C:/3887508a051ab09532

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Searchme Robot intrussion Anyone able to cast any light on this crawler/robot - it has been causing a huge data throughput on our IP (not a public site) and stops if BITS2.0 is closed down! Tag: C:/3887508a051ab09532 Tag: 96837
  - 2
    - Private Key Export Urgent help needed !!!! i recenly purchase code signing certificate online and i end up with the certificate private key imported on my vista machine . Now when i tried to export the certificate ,it doesnt allow me to export the private key!!!! any help Tag: C:/3887508a051ab09532 Tag: 96833
  - 3
    - ISA 2006 Server Array Problems I have a ISA 2006 Array of which when one node is switched off the other node does not process any client requests at all. I use the ISA array for proxy. Tag: C:/3887508a051ab09532 Tag: 96823
  - 4
    - Please recommend one free software that can erase the files permanently and completely Thanks Tag: C:/3887508a051ab09532 Tag: 96822
  - 5
    - Please recommend one free software that can erase the files permanently and completely Thanks Tag: C:/3887508a051ab09532 Tag: 96821
  - 6
    - Please recommend one free software that can erase the files permanently and completely Thanks Tag: C:/3887508a051ab09532 Tag: 96820
  - 7
    - Randomly allocated high tcp ports on both client/server? We unfortunately have a firewall (hardware based not the host based) between this one client (only one, the others are on our LAN) and our domain controller. Outgoing traffic are not blocked on either side. We won't modify the registry to use a static port for RPC for some reason. And we can't use the VPN. So on the hardware firewall that's protecting the domain controller (no host based firewall) side, we're going to allow all traffic from that one client to the domain controller. On the client side (on the hardware firewall, there's no host based firewall on the client) the usual MS ports are open ex) 135, 137 U, 138 U, 139, 445. Do we need to open the dynamic ports on the firewall that's protecting the client side 1024:65535 or just by opening all traffic on the domain controller side as I mentioned above will take care of the traffic? Thanks Tag: C:/3887508a051ab09532 Tag: 96819
  - 8
    - Certificate request file syntex for critical extensions Hi, I have a Standalone Root CA running on Windows 2003 SP2. I want to enable SSL, TLS for RDP connections to domain controllers, for that I am following the KB article :http://support.microsoft.com/?id=895433 I am able to request a "server authentication" certificate using web enrollment, but I wanted to automate this process using certreq.exe and INF file. My version of INF is not working, as I am able to generate the certificate, but it is not showing up as a available certificate for RDP SSL in TS configuration properties. Only difference I saw between certificate obtained from webenrollment & certificate obtained from certreq.exe was keyusage extension being not critical in certreq.exe certificate. So, I am assuming that is the problem. I am not able to set the key usage extension to critical, can anyone help me with conversion of keyusage value to base64 version as required by INF If it helps anyone, the Keyusage requires data in ASN.1 BIT STRING format. http://www.ietf.org/rfc/rfc3280.txt My INF file [Version] Signature= "$Windows NT$" [NewRequest] KeySpec = 1 KeyLength = 2048 Exportable = TRUE MachineKeySet = TRUE SMIME = FALSE PrivateKeyArchive = FALSE UserProtected = FALSE UseExistingKeySet = FALSE ProviderName = "Microsoft RSA SChannel Cryptographic Provider" ProviderType = 12 KeyUsage = 0x30 Subject = "CN=server1.domain.com" [EnhancedKeyUsageExtension] OID = 1.3.6.1.5.5.7.3.1 ; for "Server Authentication" [Extensions] 2.5.29.15 = ?????? Critical = 2.5.29.15 Appreciate any help provided :) -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Argue for your limitations, and sure enough, they're yours. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Tag: C:/3887508a051ab09532 Tag: 96807
  - 9
    - Folder encryption I was attempting to encrypt a folder in My Docs to secure password files on my PC and I am getting an error "Recovery policy configured for ths system contains invalid recovery certificate." How can I resolve this issue? Tag: C:/3887508a051ab09532 Tag: 96804
  - 10
    - Certificate Authority Configuration I plan to add Windows Mobile 5.0 smart phones running ActiveSync to our network which is running Exchange 2003. I've done this many times on a Small Business Server network where the Certificate Authority is installed during the server installation so there aren't as many questions to be answered. For the first time, I plan to add the Certificate Authority to a Windows 2003 Standard Edition environment. I'm hoping that someone can point me in the right direction. The first question that I have is whether I should be installing an Enterprise CA, or a Stand-Alone CA. As of now, the only certificates we intend to issue are those that are necessary to allow the Windows Mobile 5.0 smartphones to send and recieve mail from the Exchange server using ActiveSync. Also, if there are any particularly good implementation documents that someone could point me to I'd greatly appreciate that as well. Thanks for your help. --David Tag: C:/3887508a051ab09532 Tag: 96803
  - 11
    - process username OpenProcess -> OpenProcessToken access denied Hi, I've seen lots of posts about this on line, but it appears that no one ever gets it to work. I'm trying to open a process, other than mine, and get the username the process is running as. I've found .net code which does this via System.Management.ManagementObject, but it's slow, apparently runs via WMI, and I'd just rather do it natively. Taskmanager does it fine. I'm running as local admin and trying to view the owner of a process that was spawned with the runas cmd. Yet I can't. I get access denied no matter what I do. What am I missing? Why does the wmi work? It's got to be just using winapi down below anyway, perhaps it's because of the privileges the wmi service is running as? Here's my code, mostly copied, I believe via a MS page. Can someone tell me what I need to do? I've tried adjusting my token and the other processes. Would it be easier to just ::CreateRemoteThread and do it the hard way? I can't get past the OpenProcessToken when the proc handle is the handle to the remote process. I've tried many combinations of access rights. Here's the current code. void sysLog( LPTSTR lpFrom ) { WCHAR s[512]; DWORD dwErr = ::GetLastError(); ::ZeroMemory( s, 512 ); if( (FormatMessage( FORMAT_MESSAGE_FROM_SYSTEM, NULL, dwErr, 0, s, 512, NULL ) ) == 0 ) { ::std::wcout << lpFrom << L" FormatMessage error ::GetLastError() was " << dwErr << std::endl; } else { ::std::wcout << lpFrom << L" Error: " << dwErr << L" " << s << std::endl; } } BOOL SetPrivilege( HANDLE hToken, // access token handle LPCTSTR lpszPrivilege, // name of privilege to enable/disable BOOL bEnablePrivilege // to enable or disable privilege ) { TOKEN_PRIVILEGES tp; LUID luid; if ( !LookupPrivilegeValue( NULL, // lookup privilege on local system lpszPrivilege, // privilege to lookup &luid ) ) // receives LUID of privilege { printf("LookupPrivilegeValue error: %u\n", GetLastError() ); return FALSE; } tp.PrivilegeCount = 1; tp.Privileges[0].Luid = luid; if (bEnablePrivilege) tp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED; else tp.Privileges[0].Attributes = 0; // Enable the privilege or disable all privileges. if ( !AdjustTokenPrivileges( hToken, FALSE, &tp, sizeof(TOKEN_PRIVILEGES), (PTOKEN_PRIVILEGES) NULL, (PDWORD) NULL) ) { printf("AdjustTokenPrivileges error: %u\n", GetLastError() ); return FALSE; } if (GetLastError() == ERROR_NOT_ALL_ASSIGNED) { printf("The token does not have the specified privilege. \n"); return FALSE; } return TRUE; } BOOL GetCurrentUserAndDomain( DWORD dwPID, PTSTR szUser, PDWORD pcchUser, PTSTR szDomain, PDWORD pcchDomain) { BOOL fSuccess = FALSE; HANDLE hToken = NULL; PTOKEN_USER ptiUser = NULL; DWORD cbti = 0; SID_NAME_USE snu; HANDLE hProc = NULL; HANDLE hProcSelf = NULL; HANDLE hTokenSelf = NULL; __try { // not needed if dwPID is the id of this process hProcSelf = ::OpenProcess( PROCESS_ALL_ACCESS, FALSE, ::GetCurrentProcessId() ); ::OpenProcessToken( hProcSelf, TOKEN_ADJUST_PRIVILEGES, &hTokenSelf); SetPrivilege( hTokenSelf, SE_DEBUG_NAME, TRUE ); // always fails //SetPrivilege( hTokenSelf, SE_TCB_NAME, TRUE ); //SetPrivilege( hTokenSelf, SE_IMPERSONATE_NAME, TRUE ); hProc = ::OpenProcess( PROCESS_QUERY_INFORMATION, FALSE, dwPID ); if( NULL == hProc ) { sysLog( L"OpenProcess" ); __leave; } // fails