SUS

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Can't install critical update I run W'95 and am notified periodiclly to chec for critical updates. Been doin this a year or two with this present system, no problems installing. In Jan got notification of "Cummulative Security Updates for Internet Explorer 6 Service pack", I chose to install it and it downloaded. But it spent some time in the "install" mode and came back with the message that instalation had failed. I tried to download again but it would not, because it was already downloaded and on the computer hard drive somewhere. I tried to install it again and every time it failed. I tried to find the downloaded file but was unable to do so with the "Find... Files and Folders" system initiated with the "START" button. My intent was to find and remove the download from the hard drive and then download again and then try to install the new download. I searched by what guresses I could make about the name, then I searched by the days date. This all failed to find the file, so I waited til the next notice which came this AM and I tried to download but it simply skipped that again, (apparently recognizing that it was alredy somewhere on the hard drive). It did try to install but failed again. My question now is obvious, "what do I try next?" thanks Melo Tag: SUS Tag: 46140
  - 2
    - Critical Update? I read of this serious security problem. The problems affected a technology in the newest versions of Windows known as "abstract syntax notation," a way to share data across different computers. Some of Microsoft's built-in security features -- such as its Kerberos cryptography system -- rely on the flawed software. I have Windows XP Home Edition. I'd like to know which one of the "Critical Updates" will patch this problem. Tag: SUS Tag: 46139
  - 3
    - Password Help I have WinXP Professional. When I turn my computer on, it tells me that my password has expired and that I must change it. I have done this several times before but this time it is rejecting my old password and name. I know that I have entered both correctly. I called Microsoft and they said they do not offer password help over the phone. I tried to do the online help thing but I don't have my serial number because I bought my computer used with Windows already on it. I need to know what to do to get around this problem. Please help! Tag: SUS Tag: 46138
  - 4
    - Glossary of Windows 2003 services I want to disable unused services in w2k3 but and need a glossary of the services to determine which I can disable. I have a copy of the w2k glossary of services but cannot find the same for w2k3. Most of the services are the same but I'm sure there must be aditional services. I must admit I haven't checked the latter yet. does anyone know where i can find such a item? thanks scott Tag: SUS Tag: 46128
  - 5
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.02.12 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: SUS Tag: 46125
  - 6
    - www.windows-info.com ... looks dangerous they send messages, under the guise of windows error. and might be screwing up the system after patch execution. anyone gonna do some thing abt there toxic sites. Tag: SUS Tag: 46117
  - 7
    - Please help: unable to remove Yahoo Search Engine history Hi, I am unable to remove search history I did with the yahoo search engine via IE. I downloaded SpyBot and remove ALL usage tracks. But this has no effect on the search history at all! How can I remove the annoying history? How to prevent it from gathering the history of my searches? I am using WindowXP. Tag: SUS Tag: 46116
  - 8
    - unsafe attachments My computer uses Windows XP and Outlook Express - any email w/ an attachment says: OE removed access to the following unsafe attachments in your mail. How can I lift this security especially from people I know? Tag: SUS Tag: 46106
  - 9
    - removal of spyware i cannot remove a program named coupon and offers i have spybot and adware6 that dont delet this program please help, Tag: SUS Tag: 46105
  - 10
    - Unwanted Pop-up Ad Anyone know how to address the following ad that keeps opening my CD drive drawer? (http://www.syspage.com/ads/homepagesai.php?id=start38) It is freaking me out. I currently have Norton's NISP 2004 and Zone Lab, nothing is working. Thanks Cold in Alaska Tag: SUS Tag: 46104
  - 11
    - problems surfing I downloaed all the latest security patches for explorer 6.0. I'm running windows 98. Now I can't access any of my secure sites. I tried adjusting all the activeX etc. choices under "internet options" but none work. Any advice on how I can reconnect with my usual sites? Thanks. Tag: SUS Tag: 46102
  - 12
    - MBSA problem? I just ran the Microsoft Baseline Security Analyzer and was informed that the scanner couldn't get access to my registry. Does anyone know if that indicates some kind of glitch. Everything seems to work ok. Thanks Tag: SUS Tag: 46098
  - 13
