Contingency?

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - unwanted "favorites" porn additions recently in my favorites column some bastards are attaching several porn and even kiddie porn sites. How in hell can they do this, and I can I stop them? I almost puked when I saw one of their lures. Tag: Contingency? Tag: 31880
  - 2
    - http://youfindall.net/101/ wont leave me alone The URL http://youfindall.net/101/ keeps installing itself as my home page and my default search engine. I have cleared temp files,history,and tried installing other pages as my default. I have also tried prtect spy wear to see if it is collecting data from me. but I cant get rid of it. I really dont want to rebuild my computer Tag: Contingency? Tag: 31858
  - 3
    - address book question.. a long time ago i read somewhere that the first name and email in address book should be aaaa(@)aaaa.com. or some other name similar that does not point to a real email address. the article stated that this will stop a worm virus from getting past your address book to others. is this true? seems like virus writer would set the virus to bypass the first address and go to second etc. Tag: Contingency? Tag: 31857
  - 4
    - alerts i need some one to help me get the microsoft explorer alerts of my computer it wont let me play games or download anything Tag: Contingency? Tag: 31852
  - 5
    - Key Code I had a new computer built for me but have somwhow lost the key code for XP. Don't know if I threw it away or they did not give it to me. Can anyone tlee me if there is a way to get it from my computer? Thanks a bunch if you can. Kris Tag: Contingency? Tag: 31839
  - 6
    - Advice on firewall Hi All Does anyone here have any recommendations on a hardware firewall. I need it for a small office of about 50 computers. Any help greatly appreciated. Tag: Contingency? Tag: 31838
  - 7
    - MBSA Report Error Heeeelpp!!! I run "Microsoft Baseline Security Analyzer" on my XP machine with 'mbsacli.exe' command prompt utility. But I always recieve the error message... Error: All attempts to load xml failed Any help will be appreciated. Thanx in advance... PS: I stopped the WWW Publishing service Tag: Contingency? Tag: 31837
  - 8
    - Problems with pc going to porn sites by it self Everytime i get online for awhile it goes into the same porn site by itself and can not close the site. PLEASE HELP Tag: Contingency? Tag: 31830
  - 9
    - Urgent! I been hacked and i dunno wat to do Hi, basicaly, i just got a nu PC, as my previous one went coocoo. I went to see what i thought was a friend on SLSK, when all of a sudden things like Virus scanner and firewall started dissapearing. i restarted my PC, and it was still happening, so i opened the task manager, and that dissapeared after 2 seconds. i done a system restore, and had the same problem. i need my PC, as i have just spent all my saved wages on it (i am only 16, with a crappy part time at macdonalds), yet i need my PC to take part in my paid place for a diploma in IT. can Any1 help me pleeeeease? Tag: Contingency? Tag: 31811
  - 10
    - Unable to access a web site I am not able to access a web site. I have been visiting this web site quite often. My IE asks for a login and pwd to connect to this web site. Pls help Thanks Tag: Contingency? Tag: 31806
  - 11
    - Possible information leakage from DNS quirks Hello, Two possible issues here, Microsoft DNS client related. I don't know if they are seriously exploitable, or just information leakage: 1 - I suppose this one is related to Microsoft Knowledge base article 272020 (Unnecessary DNS Query for _ldap._tcp.dc._msdcs.<WorkgroupName>) (http:/ /support.microsoft.com/default.aspx?scid=kb;EN-US;272020). Although not mentioned on the KB, if your WorkgroupName happens to be similar to an existing Internet domain, you'll be querying a DNS server outside your network. For example, I take care of rf.com.br domain. It seems someone (oustide my domain) has set his Win workgroup name as RF. We are in Brazil, so it looks like Windows 'decided' the machine is part of rf.com.br domain (more on this on the second issue). Because of this, the guy's ISP DNS servers forwards the unnecessary queries to my DNS: 200.204.0.138 -> 200.232.120.2 DNS Standard query SOA _ldap._tcp.Primeiro-site-padrao._sites.gc._msdcs.www.rf.com.br 200.232.120.2 -> 200.204.0.138 DNS Standard query response, No such name 200.204.0.10 -> 200.232.120.3 DNS Standard query SOA _ldap._tcp.Primeiro-site-padrao._sites.gc._msdcs.www.rf.com.br 200.232.120.3 -> 200.204.0.10 DNS Standard query response, No such name That goes on for the following names too (hundreds of times a day): _kerberos._tcp.Primeiro-site-padrao._sites.dc._msdcs.www.rf.com.br _gc._tcp.Primeiro-site-padrao._sites.www.rf.com.br Note that "Primeiro_site_padrao" means "First_template_site" or something like that. The aforementioned KBA does not mention anything but "_l dap._tcp.dc._msdcs.WorkgroupName" being queried out - maybe it's not the same bug. I wonder if this is just information leakage, or exploitable in any way (by crafting the DNS reply). 