XP SP2 Firewall vs BT's netprotect service

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Windows Registry Errors Caused by GDI+ Security Update of 9/14 After completing all the steps to make critical updates to MS Office 2000 (KB873374), it seems Microsoft's update procedure has screwed up my Windows 98 registry. I ran the Norton Utilities diagnostic program WinDoctor immediately before and immediately after the update. WinDoctor identified 44 medium-priority registry errors in 3 categories: 1) Invalid Help Files (references to missing help files), 2) Invalid File Extensions (unrecognized extensions), 3) Invalid ActiveX/COM Entries (missing icons, missing toolbar bitmap, invalid identifiers, nonexistant keys, invalid command entry, missing files). Are these cause for concern? Should I do nothing or let Norton "fix" the problems using default methods? P.S. Microsoft phone support was a waste of time. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61530
  - 2
    - Service Pack 2 bad file list. I have had numerous people try to send me audio files in midi format over windows messenger however apparantly for some strange reason they are on the bad file list. does anyone know how to get certain files off the list or if it is editable? i have tried unchecking boxes in outlook express security... but i dont see what that has to do with windows messenger also i couldn't install my apple ipod drivers and itunes on SP2 i had to uninstall SP2 install ipod and then reinstall SP2 its a joke!! anyone help with the bad file list problem? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61527
  - 3
    - Trojan? Every time I hit the backspace key on my keyboard it redirects my computer to a site that says unavailabe. When I run my virus detection, it says I have a trojan, but then it can't remove it so it's always still on there. What do I do next? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61523
  - 4
    - password lost my password for xp , how do you get it on?????????? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61521
  - 5
    - Mnsappau.exe My firewall keeps prompting me to block or permit msnappau.exe which is attempting to access my comp. Anyone know what it is??? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61520
  - 6
    - Hotmail log in failure Please help, I can't access my hotmail email. MSN Messenger is working and says I have 19 new emails, but when I click on email through there or even go via hotmail.com page cannot be displayed when I type my password in. My friend can access their email through my comp so it's not that. It's just my hotmail a/c. Could it be blocked? If so how and for how long?? Please help. Thanks Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61519
  - 7
    - Web Application Security Hi, We are developing a web application with .NET. I have read some articles from microsoft, but I am still unclear about how to go about ensuring security. 1) Do we have to have Database Roles mapped to Database user's to ensure security? * if we had one admin account to a specific database and then validated users from application level security would it be a bad idea? 2) How can we do row level tracking? i.e: Say we have Table A that can accessed from user A & User B. But User A can access all records on that while user B can access some records. How do we achieve that? We figured we need to maintain a Access Matrix table in the DB. For example, say like Table A row 3 can be accessed by emp id 1 &2 and say like Table B row 4 can be accessed by emp id 1. But this really increases complexity and might bring down performance and maintainablity as such. 3) If we do role based (i.e: RoleA-> Can access TableA,TableB RoleB->can access TableC,TableD and there is user1 with ROLEA and user2 with ROLEB) from sql server how should we map this to the application. Should the application, pass user name and password and assume that identity, then when a DB call failed throw back a forrmatted exception to the user. But, then in this instance application doesn't know pre hand that information. ( I Assume that there is no way without an admin password applicatioin can query and get user name/password from SQL server). So how should we go about it? Thanks in advance. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61515
  - 8
    - Internet security for Windows 98 Help! I would like to know which internet browser I should download with my system utilizing Windows 98. I tried using Explorer 6.0, but my 2004 copy of Norton's Internet Seurity Professional will not load. There seems to be some type of conflict with this version of the browser & my system, which is running 64 meg of RAM. It loaded fine with an earlier version of Explorer. I just can't remember which version... Can anyone help me? s/Sergio Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61514
  - 9
    - Cetificate missing to activate MSN I am running Windows XP Home and have both Internet Explorer & Mozilla Firefox Explorer. I am completely unable to access Hotmail thru Internet Explorer but am able to access it through Mozilla. I am also unable to access MSN Messenger at all. It tells me - "There was a problem connecting you to MSN Messenger. Click Troubleshoot for help with this problem." There is also an error code 0x81000370 in that window. When I click on troubleshoot it asks for permission to find and fix which I allow. The Troubleshooter searches for the problem and returns with the message - "We did not find any problems with your system settings or programs. Please try signing in to MSN Messenger later." I accidently deleted a certificate two nights ago and think that may be the trouble and was wondering if you could possibly send me a link or website where I might be able to download/reinstall this certificate as it may be what my problem is. I have tried removing and reinstalling MSN Messenger twice with no success. Please help as I am very reliant on MSN Messenger because of my remoteness at this time. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61513
