Enabling Anti-Virus Scan

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - WARNING: Winfixer and Errorsafe [AKA Vundo] being distributed via WL/MSN Messenger banner ads WARNING: Winfixer and Errorsafe [AKA Vundo] being distributed via MSN Messenger banner advertisements http://msmvps.com/blogs/spywaresucks/archive/2007/02/18/591493.aspx <QP> I strongly recommend that all users of MSN Messenger ensure that their anti-virus and anti-spyware applications are up to date. Do not click on any buttons in pop-up windows that you may see, and do not believe Web sites that report that they have found a problem on your computer - seriously, how the hell would they be able to tell? Do not click on OK or Cancel buttons in the pop-up windows. Close the window using the red x close button. I also strongly recommend that MSN Messenger users download and install Mike Burgess's HOSTS file to help block winfixer and other bad guys. You can find Mike's famous HOSTS file here: http://www.mvps.org/winhelp2002/hosts.htm </QP> How To Remove Winfixer (Vundo) variants http://www.bleepingcomputer.com/forums/topic18610.html When all else fails, HijackThis v1.99.1 (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use. It will help you to both identify and remove any hijackware/spyware with assistance from an expert. **Post your log to http://forums.spybot.info/forumdisplay.php?f=22, http://castlecops.com/forum67.html, http://forums.subratam.org/index.php?showforum=7, http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert analysis, not here.** -- ~Robear Dyer (PA Bear) MS MVP-Windows (IE, OE, Security, Shell/User) Tag: Enabling Anti-Virus Scan Tag: 91522
  - 2
    - ActiveX Control To Read Certificate (ASP.Net app) I need to be able to read a certificate from the currently logged on user's PC and then check its validity against our certificate server. C Ford Tag: Enabling Anti-Virus Scan Tag: 91506
  - 3
    - MAC address Any way to conceal it? Tag: Enabling Anti-Virus Scan Tag: 91503
  - 4
    - Change 2003 Domain Password over Internet (No outlook, no vpn)... Is there a way short of using Outlook (rpc over http) or VPN to change a users password via the internet? IE: Perhaps a 3rd party web app which would allow this etc. Thanks for any tips Tag: Enabling Anti-Virus Scan Tag: 91496
  - 5
    - Ohad plotnik (?) Is anybody knows this guy? something with microsoft security project's... Tag: Enabling Anti-Virus Scan Tag: 91495
  - 6
    - Live One Care How is the Live One Care program comparing as to what it does to the other big programs like McAfee and Norton? Also, second question: Does it works well with Vista? Tag: Enabling Anti-Virus Scan Tag: 91492
  - 7
    - centralized event logging? centralized syslog... dumping event log? I've read through a few whitepapers from SANS about centralizing log files. One way was to install a syslog agent and forward it to a centralized syslog server. Another was to dump the event log to a file, and download it to a central box. Both those papers are not ancient, but also not very recent. Has anyone used splunk? I figure that would be a big time saver so i don't have to create my own frontend. Tag: Enabling Anti-Virus Scan Tag: 91490
  - 8
    - open port 4567 When I run the online Symantec Security Check it shows an open port. It says, "Security Status: At Risk! You are vulnerable to at least one form of security threat." The details show all ports Stealth except for Port 4567. It shows that one open. How do I close this port? Tag: Enabling Anti-Virus Scan Tag: 91489
  - 9
    - Where's my private key? Hi, 1) I used makecert -n CN=AADI_SERVER -sk AADI_PK_CONT -sr LocalMachine -ss AADI_TEST_STORE D:/aadi_cert1.cer to create a certificate. Now in the console root, i can see the AADI_TEST_STORE containing certificate. But i cant seem to locate the private key or the AADI_PK_CONT container. Where can i find it. 2) Also, can you give me some idea as to how to load a private key from a .pvk file? Tag: Enabling Anti-Virus Scan Tag: 91486
  - 10
    - ppcleandeleteatreboot??? i found this in my program files and was wondering if this is a program from microsoft or from one of the many anti viras/spyware i downloaded and if it is is it safe and is it going to remove spyware???? Tag: Enabling Anti-Virus Scan Tag: 91482
  - 11
