Message, "Not authorized to use this page"

[FrankSG]

Here lately, when I click on a link to download something, I get a message that says, "You are not authorized to use this page". This morning I tried to download Tweak UI and Spider. I got the same message from both of them. My OS is XP Home and my browser is IE 6.x. I haven't had this problem before. But, last week I had to restore my system to original factor settings. I'm wondering if there is a security setting or something that is causing this. Any suggestions would be appreciated. Have a good day. Thanks. ~Frank~

[classicsoftware]

It's time for a set of FULL Security Scan.

1) Download, install and update Spybot. (http://download.com.com/3000-2144-10122137.html?part=104443&subj=dlpage&tag=button)

2) Download, install and update Adaware. (http://download.com.com/3000-8022-10214379.html?tag=lst-0-2)

3) Create a folder called HJT.

4) Download and install HijackThis (http://download.com.com/3000-8022-10227352.html?tag=lst-0-4) in the HJT folder.

5) Run Spybot and fix everything it finds

6) Shutdown your computer. Full shutdown DO NOT re-start.

7) Run Adaware and fix everything it finds.

8) Shutdown your computer. Full Shutdown DO NOT re-start.

9) Run an on line scan from Trend Micro (http://housecall.trendmicro.com/) and or Bitdefender. (http://www.bitdefender.com/scan/licence.php)

10) Run HijackThis from HJT folder. Do not run it from the TEMP or Temporary Internet Files folder as you will be unable to restore the backups created by HJT. After the scan is complete create a log file. DO NOT fix anything unless instructed to by an expert here.

11) Post the contents of the log and the results from the previous scans back here for evaluation.

[FrankSG]

Thanks, I'll do that later on today.

[HeadachesAbound]

It sounds more like you need to run windows update to update your IE Browser. It could also mean that you need to lower your security settings.

See here ... KB 284666 (http://support.microsoft.com/?kbid=284666)

I would actually recommend that you use a different browser such as Firefox (http://www.mozilla.org/products/firefox/) or Mozilla (http://www.mozilla.org/products/mozilla1.x/).

[Mark Miller]

Good idea Headache, but I think for the tweak program he wants he will need ie [not sure]
I also agree I think it's something to do with windows update.
Frank go to Windows update site and try and use it. If it needs to be upgraded it will do it itself. I am not sure but you might have to give it permission to update itself.
Mark:)

[ITgonna_be]

Where, exactly, would you recommend placing the self-created HJT folder...?

[classicsoftware]

In any permanent folder you would like.

I usually make called HJT and place it on the root as in C:\HJT

[Budfred]

ITgonna_be,

If you are planning to post an HJT log for review, do NOT put it in this thread... start one for yourself....

[PrntRhd]

Frank,
I was just wondering if somehow the permissions for your User account in XP Home got changed.

[ITgonna_be]

Budfred--
No, just curious about setting up a location for the file. Thanks. ;)

[FrankSG]

It's working now. I don't know what the problem was. I really didn't do anything to fix it. But, I turned it on this morning and everthing is working fine. Thanks anyway...

[Sylvander]

My sons' ISP detected that he was infected with a worm and was sending out infected emails.
They sent him an email warning him about this and gave a link to a web page that would fix the infection.
When I visited that same address I got the identical warning that you mentioned.
"You are not authorized to use this page"

Does it relate I wonder?

[FrankSG]

Originally posted by Sylvander
My sons' ISP detected that he was infected with a worm and was sending out infected emails.
They sent him an email warning him about this and gave a link to a web page that would fix the infection.
When I visited that same address I got the identical warning that you mentioned.
"You are not authorized to use this page"

Does it relate I wonder?
I found out what the problem was. I thought I had it fixed but then it started happening again. I then got to thinking that my firewall ZoneAlarm Pro give me similar problems sometimes. So when it started happening again, I shutdown ZoneAlarm and I had no problems. I'm going to check some of the security settings in ZA and see if I can find just what setting is doing it. I've been using ZA for a couple of years now and I have found out that when a page doesn't display as it should, ZA is sometimes the culprit.

[Sylvander]

Does your web browser have permission to go out on the web?
[Is it listed and ticked?]
If not, either tick it to give permission or remove it altogether, make sure ZA is configured to ask for permissions, and when next your browser attempts to go out, you will be asked if you want to allow it. Say yes, and you should then have no problem.

