Certain sites do not recognize my computer

I am new to Bleeping Computer. I have been reading various topics for quite some time but I am not sure how to resolve this problem
I use Windows XP and IE8. My antivirus is Norton 360. I have not had many problems except for a sometimes slow startup. Several days ago I a message popped up on my screen saying I was infected with the Xorpix trojan. It asked that I download to fix the problem.
This message did not come from Norton or Microsoft. As I said, I am not that computer savvy. So I just shut down my computer and I installed RegTool with Antimalware. I was infected with Xorpix.
So, from this website I read about adjusting some IE advanced setting. After doing that, I now cannot access some websites. These are websites such as my 401k account, my credit card accout. I get a message that says the site does not recognize my computer.
I contacted RegTool support and Microsoft support but noone could help me .
I apologize if I have gone on too long but I am not very good at correcting pc problems that are advanced in nature.
Does any one have any ideas? I would be most grateful.

Edited by The weatherman, 30 July 2009 - 07:04 PM.
Moved from Internet & Networking to a more appropriate forum. Tw

This answer applies to IE and secure sites (any site you log into with https://)..

In order to get the site to work properly and to protect your information, add the top level domain to your "Trusted Sites" list.

To do this in IE:

• Choose "Tools" then "Internet Options"
• Click on "Security"
• Click the "Trusted Sites" icon at the top and click the "Sites" button
• Add only the part of the domain name (website address) that specifically identifies the website you trust. For example, if I want Microsoft Updates to be a trusted site, I would type in "http://windowsupdate.microsoft.com" without the quotes.
• If you want to make sure the website you use is using secure sockets (https:) for transmitting information, leave the checkmark in the box "Require server verification (https:) for all sites in this zone." If your website doesn't use https for access, (i.e.:http://www.bleepingcomputer.com), uncheck the box or you will receive an error when you try to access the webpage.

The error you get from the website stating your computer isn't recognized simply means that the cookie the website originally stored on your computer can not be located and the website is protecting your information by assuming someone from a different computer and/or location is attempting to access your data.

But on a different note, please make sure you contact someone in the malware removal forums to help make sure your computer is clean before you try to access personal data and/or websites. There are excellent people here to help you and I'm sure they can give you the assistance you need.

Let me know if this helps...

Hello after doing the above fix run this. You installed a Rogue malware tool.

Next run MBAM (MalwareBytes):

NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.

Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2

MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.

• Make sure you are connected to the Internet.
• Double-click on mbam-setup.exe to install the application.
• When the installation begins, follow the prompts and do not make any changes to default settings.
• When installation has finished, make sure you leave both of these checked:
  • Update Malwarebytes' Anti-Malware
  • Launch Malwarebytes' Anti-Malware
• Then click Finish.

MBAM will automatically start and you will be asked to update the program before performing a scan.

• If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
• If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.

On the Scanner tab:

• Make sure the "Perform Quick Scan" option is selected.
• Then click on the Scan button.
• If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
• The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
• When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
• Click OK to close the message box and continue with the removal process.

Back at the main Scanner screen:

• Click on the Show Results button to see a list of any malware that was found.
• Make sure that everything is checked, and click Remove Selected.
• When removal is completed, a log report will open in Notepad.
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
• Exit MBAM when done.

Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

syscorpsecure and boopme,

Thank you so much for your suggestions. I will attempt these remedies right away and will let you know the outcome. Thanks again.

by the way, should I uninstall RegTool and Antimalware? The Antimalware was part of the RegTool installation.

I tried the first suggestion of adding my sites to the trusted sites in ie8 properties. That didn't appear to work.
I installed Malwarebytes and ran the program. Here are the logs.
Malwarebytes' Anti-Malware 1.39
Database version: 2526
Windows 5.1.2600 Service Pack 3

7/29/2009 11:45:50 AM
mbam-log-2009-07-29 (11-45-50).txt

Scan type: Quick Scan
Objects scanned: 100008
Time elapsed: 6 minute(s), 56 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
C:\Program Files\AntiMalware\AntiMalware.exe (Rogue.RegTool) -> Not selected for removal.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\AntiMalware\AntiMalware.exe (Rogue.RegTool) -> Not selected for removal.
C:\WINDOWS\mywinsys.ini (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\RECYCLER\ADAPT_Installer.exe (Heuristics.Malware) -> Quarantined and deleted successfully.


Malwarebytes' Anti-Malware 1.39
Database version: 2534
Windows 5.1.2600 Service Pack 3

7/30/2009 10:29:23 PM
mbam-log-2009-07-30 (22-29-23).txt

Scan type: Quick Scan
Objects scanned: 102704
Time elapsed: 9 minute(s), 45 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
C:\Program Files\AntiMalware\AntiMalware.exe (Rogue.RegTool) -> Unloaded process successfully.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\AntiMalware\AntiMalware.exe (Rogue.RegTool) -> Quarantined and deleted successfully.
How did you know this was a Rogue malware tool? . Do I uninstall the RegTool and Antimalware?

Edited by bellamente, 30 July 2009 - 10:46 PM.

I can't thank you enough. My computer is fixed. I am now able to access all of my accounts.

Yes unistall those they are not needed or very good.


Now you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:

• Go to Start > Programs > Accessories > System Tools and click "System Restore".
• Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.

• Then use Disk Cleanup to remove all but the most recently created Restore Point.
• Go to Start > Run and type: Cleanmgr
• Click "Ok". Disk Cleanup will scan your files for several minutes, then open.
• Click the "More Options" tab, then click the "Clean up" button under System Restore.
• Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"
• Click Yes, then click Ok.
• Click Yes again when prompted with "Are you sure you want to perform these actions?"
• Disk Cleanup will remove the files and close automatically.

Vista Users can refer to these links: Create a New Restore Point and Disk Cleanup.



Bleeping Computer DOES NOT recommend the use of registry cleaners/optimizers for several reasons:

• Registry cleaners are extremely powerful applications that can damage the registry by using aggressive cleaning routines and cause your computer to become unbootable.

The Windows registry is a central repository (database) for storing configuration data, user settings and machine-dependent settings, and options for the operating system. It contains information and settings for all hardware, software, users, and preferences. Whenever a user makes changes to settings, file associations, system policies, or installed software, the changes are reflected and stored in this repository. The registry is a crucial component because it is where Windows "remembers" all this information, how it works together, how Windows boots the system and what files it uses when it does. The registry is also a vulnerable subsystem, in that relatively small changes done incorrectly can render the system inoperable. For a more detailed explanation, read Understanding The Registry.

• Not all registry cleaners are created equal. There are a number of them available but they do not all work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad entry". One cleaner may find entries on your system that will not cause problems when removed, another may not find the same entries, and still another may want to remove entries required for a program to work.

• Not all registry cleaners create a backup of the registry before making changes. If the changes prevent the system from booting up, then there is no backup available to restore it in order to regain functionality. A backup of the registry is essential BEFORE making any changes to the registry.

• Improperly removing registry entries can hamper malware disinfection and make the removal process more difficult if your computer becomes infected. For example, removing malware related registry entries before the infection is properly identified can contribute to system instability and even make the malware undetectable to removal tools.

• The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid, and erroneous entries does not affect system performance but it can result in "unpredictable results".

Unless you have a particular problem that requires a registry edit to correct it, I would suggest you leave the registry alone. Using registry cleaning tools unnecessarily or incorrectly could lead to disastrous effects on your operating system such as preventing it from ever starting again. For routine use, the benefits to your computer are negligible while the potential risks are great.

• Ed Bott's Webog: Why I don’t use registry cleaners
• Do I need a Registry Cleaner?