    - File Checksum Integrity Verifier (FCIV) utility - Exceptions List I'm trying to create an exceptions list when using the fciv utility but it's not working. I have 3 directories on my d drive - A, B, C and I want to exclude C from the file check. My initial command looks like this: fciv d:\ -r -exc exceptions.txt -md5 -xml test.xml My exception list (exceptions.txt) is in the same directory as my fciv utility and contains 1 line: d:\C I run the following command to verify: fciv -v -xml test.xml > testResult.txt The testResult.txt file includes all 3 directories but should exclude changes to the C directory based on my exceptions.txt. Thanks for any help you can provide. Tag: Enabling Anti-Virus Scan Tag: 91477
  - 12
    - =?Utf-8?Q?User=E2=80=99s_rights_and_Daylight_savin?= Microsoft documents recommend using a login script to apply the Day Light Saving time patches. I have not found any notes on the userâ??s inability to make changes to the registry. If anyone can be of help on this I would be appreciative. I need to update NT4, W2K and XP workstations. Thanks DonP Tag: Enabling Anti-Virus Scan Tag: 91476
  - 13
    - Uninstalling McAfee Privacy HELP!!! I previously had McAfee Privacy and McAfee Security on my computer. Cancelled it. Now, I am trying to download Norton Virus, and it will not download. I get communication error messages. I have gone into my Control Panel, add/remove programs, and tried to delete McAfee Privacy first. I get a message that says that the uninstallation failed! INF file missing. I have contacted McAfee Support, and Dell Support. No one knows what to do. Any suggestions? Thanks!! Tag: Enabling Anti-Virus Scan Tag: 91470
  - 14
    - window defender/date setting I have windows defender. My date seems to be showing 3/8/07 for the last scan and does not change now with each scan like it used to. What is wrong? Tag: Enabling Anti-Virus Scan Tag: 91467
  - 15
    - How Change Router Password? I have a Linksys BEFSR41 Router. I need a step-by-step procedure for changing its password. Tag: Enabling Anti-Virus Scan Tag: 91465
  - 16
    - What port does IKE use? What port does IKE use? -- Spin Tag: Enabling Anti-Virus Scan Tag: 91462
  - 17
    - Adware I recently switched isp mand they have a free antivirus andspyware software (e-trust pest patrol) well it came up with a adawre in ma microsoft folder. the pest was " bookmark express " is this really a adware and can i let the software delete it because the removal tool alerted that this could have an adverse affect on software in the same directory that the "adware was in??????? Tag: Enabling Anti-Virus Scan Tag: 91456
  - 18
    - smart cards - two readers Hi ! I'm trying to create enrollment station and designate one administrator as enrollment agent. A typical enrollment station is a computer that has two smart card readers attached - so I did it. I use one smart card to log on to the enrollment station. I open the Web page for certificate services (http://server/certsrv/) --> request certificate --> advanced request --> request for smart card. Then I use SmartCard User template, my CA, "Advanced Setec SetCSP", enrolment agent certificate. I choose user from AD and I put second (fresh-empty) smart card. When I try to enroll smart card I get error like !!! : "Too many smart cards the same type. Plug only one smart card for user and try again". I have GPO that is locking station when I remove my (administrator) smart card from the reader. When I change GPO I can remove card (also then I can login using username and password) and then I can enroll new cards on both my readers but that's not the point. I must use very restricted policy even for myself. If anyone know something about it - HELP, pleassssseee. Best Regards Dominik. -- Dominik WÄ?glarz domibik@o2.pl Tag: Enabling Anti-Virus Scan Tag: 91449
  - 19
    - Searching aescipher.exe or similar command line tool with AES encryption I am searching for a command line (!) tool which en- and decrypts files and folders with the well known AES algorithm. I should be able either to pass the password as parameter resp. the program should ask the user for a password at the command line. Can someone recommend me such a tool for WinXP ? Again, it should not (only) be a GUI based encryption utility but a small, ressource friendly command line based tool. Marcus Tag: Enabling Anti-Virus Scan Tag: 91448
  - 20
    - Service Accounts & Account Lock out Policy Hi, I want to enable an account lock-out policy to restrict up to 5 bad logons. I don't want to this policy to apply to the Service accounts used by the applications as it will lock-out the service account and will stop it. Is there is any way to accomplish this?? Note: the Policy I am trying to use is the Default Domain policy as I want the same policy to be applied to all users across the domain. Tag: Enabling Anti-Virus Scan Tag: 91446
