garms Posted January 17, 2005 Report Share Posted January 17, 2005 Logfile of HijackThis v1.99.0Scan saved at 12:13:28 PM, on 1/1/2004Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Norton AntiVirus\navapsvc.exec:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\WINDOWS\Explorer.EXEC:\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&t...ilion&pf=laptopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&t...ilion&pf=laptopO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dllO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dllO2 - BHO: SpoofStick BHO - {CBA74CDA-DF78-4AD9-954E-3B15D0A993DE} - C:\Program Files\CoreStreet\SpoofStick\SpoofStickBHO.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dllO3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dllO3 - Toolbar: SpoofStick - {4D46ED77-1429-4CF6-8F63-C84B5D710BAF} - C:\Program Files\CoreStreet\SpoofStick\SpoofStick.dllO4 - HKCU\..\Run: [backupNotify] C:\Program Files\HP\Digital Imaging\bin\backupnotify.exeO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLLO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=laptopO18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dllO23 - Service: Symantec Event Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: HP WMI Interface - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exeO23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: SymWMI Service - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe Link to post Share on other sites
Besttechie Posted January 17, 2005 Report Share Posted January 17, 2005 Hi and Welcome,Are you having any specific problems? Your logfile looks Ok. B Link to post Share on other sites
garms Posted January 17, 2005 Author Report Share Posted January 17, 2005 Hi,I'm sorry I didn't give you any info on why I sent my log to you...I guess that might help.I am getting a security alert window when browsing and I was trying to figure out why. It's bugging me.Thanx Kindly. Link to post Share on other sites
Besttechie Posted January 17, 2005 Report Share Posted January 17, 2005 Can you please tell me what the security alert says word-for-word? That will help us troubleshoot and fix your problem.Also, what browser are you using?B Link to post Share on other sites
garms Posted January 17, 2005 Author Report Share Posted January 17, 2005 Hi,It's a box that comes up as the browser window opens. The Box Title is Security Alert. It's alerting me there's a problem with the site's security certificate. It has two green checkmarks and one yellow caution triangle. The caution alert says the certificate may be expired or not valid. Then it asks if I want to proceed. I have to hit yes repeatedly in order for it to go away. What is it? I have XP Home. I just got this PC yesterday and I have never seen this b4.Thanx Again. Link to post Share on other sites
Besttechie Posted January 17, 2005 Report Share Posted January 17, 2005 What's the site that it happens with? Is there a certian one? Or every site?B Link to post Share on other sites
garms Posted January 17, 2005 Author Report Share Posted January 17, 2005 Not every site, but many. Link to post Share on other sites
Besttechie Posted January 17, 2005 Report Share Posted January 17, 2005 Ok, does this happen on my site? Or sites like news.com, etc? If it does then I am thinking it has to do with your security levels. Now, from what I can tell it's an ssl security box. Which is letting you know that the site has encryption, but the certificate happens to be 'self-signed' which is why IE is alerting you. Also, could you list maybe one or two sites this happens to you at?Thanks. B Link to post Share on other sites
garms Posted January 17, 2005 Author Report Share Posted January 17, 2005 Hi,It doesn't happen here, or at News.com. It does at Amazon.com, Ebay, Macy's.Thanx Link to post Share on other sites
garms Posted January 17, 2005 Author Report Share Posted January 17, 2005 Hi,Browser...IE6 Link to post Share on other sites
Besttechie Posted January 17, 2005 Report Share Posted January 17, 2005 Does it happen when you go to check something out? Like if you put it in the shopping cart and you're going to buy it? If so it's just letting you know that it's an encrypted page. Which is a good thing. Might want to also reset your security settings for IE. ToolsInternet OptionsSecurity TabClick Default LevelApply/OkSee what that can do. It's basically just letting you know the page is encrypted.B Link to post Share on other sites
garms Posted January 18, 2005 Author Report Share Posted January 18, 2005 Hi,My settings are all at default level.Thanx Link to post Share on other sites
Dragon Posted January 18, 2005 Report Share Posted January 18, 2005 hi saw your post, to solve that problem do this:On internet explorer tools->internet options-> advanced tabscroll down through the list and find warn about invalid site certificatesremove the checkmarkhit apply, if the window stays open then hit OK,close explorer and restart it, then go one of the webpages you mentioned, you shouldn't see that warning anymore Link to post Share on other sites
garms Posted January 18, 2005 Author Report Share Posted January 18, 2005 Hi,Believe it or not, I had already did that (removed the checkmark) and it didn't help. Thanx anyway. Link to post Share on other sites
Dan Posted February 8, 2005 Report Share Posted February 8, 2005 If you have not found out an answer to your problem, please post in the Windows Help forum.Thanks,dk Link to post Share on other sites
Recommended Posts