porn site on drop down
I have notice when I right click my mouse when i am on a
web browser that an internet site is now located on the
drop down menu. How do I remove that from the right click
drop down menu? Tag: E-Mail Received Tag: 30417
pop-ups
As of three weeks ago began getting pop-ups from vendors
of anti-popup software. Boxes similar in appearance to
messenger boxes. These are the ONLY popups I receive
during off-line operation. Doesn't matter if I'm on-line
or not -- they just come regardless of what I'm doing.
Norton, SpybotS&D, adaware, normal maintenance have no
effect. Vendors claim they are coming in through hole in
MS Messenger. How to prevent/disable? Damned if I'll
buy preventative from the perpetrators. Tag: E-Mail Received Tag: 30413
mouse/right click
I have notice when I right click my mouse when i am on a
web browser that an internet site is now located on the
drop down menu. How do I remove that from the right click
drop down menu? Tag: E-Mail Received Tag: 30412
Help: Windows XP Pro certificate store has a strange cert that may be bad or damanged
I have been working on getting activesync to Exchange 2003 working and was
therefore verifying certificates when I noticed that my XP client to which I
had a partnership had 3 very odd certificate folders.
The three folders are after "Certificate Enrollment Request/Certificates"
and have ASCII characters and Kanji (spelling?) characters intermixed.
This made me start looking through all my certificate folders and I noticed
some odd ones.
In the Certificate Enrollment Request/Certificates there is one named
"FZkC37K9xRLk8364" which reports that is either tampered with or corrupted.
I have attached just the public key to this cert (although I have both the
public and private in the request).
Is my cert-store damaged, or is there something malicious going on?
My machine is Windows XP and is in it's own workgroup, although it often
communicates to a Win2003 DC.
Any advice or investigative suggestions would be most welcome!
-Neil
neilgo(_r#mov3)@xcelar.com
begin 666 Bad or Damaged Cert.p7b
M,((!8 8)*H9(AO<-`0<"H((!43""`4T"`0$Q`# +!@DJADB&]PT!!P&@@@$U
M,((!,3""`1Z@`P(!`@(0^I"N127#AII*`9=_\N:+9S )!@4K#@,"'04`,!LQ
M&3 7!@-5! ,3$$9::T,S-TLY>%),:S@S-C0P'A<-,#(Q,3(P,3 R-# W6A<-
M,#,Q,3(P,38R-# W6C ;,1DP%P8#500#$Q!&6FM#,S=+.7A23&LX,S8T,(&?
M, T&"2J&2(;W#0$!`04``X&-`#"!B0*!@0"S5N-FPP!F<83)A#Y@R3FSM3#X
MP!8H-XA/3"]'K)?EYRX+J(QK1I -Z&D*6_DBM,3'"V&1\PU9B5@#_F][(.XV
M)7J&*I;)(+A8TM=RL9#<Z<Q(@'-&$1FCVUV80*H@98IN/AGXNO_6DI&!H-66
I'1R>8Q+RJZCV<F,@K_X[&FNXFP(#`0`!, D&!2L.`P(=!0`#`@`B,0``
`
end Tag: E-Mail Received Tag: 30411
email security
How secure is my email? At my place of work, I send and
receive email very often. What are the chances that my
boss is reading my mail? Is it legal? I have a password
protected mailbox, can my boss still get to my mail?
Thank you in advance for your help. Tag: E-Mail Received Tag: 30408
Basic computer security
I have a 15 year old son who knows that if you reboot the
computer you can get past the security passwords on the
screen saver or standby and the user passwords. I have
Windows 98. Is there a way I can password my computer
before windows comes on?
In other words, can a password be set up in MS Dos before
Windows comes on? Tag: E-Mail Received Tag: 30378
Buggy WinXP Patch 821557 ???
When I installed Windows Update 821557, I lost function of my right
click drop down menus, couldn't rename files or folders and several
other bugs.
System would lock and had to force quit what ever was involved. I
uninstalled the patch and everything returned to normal. To play it
safe, I restored my Win XP SP1 (home edition) to a previous state
(before patch). I'm afraid to install this patch again and have been
trying to gather info on this buggy patch. Anyone else having problems
with this patch ?? I'd like to know-----Thanks !!
