can't delete visited page

**jscripter** · 05-25-2005, 02:41 AM

hi!
I can't delete a page I have visited on the web,
do u see something wrong in the logfile?
thanks!

Logfile of HijackThis v1.99.1
Scan saved at 11.21.29, on 25/05/2005
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP3 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\regsvc.exe
C:\Programmi\Norton AntiVirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\atiptaxx.exe
C:\Programmi\File comuni\Symantec Shared\ccApp.exe
C:\Programmi\Logitech\MouseWare\system\em_exec.exe
C:\WINNT\System32\internat.exe
C:\Programmi\Kazaa Lite K++\KazaaLite.kpp
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\ACDSee32\ACDSee32.exe
C:\Programmi\AutoCAD LT 2000i Ita\aclt.exe
C:\Documents and Settings\Administrator\Documenti\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virgilio.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmi\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Programmi\File comuni\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O14 - IERESET.INF: START_PAGE_URL=http://it.msn.com
O14 - IERESET.INF: MS_START_PAGE_URL=http://it.msn.com
O16 - DPF: {1F831FA9-42FC-11D4-95A6-0080AD30DCE1} (InstaFred Control) - file://C:\Programmi\AutoCAD LT 2000i Ita\InstFred.ocx
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (Controllo AcDc oggi) - file://C:\Programmi\AutoCAD LT 2000i Ita\AcDcToday.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Controllo AcPreview) - file://C:\Programmi\AutoCAD LT 2000i Ita\AcPreview.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{50BAE44B-FA71-4DB7-9E7B-B3099DF638A9}: NameServer = 151.99.252.0,194.243.154.62
O17 - HKLM\System\CS1\Services\Tcpip\..\{50BAE44B-FA71-4DB7-9E7B-B3099DF638A9}: NameServer = 151.99.252.0,194.243.154.62
O17 - HKLM\System\CS2\Services\Tcpip\..\{50BAE44B-FA71-4DB7-9E7B-B3099DF638A9}: NameServer = 151.99.252.0,194.243.154.62
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Servizio Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Programmi\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Programmi\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FILECO~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Center\SymWSC.exe

**jscripter** · 05-25-2005, 03:54 PM

has someone a short answer for me please?

jernelsingh · 05-25-2005, 04:01 PM

U hve deleted that page from history and cleared all the cookies
Tool-->Internet Options--->General--->from that delete files and delete cookies and clear all the history-->then go 2 settings--View file then delete it

**jgvernonco** · 05-26-2005, 07:47 AM

Hello,

I see nothing in your log which would explain this.

Try this, however,

The Temp folders should be cleaned out periodically as installation programs and hijack programs leave a lot of junk there. Download CleanUp! http://cleanup.stevengould.org/ (Alternate Link if main link don't work - http://www.greyknight17.com/spy/Cleanup.exe ) and install it. Run CleanUp! and click on CleanUp! button. When it asks you if you want to logoff, click on Yes.

**jscripter** · 05-26-2005, 02:43 PM

thank you very much,
clean up has clared 1 GB of space
in my temporary internet memory cache !

**jscripter** · 05-27-2005, 07:16 AM

I still have one problem:
Tool-->Internet Options--->General--->
here I see the adress of the homepage and also
a webpage I would like to delete but I still can't

I tried with clean up and deleting cookies and histiry and files
but the adress remains

you know how to remove it in the registry files?

thank you again

Ried · 05-27-2005, 07:26 AM

Hi,

Try another cleaner Ccleaner www.ccleaner.com After choosing which sections you would like to clean, click on the 'Issues' tab to clean registry. Be sure that box is checked to 'prompt to backup registry' in the Options>Advanced section.

**jscripter** · 05-27-2005, 01:50 PM

thank you

snub · 05-27-2005, 03:01 PM

To remove a typed URL: Click START > Run, type REGEDIT then navigate to HKEY_CURRENT_USER\Software\microsoft\Internet Explorer\Typed URL's, select the URL you want to delete and press the delete key, click YES. Be careful when editing the Registry.

