agobot worm which can also get on the machine using the same method as the Sasser worm. a. To do this run a full antivirus scan of your machine after ensuring your antivirus signatures are up to date. b. If you do NOT have an antivirus product installed you can visit HouseCall from TrendMicro to perform a free scan using the following URL: http://housecall.trendmicro.com/ If you have any questions regarding the security updates or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. Tag: browser redirect Tag: 51796
  - 16
    - 823559 Have Windows 98 and I keep getting a message to install update 823559. Have done it numerous times but it keeps telling me to install it. Any suggestions Tag: browser redirect Tag: 51786
  - 17
    - update 835732 causes BSOD Hi, When updating all computers with the critical update 835732 a few started booting with the BSOD. So far it has only happened to the W2K machines. MS knowledgebase has only a single posting on this issue and it doesn't relate to the computers in question...the posting ( Q841384 ) talks about multiprocessor computers and these are only single processor machines.... Has anybody else encountered this problem or...? Help would be greatly appreciated !!!!! /Louise Tag: browser redirect Tag: 51769
  - 18
    - start-program are all empty problem does anybody can give me a hand? I need help Sometime, all program are all empty when you press start, progam....(empty). This happen at W2k Pro, W2k svr and Win XP. there are firwall and symantec AV at those PCs. These make me crazy for a long long time. much appreciated that anyone can give me hints Thanks jackie Tag: browser redirect Tag: 51768
  - 19
    - Searching for a tool like hfnetchk Hi, does someone know a tool similar to hfnetchk? I only know qfecheck. So please: don't suggest that tool ;-) But perhaps, you know another tool that - like qfecheck - determines which hotfixes are installed on your system... Thanks Tibor Tag: browser redirect Tag: 51767
  - 20
    - security starting up Is there anyway that when I start my computer up can I get it to ask me for a password. The problem is that 5 of us use the computer. We all have our own desktops, is there any way that I can get it to ask me for a password and once answered then show us our 5 user names? Tag: browser redirect Tag: 51764
  - 21
    - a hack into my hotmail I've been receiving new mail stating "undeliverable mail." The problem is, I never sent the message that was undeliverable. From what I can tell the original message is all in spanish was sent from someone hacking into my hotmail account sending to all spanish hotmail addresses. Has anyone had this happen to them? Tag: browser redirect Tag: 51763
  - 22
    - what's this? i get this error when installing service pack 4 for windows 2000. what in the world does it mean? The core system file {kernel} used to start this computer is not a Microsoft Windows file. The Service Pack will not be installed. For more information see blah blah blah... what does it think i'm running on, a mac? just curious Tag: browser redirect Tag: 51762
  - 23
    - can't receive e-mail from earthlink why can't I receive email from a friend who has earthlink as his ISP? He is not getting caught up in my spam filters - I have triple, quadruple checked. I can send him e-mail, but his messages are never received by me, nor are they returned to him HELP - Tag: browser redirect Tag: 51755
  - 24
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.05.03 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info I'm getting an LSASS error message, and/or I have the Sasser virus. 1) Run anti-virus that is configured to download the latest updates every week or even every day. www.grisoft.com is free anti-virus. 2) You also need to install all the patches for your system software from http://windowsupdate.microsoft.com, starting with the MS04-011 patch. Microsoft generally releases security patches on the second Tuesday of more or less every month. 3) Once you're infected, you may need to download and run a free Sasser virus removal tool such as the Stinger tool from www.McAfee.com or the free tool from http://www.microsoft.com/security/incident/sasser.asp 4) You're not running a firewall, or your firewall isn't protecting you. Running a firewall would have protected you from this. Free firewall software is available from www.kerio.com, www.zonealarm.com and/or www.sygate.com 5) You need to do ALL of these things, or you won't have much success. You should also make sure you get the latest Microsoft patches monthly and anti-virus updates at least weekly. My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: browser redirect Tag: 51754
  - 25
    - www.winupdate.net www.winupdate.net, what is this Tag: browser redirect Tag: 51752
- Next
  - 1