  - 21
    - error message "Unable to display the user selection dialog" Hi On a Windows Server 2003 I'm having the problem where if I go to the properties of any folder on any local drive and then go to the security tab, and then select "add" I get the following error message appear with only the option to select ok. "Unable to display the user selection dialog - (null)" The server has sp1 installed and is acting as a terminal server. The server is connected to a local small business server which is looking after the domain and active directory, etc. At first I thought the problem maybe active directory on the small business server but the sbs box is not having the same problem. All users can log in fine to the terminal server and there are no errors in the event log related to this. How I discovered this problem is that I need to change the permissions of a folder on the terminal server to get a program working but just by clicking on add I get the error and can't get any futher. I've found a few ms kb articles but nothing that end up being the same situation. I've also found alot of people posting on forms the exct same problem but they haven't been on servers and/or with a domain. Any help anyone can provide would be great thanks in advance Matt Tag: Enabling Anti-Virus Scan Tag: 91445
  - 22
    - error message "Unable to display the user selection dialog" Hi On a Windows Server 2003 I'm having the problem where if I go to the properties of any folder on any local drive and then go to the security tab, and then select "add" I get the following error message appear with only the option to select ok. "Unable to display the user selection dialog - (null)" The server has sp1 installed and is acting as a terminal server. The server is connected to a local small business server which is looking after the domain and active directory, etc. At first I thought the problem maybe active directory on the small business server but the sbs box is not having the same problem. All users can log in fine to the terminal server and there are no errors in the event log related to this. How I discovered this problem is that I need to change the permissions of a folder on the terminal server to get a program working but just by clicking on add I get the error and can't get any futher. I've found a few ms kb articles but nothing that end up being the same situation. I've also found alot of people posting on forms the exct same problem but they haven't been on servers and/or with a domain. Any help anyone can provide would be great thanks in advance Matt Tag: Enabling Anti-Virus Scan Tag: 91444
  - 23
    - Freeware (on-access) antivirus scanner... Hi, i am working in a youth center (honorary) as a administrator and we are higly dependent on donations. Now we have seven pc's running with windows 2000 and open office, but the best is, that we have a internet connection. But as i said, we are dependent on donations and this is why we cant buy (expensive) antivirus software licenses.Who has experience with scanners that are free for commercial use? because we are considered "commercial", but in fact we are not. Thanks in advance... Best Regards Joe Tag: Enabling Anti-Virus Scan Tag: 91441
  - 24
    - windowsupdate.microsoft.com doesn't offer KB913446 - MS06-007 I am trying to secure a Windows Server 2003 machine. I have been told to make sure KB913446 is installed. It is not currently installed on this machine. I went to windowsupdate.microsoft.com to get updates but was not offered KB913446. I can download it manually, but I expected that windows update would give it to me. Does anyone know if it has been superseded by something, or the reason it is not offered? KB913446 is also called MS06-007. Thank you very much. Tag: Enabling Anti-Virus Scan Tag: 91433
  - 25
    - Password Storage in Windows 2003 hi there, I was hoping someone could clarify a few questions for me regarding Windows 2003, NTLMv2, and Kerberos. 1) What hash is used in Windows2003 Server to store passwords in the SAM file? > My understanding is that each password will be stored by default using both a LM Hash (for older compatibility) and using a MD5 hash for NTLMv2. Is this correct? 2) Win2003 uses Kerberos as the default authentication protocol. Now does using Kerberos store the password differently than the answer above? or is Kerberos only the authentication protocol and it uses the NTLMv2 password hash to authenticate a user before it kicks in to do authentication between servers. 3) Does Kerberos completely replace NTLMv2? Thank you Tag: Enabling Anti-Virus Scan Tag: 91429