  - 10
    - Security and USB I am looking to protect data ( documents and small data base's etc) on my memory sticks ( 2 off). Most of the apps that are around, appear to allow the USB to be protected, but access is only with the app being installed on the PC and that manages the access. I need to have the memory stick protected yet allow me access when I use them.. even on a totally different PC. Most systems I use run XP. Any suggestions ? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61510
  - 11
    - Securing a standalone workstation Hi All I am wanting to know if it is possible to acheive the following. I have a home computer that I want to share with others. Each user has there own local user account. The machine is connected to the Internet but is not on a domain. I want to be able to restrict them so that the only folder visible on the machine is their respective My Documents folder. I do this because firstly I want them to save all data in ONE area only, not all over the hard disk. Secondly, I don't want them to run certain programs. This means that they can only "see" files that they have created, and cannot browse to any other part of the filesystem. They are restricted to executing only those applications present on the Start menu. I have attempted to do this, but ran into some obstacles. I tried using NTFS permissions to hide any folder and files except My Documents, but to fully acheive this hiding breaks the applications on the Start Menu. By disallowing them to see any files means that they can not run the applications because they are invisible!! I then tried relaxing the permissions on those files and folders that are used by an application. This fixed the problem, but it now allows anybody to delete certain application files, especially with legacy applications. And what if I missed some files and programs that are legit? It just seems to be a lot of messing around to me. Does Windows have any concept of setuid, where you can run a program at a privileged level? That way I could just hide everything on the drive, exposing only application entry points that are run at a higher privilege level allowing the application to run properly. Only problem here is that if the application is running at higher privelege level, a Save As dialog box may allow you to save to some part of the file system that I don't want them to. Or are there any alternatives to Windows Explorer that let you restrict drive access? It seems with Windows it is impossible to have absolute control over what happens, ther is always a compromise. Is this the case, or am I just not knowledgeable enough about it? It seems all this would be solved by simply having a server/shared drive where al documents can be kept, and then just restricting access to C drive via Local Machine Policy... thanks in advance... Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61508
  - 12
    - can i get new password if i forget my password and my security que can i get new password if i forget my password and my security question Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61503
  - 13
    - viewing sites I am the administrator of my computer and 3 others log into there own screen name. When I come home from work every day I like to find out what kind of sites the guys have been on but they are smart to delete the files from Temporary Internet Folders what can I do to prevent this. I am just curious what sites they are only on when I am not around -- Help Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61502
  - 14
    - Passwords Is there anyway of passwording the Temporary Internet folder -- Help Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61501
  - 15
    - anyone? Anyone know the best way to get rid of "0websearch"? These people should be... well you know. I would appreciate any help. Thanks. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61498
  - 16
    - hackers sum1 has hacked my bros account n changed his qouestion n he cant get on Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61497
  - 17
    - How to delete or repair W2k3 cert store I've reinstalled and deleted a verisgn pfx file to the computer cert store of a w2K3 server a couple times and now I can no longer add the private key and cert. I get a the below message. How can I repair or delete the cert store? Thanks, Jim Certificate Import Wizard "An internale error occured. This can be either the user profile is not accessible or the private key that you are importing might require a cryptographic service provider that is not installed on your system." Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61485
  - 18
    - gdiplus.dll security question Am I correct in assuming that jpg's which have the potentially threatening code will only be a threat if opened/viewed by a program that has a gdiplus.dll? I find only 4 instances of gdiplus.dll on my system, all of which are version 5.3xxx.xx. In a previous posted question I was assured that these were safe. Can I now assume that other jpg handling applications are safe? That the only danger is from older gdiplus.dlls? Thanks Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61478
  - 19
