Does anyone recognize this?

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Recent E-mail telling me to to open "patch.exe" I received an e-mail that looks like it came from "Microsoft". It says to open "patch.exe". I did not do this because the explanation was miss-worded and not in very good english. Is this legit? Tag: Does anyone recognize this? Tag: 59903
  - 2
    - How to apply security updates to PCs not connected to the Internet? Hi, I need to apply all security updates to PCs in our enterprise. These PCs are on a LAN not connected to the Internet. Is it possible to download all security updates to a CD and then apply them? All the PCs are Win98. Is it any Windows product for managing centralized distribution of security updates instead the Windows Update web page that requires direct Internet access? Thanks in advance -- Faustino Dina -------------------------------------------------------- If my email address starts with two 'f' drop the first 'f' when mailing me. Tag: Does anyone recognize this? Tag: 59902
  - 3
    - I need help with the SP2, My automatic update failed to recieve the PS2, how can i redownload it? Tag: Does anyone recognize this? Tag: 59898
  - 4
    - port 139/445 traffic not picked up by antivirus Having a lot of 139/445 traffic in my network, so much that when this virus runs on one of the servers gets a event id 2022 -out of connections. All patches and updates have been loaded. Been in contact with Trend they picked up some spyware appending to secfind.exe, but haven't fixed it as yet. We have a mixed enviroment, win2k and XP. This only affects the Win2k. Win2k security problem? Have spoken to Microsoft in S.Africa but they only have a sweat and rather charming Gal to help you with virus removal tools etc but no where to excalate to. Been hacking at this for 2 weeks now!!!!!!!!!! Tag: Does anyone recognize this? Tag: 59893
  - 5
    - Microsoft update with attached file I just recieved an e-mail with an attached file that claimed to be from Microsofts Program Security Section. It urged me to run the attached file claiming to be a cumulative patch that eliminates all known security vulnerabilities in Internet Explorer, Outlook and Outlook Express. I did not open the file and deleted it. Could this have been a valid update or more then likely a virus. If this was a virus why did my Norton Antivirus e- mail scanning feature not catch it. Thanks Alan Tag: Does anyone recognize this? Tag: 59892
  - 6
    - automatic updates for Critical Service packs I have had a full recovery, can you show me how to get this back please? Tag: Does anyone recognize this? Tag: 59886
  - 7
    - windows updates Hallo, I used to have regular alerts for Windows service updates but since I had a full recovery I cannot see how to make this automatic again. Could you please direct me to have automatic alerts for Critical updates? Thanks Malvina Tag: Does anyone recognize this? Tag: 59884
  - 8
    - "Cannot Find Server" Message Hi all. We got an email from a friend a while back that had no subject with an attachment. The message said, "I have a new phone number, please update your records". We opened the attachment and ever since internet explorer launches continuosly with the message "cannot find server". The page cannot find server page also pops up. Then it closes and does it again. Sometimes many copies are open at the same time. I have scanned it with Norton, it doesn't find anything. Any suggestions? Tag: Does anyone recognize this? Tag: 59882
  - 9
    - Cookies and Tracking I have Windows XP Pro sp1 with IE6.0 I also have installed Adware SE. I just ran scan and found a tracking on my cookies. I immediately deleted it. I then went into tools/internet options/privacy/advanced for cookie handling. Can someone tell me how this should be set? Should the overide automatic cookie handling be checked or unchecked and if checked what do I set for 1st party and 3rd party... Accept, Block, or enable? Any help would be great. I just ran a scan yesterday and found 8. How do these tracking things get on one's computer? Tag: Does anyone recognize this? Tag: 59879
  - 10
    - Hewlett Packard Certificate Have had a pop-up that appears to be from HP. However, if you read further, you will find out that if you click on close or no, you are authorizing the agent to retrieve data or download data to your computer without your consent. Looks like a HP certificate but if you look on down, the expiration date is (I think) 9-02. I have reported it to Microsoft security. Anyone else seen this thing? It has happened 3 times to me. -- Sam Tag: Does anyone recognize this? Tag: 59875
  - 11
    - Overwriting data on a hard drive How do you completely overwrite a hard drive? Tag: Does anyone recognize this? Tag: 59861
  - 12
    - How to isolate laptops from domain until AV is current. Hello, I need some help! We are having a problem with users logging on to the domain with laptops that are infected. Is there a way to isolate systems until their AV definitions are brought current. We are using NAV Corporate Edition. Tag: Does anyone recognize this? Tag: 59859
