Interesting reading

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Security on User objects in active directory Hi, I have an OU called X in this OU i created another OU (Y). This OU (Y) containts users accounts. I changed the security settings on these user accounts in the second OU (Y). The problem is that every hour the security of these user accounts in OU (Y) resets to something "basic" ! which p.e. doesn't even allow a user to change his password. The user accounts in OU(X) are not affected. I already checked for scheduled tasks, ... but can't find anything. Suggestions are welcome Thx, Andy Tag: Interesting reading Tag: 54651
  - 2
    - system not secure Hi, I have ZA pro running, NAV 2004, when I run a system security check from either Sygate or Gibson research It tells me that it has pinged my machine and tells me the ip addy of my machine then it goes on to tell me that all of my ports are stealthed but Ping Reply: RECEIVED (FAILED) - Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet. Most personal firewalls can be configured to block, drop, and ignore such ping requests in order to better hide systems from hackers. This is highly recommended since "Ping" is among the oldest and most common methods used to locate systems prior to further exploitation. Now I have ICS firewall enabled, wireless router firewalled, what am I supposed to do to acheive total security? Tag: Interesting reading Tag: 54646
  - 3
    - Increased level of spam in German It started approximately 5 hours ago. The level of spam has significantly increased. All messages come from different IP addresses. The only thing they have in common is that they all are in German. Does anyone else experience the same problem? Thanks DK Tag: Interesting reading Tag: 54645
  - 4
    - people cant see my servers ip address well, this one seems to be a tough one to figure out. Its like I have a fire wall that Im not aware of. check this out. I can access the internet & use chat services & all that cool stuff. But if someone tries to send me files over the internet through like icq, they get an error msg saying session is blocked by a firewall. Also, If i host a server for a game or verbal internet chat service on my computer, I can access that server fine but when I give the ip address to those same people they cant access it at all, like it doesnt exist or something. Im useing windows xp, & I have disabled the firewall under network or internet connections. Can some figure this one out for me? Tag: Interesting reading Tag: 54633
  - 5
    - cannot receive attachments Purchased new computer. Using Outlook Express 6.1 for email. Cannot receive attachments. Help. Response comes up. OE removed access to the following unsafe attachments in your mail 3_Doc1.doc Is there a way I can override the OE and receive the attachments when I know the sender? Tag: Interesting reading Tag: 54629
  - 6
    - Outlook express Purchased new computer. Using outlook express 6.1 Tag: Interesting reading Tag: 54628
  - 7
    - File sharing between an AD Domain controller and a member server through a firewall Hi, I am configuring an access-list for traffic from a dmz server to an internal server. The dmz server is a 2003 domain member server. The internal server is a 2003 AD controller and file server. The plan is to allow file access from the dmz server to the internal server. Eventually, the dmz server will be a front-end to the internal server from the Internet through SSH or Terminal Server sessions. So far I opened the following ports to the internal server (from the dmz) on the firewall: TCP domain UDP domain tcp 88 udp 88 tcp 135 udp 389 tcp 389 tcp 445 udp netbios-ns udp netbios-dgm tcp netbios-ssn I am able to perform nslookup from the dmz server using the internal server for DNS and NAT seems to work fine. But when I try to map a drive from the dmz server to a share on the internal server I get: "The drive could not be mapped because no network was found". Am I missing something? Thanks for your help. C Tag: Interesting reading Tag: 54627
  - 8
    - How Do I Prevent Unauthorized Access To My System? While going on line a few nights ago our msn messenger icon in the lower right hand corner had indicated that we already signed into msn messenger on another computer. When seeing this message I knew that someone had gained access to our system through msn messenger. In haste I took the msn messenger programme and deleted it from my system but I don't know if this action prevented any further access to our system. In addition to this incident we also been having proplems with other online programs including outlook express, Kazaa download site, windows media player(when on line). In the majorty of cases these applications will close down for no reason and the only thing that I can figure out is that who ever has gained access to our system is still in opur system and is screwing around. My question is how can I find out if someone has gained access to my system and how do get rid of them and pevent them from gaining access again Tag: Interesting reading Tag: 54622
  - 9