--
Posted via http://dbforums.com Tag: E-Mail Received Tag: 30374
Unexpected System Shutdown
Recently the W2K server -well patched- had two unexpected
system shutdowns. The only trace is the entry in the
System event log with Event ID:6008.
It could not be power related; the other machines sharing
from the same power source did not reboot.
Could it be a hidden worm, or a new attack? I know you
could shutdown local area network machines remotely. Maybe
the command can be sent over IP to any unauthorized
network?
Thanks. Tag: E-Mail Received Tag: 30369
Microsoft Passport problem
Hello,
Windows 98 / IE 6.0 SP1
I'm having a problem logging with Microsoft's Passport
service. The signin page has no field/box whatsoever
beside the email field and a normal input box beside the
password. If I simply type in my password it says it's
incorrect.
If I click on the "Sign in with a different email address"
link I get a screen full of garbage; I've cut&pasted that
screen at the bottom of this message.
I know my password is correct because when I goto member
services, I'm able to enter in my email and password and
it says the password is changed correctly.
Can someone help me with microsoft passport?
Alex
!HTTP/1.0 302 Found Date: Tue, 26 Aug 2003 13:55:36 GMT
Content-Type: text/html Expires: Tue, 26 Aug 2003 13:55:36
GMT Cache-Control: no-cache Server: Microsoft-IIS/5.0
PPServer: H: LAWPPLOG4C003 cachecontrol: no-store Pragma:
no-cache P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Set-
Cookie: MSPAuth= ; expires=Thu, 30-Oct-1980 16:00:00
GMT;domain=.passport.com;path=/;HTTPOnly= ;version=1 Set-
Cookie: MSPProf= ; expires=Thu, 30-Oct-1980 16:00:00
GMT;domain=.passport.com;path=/;HTTPOnly= ;version=1 Set-
Cookie: MSPSec= ; expires=Thu, 30-Oct-1980 16:00:00
GMT;domain=.passport.com;path=/;HTTPOnly= ;version=1 Set-
Cookie: MSPSec1= ; expires=Thu, 30-Oct-1980 16:00:00
GMT;domain=.passport.com;path=/;HTTPOnly= ;version=1 Set-
Cookie: MSPSec= ; expires=Thu, 30-Oct-1980 16:00:00
GMT;domain=.passport.com;path=/ppsecure;HTTPOnly= ;version=
1 Set-Cookie: MSPDom= ; expires=Thu, 30-Oct-1980 16:00:00
GMT;domain=.passport.com;path=/;HTTPOnly= ;version=1
Authentication-Info: Passport1.4 da-status=logout
Authentication-Info: Passport1.4 da-status=logout
Location: http://login.passport.net/uilogout.srf?
lc=1033&sf=1&id=41332&ru=https://partnering.one.microsoft.c
om/mcp/Default.aspx&tw=3600&fs=1&kv=2&cb=&cbid=41332&ts=-
7&sec=&mspp_shared=1&lm=I&seclog=10&ver=2.1.6000.1&tpf=421d
d1337ced726e952f41b60e71ebfe Via: 1.1 px4wh (NetCache
NetApp/5.5D1) Tag: E-Mail Received Tag: 30365
** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.08.26
Before you post a question to a Microsoft.public.*.security newsgroup, note
that your question may already be answered below:
Answers to Top Frequently Asked Questions:
http://securityadmin.info
My question is not mentioned below. How do I get an answer immediately,
with no waiting?
http://securityadmin.info/faq.htm#moreinfo
See also: http://www.google.com/groups?as_ugroup=microsoft.public.*
See also: http://www.google.com/advanced_group_search
See also: http://www.google.com
I want to post a problem or question to the newsgroup. What info do I need
to post in order to get a correct answer quickly?
http://securityadmin.info/faq.htm#netiquette
I have the RPC Blaster worm "virus," what do I do?
http://www.microsoft.com/security/incident/blast.asp
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
My computer is giving RPC Remote Procedure Call messages.
There is a TFTP message or file on my computer.
