Help me!!!. Please help me fix bug Expression Language Injection in Portal

hi all,
I'm trying to fix bug Expression Language Injection vulnerabilities on oracleas portal, error scanning tool using Acunetix Web Vulnerability Scanner ver 8.0 build 20120209
I tried to include in the portlet filters special characters to detect signs of attack websites. For example an attack details: URL encoded GET input product_id was set to ${99240+11490}
But the way I tried above fails, scan tools Acunetix identified a bug that is high
I hope to soon get the help :)
I thank very much
Jackie
E: [email protected]

hello Erik Janssen,
Thank you very much. I've tried it that way but when scanned by Acunetix Web Vulnerability Scanner tool ver 8.0 still errors appear Expression Language Injection.
I describe to you more clearly understand. For example an attack details:
URL encoded GET input product_id was set to *${99240+11490}*
* Request
GET /portal/page/portal/listpro?product_id=%24%7b99240+11490%7d
I built a special filter characters in the portlets so that if the value retrieved from the parameter contains special characters are predefined Raise Error, but still not successful bug fix.
Look forward to receiving your help. Thank you very much :)
Jackie
E: [email protected]

Similar Messages

  • Help needed in JSP Expression Language

    Hi all,
    I have been working for JSP Expression Language Sample execution since past 5 days. I am using the application server as "Jboss Server" and web server as "Tomcat".
    I have been included the jsp-api.jar file in my lib directory of application server as well as source folder's lib directory.
    When i am trying to build the source code, i am getting this build error.
    [javac] D:\eclipse\workspace\esolvProject\development\src\com\esolv\taglibs\
    web\classes\SetSupport.java:186: cannot resolve symbol
    [javac] symbol : method getExpressionEvaluator ()
    [javac] location: class javax.servlet.jsp.PageContext
    [javac] ExpressionEvaluator evaluator = pageContext.getExpressionEvaluator();
    In my jsp-api.jar , there are two classes called,
    PageContext and JspContext, Both are abstract classes.
    PageContext inherits JspContext class. JspContext class have the method getExpressionEvaluator() , returns ExpressionEvaluator.
    PageContextImpl - class . it has been called internally when we are trying to call PageContext class. In PageContextImpl class, there is one comment before, the method's definition. that is
    " Since JSP 2.0 "
    But we have the JSP 2.0 version. But it won't work.
    Please help me ont this.
    Thanks in Advance,
    Natraj

    >
    If the pblm was due to setting the classpath.
    The error should be showed for all files in the jar
    file.
    why i am getting the error for particular method ?
    it is accessing the other methods of same class
    'JspContext' . but it is not accessing that method.
    Thats my question.
    Just check that your .jar file is 2.0 compliant and that you do not have any other jars(for servlet or jsp api) in the classpath.
    Probably you have an older version of .jar file in your path. So the errors will appear only for those methods that have been added since 2.0, all other methods would compile fine.
    Please tell me the jar files to work out the
    expression language. so that i can cross check my
    list of jars.Hmmm...I dont use jboss. In tomcat the jar file name is jsp-api.jar. But it would have been the same even for jsp1.1, going by jar file names wouldnt help. Just look at your cp as if with a microscope to identify redundant jars.
    cheers,
    ram.

  • BUG:  Expression Language not supported (JDeveloper 10.1.3.0.4(SU1))

