ComDlg32 and MUICache with Registry

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Why aren't these IE and XP Security Holes Addressed by Microsoft? My question is why is Microsoft silent on all its sites on these two serious IE holes particularly after one of them is almost two months old? Maybe someone from Microsoft who works with Mr. Charney or Mr. Nash will comment on them Mr. Charney seems unable to direct his former zeal for pursuit of alleged cybercrime behind when it comes to transparency and showcasing these MS security holes, communicating them to the public in a timely manner, and either coming up with fixes in a reasonable time or pre-empting the need for an onslaught of hotfixes in the operating system and the browser. I don't see any mention of them on the MS Security, Technet, MSDN, or Presspass sites. There is a potentially devestating security hole in Internet Explorer 6 and possibly earlier versions. IE. This follows the discovery of a vulnerability in Windows XP earlier this week. You could be fooled into downloading files that look safe but could be anything, particularly executables. A demo (POC Proof of Concept Exploit) of both the hole in Windows and the hole in IE is avialable on Security Company Secunia's sites. The Windows security flaw allows construction of a malicious folder that has both script code and a malicious file. If you are tricked into opening that folder, Windows Explorer will execute the code. The latest vulnerability in Internet Explorer can display a fake URL in the address and status bars which is different from the real page location. The idea is to engineer users into revealing sensitive information or executing malware as a download. The third vulnerabilty allows IE to be tricked into opening a file with a different application than the file extension indicates by embedding a CSLID in the file name: http://www.secunia.com/advisories/10708/ Windows XP Exploit Not Yet Addressed New Explorer hole could be devastating http://www.infoworld.com/article/04/01/28/HNiehole_1.html IE File Download Extension Spoofing Unfixed http://www.secunia.com/advisories/10736/ IE URL Spoofing Vulnerability Since December, 2003 Unfixed http://www.secunia.com/advisories/10395/ It would be easy to get people to download the Doom Worm or even worse, to combine this latest hole with the Explorer spoofing problem discovered in December but not fixed by Microsoft. Many articles on the web are speculating that the reason Microsoft has not fixed it is because it can't. Microsoft has been beefing up security according to a large number of releases from MS Presspass. They hired Scott Charney, an attorney who was Chief of Computer Crime at the U.S. Department of Justice and a key member of the US DOJ's Computer Search and Seizure Work Group in April sending Howard Schmidt to the President's Critical Infrastructure Protection Board. Mike Nash is Vice President for the Security Business Unit at Microsoft. Neither gentleman has had a comment on any of the three exploits, and Microsoft has posted nothing to date on any of its sites. However, on November 19, 2003 Mr. Charney testified to Congress that "Security is the #1 Microsoft Priority." Microsoft Executive Bio of Scott Charney http://www.microsoft.com/mscorp/innovation/twc/issues/scott_charney_bio.asp COMMENTARY: LEADER OR LOBBYIST Scott Charney http://discuss.extremetech.com/n/main.asp?webtag=extremetech&nav=messages&msg=8914.3 Testimony of Scott Charney Before House Sub Chief Trustworthy Computing Strategist Microsoft Corporation: http://www.microsoft.com/presspass/exec/charney/11-19testimony.asp It is difficult to understand why Microsoft has been silent on one of these IE spoofs for nearly two months. Is it possible that there is no fix? Further the sheer amount of hotfixes lends to instability and bugs and sometimes considerable side effects in Windows and the browser. Chad Harris Tag: ComDlg32 and MUICache with Registry Tag: 44930
  - 2
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.01.29 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: ComDlg32 and MUICache with Registry Tag: 44924
  - 3
    - Norton Antivirua 04 My problem began when I purchased Norton 04 standard. I use MS Internet Explorer as my web browser (changing my browser is not a wanted option). I need information from anyone about how I can use Norton alongside MSIE, and my e-mail (outlook) without crashing them both. Every time I install the anti-virus program it crashes my e-mail and denys outside access to web-sites (one contains an expired security certificate), i was told it is by default that Norton scans all incoming e-mails, so i turned it off, with no luck. I contacted Symatec and also the company I purchased it from but neither gave me information I can use P.S when is Microsoft going to produce there own Anti- virus programs Tag: ComDlg32 and MUICache with Registry Tag: 44922
