Restriction in effect on this computer ??
All of a sudden when I try to access any type of hyperlink, either in Outlook 2003 and or website, I get the following error message...
â??This operation has been canceled due to restrictions on this computerâ?¦â??
I am running XP Professional and the only user account is mine (administrator).
Any help or suggestions would be appreciated. Tag: Syn Flood Attack Tag: 54580
Problems disabling ports 135 and 1025.
Hello
I have a Windows Server 2003 Web Edition box I'm trying to get ready to put on the net and I can't get I've read all sorts of procedures to disable ports 135 and 1025, and none of them have worked. I would settle even to change them to listen on localhost instead of all IPs at this point. DTC is disabled, NetBIOS is disabled, Task Scheduler is disabled, I've changed a bunch of registry keys and everything save deleting rpcrt4.dll but it doesn't close the thing. Port 1025 is owned by lsass.exe and 135 by svchost.exe, which doesn't help very much. rpcdump.exe says 1025 is "ncacn_ip_tcp", an "IPSEC policy agent endpoint", but disabling IPSEC Services doesn't close it either. Everything seems to depend on the RPC service, so maybe port 135 is an unwinnable battle for a usable IIS server. Is there a way to tell either or both of these services to listen on localhost, or a specific IP? Slapping a firewall on it isn't a desirable hack/kludge/"solution"
Thanks for any advice. Tag: Syn Flood Attack Tag: 54575
passwords
I want to create a folder or file that only I can open
iewith a password.can't seem to find any help so I'm
appealing is there anyone here that can help me. Tag: Syn Flood Attack Tag: 54574
new adware?
I have a process running adware. The process associated with a blank window is shrinkwrap.exe
Anyone have any clue how to remove this
I ended process and it comes back. I do not have IT powers, but I can get the IT department to make changes if it needs to be done at the system level
adaware does not pick it up. I search the internet and its not anywhere
Thanks in advance. Tag: Syn Flood Attack Tag: 54572
Error 1304 Access Problem... HELP!!!
Hi there,
I'm getting an access error suggesting that I dont have
sufficient rights to a certain foler (C:\WINDOWS\INF)
while trying to install a Bluetooth USB adapter.
I have opened this folder independantly of the installer
and found that although it is not read only, i still cant
right to it??
Any ideas? Do I need to get additional rights on my own
computer???? Tag: Syn Flood Attack Tag: 54570
Install of SCEP fails
When installing the Simple Certificate Enrollment Protocol
(SCEP) Add-on for Certificate Services I keep getting the
following error after clicking finish.
"Setup Failed. Failed to enroll RA certificate. The
parameter is incorrect."
Any ideas. Thanks in Advance Tag: Syn Flood Attack Tag: 54568
Network Security.
Hi all.
We currently have a scenario where all our users connect
to a main terminal server, and from here they can terminal
serve to various other machines on the network.
What we would like to be able to do is limit where the
users can get access to.
So for instance user A can get access to 192.*.*.* but not
get access to 10.*.*.*
I have looked at ISA server but it doesnt seem to allow
you to specify IP ranges that users can access.
Any Ideas?? Many thanks. Tag: Syn Flood Attack Tag: 54567
What protocol does MSN messenger used?
Hi All
What protocol does MSN messenger used? I have blocked HTTP LAN to WAN access on the firewall, but users are still accessing MSN Messenger. Thanks in advance
Best regards
June Tag: Syn Flood Attack Tag: 54565
SpyHunter & ieloader.dll
I got warned of ieloader.dll and found Spyhunter, is that one good?
It warned of WinActive, Gator, UCmore and GlobalNet as "severe" and many
more "Medium" under "Danger", best to take all away? Tag: Syn Flood Attack Tag: 54561
Protection From HB
How do I protect myself from HITLERS BROTHER, oops, I mean
Bill Gates. When I set my computer up to do certain
things, what gives HB the right to implant commands on my
equipment that indiscriminatly changes my set up to what
he thinks my set up should be. Gates does not have the
intellectual prowess to be the GOD he believes himself to
be. Have Little Hitler give me a call so he can tell me
how to system back to the way it was. Best time to
contact is 18:00 to 17:00 EST
905-357-5457 ask for Wesley Tag: Syn Flood Attack Tag: 54559
need help from someone who knows
I recently found this warning come up on my home edition
of XP:
The system has detected that a third-party appliction has
removed 180search Assistant, possibly without your
consent. This may cause some programs not to run as
expected. Please choose an option below.