here always if( 0 == ::OpenProcessToken( hProc, TOKEN_QUERY, &hToken)) { sysLog( L"OpenProcessToken" ); __leave; } // always fails //SetPrivilege( hToken, SE_DEBUG_NAME, TRUE ); //SetPrivilege( hTokenSelf, SE_TCB_NAME, TRUE ); //SetPrivilege( hToken, SE_IMPERSONATE_NAME, TRUE ); // Obtain the size of the user information in the token. if (GetTokenInformation(hToken, TokenUser, NULL, 0, &cbti)) { sysLog( L"GetTokenInformation" ); // Call should have failed due to zero-length buffer. __leave; } else { // Call should have failed due to zero-length buffer. if (GetLastError() != ERROR_INSUFFICIENT_BUFFER) { sysLog( L"GetTokenInformation" ); __leave; } } // Allocate buffer for user information in the token. ptiUser = (PTOKEN_USER) HeapAlloc(GetProcessHeap(), 0, cbti); if (!ptiUser) { sysLog( L"GetTokenInformation" ); __leave; } // Retrieve the user information from the token. if (!GetTokenInformation(hToken, TokenUser, ptiUser, cbti, &cbti)) { sysLog( L"GetTokenInformation" ); __leave; } // Retrieve user name and domain name based on user's SID. if (!LookupAccountSid( NULL, ptiUser->User.Sid, szUser, pcchUser, szDomain, pcchDomain, &snu)) { sysLog( L"GetTokenInformation" ); __leave; } fSuccess = TRUE; } __finally { if( hTokenSelf ) ::CloseHandle( hTokenSelf ); // Free resources. if( hProcSelf ) ::CloseHandle( hProcSelf ); if (hToken) ::CloseHandle(hToken); if (ptiUser) ::HeapFree(::GetProcessHeap(), 0, ptiUser); if( hProc ) ::CloseHandle( hProc ); } return fSuccess; } // http://win32.mvps.org/ int _tmain(int argc, _TCHAR* argv[]) { TCHAR szUN[64]; TCHAR szD[64]; DWORD dwUNSize = 64; DWORD dwDSize = 64; DWORD dwPID = 0; BOOL bStatus = FALSE; if( argc == 2 ) { dwPID = (DWORD)_ttoi( argv[1] ); std::wcout << "Looking up user account for pid: " << dwPID << std::endl; bStatus = GetCurrentUserAndDomain( dwPID, szUN, &dwUNSize, szD, &dwDSize ); } else { dwPID = ::GetCurrentProcessId(); std::wcout << "Looking up user account for current process pid: " << dwPID << std::endl; bStatus = GetCurrentUserAndDomain( dwPID, szUN, &dwUNSize, szD, &dwDSize ); } if( bStatus ) std::wcout << L"User: " << szUN << " Domain: " << szD << std::endl; } Tag: C:/3887508a051ab09532 Tag: 96798
  - 12
    - Not strictly Microsoft-related, but... How long exactly would it take a single user to hack a wireless network secured with WEP? Is it even possible? My wireless network appears to have been hacked - I've been using it for just over a year. Tag: C:/3887508a051ab09532 Tag: 96797
  - 13
    - Are those encryption really reliable? There is recent report from AFP that says FileVault¡¢TrueCrypt,BitLocker and dm-crypt are not reliable anymore. They are all easy to be discrypted! then what can the users do? Tag: C:/3887508a051ab09532 Tag: 96793
  - 14
    - 802.1x and script problem I am using 802.1x authentication. When user tries to logon to domain on their computer using their AD user name and password, user will run logon script to map drives. they can map other drive by script except the "Home Drive" . There is problem when mapping "Home Drive" Sometimes they can't see it on my computer, but sometime they see it but "Access Denied" when double click. I am using Windows Server 2000 IAS, and Zyxel GS2024 as switch. Tag: C:/3887508a051ab09532 Tag: 96781
  - 15
    - PKI- Renewing user certificate Question: I have implemented a PKI infrastruture For Email Encryption and Email Signature. The problem i am running into is when testing the renewal of the user certificate, Using the CERTMGR on the client computer. The client Renew the certificate by right clicking on it and select renew certificate with the same key. Then the CA manager approve/ issue the certificate. The CA manager Export the certifcate and gave it to the intended user to install it. The intended user install the certificate. The newly install certificate does not have a private key attatched to it. This setup seems to fail, specifically for one type of certificate (Exchange User), although it appears to work for other types of certificate ( digital signature, EFS, code signing). The only work around seem to be is to allow autoenrollment on the security template ? is this a requirement for the user renwal to work? specifically (Exchange User template)?? I have tested this in three separate environment . In my lab Environment, Scenario 1 1. Auto Enrollment is not enabled on the security template, for the Email Encryption template. 2. Under Require the following for re-enrollment -The radio button is check for â??Same Criteria as for enrollmentâ?? OR 3. Under Require the following for re-enrollment -The radio button is check for â??Valid existing certificateâ?? 4. When user renew the certificate using the Certmgr, the CA Manager will have to issue the certificate and then export it out. 5. The user imports the certificate on a client machine, and in my test environment and the customer test environment. The new certificate will not have a private Key attached to it. Scenario 2 1. Auto Enrollment is enabled on the Security Template for the email Encryption template 2. On the Issuance Requirement , There is a Check mark for CA certificate manager Approval 3. Under Require the following for re-enrollment -The radio button is check for â??Same Criteria as for enrollmentâ?? 4. Customer renew the certificate with the SAME KEY using the CertMGR.MSC, 5. The CA Manager Issue the certificate and send it to the client to install it. The client installs the certificate, but no private key gets attached to the certificate. Scenario 3 6. Auto Enrollment is enabled on the Security Template for the email Encryption template 7. On the Issuance Requirement , There is a Check mark for CA certificate manager Approval 8. Under Require the following for re-enrollment -The radio button is check for â??Valid existing certificateâ?? 9. Customer renew the certificate with the SAME KEY using the CertMGR.MSC, and the certificate automatically gets installed. This worked in the customer environment. 10. Step #4 , I had two different behavior , The difference in the behavior is that the CA Manager must issue the certificate, and export it to the user for installation, that I did get in my lab environment at one point during th testing. The settings are exactly the same settings that are in step 4 11. There are no documentation anywhere on Microsoft website interim of best practice of renewing the certificate. David suggested to post the question to Microsoft forms, and see if I get any responses. Tag: C:/3887508a051ab09532 Tag: 96778
  - 16
    - PKI Question - User Certificate Renewal Question - what is the best practice method of renewing a user certificate, I am refering to Authoenrollment or CA-Manger apparoval required. In my lab and customer environment we seem to be having problem when the certificate is manually approved /issued. I have tested this in three separate environment . In my lab Environment, Scenario 1 1. Auto Enrollment is not enabled on the security template, for the Email Encryption template. 2. Under Require the following for re-enrollment -The radio button is check for â??Same Criteria as for enrollmentâ?? OR 3. Under Require the following for re-enrollment -The radio button is check for â??Valid existing certificateâ?? 4. When user renew the certificate using the Certmgr, the CA Manager will have to issue the certificate and then export it out. 5. The user imports the certificate on a client machine, and in my test environment and the customer test environment. The new certificate will not have a private Key attached to it. Scenario 2 1. Auto Enrollment is enabled on the Security Template for the email Encryption template 2. On the Issuance Requirement , There is a Check mark for CA certificate manager Approval 3. Under Require the following for re-enrollment -The radio button is check for â??Same Criteria as for enrollmentâ?? 4. Customer renew the certificate with the SAME KEY using the CertMGR.MSC, 5. The CA Manager Issue the certificate and send it to the client to install it. The client installs the certificate, but no private key gets attached to the certificate. Scenario 3 6. Auto Enrollment is enabled on the Security Template for the email Encryption template 7. On the Issuance Requirement , There is a Check mark for CA certificate manager Approval 8. Under Require the following for re-enrollment -The radio button is check for â??Valid existing certificateâ?? 9. Customer renew the certificate with the SAME KEY using the CertMGR.MSC, and the certificate automatically gets installed. This worked in the customer environment. 10. Step #4 , I had two different behavior , The difference in the behavior is that the CA Manager must issue the certificate, and export it to the user for installation, that I did get in my lab environment at one point during th testing. The settings are exactly the same settings that are in step 4 11. There are no documentation anywhere on Microsoft website interim of best practice of renewing the certificate. David suggested to post the question to Microsoft forms, and see if I get any responses. Tag: C:/3887508a051ab09532 Tag: 96775