    - GdiPlus (GDI+) JPEG Vulnerability - patching Two questions about the GDIPlus (GDI+) JPEG Vulnerability: 1. I'm running Windows 2K and Office XP. I ran Windows Update (which updated the .NET frameworks) and the Office Update (which installed some updates) and then as prompted by Microsoft's vulnerability tool, I ran GDIPLUS_6.exe to patch Microsoft Picture It! 20002. Now when I scan the system for gdiplus.dll, I find that none of them have recent dates. Is this ok? 2. I noticed that my Visual FoxPro directory contains a gdiplus.dll file, but Visual FoxPro is not on the Microsoft list either of vunerable, or not vulnerable products. Is there a needed GDIPlus patch for Visual FoxPro? Thanks, Kevin Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61471
  - 20
    - security concerns about email with digital certificate By now in my personal opinion using web-based mail with IE is more secure than using OUTLOOK or Outlook Express. Although we can use outlook or OE to send and receive secure email with digital signature, there is potential insecurity after I download my emails to my computer-- that is my computer could be hacked.... But when I use web-based email, I can hardly send encrypted email to others... What a headache. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61463
  - 21
    - XP SP2 with firewall actived and run symantec security check tools... First, sorry if this has already been asked before. I goooooooogled to find it but did not get a clear evidence ;-) I installed the SP2 and activated the firewall. Then I went to Symantec and run their security checker http://security.symantec.com/default.asp?productid=symhome&langid=ie&venid=sym It tells me that it is open to acker exposures: - ICMP ping --> Open (In the advanced tab, of my firewall for ICMP, this is not allowed???) - 135 Location Service (loc-srv) --> Open - 139 NetBios --> Closed - 445 WindowNT/2000 SMB --> Open I tried to look at the docs (...not sure where to find a good one) to see if I can close/hidde these ports --> but did not find any... Could someone tell me if it is possible to close these ports and how to amend the setting so as to be as safe as possible with the integrated firewall. Thanks, José Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61461
  - 22
    - What will happen under this circumstance? When I send a digital-signed encrypted email to an email address without digital signature, What will happen? Will the email lost? or the contents of the email will not be showed though the email can be sent? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61457
  - 23
    - Is the software for key management secure? I use a software "Just1key" to manage keys for some accounts when I login some websites. Is it secure? Could the software bring about more risk of being hacked? If someone knows the only one key for keys management, he would know all my keys saved in that software, right? Additionally, if my computer is hacked, could all the keys be stolen? Hope you can answer all my questions. thank you in advance. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61456
  - 24
    - W2k CA within 2003 ADS I have running a w2k certificate authority on a w2k member server. The domain controllers are Win2003 (ADS win2003). Now only the the domain administrator are abel to enroll a certificate. Domain user can't enroll certificates, even they have administrator rights. The users don't have the rights to access the certificate templates. Could someone help me to find the problem? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61452
  - 25
    - WinXP SP1 Internet Connection Firewall Deployment I am using a specialized set of additional open ports in Internet = Connection Firewall and would like to configure a number of computers = this way but do not want to have to step through this repetitive task on = each PC. Is there any way with Windows XP SP1 to quickly duplicate the = settings of the Internet Connection Firewall on one computer to the next? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61442
- Next
  - 1
    - Endless Buffer Overruns I see yet another update (JPEG) involving the same type of ongoing buffer overrun vulnerability. Could someone please help me understand why this situation has not been corrected? I'm approaching this from a programmer point of view. I have made mistakes and overlooked errors in my code. However, when I am made aware of a type of error, I go back and fix ALL of those types of errors. At least as many as I know about. Why doesn't Microsoft? If they don't know about all the buffer overrun areas, shouldn't they have a team that verifies the code? Maybe I don't understand what buffer overrun is/does. I would think it is when some programmer makes a mistake in address pointers and his program writes outside of allocated memory. Since this is a big (there's endless updates on such) and repeating security issue, why not at the very minimum check, double check, and triple check all areas where there could even be a potential of buffer overrun? Or, even better, design the system so that programs cannot even possibly write outside of their allocated memory? Or, if there is some reason that's necessary under such-and-such circumstances, I would think Microsoft's programs shouldn't do that and therefore should have a flag that prohibits them from writing outside allocated memory. Maybe someone can explain why this is an ongoing issue that cannot be corrected, but otherwise I see no excuse for it. Duane Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61435
  - 2
    - Unknown microsoft page I have a w2k machine with IE 6.0 that has been hijacked with a home page "http://microsoft.OEM101.bz" address. I have used Hijack this, spybot and Ad aware to remove this page. It keeps comming back and I cannot locate the source for it. I have found nothing on the Internet. It stores the connection in HKCU and HKLM under Software, Microsoft, IE, Main. I have overlooked something and need assistance HELP. Jim Holman Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61432