  - 13
    - Microsoft's role in Biometric windows authentication??? I was wondering if anyone knows and can tell me where Windows XP stands as far as supporting biometric devices. I am working on a project and trying to do a little research. I am working with Windows XP Pro on some IBM Thinkpads (T42). These laptops are headed to some field users and need to be a little more secure against theft AND unauthorized access in case they are able to access our network. Biometrics seems to be my next step to look into. So, if anyone has any information or any experiences please send them my way. Thanks! Tag: Does anyone recognize this? Tag: 59857
  - 14
    - Microsoft's role in Biometric windows authentication??? I was wondering if anyone knows and can tell me where Windows XP stands as far as supporting biometric devices. I am working on a project and trying to do a little research. I am working with Windows XP Pro on some IBM Thinkpads (T42). These laptops are headed to some field users and need to be a little more secure against theft AND unauthorized access in case they are able to access our network. Biometrics seems to be my next step to look into. So, if anyone has any information or any experiences please send them my way. Thanks! Tag: Does anyone recognize this? Tag: 59856
  - 15
    - Advertisements pouring in through IE When I leave my computer on and only the icons are on the screen, stuff pours in through the explorer and I can't figure out a way to block this. The other day I had 30 advertisements to close just to get back to the main screen. Any help would be appreciated. Tag: Does anyone recognize this? Tag: 59855
  - 16
    - Create a computer certificate for non-connected machine? Here's my scenario: We're doing L2TP VPNs, and we have a very well functional internal PKI set up (doing EAP-TLS for interal wireless, so it's well tested). In doing L2TP VPNs, we need to get certificates on the clients--a User level certificate stored in the local computer store. That's easy, we do it with autoenrollment and a GPO on the domain. However, I have 2 clients that are not part of my domain that need to get a computer certificate. I can get them the certs for my Root and issuing certificate authorities, that's easy, but how in the world do I get them a computer certificate? Please note, they are completely disconnected. Our Certificate server is not reachable from the outside world, nor are these computers going to be toted into the office to be on my network anytime soon. I'm not doing PPTP to get them in without certificates to make the request. How can I make a request on their behalf and export something that I can send via floppy or USB? We're not ready to do smartcards yet. Gratzi Edd Tag: Does anyone recognize this? Tag: 59851
  - 17
    - security log Hi, What is a "best practice" method of auditing failed logon attemtps? I have a small AD - 50 users, and am auditing failed logon attempts but there are always a bunch of events that do not look that important - 675, 677, 617 with --, 627...how does one sift through all of the events and pick out real "attempted logons"? What else should I be looking for? Thanks - Wayner Tag: Does anyone recognize this? Tag: 59848
  - 18
    - workstation locking Hi, I cannot find where to change locking workstation properties. I have a user that says her computer gets locked in way to little time. I am running 2000 servers - AD, and XP pro workstations. I looked in domain group policy but could not find anything... Thanks - Wayner Tag: Does anyone recognize this? Tag: 59845
  - 19
    - log on to line at welcome page is missing When I logon I use to have 3 lines show up User Name Password Lon on as I now can't seem to get the Log on as to show up. I press options beside the shut down buttom but that doesn't display it either. The reason why I need this is that the administrator account I used was associated with my domain, now it would appear that the only account I can access is a guest account. This doesn't help me to do any administrator work. How or can I get this to display back so I can log into my admin account. I can hook this machine back onto the network but I still can't get the machine to look for the admin on the server, it will only look locally. Tag: Does anyone recognize this? Tag: 59844
  - 20
    - having windows errors I have a McAfee firewall and have received some error messages ie: "AVSYNMGR32DLL has caused and error in MCSCAN32DLL" also another message of "RULAUNCH caused an error in (UNknown)" Anything I need to do at this time? Tag: Does anyone recognize this? Tag: 59841
  - 21
    - help express what is this? why, after three years is the box for help express popping up at start? why does my fire wall and virus protection call this spy ware? what or where can i find it installed on the computer?should i be concerned? Tag: Does anyone recognize this? Tag: 59839
  - 22
    - sp2 How can I receive an sp2 update on cd? I move tomorrow and will loose my broadband service. It will be replaced with dial up service. Tag: Does anyone recognize this? Tag: 59836
  - 23