My computer keeps locking up, and/or rebooting, or telling me that it will
reboot in 1 minute.
http://www.microsoft.com/security/incident/blast.asp
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
Where can I download the Blaster worm / RPC DCOM patch?
http://windowsupdate.microsoft.com OR
http://www.microsoft.com/technet/security/current.asp
I just heard about a new Microsoft security patch update. Where can I get
the patch?
http://windowsupdate.microsoft.com OR
http://www.microsoft.com/technet/security/current.asp
I just installed a Microsoft security patch update, and now my computer is
having problems.
http://securityadmin.info/faq.htm#patchbroke
I received an email from Microsoft / Microsoft Support / Microsoft Internet
Security Center claiming to be a security patch [or comprehensive Internet
Explorer update]. Is this a virus?
http://securityadmin.info/faq.htm#microsoftemail
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
I received a virus email from a Microsoft email address. Who do I report
this to?
http://securityadmin.info/faq.htm#microsoftemail
I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I
want to replace this file.
http://securityadmin.info/faq.htm#jdbgmgr
I forgot my Windows logon password and can't log in. How do I reset it?
http://securityadmin.info/faq.htm#password
I have a problem or a question with a virus or with antivirus.
http://securityadmin.info/faq.htm#virus
NOTE: www.grisoft.com is free antivirus, USE IT.
Why is Outlook Express blocking my attachments as "unsafe"?
http://securityadmin.info/faq.htm#attachments
How do I stop getting pop-up messages? Or adware? Or spyware?
http://securityadmin.info/faq.htm#pop-ups
How do I block people from viewing adult or objectionable content on a
computer?
http://securityadmin.info/faq.htm#contentfilter
How do I block spam emails?
http://securityadmin.info/faq.htm#spam
There is a Content Advisor password blocking me from certain web sites.
http://securityadmin.info/faq.htm#contentadvisor
How do I delete an FTP folder that a hacker put on my computer and I cannot
delete?
http://securityadmin.info/faq.htm#ftpfolder
Have I been hacked? What do I do if I've been hacked?
http://securityadmin.info/faq.htm#hacked
How do I re-secure a computer that has been hacked?
http://securityadmin.info/faq.htm#re-secure
How do I test or improve the security on my computer to avoid being hacked?
http://securityadmin.info/faq.htm#harden
How do I investigate a suspicious IP address that may be trying to hack me?
http://securityadmin.info/faq.htm#trace
How do I report a hacker?
http://securityadmin.info/faq.htm#reporthacker
How do I use a port scanner or vulnerability scanner to test my security?
http://securityadmin.info/faq.htm#portscanner
How do I encrypt my files and/or hard drive?
http://securityadmin.info/faq.htm#encryption
How do I get a firewall? IDS?
http://securityadmin.info/faq.htm#firewall
I want to use the IPSec filtering or IP filtering feature of Windows to
block certain ports and have a problem or question.
http://securityadmin.info/faq.htm#ipsec
I have a problem or question with the XP ICF firewall.
http://securityadmin.info/faq.htm#icf
I have a problem or question with the IIS URLScan tool.
http://securityadmin.info/faq.htm#urlscan
How do I change the banner on my computer or server to hide what software
version I'm using?
http://securityadmin.info/faq.htm#banner
How do I enable Windows Auditing to tell who logged into Windows or who
accessed a file?
http://securityadmin.info/faq.htm#auditing
How do I inspect and disable programs that start up when Windows starts?
http://securityadmin.info/faq.htm#startup
How do I use RUNAS or let someone use RUNAS to run commands as administrator
without having to type the password?
http://securityadmin.info/faq.htm#runas
How do I let non-administrator users run Defrag or change their IP address?
http://securityadmin.info/faq.htm#runas
My question is not mentioned above. How do I get an answer immediately,
with no waiting?
http://securityadmin.info/faq.htm#moreinfo
See also: http://www.google.com/groups?as_ugroup=microsoft.public.*
See also: http://www.google.com/advanced_group_search
See also: http://www.google.com
I want to post a problem or question to the newsgroup. What info do I need
to post in order to get a correct answer quickly?
http://securityadmin.info/faq.htm#netiquette
Note that this is NOT a full list of all the questions answered in the FAQ.