    - Windows Update is there any way of downloading windows update files at another site and install them later. Tag: browser redirect Tag: 51746
  - 2
    - Installing 835732 causes my server to crash Early last week I was installing some critical updates to my Win2000 web server. As soon as my server rebooted, I noticed that the system handles kept increasing. It finally got up to about 1.5 million handles and the server would crash and start the whole process again. As soon as I UNINSTALLED 835732 the server acted just fine. So, now with all this Sasser worm stuff I double checked my servers, saw that I did not have this one installed, installed it again and the handle problem started up again!! What can I do!! Thanks, Eric Lund Tag: browser redirect Tag: 51745
  - 3
    - how in the heck .... ? First of all, I don't know what in the heck i'm doing. My son always handled the computer but he's in the Air Force now, and I'm lost. I used to have MSNBC as the first screen that opened when I went on line. Something, somewhere got screwed up and now I have this page called "about:blank" that I CANNOT get rid of. Someone suggested Spybot. Tried it, it says the computer is clean, but I cannot get rid of this damn thing. It's on all 5 of our accounts. We go to the "settings" thing and change it to something else and the first time we sign on, it's gone. Sign back on the next time ? Damn thing is back. Is this a virus ? Ever since it happened, our computer is alot slower, too. I'm so lost, and I don't even know who to ask for help. If you have any ideas, could you help please ? I would really appreciate it. Laura Tag: browser redirect Tag: 51743
  - 4
    - Have a Problem?? We just opened a new website community at geekregime dot co This is a tech community that offers free computer and software tech support for everyone. There is also discussion on other topics as well. You can let loose in our "anything goes" forum. Registration is always free Very fast OC 48 and OC 192 connections Get in on the ground floor. Suggestions are welcome. Tag: browser redirect Tag: 51742
  - 5
    - freestuff 4net pictures by a hacker?????? Does anyone know of this problem? Tag: browser redirect Tag: 51736
  - 6
    - Hotmail email has pop-ups? Microsoft owns/operates Hotmail email, correct? Now, everytime I go to log in, I get a pop-up advertisement. I never get pop-ups from anywhere else except when I log into my Hotmail email account. How ironic. Tag: browser redirect Tag: 51734
  - 7
    - SCEP support on Windows 2000 / 2003 server platform Hi Group I have been trying to setup a microsoft CA server which can issue digital cert to reuqesting Cisco router to build IPSec tunnel over WAN links. As microsoft suggests that there is patch in order to enable communication between CA server and Cisco routers we need to install CEPsetup.exe to enable CEP support. My questions is that a. Has any one tried this and does this work or do I have to use Microsoft 2003 server. As the patch download page suggest that this exe file is for an add on feature on windows 2003 server. thanks a lot cheers Tag: browser redirect Tag: 51733
  - 8
    - Firewall Issue in SRV2003 HI, When using the built in forewall on Server 2003 Standard Ed., I am no longer able to view web sites on this server even though I have specified "Seb Server" in the services tab, and also verified the IP. I am using host headers (ie. secure.website.com, www.website.com, etc) on the same IP address.. What is odd, is that I can FTP to the server and I show an open port 21 when I scan the machine with LanGuard. Can anyone please help? This seems rather odd to me. Tag: browser redirect Tag: 51716
  - 9
    - Looking for Stats Has anyone found a monthly summary of security related windows updates on the MS web site? I am looking to give an overview by month on the types of vul's found and remediated. Anyone??? ... Anyone??? ... Tag: browser redirect Tag: 51714
  - 10
    - updates how do i put them on my computer Tag: browser redirect Tag: 51712
  - 11
    - perfectnav - PLEASE HELP does anyone know is sasser is related to www.perfectnav.com showing up on my explorer and shutting down my internet??????? Tag: browser redirect Tag: 51711
  - 12
    - Sasser worm removal tool from Microsoft available Windows 2000 SP2 and up, or Windows XP http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720 Tag: browser redirect Tag: 51709
  - 13
    - ISEARCH toolbar and Wild Tangent - Trojans or something else? I have had two bogus search bars insert themselves into my computer -- ISEARCH and something called Wild Tangent. None of my spyware removes them and I can't uninstall either one. How do I get these things off my computer? Tag: browser redirect Tag: 51708
  - 14