Or does your version of ZA block access to certain listed sites?

[FrankSG]

Originally posted by Sylvander
Does your web browser have permission to go out on the web?
[Is it listed and ticked?]
If not, either tick it to give permission or remove it altogether, make sure ZA is configured to ask for permissions, and when next your browser attempts to go out, you will be asked if you want to allow it. Say yes, and you should then have no problem.

Or does your version of ZA block access to certain listed sites?
I can get to the download site OK. But when I click on the link to download, either nothing happens or I get the "You don't have permission--" message. Usually, nothing happens. It's only with a few where it won't work. I go to a particular link and click on "Download" and nothing happens. I shutdown ZA, and everything works fine. I looked at all my settings in ZA and they seem to be OK. This didn't happen when I had the previous version of ZA. I still have the install file for the previous one. I think I will uninstall the newer version and install the previous.

[FrankSG]

Originally posted by classicsoftware
It's time for a set of FULL Security Scan.

1) Download, install and update Spybot. (http://download.com.com/3000-2144-10122137.html?part=104443&subj=dlpage&tag=button)

2) Download, install and update Adaware. (http://download.com.com/3000-8022-10214379.html?tag=lst-0-2)

3) Create a folder called HJT.

4) Download and install HijackThis (http://download.com.com/3000-8022-10227352.html?tag=lst-0-4) in the HJT folder.

5) Run Spybot and fix everything it finds

6) Shutdown your computer. Full shutdown DO NOT re-start.

7) Run Adaware and fix everything it finds.

8) Shutdown your computer. Full Shutdown DO NOT re-start.

9) Run an on line scan from Trend Micro (http://housecall.trendmicro.com/) and or Bitdefender. (http://www.bitdefender.com/scan/licence.php)

10) Run HijackThis from HJT folder. Do not run it from the TEMP or Temporary Internet Files folder as you will be unable to restore the backups created by HJT. After the scan is complete create a log file. DO NOT fix anything unless instructed to by an expert here.

11) Post the contents of the log and the results from the previous scans back here for evaluation. Logfile of HijackThis v1.98.0
Here's what was on the log file for HijackThis. Does it look OK
Scan saved at 8:59:50 PM, on 7/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 5.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.superwebsearch.com/ie/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us6.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us6.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.superwebsearch.com/ie/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.superwebsearch.com/ie/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.live365.com/cgi-bin/directory.cgi?genre=Presets&searchfields=TAC
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us6.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us6.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.superwebsearch.com/ie/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.superwebsearch.com/ie/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://srch-us6.hpwis.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [NAV Agent] c:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 5.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] c:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: &WordWeb... - res://C:\WINDOWS\System32\wweb32.dll/lookup.html
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: Search Using Copernic Agent - C:\Program Files\Copernic Agent\Web\SearchExt.htm
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM (file missing)
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM (file missing)
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM (file missing)
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM (file missing)
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Launch Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

[Budfred]

FrankSG,

You have what is hopefully a good old fashioned CWS infection... You will need to download and run CWShredder... You need to close all open windows and browsers, then select FIX... Then reboot, run HJT for a Scan and Save, then post the log here... CWShredder is available from my links...

[FrankSG]

Originally posted by Budfred
FrankSG,

You have what is hopefully a good old fashioned CWS infection... You will need to download and run CWShredder... You need to close all open windows and browsers, then select FIX... Then reboot, run HJT for a Scan and Save, then post the log here... CWShredder is available from my links...
I did that and here's what I got this time. By the way, what the heck is a CWS infection?
Logfile of HijackThis v1.98.0
Scan saved at 10:09:56 PM, on 7/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 5.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us6.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us6.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.live365.com/cgi-bin/directory.cgi?genre=Presets&searchfields=TAC
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us6.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us6.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://srch-us6.hpwis.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [NAV Agent] c:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 5.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] c:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: &WordWeb... - res://C:\WINDOWS\System32\wweb32.dll/lookup.html
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: Search Using Copernic Agent - C:\Program Files\Copernic Agent\Web\SearchExt.htm
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM (file missing)
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM (file missing)
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM (file missing)
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM (file missing)
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Launch Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

[PrntRhd]

By the way, what the heck is a CWS infection?