Chances are, your question has probably already been answered. The complete
FAQ is at:
http://securityadmin.info/faq.htm#contents
I hope this is helpful. Feedback, suggestions and criticism regarding the
FAQ are welcome and may be emailed to me.
kind regards,
Karl Levinson, CISSP, MCSE, MVP
email: levinson_k@despammed.com Tag: E-Mail Received Tag: 30362
"Messenger" popups
re: popups "Messenger" Endads and byebyeads see
Microsoft Knowledge Base Article - 330904
Hope this helps
Ben Tag: E-Mail Received Tag: 30361
Patch from microsoft.com
I couldn't attach the patch to send to send you but I'm
assuming this is a hoax so you may be able to trace this
back to the sender and stop this nonsense.
thanks for your time and have a nice day.
Aline Dunkin
from: <security@microsoft.com>
Dear friend , use this Internet Explorer patch now!
There are dangerous virus in the Internet now!
More than 500.000 already infected!
X-Apparently-To: poolba@swbell.net via
web80312.mail.yahoo.com; 25 Aug 2003 19:53:46 -0700 (PDT)
X-YahooFilteredBulk: 170.215.94.11
Return-Path: <admin@duma.gov.ru>
Received: from mta1-ext.prodigy.net (EHLO mta1-
int.prodigy.net) (207.115.63.55)
by mta805.mail.yahoo.com with SMTP; 25 Aug 2003
19:53:46 -0700 (PDT)
X-Originating-IP: [170.215.94.11]
Received: from localhost (170-215-94-
11.nas3.eko.nv.frontiernet.net [170.215.94.11])
by mta1-int.prodigy.net (8.12.3 patch/8.12.9) with
SMTP id h7Q2rLQx254906
for <poolba@swbell.net>; Mon, 25 Aug 2003
22:53:22 -0400
Date: Mon, 25 Aug 2003 22:53:21 -0400
Message-Id: <200308260253.h7Q2rLQx254906@mta1-
int.prodigy.net>
From: "Microsoft" <security@microsoft.com>
To: <poolba@swbell.net>
Subject: Use this patch immediately !
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="xxxx" Tag: E-Mail Received Tag: 30359
is this a hoax
"Microsoft" <security@microsoft.com> i keep getting
security patches from this addy and when i scan it it
shows to contain a virus so of course i do not open it.
Is this for real or the hackers Tag: E-Mail Received Tag: 30355
Patch Test Procedures?
I couldn't find this somewhat obvious question in my searches so I'll just
ask:
I'm looking for a patch test methodology to follow for my Microsoft patches.
Everyone says to test patches before deploying them to my 100+ Microsoft
servers - how do I do that?
How do I make sure (for example) that every part of my branch Win2K server's
DHCP service works correctly? Is there a list of functions to test?
TIA for your help! Tag: E-Mail Received Tag: 30354
Hacking/illegal use of e-mail account
Several months ago I was reviewing the list of blocked
users in Outlook Express. I was surprised to see my own
address among them, and removed it from the list. The next
time mail was received there was a very disturbing porn
related email sent. The sender, according to the address
shown, was me! At the time it appeared that somehow my
account or address had been hijacked or pirated, but there
was nothing I had read to support the idea. Recently,
however, an article appeared in our paper supporting this
possibility. Unfortunately the article didn't explain how
to detect or remove the problem. The easy solution would
be to simply remove the e-mail account and set up a new
one, but I want to know conclusively if my account was
used illegally to forward crap to other people. Thanks to
anyone taking the time to read this and respond. Tag: E-Mail Received Tag: 30348
pop ups
I constantly get popups, even when I'm not logged onto
Internet Explorer. It's gotten so bad I never use it and
would like to take it out altogether. Any suggestions out
there? Tag: E-Mail Received Tag: 30342
login failure
Hello everybody.
I cannot login into my machine which is actually connected
to a LAN due the fact that the dial-up connection in the
login box is selected and disabled.Therefore everytime
that i'm trying to login im getting the following
notification, "there are no connections available to all
users.You must logon before dialing". How i can bypass
this and login normally?