    Hi!
    I have the following code in a jspx page:
    <c:if test="${!empty bean.genericErrorMessages}">
    <h:outputText styleClass="texto_red"
    value="#{bean.genericErrorMessages}"
    id="applicationErrorMessages" escape="false"/>
    </c:if>
    All code compile well, but when i run the jspx page the following exception occur.
    The problem is that in JDeveloper Early Access 3 the problem doesn't occur.
    But in the Jdeveloper version 10.1.3.0.4(SU1) the exception occur.
    I'm running JDeveloper in a Windows XP SP2, JSF 1.1_01 and JSTL 1.0
    Does anyone know a solution to this problem? Tanks.
    The Exception:
    Error: Expression Language not supported in compile time attribute test
         at oracle.jsp.parse.JspUtils.hasELWithCreation(JspUtils.java:1248)
         at oracle.jsp.parse.JspUtils.processELAttribute(JspUtils.java:1274)
         at oracle.jsp.parse.OpenJspTagHandler.processAttributeValue(OpenJspTagHandler.java:331)
         at oracle.jsp.parse.JspParseTag.parseXMLSrc(JspParseTag.java:1368)
         at oracle.jsp.parse.JspParseTag.parse(JspParseTag.java:1413)
         at oracle.jsp.parse.OpenJspTagHandler.parse(OpenJspTagHandler.java:802)
         at oracle.jsp.parse.JspParseTag.genXMLSrcTag(JspParseTag.java:867)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcNextTag(JspParseTag.java:745)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcBody(JspParseTag.java:1121)
         at oracle.jsp.parse.OpenJspTagHandler.parseXMLSrcBody(OpenJspTagHandler.java:739)
         at oracle.jsp.parse.JspParseTag.parseXMLSrc(JspParseTag.java:1375)
         at oracle.jsp.parse.JspParseTag.parse(JspParseTag.java:1413)
         at oracle.jsp.parse.OpenJspTagHandler.parse(OpenJspTagHandler.java:802)
         at oracle.jsp.parse.JspParseTag.genXMLSrcTag(JspParseTag.java:867)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcNextTag(JspParseTag.java:745)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcBody(JspParseTag.java:1121)
         at oracle.jsp.parse.OpenJspTagHandler.parseXMLSrcBody(OpenJspTagHandler.java:739)
         at oracle.jsp.parse.JspParseTag.parseXMLSrc(JspParseTag.java:1375)
         at oracle.jsp.parse.JspParseTag.parse(JspParseTag.java:1413)
         at oracle.jsp.parse.OpenJspTagHandler.parse(OpenJspTagHandler.java:802)
         at oracle.jsp.parse.JspParseTag.genXMLSrcTag(JspParseTag.java:867)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcNextTag(JspParseTag.java:745)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcBody(JspParseTag.java:1121)
         at oracle.jsp.parse.OpenJspTagHandler.parseXMLSrcBody(OpenJspTagHandler.java:739)
         at oracle.jsp.parse.JspParseTag.parseXMLSrc(JspParseTag.java:1375)
         at oracle.jsp.parse.JspParseTag.parse(JspParseTag.java:1413)
         at oracle.jsp.parse.OpenJspTagHandler.parse(OpenJspTagHandler.java:802)
         at oracle.jsp.parse.JspParseTag.genXMLSrcTag(JspParseTag.java:867)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcNextTag(JspParseTag.java:745)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcBody(JspParseTag.java:1121)
         at oracle.jsp.parse.OpenJspTagHandler.parseXMLSrcBody(OpenJspTagHandler.java:739)
         at oracle.jsp.parse.JspParseTag.parseXMLSrc(JspParseTag.java:1375)
         at oracle.jsp.parse.JspParseTag.parse(JspParseTag.java:1413)
         at oracle.jsp.parse.OpenJspTagHandler.parse(OpenJspTagHandler.java:802)
         at oracle.jsp.parse.JspParseTag.genXMLSrcTag(JspParseTag.java:867)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcNextTag(JspParseTag.java:745)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcBody(JspParseTag.java:1121)
         at oracle.jsp.parse.OpenJspTagHandler.parseXMLSrcBody(OpenJspTagHandler.java:739)
         at oracle.jsp.parse.JspParseTag.parseXMLSrc(JspParseTag.java:1375)
         at oracle.jsp.parse.JspParseTag.parse(JspParseTag.java:1413)
         at oracle.jsp.parse.OpenJspTagHandler.parse(OpenJspTagHandler.java:802)
         at oracle.jsp.parse.JspParseTag.genXMLSrcTag(JspParseTag.java:867)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcNextTag(JspParseTag.java:745)
         at oracle.jsp.parse.JspParseTag.parseXMLSrcBody(JspParseTag.java:1121)
         at oracle.jsp.parse.JspParseTag.parseXMLSrc(JspParseTag.java:1375)
         at oracle.jsp.parse.JspParseTagFile.parseXMLSrc(JspParseTagFile.java:296)
         at oracle.jsp.parse.JspParseTagFile.parse(JspParseTagFile.java:211)
         at oracle.jsp.parse.OracleJsp2Java.transform(OracleJsp2Java.java:403)
         at oracle.jsp.runtimev2.JspPageCompiler.attemptCompilePage(JspPageCompiler.java:558)
         at oracle.jsp.runtimev2.JspPageCompiler.compilePage(JspPageCompiler.java:348)
         at oracle.jsp.runtimev2.JspPageInfo.compileAndLoad(JspPageInfo.java:610)
         at oracle.jsp.runtimev2.JspPageTable.compileAndServe(JspPageTable.java:634)
         at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:370)
         at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:478)
         at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:401)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
         at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:719)
         at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:376)
         at com.evermind.server.http.ServletRequestDispatcher.unprivileged_forward(ServletRequestDispatcher.java:298)
         at com.evermind.server.http.ServletRequestDispatcher.access$100(ServletRequestDispatcher.java:42)
         at com.evermind.server.http.ServletRequestDispatcher$2.oc4jRun(ServletRequestDispatcher.java:205)
         at oracle.oc4j.security.OC4JSecurity.doPrivileged(OC4JSecurity.java:283)
         at com.evermind.server.http.ServletRequestDispatcher.forward(ServletRequestDispatcher.java:209)
         at com.sun.faces.context.ExternalContextImpl.dispatch(ExternalContextImpl.java:322)
         at com.sun.faces.application.ViewHandlerImpl.renderView(ViewHandlerImpl.java:130)
         at org.apache.shale.faces.ShaleViewHandler.renderView(ShaleViewHandler.java:143)
         at com.sun.faces.lifecycle.RenderResponsePhase.execute(RenderResponsePhase.java:87)
         at com.sun.faces.lifecycle.LifecycleImpl.phase(LifecycleImpl.java:200)
         at com.sun.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:117)
         at javax.faces.webapp.FacesServlet.service(FacesServlet.java:198)
         at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
         at org.apache.myfaces.component.html.util.ExtensionsFilter.doFilter(ExtensionsFilter.java:122)
         at com.evermind.server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:15)
         at pt.ivv.commonbusiness.presentation.servlets.filter.HibernateFilter.doFilter(HibernateFilter.java:68)
         at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:627)
         at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:376)
         at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:870)
         at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:451)
         at com.evermind.server.http.HttpRequestHandler.serveOneRequest(HttpRequestHandler.java:218)
         at com.evermind.server.http.HttpRequestHandler.run(HttpRequestHandler.java:119)
         at com.evermind.server.http.HttpRequestHandler.run(HttpRequestHandler.java:112)
         at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
         at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
         at java.lang.Thread.run(Thread.java:534)

    Hello,
    You should not try to mix JSP and JSF EL prior to JSF 1.2 and JSP 2.1, the result is inconsistent most of the time.
    To fix your current issue though, I suggest you use the rendered attribute instead of a <c:if>, so would be:
    <h:outputText styleClass="texto_red"
    value="#{bean.genericErrorMessages}"
    id="applicationErrorMessages" escape="false" rendered="#{!empty bean.genericErrorMessages}"/>Regards,
    Simon Lessard