  - 17
    - problems with malware i've been having a lot of trouble with my server trying to login to terminal services. one minute it works fine and the next we can't get in. after about an hour it will start working fine. can someone check through the hijackthis log to see is something is wrong or something is making me have a denial of service? Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:07:58 PM, on 2/21/2008 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\termsrv.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\llssrv.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\Dfssvc.exe C:\WINNT\System32\msdtc.exe C:\WINNT\System32\svchost.exe C:\Program Files\AntiVirusKit InternetSecurity\Firewall\GDFwSvc.exe C:\WINNT\Explorer.EXE C:\Program Files\AntiVirusKit InternetSecurity\AVKTray\AVKTray.exe C:\Program Files\AntiVirusKit InternetSecurity\Firewall \GDFirewallTray.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\rdpclip.exe C:\WINNT\Explorer.EXE C:\Program Files\AntiVirusKit InternetSecurity\AVKTray\AVKTray.exe C:\Program Files\Online Backup\OnlineBackup.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C: \PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C: \WINNT\system32\msdxm.ocx O4 - HKLM\..\Run: [AVKTray] "C:\Program Files\AntiVirusKit InternetSecurity\AVKTray\AVKTray.exe" O4 - HKCU\..\Run: [@BackupScheduler] C:\Program Files\Online Backup \OnlineBackup.exe O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-21-1708537768-1303643608-839522115-1011\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard \icwconn1.exe /desktop (User '?') O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files \Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user') O4 - Global Startup: G DATA Firewall Tray.lnk = C:\Program Files \AntiVirusKit InternetSecurity\Firewall\GDFirewallTray.exe O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files \Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000 O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2- a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C: \PROGRA~1\SPYBOT~1\SDHelper.dll O15 - Trusted Zone: http://download.windowsupdate.com O16 - DPF: {1EF9F042-C2EB-4293-8213-474CAEEF531D} (TmHcmsX Control) - http://www.trendsecure.com/framework/control/activex/TmHcmsX.CAB O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1175358834078 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1175775957375 O17 - HKLM\System\CCS\Services\Tcpip\..\{77C7ACF2-6FAD-4DFD- AEC0-1CB435B7143E}: NameServer = 207.230.75.48,207.230.75.50 O17 - HKLM\System\CS1\Services\Tcpip\..\{77C7ACF2-6FAD-4DFD- AEC0-1CB435B7143E}: NameServer = 207.230.75.48,207.230.75.50 O17 - HKLM\System\CS2\Services\Tcpip\..\{77C7ACF2-6FAD-4DFD- AEC0-1CB435B7143E}: NameServer = 207.230.75.48,207.230.75.50 O18 - Protocol: intu-help-qb1 - {9B0F96C7-2E4B-433E-ABF3-043BA1B54AE3} - C:\Program Files\Intuit\QuickBooks Enterprise Solutions 7.0\HelpAsyncPluggableProtocol.dll O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing) O23 - Service: ATI Smart - Unknown owner - C:\WINNT \system32\ati2sgag.exe O23 - Service: AVKProxy - G DATA Software AG - C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe O23 - Service: G DATA Personal Firewall (GDFwSvc) - Unknown owner - C: \Program Files\AntiVirusKit InternetSecurity\Firewall\GDFwSvc.exe O23 - Service: QBCFMonitorService - Intuit - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C: \Program Files\Common Files\Intuit\QuickBooks\FCS \Intuit.QuickBooks.FCS.exe O23 - Service: QuickBooksDB17 - iAnywhere Solutions, Inc. - C: \PROGRA~1\Intuit\QUICKB~1.0\QBDBMgrN.exe O23 - Service: QuickBooksDB18 - iAnywhere Solutions, Inc. - C: \PROGRA~1\Intuit\QUICKB~1.0\QBDBMgrN.exe -- End of file - 5157 bytes Tag: C:/3887508a051ab09532 Tag: 96771
  - 18
    - Updating Spybot problem I was trying to download Spybot 152 but it will say "Error reading URL, operation timed out." Do you know what's going on? The whole download is about 9M but this will happen after about 1M. Tag: C:/3887508a051ab09532 Tag: 96770
  - 19
    - Sign and encrypt mail Hello, I'm having trouble with both signing and encrypting a mail between users. I can do either function separately but can't do both on the same piece of mail. This occurs whether I'm sending new mail or replying. I get an error that my ID cannot be found by the underlying security system. Is this a limitation or am I missing something? Thanks in advance for any help! Tag: C:/3887508a051ab09532 Tag: 96767
  - 20
    - Kaspersky Anti-Virus & Internet Security 7.0: Critical Fix 1 (version 7.0.1.325) <QP> Concerning: Kaspersky Internet Security 7.0 MP1 (build 7.0.1.321) Kaspersky Anti-Virus 7.0 MP1 (build 7.0.1.321) On February, 19th 2008 Kaspersky Labs announces release of Critical Fix 1 for Kaspersky Anti-Virus 7.0\ Kaspersky Internet Security 7.0. The full version number is 7.0.1.325. IMPROVEMENTS compared to version 7.0.1.321: => Error that caused computer and web browsers (Microsoft Internet Explorer, Mozilla, Firefox) to slow down when Kaspersky Anti-Virus is running has been fixed. => Error that caused slowdown during loading of Microsoft Office 2007 applications when Kaspersky Anti-Virus is running has been fixed. => Error that caused slowdown during loading of computer's operating system when Kaspersky Anti-Virus is installed has been fixed. In order to install Critical Fix 1, do the following: => download version 7.0.1.325 from the Kaspersky Lab?s official site: http://www.kaspersky.com/productupdates => run the downloaded file => install the latest product version => restart your computer </QP> Source: http://www.kaspersky.com/support/kis7/tech?qid=208279696 -- ~Robear Dyer (PA Bear) MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002 AumHa VSOP & Admin http://aumha.net DTS-L http://dts-l.net/ Tag: C:/3887508a051ab09532 Tag: 96766
  - 21
    - dates in active directory are their dates related to user accounts like last login or last password change that are not replicated to all the domain controllers? that are only up to date on the last controller that was used to authenticate to? thanks Tag: C:/3887508a051ab09532 Tag: 96763
  - 22
    - firewalls Which is a better firewall to use ? Norton's or Windows ? I was told in school a few years ago that Windows supplied was the stronger one. Thanks for any advice given. -- Lisa All the Worlds a Stage Tag: C:/3887508a051ab09532 Tag: 96760
  - 23
    - 802.1x authentication logon has Home drive mapping problem I am using 802.1x authentication. When user tries to logon to domain on their computer using their AD user name and password, user will run logon script to map drives. they can map other drive by script except the "Home Drive" . There is problem when mapping "Home Drive" Sometimes they can't see it on my computer, but sometime they see it but "Access Denied" when double click. I am using Windows Server 2000 IAS, and Zyxel GS2024 as switch. Tag: C:/3887508a051ab09532 Tag: 96757
  - 24
    - Can't get mail encryption to work Hi, I have an enterprise CA and am trying to test mail encryption between two users. UserA can send encrypted mail to himself as well as UserB with no issue. UserB can send encrypted mail to himself with no issue. However, when UserB sends encrypted mail to UserA I get the "The undelying security system can not find the ID" error. I've looked in AD and both users have the seemingly correct certificate listed in the 'Published Certificates' tab. What am I missing with regard to why UserB wouldn't be able to send to UserA? Thanks, Dan Tag: C:/3887508a051ab09532 Tag: 96751
  - 25
    - IPC what is the best IPC mechanism that works best in Vista. We used to use SendMessage(). But, vista doesn't like it with UAC turn-on. Does anyone experienced the same issue? Tag: C:/3887508a051ab09532 Tag: 96737
- Next
  - 1
    - fingerprint biometrics Guys I have recently purchased an integration toolkit from www.m2sys.com They made my life way simpler then I thought. I have spent over 4 months playing with a fingerprint scanner and sdk we bought from an online vendor. It was going nuts - no support no idea what was going on. Sean thanks a lot for directing me to this site. Tag: C:/3887508a051ab09532 Tag: 96734