- Next
  - 1
    - tracking cookies spy ware??? i filled a form online one day i gave my name and address and now every time i got to the wrong site it has an advertisment with a location near my house i was told it was a tracking cookie and that it it a type of spy ware and i ran a few anti spyware programs (adaware ashampoo and i tryer tweak now the regestry cleaner and nothing seems to work my homepage will change on its own and popups come up when im not an line anyone got any thing for me to try??? please help...lol Tag: Enabling Anti-Virus Scan Tag: 91418
  - 2
    - New MSSECURE.XML/EST Version 2007.02.13 Available MSSECURE.XML Data Version 2007.02.13.0 for use with MBSA 1.2.1 (SMS 2.0 or 2003 with Software Update Inventory Tool (SUIT)) was last modified today, January 9th, 2007, and is now available for all supported languages (English, French, German and Japanese). Today's release contains 12 new bulletins, 8 of which are supported by MBSA 1.2.1, 2 of which are partially supported by MBSA 1.2.1, 1 fully supported by EST, 2 partially supported by EST and 1 not supported by EST or MBSA 1.2.1 scan tools (see bulletins for further details). The standalone EST tool is required to support detection for MS07-005, MS07-009, and MS07-012. More information on each of the bulletins listed below can be found at http://www.microsoft.com/technet/security/bulletin/ms07-feb.mspx Critical Updates: Microsoft Security Bulletin MS07-008 Supported by MBSA 1.2.1 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843) Microsoft Security Bulletin MS07-009 Supported by MBSA 1.2.1 and EST Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (927779) Microsoft Security Bulletin MS07-010 (Content release not supported by EST or MBSA) Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution (932135) Microsoft Security Bulletin MS07-014 Supported by MBSA 1.2.1 (ODT local scans only) Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (929434) Microsoft Security Bulletin MS07-015 Supported by MBSA 1.2.1 (ODT local scans only) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554) Microsoft Security Bulletin MS07-016 Supported by MBSA 1.2.1 Cumulative Security Update for Internet Explorer (928090) Important Updates: Microsoft Security Bulletin MS07-005 Supported by EST Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (923723) Microsoft Security Bulletin MS07-006 Supported by MBSA 1.2.1 Vulnerability in Windows Shell Could Allow Elevation of Privilege (928255) Microsoft Security Bulletin MS07-007 Supported by MBSA 1.2.1 Vulnerability in Windows Image Acquisition Service Could Allow Elevation of Privilege (927802) Microsoft Security Bulletin MS07-011 Supported by MBSA 1.2.1 Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436) Microsoft Security Bulletin MS07-012 Supported by MBSA 1.2.1 and EST Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667) Microsoft Security Bulletin MS07-013 Supported by MBSA 1.2.1 Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution (918118) What is the Enterprise Update Scanning Tool (EST)? As part of an ongoing commitment to provide detection tools for complex updates for bulletin-class issues that are not supported by MBSA 1.2, a stand-alone tool may be provided for certain bulletins. Microsoft will evaluate the detection and deployment complexity of each bulletin, and provide detection support based on the specifics of each release. When a detection tool is created for a specific bulletin, customers will be able to script running the tool from a command line interface, and process the results using an XML output file. Detailed documentation will be provided with the tool to ensure customers can leverage it quickly. See the following link for details http://support.microsoft.com/default.aspx?id=894193 NOTE: The EST tool is only for use with MBSA 1.2 to support limitations in the MBSA 1.2 scan tool to ensure complete security update detection support for all bulletins released this month. Note: This is announcement is not for MBSA 2.0/MBSA 2.0.1 since it is based on Microsoft Update technology and has the same product and platform support as Microsoft Update and WSUS Server (see TechNet for details). Charles Weidner [MSFT] cweidner@online.microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for support on the Microsoft Baseline Security Analyzer (MBSA). Information is available at the following link: http://support.microsoft.com/default.aspx This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: Enabling Anti-Virus Scan Tag: 91414