  • Hey can anyone help me fixing bug in sending mail auth from gmail account

    hi guys,
    when i'm trying to send mail a exception being raised at transport.send()** which is saying Authentication required though i'm provididng authentication from gmail server . Heres my code
    private static final String SMTP_HOST_NAME="smtp.gmail.com";
    private static final String SMTP_PORT="465";
    private static final String emailFromAddress="[email protected]";
    private static final String SSL_FACTORY="javax.net.ssl.SSLSocketFactory";
    public static void main(String []args){
    Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
    Properties props=new Properties();
    props.put("mail.smtp.host",SMTP_HOST_NAME);
    props.put("mail.smtp.auth",true);
    props.put("mail.smtp.port",SMTP_PORT);
    props.put("mail.smtp.socketFactory.port",SMTP_PORT);
    props.put("mail.smtp.socketFactory.class",SSL_FACTORY);
    props.put("mail.smtp.socketFactory.fallback",false);
    try{
    Session session=Session.getDefaultInstance(props, new javax.mail.Authenticator()
    {protected PasswordAuthentication getPasswordAuthentication(){
                    return new PasswordAuthentication("moulichandr","XXXXXXX");
    Message msg=new MimeMessage(session);
    msg.setFrom(new InternetAddress("[email protected]"));
    msg.setRecipient(Message.RecipientType.TO,
    new InternetAddress("[email protected]"));
    msg.setSubject("test");
    msg.setText("vtest mail");
    Transport.send(msg);
    catch(Exception e){
    System.out.println("error");
    e.printStackTrace();
    and exception is
    com.sun.mail.smtp.SMTPSendFailedException: 530-5.5.1 Authentication Required. Learn more at
    530 5.5.1 http://mail.google.com/support/bin/answer.py?answer=14257 i9sm6409364tid.36
    at com.sun.mail.smtp.SMTPTransport.issueSendCommand(SMTPTransport.java:1515)
    at com.sun.mail.smtp.SMTPTransport.mailFrom(SMTPTransport.java:1054)
    at com.sun.mail.smtp.SMTPTransport.sendMessage(SMTPTransport.java:634)
    at javax.mail.Transport.send0(Transport.java:189)
    at javax.mail.Transport.send(Transport.java:118)
    please help
    i'm using netbeans6.1 with glassfishv2

    If you turn on session debugging, you'll get a clue as to what you're
    doing wrong, but I'll save you the trouble. Your error is here:
    props.put("mail.smtp.auth",true);That should be:
    props.put("mail.smtp.auth", "true");
    BTW, you don't need all that socket factory stuff. See the JavaMail FAQ for a
    simpler approach.

  • Need Help on Express Language

    Can Anybody please help me out how express language works and if possible with examples.
    Thanks for your help.
    Gajendra Nagapurkar
    [email protected]

    the reference guide has a full tutorial on the language. if you know xml and any programming language, you should have no trouble learning it.
    Dana Reed
    AegisUSA
    Denver, Co
    773.412.3782

  • Expression language

    Hi,
    I need some help on clarifying the expression language. I have this code
    <h:outputText value="variable"/>I want to replace the variable with a value from the database. How can I do this using the expression language? Or do I need to use the JSP scriplet and call a bean function?
    clarenceloh

    Basically:<h:outputText value="#{myBean.variable}" />MyBeanprivate String variable; // + getter + setter
        loadVariable(); // Can also use constructor or static block for this.
    private void loadVariable() {
        variable = getVariableFromDatabaseSomehow();
    }

  • Need help on fixing this bug

    Hello!
    I have my cod which needs some bug fixing. This is a drag and drop application where the user will drap the correct answer on corresponding targets. My problem here is, when one target is already occupied by an object i can still drop another object there, which shouldn't. can you please help me fix this?
    thanks in advance!
    Sincerely.
    Milo
    Here's my code:
    var startX: Number;
    var startY: Number;
    var correct: Number = 0;
    var attempt: Number = 0;
    var currentlyDragged:MovieClip;
    // collection of objects stored in array
    // so that you can reference them programmatically
    var objects:Array = [at1, in1, in2, in3, in4, in5, in6, in7, in8, on1, on2];
    activateObjects();
    // assigns listeners and other functionality to the objects in objects array
    function activateObjects():void {
         for each(var mc:MovieClip in objects) {
              mc.addEventListener(MouseEvent.MOUSE_DOWN, pickObject);
              mc.buttonMode = true;
              // assign drop targets based on names
              switch(String(mc.name).substring(0, 2)) {
                   case "at":
                        mc.dropTargets = [targetAT1];
                   break;
                   case "in":
                        mc.dropTargets = [targetIN1, targetIN2, targetIN3, targetIN4, targetIN5, targetIN6, targetIN7, targetIN8];
                   break;
                   case "on":
                        mc.dropTargets = [targetON1, targetON2];
                   break;
    function pickObject(e:MouseEvent):void {
         currentlyDragged = MovieClip(e.currentTarget);
         currentlyDragged.startDrag();
         startX = currentlyDragged.x;
         startY = currentlyDragged.y;
         stage.addEventListener(MouseEvent.MOUSE_UP, dropObject);
    function dropObject(e:MouseEvent):void {
         stage.removeEventListener(MouseEvent.MOUSE_UP, dropObject);
         stopDrag();
         var droppedOn:MovieClip;
         if (currentlyDragged.dropTarget) {
              // loop through targets belonging to the currently dragged clip
              for each(var mc:MovieClip in currentlyDragged.dropTargets) {
                   if (currentlyDragged.hitTestObject(mc)) {
                        // get the target
                        droppedOn = mc;
                        currentlyDragged.removeEventListener(MouseEvent.MOUSE_DOWN, pickObject);
                        currentlyDragged.buttonMode = false;
                        currentlyDragged.x = droppedOn.x;
                        currentlyDragged.y = droppedOn.y;
                        correct++;
                        correctCounter.text = String(correct);
                        // stop loop - it is not necessary to continue
                        break;
         attempt++;
         attemptCounter.text = String(attempt);
         // return to the initial position if there is no hit
         if (!droppedOn) {
            currentlyDragged.x = startX;
            currentlyDragged.y = startY;
         if (correct == objects.length) {
              var congrats:CongratsMC = new CongratsMC();
              // place i in the middle of the screen
              congrats.x = (stage.stageWidth - congrats.width) * .5;
              congrats.y = (stage.stageHeight - congrats.height) * .5;
              addChild(congrats);