2 - Probably the same guy has his Dynamic DNS update enabled, so his machine (up 24/7) also keeps asking to dynamically update my DNS (I ended up firewalling his IP out; opened it just to grab this). Although my DNS refuses the update, Windows seems to insist, down to trying to negotiate TKEYs: 200.168.31.51 -> 200.232.120.2 DNS Dynamic update SOA rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Dynamic update response, RRset does not exist 200.168.31.51 -> 200.232.120.2 DNS Standard query SOA rf-ubpumac1u03q.www.rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Standard query response, No such name 200.168.31.51 -> 200.232.120.2 DNS Standard query A yankee.rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Standard query response A 200.232.120.2 200.168.31.51 -> 200.232.120.2 DNS Dynamic update SOA rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Dynamic update response, Refused 200.168.31.51 -> 200.232.120.2 DNS Standard query TKEY 996432412690-2 200.232.120.2 -> 200.168.31.51 DNS Standard query response, Refused 200.168.31.51 -> 200.232.120.2 DNS Standard query TKEY 996432412690-2 200.232.120.2 -> 200.168.31.51 DNS Standard query response, Refused 200.168.31.51 -> 200.232.120.2 DNS Dynamic update SOA rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Dynamic update response, Refused 200.168.31.51 -> 200.232.120.2 DNS Standard query TKEY 1047972020242-3 200.232.120.2 -> 200.168.31.51 DNS Standard query response, Refused Note that his Netbios name is rf-ubpumac1u03q (used to be RF only - looks like he fresh-reinstalled and is using the default installation name). Again, not sure if this can be exploited (I'm no hacker), but it sure is information leakage. Regards, Joao S Veiga Tag: Contingency? Tag: 31805
  - 12
    - pop ups How can you get rid of pop ups that appear when you are not connected to the internet in any way. Tag: Contingency? Tag: 31803
  - 13
    - policty option "only run allowed windows applications" restricts everything No applications work when I implement the "only run allowed windows applications" option in a windows 98 policy. I've listed the full path to each app I want to run, but nothing runs. I even tried notepad and calculator by specifying their respective paths and executable names with no luck. Tag: Contingency? Tag: 31799
  - 14
    - Invalid install parameters /q:u /r:n - MDAC 03-033 I can't believe these guys can't even get their installations consistent. Q fixes can usually be installed in Quiet mode (no user prompts) and without forcing a reboot by putting /q:u /r:n at the end. With this fix, the user must hit OK to do the install and a reboot is forced at the end - we have no control of how this install is done. I want to push this install blind (no user needing to be logged in) for unattended (shared, test, backup) workstations, and quiet for users (don't ask them to approve). Anyone figure out how to do this for this patch? Microsoft, you're just not getting better at this! What about your stated intent of not making patches force a reboot! Tag: Contingency? Tag: 31796
  - 15
    - key code I need a generic key code to reinstall works suite 2002 because we do not have the case with number on it. Tag: Contingency? Tag: 31791
  - 16
    - Critical update MS03-026 I auto download updates, but when I view my installation history I do not see that the update MS03-026 has been installed. MS tells me I have to do this to protect against Worm Blaster. I am running XP over ME. Tag: Contingency? Tag: 31785
  - 17
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.09.06 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: Contingency? Tag: 31775
  - 18
    - Log on problems I screwed up my company supplied laptop by tring to set it up for home internet use. I went into the System Setting and set it for home use. Now I get a screen that comes up during start up that says "admin" and it wants a password. My user password no longer works and I can't get back into the control panel to reset it back the way it was. Any ideas how to log on? Tag: Contingency? Tag: 31769
  - 19
