Passwords and usernames being sent to url via IE6.0

From: Lynn131 (Lynn131_at_discussions.microsoft.com)
Date: 01/16/05


Date: Sun, 16 Jan 2005 15:27:02 -0800

I noticed a visited site in my history that I know I hadn't visited.
www.numbclan.com. When I looked at the pages visited at the site it showed
urls that included what looked like keylogging of my sign in name and
password for ebay and my email ( using outlook express). I've run spybot,
norton antivirus,microsoft antispyware,and adaware and though they've found
some other things the behavior that I'm going to describe hasn't changed.
I've run them in safe mode after disabling system restore. The following is
what has also happened:

When I went to block the site numbclan.com I got an alert from Microsoft
antispyware that there was an attempt to block a trusted site. when I went to
the trusted site zone I was unable to access it. It's not an active choice.

I was able to block the site by activating Content Advisor and including the
site www.numbclan.com in it. Now I get an alert from content advisor every
time it attempts to access the internet.

Though I feel comfortable that I've stopped my passwords from being sent
over the internet I want to get rid of whatever it is and have control of my
computer options again.

Has anyone else had this problem? I'm prepared to reinstall IE in case some
of the files are corrupt or the registry is messed up with all the scans etc,
but there doesn't seem to be a way to do that with IE 6 while running winxp
sp2.

Do I really need to reformat and reinstall the whole OS? I'm not sure if
this is a new trojan, virus/browser hijacker but it's driving me nuts and I'm
not sure I can wait for a techie to discover it and write a fix.

Any help would be appreciated.



Relevant Pages

  • Re: Password forgotten
    ... If you set a password for the Content Advisor and can't remember it, ... Start Regedit ... > panel under internet> content. ... > reinstall xp on top of xp? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Major IE Issues...HELP!
    ... As you can not download these programs from the Internet, ... And be sure to use the HijackThis. ... Winsock Fix Utility ... Everything I've read says that you have to reinstall XP, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • OE blanks out all text in body of messages
    ... Clear Temporary Internet Files and the Temp folder. ... How to Reinstall or Repair Internet Explorer and Outlook Express in Windows ... Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • RE: tcp/ip problem
    ... > internet via DSL, ... > service named nipientd (no hits on google). ... > reinstall procedure in kb811259 does not correct the problem. ... > going to try is to replace the appropriate inf files and delete the matching ...
    (microsoft.public.windowsxp.general)
  • Re: RED X & Verizon
    ... I tried the Verizon site on an eMac at work with OSX and IE 5.2. ... Well, actually it would load, reload, reload... ... should then reinstall SP2 and visit Windows Update. ... Go to Internet Options> Security> Internet Zone, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)