5 replies to this topic

[falklandhill78]

I am becoming increasingly frustrated by a box which pops up now and again. It is headed Internet Explorer and has a picture of a padlock with key and a question mark, and the words "Scripts are usually safe. Do you want to allow scripts to run?" It occassionally pops up online and always if I try to send a message with Yahoo Messenger. It pops up if I try to use Windows Help or Internet Explorer Help and it pops up when I use Sage. If I am on the internet, it always pops up if the page I am searching for is unavailable. There are probably other occassions it appears. Is there anything I can do to be rid of it? The PC runs Windows 2000 Professional. My Internet settings are set at medium

[pacman123]

Hi have you tried this............

http://www.sureshots...ripterrors.html

Hope this helps.......

[falklandhill78]

Thanks, but .......

Tried http://www.sureshots...ripterrors.html Internet Explorer is set how it suggests so I downloaded Bazooka. It found something called Pacerd.bundle so I followed all the steps for removal.

Still getting the same pop up box

[Doug]

When a dialog prompt says, "Scripts are usually safe. Do you want to allow scripts to run?"
How would you know?
The prompt doesn't tell you what the scripts are intended to do.

You may, like Pacman123 suggested, have your IE configured in such a way that these prompts will continue until you make the modifications that are recommended in Pacman123's linked information.
But since you tried that, and still have the (both unwanted popups? and the "scripts" message?), you may need to do some additional work to protect your operating system.

My thought (just my best guess) is that you may be experiencing a java script vulnerability that allows such exploits. Fortunately, Microsoft has made a Patch available to protect against the vulnerability.
Go here: http://v4.windowsupd.../en/default.asp
Allow Windows Update to scan for Updates that your computer may need, then download and apply them.
The first consideration in keeping your machine secure is making sure that your operating system is Up To Date.

Next, I would consider the possibility of a Malware infection.

Look specifically in the following locations for (anyname.hta or anyname.ht? and kak.htm)
If found, then you have a malware induced vulnerability that is passed via email and will continue replicating itself until you remove it.

Check these locations: (And Let us know if you find any of these)

c:\windows\kak.htm
c:\windows\system\(name).hta

kak.hta is written to either folder:
French Windows
C:\WINDOWS\Menu Démarrer\Programmes\Démarrage\kak.hta
English Windows
c:\windows\Start Menu\Programs\StartUp\

HTA's are not all bad (they are like C++ objects, but scripted for HTML. Windows uses alot of them, as do websites. But they shouldn't be found at the locations indicated above!

Since you didn't mention what security baseline (AntiVirus & AntiSpyware) you use I'm going to recommend a competent selection that are recommended for any Windows user to keep the machine as safe as possible.

First though, I recommend you download and run Stinger (A free McAfee product) which scans for and removes a limited set of bad-guys that can hurt your system and may have the added negative of interferring with your usual tools. Get it here:
http://vil.nai.com/vil/stinger/

Now take a look at this list of "security baseline" considerations.
If you have such tools already.... Update them. Reboot to SAFE Mode. Then Run the Tools.

Security Baseline Basics

Always run from a "limited user account", never browse or do general work from an account that has "adminstrative privileges"

Keep your Operating System updated with the latest critical updates.
Keep your Firewall and Scan tools updated.

Use a software firewall, like Sygate, Zone Alarm, etc. (the XP native firewall is only uni-directional)
Use a Virus Scan product for real-time protection and periodic scanning.
Use Spybot Search & Destroy ver 1.4
Use Ad-Aware SE Personal ver 1.06
Consider Microsoft AntiSpyware Beta... It's a good product and free to XP users
Consider using the Microsoft Malicious Software Removal Tool, update monthly http://www.microsoft...ve/default.mspx
Use SpywareBlaster to block a ton of known-bad internet sites
Use IE-SpyAd to block a ton of known-bad internet sites and Registry Items
Use MVPS Host File to add known-bad sites to your systems protective loop and prevent access from bad-guys.
Read up on using SpywareBlaster, IE-SpyAd, and MVPS Host File here:
http://www.spywarewa...m/uiuc/main.htm
Consider using an "alternate browser" like FireFox or Opera.... They are great and don't have the ActiveX security holes that IE has.

Here's a handy program to have onboard to clean up the junk files that always get accumulated when browsing: CleanUp 4.0
http://www.stevengould.org

Run Scan Disk maybe once every two weeks or so.
Run Defragmentor more often, maybe once a week or more if you are on your machine alot.

Please reply back with your progress and any additional questions and concerns.

Best Regards,
Doug

[falklandhill78]

1) I regularly update Windows 2) I have tried Spybot, Adaware, and Cleanup 3) Can't find any reference to kak or .hta 4) Tried Stinger and it didnt find anything Still the dreaded warning "Scripts are usually safe. Do you want to allow scripts to run?" What I didn't mention in my original post is that in "Folders Options" on the General Tab, under "Web View", if I select "Enable Web content in folders" I get the warning every time I open a folder. Selecting "Use Windows classic folders" stops the warning. I use Sophos anti-virus software which is regularly updated. Thanks for your attempt to help - it is much appreciated.

[jimix]

I had the same problem and found this web, they have a nice cookbook about the message.

Scripts are usually safe. Do you want to allow scripts to run?
http://www.maxi-pedi... scripts to run