    - SUS management - Any Ideas? I have tried numorous failed attempts of setting up our SUS server on our local domain. It seriously does not like me. I have installed the latest version of SUS and MBSA on the server and my client machine runs the latest version of MBSA and also the "SUSadmin" utility to set up options for the SUS server In the options in SUSadmin, I have set the following options Specify the name your clients use to locate this update server: Server name: SERVER1 (our servername and this server is syncronising directly from the microsoft updates site. Our server is running small business server 2000 which supports Group policy management and all that. I have tried to set these options for automatic updates so that our clients connect to the server in opposed to microsoft updates site (no offence all you microsoft guys out there ;P) as our server stores all updates from syncronisation locally. Under the group policy setting I have tried setting the "local intranet server used to aquire updates" to both server1 and http:\\server1 and neither has really done anything running MBSA from dos, there is an option to call a program "mbsacli.exe" and specify a SUS serve I have tried the following: mbsacli.exe /sus "server1 mbsacli.exe /sus "SERVER1 mbsacli.exe /sus "http://server1/susadmin mbsacli.exe /sus "http://SERVER1/SUSadmin mbsacli.exe /sus "http://server1 and so on. None of these really work, I either get an "invalid sus server" "could not get list of approved updates" or it connects to microsof again. This is really frustrating. Any ideas on how to fix this?? If I can get it scanning correctly here, then I could fix the group policy SUS services is installed on the D:\ on our serve MBSA is installed on the C:\ of our serve Just in case that bears any importance... Tag: SUS Tag: 46096
  - 14
    - Internet Explorer security fault? I use IE 6,winxp,the MSN IE home page will not load fully? when the last object tries to load it seems to hang, i think it has something to do with the macromedia link space in the browser window :-(...help) Tag: SUS Tag: 46095
  - 15
    - testing-please ignore Tag: SUS Tag: 46086
  - 16
    - Security Patch for windows Hi I have windows XP Home Edition.I bought it 2002 I could Not tell if this Version Needs the Patch.There are other XP versions but im not sure i need it..Help..Skater Tag: SUS Tag: 46085
  - 17
    - WinRpcssDcomBo Any body know how to remove the following security vulnerability: WinRpcssDcomBo WuftpGlobHeapCorruption Ftppwless Tag: SUS Tag: 46080
  - 18
    - TIRED OF ALL THE BS? DITCH THAT WINDOWS CRAP AND GO BUY A MAC! Tag: SUS Tag: 46075
  - 19
    - pop up blockers where do I go to turn popup blockers on and off Tag: SUS Tag: 46072
  - 20
    - Microsoftpatch a notice keeps coming up on our computer that is microsoftatch.info. Do I need this? When I try to get it it will not come up. Tag: SUS Tag: 46069
  - 21
    - Security Patch I am having the same problem trying to update the Internet Explorer 6 patch on Windows ME. It will not let me complete the update and when I try I get an error message VMM(12) +00004C3C Error: OE: 0028: C0283C3C. Any suggestions please reply to jimbotours@yahoo.com. Thanks, Jimbo Tag: SUS Tag: 46063
  - 22
    - Windows Updates, can I "back them up"? I have a computer that has just been upgraded from Windows98 to Windows98SE. I know that many critical updates are available for Windows98SE, and I have access to a couple of other computers with those updates installed. Is there any way to export these updates from a computer in which they are already installed and then install them onto another system? Alternatively, can these updates be downloaded from Microsoft in a format that lends itself to exporting from system to system (zip file or otherwise)? (i.e. download them at a computer with a fast connection, burn to CD, then install onto separate system). This other system only has access to a 56K modem and I would like to avoid a night of tying up the phone line. Thanks in advance for any advice on this issue. Tag: SUS Tag: 46062
  - 23
    - www.windows.patch.info Tag: SUS Tag: 46060
  - 24
    - McAfee Internet Security Suite VS Nortons NIS ? Windows XP HE I kinda hate to ask this question on here as I do not want to create a mile long posting as this is a touchy subject, but here goes. I have a neighbor that is not a PC person at all, uses Windows XP Home Edition mainly for Office applications and email, web research. They asked me what is a good "totally integrated" package for Internet Security. I tried to explain that I have had much better luck with many of the free packages that just do one thing at a time (ie Zone Alarm etc...) They also want Parental Controls. The only two total packages I can think of are McAfee InternetSecurity Suite 2004, Version 6 (nice price at least for $39) and Norton NIS. I am not a Norton fan ( I was when Peter Norton was around, but that has been 14 years) and the only thing I use from McAfee (used to be Neopoint) is the Visual Trace. Any comments on the "lesser of the two evils" ? Its been years since using either one of these for me and I don't have a good answer, althou am leaning towards McAfee. Dave L, if your out there...let me know, also they will be going to Verizon DSL in a few weeks. Thanks ! Tedd -- Tedd Riggs PDA Square Content Developer www.pdasquare.com Tag: SUS Tag: 46049