05-25-2005, 02:41 AM	#1 (permalink)
jscripter I helped the forums. Join Date: Nov 2004 Posts: 61 OS: win xp	can't delete visited page hi! I can't delete a page I have visited on the web, do u see something wrong in the logfile? thanks! Logfile of HijackThis v1.99.1 Scan saved at 11.21.29, on 25/05/2005 Platform: Windows 2000 SP3 (WinNT 5.00.2195) MSIE: Internet Explorer v5.00 SP3 (5.00.2920.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\System32\svchost.exe C:\Programmi\Norton AntiVirus\navapsvc.exe C:\WINNT\system32\regsvc.exe C:\Programmi\Norton AntiVirus\SAVScan.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\WINNT\System32\atiptaxx.exe C:\Programmi\File comuni\Symantec Shared\ccApp.exe C:\Programmi\Logitech\MouseWare\system\em_exec.exe C:\WINNT\System32\internat.exe C:\Programmi\Kazaa Lite K++\KazaaLite.kpp C:\Programmi\Internet Explorer\iexplore.exe C:\Programmi\ACDSee32\ACDSee32.exe C:\Programmi\AutoCAD LT 2000i Ita\aclt.exe C:\Documents and Settings\Administrator\Documenti\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virgilio.it/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton AntiVirus\NavShExt.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmi\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Programmi\File comuni\Symantec Shared\Security Center\UsrPrmpt.exe O4 - HKCU\..\Run: [internat.exe] internat.exe O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe O14 - IERESET.INF: START_PAGE_URL=http://it.msn.com O14 - IERESET.INF: MS_START_PAGE_URL=http://it.msn.com O16 - DPF: {1F831FA9-42FC-11D4-95A6-0080AD30DCE1} (InstaFred Control) - file://C:\Programmi\AutoCAD LT 2000i Ita\InstFred.ocx O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (Controllo AcDc oggi) - file://C:\Programmi\AutoCAD LT 2000i Ita\AcDcToday.ocx O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Controllo AcPreview) - file://C:\Programmi\AutoCAD LT 2000i Ita\AcPreview.ocx O17 - HKLM\System\CCS\Services\Tcpip\..\{50BAE44B-FA71-4DB7-9E7B-B3099DF638A9}: NameServer = 151.99.252.0,194.243.154.62 O17 - HKLM\System\CS1\Services\Tcpip\..\{50BAE44B-FA71-4DB7-9E7B-B3099DF638A9}: NameServer = 151.99.252.0,194.243.154.62 O17 - HKLM\System\CS2\Services\Tcpip\..\{50BAE44B-FA71-4DB7-9E7B-B3099DF638A9}: NameServer = 151.99.252.0,194.243.154.62 O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Servizio Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Programmi\Norton AntiVirus\navapsvc.exe O23 - Service: SAVScan - Symantec Corporation - C:\Programmi\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FILECO~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Center\SymWSC.exe

05-25-2005, 04:01 PM	#3 (permalink)
jernelsingh Registered User Join Date: Nov 2004 Location: USA,Ohio Posts: 227 OS: win 2003 ,Win XP	Re U hve deleted that page from history and cleared all the cookies Tool-->Internet Options--->General--->from that delete files and delete cookies and clear all the history-->then go 2 settings--View file then delete it

05-26-2005, 07:47 AM	#4 (permalink)
jgvernonco Old Timer Join Date: Sep 2003 Location: Northern Arizona Posts: 7,958 OS: Vista Home Premium, SP 27	Hello, I see nothing in your log which would explain this. Try this, however, The Temp folders should be cleaned out periodically as installation programs and hijack programs leave a lot of junk there. Download CleanUp! http://cleanup.stevengould.org/ (Alternate Link if main link don't work - http://www.greyknight17.com/spy/Cleanup.exe ) and install it. Run CleanUp! and click on CleanUp! button. When it asks you if you want to logoff, click on Yes. __________________ Donations keep TSF moving forward. Please help. http://www.myspace.com/speedbumpthecelt

05-27-2005, 07:26 AM	#7 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 23,972 OS: WinXP and Vista	Hi, Try another cleaner Ccleaner www.ccleaner.com After choosing which sections you would like to clean, click on the 'Issues' tab to clean registry. Be sure that box is checked to 'prompt to backup registry' in the Options>Advanced section. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

05-25-2005, 03:54 PM	#2 (permalink)
jscripter I helped the forums. Join Date: Nov 2004 Posts: 61 OS: win xp	has someone a short answer for me please?

05-26-2005, 02:43 PM	#5 (permalink)
jscripter I helped the forums. Join Date: Nov 2004 Posts: 61 OS: win xp	thank you very much, clean up has clared 1 GB of space in my temporary internet memory cache !

05-27-2005, 07:16 AM	#6 (permalink)
jscripter I helped the forums. Join Date: Nov 2004 Posts: 61 OS: win xp	I still have one problem: Tool-->Internet Options--->General---> here I see the adress of the homepage and also a webpage I would like to delete but I still can't I tried with clean up and deleting cookies and histiry and files but the adress remains you know how to remove it in the registry files? thank you again

05-27-2005, 01:50 PM	#8 (permalink)
jscripter I helped the forums. Join Date: Nov 2004 Posts: 61 OS: win xp	thank you

05-27-2005, 03:01 PM	#9 (permalink)
snub Registered User Join Date: May 2005 Posts: 35 OS: Win 2000	To remove a typed URL: Click START > Run, type REGEDIT then navigate to HKEY_CURRENT_USER\Software\microsoft\Internet Explorer\Typed URL's, select the URL you want to delete and press the delete key, click YES. Be careful when editing the Registry.