    - MS04-016 Windows XP question I've got a WinXP Pro SP1 system that dxdiag shows I have DirectX 8.1 installed. Running Windowsupdate shows I need the patch. However, the Security Bulleting MS04-016 seems to say that only version 8.2 and 9.0 are affected if installed on XP. Is something missing here? Tag: Interesting reading Tag: 54619
  - 10
    - DirectX MS04-016 version question I'm looking to determine the versions of DirectX I have installed in my network and running dxdiag shows I have 8.1 - I've also noticed the 4.08.01.0810 listed as the version also. I'm wondering if the two numbers are the same in some way? Tag: Interesting reading Tag: 54616
  - 11
    - Virus attacks Hi. I have a strange problem... I'm trying to install a fresh copy of Win XP. Right after I instal it, I'm trying to connect to the internet to download the security updates get rid of all this holes that the viruses us. But at the second I connect to the net, some vituses geting in and craping the win. So I thought, maybe there's some sort of security update file, that I can download from the MS site and then intall it offline??? If you guys have any idea, where I can find such thing, it would be very helpful. Tag: Interesting reading Tag: 54604
  - 12
    - Syn Flood Attack My office computer has been under a Syn Flood Attack for about 1 week. We have had over 56,000,000 attacks and am wondering if anyone knows how to stop this Tag: Interesting reading Tag: 54593
  - 13
    - Restriction in effect on this computer ?? All of a sudden when I try to access any type of hyperlink, either in Outlook 2003 and or website, I get the following error message... â??This operation has been canceled due to restrictions on this computerâ?¦â?? I am running XP Professional and the only user account is mine (administrator). Any help or suggestions would be appreciated. Tag: Interesting reading Tag: 54580
  - 14
    - Problems disabling ports 135 and 1025. Hello I have a Windows Server 2003 Web Edition box I'm trying to get ready to put on the net and I can't get I've read all sorts of procedures to disable ports 135 and 1025, and none of them have worked. I would settle even to change them to listen on localhost instead of all IPs at this point. DTC is disabled, NetBIOS is disabled, Task Scheduler is disabled, I've changed a bunch of registry keys and everything save deleting rpcrt4.dll but it doesn't close the thing. Port 1025 is owned by lsass.exe and 135 by svchost.exe, which doesn't help very much. rpcdump.exe says 1025 is "ncacn_ip_tcp", an "IPSEC policy agent endpoint", but disabling IPSEC Services doesn't close it either. Everything seems to depend on the RPC service, so maybe port 135 is an unwinnable battle for a usable IIS server. Is there a way to tell either or both of these services to listen on localhost, or a specific IP? Slapping a firewall on it isn't a desirable hack/kludge/"solution" Thanks for any advice. Tag: Interesting reading Tag: 54575
  - 15
    - passwords I want to create a folder or file that only I can open iewith a password.can't seem to find any help so I'm appealing is there anyone here that can help me. Tag: Interesting reading Tag: 54574
  - 16
    - new adware? I have a process running adware. The process associated with a blank window is shrinkwrap.exe Anyone have any clue how to remove this I ended process and it comes back. I do not have IT powers, but I can get the IT department to make changes if it needs to be done at the system level adaware does not pick it up. I search the internet and its not anywhere Thanks in advance. Tag: Interesting reading Tag: 54572
  - 17
    - Error 1304 Access Problem... HELP!!! Hi there, I'm getting an access error suggesting that I dont have sufficient rights to a certain foler (C:\WINDOWS\INF) while trying to install a Bluetooth USB adapter. I have opened this folder independantly of the installer and found that although it is not read only, i still cant right to it?? Any ideas? Do I need to get additional rights on my own computer???? Tag: Interesting reading Tag: 54570
  - 18
    - Install of SCEP fails When installing the Simple Certificate Enrollment Protocol (SCEP) Add-on for Certificate Services I keep getting the following error after clicking finish. "Setup Failed. Failed to enroll RA certificate. The parameter is incorrect." Any ideas. Thanks in Advance Tag: Interesting reading Tag: 54568
  - 19
    - Network Security. Hi all. We currently have a scenario where all our users connect to a main terminal server, and from here they can terminal serve to various other machines on the network. What we would like to be able to do is limit where the users can get access to. So for instance user A can get access to 192.*.*.* but not get access to 10.*.*.* I have looked at ISA server but it doesnt seem to allow you to specify IP ranges that users can access. Any Ideas?? Many thanks. Tag: Interesting reading Tag: 54567
  - 20
    - What protocol does MSN messenger used? Hi All What protocol does MSN messenger used? I have blocked HTTP LAN to WAN access on the firewall, but users are still accessing MSN Messenger. Thanks in advance Best regards June Tag: Interesting reading Tag: 54565
  - 21