    - "use this patch immediately" I keep receiving this patch from "microsoft." Is this a valid Microsoft patch? I don't like the way the e-mail is formatted (doesn't look very professional - from Microsoft)and am not sure it's really from Microsoft. I keep deleting the e-mail - just wondering if anyone else has seen or received this. Thanks Dennis Tag: Contingency? Tag: 31768
  - 20
    - Strange RPCSS activity caught by File Monitor Using ZAP firewall (135->127 blocked) and AVGP antivirus, all MS Updates applied. OS is registered Win98 1st. Also have AdAware & Spybot. None of these are indicating any security issues. However, my domain is having LOTS of static IP's scanned (ICMP ping) every few seconds - pings are blocked on all machines). I've previously implemented "UnPlug n' Pray" to turn off MS UPnP, too. Recently on one machine I had font for a few 3rd party pgms (old installs, until now been displaying fine for years) start showing blank square boxes instead of readable text (such as with the Spell Checker named WordWeb 1.51). Restoring backup of Fonts folder content and Registry didn't cure, so used File Monitor (http://www.sysinternals.com) to watch WordWeb and saw it try to use a font named MANGAL.TTF (probably installed from MS Update to support other languages in IE). Used Fonts Folder utility to delete it. Rebooted, no cure & no trace by File Monitor of what font it was trying to load for a replacement. But while monitoring with File Monitor this entry occurred: 6:51:18 AM Rpcss Read C:\BATCH\MOUSEMGR.DLL SUCCESS Offset: 20770816 Length: 4096 Interesting thing is I do have that BATCH folder (I created it years ago) but no such filename exists there or anywhere on any drive (does now, since I put a attrib +S+H+R dummy text file of that name in BATCH folder). But how could File Monitor have had a read success before I created that dummy filename??? I am seriously suspecting a security breach, but no luck in pinning it down. Anyone have some comments, ideas, etc.? Mostly Anonymous Tag: Contingency? Tag: 31767
  - 21
    - Critical Update Problem I have windows 98 SE. I first downloaded and installed the latest MS critical update MS03-017 (Windows Media Player)when it came out. This critical update continues to pop up on my screen every other day. In frustration, I downloaded and installed this critical update a second time (which is displayed on my download history). I would like to know what I can do to stop this download from popping up on my system. This critical update will even pop up randomly when I am surfing the web. The most frustrating aspect of this is that I don't even have Windows Media Player 7.1. I would appreciate any help you can offer. Tag: Contingency? Tag: 31766
  - 22
    - Non-printing password characters and Remote Desktop logon Is it possible to use a password with non-printing characters to logon to a Remote Desktop session? Thanks Tag: Contingency? Tag: 31765
  - 23
    - NDIS I have recently installed Sygate firewall and see the processes accessing internet. However, what is really bothering me, is one called "NDIS User Mode I/O driver". It downloads increadible amounts of data from internet (just today during 5 hours about 140MB). Could someone please explain what is it good for and whether it can harm security of my PC somehow? Thx... Tag: Contingency? Tag: 31763
  - 24
    - The ultimate in security software Download Secura NOW! FREE http://www.pc4utech.com Direct Download : http://www.pc4utech.com/download/setup Control access to everthing?????. Tag: Contingency? Tag: 31761
  - 25
    - hoax emails from microsoft? I am receiving emails that are from "security@microsoft.com" containing a patch for DUMARU. The message inside reads as follows: Dear friend , use this Internet Explorer patch now! There are dangerous virus in the Internet now! More than 500.000 already infected! Is this legit? KM Tag: Contingency? Tag: 31760
- Next
  - 1
    - File system realtime scan isnt working MY file system realtime scan has been disabled automatically. When i reenable it, it doesnt remain enabled. what should I do Tag: Contingency? Tag: 31753
  - 2
    - Security Download Update My computer prompts me whenever there are updates available on the Microsoft site. it has prompted me to downlaod #823559, which i have done and installed several times. It keeps telling me i need to download this update even after already having done so. Why doesn't my computer recognize that i have already downloaded it? thanks. kls Tag: Contingency? Tag: 31752
  - 3