    - KB840315 I sent Microsoft Press an email stating that a training kit I purchased for study does not work. I recieved the following response: "Hello, Thank you for contacting Training Kit Feedback. We have discovered that the Windows Hotfix KB840315 update causes the Readiness Review program to fail. You can verify if this Hotfix is installed on your system by looking at the list of programs shown under Add/Remove Programs in the Control Panel. We are currently working to acquire a fix for this issue. Once a fix becomes available, we will let you know, and also post details in an article in the Microsoft Knowledge Base. Regards, Xin Microsoft Learning Support http://www.microsoft.com/learning/support I hope this response was helpful. If you have comments about our support, write to us at mspts@microsoft.com. Please remember to include the subject line from your original message. Thank you." Tag: Does anyone recognize this? Tag: 59830
  - 24
    - System shutdown initiated... My computer self-restarted with the following message: "This system is shutting down. Please save all work in progress and log off. any unsaved changes will be lost. This shutdown was initiated y NT Authority\SYSTEM. Message : System shutdown initiated" I did not initiate the shutdown. Scan with latest virus definition files. no virus found. Also scan with Blaster worm removal tool. Nothing found. Please help Tag: Does anyone recognize this? Tag: 59828
  - 25
    - spyware jerks I just want to post this here for all of you to see. Who knows, it will probably help you also. I have found a file in my windows\system that is spyware and unrecognizable and unremovable. The file is xwxnwhcw.exe and it's owned by a company called www.callinghome.biz . So far I haven't found a way to get rid of it. I tried from dos even with windows shut down. This guy is a real sneaky jerk ( not the words I'd use to his face), who should have his nose broke but, what're ya gonna do? At any rate, if anyone knows a fix, please post it, thanks. Tag: Does anyone recognize this? Tag: 59823
- Next
  - 1
    - validating a file's digital signature Is there a way to validate the digital signature of a file (the one show in it's properties window of windows explorer) using code (preferable vb code)? dimitris Tag: Does anyone recognize this? Tag: 59822
  - 2
    - Disable ICF after Network setup Wizard Ok i was told that the Network setu wizard automaticaly activate the Internet Connection Firewall, whih may be what keeps screwing up my atempts to file and printer share, or even view the computers on each others network places. SO how do i disable the ICF after the newtwork setup wizard. During the setup it bridged my internet connections (LAC and 1394 on the desktop and, LAC 1394 and Wireless on the laptop) and now i no longer have an advacned tab on any of the properties/ change settings screen. Tag: Does anyone recognize this? Tag: 59820
  - 3
    - Being Hacked Need Help guys I am really new here, and I think (well I know) someone is hacking into my MSN account, I didnt really clue in that I may be in trouble, I say this because every time I logged into my msn personally it would say you have been logged into another computer and then I would have to log in again, but now today this guy has been adding crude addresses to my account and has been changing my name! and it is becoming a nuissance, because he like takes over my account like every 10 minutes even if I do a really complex password, I just need some help, I am not experienced in this kind of stuff so plz someone help me! Tag: Does anyone recognize this? Tag: 59818
  - 4
    - download a new program I am trying to download a new program? It tells me that I need to disable my norton and also my explorer before I can download the program. When I go to the task manager to shut them down they are not listed? That is what the help prompt said to do? Can anybody help me figure this out? Tag: Does anyone recognize this? Tag: 59815
  - 5
    - Unable to search with IE Yesterday was moving really slow and getting a lot of extra popups last few days . Then last night could not get on so went in safe mode and finally used my 2000 disk to get on and now my IE is locked from me changing anything give me an errow when I go to internet options that I can access restrictions and to contact administrator. I am trying to fix this please help. Cant get anywhere on the internet. I try to search but comes back page not found and I have 2 domains so know that they are there. Pleas help Tag: Does anyone recognize this? Tag: 59811
  - 6
    - Norton error message I use Norton antivirus software and run XP Home Edition. I suddenlt get an error message when I start my computer which says "Cannot access Drive C". What is this all about? How do I resolve this? Thanks Tag: Does anyone recognize this? Tag: 59807
  - 7
    - cleaning up files to sell comp. HI I am looking to sell my desktop Compaq Presario. I would like to know if there is any way to absolutely get rid of any files I may have on the computer?? Also is there a way I can remove my name from the registration of the computer?? any help would be greatly appreciated. Thank you Tag: Does anyone recognize this? Tag: 59806