    - SpyHunter & ieloader.dll I got warned of ieloader.dll and found Spyhunter, is that one good? It warned of WinActive, Gator, UCmore and GlobalNet as "severe" and many more "Medium" under "Danger", best to take all away? Tag: Interesting reading Tag: 54561
  - 22
    - Protection From HB How do I protect myself from HITLERS BROTHER, oops, I mean Bill Gates. When I set my computer up to do certain things, what gives HB the right to implant commands on my equipment that indiscriminatly changes my set up to what he thinks my set up should be. Gates does not have the intellectual prowess to be the GOD he believes himself to be. Have Little Hitler give me a call so he can tell me how to system back to the way it was. Best time to contact is 18:00 to 17:00 EST 905-357-5457 ask for Wesley Tag: Interesting reading Tag: 54559
  - 23
    - need help from someone who knows I recently found this warning come up on my home edition of XP: The system has detected that a third-party appliction has removed 180search Assistant, possibly without your consent. This may cause some programs not to run as expected. Please choose an option below. 1-re-install 2-leave and clean any remaining 180search assistant files 3-remind me later Now as I am a novice at this computer thing this window is colored like Microsoft but does not have any markings from them so how do I know if this is not a virus? I have never seen this before and don't know what to do please advise. Thx jamie Tag: Interesting reading Tag: 54558
  - 24
    - Hijac log guys whats wrong with my pc Logfile of HijackThis v1.97.7 Scan saved at 13:33:08, on 09/06/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVG6\avgserv.exe C:\Program Files\Common Files\Microsoft=20 Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\ZONELABS\vsmon.exe C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Acer\Notebook Manager\almxptray.exe C:\Program Files\Launch Manager\LaunchAp.exe C:\Program Files\Launch Manager\PowerKey.exe C:\Program Files\Launch Manager\HotkeyApp.exe C:\Program Files\Launch Manager\CtrlVol.exe C:\Program Files\Launch Manager\Wbutton.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\ltmoh\Ltmoh.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\WINDOWS\System32\gsicon.exe C:\WINDOWS\System32\dslagent.exe C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe C:\WINDOWS\System32\wmmon32.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\System32\NAVSCAN32.exe C:\Program Files\Microsoft Office\Office10\msoffice.exe F:\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start=20 Page =3D http://p221.ezboard.com/bafcbohemia R1 - HKLM\Software\Microsoft\Internet=20 Explorer\Main,Default_Page_URL =3D http://global.acer.com/ O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E- 00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [LaunchApp] LaunApp O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32 \igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32 \hkcmd.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program=20 Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program=20 Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [AcerNotebookManager] C:\Program=20 Files\Acer\Notebook Manager\almxptray.exe O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch=20 Manager\LaunchAp.exe O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch=20 Manager\PowerKey.exe" O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch=20 Manager\HotkeyApp.exe O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch=20 Manager\CtrlVol.exe O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch=20 Manager\Wbutton.exe" O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility]=20 C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe O4 - HKLM\..\Run: [MessengerPlus2] "C:\Program=20 Files\Messenger Plus! 2\MsgPlus.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common=20 Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [GSICONEXE] gsicon.exe O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB O4 - HKLM\..\Run: [NAVSCAN32.EXE] NAVSCAN32.exe O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\Avast4 \ashmaisv.exe O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6 \avgcc32.exe /STARTUP O4 - HKLM\..\Run: [Windows Update] C:\WINDOWS\System32 \hivel.exe O4 - HKLM\..\Run: [WSSAConfiguration] wmmon32.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program=20 Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [MSConfig]=20 C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\RunServices: [NAVSCAN32.EXE] NAVSCAN32.exe O4 - HKLM\..\RunServices: [WSSAConfiguration] wmmon32.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32 \ctfmon.exe O4 - HKCU\..\Run: [ChkMail] =08=3DŒ O4 - HKCU\..\Run: [MSMSGS] "C:\Program=20 Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN=20 Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [NAVSCAN32.EXE] NAVSCAN32.exe O4 - Global Startup: Microsoft Office.lnk =3D C:\Program=20 Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft Excel -=20 res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE=20 Class) - http://software- dl.real.com/065cc0611b2d6ffb8314/netzip/RdxIE601.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update=20 Class) -=20 http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl .CAB?38107.2100347222 Tag: Interesting reading Tag: 54557