  - 3
    - Conflicting numbers for Security Bulletin MS04-028 I did steps 1 & 2 at the page - "September 2004 Security Update for JPEG Processing (GDI+) at http://www.microsoft.com/security/bulletins/200409_jpeg.msp x. Step 4 - Update Developer Tools took me to a page where I could do a Security Update for IE 6 SP1 (KB833989), which I did. In a columned box below Step 4, there are update numbers for various programs. For IE6 SP1, the Update # is 830348. I don't have the latter update in my add/remove programs. Is this part of the JPEG processing issue that this security issue is about? I'm confused because it's a different number than the one in Step 4 for IE 6 SP1. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61428
  - 4
    - Upcoming ISA Server Chat 09/22: Enabling Remote Client (VPN) Access with ISA Server 2004 Title: Enabling Remote Client (VPN) Access with ISA Server 2004 Description: With ISA Server 2004 Standard Edition, you can easily configure separate policies for roaming clients, set quarantine options, and finely control how these clients access the corporate network. We invite you to meet the developers, testers, program managers, and writers who developed the VPN features of ISA Server. Date: 9/22 Time: 10am Chat Room: http://communities2.microsoft.com/home/chatroom.aspx?siteid=34000081 Add to your calendar: http://www.microsoft.com/technet/downloads/vcs/04_ISA_VPN_Sep22.ics Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61425
  - 5
    - windowspatch.com I keep getting a pop up that wants me to go to windowspatch.com b/c my comp. has been affected by something or another. Is this a legitimate website for Microsoft or a virus? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61419
  - 6
    - identifying antivirus in security center I cannot seem to get the xp security center to identify norton as the antivirus program. I have had to security to manual. I am running Norton 2005. Any help would be appreciated Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61417
  - 7
    - Microsoft.net framework 1.0 SP3 Eng As advised by Microsoft Update, I downloaded SP3 but it will not install. Goes thru all the preliminaries, then when its time to install, it stops and says it can not. Can any on help? When I try on line help, the system refuses to recognize my passport no. (serial no.?) Thanks. jpk Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61416
  - 8
    - SUS - Missing KB873374 (GDI+ Detection Tool)?? We use the latest version of SUS. I approved the KB873374 update yesterday. I was receiving many complaints from users about the dialog ("The software tool did not detect any Microsoft Office, Microsoft Picture It!, or Microsoft .NET framework software on your computer that is vulnerable to the GDI+ Graphics Component security vulnerability") so I went into SUS to unapprove it. Unfortunately I cannot find the update listed anywhere! Has anyone else had this problem? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61410
  - 9
    - What is the best anti virus Program What is the best anti virus Program for Windows XP sp2. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61408
  - 10
    - MS04-028 Clarification needed Hi, I need a clarification concerning the affected products. If the following is true: Affected are all products that use Gdiplus.dll prior to version 5.1.3102.1355, Mso.dll prior to version 10.0.6714.0 or Vgx.dll prior to version 6.0.2800.1411. Then IE 5 is affected too, in contradiction to the bulletin. I used my SMS software inventory and found vgx.dll version 5.00.3014.1003 on the IE 5 systems. I found a gdiplus.dll version 5.1.3102.1229 in a Microsoft Works folder. Does that mean Works must be patched, too? What I'd need is a clear statement as to which dlls are affected in which versions. Thank you Henrik Zawischa Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61403
  - 11
    - Virus Dear Sir / Madam, Recently I always receive an error message : This compute is infected with a spyware called " Online Dialer / MaConnect ". Security Scan Report show : A broweser parasite called " My Search " has infected this computer . I need your advise. Thank you. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61393
  - 12
    - accessing user files without logging in I have had problems with WinXP home, so I upgraded to WinXP pro. For fear it would delete my files, I created a new folder for pro to be installed in (same drive). Pro works fine. However, home doesn't work at all. My files are in my old home user account that has a password to logon. When I try to open the folder of my home user account files all it says is that I don't have access rights-it doesn't even give me a prompt for the password. If there was no password I would be able to access it (i.e.:all my files are still there). If I could merely enter the password when trying to open the folder, that would very nice. Also, if many of you are 100% sure it won't delete my files in an upgrade I might take that path instead. Thank you, ninjascyther@juno.com Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61392
  - 13
    - Friend logging onto my comp I have a roomate who continually logs onto my comp. He doesn't know my passwords (at least I don't think he does). I saw him starting it under safe mode once, then when I returned to the room I opened the laptop to find out that he had somehow managed to log into my account. Please help me block this opening and stop this from happening again. Thanks. Sean Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61390
  - 14