PS: reply to misge@intracom.gr Tag: E-Mail Received Tag: 30339
MBSA and Windows NT 4.0 Workstation
I am using Microsoft Baseline Security Analyzer 1.1.1.
When I am checking security update of Windows NT 4.0
Workstation nothing about very important critical
security patch MS03-026 (Q823980) is displayed. I have
found out that in mssecure.xml file that contain
information about all updates there is information that
MS03-026 is applicable only on Windows NT 4.0 Server and
not on Windows NT 4.0 Workstation.
Is there any possibility how to force MBSA to display all
needed patches for Windows NT 4.0 Workstation? I mean to
get correct MSSECURE.XML file. Does anybody use MBSA for
scaning Windows NT 4.0 Workstation?
Thanks Tag: E-Mail Received Tag: 30337
Disappearing website access
Starting Friday pm I began having problems accessing
various websites -- for example, I could get to Hotmail
but could not access mail -- could get to ebay opening
page but could not access my accounts -- etc... -- now I
can't get to Microsoft directly (came thru a link) or
Symantec -- page keeps timing-out with a "page not
available" type message. It seems to be getting worse the
last 24 hrs. This is my idea how a worm/virus would work
but have a firewall & Norton Antivirus -- nothing shows up
on scans. Any ideas where to look or what to do? This
forum seems to have some very good information & hopefully
someone can help. Thanks Tag: E-Mail Received Tag: 30335
Only the Best Pop Up
I keep getting a pop up which has a title "Only the Best"
every time I open a new window in Internet Explorer.
Hope someone could solve the problem. Tag: E-Mail Received Tag: 30333
SQLSlammer worm
When I did a virus scan, it showed that I'm infected with
Win32/SQLSlammer.worm in my Black Ice file (of all places!)
& it was unable to clean it. What can I do & how do I
prevent this in the future? Thank you. Tag: E-Mail Received Tag: 30320
Outlook Express version 6 Back Up
How do I back up all my messages that are in the inbox,
delete, sent and personal folders?
Not anywhere in any of Microsoft's website is there any
information on this.
Please help
Carol Tag: E-Mail Received Tag: 30318
Porn.dialer
When I did a virus scan, it showed "naviWebAccess.exe -
Tool: Porn.dialer.gen!" on my computer. It's in my
scanner software. If I uninstall & reinstall the scanner,
will this rid me of this file? Also, is this considered a
trojan? It concerns me how it got there - I use Black Ice
firewall. Thank you. Tag: E-Mail Received Tag: 30317
Content Advisor
I cannot access the internet without a content advisor
password. I did not put in a password, I'm trying to
delete this off of my computer so that I can access the
internet can anyone help me I'm running windows 98 Tag: E-Mail Received Tag: 30316
Content Advisor
I cannot access the internet without a content advisor
password. I did not put in a password, I'm trying to
delete this off of my computer so that I can access the
internet can anyone help me I'm running windows 98 Tag: E-Mail Received Tag: 30315
Microsoft Alert
FYI=20
It appears that someone is spoofing Microsoft. I received
this today.
This message has been processed by Brightmail(TM)
Anti-Virus using
Symantec's Norton AntiVirus Technology.
Q404942.exe was infected with the malicious virus
W32.Gibe.B@mm and has been deleted because the file cannot
be cleaned.
For more information on anti-virus tips and technology, visit
http://www.brightmail.com/antivirus .
Subject:
Latest Network Security Patch
From:
"Microsoft Technical Support"
<xwlsnvygk-dcppkknu@dXldcLbBI.net>
Date:
Sun, 24 Aug 2003 12:28:10 +0200
To:
"Microsoft Consumer"
Microsoft Consumer
this is the latest version of security update, the
"August 2003, Cumulative Patch" update which eliminates
all known security vulnerabilities affecting Internet Explorer,
Outlook and Outlook Express as well as five newly
discovered vulnerabilities. Install now to protect your
computer
from these vulnerabilities, the most serious of which could
allow
an attacker to run executable on your system. This update
includes
the functionality of all previously released patches.
