site restriction box

[jacobi3x]

Hi,
 My box for restricted sites is full Like maybe 500
How can I delete them all at once.
I can delete one at a time,but would never get done
 I haven't put them in there on purpose,maybe by accident.
If spybot or some software program put it in there
 how would I deal with it?
   jacobi3x

[patio]

What Box ?
What version of Windows ?
What sites ?

[Broni]

Can you post 3-4 sites from that list?

[jacobi3x]

Hi,
thanks for being there,
 tools options security,restricted
sites
I got xp home computer
Here's a couple of the sights in there.
masterpsp.com
matcash.com
imagespecials.com
I've never heard of these sites.
jacobi3x

[Broni]

Download HijackThis:
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
Click on Download HijackThis Installer
Post HijackTHis log.

[Dusty]

Hi,
thanks for being there,
 tools options security,restricted
sites
I got xp home computer
Here's a couple of the sights in there.
masterpsp.com
matcash.com
imagespecials.com
I've never heard of these sites.
jacobi3x

Internet Explorer   Still using that

[jacobi3x]

Thanks Broni
 I don't know if I'm capable to do that Hijack thing.
Will it cause me alot of trouble if I leave those restricted sites in the restricted area?
I'd like an easier way out of this if I could.
The computer works ok. I don't have the slightest idea how to handle this.Whatever you say I'll try.Could all those restricted sites be deleted at once some way,I'd feel more comfortable with that?
 jacobi3x

[Broni]

Will it cause me alot of trouble if I leave those restricted sites in the restricted area?

I can't answer your question until I see your HJT log. When I have it, I can try to see what program put those sites in restricted area. I'm assuming, you didn't.

[jacobi3x]

Broni,
 I don't know sickom what I'm doing but I downloaded
the hijack exe
Hijack zip
Hijack the exe
Now what do I do to get the file to you?
I need some help   jacobi3x

[Broni]

When you went to my link, you should have clicked on this:

http://209.85.48.8/228/109/upload/p3803733.gif

After downloading the above file, double click on it to begin HijackThis installation.

After installation, follow these instructions:

Open HJT,  and look below images for instructions.


Click on Scan button.
When scanning is done, Scan button changes to Save log button.
Click on it.
Save pop-up window will open.
Note where file will be saved. In my example, log will be saved to C:\Temp directory.
Click Save button.
Save window will close.
Notepad will open. Close it.

Proceed to your ComputerHope thread, and click Reply
In Reply window click on Additional Options..., then click on Browse button.
Browse window will open.
Navigate to place where your file was saved, click on that file ONCE, and click Save button.
Browse window will close, and you'll be back in Reply window.
Click Post button, and you're done.

[Dusty]

The sites are probably added to the I.E. Restricted Sites file by programs like Spybot S&D, SpywareBlaster and some others.

Here's a freebie to manage the Restricted Sites file.

Edit: OK I admit it - I opened one of the sites in my IE Restricted list and, apart from the displayed yuck, the result is attached:

Good luck

[recovering space - attachment deleted by admin]

[jacobi3x]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:43:55 Norm Eystad, on 4/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Microsoft SQL

Server\MSSQL$PARTSDB\Binn\sqlservr.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\HP\KBD\KBD.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://cedarville.net/
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Page_URL =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Search_URL =

http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar -

{EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program

Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper -

{02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program

Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper -

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper -

{22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program

Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: Spybot-S&D IE Protection -

{53707962-6F74-2D53-2644-206D7942484F} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: del.icio.us Toolbar Helper -

{7AA07AE6-01EF-44EC-93CA-9D7CD41CCDB6} - C:\Program

Files\del.icio.us\Internet Explorer Buttons\dlcsIE.dll
O2 - BHO: Google Toolbar Helper -

{AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program

files\google\googletoolbar5.dll
O3 - Toolbar: Yahoo! Toolbar -

{EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program

Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F}

- c:\program files\google\googletoolbar5.dll
O3 - Toolbar: eBay Toolbar -

{92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program

Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: del.icio.us -

{981FE6A8-260C-4930-960F-C3BC82746CB0} - C:\Program

Files\del.icio.us\Internet Explorer Buttons\dlcsIE.dll
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

/STARTUP
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run]

C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL

SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run]

C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK

SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run]

C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run]

C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default

user')
O4 - Startup: AVG Free Control Center.lnk = C:\Program

Files\Grisoft\AVG Free\avgcc.exe
O4 - Global Startup: WinPatrol
O8 - Extra context menu item: E&xport to Microsoft Excel -

res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program

Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O9 - Extra button: (no name) -

{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration -

{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) -

{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -

{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.cedarville.net
O15 - Trusted Zone: http://www.funnygreetings.net
O15 - Trusted Zone: *.sooeveningnews
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows

Genuine Advantage Validation Tool) -

http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1}

(ewidoOnlineScan Control) -

http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter

Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}

(MUWebControl Class) -

http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/clien

t/muweb_site.cab?1132672084406
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP

Download Manager) -

https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial

cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver

Agent ActiveX Control) -

http://plugin.driveragent.com/files/driveragent.cab
O17 -

HKLM\System\CCS\Services\Tcpip\..\{C39257DA-4F11-4E2A-8DB5-944

ABD3200EB}: NameServer = 64.136.173.5 64.136.164.77
O20 - AppInit_DLLs:

C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o.

- C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program

Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA

Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner -

C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Pml Driver HPZ12 - HP -

C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) -

Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 6848 bytes


[recovering space - attachment deleted by admin]

[Broni]

The log is clean, so I think Dusty's explanation will do.
Leave that list alone.

[jacobi3x]

Thanks broni and Dusty for your good addvice.
 I'm going to down load Zoneout and I think I'll
be in good shape.Thanks for analizing my Hijack
Log and showing me how to do it Very helpful
          jacobi3x

[Broni]

You're welcome