  - 25
    - Using Firewalls and Antivirus at the same time I am trying to fix my problem of getting my computer hijacked with Spam, virus and other programs and needed some help. As most of you know, I do not like the UI from AVG, but the thing does seem to work. This is how I have it set up now for what I think will stop any problems, let me now what I left out. Firewall: Zone Alarm Pro, McAfee Personal Firewall Plus, Norton NIS, Anti-Ad's: Spybot, Lavasoft Ad-Adware, McAfee Privacy Sevice, Virus, AVG 6, Sophos, Norman Antvirus, McAfee Virusscan Pro, Norton Antivirus, IPE antivirus. Everything runs ok together, its a little slower on startup. What else do I need ? A hardware firewall ? I have looked for hardware firewalls and cannot find them. I use dial up. Might change to xp pro, is that firewall worth it ? Regards half_pint Tag: SUS Tag: 46042
- Next
  - 1
    - "Pack71.exe" Anyone know anything about "Pack71"? I got an email which appeared to an official Microsoft mailing in html format with Microsoft header and everything, from a sender called "Public Assistance". The text of the message read: "this is the latest version of security update, the "February 2004, Cumulative Patch" update which fixes all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three newly discovered vulnerabilities. Install now to continue keeping your computer secure from these vulnerabilities, the most serious of which could allow an attacker to run code on your computer. This update includes the functionality of all previously released patches." The message had an attachment called "Pack71.exe" (106 KB). I am suspicious of ANY email that contains an .exe attachment. If it was an offical Microsoft email, why wouldn't the sender simply point the recipient to a web link to download the latest patch, rather than including it as an attachment? I did a search on the web and on Microsoft for "Pack71.exe" and turned up nothing. I went to Microsoft's Security web site, ran a security check for Windows, and it turned up 1 critical update that it needed (there was no mention of Pack71.exe). After installing the update, I ran the test again, the install appeared successful and it told me that "there were no critical updates to install." Anybody know of Pack71.exe or where on the web that I can get information about it? Sorry about the lengthy post. Any information would be appreciated. Thanks, JA Tag: SUS Tag: 46041
  - 2
    - Which Firewall pls ? I've read alot here about the importance of a firewall, then alot of other messages about problems after installing a firewall. Makes me nervious. What firewall vendor/brand should one use when there are so many out there? Had planned on Norton Security 2004 but see messages about problems people are having with that one also. Seems like an oximoron when you purchase something to help protect you but it only causes other or new problems. Welcome any suggestions on which top 2 or 3 brands should be seriously considered. thanks. Tag: SUS Tag: 46040
  - 3
    - Security Update 828028 As there is no answer at 1-866-PCSAFETY, I am posting my question here. I am running Windows ME. At first glance, the above patch does not appear to apply to me. However, in the technical details section it says "If file Msasn1.dll is present, this security update is required". I do have that file present. MY question is do I need to download this patch and, if so, where is the link to do so? Tag: SUS Tag: 46039
  - 4
    - certificate templates various TLS Hello: We are implementing Live Communications Server and a wireless network. I would like to create 2 different certificate templates that are NOT interchangeable. I would like to create 1 certificate template to be used for SIP/TLS and I would like to create 1 other certificate template to be used for EAP/TLS. What properties must be set on the certificate templates so that if I issue a certificate to be used for SIP/TLS that it cannot be used for EAP/TLS? And vice versa? Regards: Leo Vasiliou Tag: SUS Tag: 46038
  - 5
    - Critical Update KB828026 Greetings & Salutations When I visit windows update is scans my computer and tells me that I need "Critical Update for Windows Media Player Script Commands (KB828026)" According to the installation history I have successfuly installed the patch 8 times. What gives? Tag: SUS Tag: 46037
  - 6
    - firewall When I put up my firewall on the Dell that is the network hub for three computers, I loose the network - I have to disconnect the firewall and restart the computer in order to use the network. I do have a firewall in my netgear box - does this suffice? If not, could someone tell me what to do to use my Dell firewall and still have a network? Thank you Tag: SUS Tag: 46029
  - 7
    - Mysterious instant message/http://www.wgutv.com/osama_capture.php?xi01 I received the following IM from my brother in law: check this out... http://www.wgutv.com/osama_capture.php? xi01 When I clicked on the link I was taken to a "WGUC TV NEWS PLAYER WAR GAMES UPDATE" page. I was prompted to install a "News Player" ActiveX control. I refused to install the control and asked my brother-in- law what he'd sent. He said he hadn't sent me anything. This seems fishy to me. Is there any knowledge about this (a Google search returned nothing)? To whom should I report this? Thanks, Scott Francis Tag: SUS Tag: 46026