  - 2
    - Can not renew root ca Hello: I have a Windows 2003 SP1 server running as a Stand Alone Root CA. Its certificate is about to expire. Whether I choose "Renew Certificate with New Key..." or "Renetw Certificate with Same Key..." I always get the same error. "You do not have permission to request a certificate based on the selected certificate template" My account is a member of the Enterprise Admins. I've Googled this, but haven't found anything. Does anyone have any idea? Harrison Midkiff Tag: C:/3887508a051ab09532 Tag: 96733
  - 3
    - informations for C:\WINDOWS\system32\wbem it seems one application import data from internet and write it in C:\WINDOWS\system32\wbem\Repository\FS in the files INDEX.MAP MAPPING.VER MAPPING1.MAP OBJECTS.MAP INDEX.BTR MAPPING2.MAP OBJECTS.DATA the file C:\WINDOWS\system32\conf\SECURITY is written too are written the logs file in the directory "wbem" too one of tham says Warning! User name at exit (BLAKY\Giuseppe) != user name at entry (WORKGROUP\BLAKY$) for select __RELPATH, __Path, Group, Description, Version, CreationDate, FileSize, Manufacturer, Name, __RELPATH from Win32_CodecFile 02/16/2008 18:02:45.531 thread:3252 [d:\xpsprtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.857] Warning! User name at exit (BLAKY\Giuseppe) != user name at entry (WORKGROUP\BLAKY$) for CIM_DataFile.Name="C:\\WINDOWS\\system32\\MSADP32.ACM" 02/16/2008 18:02:45.562 thread:3296 -------------------------------------- What does it mean:[wiaservc] Opened log at 17/02/2008 20:18:34.625? What does it mean: 2/17/08-20:19:58,[2524] CHPCompMgrService::ProcessIndirectRegistration - no permissions to read indirect registration registry area!!! in the file "hpcmerr.log" ? is all that ok in the security vew ? Tag: C:/3887508a051ab09532 Tag: 96729
  - 4
    - How to protect the personal data in the removable flash memory if it is lost? how to protect the personal data in the removable flash memory from being viewed if it is lost? Is there really any reliable software could do this easily and user friendly? thanks. Tag: C:/3887508a051ab09532 Tag: 96725
  - 5
    - Slow 802.1X Authentication Why my 802.1X authentication is so slow?? PEAP, MS-CHAP-V2 Domain user login and password. Zyxel 802.1X Radius Client Zyxel GS-2024 IAS using Windows Server 2000 AD using Windows Server 2003 Standard Windows XP service pack 2. It takes more than 1mins from type in the logon domain password to seeing the desktop icons. And mapping folder using logon script sometimes failed. Any solution ?? Tag: C:/3887508a051ab09532 Tag: 96724
  - 6
    - WSUS - how starting Hi! we used a 3rd pary application for patching our servers. I have heard good things about WSUS 3 so I downloaded it and now I need some help. I found something about 500 updates which have to be approved. Do I have to read each update or is there perhaps a better way to install only the fixes for remote execution bugs? kind regards Juan Tag: C:/3887508a051ab09532 Tag: 96718
  - 7
    - Question about pkiview.msc Root Certificate Expiring Greetings all, Have a question about Pkiview.msc - but first the setup details. Win2K3 standard - Stand-Alone root CA (Certificate lifetime 12 years) Win2K3 Enterprise - Enterprise subordinate CA/Issuing CA (Certificate lifetime 6 years) CRL and AIA informatinos are first published to a http site and then ldap for clients. When I run pkiview on the Issuing CA it shows a warning on the root ca. After selecting the root ca in pkiview.msc it says: CA Certificate - status - Expiring AIA location #1 (http) - status - Expiring AIA location #2 (ldap) - status - Expiring If I click on any of the links and open the root ca certificates it says that the validity is 30 years from now. Any who know if this is normal behavour for pkiview.msc and that I can ignore this or if I should trouble shoot on it? And if so, any suggestions of what to look for? On google I havn't found much about it, except a post which said that the status of expiring was ok. Thanks in advance, Benjamin Tag: C:/3887508a051ab09532 Tag: 96701
  - 8
    - Home Security Camera * Easy to Use and Install * Just Plug it In your Television & you will be able to watch Instantly Live motions at your Home, Office or Godawn etc. * It is so small in Size * It can be Installed along with almost all the Television & VCR's having AV in Plugs * Great Indoor and Outdoor Resolution * Power Adapter and 20 mtr Cable Included * Colors and Model are Subject to availability. (No Choice) Please visit - http://www.homeshop18.com/hs18shop/faces/tiles/product.jsp?productID=20388&catalogueID=2&categoryID=1253&parentCategoryID=1070&bid=&prc=&sid=&q=&k1=&k2=&k3=&k4=&k5=&k6=&k7=&k8=&k9=&k10=&k11=&k12= Tag: C:/3887508a051ab09532 Tag: 96696
  - 9
    - Conflicting IAS remote access policies problem This concerns a IAS RADIUS server. I have a pre-existing IAS remote access policy that authenticates all wireless users and allows them to connect to my companies wireless network. I am a member of this group. I have created a second policy to allow exec priviledge logins to my Cisco routers. I set the policy to allow anyone who is a member of the Domain Admins group this right. I am a member of this group as well. When the wireless policy is listed first, and I attempt to login to my Cisco router, I get an "IAS_INVALID_AUTH_TYPE" error in my IAS log, but I can connect to my wireless network just fine. If I reverse the order of the policies, I can log in to the Cisco router just fine, but then I get the "IAS_INVALID_AUTH_TYPE" error when I connect to my wireless network. The logs also show that when the login is failing on the first policy, it does not fall through to the second policy. Is there any way around this? I want to stay in both the wireless users and the Domain Admins groups; can I configure IAS to go down my list of policies until I either reach one that accepts my login, or I'm rejected by all policies? Thanks. Tag: C:/3887508a051ab09532 Tag: 96688
  - 10
    - How do you get past Vista security ? Digitally sign your malware ! http://sunbeltblog.blogspot.com/2008/02/dangerous-new-fake-american-greetings.html -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp Tag: C:/3887508a051ab09532 Tag: 96682
  - 11
    - Certificate Enrollment API: Request on behalf of another user Hi What is the correct process to request a certificate on behalf of another user by using the new Certificate Enrollment API (certenroll.dll) with Windows Vista / Windows Server 2008? I know, that - I need a IX509CertificateRequestPkcs10 request object - I need a IX509CertificateRequestCmc object - I need a IX509NameValuePair object (request on behalf...) - I need a IX509Enrollment object But, what are the correct steps to assemble the request and install the signed response from a CA? Any help is welcome. Thanks and Regards, Dominik ----------------------------- http://blogs.ecreation.ch Tag: C:/3887508a051ab09532 Tag: 96680
  - 12
    - share premission errors I cannot run exe files directly from the server. When running them from the share (\\server\share\file.exe), I get a permissions error that reads "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." It does run however when I execute it from explorer using the drive (D:\folder\file.exe), or using the unc path from another computer. I am logging in as the domain admin. All users have full share permissions. What could be causing this? Thanks for any help, Brian Tag: C:/3887508a051ab09532 Tag: 96675
  - 13
    - Don't mention this to Bill G or Steve B.. http://it.slashdot.org/article.pl?sid=08/02/10/2011257 ..or they might fall off their respective stools laughing. :-)))) Tag: C:/3887508a051ab09532 Tag: 96667
  - 14
    - Close open Files Hello, I would like to enable a user to close open files (that do not belong to him) through Computer Management on a 2000 or 2003 file server WITHOUT making him a member of the administrators or Server Operators group. Is that possible and what would the minimum rights be that would have to be granted? Thanks for any help! Harry Tag: C:/3887508a051ab09532 Tag: 96663
  - 15