    - password I have my own computer and I have put a password, and I have installed an anti virus (Norton System Works)but I don't understand how someone else can be logged onto my computer when I installed it? It means that my computer is not protected although I have a password and anti virus.I am person who is bound for the computer and it is my job and I have bought the computer for myself and at the same time I am disappointed how can it happen? It means that your personnel do it. Please , explain it to me. Thank you sonja_917@msn.com Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61389
  - 15
    - MS Proxy Server 2: Hide IP in LAN Hi! I don't have much experiece with networking, but i heard there's a way to setup a proxy on your own computer to mask your IP or something similar. I want to do this because I dont want others on my LAN to see my private IP. How do i get started? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61386
  - 16
    - All updates fail Hi I'm running xpI can not get any updates to install they all fail at that point any Ideas. Thank You, Dave Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61383
  - 17
    - Forced autodownload reboots - NOT LEGAL! This is a very unhappy IT consultant, who has had several Servers I am responsible for have a forced reboot of them occur at 3:00am after downloading a security update. the following is from the EVENT VIEWER: Restart Required: To complete the installation of the following updates, the computer will be restarted within five minutes. Until this computer has been restarted, Windows cannot search for or download new updates. - Security Update for Windows Server 2003 (KB833987) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. I am dismayed at the apparent lack of concern for sites operating 24/7 and forcing a reboot of critical server systems after an autodownload! I got paged by two sites in the middle of the night wanting to know why their Servers just crashed! These reboots should ONLY be done after fair warning and be planned. When has this policy changed? -it cost one of my engineering sites a huge loss in productivity and $$$ due to steel pattern cutting robot control files having to be reloaded! NOT HAPPY! This shouldnt be allowed to happen! Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61372
  - 18
    - What are these?? Whilst running a virus scan I noticed these files appearing but they were not flagged by my AV (Panda Titanium 2004). I checked through Explorer and found the folloeing (empty) folders. I Googled some of the names but the websites on Google were all foreign. Is it OK to delete them? PUTA!!.EXE HACKE!.EXE ALEVIR.EXE MSTASK.EXE SCRSVR.EXE SRV32.EXE INSTIT.BAT Any help would be very welcome Colin. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61371
  - 19
    - Publisher Hi Guys, I have run into a slight snag. I am runningXP, SP2, when I go to Hoyles games to play some backgammon, I get a pop-up that says Microsoft cannot verify the publisher,,any way around this?,,firewall turned off. "Help",,Thank You, Dennis M. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61370
  - 20
    - AuthzReportSecurityEvent Does anyone know the format/content of the ... portion at the end of the AuthzReportSecurityEvent API call. The documentation says a "List of AuditParamFlag type/value pairs that provide additional information about the event." When I try passing an array of type AUDIT_PARAM I get error 87 (The parameter is incorrect). I have not been able to find an example of code that actually calls this method yet. Any help would be greatly appraciated. Thanks, Chris Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61369
  - 21
    - XP SP2 IE6 vulnerability Background information ====================== Windows XP Service Pack 2 has introduced new features that improve browsing security in Internet Explorer. Most of them are additional messages that force the user to validate everything that is done by the browser. Most of these messages are displayed in the new Information Bar. For example if you try to open a web page that contains Javascript code or ActiveX objects, it is likely that they will be blocked, the Information Bar will appear and offer you to reload the page with the untrustworthy components enabled. More information can be found at: http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2brows.mspx The side effect of these features is that some web sites can't be used as easily as before because the user has to respond to an increasing number of notifications and questions. Vulnerability Explained ======================= As an example I created a simple XHTML document containing MathML and installed the MathPlayer ActiveX plugin from DesignScience (http://www.dessci.com/en). This type of document used to render correctly in IE6 but since SP2 was installed the new features interfere with the loading of the component : the page is first loaded without MathPlayer which has to be enabled via the Information Bar. But there seems to be a vulnerability in Internet Explorer that allows this protection to be bypassed. All that needs to be done is to add a fake comment between the DOCTYPE declaration and the <html> tag that mimics those added by IE when a page is saved to disk. The "fake" comments must be formatted as follows :  where URL is to be replaced by an URL (for instance http://www.example.com/) and XXXX by a 4 digit integer that represents the number of characters in the URL (for instance 0023). System Affected =============== Windows XP Pro and Home editions with SP2 IE 6.0 (SP2) How to reproduce ================ Install the plugin from DesignScience. Paste the following text in a file with an .xml extension. Open it with IE with and without the comment on line 4. <?xml version="1.0" encoding="ISO-8859-1"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1 plus MathML 2.0//EN" "http://www.w3.org/TR/MathML2/dtd/xhtml-math11-f.dtd">  <html xmlns="http://www.w3.org/1999/xhtml"> <HEAD> <TITLE>IE Vulnerability example</TITLE> <BODY> <math displaystyle="true" xmlns="&mathml;"> <mfrac> <mn>27</mn> <mn>12</mn> </mfrac> </math> </BODY></HTML> Remarks ======= This also works with pages containing Javascript code. -- Cyrille SZYMANSKI Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61367