  - 3
    - PC Security Device Is it possible to configure a Win XP Pro PC with leading antivirus and antispyware products, configure it as a router and have any expectation it will stop a reasonable percentage of viruses or spyware from entering the network? Best Regards, John Kraus Tag: Enabling Anti-Virus Scan Tag: 91412
  - 4
    - CRL Checking.... I am working in a Windows 2003 server environment with Windows XP SP2 clients. We are using Smart Card Login (or trying to) and we keep getting an error that states: "The revocation function was unable to check revocation for the certificate" Now the root CA is offline. We have loaded all the CRL's on the Domain Controller and the client. However we continue to get this error. Is there a way to disable CRL checking for Smart Card logon so that we can verify that all other settings are correct? Thanks for any pointers. Tag: Enabling Anti-Virus Scan Tag: 91409
  - 5
    - Event ID 537 - Windows Server 2003 Hi there, We have Domain Controller (Windows Server 2003 SP1). In the event log we have many many events 537: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 537 Date: 12-2-2007 Time: 17:32:58 User: NT AUTHORITY\SYSTEM Computer: ###### Description: Logon Failure: Reason: An error occurred during logon User Name: XP-WS-38$ Domain: ########.LOCAL Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: - Status code: 0xC0000133 Substatus code: 0x0 Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 192.1.1.179 Source Port: 0 The events are comming from several workstations. Does anyone have a idea? Best Regards, Ferdi Tag: Enabling Anti-Virus Scan Tag: 91401
  - 6
    - for nealson: exciting long retention - pajfu sapke - (1/1) Hi everyone Great prices and support await you as you travel into the beautiful world of premium nntp access. They give you access to some of the best groups others may not carry. Take a look, I know you'll love it as much as I do. Take a look at all the great features below and imagine! You'll LOVE it. They offer some of the best premium newsgroup access anywhere. You can find almost anything you are looking for. With some of the fastest connections around it's no wonder people love it and keep coming back. One thing I love about them, they don't keep log files of the news I read or files I download. Images, video, mp3 music, the real news from around the world... it's all inside waiting for you. 800 GIGS of new multimedia content each day 2,000,000 new posts each day Keyword searchable Streaming audio and video Just go to http://www.newsdude.net and see why I love them so much. See you there! Faz dom si ... Tag: Enabling Anti-Virus Scan Tag: 91394
  - 7
    - Real Time Spyware Detection I'd like to use a real-time screener, but Spysweeper for MSN seems to be a real drag. Looking for advice - would Windows Defender be a good approach? Would Defender be a good replacement for, or minimize the value of Spysweeper, Spybot Search & Destroy and Ad Aware? Tag: Enabling Anti-Virus Scan Tag: 91382
  - 8
    - Any audit option to monitor who/when DNS records get deleted? Win2003 AD, DNS-ADI servers. For the second time, I a certain A host 'disappears' from the DNS server. No administrator took responsibilities for the deletion. Is there any way to track when and how DNS entries are deleted from the DNS servers? In my case I have only two DNS-ADI servers. I have total of 6 administrators with rights for deleting DNS records. Tag: Enabling Anti-Virus Scan Tag: 91380
  - 9
    - patching w3k srv - sp1 Hello Newsgroup, can anybody tell me which patches (hotfixes!!) are included in sp1 of w3ksrv? which is the highest KB Nr? thx for help bernd Tag: Enabling Anti-Virus Scan Tag: 91378
  - 10
    - Difficult password situation I have a problem with my Windows account and I'd be very, very happy if you could help me. Here's my problem: my Windows account is limited, it can't install any software which I'm looking a solution for. I don't know administrator password. I've thought to find or reset it. I've found several programs for this but they require booting from either floppy or cd-rom and my first boot device is set to hdd. I can't enter bios either, it's also password protected. I'm afraid to pull bios battery.. I only want to able to install software. Can you please give me any light on this? Tag: Enabling Anti-Virus Scan Tag: 91377
  - 11