  - 4
    - Parental control of 13 yr old's email account and internet usage Hello- In my house we use XP and Outlook Express for email. What is your suggestions for parental control over your childs email account. I don't want to invade privacy persay, but I want to occasionaly take a look see. As far as the internet is concerned my 13 yr old hasn't learned of the temporary internet file folder. So, I am ok there for now. Thanks for any suggestions or ideas. Rob Tag: ComDlg32 and MUICache with Registry Tag: 44913
  - 5
    - Unwanted Pop Up Ads Can anyone tell me how to block unwanted pop-up ads? The pop-up ads occur when I am online. I am an AOL user and have Windows XP home version. The ads are typically rectangular or square shaped, with a gray background. If anyone can help me out I would really appreciate it. Thank you Tag: ComDlg32 and MUICache with Registry Tag: 44910
  - 6
    - ms explorer my home page changed to webcool.com. it was set at dellnet.com. the home page continues to set to the cool address, eventhough i change it back. I also noticed I have a new set of favorites and links. They are all porn sites. I think someone has compromised my browser. I run norton antivirus, zonealarm firewall and just recently installed spybot. Can someone tell me how to stop the home page from changing or plug up a hole in my security? thanks in advance Tag: ComDlg32 and MUICache with Registry Tag: 44903
  - 7
    - From:0 Subject:0 I received an e-mail without anything on the line except the little envelope at the far left.Of course I deleted it but my question is what is it? I might have come across this one other time a long time ago and deleted it as well. HP Win 98SE Outlook Express 6. Thanks,Jeannette Tag: ComDlg32 and MUICache with Registry Tag: 44894
  - 8
    - Spyware/Adware/Pop-ups HELP! I was recently infected with Spyware and Adware without my knowledge, and it has damaged my Internet Explorer. I did download Spynuker and Popup Nuker, but they don't seem to help with my problem. I cannot search on the internet, or even type in URLs. It keeps telling me that an internet connection is not established, even though I know I have connected. Then it gives me the option to try again, and lets me go to my search site. After typing in the address, it prompts me that that URL is restricted, and I am not able to open it. Also, my computer is much slower, and keeps freezing. I am at a total loss as to how to fix this problem. It is driving me crazy. Can anyone help? Any suggestions are appreciated!! Thanks! Tag: ComDlg32 and MUICache with Registry Tag: 44891
  - 9
    - Hard Drive I am giving my computer away and want to clean the hard drive before I do. How do I permanently delete everything on the hard drive? Tag: ComDlg32 and MUICache with Registry Tag: 44890
  - 10
    - Disappearing disk space I had 30GB available on my HD last night, this morning the system culdn't logme in to my profile; the hard drive was 100% full. I cleared 160MB and checked the disk for errors. Ten minutes later they disappeard. I searched for files for the last week, there nothing unsual of size. I recuced the size of the vertual memory from 10GB to 500MB. This did show any availble space at all. I run Windows XP professional, I scanned for virus by the latest NAI stiger, that was negative. Has anybody seen this problem? Tag: ComDlg32 and MUICache with Registry Tag: 44889
  - 11
    - What is WIN 32? Good or Bad? My norton internet security repeatedly tell me that "Microsoft Generic Host Process for Win 32" is trying to access my computor. I run XP. Norton says to permit, but then warns me of an attempted intusion. I don't want to block it if it is important. What do I do? Thanks Tag: ComDlg32 and MUICache with Registry Tag: 44887
  - 12
    - unauthorized emails being sent For 2-3 weeks I have been getting more and more messages from "Mail Delivery System," "Mail Delivery Subsystem," and several others all saying various emails allegedly sent from my account were undeliverable. I do not know any of the addresses and have not sent any such emails. What can I do? Thanks. -- Milt Tag: ComDlg32 and MUICache with Registry Tag: 44884
  - 13
    - porn pop ups Hi, On my two systems containing XP pro & XP home, I've suddenly started receiving porn pop up ads when I simply click on internet explorer browser. This is happening regardless of having We-Blocker filtering software as well as AD-Aware popup blocker. Is something embedded on my systems? Can anyone offer help or direct me where to go? Thank you! Tag: ComDlg32 and MUICache with Registry Tag: 44870
  - 14