    - =?Utf-8?Q?ABOUT_THE_DESK_OF_THE_MICROSOFT=E2=84=A2?= MOTTO: FIGHTING POVERTY AROUND THE WORLD FROM: THE DESK OF THE MICROSOFTâ?¢ PROMOTIONS MANAGER INTERNATIONALPROMOTIONS/PRIZE AWARD DEPARTMENT, 90 Long Acre,Covent GardenLONDON,WC2E 9RZ United Kingdom. REF.:PEC/9030108308/07.Batch: 15/76/EF36. Serial No: SALP97585.FILE No: B665 75608567. Security code ZA/183/RR ELECTRONIC EMAIL AWARD WINNING NOTIFICATION AWARD PRESENTATION CENTER : UNITED KINGDOM ATTN: WINNER, Microsoftâ?¢ co-operation management worldwide is pleased to inform youthat you are a winner of our annual MICROSOFTâ?¢ USER AWARD-Lotteryconducted in UNITED KINGDOM . Your personal e-mail address or company email was attached toSerial No: SALP97585. Consequently winning in the first lottery category. You have therefore been APPROVED for a total sums of Â£1000000.00 OneMillion United Kingdom Pounds) Credited to FILE No: B665 75608567. WithREF.:PEC/9030108308/07. This is from total prize money of Â£60,000,000,shared among the Seventy-five (75) lucky Worldwide winners in firstcategory . All participants were selected through our Microsoft computer ballotsystem, drawn from Canada, Asia, Australia, United States, Europe, MiddleEast, Africa and Oceania .As part of international "MICROSOFTâ?¢ USER" promotions program, this is conducted annually. CONTACT CLAIM OFFICEMr.PAUL WINTERSPROMOTION MANAGER. 24hrs hot-line :+Tel:44-703 182 07 15Tel:44-702 402 94 81Fax:44-870 479 62 30 Email:claimoffice.microsoft1@googlemail.com Remember, all prize money must be claimed within 90 days ofthisnotification. All funds not claimed on or before the fixed date willbe returned as unclaimed and donated to charity organizations.Congratulations, once more from the entire management and staff ofMicrosoftâ?¢ co-operation to all our lucky winners this year.Thank you forbeing part of this promotional lottery program. Sincerely, MRS. BROWN CATHY (SECRETARY) AWARD SPONSORSMICROSOFTâ?¢ CORPORATION. Please call your claim agent if your mail was not responded to within 24hours: PLEASE SEND A COPY OF YOUR CONTACT INFORMATIONS TO BOTH EMAILS PROVIDEDABOVE.1, Full Names:2, Date of birth:3, Present Contact Address:4, Country Of Residence:5, Tel/Fax:6, Your Winning serial and ref. no.:7, Winning Email address:8, Occupation9, Sex:10 Total amount won: Â£1000000.0011, Mode Of Paymenti Bank Transfer {T/T} For Security reasons, you are advised to keep your winning informationCONFIDENTIAL Microsoftâ?¢ takes all reasonable steps to ensure that the information inthis email is accurate.However, the company gives no warranty, whether express or implied,regarding the content of this email, nor do we accept liability for anyloss or damage which may result from your receipt of this message. Anydecision made by an individual based on information in this email is theresponsibility of that individual alone. You have to note that the onlyperson that have the right to represent you in your claim is yourappointed Agent only. Copyright Â© 1998-2008 The MICROSOFTâ?¢ Inc.All rights reserved. Terms of Service - Guideline Tag: C:/3887508a051ab09532 Tag: 96658
  - 16
    - detecting lame passwords I know that the standard disclaimers apply: running certain security auditing tools without permission may be criminally prosecutable, and at least grounds for termination. With that happy thought in mind, what tools would you recommend for finding who has a weak password? I've explained that Winter07 is not a good password, but since Windows will accept it, I think that some kind of auditing is my next prudent step. Recommended products for preventing this in the first place are welcome as well. But presenting a user with their password as evidence that they chose a weak password seems to be hard to argue with. My assumption is that such a tool would run under the admin account, and that the tool itself should secured to said account. ________ Greg Stigers, MCSA remember to vote for the answers you like Tag: C:/3887508a051ab09532 Tag: 96653
  - 17
    - Grant Access to Different Profiles Our company has a stand a long laptop - No domain - Its primary function is to connect using IE to our four local-internal Webcam servers (Windows XP) for surveillance purposes. We had two kind of users logging into the computer. Administrator and security are the names for the two user's profiles. The computer has access to the Internet, MS Office, Windows games, etc. Our goal is to grant the Administrator full access to all of the resources available into the computer. The second user profile "Security" should ONLY have access to the IE to view the WEBCAM servers (No access to the Internet or any other software). If you have any suggestions on how to accomplish this will be very appreciated. Thank you in advance for your help and assistance with this task! Tag: C:/3887508a051ab09532 Tag: 96649
  - 18
    - Mind Control "mailteam" works-- victims work trends Mind Control "mailteam works"--- victims work trends http://soleilmavis.googlepages.com mind control victims website (1) discovery channel Electronic Mind Control Pt 1 http://www.youtube.com/watch?v=k3aZyDiyI7g Electronic Mind Control Pt 2 http://www.youtube.com/watch?v=qh7FEwIbQds Electronic Mind Control Pt 3 http://www.youtube.com/watch?v=6nA1__XIYUo (2) CORRECTIONS RE ROBERT DUNCAN'S INTERVIEW Robert Duncan, B.A., M.S., M.B.A,. Ph.D. will be interviewed this Feb 12th, 2008 @ 11:30pm on the Richard Syrett show. The topics are broad: directed energy neurological weapons, EEG cloning/psychic warfare, brain washing, torture, interrogation, mind viruses, silent eugenics programs, silent assassination/warfare, military deception tactics, discrediting tactics, creating public myths, false flag operations, psychological warfare, information warfare, cognitive warfare, cultural engineering, remote renditions, the CIA's "scripts and tricks", NSA signal encoding/decryption/deception methods, human behavior modification experiments, etc. WWIII has already begun but it is fought in the hearts and minds of people silently. Choice and freedom are merely an illusion. Munich, Germany (in German) ?TBD. Topics include: Distributed death camps, worse-than-lethal weapons, disguising genocides in statistics of common diseases, neurological cognitive containment fields, US sponsored psychoterrorism, and more. Hitler is rolling in his grave out of jealousy of what the US and its territories (Canada, Australia, and the UK) have done. (3) Victims online shops Victims have already done a lot of works. But we also know Victims need to support their life and their activities. We have been encouraging victims to open an online shops to earn extra money. We wish more victims can build their online shops. Here are some online shops. RINOA Rinoa's Secret Garden-07 Main business: Clothes. http://shop20150018.taobao.com/ Soleilmavis Main Business: Self made Pure Natural Beauty skin care products; selfmade flower tea and herbal tea; Hand made products; clothes. http://shop34821367.taobao.com/ Tanglang Main Business: provide on door photo services. for Art photography, wedding photography, photography of children, families commemorate photography, pet photography, and photography for major conference. http://auction1.taobao.com/auction/14-2807-280704/item_detail-0db1-5333e9dd0dc73b266f75424c400ffdce.jhtml duanjinping88 Main Business: hand made dry flower crafts, Greeting cards, bookmarks. Bringing you closer to the nature! http://shop35296794.taobao.com/ guoruquan Main business: South China countries side selfmade dry fish and dry meat. tea. http://shop34876045.taobao.com/ hy99 Main business: Jewelry http://shop33055862.taobao.com/ Spring Main business: Software development http://shop.paipai.com/674614570 (4) CARDS AND RIBBONS I've made some cards that can be handed out with the new awareness ribbons. They can be viewed at this link: www.freedomfchs.com/cardandribbon.jpg We will be sending them out free to the TI community upon request as vehicles for outreach about our issues. Just send an email to me at: dcr618@msn.com (5) SAMPLE OS/EH BILL This bill was written in conjunction with activist Mary Ann Stratton - www.controlledamerica.com Those that are in contact with legislators, feel free to send this along with other information they may request. ORGANIZED STALKING AND DIRECTED ENERGY WEAPONS HARASSMENT BILL A bill to provide protections to individuals who are being harassed,stalked, harmed by surveillance, and assaulted; as well as protections to keep individuals from becoming human research subjects, tortured, and killed by electronic frequency devices, directed energy devices, implants, and directed energy weapons. Section 1. Short Title This bill may be cited as the "Organized Stalking and Directed Energy Devices and Weapons Bill " Section 2. Findings and Purpose A) Findings 1) The constitution guarantees the right of the people to be secure in their person. The Declaration of Independence asserts as self-evident that all men have certain inalienable rights and that among these are life, liberty, and the pursuit of happiness. 