    - Internet Connection Firewall (ICF) Problem I recently used the System Restore feature in WinXP to correct a problem with a bad software installation. It worked fine but when I tried to protect my computer using the Internet Connection Firewall. It came up with an error stating: An Error occured while Internet Connection Sharing was being enabled. The Dependencies Service or Group failed to Start. When I try to manuall start the Internet Connection Firewall Service, I get an error: Could not Start the Internet Connection Firewall (ICF) or Internet Connection Service (ICS) on Local Computer. Error 1068: Group Failed to Start. Please help . . . Thanks in Advance . . . Martin Tag: Contingency? Tag: 31751
  - 4
    - Wrong Java? Hello, When I want to go to a site with a 'build in chatroom', I can not log in to chat. It's not the wrong java version I think, because I don't get any errormessages from java. I simply can't acess the chatrooms. I can acess the site itself. I did install a couple of weeks ago the free version of 'Zonealarm' (firewall). I did forbid some applications to acess the internet and/or to stopped them from 'acting as a server'. I did then uninstall 'zonealarm', but I still find some traces in the registry and on my hard disk. It appears that not 'everything' is removed from my computer. Tag: Contingency? Tag: 31749
  - 5
    - outpost firewall free version hi all, Does anybody have any idea about how the Outpost firewall [ free] of Agnitum is ? Any special features of it and likewise any shortcomings of it. regards Tag: Contingency? Tag: 31746
  - 6
    - Spam Before you people go complaining about my spam, first read up the definition. Tracker Tag: Contingency? Tag: 31730
  - 7
    - microsoft wireless network question... i have a home network setup using microsoft wireless base station and wireless adapters. i usually log onto my base station management to check what and which computers are logged onto the network and all seems fine. the computers i expect to be on the network are connected (however, i know it's not perfect and sometimes a computer that should be on the network isn't, but i was told this was normal by the microsoft techs). i was just wondering is there another way to find out the exact computers that are on my network that should be on it? is it possible that some outside computer could be on my network, and not have their computer show up on the connected computers to my network? thanks Tag: Contingency? Tag: 31721
  - 8
    - Can't access secure sites For some reason my computer can't access secure sites. I'm using IE 6.0 and until recently had no problem opening secure sites. Now all I get is an error message saying,"Page cannot be displayed." I've checked my security setting and can't find any reason why this is happening. If anyone has any suggestions of what I should do. I would appreciate it. Thanks, Chris Grier Tag: Contingency? Tag: 31715
  - 9
    - IMI.1536.A "Dropper" - Different results and findings? I was performing a series of scans of my machine with various utilities, and an item was detected by Pest Patrol as being a "dropper". The name of the suspect entry was IMI.1536.A. I found that this is said to affect .EXE files. Specifically an Extract.exe file. Looking by Find F & F, I see that there are three Extract.exe's in C:\Windows.One is located in Windows\Command, the second is in Options\Cabs, and the third is in Windows\System. I scanned these (and the entire system as well) with AVG AV, Trend Micro AV, and Freedom Online AV - Nothing was detected. Spybot didn't find it either; not that I was expecting it to. Pest Patrol was the only program that detected this "dropper". Presently, I have "quarantined" this item, and have been doing some research. On the one hand, the "dropper" has a bad connotation. First it is *present* and detected for the first time ever; Second, it is attributed with "...In viruses and trojans, the dropper is the part of the program that installs the hostile code onto the system." That sounds quite unsettling. Symantec site stated Detected as: IMI.1536.A. Characteristics: Memory Resident, Triggered. Area of Infection: .EXE Files. OTOH, another site stated "These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are executed. "Imi.1536.a" infects EXE files only." "Imi.1536.a": "Hello! This is IMI 1.0b.When you see these words, you have been infected the IMI 1.0b virus.This is just for experiment.Please contact me immediately for cure. Fu-Jen U. E.E. Wilbur Dam.1993.4.8." I've not gotten this message as yet, but I've no desire to get it. So, can I safely rid my PC of this thing without affecting these Extract.exe programs? -- LuckyStrike LS@smokedamagedfurniture.youcandriveitawaytoday.com ---------------------------------------------------------------------------- ---------------- Tag: Contingency? Tag: 31714
