geting message on some websites"not authorized..."

hello
on some of the websites i'm getting message "you are not authorized to view"
i also got a message "error 403" i also know i'm missing some of the contents
on the pages
i have dell inspiron 6000 using windows xp
firewall ez firewall
adaware
please help me , thanks
jolanta

 

Are you behind a proxy server at all?

Check by opening Internet Explorer, clicking Tools --> Internet Options --> Connections --> LAN Settings. See if the Proxy Server box is checked.

Pete, Pedros500

 

thanks
i did that and still have same problem

 

But was the box checked?

 

was not checked
i also upgraded my video card
its not helping

 

Can u send the URL of one of the pags you are trying to visit?

Also post a HijackThis log?

 

http://www.ebay.com/
thats one of the webpages
i also know that not all of the pages work good on disney channel , pbs kids
how you post log from hijac this?
thanks

 

OK.

Download HiJack This here. Run the application and it will pop up with a white text window. Select all of the text and copy it. Once you have done that, reply to this post and paste the details in there.

 

Logfile of HijackThis v1.99.1
Scan saved at 12:45:35 PM, on 8/25/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Wirtualna Polska\wpkontakt\wpkontakt.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust Anti-Spam\QSP-2.1.215.5\QOELoader.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Firewall\ca.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Jolanta\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/flash/index.cfm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [wpkontakt] C:\Program Files\Wirtualna Polska\wpkontakt\wpkontakt.exe -autostart
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust EZ Armor\eTrust Anti-Spam\QSP-2.1.215.5\QOELoader.exe"
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Firewall\ca.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0291079A-F8D2-40DA-A088-98083584AFF5} (PC080Web Control) - http://www.pc080.net/pc080sp/PC080Web.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM_ca.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by17fd.bay17.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - http://echat.us.dell.com/Media/VisitorChat/TLIEFlash.CAB
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O18 - Protocol: wpmsg - {2E0AC5A0-3597-11D6-B3ED-0001021DC1C3} - C:\Program Files\Wirtualna Polska\wpkontakt\url_wpmsg.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

 

Could you also paste the contents of the fiel C:\windows\system32\drivers\etc\hosts here please?

Cheers, Pete

 

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

 

@ rutjolka

Never post HijackThis log inline always post as an attachment. Also you are running HJT from the wrong location. It should be ran from C:\Program Files\HijackThis as per MG tutorial http://forums.majorgeeks.com/showthread.php?t=38752, normally a HJT would only be posted in the Spyware Specific forum.

You are running 2 firewalls; ZoneAlarm and trhe eTrust Firewall. It is recommended that you only run one firewall as they can and often do interfer with each other. Unistall one of your firewalls.

What is this C:\Program Files\Wirtualna Polska\wpkontakt\wpkontakt.exe?

 

sorry for my mistakes - i'm lerning
i was thinking i uninstaled zone alarm
wp kontakt is similar to windows messenger- its used in poland

 

No big deal. BTW your hosts file is fine. Remove ZoneAlarm and see what that does for you access problems.

 

how do i remove that ?
i was thinking i uninstalled
but its somewhere in the computer cant find it

 

Removal of ZoneAlarm
​

​

Please print out these instructions so that you can operate with All Browser Windows CLOSED.
​

Please do the following. If any of the steps below do not apply to you, or you are unable to perform the function listed, please CONTINUE to the next step.

Open the ZoneAlarm program, go to the OVERVIEW -> PREFERENCES tab, and make sure the Load At Startup box is UNCHECKED. Close the program, then right-click on the ZA icon and select Shutdown.

Now click Start -> Programs -> Zone Labs right-click on Uninstall select Properties. Now in the target box you must add a space and then /clean to the end so that it looks something like this "C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe" /clean click Apply and then OK.

REBOOT

You should now have no ZoneAlarm processes running on your system.

Now click Start -> Programs -> Zone Labs -> Uninstall. Be sure to say YES to the security check.

WARNING - Do NOT run the ZoneAlarm Uninstall program while in Safe Mode unless absolutely necessary. The program may not be able to make the proper registry changes in Safe Mode, thus generating errors after a reboot.

REBOOT

To make sure that you can see the ZoneAlarm system files, if they are still on your computer:

a. Right-click on Start, then left-click on Explore. When the Windows Explorer panel appears:

- In Windows 95, 98, 98SE: Click View -> Options (in Windows 98/98SE, this will be called "Folder Options"). Click the "View" tab, and then click the "Show all files" radio button.

- In Windows ME, XP, 2000: Click Tools -> Folder Options. Click the "View" tab, and then click the "Show hidden files and folders" radio button.

b. Make sure you also UNCHECK the box to "Hide Protected Operating System Files" if you have one.
c. When searching, be sure it searches ALL hidden files and folders (in XP: check Advanced search settings)
d. Click OK.

IMPORTANT NOTE: Making modifications to system files may disable crucial functions of your Windows operating system. We strongly suggest re-enabling the "Hide files and folders" feature once all ZoneAlarm files have been removed.

Click on Start, then Search or Find, and select Files. Make sure that the location box is set to search your local hard drive (usually C or All Local Drives.