System requirements Win 9x/Me/2000/NT/XP
This update applies to Microsoft Internet Explorer, version
4.01 and later
Microsoft Outlook, version 8.00 and later
Microsoft Outlook Express, version 4.01 and later
Recommendation Customers should install the patch at the
earliest opportunity.
How to install Run attached file. Click Yes on displayed
dialog box.
How to use You don't need to do anything after installing
this item.
Microsoft Product Support Services and Knowledge Base articles
can be found on the Microsoft Technical Support web site.
For security-related information about Microsoft products,
please
visit the Microsoft Security Advisor web site, or Contact us.
Please do not reply to this message. It was sent from an
unmonitored
e-mail address and we are unable to respond to any replies.
Thank you for using Microsoft products.
With friendly greetings,
Microsoft Technical Support
=A92003 Microsoft Corporation. All rights reserved. The names
of the actual companies
and products mentioned herein may be the trademarks of
their respective owners. Tag: E-Mail Received Tag: 30314
no start menu
i just bought my computer, downloaded msn messenger, and
winmx, and my computer froze. but first i had a pop up
from microsoft alert? saying i was vulnerable. now my
strt menu wont show, or clock, nuthin. i have xp and
where my task bar should be, is all blue. please help! Tag: E-Mail Received Tag: 30313
receiving "error message" after installing security patch from Microsoft
Hi, I installed what was informed to me as a critical
program for my system windos 98 it was ' DirectX 9.06 end-
user runtime.'now at startup, I get a message
reading "error starting program"
" a required , DLL file, D.Sound. DLL was not found"
I would appreciate anyones help! PLEASE! Tag: E-Mail Received Tag: 30307
DOS name ~ C:/Windows/Desktop
Three times this weekend a new Windows Icon named ~ has
appeared on my Desktop immediately upon closing Outlook
Express. Its about 800Kb. What is this? Tag: E-Mail Received Tag: 30304
hacking
someone has hacked into my msn hotmail account .
nitro_oxide_69@hotmail.com was my account but the person
has changed my password and serect question. do you know
where i can get help. i have to many people to restart.
i have no idea where to go for help.
here is a e-mail where you can contact me at
pyro_man_01@hotmail.com its my brothers.
you can call me at 1-613-732-8839
from
brian snelgrove Tag: E-Mail Received Tag: 30303
hacking
someone has hacked into my msn hotmail account.
nitro_oxide_69@hotmail.com was my account. someone has
hacked into it read all my letter i have saved and changed
my password and serect question. the reason i am
contacting you cause there is no hacking recover center
for hotmail well atleast i haven't found one.
could you help me get my account back or at least tell me
someone who can or a web site i can contact
from
brian snelgrove Tag: E-Mail Received Tag: 30301
Downloading problems
I keep getting this message when trying to download:
Internet Explorer cannot download from this site.
Internet Explorer was not able to open this site. This
site is either unavailable or cannot be found. Please
help if you can. Thanks Tag: E-Mail Received Tag: 30300
McAfee/Office 2k/MS03-026
Had a problem today with these three pieces on multiple
Win2k pcs. Do they not play well together? I am now unable
to uninstall or reinstall McAfee and Office. I deleted any
reference to McAfee, Network Associates and vscan451 out
of my registry, and when I go to reinstall or install a
higher version of McAfee, Windows thinks the old 4.51 is
still there. Any suggestions? Outlook, Excel, Word and
Powerpoint were affected too. When we went into an Office
program it kicked us out with an error about bad links. We
have an SUS pushing patches, could this have triggered an
adverse reaction on the part of McAfee and/or Office 2K? Tag: E-Mail Received Tag: 30298
unable to access attatchments
can anyone help.
i use win 98. recently i downloaded the microsoft updates,
which took around 40 mins. when i went into outlook
express 6 it would not allow me to access attatchments -
the message, "OE removed access to the following unsafe
attatchments" - I know the origin of the attatchments and
non of them are unsafe. I deleated the updates but the
problem remains.
heres hoping,
geoff Tag: E-Mail Received Tag: 30294
user passwords
I have set up a password protected user for my computer
for login. I would like to block unwanted people from
accessing my desktop, but all they have to do is click on
cancel at login. How do I make it so that the password has
to be entered to get to the desktop? Tag: E-Mail Received Tag: 30288
Setup the Firewall.