  - 8
    - internet connection firewall When I try to check the box that says "protect my computer and network by limiting or preventing access to this computer from the internet" (in the properties of Local Connection) it says "an error occured while internet connection sharing was being enabled. the service cannot accept control messages at this time" not sure what to do. can anyone help me please. thanks, tom Tag: Does anyone recognize this? Tag: 59797
  - 9
    - hidden virus I have done a scan of my machine from a web site and it found an infected file called attachment.45 "yours.pif" The file location is C/documents and settings\franks\local settings\application data\microsoft outlook\outlook.pst>attachment.45 "yours.pif" When I click on documents and settings, then franks, there is no local settings folder. How do I find this file to delete it? -- Frank Milnes Tag: Does anyone recognize this? Tag: 59795
  - 10
    - Can't install.exe I have admin priviledges, this is the same user account that I uninstalled the program from completely. I changed companies and this program generates my legal documents which had to be reinstalled with the new companies info. I have changed nothing. This is the ONLY user profile on my system. I am on XP pro. Where in the registry would I go to find out why my priviledges have changed? Where I have gone shows that I have all priviledges....that is why I am stuck. Thanks, Robyn Tag: Does anyone recognize this? Tag: 59794
  - 11
    - Re: Mozilla Firefox I've been looking for an alternative to Internet Explorer and saw how Firefox was on someone else's computer. I was very impressed with the fact that it has pop-up blocking and is less of a memory hog than Internet Explorer, but one thing troubles me about Firefox. Why isn't there "security zones" in Firefox? I have over 100 sites in my Restricted Zones list (Internet Explorer) and I fear that in Firefox, I might unintentionally go to one of these sites and not have the protection there I would have had if I was using IE for browsing. Why doesn't Firefox have zones like this and is there an "alternative" to this in Firefox where I can disable things like file downloads, active scripting, Java applets, etc.? Tag: Does anyone recognize this? Tag: 59793
  - 12
    - someone had stole my password someone had stole my MSN password and changed and the secret answer how can i do to take it back please anyone can help me!? Tag: Does anyone recognize this? Tag: 59787
  - 13
    - sharing a firewall? I have an xp pro that I want to network with two 98s and a 95 computer at home, so we can all share one dial-up connection. (so the kids can access the internet without tying up my work computer) the xp has an ethernet card, and we use dial-up I am new to networking and have some basic questions: (I don't even know the terminology for networking, so please be patient.) If I use the xp pro as the host computer, can I configure the other computers to access the internet through it's firewall, or does each computer have to run it's own firewall app? or do I have to buy a router with it's own firewall? do they even work on dial-up connections? if I do that, do I have to disable my xp's onboard trend firewall? Does anyone know a link to a site which could help me determine what hardware (cords, adapters, switches-whatever) I will need to buy to create a network? I'm hoping for maybe a vendor site where I can input what I want to do and it will try to sell me the required hardware. does each of the non-host computers have to have a network card? or can they be networked through their modems with a phone line to the xp's ethernet card? when we convert to cable or dsl will I have to buy a whole new set of networking cords and adapters to upgrade the dial-up sharing to cable/dsl? from what I've read, I assume I have to create the entire network before enabling internet connection sharing, is this the only way to do it, or can I add one or two computers initially, then add the others later without too many glitches/reconfigurations? any comments, suggestions or links would be appreciated Thank You, Liz Tag: Does anyone recognize this? Tag: 59786
  - 14
    - Help Hi All, I had assigned a supervisor password but I decided not to have a password any more for turning on the computer. So I restart the computer and at the very beginning o fthe restart process I pressed ctl + delete to go to the specific page for doing this. Is there any special name for this page though? If yes, I appreciate you letting me know. I deleted the supervision password bu then I also deactivated the username password by mistake. Now when I am going back to that page I cannot choose the user's password and it is deactivated. Does any body know how to activate it again? I appreciate your quick answer. Afsaneh Tag: Does anyone recognize this? Tag: 59785
  - 15