  - 10
    - Virus (hoaxes) Got an e-mail on line Friday alerting me to a virus. IIt is something identified as jdbg.exe, and it is reportedly not detected by Norton (which I have) or McAfee anti- virus programs. It is supposed to damage my system within 14 days...is this a hoax? I have heard abouut some hoax viruses that have been reported so that the unsuspecting will delete an important file in their system...and I don't want to go down that route. Someone please let me know if you have heard of this Tag: Contingency? Tag: 31713
  - 11
    - Attachment Access Denied 90% of time I get message "OE removed access to following unsafe attachments". Why? (Attachments are from people I know.) Tag: Contingency? Tag: 31704
  - 12
    - Reminder window won't go away Hi A window appeared on my computer...no x to close, can't right click icon in tray to close. alt F4 closes it. The window has the DNS info...like when you can't access a website...no info in it...can't close, refresh cause there is no toolbar...just the title bar that says "Reminder September 5th" I have no reminders set! Can't find anything scheduled on the computer. It 1st appeared at 11:24, appeared at hour intervals, now at 30 minute intervals...still cannot find anything scheduled. Scanned with NAV = no problems NIS shows no intrusion Can this be some type of bug? Or if its something on the computer...how do I get it to stop popping up. I already tried two other newsgroups...Security always has the answers ;) ...please help. HP a250n HP 2210 4 in 1 (printer, etc) XP Home (current on updates) Office 2003 beta NAV/NIS 2003 Any ideas...help...much appreciated. Sheila Tag: Contingency? Tag: 31702
  - 13
    - My pc had intruder Since 9pm last night I have been working on my pc. It is 9 pm on 9/5. I used goback and system restore to return to a system restore I made at that time before I went to the web page link that I believe caused the problem. I have used Symantec on line virus checker and it found nothing. I have used WD diagnostics on my hard drive and it found nothing. This week I updated the Office XP updates and one windows critical updates before last night and there was nothing left to download. I just ran windows update again and found a modem driver update that I recall downloading about a week ago, 3 critical updates and two xp updates. My backup computer with xpPro had no updates to download. My computer appears to be rebooting and working correctly again. I got correcting scandisk to work on reboot and it reports no problems. I am calling my case closed, but I think the odds are that there will be others. Thanks A T Baehr Tag: Contingency? Tag: 31701
  - 14
    - w32 RPC warning in win98 I'm running on windows 98, which is not supposed to be affected by this new blaster virus. A strange thing just happened. I was on-line and a window looking like a typical windows dialog box popped up. It said "virus warning!!! W32 RPC Virus Detected. Click on OK to scan and clean." I was suspicious because I didn't think Windows 98 included virus scanning and cleaning software. Maybe clicking OK would have windows trying to access other virus software? Anyway, I copied down the message, clicked cancel, and proceeded to try to learn more on the internet. Everything I can find out says Windows 98 is not affected by this "vulnerability" as they call it. Was it a legitimate warning? What should I do? Thanks! Tag: Contingency? Tag: 31698
  - 15
    - Security Bulletin MS03-035 We use Word templates in our organisation that include Macros. These Macros are not signed and run automatically, regardless of the Macro Security Settings. I've always assumed that this was because all users have the Template, not just the document(s) derived from it. Is this how it should be - or a symptom of the flaw in Word Macros security reported in MS03-035? Thanks Tag: Contingency? Tag: 31691
  - 16
    - tracking your kids how do i moniter my kids on the computer if they have learned to delete history(which is were i previously checked) is there a way to view deleted history or bring it back up??? Tag: Contingency? Tag: 31687
  - 17