2) As Supreme Court Justice Louis Brandeis wrote in 1928, "the framers of the Constitution sought "to protect Americans in their beliefs, their thoughts, their emotions, and their sensations." It is for this reason that they established, as against the government, the right to be let alone as "the most comprehensive of rights and the right most valued by civilized men." 3) The first principle of the Nuremberg Code states that with respect to human research, the voluntary consent of the human subject is absolutely essential. The Nuremberg Code further asserts that such consent must be competent, informed, and comprehending. 4) There are current regulations implementing the obligations of the United States to adhere to Article 3 of the United Nations Convention Against Torture and other Forms of Cruel, Inhumane or Degrading Treatment including all terms that are Subject to any reservations, understandings, declarations, and provisions contained in the United States Senate resolution of ratification of the Convention. B) Purpose To establish regulations and penalties for those who use any type of electronic frequency devices, directed energy devices, implants, surveillance technology, and directed energy weapon to purposefully cause any of the following: stalking, harassing, mental or physical harm, injury, harmful surveillance, torture, diseases, and death to any United States citizen. Section 3. Organized Stalking If two or more persons willfully, maliciously, and repeatedly follow or willfully and maliciously harass another person and who make a credible threat with the intent to place that person in reasonable fear for his or her safety, or the safety of his or her immediate family, they are guilty of the crime of organized stalking, punishable by imprisonment in a county jail for not more than one year, or by not more than one thousand dollars ($ 1,000), or by both that fine and imprisonment, or by imprisonment in a federal prison. If two or more persons violate subdivision (a) when there is a temporary restraining order, injunction, or any other court order in effect prohibiting the behavior described in subdivision (a) against the same party, they shall be punished by imprisonment in the state prison for two, three, or four years. For the purposes of this section, "harass" means engages in a knowing and willful course of conduct directed at a specific person that seriously alarms, annoys, torments, or terrorizes the person, or damages his personal property or possessions and that serves no legitimate purpose. * * * For the purposes of this section, "course of conduct" means two or more acts occurring over a period of time, however short, evidencing a continuity of purpose. Constitutionally protected activity is not included within the meaning of "course of conduct." For the purposes of this section, "credible threat" means a verbal or written threat, including that performed through the use of an electronic communication device, or a threat implied by a pattern of conduct or a combination of verbal, written, or electronically communicated statements and conduct, made with the intent to place the person that is the target of the threat in reasonable fear for his or her safety or the safety of his or her family, or personal property or possessions and made with the apparent ability to carry out the threat so as to cause the person who is the target of the threat to reasonably fear for his or her safety or the safety of his or her family or personal property or possessions. It is not necessary to prove that the defendant had the intent to actually carry out the threat. The present incarceration of a person making the threat shall not be a bar to prosecution under this section. Constitutionally protected activity is not included within the meaning of "credible threat." For purposes of this section, the term "electronic communication device" includes, but is not limited to, telephones, cellular phones, computers, video recorders, fax machines, pagers or synthetic telepathy devices. The sentencing court also shall consider issuing an order restraining the defendant from any contact with the victim, that may be valid for up to 10 years, as determined by the court. It is the intent of the Legislature that the length of any restraining order be based upon the seriousness of the facts before the court, the probability of future violations, and the safety of the victim and his or her immediate family. For purposes of this section, "immediate family" means any spouse,parent, child, any person related by consanguinity or affinity within the second degree, or any other person who regularly resides in the household, or who, within the prior six months, regularly resided in the household. Section 4. Punishment for threats Any person or persons who willfully threatens to commit a crime which will result in death or great bodily injury to another person, with the specific intent that the statement, made verbally, in writing, or by means of an electronic communication device, is to be taken as a threat, even if there is no intent of actually carrying it out, which, on its face and under the circumstances in which it is made, is so unequivocal, unconditional, immediate, and specific as to convey to the person threatened, a gravity of purpose and an immediate prospect of execution of the threat, and thereby causes that person reasonably to be in sustained fear for his or her own safety or for his or her immediate family's safety, shall be punished by imprisonment in a federal prison not to exceed one year.. For the purposes of this section, "immediate family" means any spouse,whether by marriage or not, parent, child, any person related by consanguinity or affinity within the second degree, or any other person who regularly resides in the household, or who, within the prior six months, regularly resided in the household. "Electronic communication device" includes, but is not limited to,telephones, cellular telephones, computers, video recorders, fax machines, pagers or synthetic telepathy devices Obscene, threatening or annoying communication (a) Every person or persons who, with intent to annoy, telephones or makes constant contact by means of an electronic communication device with another and addresses to or about the other person any obscene language or addresses to the other person any threat to inflict injury to the person or any member of his or her family, or any property or personal possessions is guilty of a misdemeanor. Nothing in this subdivision shall apply to telephone calls or electronic contacts made in good faith. (b) Every person or persons who makes repeated telephone calls or makes repeated contact by means of an electronic communication device with intent to annoy another person at his or her residence, is, whether or not conversation ensues from making the telephone call or electronic contact, is guilty of a misdemeanor. Nothing in this subdivision shall apply to telephone calls or electronic contacts made in good faith. (c) Every person or persons who makes repeated telephone calls or makes repeated contact by means of an electronic communication device with the intent to annoy another person at his or her place of work is guilty of a misdemeanor punishable by a fine of not more than one thousand dollars ($ 1,000), or by imprisonment in a federal prison for not more than one year, or by both that fine and imprisonment. Nothing in this subdivision shall apply to telephone calls or electronic contacts made in good faith. This subdivision applies only if one or both of the following circumstances exist: (1) There is a temporary restraining order, an injunction, or any other court order, or any combination of these court orders, in effect prohibiting the behavior described in this section. (2) The person or persons makes repeated telephone calls or makes repeated contact by means of an electronic communication device with the intent to annoy another person at his or her place of work, totaling more than 10 times in a 24-hour period, whether or not conversation ensues from making the telephone call or electronic contact, and the repeated telephone calls or electronic contacts are made to the workplace of an adult or fully emancipated minor who is a spouse, former spouse, cohabitant, former cohabitant, or person with whom the person has a child or has had a dating or engagement relationship or is having a dating or engagement relationship. (d) Any offense committed by use of a telephone may be deemed to have been committed where the telephone call or calls were made or received. Any offense committed by use of an electronic communication device or medium, including the Internet, may be deemed