1-re-install
2-leave and clean any remaining 180search assistant files
3-remind me later
Now as I am a novice at this computer thing this window
is colored like Microsoft but does not have any markings
from them so how do I know if this is not a virus? I have
never seen this before and don't know what to do please
advise.
Thx jamie Tag: Syn Flood Attack Tag: 54558
Virus XP
The virus is stopping my search page, my help and support
and my user control panel in XP, any ideas what it is?
Cheers Tag: Syn Flood Attack Tag: 54556
What's this service?
Anyone ever heard of Senarpnkdpns? I have this running in my Services and a
search of my files comes up empty of anything similar. I ran Adaware and
Spybot S&D but they come up with no problems except the usual which I'm able
to delete.
Tia Tag: Syn Flood Attack Tag: 54555
VIRUS HELP? URGENT
I am in need of your help guys. I think I have some sort
of virus on my laptop. I have run sasser and welchia
symantec, nohing found, i have run avg and ad-aware,
NOTHING that could be the MAIN virus.
I sometimes get the LSASS shutdown but have now patched my
current problems are....My search facility and help and
support facilities in xp do not even load, my user
accounts do not load. Occasionally when online my I.E.
goes to geocities.com/nubeee or similiar. My PC does tentd
not to shut down properly. Tag: Syn Flood Attack Tag: 54548
Is it over?
I'm so depressed. I'm 27 years old; no college degree; no
job; about to lose my car (that's actually breaking down
badly) since I don't have any money to pay the car
insurance; I only have $500 left to my name; I live at
home with family who have no money themselves; I have bad
rhinitis and throat problems that causes me to have bad
breath so I don't even have the self-esteem or confidence
to talk to people or enjoy the simple pleasure of a kiss
from a female; and I'm at a loss as to what to do with my
life, career-wise. Tag: Syn Flood Attack Tag: 54545
HOW TO GET AROUND LOG ON PASSWORD
I HAVE A LAPTOP DELL AND SOMEONE GOT ON OT AND CHANGED THE USERNAME AND PASSWORD WHEN YOU LOG ON -- I CANT GET IT AND DONT KNOW HOW TO GET AROUND THIS PROBLEM. WHAT DO I DO NOW. ANY HELP APPRECIATE
THANKS Tag: Syn Flood Attack Tag: 54543
Temporarily Unavailable
My Account seems to be Temporarily Unavailable
by this message:
We apologize, but your account is temporarily unavailable. This delay
does not affect the entire site or result from any problem specific with
your account however the server that holds your account information is
temporarily unavailable. We do not expect this delay to last much longer, so
please continue to check our site for your account status.
We will do our best to make your account available as quickly as
possible. We appreciate your support, and sincerely apologize for the
inconvenience.
TERMS OF USE Advertise TRUSTe Approved Privacy Statement
GetNetWise Anti-Spam Policy
How long will this take?
begin 666 c.gif?RF=&PI=44364&DI=7474&PS=68416
J1TE&.#EA`0`!`( ``````/___R'Y! $```$`+ `````!``$```(!3 `[
`
end Tag: Syn Flood Attack Tag: 54530
Exchange and Spam
Hello, Im a new exchange server user, y notice that in my Microsoft Outlook appear a new folder name SPAM, some people told me that the Exchange Server 2003, have a permanent comunicacion with spme pages in the internet were are publish the black list domains. Weel my doubt is if this is true, and if its, how many times that the server updates in a day
Please excuse my poor english, I`m practicen, I hope some could answer my doubts. Tag: Syn Flood Attack Tag: 54526
msn messenger
i am having problems signing on to the msn messenger it tells me that there may be prblems with the server,or that my password or screen name is incorrect, or that my connections are in correct now i have checked my connections many times and they are correct and i retype my screen name and password many times and i still can't sign on please tell me what is the problem it cant be my connections because i could sign on to yahoo and aol perfectly i only have problems with msn please let me know what is the problem Tag: Syn Flood Attack Tag: 54524
Windows Special Security Groups
Not sure if this is the right group but ... Im trying to
get an idea on what the 'SELF' group is in active
directory. I am making a Distribution list in active
directory and i want everyone who is a member of the DL
to be able to send mail as the group. I thought 'self'
might work for this but such is not the case. Is there a
group that can do this?
