Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Spyware and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Important Announcement: The winners of the BC Million Post contest have been announced. You can read who the winners are at this post.

- BleepingComputer Management
 
Reply to this topicStart new topic
> Server 2003 Security Zone, Strange web site keeps showing up
bleepingnetwork
post Sep 15 2008, 07:32 AM
Post #1


Member
**

Group: Members
Posts: 42
Joined: 7-August 08
From: Planet X
Member No.: 228,213
On server 2003 in internet explorer>tools>security>trusted sites>sites. there is a URL that keeps comming back. When I remove it, it returns as soon as I open the trusted sites again. I even explictly added it to the restricted sites section and it still comes back. blink.gif
I have investigated the site a little and it has a .uk attached to it. after doing a whois on them it says the site does not exist, but I was able to go to "central ops" and was able to trace it to denmark... copenhagen to be exact... it is a hacking site of sorts and a fairly interesting one at that. but I do not want this thing stuck on a server at work. "It almost feels as if it is saying... you have been hacked by (web.site.name.uk)" dry.gif
Virus scans show nothing about this issue, neigther does the "windows malicious software tool". I have only been running this network a short time and believe it came about before my tenure. Any thoughts on how to get rid of this and how to look into what they may have done would be more than appreciated.

The forest has control of the firewalls, I am not able to control them.

BleepingNetwork
Go to the top of the page
 
+Quote Post
bleepingnetwork
post Sep 16 2008, 03:41 AM
Post #2


Member
**

Group: Members
Posts: 42
Joined: 7-August 08
From: Planet X
Member No.: 228,213
Hijack This detected it and I was able to Delete the URL, but it still leaves me wondering if there maybe something more to it.
Go to the top of the page
 
+Quote Post
cryptodan
post Sep 16 2008, 10:48 AM
Post #3


Distinguished Member
*****

Group: Members
Posts: 674
Joined: 8-September 08
From: Laurel, Md
Member No.: 237,030
Maybe you can post the hijackthis log in the appropriate place, and let the experts take a look at it.
Go to the top of the page
 
+Quote Post
« Next Oldest · Windows NT/2000/2003 · Next Newest »
 

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Lo-Fi Version Time is now: 22nd November 2008 - 10:15 AM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Malware Removal Guides

© 2003-2008 All Rights Reserved Bleeping Computer LLC.

Powered By IP.Board © 2008  IPS, Inc.