to have been committed when the electronic communication or communications were originally sent or first viewed by the recipient. (e) Subdivision (a), (b), or (c) is violated when the person acting with intent to annoy makes a telephone call requesting a return call and performs the acts prohibited under subdivision (a), (b), or (c) upon receiving the return call. (f) If probation is granted, or the execution or imposition of sentence is suspended, for any person or persons convicted under this section, the court may order as a condition of probation that the person participate in counseling. (g) For purposes of this section, the term "electronic communication device" includes, but is not limited to, telephones, cellular phones, computers, video recorders, fax machines, pagers or synthetic telepathy devices. Section 5. Assault and battery with an electronic or directed energy weapon Any person or persons who in the course of organized stalking and harassment, commits an assault upon the person of another with an unauthorized directed energy weapon shall be punished by imprisonment in a federal prison for two, three, or four years or by a fine not exceeding ten thousand dollars ($10,000). For the purposes of this section the term directed energy weapon is defined as any device that directs a source of energy (including molecular or atomic energy, subatomic particle beams, electromagnetic radiation, plasma, or extremely low frequency (ELF) or ultra low frequency (ULF) energy radiation) against a person or any other unacknowledged or as yet undeveloped means of inflicting death or injury; or damaging or destroying, a person (or the biological life, bodily health, mental health, or physical and economic well-being of a person via land-based, sea-based, or space-based systems using radiation, electromagnetic, psychotronic, sonic, laser, or other energies directed at individual persons or targeted populations for the purpose of information war, mood management, or mind control of such persons or populations; or by expelling chemical or biological agents in the vicinity of a person. (6) China victims have discussed to write to members of China National People's Congress We need victims to prepare email lists of members of China National People's Congress The letter will be written by Mr. Zhongqing Qi. (7) T Shirt campaign China victims have discussed to make some T shirts which for wear and sale. We will print some words on the T shirt " Peacepink We share Peace and Love! We against Mind Control and DEW abuse and torture!" The Material of T shirt will be high quality cotton and will be well make. I have already searched, the Cost of Product will be RMB10 yuan( about USD1.4)per piece. We welcome any opinion which regarding the style, words or other thing about T shirt. We also accept order in advance. Please contact soleilmavis@yahoo.com Tag: C:/3887508a051ab09532 Tag: 96646
  - 19
    - Other Users are Connected This evening after running my nightly anti-virus program, I went to shut down my computer. When I clicked to confirm the shutdown, a msg poped up saying that others were connected to my computer and would be disconnected if I shut down. My question: is there a log file that tracks who is logged into my computer? I am on a wireless network, but have secured it from public access. Thanks in Advance for your help. RR Tag: C:/3887508a051ab09532 Tag: 96645
  - 20
    - IAS error code 96 and 97 I am using windows server 2000 with IAS installed. Using PEAP as protocol, AD user login name and password. I have got two error codes for the failed authentication CODE 96: Access request for user HKRI\michael.chau was discarded. Fully-Qualified-User-Name = <undetermined> NAS-IP-Address = <not present> NAS-Identifier = ESW-0124 Called-Station-Identifier = <not present> Calling-Station-Identifier = <not present> Client-Friendly-Name = Zyxel Client-IP-Address = 172.18.252.62 NAS-Port-Type = <not present> NAS-Port = <not present> Reason-Code = 96 Reason = The authentication request was dropped because the session timed out. CODE 97 Access request for user HKRI\michael.chau was discarded. Fully-Qualified-User-Name = <undetermined> NAS-IP-Address = <not present> NAS-Identifier = ESW-0124 Called-Station-Identifier = <not present> Calling-Station-Identifier = <not present> Client-Friendly-Name = Zyxel Client-IP-Address = 172.18.252.62 NAS-Port-Type = <not present> NAS-Port = <not present> Reason-Code = 97 Reason = The authentication request was dropped because it contained an unexpected packet. Any idea Tag: C:/3887508a051ab09532 Tag: 96642
  - 21
    - MICROSOFT AWARD E-LOTTERY LONDON I got this letter from THE DESK OF THE MICROSOFTâ?¢ PROMOTIONS MANAGER INTERNATIONALPROMOTIONS/PRIZE AWARD DEPARTMENT by ELECTRONIC EMAIL AWARD WINNING NOTIFICATION AWARD PRESENTATION CENTER : UNITED KINGDOM.ATTN:WINNER. IT ABOUT Total amount won: Â£1000000.00. I don't know it is true or not. please help me . please send answer to my e-mail:ningkeyang@hotmail.com Tag: C:/3887508a051ab09532 Tag: 96640
  - 22
    - please help me i have a problem with an user. Last night (10.02.2008) someone abused me with webcam from erkan_pendik@windowslive.com. i want to complain him to a solicitor and i want to know who is he. whence i want his mail list to find him or if u could give him ip addres i give it to solicator. Please help me Thankyou in advance , sincerely.. Tag: C:/3887508a051ab09532 Tag: 96631
  - 23
    - Certsrv on a remote server Everyone, I have an environment that uses a Stand-alone CA to issue certificates to remote users from a public web site using web enrollment. This cert is used for authentication for another web site. Right now I have a server farm behind load balancers, but only one of them is configured as CA with the web-enrollment piece (certsrv). As you can imagine, this acts as a single point of failure and means that we can't use the load balancers for this; we have to always go to the single server. I would like to put copies of Certsrv on the other web servers so that I could balance these, but I am concerned with the communication between web enrollment and the CA and what the configuration steps would be. I am trying to avoid the overhead of configuring subordinates on the other web servers and issuing locally. Advice? -- Ryan Hanisco MCSE, MCTS: SQL 2005, Project+ http://www.techsterity.com Chicago, IL Remember: Marking helpful answers helps everyone find the info they need quickly. Tag: C:/3887508a051ab09532 Tag: 96629
  - 24
    - redundant wan We have two connections to the internet (1 T1 and 1 DSL) setup for redundancy purposes on a router with 2 wan ports. These connections both have their own pool of IP addresses. Our name resolution is setup to point to IP addresses bound to the T1. We recently had a situation where our T1 went down and we had to disable that WAN port on our router until it was available again. In this process we found that we needed to setup a second ftp subdomain (ftp2.mydomain.com) and tell our customers to use that name. My question is how can we make it so that we don't have to notify our customers to use the other subdomain should this happen again without having to make dns changes. In other words, if ftp.mydomain.com is bound to our T1 on 65.1.1.1 and out T1 goes down, what would we need to do to make sure ftp.mydomain.com goes through our DSL line bound to 64.1.1.1 (IP addresses are not real, just examples). Would we need to change our topology, or is there a way to set a secondary IP or route for our dns names? Any feedback is much appreciated. Thanks, Marc Tag: C:/3887508a051ab09532 Tag: 96627
  - 25
    - Active Directory and DMZ I recently faced a situation where a sharepoint was part of a domain inside a DMZ. There was a separate domain, inside the corporate network. The element I was concerned with was the following : the DMZ domain trusted the internal domain and the sharepoint allowed users from the inside to access some ressources. My assumption was that this was a potential security breach since multiples ports needed to be open between the inside and the DMZ, and that this architecture could allow an attacker to eventualy get to the inside from the DMZ. I am just curious about what would be the 'best practices' regarding that situation. Of course you can have just two domains, but obviously the people on the corporate network need to share ressources with partners outside. What is the recommended way to deal with such a situation ? Is there any safe way of allowing internal users to simply authenticate on such a shared ressource with the outside ? Tag: C:/3887508a051ab09532 Tag: 96626

