Thursday, September 30, 2004
Friday, September 24, 2004
Sunday, September 19, 2004
Thursday, September 16, 2004
Tuesday, September 14, 2004
Monday, September 13, 2004
Browser Issues: This operation has been cancelled due to restrictions in effect on this computer.: "Download and run: http://www.merijn.org/files/cwshredder.zip to remove the
parasite (as Steven suggests above).
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
However, this also indicates that you may have acquired some other malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.
Ad-aware and SpyBot S&D you already know.
Once you get it all cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:
http://www.wilderssecurity.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it updated) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.wilderssecurity.net/spywareguard.html (Monitors for attempts to
install malware).
Both very highly "
parasite (as Steven suggests above).
Then download and run:
http://www.kellys-korner-xp.com/regs_edits/iegentabs.reg to restore your
tabs and remove any restrictions that the parasite has put in place.
However, this also indicates that you may have acquired some other malware
along the way. If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in Zone
Alarm 3.x, if present or any other Ad Blocking software which interferes
with Java Scripting for this scan to work. You should get a message between
the two lines of **** giving the results of the scan.
Ad-aware and SpyBot S&D you already know.
Once you get it all cleaned up, you might want to consider installing the
SpywareBlaster and SpywareGuard here to help prevent this kind of thing from
happening in the future:
http://www.wilderssecurity.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it updated) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed, and it provides information and fixit-links for a variety
of parasites.
http://www.wilderssecurity.net/spywareguard.html (Monitors for attempts to
install malware).
Both very highly "
Thursday, September 09, 2004
Wednesday, September 08, 2004
Thursday, September 02, 2004
Wednesday, September 01, 2004
Go to Start, type sfc /scannow in the run box and press enter. Note, thereis a space between sfc and the forward slash. You will be asked for your XPCD. Be aware, upon inserting the CD the XP setup screen may appear, this isnot a part of sfc /scannow, rather it is being invoked by autorun. Simplyminimize the screen and allow sfc to continue.If that fails, here's something I found on Google from Shain Wray of theMicrosoft PSS Security team:It is possible that the registry ACL for the key Lsa may not be set to thedefault.The default ACL for the keyHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsais:Administrators Read & Full ControlAuthenticated Users ReadCREATOR OWNER (*SPECIAL*) Full Control to Subkeys onlyServer Operators ReadSYSTEM Read & Full ControlBefore attempting the above, I'd suggest exporting the registry key by rightclicking the key and selecting export in case you need to bring it back intothe registry. NOTE: you access the registry by going to Start and typingregedit in the run box.You should also make sure your data is backed up as well.--Michael Solomon MS-MVPWindows Shell/UserBackup is a PC User's Best FriendDTS-L.Org: http://www.dts-l.org/"Eden V" wrote in messagenews:8FF27EB9-8B43-4BBF-9CD9-23AD6735ABF5@microsoft.com...