    - AVERT Threat Notice: W32/Mydoom.b worm UPDATE Notice This is a Low-Profiled Threat Notice Update for W32/Mydoom.b@MM worm. Justification This worm has been Updated from Low to Low-Profiled due to Media Attention at: <http://www.eweek.com/article2/0,4149,1472436,00.asp> W32/Mydoom.b@MM is referred to as Mydoom.b within the article. Read About It Information about W32/Mydoom.b@MM is located on VIL at: <http://vil.nai.com/vil/content/v_100988.htm> The worm overwrites the local hosts file to prevent infected computers from accessing specific sites. AVERT recommends updating to the 4320 dat files as soon as they are available, so that your computer may continue to access NAI and other important sites for future updates. Detection W32/Mydoom.b@MM was first discovered on 01/28/2004 and detection will be added to the 4320 dat files (Release Date: 01/28/2004). Though we consider this a low threat, AVERT has posted an extra.dat as part of the above description for your convenience. If you suspect you have W32/Mydoom.b@MM, please submit a sample to http://www.webimmune.net/ Risk Assessment Definition For further information on the Risk Assessment and AVERT Recommended Actions please see: http://www.networkassociates.com/us/security/resources/risk_assessment.htm Best Regards, McAfee AVERT - Anti Virus Research, Analysis, and Outbreak Management visit us at www.avertlabs.com -- Jurren Bouman MVP Windows - Security "Protect Your PC" http://www.microsoft.com/security/ Tag: ComDlg32 and MUICache with Registry Tag: 44867
  - 15
    - setting up internet cafe I am looking into setting up an internet cafe with wireless access. Are there any studies about which configurations perform well and have adequate security? Tag: ComDlg32 and MUICache with Registry Tag: 44864
  - 16
    - MyDoom: DoNotOpenAttachments Email Message from Rogers ISP Dear Rogers Hi-Speed Internet Customer You may receive an Email message with an infected attachment. This virus called W32/Mydoom@MM, disguises itself as a text file Email attachment and if opened, can make copies of itself and send infected Email (without your knowledge) to everyone in your address book. The virus also appears to have 'backdoor' capabilities that may cause your computer to attack other computers or Websites on the Internet. The infected e-mail is difficult to detect as the 'FROM' and 'SUBJECT vary. The infected attachment attempts to disguise itself as a Text File. As a result, we strongly recommend that you use an updated virus protection software package and be EXTEREMELY cautious when opening text file Email attachments. IF YOU RECEIVE THIS EMAIL MESSAGE, DO NOT OPEN THE ATTACHMENT. DELETE THE EMAIL IMMEDIATELY. FOLLOWING ARE DETAILS ON THE EMAIL MESSAGE CONTAINING THE VIRUS: ------------------------ TO: This message has been sent to numerous Email users all over the Internet DATE SENT: (Varies) FROM: (Varies) SUBJECT: (Varies) BODY OF THE EMAIL MESSAGE: Varies - but may contain one of the following body messages: - Mail transaction failed. Partial message is available. - The message contains Unicode characters and has been sent as a binary attachment. - The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment ------------------------ DETAILS: - The message will appear to come from someone you know (Or from someone who has you listed in their address book) - The virus should not infect your computer unless you have opened the attachment. - The virus may attempt to open NOTEPAD and display random characters HOW DO I KNOW IF I HAVE BEEN INFECTED? - Contacts from your Email Address Book claim that you have sent them a strange Email message. - The Windows Notepad program opens and displays random characters ------------------------------------------- STEPS ON CLEANING THE W32/Mydoom@MM VIRUS ------------------------------------------- IF YOU HAVE OPENED THE INFECTED ATTACHMENT: * McAfee has released a stand-alone virus removal tool which can remove this virus. Their free 'Stinger' virus removal tool can be downloaded from their Website: http://vil.nai.com/vil/stinger/ 1. If you do not already own a virus protection software package, Rogers, in conjunction with McAfee will be launching an Internet Security Solution which includes virus protection at the beginning of February 2004. Rogers will provide details in the upcoming days. NOTE: Even if you own a virus scanning software package, it is very important that you download the latest virus definition file so that your software can clean this new virus. 2. Run your virus scanning software which will detect the virus and offer to clean it from your system. Select the option that cleans it from your system. 3. Read through the steps in the Surf Safe section on our Customer Support Website to keep your computer safe. The Surf Safe section can be found at: http://rogers.home.com/help/content/how/surf_safe/ IF YOU HAVE RECEIVED THE EMAIL, BUT HAVE NOT OPENED THE INFECTED ATTACHMENT: 1. Delete the Email Message. 