  - 25
    - Virus XP The virus is stopping my search page, my help and support and my user control panel in XP, any ideas what it is? Cheers Tag: Interesting reading Tag: 54556
- Next
  - 1
    - What's this service? Anyone ever heard of Senarpnkdpns? I have this running in my Services and a search of my files comes up empty of anything similar. I ran Adaware and Spybot S&D but they come up with no problems except the usual which I'm able to delete. Tia Tag: Interesting reading Tag: 54555
  - 2
    - VIRUS HELP? URGENT I am in need of your help guys. I think I have some sort of virus on my laptop. I have run sasser and welchia symantec, nohing found, i have run avg and ad-aware, NOTHING that could be the MAIN virus. I sometimes get the LSASS shutdown but have now patched my current problems are....My search facility and help and support facilities in xp do not even load, my user accounts do not load. Occasionally when online my I.E. goes to geocities.com/nubeee or similiar. My PC does tentd not to shut down properly. Tag: Interesting reading Tag: 54548
  - 3
    - Is it over? I'm so depressed. I'm 27 years old; no college degree; no job; about to lose my car (that's actually breaking down badly) since I don't have any money to pay the car insurance; I only have $500 left to my name; I live at home with family who have no money themselves; I have bad rhinitis and throat problems that causes me to have bad breath so I don't even have the self-esteem or confidence to talk to people or enjoy the simple pleasure of a kiss from a female; and I'm at a loss as to what to do with my life, career-wise. Tag: Interesting reading Tag: 54545
  - 4
    - HOW TO GET AROUND LOG ON PASSWORD I HAVE A LAPTOP DELL AND SOMEONE GOT ON OT AND CHANGED THE USERNAME AND PASSWORD WHEN YOU LOG ON -- I CANT GET IT AND DONT KNOW HOW TO GET AROUND THIS PROBLEM. WHAT DO I DO NOW. ANY HELP APPRECIATE THANKS Tag: Interesting reading Tag: 54543
  - 5
    - Temporarily Unavailable My Account seems to be Temporarily Unavailable by this message: We apologize, but your account is temporarily unavailable. This delay does not affect the entire site or result from any problem specific with your account however the server that holds your account information is temporarily unavailable. We do not expect this delay to last much longer, so please continue to check our site for your account status. We will do our best to make your account available as quickly as possible. We appreciate your support, and sincerely apologize for the inconvenience. TERMS OF USE Advertise TRUSTe Approved Privacy Statement GetNetWise Anti-Spam Policy How long will this take? begin 666 c.gif?RF=&PI=44364&DI=7474&PS=68416 J1TE&.#EA`0`!`( ``````/___R'Y! $```$`+ `````!``$```(!3 `[ ` end Tag: Interesting reading Tag: 54530
  - 6
    - WIndows XP & IE 6 & Accessing Secure Websites Cant access secure site in XP. Have been to Microsoft Support..did not work. Any help? Tag: Interesting reading Tag: 54529
  - 7
    - Exchange and Spam Hello, Im a new exchange server user, y notice that in my Microsoft Outlook appear a new folder name SPAM, some people told me that the Exchange Server 2003, have a permanent comunicacion with spme pages in the internet were are publish the black list domains. Weel my doubt is if this is true, and if its, how many times that the server updates in a day Please excuse my poor english, I`m practicen, I hope some could answer my doubts. Tag: Interesting reading Tag: 54526
  - 8
    - msn messenger i am having problems signing on to the msn messenger it tells me that there may be prblems with the server,or that my password or screen name is incorrect, or that my connections are in correct now i have checked my connections many times and they are correct and i retype my screen name and password many times and i still can't sign on please tell me what is the problem it cant be my connections because i could sign on to yahoo and aol perfectly i only have problems with msn please let me know what is the problem Tag: Interesting reading Tag: 54524
  - 9
    - Windows Special Security Groups Not sure if this is the right group but ... Im trying to get an idea on what the 'SELF' group is in active directory. I am making a Distribution list in active directory and i want everyone who is a member of the DL to be able to send mail as the group. I thought 'self' might work for this but such is not the case. Is there a group that can do this? Thanks, Roy Tag: Interesting reading Tag: 54522
  - 10
    - Microsoft Security Bulletins for June 2004 June 8, 2004 Today Microsoft released the following Security Bulletins. Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summaries: Microsoft: http://www.microsoft.com/technet/security/Bulletin/ms04-jun.mspx Moderate Bulletins: MS04-016 - Vulnerability in DirectPlay Could Allow Denial of Service (839643) http://www.microsoft.com/technet/security/Bulletin/MS04-016.mspx MS04-017 - Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service (842689) http://www.microsoft.com/technet/security/Bulletin/MS04-017.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Interesting reading Tag: 54518