    - bridge.dll, Safe? This appeared on 4/30/04 in my Add/Delete Program in Control Panel. Have searched MS knowledge base; appears to be an MS system dll. It showed up at the same time I had an intruder, so I'm hoping someone can tell me if it's ok to leave it or not. Should I leave it alone?? Tag: browser redirect Tag: 51706
  - 15
    - W32.HLLW.Gaobot.gen I have Gaobot on my computer. Norton detects it when I'm connected to internet. Norton can't repair it, add to quarantine etc. File detected is Winhlpp32.exe. I've searched this file in system32 and nothing. After day i can't copy my files, run regedit, Norton etc. I was at Symantec site and downloaded FxGaobot.exe (removal tool). Tool fixed the files but after 5 minutes Norton foun file again. I've run tool in Safety Mode and nothing. I've deleted files manually, in registry too. But Gaobot returned. I've reinstalled Windows with format all HDD's. I've downloaded Windows Update and new virus deffinitions. After couple of minutes Norton detected W32.HLLW.Gaobot.gen again. I don't know what to do :( HELP!! Tag: browser redirect Tag: 51702
  - 16
    - security patches I got a security patch from microsoft in an e-mail but my anti-virus blocked it! it was called patch3297.exe what do i do? Tag: browser redirect Tag: 51692
  - 17
    - padlock icon missing same problem - splash screen says your about to view a secure web site- web site is https - but no padlock icon in taskbar when on site is it secure ? Tag: browser redirect Tag: 51691
  - 18
    - 1on1 at startup I have discovered some type of program for internet sex on my computer called 1on1 which was in the windows folder as a hidden file and it startup as a system process and does not appear until i log on to the internet. Even when deleted, when the computer starts up again and i go on the internet it comes back. Using msconfig i discovered it was set as a startup process and it it is present in a folder HKLM/software how doi remove it. Tag: browser redirect Tag: 51688
  - 19
    - favorites folders help! every time i log on crap sex gambling health folders and addresses etc come up in my favorites. ive got spybot it finds heaps then cant get rid of it all. i delete all the files it still comes back ill be on the net 4 about a minute then i see a microsoft flash at the bottom of the screen then all the crap comes up what do i do? Tag: browser redirect Tag: 51685
  - 20
    - ALIAS OR LOCAL GROUP "NONE"?. What is? I can't to create group with name "None". Tag: browser redirect Tag: 51684
  - 21
    - XP Updates When I try to install security updates etc. i get a window that says "setup could not verify the integrity of the file..." the cryptographic thing is running... i have this problem with both auto updates and going through the website. how can i make it verify correctly. Tag: browser redirect Tag: 51681
  - 22
    - about:blank cross site scripting? Apparently this has happened to me and I'm just trying to fing out how to fix it. Anyone know how? Thanks in advance for your help http://www.microsoft.com/technet/Security/news/csoverv.msp Michele Tag: browser redirect Tag: 51679
  - 23
    - critical updates Why do I keep getting the same message Kb81969 something or other and I down load and I get it again. I went to the sight and many many times it says successful istallation but still they keep coming. What's up with that? Thank you in advance for all your help. This ha been going on for months. Tag: browser redirect Tag: 51678
  - 24
    - failure of Windows security on-line form Was requesting security up-date, but form will only accept 1/2 of my phone number and therefore will not accept my order. Naturally Windows (MSN) has run me all around "god's half acre" to avoid giving me a clear window to ask my question. Perhaps the user community can answer such a question. I do no know. Clearly Windows does not want to hear from me! HELP! Tag: browser redirect Tag: 51676
  - 25
    - Content Advisor I forgot my password for content advisor. Is there a way to reset it? Tag: browser redirect Tag: 51675

My browser gets redirected to an obnoxious search engine "The best search engine". I can't get it to stop. I've tried to reset my internet options and have Google as my default home page. Any suggestions on how to get rid of it would be appreciated.

Re: browser redirect by PA

PA
Tue May 04 17:43:39 CDT 2004

Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles & CWShredder
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run in this order:

1. CWShredder (fix all)

2. Ad-Aware (fix all)

3. Spybot (generally, fix all in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

Fernando wrote:
> My browser gets redirected to an obnoxious search engine "The best search
> engine". I can't get it to stop. I've tried to reset my internet
> options and have Google as my default home page. Any suggestions on how
> to get rid of it would be appreciated.