    - Is this message from Microsoft legitimate? I received this email message: Dear Microsoft Windows User : It has recently come to our attention in light of the recent Blaster Worm epidemic that an immediate update to our tcp protocols be taken forthwith. Please find the attached file entitled "installer.exe", this is a recent update to our winsock2 dll and is necessary to reduce the risk of a security breech in your Microsoft Windows internet protocols. Please accept our humblest of apologies for this inconvenience and please install the following file installer.exe. Once installed you may delete the file and continue as normal. Thank you again. There is an attachment called "installer.exe" The sender is ""Support" <Support@microsoft.org>" microsoft.ORG? Is this legitimate? I'm too suspicious to run the exe without confirmation. Thanks Thanks Tag: Contingency? Tag: 31680
  - 18
    - Is the Order of Installing Updates Critical??? I have numerous updates to download and install. How do I know what order to apply them? Any guidance is appreciayed, Karen Tag: Contingency? Tag: 31679
  - 19
    - Patches /// excel Last week I put all the critical upadtes on for sobig. this tuesday when some one would e-mail me an excel file it came in as corupted. I also have 3 other machines in the office that had the updates put on and now they get excel files via e-mail that are corupted. Thanks for you help Tag: Contingency? Tag: 31675
  - 20
    - Security Bulletin MS03-033 I am trying to make sense of Security Bulletin MS03-033. I have WindowsNT 4.0 Server with Service Pack #6a running and according to the MDAC ComCheck program I have MDAC v2.6 with Service Pack #1. In the documentation for MS03- 033, it points me to a patch for various releases of MDAC, but only lists MDAC v2.6 with Service Pack #2. Where do I find a patch for MDAC v2.6 with Service Pack #1 ? Please advise. Tag: Contingency? Tag: 31673
  - 21
    - Outlook: odd behavior I have Outlook Express v6.00.2800.1123 running in Office 98. After downloading the last series of patches, MacAfee firewll is telling me that Outlook has changed from the last use. I also get a strange temp file that downloads. Any clues what's going on? Tag: Contingency? Tag: 31667
  - 22
    - MS03-033 won't recognize MDAC 2.5sp3 I have MDAC 2.5 sp3 on an NT box. The MS03-033 patch errors out with the message that it can't figure out the MDAC version. The Component Checker tool finds 4 dlls that have a version 2.53.6002.0 instead of the 2.53.6000.0 that it thinks should be there. Obviously these DLLs have been updated to a newer version than the original sp3 had but the patch and the Component Checker tool (I'm guessing) are still looking for the old version. Does anyone know how I can get this patch installed? Tag: Contingency? Tag: 31666
  - 23
    - Protocol Numbers Hello .. can anyone shed some light as to what exactly is a "protocol number" and how it is used. I understand the concept of port numbers, but what are "protocol numbers"? Thanks in advance, kovacsa Tag: Contingency? Tag: 31662
  - 24
    - LEGAL ISSUES I RECENTLY (July 1) left a company (not an employee, but independent contractor). I own my computer outrighht and software except win2000 (entreprise) which i paid through leasing arrangement with the company. i just found out that they are still downloading my info (and not just company related info). is it legal for them to trace and look at documents 2 months after the fact? i have done nothing wrong but now am considering a lawsuit. Tag: Contingency? Tag: 31661
  - 25
    - Downloading critical patches I just installed Win XP Home version on my computer. Went to MS.Com to download critical patches for security. They would download, the blue bar going all the way to the right, 100%, but would not start to install after waiting for an additional 15 min. What's wrong? Why after download, they won't install. Thanks. Tag: Contingency? Tag: 31660

How can I prepare to recover from a possible virus
attack? Previous operating systems (Windows95, ..Me)let
me prepare a system disk. I never had to use one, but
that option does not seem to exist in Windows XP. I keep
my McAfee Virus and Firewall as well as Windows XP
updated.
Thanks for your suggestions.

Top

Re: Contingency? by Philip

Philip
Sun Sep 07 08:11:53 CDT 2003

There's a section in Help called "Repair Overview" which details the
built-in options.

--
######################
## PH, London ##
######################

"Vera Cooke" <lvcooke@oberlin.net> wrote in message
news:3d2f01c37537$8f0fe320$a401280a@phx.gbl...
> How can I prepare to recover from a possible virus
> attack? Previous operating systems (Windows95, ..Me)let
> me prepare a system disk. I never had to use one, but
> that option does not seem to exist in Windows XP. I keep
> my McAfee Virus and Firewall as well as Windows XP
> updated.
> Thanks for your suggestions.

Top