  - 8
    - MS Security Updates and Firewall We are an organization with about 800 network connected pc's that have access to the internet. We run Norton Anti-virus on all the workstations and the signatures are updated daily. We are behind a Cisco PIX firewall that only allows established connections back in. Do I need to be worried about applying all the MS "critical" updates to all the workstations? Is there a MS article regarding this that anyone knows of? Paul Tag: SUS Tag: 46025
  - 9
    - Email Spoofing I know this is an old issue. I also know that there is nothing I can do about it. But.... I have a paranoid customer who does not understand that this exploit has been around for years and wants proof that Microsoft has posted on their website their stand on this issue. Does anyone have any old emails, newsletter, website pages from Microsoft or any big name company that talks about this subject? Tag: SUS Tag: 46022
  - 10
    - OWA Nonsecure Content Bug Bites To whom it may concern I got a pop-up warning me of "nonsecure" content when opening an OWA e-mail that presumably contained scripting. I chose NOT to render that content. I was very surprised to find, however, that it *was* interpreted when I went to *forward* the message. That seems a little batty to me. Why wasn't it just a bunch of uninterpreted scripting (ugly but benign)? This implies that users can be cautious about NEVER opening mail containing scripting but once they try to forward something the OWA will ignore that caution. This is what some would call a BUG, and it could bite Thank you Frit Tag: SUS Tag: 46021
  - 11
    - Help in creating a secure certificate Hi, We have our MS certificate server and I need to create a .key and a .cert files. Can some please point me or walk me through how this is done. This certificate will be used for a secure application on another server. Thanks David Tag: SUS Tag: 46019
  - 12
    - Security patch won't install Another ... same problem as Mahesh. Security patch KB832894.exe will not install in Windows 98. Message is: This update requires Internet Explorer 6.0 Service Pack 1 to be installed" But that is exactly what I am trying to install. Sounds like you cannot install it if it is not already installed ... catch 22. Pls reply to mcgroddy@advanced.org or post here. Tag: SUS Tag: 46018
  - 13
    - Security patch Security will not load same as mike.Ther security Update for Internet 6 will not instal for me also. I too am using windows98. Any suggestions please send to mamahesh@hotmail.com or post here. Tag: SUS Tag: 46013
  - 14
    - MS Updates KB832894 Since installing "Cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB 832894)", I have had an intermittant problem logging in. My system (Windows XP Home Edition)is set up with 3 accounts - mine as Administrater requiring a password and 2 limited accounts for my sons not requiring a password. After installing this update I have encountered intermittant problems getting the password window to open when clicking on my name to log on. After a few days I determined that it happens when I had previously logged off leaving unread messages in my Outlook Express In Box. I then duplicated the problem several times confirming thaty is when I encountered it. I was able to "defeat" the problem by first logging in on one of the limited accounts, then logging off and proceding to log in on my account, which works. Has anyone else come across this? Larry Tag: SUS Tag: 46012
  - 15
    - Adware removal software blocks my cable modem access Hello all. I'm not sure what to do. I downloaded a spyware and adware removal software from cnet.com and ran it. It found almost 300 infected files that I erased. Subsequently, I couldn't connect online through my cable modem. The tech support at the cable company ran some tests. He determined that the adware removal software must have blocked the data channel in/out of my computer through a 'socket.' Does this sound right? If so, what do I need to do to fix this problem? Any help is greatly appreciated. I am a doctor and need at home access to the internet for work related purposes. Thanks so much. Paul. Tag: SUS Tag: 46006
  - 16
    - Security patch not installing Have tried installing the cumulative Security Update for Internet Explorer 6 Service Pack 1 (KB832894) many times but keep getting notice that it has failed to install and to try again. Can any one suggest a solution please. Tag: SUS Tag: 46003
  - 17