Dear Microsoft support.
My computer is use windows XP home edition.
My question is?
Can I use the Router to setup the Firewall for security
protection by using the Dial up internet connection. Can
you show me how to setting up.
Thank you
long. Tag: E-Mail Received Tag: 30285
JDBGmgr.exe
I received an e mail that this file needs to be deleted
since it has a virus in it, and that I should advise my
address book addressees.
Is this a hoax? I have the following files on my c drive
JDBGmgr in c\I386
JDBGmgr.exe-2ef58aeb.pf in C:\Windows prefetch
JDBGmgr in C\windows\system32 Tag: E-Mail Received Tag: 30277
What the heck is going on?
I have received about 14 Non-deliverable messages in my Hotmail Inbox today.
All with a variety of email addresses I have never sent to and from Domains
I have never heard of. All telling me a virus I sent them caused the e-mail
to be non-deliverable. Some even include the virus in ASCII rendition of
the binary.
So I sent a email using my Hotmail address to a location I knew did not
exist. I did this to see if my IP address was in the Non-deliverable
e-mail. And it was. But in these Non-deliverable virus emails they do not
include my IP address nor do they contain the SMTP header:
X-Originating-IP:
This makes it difficult determing what the IP address of the originating
email was that generated the non-delivery. Here is an example:
X-Message-Info: JGTYoYF78jEHjJx36Oi8+YDSEg8qKPPD
Received: from agmay.LIQUIDWWW.COM ([64.246.50.15]) by
mc3-f34.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600);
Mon, 25 Aug 2003 12:09:50 -0700
Received: from mailnull by agmay.LIQUIDWWW.COM with local (Exim 4.20)
id 19rMiu-00076V-VB
for hesterloli@hotmail.com; Mon, 25 Aug 2003 14:09:52 -0500
X-Failed-Recipients: agmay@agmay.com
From: Mail Delivery System <Mailer-Daemon@agmay.LIQUIDWWW.COM>
To: hesterloli@hotmail.com
Subject: Mail delivery failed: returning message to sender
Message-Id: <E19rMiu-00076V-VB@agmay.LIQUIDWWW.COM>
Date: Mon, 25 Aug 2003 14:09:52 -0500
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - agmay.LIQUIDWWW.COM
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain -
Return-Path: <>
X-OriginalArrivalTime: 25 Aug 2003 19:09:51.0233 (UTC)
FILETIME=[75A2F710:01C36B3C]
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
agmay@agmay.com
This message has been rejected because it has
a potentially executable attachment "document_9446.pif"
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it.
------ This is a copy of the message, including all the headers. ------
Return-path: <hesterloli@hotmail.com>
Received: from [212.235.64.119] (helo=P850)
by agmay.LIQUIDWWW.COM with esmtp (Exim 4.20)
id 19rMiX-000765-1l
for agmay@agmay.com; Mon, 25 Aug 2003 14:09:31 -0500
From: <hesterloli@hotmail.com>
To: <agmay@agmay.com>
Subject: Re: Re: My details
Date: Mon, 25 Aug 2003 21:09:14 +0200
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_NextPart_000_02CC0A5A"
Message-Id: <E19rMiX-000765-1l@agmay.LIQUIDWWW.COM>
This is a multipart message in MIME format
--_NextPart_000_02CC0A5A
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Please see the attached file for details.
--_NextPart_000_02CC0A5A
Content-Type: application/octet-stream;
name="document_9446.pif"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="document_9446.pif"
Can anyone tell me where the:
X-Originating-IP:
is in these headers? Thanks.
--
George Hester
__________________________________ Tag: E-Mail Received Tag: 30276
Outlook Express problems
When I open my e-mail I have 50-100 unsolicited e-mails
from people I do not know. The emails come from real e-
mail adresses, the subject line is usually: Thanks
You,version update, your details,or details.