    Try the code below.
    Also, use int instead of Number whenever possible - it is smaller and faster.
    import flash.display.MovieClip;
    import flash.display.Sprite;
    var startX:Number;
    var startY:Number;
    var correct:int = 0;
    var attempt:int = 0;
    var currentlyDragged:MovieClip;
    // collection of objects stored in array
    // so that you can reference them programmatically
    var objects:Array = [at1, in1, in2, in3, in4, in5, in6, in7, in8, on1, on2];
    var congrats = new CongratsMC();
    congrats.addEventListener("close", closeCongrats);
    activateObjects();
    // assigns listeners and other functionality to the objects in objects array
    function activateObjects():void {
         for each(var mc:MovieClip in objects) {
              mc.addEventListener(MouseEvent.MOUSE_DOWN, pickObject);
              mc.buttonMode = true;
              // assign drop targets based on names
              switch(String(mc.name).substring(0, 2)) {
                   case "at":
                        mc.dropTargets = [targetAT1];
                   break;
                   case "in":
                        mc.dropTargets = [targetIN1, targetIN2, targetIN3, targetIN4, targetIN5, targetIN6, targetIN7, targetIN8];
                   break;
                   case "on":
                        mc.dropTargets = [targetON1, targetON2];
                   break;
    function pickObject(e:MouseEvent):void {
         currentlyDragged = MovieClip(e.currentTarget);
         currentlyDragged.startDrag();
         startX = currentlyDragged.x;
         startY = currentlyDragged.y;
         stage.addEventListener(MouseEvent.MOUSE_UP, dropObject);
    function dropObject(e:MouseEvent):void {
         stage.removeEventListener(MouseEvent.MOUSE_UP, dropObject);
         stopDrag();
         var droppedOn:MovieClip;
         correctCounter.text = String(correct);
         if (currentlyDragged.dropTarget) {
              // loop through targets belonging to the currently dragged clip
              for each(var mc:MovieClip in currentlyDragged.dropTargets) {
                   if (currentlyDragged.hitTestObject(mc)&& mc.notUsed) {
                        // get the target
                        droppedOn = mc;
                        mc.notUsed = false;
                        currentlyDragged.removeEventListener(MouseEvent.MOUSE_DOWN, pickObject);
                        currentlyDragged.buttonMode = false;
                        currentlyDragged.x = droppedOn.x;
                        currentlyDragged.y = droppedOn.y;
                        correct++;
                        correctCounter.text = String(correct);
                        removeTarget(droppedOn);
                        // stop loop - it is not necessary to continue
                        break;
         attempt++;
         attemptCounter.text = String(attempt);
         // return to the initial position if there is no hit
         if (!droppedOn) {
            currentlyDragged.x = startX;
            currentlyDragged.y = startY;
         if (correct == objects.length) {
              // place i in the middle of the screen
              congrats.x = (stage.stageWidth - congrats.width) * .5;
              congrats.y = (stage.stageHeight - congrats.height) * .5;
              addChild(congrats);
    function removeTarget(target:Sprite):void {
         var i:int = 0;
         for each(var mc:MovieClip in objects) {
              for (i = 0; i < mc.dropTargets.length; i++) {
                   if (mc.dropTargets[i] == target) {
                        mc.dropTargets.splice(i, 1);
    function closeCongrats(e:Event):void {
         removeChild(congrats);

  • Hello, i restored and updated my iphone 4 to the latest version of 5.1.1 and after that when i connect my mobile to i tunes all i see is a big rectangle and a apple logo on left and a small lock on right side please help me fix this problem.

    hello,
    i restored and updated my iphone 4 to the latest version of 5.1.1 and after that when i connect my mobile to i tunes all i see is a big rectangle and a apple logo on left and a small lock on right side please help me fix this problem.

    I sloved this issue by resting my phone from settings>general>reset>reset all settings...the problem will be fixed

  • I am having a problem with pop pups and small windows with ads constantly opening up on my safari?? Thought that macs didn't get virus? this looks like one- any experts around? please help me fix it with your instructions? really don't know what to do...

    Hi everyone,
    I am having a problem with my Mac OS X 10.7.5 mac book air , there are constant pop pups and small windows with ads blinking constantly opening up on my safari in front of everything?? it is constantly interupting me and makes me mistakingly click on it then another new windows open behind the one im using..
    I am not too sure if thats a virus or trojan.. I always thought that macs didn't get virus? this looks like one to me… any experts around? please help me fix it with your instructions? really don't know what to do... thanks