Thanks,
Roy Tag: Syn Flood Attack Tag: 54522
Microsoft Security Bulletins for June 2004
June 8, 2004
Today Microsoft released the following Security Bulletins.
Note: www.microsoft.com/technet/security and www.microsoft.com/security are
authoritative in all matters concerning Microsoft Security Bulletins! ANY
e-mail, web board or newsgroup posting (including this one) should be
verified by visiting these sites for official information. Microsoft never
sends security or other updates as attachments. These updates must be
downloaded from the microsoft.com download center or Windows Update. See the
individual bulletins for details.
Because some malicious messages attempt to masquerade as official Microsoft
security notices, it is recommended that you physically type the URLs into
your web browser and not click on the hyperlinks provided.
Bulletin Summaries:
Microsoft: http://www.microsoft.com/technet/security/Bulletin/ms04-jun.mspx
Moderate Bulletins:
MS04-016 - Vulnerability in DirectPlay Could Allow Denial of Service
(839643)
http://www.microsoft.com/technet/security/Bulletin/MS04-016.mspx
MS04-017 - Vulnerability in Crystal Reports Web Viewer Could Allow
Information Disclosure and Denial of Service (842689)
http://www.microsoft.com/technet/security/Bulletin/MS04-017.mspx
This represents our regularly scheduled monthly bulletin release (second
Tuesday of each month). Please note that Microsoft may release bulletins out
side of this schedule if we determine the need to do so.
If you have any questions regarding the patch or its implementation after
reading the above listed bulletin you should contact Product Support
Services in the United States at 1-866-PCSafety (1-866-727-2338).
International customers should contact their local subsidiary.
--
Regards,
Jerry Bryant - MCSE, MCDBA
Microsoft IT Communities
Get Secure! www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Syn Flood Attack Tag: 54518
KHOOKER.EXE
I was looking at my task manager (XP Pro) and this file
was on the list of processes. can anyone tell me more
about this file? Is this a virus of some sorts?
Thx
JR Tag: Syn Flood Attack Tag: 54516
Spam
I'm getting spam from my own email address(!?) that shows
up as me as the sender but in the properties another name
is stated in the From: textbox!!! Also the times and dates
are spoofed!
See the Internet Header from the Message Options below.
Any suggestion on what is going on or how to stop this?
/Adde
Message Options
Internet Headers
"
Microsoft Mail Internet Headers Version 2.0
Received: from my.exchange.server.ip ([61.163.45.201]) by
my.domain-name.com with Microsoft SMTPSVC(5.0.2195.6713);
Mon, 7 Jun 2004 19:24:27 -0700
X-Message-Info: 3QJU735AYSppgax6ksWgnTHO492BQ63fwcOCSwCS982
Received: from tirade7porchhappenstance (91.89.032.45) by
mail457.my-email@domain-name.com (Bluewin AG 9.1.212)
id 13472MY0TQJW19TPS87376 for my-email@domain-
name.com; Sat, 12 Jun 2004 05:29:25 +0600
Message-ID: <9338754862.35859@my-email@domain-name.com>
Reply-To: "Kip Clayton" <my-email@domain-name.com>
From: "Kip Clayton" my-email@domain-name.com (the From
name is a random name followed by my email address!)
To: "my-name" <my-email@domain-name.com>
Subject: auriga lagrangian
Date: Fri, 11 Jun 2004 17:35:25 -0600
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--=_94rdEWBVUy4d8p"
Return-Path: my-email@domain-name.com
X-OriginalArrivalTime: 08 Jun 2004 02:24:31.0261 (UTC)
FILETIME=[BB19ACD0:01C44CFF]
----=_94rdEWBVUy4d8p
Content-Type: text/html;
charset="iso-0130-7"
Content-Transfer-Encoding: 7Bit
----=_94rdEWBVUy4d8p-
" Tag: Syn Flood Attack Tag: 54513
securing folder on external disk(s)
I have an external (firewire) disk (60GB) which I use daily
between my home-
and the office-computer. Both computers run Win2000.
I have tried to encrypt the data and add user rights, but using
other computers this is easy to change once logged in as
administrator on a third party Win2k computer.
What is the best way of securing access to this (firewire) disk
(or directories) such that if I loose it "no one" can have (easy)
access to it?