2. Empty your deleted Email folder. 3. Update your existing Anti-Virus Software. 4. Read through the steps in the Surf Safe section on our Customer Support Website to keep your computer safe. The Surf Safe section can be found at: http://rogers.home.com/help/content/how/surf_safe/ Please note that although our Network Security team monitors viruses on the Rogers network, we strongly recommend that you consistently scan your Email attachments and downloaded files to protect your personal computer, no matter how trusted the source. This advice applies to all Email messages, not just the one discussed in this message. Please rest assured that the Rogers Network Security Team will continue to monitor the situation. Thank you, Rogers Network Security Tag: ComDlg32 and MUICache with Registry Tag: 44861
  - 17
    - Security issue Hi everybody, Does anybody know somethindg about UDP 1300-1900 ports? In my logs (ISA server) i noticed this unusual outbound traffic blocked. Thanks, Mike Tag: ComDlg32 and MUICache with Registry Tag: 44860
  - 18
    - MSN Complete Lack of Issue Support Two years ago I was asked by MSN to take over their official Pets & Animals Group. I did so. On last Saturday an individual hacked my user/passes for both that site and my site promoting my book, and hijacked both. He has removed the managers, banned the long term members,deleted members pet albums, and is representing proprietary and copyrighted material as his own. I have furnished MSN with complete proof of ownership and the circumstances and time lines now four different times. I am Admin on two Invision boards and only too aware of how easy it is to go into admin and correct a situation of this kind. The situation is obvious and the act illegal and MSN has done exactly zero to correct it, as this individual continues to alter and destroy years of work. I am now getting no answers from them at all. Shame on MSN. It could happen to you too. I got a nice case number from them...hello RE: CST145036155ID - Groups Have Been Hacked Any idea's of where else to go with this in MSN to get something done would be appreciated. Tag: ComDlg32 and MUICache with Registry Tag: 44854
  - 19
    - free cyber alerts www.cnn.com/2004/TECH/internet/01/28/cyber.warnings.ap/ind ex.html ========================== WASHINGTON (AP) -- Aiming to increase Internet security, the government is now offering Americans free cyber alerts and computer advice from the Homeland Security Department. Tag: ComDlg32 and MUICache with Registry Tag: 44853
  - 20
    - Exporting/ importing certificates I'm unable to export / import digital certificates from one windows pc to another pc also with windows. Microsoft recommends using the PKCS #7 format. 1 Can this be done ? 2. If so what is the correct procedure Thanks Pat Tag: ComDlg32 and MUICache with Registry Tag: 44851
  - 21
    - security I'm getting so weary of re-installments. Microsoft say's to turn off un-needed services. Where can I find a page which states the bare mininum of services,how to turn them off/on and by which you could still operate a home computer with internet capability? I don't hear of Macs having the same level of problems and am seriously thinking of switching. Tag: ComDlg32 and MUICache with Registry Tag: 44846
  - 22
    - If I go to another site i get booted from the site I am in I how can I stop this from happening??? Tag: ComDlg32 and MUICache with Registry Tag: 44841
  - 23
    - Blocking access to my desktop USB and other ports Hi, Can somebody tell me how i can disallow the users on my network from using the desktops USB port. We have several PCs over the network and need to secure our information. Since the PCs used on our network are shared by users working on different shifts, some i can allow to use the USB ports external storage devices, while other i must refuse them the usage of the USb ports. We can identify the user based on user logon. i am not looking the solution wherein we can disable the USB port in the system bios. Thanx for your help in advance. Jagdish S Varma Tag: ComDlg32 and MUICache with Registry Tag: 44839
  - 24
    - Thank you From August last year, was the time i started having problems. They multiplied and multiplied. The popups were getting out of hand so i installed Nopops. I had screen freezes you wouldnt beleive, to the point of Bottom bar disappearing; Desktop desappearing; Firewall would not enable; could not download files or graphics; opening msn mail was a no-no as i would get at lease 10 IE adds; Ctrl/Alt/Del would not work; And the list goes on and on. Then less than a week ago, I came across Microsoft Newsgroup... (what a blessing that was) I was advised about the different AntiSpyware products. Spybot found 380 spyware....... WOW Ad-aware found another 160 !!! I was then advised as I had so many problems with spyware, to go to SpywareInfo. In the last 3 days, they have helped so much. They have been patient with all my problems, and with the help of both Microsoft Newsgroup and SpywareInfo, I'm finally on top of things. I dont know how to express my appreciation to you all. You are wonderful people. ((((((((((( THANK YOU )))))))))))) Tag: ComDlg32 and MUICache with Registry Tag: 44834