    Those are not viruses. You have probably installed some malware:
    The Safe Mac » Adware Removal Guide
    Helpful Links Regarding Malware Protection
    An excellent link to read is Tom Reed's Mac Malware Guide.
    Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
    See these Apple articles:
              Mac OS X Snow Leopard and malware detection
              OS X Lion- Protect your Mac from malware
              OS X Mountain Lion- Protect your Mac from malware
              About file quarantine in OS X
    If you require anti-virus protection Thomas Reed recommends using Dr.Web Light from the App Store. It's free, and since it's from the App Store, it won't destabilize the system. If you prefer one of the better known commercial products, then Thomas recommends using Sophos.(Thank you to Thomas Reed for these recommendations.) If you already use Sophos, then be aware of this if you are using Mavericks: OS X Mavericks- Sophos Anti-Virus on-access scanner versions 8.0 - 9.1 may cause unexpected restarts
    From user Joe Bailey comes this equally useful advice:
    The facts are:
    1. There is no anti-malware software that can detect 100% of the malware out there.
    2. There is no anti-malware that can detect anything targeting the Mac because there
         is no Mac malware in the wild, and therefore, no "signatures" to detect.
    3. The very best way to prevent the most attacks is for you as the user to be aware that
         the most successful malware attacks rely on very sophisticated social engineering
         techniques preying on human avarice, ****, and fear.
    4. Internet popups saying the FBI, NSA, Microsoft, your ISP has detected malware on
        your computer is intended to entice you to install their malware thinking it is a
        protection against malware.
    5. Some of the anti-malware products on the market are worse than the malware
        from which they purport to protect you.
    6. Be cautious where you go on the internet.
    7. Only download anything from sites you know are safe.
    8. Avoid links you receive in email, always be suspicious even if you get something
        you think is from a friend, but you were not expecting.
    9. If there is any question in your mind, then assume it is malware.

  • Hi, Firefox keeps crashing, the crash signature is ProcessBoundaryCells. I tried searching Mozilla, but there are no supporting articles. If anyone can please help me fix this issue, that would be great. Thanks

    Hi, Firefox on my desktop keeps crashing at just random moments. Sometimes not very often at all, but other times it can happen a few times within an hour.
    My Desktop Window Manager also crashes regularly and the dialogue box always pops up saying its stopped working. However, this doesn't seem to effect anything.
    It could be realated though, as I just had this desktop built a few weeks ago and a few times it's crashed as well as programs.
    If anyone can help me fix this issue with Firefox, that would be great. Thanks in advance.

    Hi,
    I updated the Flash plugin, but I still keep getting crashes.
    I will try to disable the hardware acceleration in the Flash Player as you recommended and hopefully this will work.
    Although the last crash report I got has a different problem then before,
    https://crash-stats.mozilla.com/report/index/6c5d8c66-6789-4b52-94e4-61cdf2110530
    Signature: BuildArgArray
    If you can please offer any more advice that would be great, thanks.

  • My safari keeps closing unexpectedly and when it does it tells me that it quite while using the .GameHouseBeachParty.so plugin. I have no idea what this means! Can someone please help me fix this?

    My safari keeps closing unexpectedly and when it does it tells me that it quite while using the .GameHouseBeachParty.so plugin. I have no idea what this means! Can someone please help me fix this?

    You have the Flashback trojan.
    Check out the replies in this thread for what to do;
    https://discussions.apple.com/message/18114958#18114958

  • I have a problem with my iphone 4. My 3G always stays activated but I lose my network signal. The bars all get lost and I'm not able to receive / send sms, mms or phone calls. Could you guys please help me fix this problem? Ios 5.1.1

    I have a problem with my iphone 4. My 3G always stays activated but I lose my network signal. The bars all get lost and I'm not able to receive / send sms, mms or phone calls. Could you guys please help me fix this problem? Ios 5.1.1

    I haven't gotten a new sim card because the problem has been presenting itself in various cards not only mine. So far, all I've done is reset my network settings.
    Last night, I turned off the 3G tab and it had all the signal bars. Today, I did the network reset and it's working apparently. But like I said before, previously the bars just disappear and the iphone only has the 3G activated.

  • Help!! I just updated my iPad 2 into IOS 5.1.1.. When it finished updating, I can't open all of my games. Please help me fix this. :( thank you.

    Help!! I just updated my iPad 2 into IOS 5.1.1.. When it finished updating, I can't open all of my games. Please help me fix this. :( thank you.

    You are most welcome

  • I have updated my Macbook Pro from 10.7.5 to 10.9.1 and it keeps on restarting after upgrade. Please help me fix this issue.