Many thanks
--
Zen Andreas Tag: Syn Flood Attack Tag: 54509
Certificates
Hi; I would like to know what is a certificate? should I have one? how do I get one? and what is the Pro and Con for having one? Thanks Terry Tag: Syn Flood Attack Tag: 54504
** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.06.08
Before you post a question to a Microsoft.public.*.security newsgroup, note
that your question may already be answered below:
Answers to Top Frequently Asked Questions:
http://securityadmin.info
I'm getting an LSASS error message, and/or I have the Sasser virus.
1) Run anti-virus that is configured to download the latest updates every
week or even every day. www.grisoft.com is free anti-virus.
2) You also need to install all the patches for your system software from
http://windowsupdate.microsoft.com, starting with the MS04-011 patch.
Microsoft generally releases security patches on the second Tuesday of more
or less every month. [Theh MS04-011 patch is also available here:
http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx
... though you still want to visit the Windows Update site to get all
patches.]
3) Once you're infected, you may need to download and run a free Sasser
virus removal tool such as the Stinger tool from www.McAfee.com or the free
tool from http://www.microsoft.com/security/incident/sasser.asp
4) You're not running a firewall, or your firewall isn't protecting you.
Running a firewall would have protected you from this. Free firewall
software is available from www.kerio.com, www.zonealarm.com and/or
www.sygate.com
5) You need to do ALL of these things, or you won't have much success.
You should also make sure you get the latest Microsoft patches monthly and
anti-virus updates at least weekly.
My question is not mentioned below. How do I get an answer immediately,
with no waiting?
http://securityadmin.info/faq.htm#moreinfo
See also: http://www.google.com/groups?as_ugroup=microsoft.public.*
See also: http://www.google.com/advanced_group_search
See also: http://www.google.com
I want to post a problem or question to the newsgroup. What info do I need
to post in order to get a correct answer quickly?
http://securityadmin.info/faq.htm#netiquette
I just heard about a new Microsoft security patch update. Where can I get
the patch?
http://windowsupdate.microsoft.com OR
http://www.microsoft.com/technet/security/current.asp
I just installed a Microsoft security patch update, and now my computer is
having problems.
http://securityadmin.info/faq.htm#patchbroke
I received an email from Microsoft / Microsoft Support / Microsoft Internet
Security Center claiming to be a security patch [or comprehensive Internet
Explorer update]. Is this a virus?
http://securityadmin.info/faq.htm#microsoftemail
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
I received a virus email from a Microsoft email address. Who do I report
this to?
http://securityadmin.info/faq.htm#microsoftemail
I have the RPC Blaster worm "virus," what do I do?
http://www.microsoft.com/security/incident/blast.asp
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
My computer is giving RPC Remote Procedure Call messages.
There is a TFTP message or file on my computer.
My computer keeps locking up, and/or rebooting, or telling me that it will
reboot in 1 minute.
http://www.microsoft.com/security/incident/blast.asp
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
Where can I download the Blaster worm / RPC DCOM patch?
http://windowsupdate.microsoft.com OR
http://www.microsoft.com/technet/security/current.asp
I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I
want to replace this file.
http://securityadmin.info/faq.htm#jdbgmgr
I forgot my Windows logon password and can't log in. How do I reset it?
http://securityadmin.info/faq.htm#password
I have a problem or a question with a virus or with antivirus.
http://securityadmin.info/faq.htm#virus
NOTE: www.grisoft.com is free antivirus, USE IT.
Why is Outlook Express blocking my attachments as "unsafe"?
http://securityadmin.info/faq.htm#attachments
How do I stop getting pop-up messages? Or adware? Or spyware?
http://securityadmin.info/faq.htm#pop-ups
How do I block people from viewing adult or objectionable content on a
computer?
http://securityadmin.info/faq.htm#contentfilter
How do I block spam emails?
http://securityadmin.info/faq.htm#spam
There is a Content Advisor password blocking me from certain web sites.
http://securityadmin.info/faq.htm#contentadvisor
How do I delete an FTP folder that a hacker put on my computer and I cannot
delete?
http://securityadmin.info/faq.htm#ftpfolder
Have I been hacked? What do I do if I've been hacked?
http://securityadmin.info/faq.htm#hacked
How do I re-secure a computer that has been hacked?