Type the following exactly and delete the folder:

zonelabs (under your SYSTEM or SYSTEM32 folder)
"zone labs" (under your Program Files folder)
"Internet logs" (under your Windows or WINNT folder)

Type the following exactly - delete files found in \Windows or any subfolder below it, in your \Temp folder, or in the Windows "Pre-Fetch" folder):

vsconfig.xml
vsdata.dll
vsdata95.vxd
vsdatant.sys
vsmon.*
vsmonapi.dll
vsnetutils.dll
vspubapi.dll
zaplus.*
zapro.*
zllictbl.dat
zlparser.dll
zonealarm.exe
zoneband.dll

vsutil.dll (please right-click, Properties -> Version to be sure it is a ZA file. Do NOT delete this file unless it is a Zone Labs file!)

Make sure your Recycle Bin is empty (right-click and select Empty).

REBOOT

NOTE: If you received an error message upon deleting the files, or if the original programs remain in the Programs list, or if the problem persists after this, removing the files in Safe Mode will allow you to delete the files properly. Click Start, Help, and search for "SAFE MODE" for information specific to your system.

Rename the directory "C:\Windows\Internet Logs" (for example, "Internet Logs1").

Make sure your Recycle Bin is empty.

It is not generally necessary to remove registry entries if reinstalling ZoneAlarm or ZoneAlarm Pro. However, should you choose to do so, the following registry entries are associated with ZoneAlarm or ZoneAlarm Pro:

Important Advisory: Deleting registry entries incorrectly may cause serious problems to your operating system (OS) which may necessitate the need to reinstall the OS. Please make sure you are able to perform these deletions correctly before you decide to edit the entries.

For information about how to edit the registry in Windows, type "regedit.exe" from a command prompt. Click "Help," then "Help Topic." Click "Changing Keys and Values."

Note that you should back up the registry before you edit it.

To enter the registry, go to Start/Run and type: "regedit." Use Control-F to find and F3 to Find Next.

Registry Entries:

- Key: HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs and all its subkeys and values
- Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Pro

These registry items start the services required for ZoneAlarm or ZoneAlarm Pro:

- Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
- Value: MiniLog and Value: TrueVector
- Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\VSDATA95

This is a database that contains a long list of values, but only these values are related to ZoneAlarm or ZoneAlarm Pro and TrueVector:

- Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDLLs
- Values:

C:\Program Files\Zone Labs\ZoneAlarm\tutorwiz.dll
C:\Windows\System\vsdata.dll
C:\Windows\System\vsdata95.vxd
C:\Windows\System\vsmonapi.dll
C:\Windows\System\vsnetutils.dll
C:\Windows\System\vsnetu.dll
C:\Windows\System\vspubapi.dll
C:\Windows\System\vsutil.dll
C:\Windows\System\Zone Labs\html.tdr
C:\Windows\System\Zone Labs\vsdb.dll
C:\Windows\System\Zone Labs\minilog.exe
C:\Windows\System\Zone Labs\vsmon.exe
C:\Windows\System\Zone Labs\vsruledb.dll

For each user who has run ZoneAlarm or ZoneAlarm Pro, there are registry keys in

- Key: HKEY_CURRENT_USER\Software\Zone Labs

The following keys allow the user to modify the sound that is played when there is an alert through use of the Control Panel Sounds applet:

- Key: HKEY_CURRENT_USER\AppEvents\EventLabels\InternetAlert
- Key: HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\InternetAlert\.current

The following keys tell Windows the ZoneAlarm and ZoneAlarm Pro Desk Band is a part of the application:

- Key: HKEY_CLASSES_ROOT\CLSID\{long string of characters}\InprocServer32 (NOTE: The string of characters will vary from system to system.)
- Value: C:\Program Files\Zone Labs\ZoneAlarm\zoneband.dll

The following keys are related to ZoneAlarm and ZoneAlarm Pro's MailSafe Feature:

- Key: HKEY_CLASSES_ROOT\ZAMailSafe

There is a value for the extension of every attachment that ZoneAlarm Pro quarantines (.vbs, for example). To find the values and keys to delete:

1) Click on HKEY_CLASSES_ROOT.
2) Press F3.
3) Type "zamailsafe" in the search field (no quotes).
4) Press F3 to find the next value. An example of the value you will see (on the right-hand side of the window) would be: ZAMailSafeExt: REG_SZ: {renamed extension -- zl9, for example)
5) Delete the value. Press "OK" at the prompt.
6) Repeat until there are no more values like the example above. ZoneAlarm Pro quarantines 37 extensions by default. However, any additional extentions you may have chosen to quarantine will also be listed in the registry.

There is also a registry key for the extension of every attachment renamed by ZoneAlarm Pro. The names of the keys will range from .zl0 to .zly. If you wish, you can follow the instructions above to find the values associated with these keys. Delete the entire key which contains these values.

For ZoneAlarm (not Pro), The following keys can be removed:

- Key: HKEY_CLASSES_ROOT\zl0
- Key: HKEY_CLASSES_ROOT\ZAMailSafe

REBOOT

 

i will try to but cant find zone alarm files
i have uninstall that program i gues wrong way will do my best in serching for the files on my laptop
thanks

 

i can't its impossible i'm not that smart i guees
there is no icon for zone alarm
the only tink i found was empty files which i cant delete
i will have to ask somebody to do it for me

 

i had to uninstal my ez firewall
then install zone alarm
uninstal zone alarm
instal ez firewall
and its working
i'm so happy - i can do it!

 

So, I take it things are working better now.

 

thanks for all your help its working fine now

 

Good deal. Come back if there is anything else we here at MG can help you with.