    Hi All,
    I have updated the Macbook Pro from 10.7.5 to 10.9.1 today and once it is done I restarted the system and it keeps on crashing/restarting the system every 2 min.
    I have found the below backtrace. Please help me fix this issue.
    Anonymous UUID:  
    C72C8841-51A0-BB21-689C-2AB204820087
    Mon Dec 30 23:57:23 2013
    panic(cpu 0 caller 0xffffff801da5260f): "a freed zone element has been modified: expected 0xdeadbeefdeadbeef but found 0, bits changed 0xdeadbeefdeadbeef, at offset 8 of 128 in zone: kalloc.128"@/SourceCache/xnu/xnu-2422.1.72/osfmk/kern/zalloc.c:461
    Backtrace (CPU 0), Frame : Return Address
    0xffffff8096bf3690 : 0xffffff801da22f69
    0xffffff8096bf3710 : 0xffffff801da5260f
    0xffffff8096bf3770 : 0xffffff801da51d09
    0xffffff8096bf3870 : 0xffffff801da2aa2f
    0xffffff8096bf38a0 : 0xffffff801dde080d
    0xffffff8096bf38e0 : 0xffffff7f9fcada11
    0xffffff8096bf3930 : 0xffffff7f9fcae16e
    0xffffff8096bf39a0 : 0xffffff7f9fcae523
    0xffffff8096bf39d0 : 0xffffff801dc13438
    0xffffff8096bf3a00 : 0xffffff801dd83378
    0xffffff8096bf3a70 : 0xffffff801dbfd1ae
    0xffffff8096bf3ae0 : 0xffffff801dbf437a
    0xffffff8096bf3b80 : 0xffffff801dbe5f15
    0xffffff8096bf3c30 : 0xffffff801dbe67d2
    0xffffff8096bf3f50 : 0xffffff801de3de23
    0xffffff8096bf3fb0 : 0xffffff801daf3e06
    Kernel Extensions in backtrace:
    com.apple.AppleFSCompression.AppleFSCompressionTypeZlib(1.0d1)[E163B7AE-F6E5-328 6-B827-66DB3FE3DB7B]@0xffffff7f9fcac000->0xffffff7f9fcaffff
    BSD process name corresponding to current thread: applet
    Mac OS version:
    13B42
    Kernel version:
    Darwin Kernel Version 13.0.0: Thu Sep 19 22:22:27 PDT 2013; root:xnu-2422.1.72~6/RELEASE_X86_64
    Kernel UUID: 1D9369E3-D0A5-31B6-8D16-BFFBBB390393
    Kernel slide:
    0x000000001d800000
    Kernel text base: 0xffffff801da00000
    System model name: MacBookPro7,1 (Mac-F222BEC8)
    System uptime in nanoseconds: 172506613860
    last loaded kext at 107245362778: com.trendmicro.kext.KERedirect 1.0.0 (addr 0xffffff7f9ff33000, size 24576)
    loaded kexts:
    com.trendmicro.kext.KERedirect 1.0.0
    com.logmein.driver.LogMeInSoundDriver 1.0.0
    org.virtualbox.kext.VBoxUSB 3.2.6
    org.virtualbox.kext.VBoxDrv 3.2.6
    com.apple.driver.AppleHWSensor 1.9.5d0
    com.apple.driver.AppleHDAHardwareConfigDriver 2.5.3fc1
    com.apple.driver.AudioAUUC 1.60
    com.apple.driver.AGPM 100.14.11
    com.apple.driver.AppleTyMCEDriver 1.0.2d2
    com.apple.driver.AppleMikeyHIDDriver 124
    com.apple.driver.AppleHDA 2.5.3fc1
    com.apple.iokit.IOBluetoothSerialManager 4.2.0f6
    com.apple.filesystems.autofs 3.0
    com.apple.GeForceTesla 8.1.8
    com.apple.driver.AppleSMCLMU 2.0.4d1
    com.apple.iokit.IOUserEthernet 1.0.0d1
    com.apple.Dont_Steal_Mac_OS_X 7.0.0
    com.apple.driver.AppleHWAccess 1
    com.apple.driver.AppleMikeyDriver 2.5.3fc1
    com.apple.driver.ACPI_SMC_PlatformPlugin 1.0.0
    com.apple.driver.AppleMuxControl 3.4.12
    com.apple.driver.AppleBacklight 170.3.5
    com.apple.driver.AppleLPC 1.7.0
    com.apple.driver.AppleUpstreamUserClient 3.5.13
    com.apple.nvidia.NVDAStartup 8.1.8
    com.apple.driver.SMCMotionSensor 3.0.4d1
    com.apple.iokit.IOBluetoothUSBDFU 4.2.0f6
    com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.2.0f6
    com.apple.driver.AppleMCCSControl 1.1.12
    com.apple.driver.AppleUSBTCButtons 240.2
    com.apple.driver.AppleIRController 325.7
    com.apple.driver.AppleUSBTCKeyEventDriver 240.2
    com.apple.driver.AppleUSBTCKeyboard 240.2
    com.apple.driver.AppleUSBCardReader 3.3.5
    com.apple.driver.AppleFileSystemDriver 3.0.1
    com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1
    com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1
    com.apple.BootCache 35
    com.apple.iokit.SCSITaskUserClient 3.6.0
    com.apple.driver.XsanFilter 404
    com.apple.iokit.IOAHCIBlockStorage 2.4.0
    com.apple.iokit.AppleBCM5701Ethernet 3.6.9b9
    com.apple.driver.AirPort.Brcm4331 700.20.22
    com.apple.driver.AppleAHCIPort 2.9.5
    com.apple.driver.AppleFWOHCI 4.9.9
    com.apple.driver.AppleUSBHub 650.4.4
    com.apple.driver.AppleUSBEHCI 650.4.1
    com.apple.driver.AppleUSBOHCI 650.4.1
