IE7 Browser probs-Hijack this first timer

Toxteth_OGrady

Your ipconfig is OK.

:cool:

TOG

Browntoa

if you look at this guide

http://www.sunbelt-software.com/documents/sunbelt_kerio_personal_firewall_user_guide.pdf

page 7-3 shows how to allow applications full access to applications, just add the mutual points program as allowed

Browntoa

http://support.knology.net/content/kpf.cfm

Allow Single Application
Kerio can be configured to apply each filter rule to only one application. Complete the following to limit to a single application:
Difference in configuration
1. Application - Choose 'Only selected below'
Type path to application in drop down box below or click 'Browse' and locate the application you want to limit the rule to.


depsite what it shows in the picture you need to allow both incoming and outgoing traffic, so choose "both directions"

lolly1963

Technical details about the intrusion attempt:

Injector application: C:\Program Files\Internet Explorer\iexplore.exe
Description: Internet Explorer
File version: 7.00.6000.16414 (vista_gdr.070108-1520)
Product name: Windows® Internet Explorer
Product version: 7.00.6000.16414
Created: 2004/2/26, 17:22:07
Modified: 2007/1/8, 18:08:42
Accessed: 2007/3/4, 11:36:33

Target application: C:\Program Files\Outlook Express\msimn.exe
Description: Outlook Express
File version: 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
Product name: Microsoft® Windows® Operating System
Product version: 6.00.2900.2180
Created: 2003/3/3, 23:57:18
Modified: 2004/8/3, 23:56:54
Accessed: 2007/3/4, 11:37:38

Address of injection: 0x7E84DAA7
Hi and Thanks will take a look, and thanks also TOG.
The above has just happened about 4 times when i click on OE, should i be worried, or is this normal because you can see what the firewall is doing?
Sorry for being a pain guys, just extremely cautious after the last goings on....LOL!
Thanks
Lorraine

Browntoa

thats just the firewall doing it's job, you can chose to "ignore" and tick "always" take this action and it will not keep popping up

the top ones Internet Explorer , the other Outlook Express

lolly1963

Ok thanks Browntoa,
The other instructions will have to wait till after my roast pork which is shrivelling away in the oven...LOL... and i have a headache right now...hehehe
WIll come back later (no doubt she says frowning) if you dont mind with further help later on!
Many Thanks again
Lorraine

alba37

Out of interest can you tell me what a "Wareout" infection is?

Thanks

Alba

Browntoa

These are usually anti-spyware or security software applications that use either various forms of deception and/or unethical means or show a history of negligent false positives to goad the end user to make a purchase.

In some cases these applications maybe downloaded with some form of unwanted software at which point the rogue application is offered to the customer as a way to remove the unwanted software.

lolly1963

Hi again Browntoa,
I am afraid i dont understand them there instructions...hmmm.. where on that page is there something for me to type the www. address in of the site i want to allow...this seems a bix complex...i did try keeping my finger on the ctrl button but still the firewall is blocking the site, getting absolutely nothing..
sorry to keep on, but i dont want to muck anything else on that firewall as it is protecting me..;)
Cheers
Lorraine

espresso

lolly1963 wrote:

Hi again Browntoa,
I am afraid i dont understand them there instructions...hmmm.. where on that page is there something for me to type the www. address in of the site i want to allow...............

You should not have to grant permission for every website that you want to visit, just give your browser (Internet Explorer) permission to access the net as explained in post #54.