http://securityadmin.info/faq.htm#re-secure
How do I test or improve the security on my computer to avoid being hacked?
http://securityadmin.info/faq.htm#harden
How do I investigate a suspicious IP address that may be trying to hack me?
http://securityadmin.info/faq.htm#trace
How do I report a hacker?
http://securityadmin.info/faq.htm#reporthacker
How do I use a port scanner or vulnerability scanner to test my security?
http://securityadmin.info/faq.htm#portscanner
How do I encrypt my files and/or hard drive?
http://securityadmin.info/faq.htm#encryption
How do I get a firewall? IDS?
http://securityadmin.info/faq.htm#firewall
I want to use the IPSec filtering or IP filtering feature of Windows to
block certain ports and have a problem or question.
http://securityadmin.info/faq.htm#ipsec
I have a problem or question with the XP ICF firewall.
http://securityadmin.info/faq.htm#icf
I have a problem or question with the IIS URLScan tool.
http://securityadmin.info/faq.htm#urlscan
How do I change the banner on my computer or server to hide what software
version I'm using?
http://securityadmin.info/faq.htm#banner
How do I enable Windows Auditing to tell who logged into Windows or who
accessed a file?
http://securityadmin.info/faq.htm#auditing
How do I inspect and disable programs that start up when Windows starts?
http://securityadmin.info/faq.htm#startup
How do I use RUNAS or let someone use RUNAS to run commands as administrator
without having to type the password?
http://securityadmin.info/faq.htm#runas
How do I let non-administrator users run Defrag or change their IP address?
http://securityadmin.info/faq.htm#runas
My question is not mentioned above. How do I get an answer immediately,
with no waiting?
http://securityadmin.info/faq.htm#moreinfo
See also: http://www.google.com/groups?as_ugroup=microsoft.public.*
See also: http://www.google.com/advanced_group_search
See also: http://www.google.com
I want to post a problem or question to the newsgroup. What info do I need
to post in order to get a correct answer quickly?
http://securityadmin.info/faq.htm#netiquette
Note that this is NOT a full list of all the questions answered in the FAQ.
Chances are, your question has probably already been answered. The complete
FAQ is at:
http://securityadmin.info/faq.htm#contents
I hope this is helpful. Feedback, suggestions and criticism regarding the
FAQ are welcome and may be emailed to me.
kind regards,
Karl Levinson, CISSP, MCSE, MVP
email: levinson_k@despammed.com Tag: Syn Flood Attack Tag: 54501
MSN messenger WON'T LOG OUT
Hey there. I just installed MSN messenger. I have set the
privacy settings to say that it is a public computer and
to always ask for my password. For some reason, whenever
I click on MSN messenger I am automatically logged in. No
matter what I do. Tag: Syn Flood Attack Tag: 54497
CAPICOM, getting issuer certificate
Hello everyone,
I have the following problem - I'm receiving a message signed/encrypted with
a certificate on the client, which does not have the certificate's issuer in
the local machine trusted root CA store.
I would like the user to decide whether to accept a message signed by an
untrusted certificate, but I need to add the issuer of this certificate to
the trusted root CA store to get the message processed.
How can I get the issuer of a certificate on the client? Would I have to
download it from the server instead?
Any suggestions are appreciated.
Kiril Tag: Syn Flood Attack Tag: 54495
PKI + S/mime problem...
hi to you all... my situation is like this
i'm going to implement a fully operational S/mime + PKI infrastructure. i'm going to use the digital signature, as well the encrypted mail option. the thing is, that i need for legal avidance, to reroute all the mail in the organization, to a public folder, that a legal advisor could read all the mail running threw the organization. how could he do this, if he dosent have the private keys of all the users?(if solved can cause a non-repudation problem?...). the recovery agent option has very little documentation, and the solution is very complex to implement for such a reason... any suggestion Tag: Syn Flood Attack Tag: 54488
Trend Micro
Whenever I try to run the free online scan of Trend Micro,
a box appears on the screen indicating a problem encounter
and the page gets closed. Anyone knows why it happens so?