  - 22
    - Windows Security I have Norton Virus Protection installed.On start up a balloon comes up on taskbar,> Your virus protection status is unknown < If I click on this Balloon I am told, > Norton A/Virus reports that it is installed, but its status is unknown, click recommendations for suggested actions you can take < When I do that it takes me to, > Windows Security Center < but from here I am lost,can you help an old one please? Kind Regards, Ken. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61357
  - 23
    - Windows messenger Every time I open the internet I am bombarded with pop ups about windows messenger. There is a new version and do I want to download it now. Yes or No. I am fed up saying no 3 or 4 times a session. How do I get rid of these popups.Has anyone else got this problem?Thanks Gerry Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61348
  - 24
    - Windows Server 2003 I have a client who is running Windows Server 2003 and Windows XP workstations. Three of the stations log on around 6:30am and lock up every day around 4:30pm. I feel that this has something to do with SECURITY settings. None of the other stations (logon around 8:30am) have this problem. Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61344
  - 25
    - My MS04-028 FAQ The instructional text in this latest MS04-028 Security Bulletin seems totally ridiculous for anyone trying to effect patch management on more than 3 PC's. Their FAQ is just blowing me away. I'm not sure whether to laugh or to cry. Here's my FAQ. Let's see them answer THESE! Feel free to play along and either answer or add to the list. It won't likely accomplish much, but it will be more fun (and probably more productive) than sitting in a meeting with a bunch of other confused IT's trying to figure out "how to deploy this one." 1. Are you *%^ing kidding me! OK, I just had to get that out. Moving on... 2. What is this "vulnerable component"? "Windows XP, Window XP Service Pack 1, and Windows Server 2003 are the only operating systems that contain the *vulnerable component* by default. By default, Windows 98, Windows 98 SE, Windows Me, Windows NT 4.0, and Windows 2000 are not. However, the *vulnerable component* will be installed by any of the programs listed in the affected software section of this bulletin on these operating systems and you should install the appropriate security update for those programs." 3. Is it "GDI+"? (Then say so!) 4. If it is GDI+ and Windows is such a shared resource OS, why can't the GDI+ component be patched at the OS level without requiring a patch for each individual app? 5. "Typically, when these programs are installed on Windows XP, Windows XP Service Pack 1, or Windows Server 2003 they only use the version that is provided by the operating system, even if they install a copy of the vulnerable component." Oh, really? (Trying to find a nice way of asking #1 again.) 6. Can the "vulnerable component" be removed/uninstalled? 7. Would removing it disable viewing/using JPEG files and/or disable some other desired functionality? 8. Would removing the .Net Framework help the situation? 9. Does this prove my original fears that installing the .Net Framework is merely an act of inviting *yet another MS security nightmare*? 10. If the recent .Net Framework 1.0 & 1.1 SP's contained such critical patches as this one, why didn't MS issue a Security Bulletin for them? 11. Why DOESN'T the "GDI+ Detection Tool" do all the things that MS tells us it doesn't do? (Basically: why doesn't it detect ALL affected sw AND tell us whether that sw is patched?) 12. If the existing GDI+ detector says I'm clean, and then I install something vulnerable, am I "SOL"? Will the detector say, "I've already run," and ignore my new app? 13. Can MS provide us with a detector that works? 14. Will someone else make one that works? 15. If so, can we buy *their* OS and/or sw? 16. Does this vulnerability affect only MS sw? 17. Are any other sw companies saying, going to say, or have they already said anything about this vulnerability in regards to their sw? 18. If so, is it only because they're using MS SDK's to write their sw? 19. Is it time to jump the MS ship? 20. How many more MS apps are going to get their own patches for this same vulnerability a month or two down the road? 21. How many vulnerable apps won't get patches because MS doesn't "support" them anymore? (implies they "supported" these apps previously) 22. Should I simply use the GDI Detection Tool to find the vulnerable apps and just remove those apps rather than wait for a follow-up patch that "fixes" the same vulnerability and/or a totally new and scarier one? 23. Which Linux distro should I start with if I'm a newbie to it, but have been in IT for 15+ years? 24. How do I know what hardware to put this Linux distro with if I'm building a new system? 25. How do I build a completely MS-free, Linux-based system that even my technophobe wife (who may freak if it doesn't look exactly like our old MS system) can use? 26. Is Linux any better, since I'll have to depend on several distros and/or word of mouth to get bug/security fixes for it, as opposed to one company like MS? 27. Last but far from least, the associated WindowsUpdate entry for MS04-028 doesn't update anything. So, why is it listed as a Critical Update? Tag: XP SP2 Firewall vs BT's netprotect service Tag: 61343