Budfred or the others can explain, it is CoolWebSearch, adware/malware that installs and clogs your ability to browse to anything but their sites. It sometimes uses Byte/Verify Trojan exploit in MS JVM to install itself.

This article on SWI is a partial explanation, variants recently are getting worse: cws explained (http://www.spywareinfo.com/articles/cws/)

[Budfred]

And CWS is the bane of the internet... The new variants are why SpywareInfo forums and other similar forums are getting overwhelmed with requests for help...

Your log looks clean now... Run it again in a couple of days and compare to the one you see here... If you have some new R1 and R0 items, post back again... Sometimes the CWS infections return in a day or two...

In the meanwhile, here is my prevention speech:

This is a good time to set up protection against further attacks. You need an antivirus that is updated, a good firewall (a router firewall is not enough) and a spyware blocker like SpywareBlaster and also IE-Spyads. All of these have good free versions available... be very cautious about any security software that advertises in popups or other intrusive ways, they are not only usually useless, but also often have malware in them....

Check out this article for more ideas:

http://www.computercops.biz/postlite7736-.html

[FrankSG]

Thanks, everyone. I'm going to some of those sites and read up on this stuff. This scum-ware is something else. It's too bad that everybody can't be nice guys like us.:) :)

[Sylvander]

"It's too bad that everybody can't be nice guys like us."
Ahhh, you've started me now Frank. :D

See this http://www.robertburns.plus.com/holywillie.htm

"Holy Willie's Prayer" is a reminder to us all not to fall into the trap of feeling superior [I know you were only joking Frank (You WERE joking weren't you?)]. ["There's many a true word spoken in jest."]
I think the more you read his work the more you'll enjoy it.
There are diamonds in the mine that is his works, and the more you dig the more diamonds you will find.

"In a mine,
in a mine,
where a thousand diamonds shine......

Hi-ho, hi-ho, it's off to work we'll go."

Holy Willie's Prayer [part only]
"I am here a chosen sample
To show Thy grace is great and ample
I'm here a pillar o' Thy temple
Strong as a rock
A guide, a buckler, and example
To a' Thy flock

Lord, bless Thy chosen in this place
For here Thou hast a chosen race
But God confound their stubborn face
An' blast their name
Wha bring thy elders to disgrace
An' public shame

But, Lord, remember me an mine
Wi' mercies temporal an' divine
That I for grace an' gear may shine
Excell'd by nane
And a' the glory shall be Thine
Amen, Amen"

Tam O' Shanter
"You may buy those joys ow'r dear.
Remember Tam O' Shanters mare."

[FrankSG]

Originally posted by Sylvander
"It's too bad that everybody can't be nice guys like us."
Ahhh, you've started me now Frank. :D

[I know you were only joking Frank (You WERE joking weren't you?)]. [/color]"
No, Sylvander,--I meant nice guys like YOU and ME.:D :D
Well, yes, I was just trying to add a little humor...

[Sylvander]

"All the world's a little wierd, save thee and me" Frank.

"And even thee's a little wierd."

[In the original it was "queer", not "wierd", but they didn't mean it "that" way.]

But you know...

sometimes when I look in the mirror, I wonder....

[FrankSG]

Originally posted by Sylvander
"All the world's a little wierd, save thee and me" Frank.

"And even thee's a little wierd."

[In the original it was "queer", not "wierd", but they didn't mean it "that" way.]

But you know...

sometimes when I look in the mirror, I wonder....
:D :D

[FrankSG]

Originally posted by Sylvander
, make sure ZA is configured to ask for permissions,
I think you were right, Sylvander. In addition to some other problems that were pointed out to me such as the CWS infection, there must have been some setting in ZA that was causing the biggest problem. I looked at all the settings that I had but couldn't see anything that I thought would have caused the problem. So, I completely installed it and then re-installed it. When I re-installed, I was very careful as to all the options that I clicked on. I have had no problems since. When you install ZA, there are several options that you can choose from to set it up the way you like. I'm guessing that when I installed it before, I could have been in too much of a hurry and wasn't careful in choosing my options. As they say, "Haste makes waste". And I say,"All's well that ends well." Thanks to all of you guys for your help.