    com.apple.driver.AppleSmartBatteryManager 161.0.0
    com.apple.driver.AppleRTC 2.0
    com.apple.driver.AppleHPET 1.8
    com.apple.driver.AppleACPIButtons 2.0
    com.apple.driver.AppleSMBIOS 2.0
    com.apple.driver.AppleACPIEC 2.0
    com.apple.driver.AppleAPIC 1.7
    com.apple.driver.AppleIntelCPUPowerManagementClient 216.0.0
    com.apple.nke.applicationfirewall 153
    com.apple.security.quarantine 3
    com.apple.driver.AppleIntelCPUPowerManagement 216.0.0
    com.apple.AppleGraphicsDeviceControl 3.4.12
    com.apple.driver.DspFuncLib 2.5.3fc1
    com.apple.vecLib.kext 1.0.0
    com.apple.iokit.IOSerialFamily 10.0.7
    com.apple.kext.triggers 1.0
    com.apple.nvidia.classic.NVDANV50HalTesla 8.1.8
    com.apple.iokit.IOAudioFamily 1.9.4fc11
    com.apple.kext.OSvKernDSPLib 1.14
    com.apple.iokit.IOSurface 91
    com.apple.iokit.IOBluetoothFamily 4.2.0f6
    com.apple.driver.IOPlatformPluginLegacy 1.0.0
    com.apple.driver.AppleGraphicsControl 3.4.12
    com.apple.driver.AppleBacklightExpert 1.0.4
    com.apple.driver.IOPlatformPluginFamily 5.5.1d27
    com.apple.nvidia.classic.NVDAResmanTesla 8.1.8
    com.apple.iokit.IONDRVSupport 2.3.6
    com.apple.driver.AppleSMC 3.1.6d1
    com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.2.0f6
    com.apple.iokit.IOFireWireIP 2.2.5
    com.apple.driver.AppleHDAController 2.5.3fc1
    com.apple.iokit.IOHDAFamily 2.5.3fc1
    com.apple.driver.AppleSMBusPCI 1.0.12d1
    com.apple.driver.AppleSMBusController 1.0.11d1
    com.apple.iokit.IOGraphicsFamily 2.3.6
    com.apple.driver.AppleUSBMultitouch 240.6
    com.apple.iokit.IOUSBHIDDriver 650.4.4
    com.apple.iokit.IOSCSIBlockCommandsDevice 3.6.0
    com.apple.iokit.IOUSBMassStorageClass 3.6.0
    com.apple.driver.AppleUSBMergeNub 650.4.0
    com.apple.driver.AppleUSBComposite 650.4.0
    com.apple.iokit.IOSCSIMultimediaCommandsDevice 3.6.0
    com.apple.iokit.IOBDStorageFamily 1.7
    com.apple.iokit.IODVDStorageFamily 1.7.1
    com.apple.iokit.IOCDStorageFamily 1.7.1
    com.apple.iokit.IOAHCISerialATAPI 2.6.0
    com.apple.iokit.IOSCSIArchitectureModelFamily 3.6.0
    com.apple.iokit.IOEthernetAVBController 1.0.3b3
    com.apple.driver.mDNSOffloadUserClient 1.0.1b4
    com.apple.iokit.IO80211Family 600.34
    com.apple.iokit.IONetworkingFamily 3.2
    com.apple.iokit.IOAHCIFamily 2.6.0
    com.apple.iokit.IOFireWireFamily 4.5.5
    com.apple.driver.AppleMCP89RootPortPM 1.11
    com.apple.iokit.IOUSBUserClient 650.4.4
    com.apple.driver.AppleEFINVRAM 2.0
    com.apple.driver.AppleEFIRuntime 2.0
    com.apple.iokit.IOUSBFamily 650.4.4
    com.apple.driver.NVSMU 2.2.9
    com.apple.iokit.IOHIDFamily 2.0.0
    com.apple.iokit.IOSMBusFamily 1.1
    com.apple.security.sandbox 278.10
    com.apple.kext.AppleMatch 1.0.0d1
    com.apple.security.TMSafetyNet 7
    com.apple.driver.AppleKeyStore 2
    com.apple.driver.DiskImages 371.1
    com.apple.iokit.IOStorageFamily 1.9
    com.apple.iokit.IOReportFamily 21
    com.apple.driver.AppleFDEKeyStore 28.30
    com.apple.driver.AppleACPIPlatform 2.0
    com.apple.iokit.IOPCIFamily 2.8
    com.apple.iokit.IOACPIFamily 1.4
    com.apple.kec.corecrypto 1.0
    com.apple.kec.pthread 1
    Unable to gather system configuration information.Model: MacBookPro7,1, BootROM MBP71.0039.B0E, 2 processors, Intel Core 2 Duo, 2.4 GHz, 4 GB, SMC 1.62f7
    Graphics: NVIDIA GeForce 320M, NVIDIA GeForce 320M, PCI, 256 MB
    Memory Module: BANK 0/DIMM0, 2 GB, DDR3, 1067 MHz, 0x80CE, 0x4D34373142353637334648302D4346382020
    Memory Module: BANK 1/DIMM0, 2 GB, DDR3, 1067 MHz, 0x80CE, 0x4D34373142353637334648302D4346382020
    AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x8D), Broadcom BCM43xx 1.0 (5.106.98.100.22)
    Bluetooth: Version 4.2.0f6 12982, 3 services, 15 devices, 0 incoming serial ports
    Network Service: Wi-Fi, AirPort, en1
    Serial ATA Device: TOSHIBA MK2555GSXF, 250.06 GB
    Serial ATA Device: HL-DT-ST DVDRW  GS23N
    USB Device: Built-in iSight
    USB Device: Internal Memory Card Reader
    USB Device: BRCM2046 Hub
    USB Device: Bluetooth USB Host Controller
    USB Device: IR Receiver
    USB Device: Apple Internal Keyboard / Trackpad
    Thunderbolt Bus:
    Please help me fix this issue.
    Thank you,
    Nishanth