I upgraded the service pack for XP last week. I notice
that there is now a Windows Firewall. Since I already
have the Blackice firewall as part of the service I get
from BT (ie the Netprotect service) should I switch off
the XP firewall. Do you get conflicts between firewalls
and could this explainn why having upgraded last week my
pc suddenly hangs on me when I am on broadband?

many thanks for any thoughts.

David

Top

Re: XP SP2 Firewall vs BT's netprotect service by Christo

Christo
Sat Sep 18 18:47:48 CDT 2004

"David" <daf.ips@btopenworld.com> wrote in message
news:2dc101c49dcb$61f8e540$a401280a@phx.gbl...
>I upgraded the service pack for XP last week. I notice
> that there is now a Windows Firewall. Since I already
> have the Blackice firewall as part of the service I get
> from BT (ie the Netprotect service) should I switch off
> the XP firewall. Do you get conflicts between firewalls
> and could this explainn why having upgraded last week my
> pc suddenly hangs on me when I am on broadband?
>
> many thanks for any thoughts.
>
> David

it should be disabled if you are already running a FIREWALL

it has been some time since i saw blackice (4 years) and last time i saw it
it wasn't reall a fully fledged firewall

neither is windows Firewall either but things change over 4 years,

ZoneAlarm is by far the firewall of choice, but yes disable windows firewall
i'm sure black ice is alot more informative.

It could be why your broadband is hanging but i wouldnt say it was, if it
was something to do with firewall conflict you would normally get an action
cancelled message in IE6 or a page cannot be displayed,

try it and see?

Top