    - ICMP echo problem Hi there. I'm using a Beklin 4 port gateway router which has it's on built in firewall, which over rides xps firewall. Now I've tested my security at shields up site and I am operating in stealth mode except for this problem. Ping Reply: RECEIVED (FAILED) - Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet. Most personal firewalls can be configured to block, drop, and ignore such ping requests in order to better hide systems from hackers. This is highly recommended since "Ping" is among the oldest and most common methods used to locate systems prior to further exploitation. Now I contacted Beklin and they tell me that my router cannot be configured to stop this happening. What I would like to know is 1 Should I be concerned? 2 Can I be hacked even though I have the firewall? 3 Is there any software available to stop my system replying to the ICMP echo? As I've tried a couple of other firewalls including Zone Alarm and they did not stop the problem. Many Thanks Tag: SUS Tag: 46002
  - 18
    - Digital certificates disappear after reboot Hi I'm using digital certificates in Internet Explorer under Windows XP. All critical and recommended updates installed. After rebooting the certificate I successfully install and use in my Personal store disappears. It can be placed in other stores (and remains after rebooting) but can't be used from there. I can re-import the key and use it - it stays in place even if Internet Explorer is closed and restarted. But it is gone after a reboot. Importing the key into another machine doesn't replicate the problem, so it doesn't seem to be key specific. I'm at a loss to know how to proceed. Any advice would be welcome. Wayne McDougall Tag: SUS Tag: 45997
  - 19
    - ms04-007 IIS on 80 and 442 behind firewall Hi, I'm curious if an iis install running on w2k server is behind an firewall which only opens port 80 and ssl 443 to the world. Is this new Security vulneraability affecting this install to? I couldnt get this from the description on the microsoft site, tey really keep it general, see below. So main question: are webservers behind firewalls affected to? If only running port 80? If running port 443 SSL? Second, why is microsoft not a little more specific in whats vulnerable? Like iis on sll, ntlm auth or whatever, make a big list please, so i can see which production machines will need to be updated fast, and which can wait a few days. thanx, hjm ---from <http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security /bulletin/MS04-007.asp> How could an attacker exploit this vulnerability? Because ASN.1 is a standard for many applications and devices, there are many potential attack vectors. To successfully exploit this vulnerability, an attacker must force a computer to decode malformed ASN.1 data. For example, when using authentication protocols based on ASN.1 it could be possible to construct a malformed authentication request that could expose this vulnerability. Tag: SUS Tag: 45996
  - 20
    - Orbit Explorer Does anyone out there know how to find and remove Orbit Explorer from my computer? I think I know how I invited this monster onto my computer; unfortunately I thought I was downloading something else and now I can't get rid of it. It's replaced my default search engine when searching from the address bar and I hate it. It's not in add/remove programs; I can't find it in any startup locations; I've tried replacing everything of it I can find in the registry (which I backed up first) with another URL and then I couldn't get any internet at all. Please help. If you know how to get rid of this please email me with instructions. I work in IT so I can follow instructions and I know how to edit the registry without ruining it. Thank you very much. Tag: SUS Tag: 45994
  - 21
    - Sarah's reply to half_pint. Must be a security problem, you got out of the bin half_wit stutters out. "my ISP is not cheap and they are selective in their customers" WHAT a total Joke ! You use Yahoo mail, yet have a very expensive and "Selective" ISP ? The only selectio that goes on is if you pay. I would guess then my ISP is selective also as it only provides us with DSL at 1.544MB in and 512 KB out. But I am sure your dial up is much faster. "Oh and another tip, try making your post more than 2 inches wide" Well moron, it is YOUR newsreader or Monitor that is causing this. It looks plenty wide on my NEC Multisync LCD at 17 inch. (and bozo..those are not cheap monitors) "at least the IP address looks reasonable" Funny bubble brain, lock at any of the CDO posts, they all have about the same IP that is a part of the IANA Blackhole (way above your head) "witty and intillegent on e)" I am not sure who you were talking about on this comment, but it sure is not you. You are a total dimwit, with no wit, humour or any form of intelligence. And you sure cannot spell at all nor know anything about grammer. "Hi half_pint imitator, you are not the real half_pint" Hello ? Is anyone in here ? What a stupid thing to say and do. You post with the exact same style of writing, grammer and poor spelling and also rotten temper and foul mouth if you are using Outlook Express to post or when you are on CDO. It is pretty clear to me the "two people" are the same Oh and I almost forgot, since you have the worlds best and most selective ISP, you might wake them up and inform them, or maybe it comes from you, that your OE/IE are antique " X-Newsreader: Microsoft Outlook Express 6.00.2600.0000" Try something that is a bit newer (if you know how to download anything other the games