    - Help I wanted to assign a password to myself as the administrator of my laptop but when I do that and restart. The window in which I should typr my password to enter is not active meaning that I cannot type any thing in it for about 20 minutes that it becomes active by itself!!! Any thought what could be the reason? Tag: Does anyone recognize this? Tag: 59784
  - 16
    - Lost admin priviledges Out of the blue I cannot re install a program called Zipforms that I need to perform my job. I am on as an administrator. I am allowed to download but not install the software. It tels me to log back on with priviledges, please help as to where I can go in the registry. I have been in and it shows that I have full privileges :( I'm stuck. Tag: Does anyone recognize this? Tag: 59782
  - 17
    - i need help! Not sure what to do. I had a foreign student stay with me, and she has loaded this messenger thingy on to my pc, now i am constantly barraged with pop ups, Ive tried to contact support, but i need a 'passport' which i dont have because i did not set up this account, does not tell you how to get rid off it, can anyone please give some suggestions? Thanks, The majorsmrs. Tag: Does anyone recognize this? Tag: 59768
  - 18
    - attachments when family and friends attach photographs to email I get a message syaing that OE has removed access to unsafe attachments. How can I change this as I am missing the photos ? Thanks Tag: Does anyone recognize this? Tag: 59766
  - 19
    - Security Certificates Everytime i enter most sites i get a pop up form internet explorer titled "Security Alert" Information you exchange with this site cannot be viewed or changed by others. However there is a pron=blem with the site's security certificate. __________________________________________________________ The sercurity certificate is from a trusted certifying authority. The security certificate has expired or is not yet valid. The security certificate has a valid name matching the name of the page you are trying to view. Do you want to proceed? Yes No View Certificate __________________________________________________________ Thats what the box says. I want this popup to stop showing. it pops up on almost all the sites i visit and its disturbs me alot. how do i stop this from poping up? can i disable it or something? PLZ HELP Tag: Does anyone recognize this? Tag: 59765
  - 20
    - security check after my symantec security check,i have detailed analysis that my pc is at risk for hacker exposure and my PING and HTTP is open...the rest are closed and stealth. Tag: Does anyone recognize this? Tag: 59761
  - 21
    - Yahoo Messenger website valid??? I have Windows XP Pro sp1, IE6.0 and use Yahoo Messenger 6.0 About a week ago I dialed into the internet and a screen came up saying: >>> There is a security update to Yahoo Messenger. Install immediately and it just downloaded from location http://us.dl1.yimg/download.yahoo.com/pgdownload/ym and it was 4545k. (Since it took awhile for download I was able to write all info down for post). As download progressed (could not stop it) it took me to the Microsoft Internet Explorer Downloads site http://www.microsoft.com/windows/ie/downloads/default.mspx Then it changed to site http://www.microsoft.com/windows/ie/downloads/default/mspx #XSLTfullModule122121120120 Can someone tell me if this is a valid site? I've never had Yahoo messenger notify me for security updates? I have all WU critical updates and I did install a security update from optional updates (v5). I sent a feedback to Yahoo 3 days ago but they have yet to respond. I had a virus on my computer today that I got rid of and when I ran hijackthis one of the entries that said could be suspicious was the http://red.clientsapps.yahoo.customize/ie/defaults/stpymsg g6/*http://www.yahoo.com which is for yahoo messenger. Just need to know if someone knows if sites listed above are valid. Any advice or help would be nice. Tag: Does anyone recognize this? Tag: 59760
  - 22
    - Runaway Pointer Pointer has a mind of it's own. Windows XP SP1, HP 3000+ a330n. While playing games or surfing, pointer takes off as though I have turned over remote assistance. Even happens when I am not online. I can shake it, and sometimes it comes back to me. Sometimes it just goes looking around the page. Does anyone know what causes this and how to fix it? -- Sam Tag: Does anyone recognize this? Tag: 59758
  - 23
    - Win Tools Removal FINALLY.... it is gone I would like to thank members of this forum that steered me in the right direction Tag: Does anyone recognize this? Tag: 59738
  - 24
    - removing Qwikylynx one of our pcs caught this qwikylynx spyware. any idea how to remove it once and for all? Thanks. Tag: Does anyone recognize this? Tag: 59737
  - 25
    - Can one stop Registry modification? Hi, My Windows 98SE System's Register seems to be an open and modifiable book to IE. Is there a way to stop modifications by Adware. They seem to really effect the machine performance. Besides, I would say it is horrendous Netiquette. Does making the Register file or a Windows directory attribute Read-Only, System, or Hidden help any? Sincerely, Gregory D. MELLOTT for Kenton W. Tag: Does anyone recognize this? Tag: 59730