In the body of the e-mail is the same script every time: :
SEE ThE ATTACHED FILE FOR DETAILS.
There is no attachment and once when I answered the e-mail
and said there was no attachment, it came back with a
Thanks for the follow up e-mail.
These are annoyingg, and I have even received a couple of
computer message back from the system that said an e-mail
you tried to send contained a virus and was not delivered
to ?? I did not send the e-mail, and as far as I can tell
do not have any visible worms to my security /firewall.
What's up with this? Any ne else having these problems ?
Help In Houston Tag: E-Mail Received Tag: 30275
MS03-031
Hi,
Recently we applied MS03-031 patches to some of our sql
servers. Last week new patch released for MDAC MS03-033.
If we apply MS03-033 can we skip MS03-031 or else are they
independent?
Thanks,
Hima Tag: E-Mail Received Tag: 30273
"Logon Failure" Help
I am getting an error message on one PC (call it
PC/A) "Logon Failure: the user has not geen granted the
requested logon type at the computer" when I try to look
at shared folders from another PC running XP (call it
PC/B).
When I go to PC/B and try to look at PC/A, IT WORKS! I
can see all shared drives, etc.
How can I set up PC/A to access PC/B? (And what's going
on here? This is only an issue with the XP machines on
my home network. I haven't (knowingly) setup ANY PC's
with passwords ... I didn't have these problems before
the latest MS security updates that I put in last week...
but perhaps that's just a coincidence. Any help will be
appreciated.
Thanks,
ted Tag: E-Mail Received Tag: 30270
Sobig virus version F
I am trying to find out if I have the sobig virus on my
computer. While going through the remove Blaster virus
routine, I found this file in the Task Manager:
E_SOBIC1.EXE in the processes panel. Is this the
execution file for the Sobig virus? Tag: E-Mail Received Tag: 30268
Net work
Problem I have a net work through rotor Internet runs
All hard drives set on full sharing / use same work group
yet i can not see other pc'c they can not see me. the
net work was running before we up dated and ran fixes
Any idea's on how to get my connections back ? Tag: E-Mail Received Tag: 30264
SP4 Setup error
When I try to download and install SP4 on Win2000 SP3, the
Express installation inspects the configuration and
downloads the neccessary fixes but before it installs, I
get a SP4 Setup Error "Control ID not found" and
an "Installation was not completed' messages. Tag: E-Mail Received Tag: 30255
New Virus (Not) from Microsoft
From: security@microsoft.com
Subject: Use this patch immediately !
Dear friend , use this Internet Explorer patch now!
There are dangerous virus in the Internet now!
More than 500.000 already infected!
Attachment: ATT00004txt (59b)
Cannot be deleted by Norton Corporate Version, but is
quaranted as a potentially unsafe patch.exe.
Scan type: Realtime Protection Scan
Event: Virus Found!
Virus name: W32.Dumaru@mm
File: patch.exe
Location: Mail System
Computer: RUSSDESKTOP
User: Charles Gibson
Action taken: Clean failed : Quarantine succeeded :
Date found: Mon Aug 25 10:06:40 2003 Tag: E-Mail Received Tag: 30252
Service Pack 4
I'm attempting to install service pack 4 for windows 2000
on my home pc. When I try to kick it off (after
downloading it with realdownload)I get the following
error message: "SP4EXPRESS_EN.exe is linked to missing
export NTDLL.DLL:STRSTR." After clicking OK, I then get a
message of "A device attached to the syste is not
functioning." My printer is functioning fine, which is
really the only external hardware I have connected. I
have a PDA synchronization cradle attached, and it too is
functioning fine. I then downloaded the full version and
I get the same error message for it. Any thoughts? Tag: E-Mail Received Tag: 30232
Hi!,
I recently received an e-mail which said "use this patch
immediately".
Would Microsoft send out such a message?
"Richard Sheerman" <rich.linda@cox.net> schreef in bericht
news:025f01c36c0f$a8f62a00$a501280a@phx.gbl...
> Hi!,
>
> I recently received an e-mail which said "use this patch
> immediately".
> Would Microsoft send out such a message?
>
> Thank You,
> Richard