Is this related to the explorer settings? Then how to set
this right? Tag: Syn Flood Attack Tag: 54486
Fport on W2K3?
does Fport work for anyone on W2K3
http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/intrusion_detection.ht
(only output I get is header line) Tag: Syn Flood Attack Tag: 54483
what HIDS to use?
any free Host intrusion Detection System (a.k.a Integrity Monitoring System) to use for Windows
one option is Osiris (http://osiris.schmo.com) any experience with this and/or any other free hids for windows Tag: Syn Flood Attack Tag: 54481
unable to connect to exchange 2000 server from Outlook Clients
This is a weird one. Has anyone ever experienced this?
I have Exchange 2000 server running. Suddenly this morning, NONE of the
outlook clients (Outlook 2000 and XP) from all workstation are able to logon
to the Exchange server. The logon box keeps popping up like you're not
authenticated to the domain. When I manually enter the the user id,
password, and domain info this is the error message I get: "Your logon
information was incorrect. Check your username and domain, then type your
password again..."
However, I am already successfully logged onto the domain and am able to
access all network resources, except Exchange.
So I'm thinking that maybe it a MAPI issue. However, I am able to go to a
workstation, logon as the administrator, create a outlook profile, and am
able to access the mailbox with no authentication issues. But if I logon as
another user on the same workstation, I can't successfully authentication
with Outlook.
It seems like a permission issue, so I even tried giving a user as a member
of the admins group, but that didn't help.
Virus scan also comes clean.
Any suggestions? Would sure appreciate it. Tag: Syn Flood Attack Tag: 54480
explorer dl.html windows freeze?!
HELP
After 25-30 min. on-line windows millenium explorer
version 6 windows named "C:\windows\dl.html\ - microsoft
internet explorer" cascade until my computer freezes! I
have run Adaware 6, Spybot Search & Destroy, and
CWShredder and nothing helps. What is this and what do I
do? Mcuh thanks for info. and help...
Mark B. Tag: Syn Flood Attack Tag: 54474
iexplore still runs when it's shut seems to be opening for popups
Like the title says iexplore still runs when it's shut down and seems to be
opening for popups. I'm trying to fix a system for a friend who is not a
computer person and who had so much garbage on her system it should be the
Guinness book of world records. It's 95% better. She is running Norton AV
and Zonealarm Basic. I installed Spybot S&D and Ad-aware. Did aggressive
scans and removed 1000's of things. BUT, this iexplore thing is weird. You
shut everything down......you still see occasional popups. If you go to the
task manager there is still an iexplore running. You shut it down and all
the popups go poof.....gone. This iexplore running in the background also
seems to sometimes interfere will running iexplore when you want it to. Tag: Syn Flood Attack Tag: 54472
Deny group access, Allow specific group members
I have a shared folder, which I want to deny write access
to a specific workgroup of about 250 users. However, at
the same time, I need to grant write access to 5 of the
members in this group.
How can I do this without removing these 5 members from
the workgroup?
Thanks.
John. Tag: Syn Flood Attack Tag: 54469
Windows Messenger Virus??
Once I go online on my computer and see a prop-up Windows
Messenger message saying that "A newer version of
messenger is availabe. You MUST download in order to
continue" and with buttons for action.
I suspect this is something virus; does anyone know of
such instant message? Any advice and thoughts? Thanks. Tag: Syn Flood Attack Tag: 54465
integrity monitoring
Can anyone recommend/know of a free host integrity monitoring systems? The free version of Tripwire is for Linux only (tripwire.org). OSIRIS is free for Windows but I'm wondering is there are any others. Can anyone comment on Orisis? (http://osiris.shmoo.com) Thanks! Tag: Syn Flood Attack Tag: 54463
how to close ports
Nessus tells me to close ports on my XPHE and W3K3 boxes, including specificying registry settings to do so. I am a newbie to the registry. Can anyone point me to a quality document/book for learning how the registry works and how to use it, AND how to close/open TCP/UDP ports, and disable/enable associated services on XPHE and W2K3 machines? Thanks! Tag: Syn Flood Attack Tag: 54457
SmartCard-based security software
Hello Group,
I am looking for a smartcard-based security software. Features should be
like boot protection and file encryption. I am running Windows 98 and and an
o2micro pcmcia smartcard reader.
Thanx,
Christian Tag: Syn Flood Attack Tag: 54452
symproxysvc.exe uses 99% cpu time
Recently, there was an Internet Explorer Script Error
(Expected ',' Code 0) shown on my PC for each clicking on
new web page. Then I renewed my Norton Internet Security
(2002) subscription. The Script Error seems to be
stopped; but it took a long time (3-5 mins.) to open the
new page.