wupdater.exe
My son has a program on his 2 month old Dell (running
Windows XP) called "wupdater.exe".

In the course of a "normal" shutdown, his computer is
very slow to respond and a box pops up asking if he wants
to end the "wupdater.exe" program that is running.

What's going on?

Re: Does anyone recognize this? by Chris

Chris
Tue Aug 24 11:15:40 CDT 2004

It's spyware, use spybot or ad-aware to kill it.

Greg wrote:
> wupdater.exe
> My son has a program on his 2 month old Dell (running
> Windows XP) called "wupdater.exe".
>
> In the course of a "normal" shutdown, his computer is
> very slow to respond and a box pops up asking if he wants
> to end the "wupdater.exe" program that is running.
>
> What's going on?

RE: Does anyone recognize this? by MAP

MAP
Tue Aug 24 19:23:03 CDT 2004

"Greg" wrote:

> wupdater.exe
> My son has a program on his 2 month old Dell (running
> Windows XP) called "wupdater.exe".
>
> In the course of a "normal" shutdown, his computer is
> very slow to respond and a box pops up asking if he wants
> to end the "wupdater.exe" program that is running.
>
> What's going on?
>
Here are some links for the programs the other posters suggested.

Spybot S&D - http://www.safer-networking.org/en/index.html
Ad-aware - www.lavasoftusa.com
CWShedder - http://www.spywareinfo.com/~merijn/downloads.html
Hijack this - http://www.spywareinfo.com/~merijn/downloads.html
SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html
SpywareGuard - http://www.javacoolsoftware.com/spywareguard.html
WinPatrol - www.winpatrol.com
BHODemon - http://www.definitivesolutions.com/
Bazooka -http://www.kephyr.com/spywarescanner/index.html
asquared2 "Trojan Remover" - http://www.emsisoft.com/en/

A link for free online virus and trojan scanners.
http://virusall.com/downscan.html

A listing of BHO's
http://www.spywaredata.com/bho.php?current_page=0

To see if that freeware program you are about to inststall
is infested with spyware check it out first at this link.
http://www.spychecker.com/