    - Eliminating data from hard disks;options Hi, We have to phase out and decomission several Compaq/HP servers and respective hard drives. I attempted to use a tool 'maxblast' (or something like that) in the past, and I didn't get that one to work on multiple hard disks with unconfigured RAID. Two questions: 1)If I use the vendor tool to 'delete' an array and 'recreate' an array, is the data on the hard drive wiped out? According to the message on the screen it says that is the case. I am wondering if security wise, the data on the hard drive has been destroyed for good and what it would take to recover it in case someone with bad intentions manages to explore data from those hard drives. 2)Imagine I run 'SmartStart CD' (it is just a vendor initialization software from HP) and I run the option 'Erase System Partition'. That respective option tells me that the whole data and system partition would be deleted from the hard drive. Upon running the tool I noticed that the LED on the hard drives flash very quickly and the message on the screen states that the data has been erased. Since that happens so fast, I am wondering whether the data has been wiped out? If I don't get an answer from people on this, I may ask HP, however I am trying here to get an unbiased feedback. Thanks much, Marlon Tag: Enabling Anti-Virus Scan Tag: 91374
  - 12
    - Cannot access folder For some reason, some of the folders on our server cannot be accessed, even by Administrator. How can I set the owner, or security, so that adminstrator can access the folders and thus let me set correct ownership? As far as I know, I set a folder one level higher with full control by administrator and the file owner. Now the owner cannot access, nor can administrator. Is there an override facility to fix access? Regards -- Doug -- Doug Tag: Enabling Anti-Virus Scan Tag: 91367
  - 13
    - Logon to account with different credentials How can I logon (with administrator credentials) using another users settings? Tag: Enabling Anti-Virus Scan Tag: 91364
  - 14
    - Security Logging on Central Server Does any vendor make a product that would record not just the metainformation for each incoming and outgoing connection on each machine (source and target IP, ports, etc) but also Windows OS specific information like process name and PID, and record all of that in a central database using SQL Server? It would be extremely nice if I could then go to a management console and do complex queries and see certain traffic patterns (e.g., all attempts to connect to IP=x in the last 90 days). You might find as an answer that three machines on your network connection to that target IP and do so using a process whose name is namgr.exe, for example. Having this kind of information is an invaluable time saver over the old fashioned methods of sniffer and sysinternals tcpview. -- Will Tag: Enabling Anti-Virus Scan Tag: 91359
  - 15
    - Hacked By ENjeXion // AYYILDIZ TEAM AYYILDIZ TEAM :) Tag: Enabling Anti-Virus Scan Tag: 91354
  - 16
    - Microsoft's new project -> Vienna ? I am shocked! Your reaction and comments.Thanks http://news.yahoo.com/s/pcworld/20070209/tc_pcworld/128888 -- Panda_man Silver level Contributor Tag: Enabling Anti-Virus Scan Tag: 91340
  - 17
    - 4 GIGS found by Chkdsk? I just set up my second laptop and plugged in my USB External HD. The laptop ran chkdsk at startup. I finally had to unplug the HD to get it to quit. Then it booted up. Now I see that there's a folder on the External HD called "FOUND.000". It has 4 GIGS worth of *.chk files in it. Can anybody explain what this is, how it happened, and what I should do about it? -- <*(((>< ~~~~~~~~~~~~ Tag: Enabling Anti-Virus Scan Tag: 91330
  - 18
    - how to remove "worm"? Using Windows XP and Trend Micro Internet Security that came with a Dell Desktop I get the following security message. I can't seem to remove it. Any suggestions as to how I eliminate this worm? Trend Micro PC-cillin Internet Security Notification Real-time Scan Trend Micro PC-cillin Internet Security has detected a virus, spyware application, or other Internet threat, and performed the action specified. Infected file: C:\WINDOWS\WIN32UDT.EXE Virus name: WORM_SDBOT.CZD User name: Scan action result: The Quarantine action was unsuccessful. Manually delete the file if you are sure that it is not needed. Note: If Search for and clean Trojans is enabled and is executed after scanning, you can click Next to view final scan result information. Tag: Enabling Anti-Virus Scan Tag: 91326
  - 19