  - 25
    - Protect a document with SmartCard ? Does anybody knows a way to protect a MS document (Word or Excell or whatever) with a Smart Card ? As I understood, the MS Office uses CryptoAPI in order to en/decrypt the document when protecting it by password. Therefore I assume that forcing it to use a Smart Card CSP might do the job. But I don`t know how to do it. Is there some default CSP that Word uses ? So that I could only change a registry entry ? Tag: ComDlg32 and MUICache with Registry Tag: 44833
- Next
  - 1
    - Remote computer start up My computer starts up after proper shut down at odd intervals . Sometimes 3 or 4 times a day. All my associates say this is impossible, a computer cannot start itself after the windows program is shut off. My computer will start itself after I shut it off. Help. Bert Tag: ComDlg32 and MUICache with Registry Tag: 44831
  - 2
    - Disabling passwords in Microsoft Excel Using Excel 2000 and after activating a macro in another file, and now I cannot change any cells in the file I am working in without putting in a password to unprotect the worksheet. However, I never setup a password and I do not know what the password is. Any suggestions would be greatly appreciated. Tag: ComDlg32 and MUICache with Registry Tag: 44830
  - 3
    - self extracting file so i downloaded this application off of kazaa thinking it was winzip 8.0 . stupid i know. when i began to install it the dialogue box read "self-extracting file created by self-extracting file user #....." what does that mean?? Tag: ComDlg32 and MUICache with Registry Tag: 44829
  - 4
    - confused... again hopefully for the last time... after installing the sygate firewall, the webroot spysweeper and the avg anti-virus, it seems i still have an open port (5000)that may (and hence may not) be infected with a trojan (bubbel?). the spysweeper doesn't pick it up, and an online scan usually shows it is still there (although sometimes it doesn't show up on the scan either). is this anything to worry about or have i covered all my bases and this just some residual problem that simply i can't get rid of? thanks! j. "time flies like an arrow. fruit flies like bananas!" Tag: ComDlg32 and MUICache with Registry Tag: 44823
  - 5
    - Arghh...Trying to remove find4u.com I have been trying to remove this website all day. Its a adware program that links to casinos, viagra and the like. Driving me crazy. It is hijacking my MSN homepage and adding unfavorable links to my favorites folder. I have Norton and Zone alarm installed but this is getting right by them. Can anyone help? Thank you. Tag: ComDlg32 and MUICache with Registry Tag: 44822
  - 6
    - supervisor password can any1 tell me where to get a supervisor password from. i've searched the whole microsoft site & am still unsuccessful Tag: ComDlg32 and MUICache with Registry Tag: 44816
  - 7
    - Erase Hard Drive I want to pass my Dell deminsion L550 computer on to my kid. How can I completely erase the disk so he can then install a clean Windows 98. Tag: ComDlg32 and MUICache with Registry Tag: 44814
  - 8
    - WHy doesn't Microsoft provide contact for security issues The bogus MS security bulletin is making the rounds again, and I wanted to report the address it came from so that Microsoft could track them down, but there is no way that I can find to post security concerns to them (nor any way that I can see to actually CONTACT MS people in any way.) Just in case some one who might chance to read this has a clue on how to pass it on. Here is the e- mail address. Seems to be fairly arrogant behavior in not wanting to talk to anyone about things that affect their product Internet Security Center dvyvhtantfrea_yfpury@newsletters.ms.com Tag: ComDlg32 and MUICache with Registry Tag: 44808
  - 9