I searched this folder on the internet but couldn't find any information
about it. It is located under C:/ and it contains "mrt.exe" and "mrtstub.exe".

Is there someone who has this same unknown folder in his computer who can
explain to me its function, if it is legitimate or not?

Top

Re: C:/3887508a051ab09532 by Malke

Malke
Mon Mar 03 06:29:04 CST 2008

BenSidel wrote:

> I searched this folder on the internet but couldn't find any information
> about it. It is located under C:/ and it contains "mrt.exe" and
> "mrtstub.exe".
>
> Is there someone who has this same unknown folder in his computer who can
> explain to me its function, if it is legitimate or not?

Those files belong to the Windows Malicious Software Removal Tool. Perhaps
you or someone else using the computer manually installed it. You can
remove the folder or leave it there since it is tiny and not a threat.

Malicious Software Removal Tool explanation -
http://www.microsoft.com/security/malwareremove/default.mspx

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

Top

Re: C:/3887508a051ab09532 by PA

PA
Mon Mar 03 17:49:45 CST 2008

"If it ain't broke, don't fix it."

Leave 'em alone.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

BenSidel wrote:
> I searched this folder on the internet but couldn't find any information
> about it. It is located under C:/ and it contains "mrt.exe" and
> "mrtstub.exe".
>
> Is there someone who has this same unknown folder in his computer who can
> explain to me its function, if it is legitimate or not?

Top

Re: C:/3887508a051ab09532 by George

George
Tue Apr 08 13:25:59 CDT 2008

It you start getting a lot of these, chances are you have a software
distribution push AND you do not have the MSIEXEC 3.x update installed. The
install fails, usually hangs a msiexec, and creates a random folder. Patch
to new version of MSIExec, restart (about only way to kill the processes
cleanly, but you can try killing them with Process Explorer). Cleanup after
that.

"BenSidel" <BenSidel@discussions.microsoft.com> wrote in message
news:7B9D5C94-48EE-40C9-B107-565619B5A1DC@microsoft.com...
>I searched this folder on the internet but couldn't find any information
> about it. It is located under C:/ and it contains "mrt.exe" and
> "mrtstub.exe".
>
> Is there someone who has this same unknown folder in his computer who can
> explain to me its function, if it is legitimate or not?

Top