    - Personal firewalls vs XP firewall Due to having many users on our computer, using Windows XP Pro, I will be purchasing an Internet Security Suite. Is it better to have the personal firewall in the suite turned on and the XP firewall turned off, is it better the other way around or is there very little difference? I have not decided which suite to purchase so I would appreciate any recommendations. Tag: Enabling Anti-Virus Scan Tag: 91316
  - 20
    - Deny change of email address Is there a way to allow a group to change personal and public info concerning user objects, but deny them the right to change the email address, esp. the one listed on the General tab? Cannot seem to find a checkbox that does that. Tag: Enabling Anti-Virus Scan Tag: 91315
  - 21
    - rfc-ignorant I just learned we have been on the rfc-ignorant.org list back since Nov '05. The site doesn't provide a "why" we are listed only a number of rfc's that are potential violations. I don't have the skill sets to trouble shoot these. I'm waiting for an explaination for the admin, but its been over 24 hours with no response. Is there a place I can go to get some help determining what to do? Thanks Tag: Enabling Anti-Virus Scan Tag: 91308
  - 22
    - Traffic from Computers that are Powered off 1 I am an IT manager of a small company. We have a local domain server (Win2003, Exchange) on which we have ISA 2004 installed. Employees leave at 5:00pm and switch off their computers. The last few days, I have been looking at the ISA logs, and I noticed that there was traffic between some computers (on the internal network; and they are off !) and the server. This could be some weird worm/trojan that spoofs the IPs but I tried all kinds of anti-virus and I can't find anything. The protocols I see in the logs are mostly RPC, Microsoft CIFS (TCP), and NetBios. I can't see the raw IP header in the logs (which is another question I have even though I configured ISA to log this as well) Any ideas what that might be ? Tag: Enabling Anti-Virus Scan Tag: 91305
  - 23
    - Audit the Creation of a Directory I have "Audit Object Access" turned on via group policy to audit success/failed events for my domain workstations. I also have have auditing turned on for the folder that I want to audit on one of these domain workstations. The two items I want to audit is: creating or deleting a file or folder. The deletion of a file/folder works fine and shows up in my security log. The creation of a "file" also shows up in my security log. The issue is: The creation of a "folder" does not show up in my security log. Why is this? What am I doing wrong? Can somebody try this and see if they receive the same results? These are the auditing entries I have for the particular folder that I am auditing on this domain workstation: Create Files/Write Data Create Folders/Append Data Delete Subfolders and Files Delete The above four auditing entries are enabled for success and failed events. Thanks, Niatross Tag: Enabling Anti-Virus Scan Tag: 91292
  - 24
    - Restricted Sites Folder I have a cookies folder for a single user that is showing as belonging to the Restricted Sites Zone rather than the My Computer Zone. I have tried blowing away the user's profile and rebuilding, made them an administrator, disabled all web folder settings.. still no luck. This problem does not appear for any of the other users on the laptop. Of note the laptop is running IE 6.0 on W2K and is using securedocs. Tag: Enabling Anti-Virus Scan Tag: 91290
  - 25
    - norton systemworks downloaded from symantec, but did not seem to download correctly. when i try to download again it tells me that another installer is running. any help to what program is doing this would be much appreciated. have tried to uninstall but it will not let me. also when i close internet explorer i get a software exception ( 0x0eedfade ) occurred in the application at location 0x7c812a5b. then a runtime error 217 at 02b3f1ca. i'm not a pc wizard so any advice would be most welcome . thanks brian Tag: Enabling Anti-Virus Scan Tag: 91287

I have Norton Anti-Virus and am unable to perform a virus scan because there
is a document in my computer that causes the scan to stop. It is a Microsoft
Word document that I cannot delete. When I try, my computer says, "Cannot
delete. The parameter is incorrect." How do I correct the parameter so that
the document will delete and the scan can be performed?
--
Thanks for helping me: Laura in MT

Top

RE: Enabling Anti-Virus Scan by Ian

Ian
Mon Feb 19 01:48:40 CST 2007

Try deleting it in Safe Mode (F8 at startup)

Also run chkdsk in case it's a file fragment that needs removing.

BTW, I'd ditch Norton, and get a reliable AV. Which is basically anything
OTHER than Norton or McAfee.

Top