    - The Same Update I have come to realise I have a Trojan on board...can't=20 get rid of it.Now I find,when scanning for updates,I am=20 given the repeated roll-up,over and over again. I am tired,it is 2.58am.I need to be up in the morning as=20 I am in the middle of organising an airlift. I am appealing to the writers of this Trojan to please=20 tell me how to remove it. There are people suffering in this world and your selfish=20 actions are catastrophic.Forget your egos for a moment,if=20 my computer is inoperable,or compromised,I cannot=20 possibly arrange to send anything by air. I have no idea what you think you are=20 acheiving.Please,show some consideration.You are not the=20 folk heroes you seem to believe you are. =A3185 that I will be forced to pay Microsoft to get your=20 nasty programme off my computer,means =A3185 less to feed=20 and clothe the children of the Sitara orphanage. =A3185 that would perhaps have been spent on Obstetrics=20 equippment for a Hospital in Lahore. Thank You. Tag: ComDlg32 and MUICache with Registry Tag: 44803
  - 10
    - Can I disable the GUEST ACCOUNT on Win ME ? I noticed someone logged into my computer at home when I went to shutdown. It was guest/TITS. I use ZoneAlarm alot but want to be sure no one is on my computer. Tag: ComDlg32 and MUICache with Registry Tag: 44800
  - 11
    - IE6 and Norton Antivirus I've just installed Norton Internet Security 2004. Now I am unable to open any email attachments (Word Documents). What options should I explore? I've already disabled the XP firewall and Nortons' email scanning...still no luck. Tag: ComDlg32 and MUICache with Registry Tag: 44787
  - 12
    - Help me in taking back my account Some one have ahcaked my account and I want it back to me so please help me to take it back Pleaseeeeeeeeeeeeeeee.... I will be very thankful to you Tag: ComDlg32 and MUICache with Registry Tag: 44780
  - 13
    - How do I config URLSCAN to deny HTTP TRACE Did a security audit on my Outlook Web Access server today and one of the high risk vulnerabilities found claimed I should use URLSCAN to deny HTTP TRACE requests. How do I do this? I've downloaded urltrace but I can't make head nor tail of it - seems to be an .ini file needs editing, but what do i put in?? Thanks in advance, Paul. Tag: ComDlg32 and MUICache with Registry Tag: 44779
  - 14
    - Outlook Express Password My problem is opposite of most peoples. I want to set password for my E Mail. Sometimes other people use my computer and I don't want them to read my mail. Tag: ComDlg32 and MUICache with Registry Tag: 44767
  - 15
    - tilde shortcut I have a shortcut that popped up on my desktop. It is microsoft flying windows with a tilde character below it. When I click on properties, I get: type: file 183KB, MS DOS name (tilde), attributes: archive and nothing else. I opened it without apparent harm, and got a large file of code. I deleted it the shortcut, but it came back a couple of days later. I was working with a Word document. Is it associated with M/S Word? I also ran a virus scan on it which was negative. Tag: ComDlg32 and MUICache with Registry Tag: 44755
  - 16
    - security patches When I receive a notice from Microsoft that there are updates to install, some of them say, "Once you install this item, it cannot be removed." i.e. #819696. This bothers me. Can anyone reassure me about installing something that CANNOT be installed. Thanks. Janice Tag: ComDlg32 and MUICache with Registry Tag: 44754
  - 17
    - Blue screen I downloaded and installed Norton Internet Security 2004 and ran live update. Upon completion, a box opens that says to reboot to finish the update. Upon reboot, I got an error message that reads: The instruction at "0x0040a2bc" referenced memory at "0x00000000". The memory could not be "read". Click ok to terminate the program. At the time when that error message popped up, my computer also froze. I could not move the mouse or curser to click ok and close anything. Can someone tell me where I can find out what that means and what I need to do to fix it. Thanks Dave -- Dave Tag: ComDlg32 and MUICache with Registry Tag: 44747
  - 18
    - IPSEC-configuration I have followinf situation: 2 DomainController DC1 and DC2 2 Computer PC1 and PC2 PC1 should communicate witch DC1 and DC2 PC2 should only communicate with DC2 So i wanted to implement IPSEC to solve this problem. I create a policy who make all the IP-Traffic between PC1 and DC1 Secure I create a policy who makes accept DC2 Secure request from PC1 all other Traffic is non Secure. If i configure this with the local policy with a Certificate everythine works fine. If i configure the same rules trouth Active Directory the clients wont get de IPSEC-Policys. What could i done Worng? How can a get a login without having first the IPSEC-Rules? I would like to have a solution where i dont have to install something on the workstations. This example is for testing only. After this we must implement this on 80x PC1 and 200x PC2. I hope someone can help me here. Thxs Haraöd Tag: ComDlg32 and MUICache with Registry Tag: 44744
  - 19
    - Port 1046 Any one know what this port goes to? I can't find it anywhere. I have a Sniffer that im trying to learn but it keeps comming up with destination port 1046 and i have no idea what its used for. HELP Tag: ComDlg32 and MUICache with Registry Tag: 44743