and MP3's) Microsoft Outlook Express 6.00.2800.1158 is a bit more up to date. "say imitation is the sincerest form of flattery you didn't even copy my sig file properly" Now that one is another big joke, you emails are all different except you cut and paste far to much. I sure have not seen a standard "sig file" on your trash. The best part, who in this world would want to imitate you ? Maybe a Monkey or a Jackass might. But people copy other peoples style because they are unique, intelligent and they want to better themselves. Nobody wants to imitate a low life little troll like you. That would be going pretty low for a person. So little boy, go play in the closet, make sure you take your Lithuim each day for your BP2 problem and try to keep those underwear clean and dry. You will feel better. Sarah Comments from before still stand. Yes it does look like our little friend gets around the | newsgroups and posts whereever the browser lands. I say | Sarah, you have the little dimwit figured out rather well | I would say, but you are much too nice to this little | twerp. However since he most likely does have his share of | mental problems, we should be understanding and wonder why | his mother lets him have access to things like a PC and it | seems that his medicine needs to be monitored much better. | Sounds like a classic Manic Depressive person to me ( now | called Bipolar 2 to be correct) or maybe just a little kid | that has far to much energy (ADD ?) or anger to be allowed | in public. Well I hope his Mum can show him how to click | on the scan button, this should help wth AVG. Hi half_pint imitator, you are not the real half_pint (the witty and intillegent on e) you are a cheap imposter, although they say imitation is the sincerest form of flattery you didn't even copy my sig file properly (which can often be found at the top of the post for some unknown reason. On and if you want to do a real impersonation I suggest you get an account with my ISP so that at least the IP address looks reasonable, mind you my ISP is not cheap and they are selective in their customers. Oh and another tip, try making your post more than 2 inches wide, I know that must be difficult on you cheap monitor. You were ammusing at first but now you have used both of your jokes you are just making a big fool of yourself. -- --------------- regards half_pint Tag: SUS Tag: 45990
  - 22
    - Broadjump My internet firewall security keeps warning me that a program called CFD.EXE is trying to access the internet. My searches show it is part of a package called Broadjump Services. It seems as though this is a program that tracks my internet activities, reporting them to somebody. My firewall security program also says this is a virus potential. Can anyone tell me who or what this program is for and how can I remove it from my computer? I've tried deleting the Broadjump folder and CFD.EXE and it won't let me. I would appreciate any assistance on this. Thanks, Roger Tag: SUS Tag: 45986
  - 23
    - Microsoft Windows Security Patch I'm writing about a problem that I've had with the latest Microsoft Windows XP security patch (the one that was just released today, February 10, the "critical update" patch). I installed the patch and restarted the computer as prompted. The computer rebooted and the "Windows XP" logo flashed onto the screen. After that, however, the screen went blank, with a few colored lines on it (sort of like a TV station that's gone off the air). I tried to use GoBack to revert my computer, but I got the same result...now I can't even log onto Windows! Did anyone else experience this same problem after installing the security update? Any help would be greatly appreciated! Tag: SUS Tag: 45984
  - 24
    - scanner and camera wizard When I click on the wizard it says nothing is connected. I have a Canon N650U scanner connected. It says to go to control panel and add new scanner. When I go to control panel it is listed there. Can someone tell me why it will not work with the wizard? Scanner will work with photo editing programs or when I use the button on scanner it will scan. Using Windows XP Home. Tag: SUS Tag: 45977
  - 25
    - wizard cannot be started because it failed to contact the active directory when i am in mmc and snap in for certifcates under personal go to all tasks request new certifate I get error the wizard cannot be started because it failed to contact the active directory Tag: SUS Tag: 45976

I am tring to configure SUS on a 2003 domain with ISA. I
can't sync with the Microsoft site. Do I need to open set
up a rule to do this and what port does it use?

Top

Re: SUS by Torgeir

Torgeir
Thu Feb 12 10:00:05 CST 2004

Hi

Fyi, there is a separate newsgroup for SUS:

microsoft.public.softwareupdatesvcs

news://msnews.microsoft.com/microsoft.public.softwareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the Web
interface to access the newsgroups:
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.softwareupdatesvcs

A Web site about SUS with a FAQ and a SUS forum:
http://www.susserver.com/

More SUS Web sites:
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter

Top