Re: Passwords and usernames being sent to url via IE6.0

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Don Varnau (don_04[at]varnau[dot]org)
Date: 01/17/05


Date: Sun, 16 Jan 2005 21:22:09 -0600

Hi,
Google only returned a few hits on "numbclan." Those posts, like yours,
indicated that password logging seemed to be occurring.

Try this... go to http://forum.aumha.org/viewtopic.php?t=4075 Work through
the
preliminary cleaning steps, then post a HijackThis log to he forum at
http://forum.aumha.org/viewforum.php?f=30 It will be interesting to see what
HijackThis finds.

Hope this helps,
Don
[MS MVP- IE/OE]

"Lynn131" <Lynn131[at]discussions.microsoft.com> wrote in message
news:B0EF6539-9A6F-48D3-99D8-DE9E88D3B79D@microsoft.com...
> I noticed a visited site in my history that I know I hadn't visited.
> www.numbclan.com. When I looked at the pages visited at the site it showed
> urls that included what looked like keylogging of my sign in name and
> password for ebay and my email ( using outlook express). I've run spybot,
> norton antivirus,microsoft antispyware,and adaware and though they've
found
> some other things the behavior that I'm going to describe hasn't changed.
> I've run them in safe mode after disabling system restore. The following
is
> what has also happened:
>
> When I went to block the site numbclan.com I got an alert from Microsoft
> antispyware that there was an attempt to block a trusted site. when I went
to
> the trusted site zone I was unable to access it. It's not an active
choice.
>
> I was able to block the site by activating Content Advisor and including
the
> site www.numbclan.com in it. Now I get an alert from content advisor every
> time it attempts to access the internet.
>
> Though I feel comfortable that I've stopped my passwords from being sent
> over the internet I want to get rid of whatever it is and have control of
my
> computer options again.
>
> Has anyone else had this problem? I'm prepared to reinstall IE in case
some
> of the files are corrupt or the registry is messed up with all the scans
etc,
> but there doesn't seem to be a way to do that with IE 6 while running
winxp
> sp2.
>
> Do I really need to reformat and reinstall the whole OS? I'm not sure if
> this is a new trojan, virus/browser hijacker but it's driving me nuts and
I'm
> not sure I can wait for a techie to discover it and write a fix.
>
> Any help would be appreciated.



Relevant Pages

  • Re: Major IE Issues...HELP!
    ... As you can not download these programs from the Internet, ... And be sure to use the HijackThis. ... Winsock Fix Utility ... Everything I've read says that you have to reinstall XP, ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Internet Explorer problem after virus
    ... C:\Program Files\F-Secure Internet ... >> Another thing I noticed is that the version of Hijackthis you used is not ... >> current and it looks as if you may have ran it in safe mode. ... Posts the ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: OT:Just to Cheer your Weekend
    ... antagonistic Internet geek, ... politics do not affect everyday living. ... Ludwig pretty much posts in a vacuum. ... Ah yes, the on-line persona. ...
    (rec.audio.opinion)
  • Re: Flood relief efforts--unfair criticism?
    ... Just read the internet blog The Huffington Post. ... > showing how difficult it is to transport supplies in a flooded area ... 30,000 national guard troops from posts nationwide. ... Would have the evacuation been necessary? ...
    (misc.transport.road)
  • Re: OT: Lets stop this "beating around the bush" bullshit.
    ... I guess that's a good sign, assuming most posts aren't just spreading urban legends. ... Newsgroups served their purpose of forming global communities of posters with a common interest, but now that function seems to be better served by blogs. ... _is_ the internet, so if something isn't on a website it doesn't get ... I guess live chat is good for cybersex role-playing, ...
    (rec.arts.theatre.musicals)