  - 20
    - Outlook 2002 I am running Windows 2000 and Outook 2002 (XP). The problem is that when I go to "Security Settings" in Outlook, Tools, Options, system locks up?????? Tag: ComDlg32 and MUICache with Registry Tag: 44742
  - 21
    - DSFR I wonder if there are step by step instructions to de-bug my Dell PC ? Tag: ComDlg32 and MUICache with Registry Tag: 44741
  - 22
    - cd rom drive everytime i insert a cd rom in my disc drive the drawer just keeps going in and out,it doe,s not read the information on the cd rom, could anyone give me some advice on this one? Tag: ComDlg32 and MUICache with Registry Tag: 44739
  - 23
    - What is "your-wg5n33dutv" I have recently installed a internet security package and it identified a "Invalid Source IP Address" coming from 255.255.255.255 (protocol icmp)and being sent to your- wg5n33dutv (followed by my currently assigned ip address). So I am being pinged. I checked with my ISP and they are not sending it. I ran Ad-Aware and removed all non-windows related spy ware. I have done a google search on this and found several articles refering to your-wg5n33dutv as a location that seems to store results of some form of data gathering. Is this some part of Windows XP or some of their spy software? I am confused how the source IP can be 255.255.255.255? Does anyone have any idea of what this is??? Any help would be greatly appreciated. Thanks Jeff Tag: ComDlg32 and MUICache with Registry Tag: 44738
  - 24
    - MSN Groups Hacked & Taken Over Two MSN Group Communities were hacked into last Saturday. All admin managers were removed, posts monitored and pages deleted. I have provided complete information to Customer Support and the guy is simply operating both like he legitimately owns them. Nothin has been done to get the guy out of them. The MSN Pets & Animals Channel was actually initiated by MSN in 2001 and in 2002 they asked me to take ownership and run it, which have doen since Feb 2002.There are 7000 members wondering what is going on. Looking for a step above Customer Support and feeling very much like burgars took over my house and the police won't do anything about it. Tag: ComDlg32 and MUICache with Registry Tag: 44737
  - 25
    - Log On Password I have microsoft windows 98. When you turn the computer on and the you come to the log on page how can I have a password that works and does not get by passed by pressing the cancel button. Please Help Tag: ComDlg32 and MUICache with Registry Tag: 44736

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32 -- mainly under the subkey " OpenSaveMRU "
HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam -- mainly under the subkey " MUICache "

I understand a lot more about ComDlg32 now, and the MRU lists, but it seems impossible to keep anymore from being added later to the registry after you delete the ones currently used. If i delete all today, next week when i check, all the new ones will be in there. Does anyone know of a program to block MRU's from being copied/saved in the registry and or harddrive

MUICache has as much if not more than the ComDlg32 Key holds. Also, previous programs i've used to erase and block MRU's and recent folders/files won't affect the stuff in this ShellNoRoam folder. If i deleted this key do you think it would affect my system in a way i'm not wanting to or know of a good program to use

I don't want to be traced, at all!! If you find any of this out, you're way too damn smart

Top

Re: ComDlg32 and MUICache with Registry by Dirk

Dirk
Thu Jan 29 08:23:22 CST 2004

"-Tyler-" <tylergill20@hotmail.com> schreef in bericht
news:1960121C-7429-4FE2-B278-FD74C1BFFC6F@microsoft.com...
>
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg3
2 -- mainly under the subkey " OpenSaveMRU ".
> HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam -- mainly under
the subkey " MUICache ".
>
> I understand a lot more about ComDlg32 now, and the MRU lists, but it
seems impossible to keep anymore from being added later to the registry
after you delete the ones currently used. If i delete all today, next week
when i check, all the new ones will be in there. Does anyone know of a
program to block MRU's from being copied/saved in the registry and or
harddrive?
>
> MUICache has as much if not more than the ComDlg32 Key holds. Also,
previous programs i've used to erase and block MRU's and recent
folders/files won't affect the stuff in this ShellNoRoam folder. If i
deleted this key do you think it would affect my system in a way i'm not
wanting to or know of a good program to use?
>
> I don't want to be traced, at all!! If you find any of this out, you're
way too damn smart.

http://www.spywareinfo.com/articles/comdlg32/

Top