    Please read this whole message before doing anything.
    This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
    The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you boot, and again when you log in.
    Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to boot and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.
    The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Test while in safe mode. Same problem?
    After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test.

  • Macbook Pro Mid 2009 Processor 2.26 GHz Intel Core 2 Duo, Memory 2 GB 1067 MHz DDR3. iOS 10.10.1 (14B25). My mac is running slow and have ran EtreCheck. Please help me fix my mac. Thanks!

    Macbook Pro Mid 2009 Processor 2.26 GHz Intel Core 2 Duo, Memory 2 GB 1067 MHz DDR3. iOS 10.10.1 (14B25). My mac is running slow and have ran EtreCheck. Please help me fix my mac. Thanks!
    Problem description:
    My mac has been very slow lately. Any suggestions?
    EtreCheck version: 2.1.2 (105)
    Report generated December 14, 2014 at 8:15:29 PM PST
    Hardware Information: ℹ️
      MacBook Pro (13-inch, Mid 2009) (Verified)
      MacBook Pro - model: MacBookPro5,5
      1 2.26 GHz Intel Core 2 Duo CPU: 2-core
      2 GB RAM Upgradeable
      BANK 0/DIMM0
      1 GB DDR3 1067 MHz ok
      BANK 1/DIMM0
      1 GB DDR3 1067 MHz ok
      Bluetooth: Old - Handoff/Airdrop2 not supported
      Wireless:  en1: 802.11 a/b/g/n
    Video Information: ℹ️
      NVIDIA GeForce 9400M - VRAM: 256 MB
      Color LCD 1280 x 800
    System Software: ℹ️
      OS X 10.10.1 (14B25) - Uptime: 0:54:52
    Disk Information: ℹ️
      Hitachi HTS545016B9SA02 disk0 : (160.04 GB)
      S.M.A.R.T. Status: Verified
      EFI (disk0s1) <not mounted> : 210 MB
      MacHD (disk0s2) / : 159.05 GB (49.15 GB free)
      Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB
      HL-DT-ST DVDRW  GS23N 
    USB Information: ℹ️
      Apple Inc. Built-in iSight
      Apple Internal Memory Card Reader
      Apple Inc. BRCM2046 Hub
      Apple Inc. Bluetooth USB Host Controller
      Apple Inc. Apple Internal Keyboard / Trackpad
      Apple Computer, Inc. IR Receiver
    Gatekeeper: ℹ️
      Mac App Store and identified developers
    Startup Items: ℹ️
      DVD3EnablerService: Path: /Library/StartupItems/DVD3EnablerService
      Startup items are obsolete in OS X Yosemite
    Problem System Launch Agents: ℹ️
      [failed] com.apple.AirPlayUIAgent.plist [Details]
      [failed] com.apple.CallHistoryPluginHelper.plist
      [failed] com.apple.coreservices.appleid.authentication.plist [Details]
      [failed] com.apple.icloud.fmfd.plist [Details]
      [failed] com.apple.secd.plist [Details]
      [failed] com.apple.security.cloudkeychainproxy.plist [Details]
      [failed] com.apple.telephonyutilities.callservicesd.plist [Details]
    Problem System Launch Daemons: ℹ️
      [failed] com.apple.ctkd.plist [Details]
      [failed] com.apple.icloud.findmydeviced.plist [Details]
      [failed] com.apple.ifdreader.plist
      [failed] com.apple.nehelper.plist [Details]
      [failed] com.apple.softwareupdate_download_service.plist [Details]
      [failed] com.apple.wdhelper.plist [Details]
      [failed] com.apple.xpc.smd.plist [Details]
    Launch Agents: ℹ️
      [loaded] com.google.keystone.agent.plist [Support]
      [invalid?] com.oracle.java.Java-Updater.plist [Support]
      [not loaded] com.teamviewer.teamviewer.plist [Support]
      [not loaded] com.teamviewer.teamviewer_desktop.plist [Support]
    Launch Daemons: ℹ️
      [running] com.adobe.ARM.[...].plist [Support]
      [loaded] com.adobe.fpsaud.plist [Support]
      [loaded] com.google.keystone.daemon.plist [Support]
      [invalid?] com.oracle.java.Helper-Tool.plist [Support]
      [not loaded] com.teamviewer.teamviewer_service.plist [Support]
    User Launch Agents: ℹ️
      [loaded] com.adobe.ARM.[...].plist [Support]
      [invalid?] com.nds.pcshow.plist [Support]
      [invalid?] com.nds.pcshow.uninstall.plist [Support]
    User Login Items: ℹ️
      None
    Internet Plug-ins: ℹ️
      WidevineMediaOptimizer: Version: 6.0.0.12757 - SDK 10.7 [Support]
      FlashPlayer-10.6: Version: 16.0.0.235 - SDK 10.6 [Support]
      QuickTime Plugin: Version: 7.7.3
      AdobePDFViewerNPAPI: Version: 11.0.10 - SDK 10.6 [Support]
      AdobePDFViewer: Version: 11.0.10 - SDK 10.6 [Support]
      Flash Player: Version: 16.0.0.235 - SDK 10.6 [Support]
      Default Browser: Version: 600 - SDK 10.10
      Silverlight: Version: 5.1.30514.0 - SDK 10.6 [Support]
      iPhotoPhotocast: Version: 7.0
    3rd Party Preference Panes: ℹ️
      Flash Player  [Support]
    Time Machine: ℹ️
      Mobile backups: OFF
      Auto backup: NO - Auto backup turned off
      Volumes being backed up:
      MacHD: Disk size: 159.05 GB Disk used: 109.90 GB
      Destinations:
      KINGSTON [Local]
      Total size: 30.88 GB
      Total number of backups: 0
      Oldest backup: -
      Last backup: -
      Size of backup disk: Too small
      Backup size 30.88 GB < (Disk used 109.90 GB X 3)
    Top Processes by CPU: ℹ️
          6% WindowServer
          0% AppleSpell
          0% SystemUIServer
          0% powerd
          0% Google Chrome
    Top Processes by Memory: ℹ️
      131 MB softwareupdated
      112 MB Google Chrome
      41 MB Finder
      34 MB Google Chrome Helper
      32 MB WindowServer
    Virtual Memory Information: ℹ️
      51 MB Free RAM
      587 MB Active RAM
      551 MB Inactive RAM
      350 MB Wired RAM
      10.96 GB Page-ins
      865 MB Page-outs
    Diagnostics Information: ℹ️
      Dec 14, 2014, 07:37:58 PM Install Adobe Flash Player_2014-12-14-193758_[redacted].crash
      Dec 14, 2014, 07:21:27 PM Self test - passed

    Please describe the problem in as much relevant detail as possible. The "etrecheck" fad hasn't made that step any less necessary. The usual results of posting etrecheck output on this site without a full description of the problem are very poor.
    The many "failed" warnings that etrecheck sometimes spews mean nothing. Those warnings are not a reason to reinstall the OS, or to do anything else at all. They should be ignored.
    The better your description of the problem, the better the chance of a solution.
    For example, if the computer is slow, which specific actions are slow? Is it slow all the time, or only sometimes? What changes did you make, if any, just before it became slow? Have you seen any alerts or error messages? Have you done anything to try to fix it? Most importantly, do you have a current backup of all data? If the answer to the last question is "no," back up now. Ask if you need guidance. Do nothing else until you have a backup.

Maybe you are looking for