Checking the Task Manager I found a 'symproxysvc.exe'
task, run by system, always used 99% of cpu time. The
process can be ended, but was reactivated when clicking
the IE browser. Therefore, I disabled the Norton Internet
Security to find out that IE worked perfectly without the
script error and the 'symproxysvc.exe' is not running.
What is the problem? How to solve it? TIA. Tag: Syn Flood Attack Tag: 54451
How Force a user to use a token or a smart card to logon to his computer ?
How it is possible to force the access to the Windows environment only using
a USB key or a smart card ?
It is to force a user laptop to use a token or a smart card, then inside or
outside his office.
Thanks in advance.
Eric Tag: Syn Flood Attack Tag: 54450
router log
hi,
what does this log entry mean;
2004/06/07 00:40:10 ** Unauthorized HTTP Access **
<IP/TCP> 222.144.85.173:4821 ->>
a whois search says this;
Whois:
Final results obtained from whois.nic.ad.jp.
Results:
[ JPNIC & JPRS database provides information on network
administration. Its ]
[ use is restricted to network administration purposes.
For further infor- ]
[ mation, use 'whois -h whois.nic.ad.jp help'. To
suppress Japanese output, ]
[ add'/e' at the end of command, e.g. 'whois -h
whois.nic.ad.jp xxx/e'. ]
Network Information:
a. [Network Number] 222.144.0.0-222.144.255.0
b. [Network Name] OCN
g. [Organization] Open Computer Network
m. [Administrative Contact] AY1361JP
n. [Technical Contact] MO081JP
n. [Technical Contact] KK551JP
n. [Technical Contact] IM657JP
p. [Nameserver] ns-kg001.ocn.ad.jp
p. [Nameserver] ns-kn001.ocn.ad.jp
y. [Reply Mail] db-admin@ocn.ad.jp
[Assigned Date] 2003/11/28
[Return Date]
[Last Update] 2003/11/28 14:02:11 (JST)
ip-alloc@nic.ad.jp
I have other searchs of different ip's that are from
china and germany. I think this is only the service
provider. Is someone using my ip address for spam or
phishing? Tag: Syn Flood Attack Tag: 54438
password autofill
How do I change the settings on my webbrowser (Explorer
6.0) so that the password will autofill when the username
is entered? Tag: Syn Flood Attack Tag: 54434
MD5-Challenge on winXP service pack 1
Hi, i recently installed an AP that has IEEE 802.1x in it
and also it has RADUIS server built-in. The AP only
supports EAP-MD5 Challenge protocol, while winXP SP1 only
support MS-CHAPv2. How do i install the EAP-MD5 Challenge
protocol on winXP SP1? the AP setting are correct. i know
this because i tried using other client - odyssey client
manager (demo for 30days) and uses MD5 challenge protocol
and everything running smoothly. So the only problem is
that i want to use WinXP so i don;t need to pay for the
client. plese help. Tag: Syn Flood Attack Tag: 54432
WINDOWS/SYSTEM32/drvddll.exe
Hi EVERYBODY
Does anaybody know what this message of alert means :
"drvddll.exe try to connect to internet"
programme : c/windows/system32/drvddll.exe
tcp (sortant)
I'M QUITE ANXIOUS ABOUT THAT - THANKES IN ADVANCE
Isabelle Tag: Syn Flood Attack Tag: 54418
My office computer has been under a Syn Flood Attack for
about 1 week. We have had over 56,000,000 attacks and am
wondering if anyone knows how to stop this
Cheryl wrote:
> My office computer has been under a Syn Flood Attack for
> about 1 week. We have had over 56,000,000 attacks and am
> wondering if anyone knows how to stop this
Search the microsoft.com website for instructions on tcp/ip hardening.
There are settings to limit the impact of SYN flood attacks.
If you can isolate the source IP address of the of syn packets you can ask your ISP to block those packets. Most likely the attacker is spoofing multiple source IP addresses in the syn packets, but it is usually not an unlimited number. If you can get a handle on the source IPs addresses/subnets, your ISP should be able to help. Your ISP may be able to identify the source IPs if you can't
I suggest you to put a firewall. If it is out of budget then put Linux IPtables
It'll be difficult for you to block the IP address / subnets of the blocker every time. Everytime the attacker will attack from different IP. So better to have one time solution