  - 11
    - KHOOKER.EXE I was looking at my task manager (XP Pro) and this file was on the list of processes. can anyone tell me more about this file? Is this a virus of some sorts? Thx JR Tag: Interesting reading Tag: 54516
  - 12
    - Spam I'm getting spam from my own email address(!?) that shows up as me as the sender but in the properties another name is stated in the From: textbox!!! Also the times and dates are spoofed! See the Internet Header from the Message Options below. Any suggestion on what is going on or how to stop this? /Adde Message Options Internet Headers " Microsoft Mail Internet Headers Version 2.0 Received: from my.exchange.server.ip ([61.163.45.201]) by my.domain-name.com with Microsoft SMTPSVC(5.0.2195.6713); Mon, 7 Jun 2004 19:24:27 -0700 X-Message-Info: 3QJU735AYSppgax6ksWgnTHO492BQ63fwcOCSwCS982 Received: from tirade7porchhappenstance (91.89.032.45) by mail457.my-email@domain-name.com (Bluewin AG 9.1.212) id 13472MY0TQJW19TPS87376 for my-email@domain- name.com; Sat, 12 Jun 2004 05:29:25 +0600 Message-ID: <9338754862.35859@my-email@domain-name.com> Reply-To: "Kip Clayton" <my-email@domain-name.com> From: "Kip Clayton" my-email@domain-name.com (the From name is a random name followed by my email address!) To: "my-name" <my-email@domain-name.com> Subject: auriga lagrangian Date: Fri, 11 Jun 2004 17:35:25 -0600 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--=_94rdEWBVUy4d8p" Return-Path: my-email@domain-name.com X-OriginalArrivalTime: 08 Jun 2004 02:24:31.0261 (UTC) FILETIME=[BB19ACD0:01C44CFF] ----=_94rdEWBVUy4d8p Content-Type: text/html; charset="iso-0130-7" Content-Transfer-Encoding: 7Bit ----=_94rdEWBVUy4d8p- " Tag: Interesting reading Tag: 54513
  - 13
    - securing folder on external disk(s) I have an external (firewire) disk (60GB) which I use daily between my home- and the office-computer. Both computers run Win2000. I have tried to encrypt the data and add user rights, but using other computers this is easy to change once logged in as administrator on a third party Win2k computer. What is the best way of securing access to this (firewire) disk (or directories) such that if I loose it "no one" can have (easy) access to it? Many thanks -- Zen Andreas Tag: Interesting reading Tag: 54509
  - 14
    - Certificates Hi; I would like to know what is a certificate? should I have one? how do I get one? and what is the Pro and Con for having one? Thanks Terry Tag: Interesting reading Tag: 54504
  - 15
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.06.08 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info I'm getting an LSASS error message, and/or I have the Sasser virus. 1) Run anti-virus that is configured to download the latest updates every week or even every day. www.grisoft.com is free anti-virus. 2) You also need to install all the patches for your system software from http://windowsupdate.microsoft.com, starting with the MS04-011 patch. Microsoft generally releases security patches on the second Tuesday of more or less every month. [Theh MS04-011 patch is also available here: http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx ... though you still want to visit the Windows Update site to get all patches.] 3) Once you're infected, you may need to download and run a free Sasser virus removal tool such as the Stinger tool from www.McAfee.com or the free tool from http://www.microsoft.com/security/incident/sasser.asp 4) You're not running a firewall, or your firewall isn't protecting you. Running a firewall would have protected you from this. Free firewall software is available from www.kerio.com, www.zonealarm.com and/or www.sygate.com 5) You need to do ALL of these things, or you won't have much success. You should also make sure you get the latest Microsoft patches monthly and anti-virus updates at least weekly. My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: Interesting reading Tag: 54501
  - 16
    - MSN messenger WON'T LOG OUT Hey there. I just installed MSN messenger. I have set the privacy settings to say that it is a public computer and to always ask for my password. For some reason, whenever I click on MSN messenger I am automatically logged in. No matter what I do. Tag: Interesting reading Tag: 54497
  - 17
    - CAPICOM, getting issuer certificate Hello everyone, I have the following problem - I'm receiving a message signed/encrypted with a certificate on the client, which does not have the certificate's issuer in the local machine trusted root CA store. I would like the user to decide whether to accept a message signed by an untrusted certificate, but I need to add the issuer of this certificate to the trusted root CA store to get the message processed. How can I get the issuer of a certificate on the client? Would I have to download it from the server instead? Any suggestions are appreciated. Kiril Tag: Interesting reading Tag: 54495
  - 18
    - PKI + S/mime problem... hi to you all... my situation is like this i'm going to implement a fully operational S/mime + PKI infrastructure. i'm going to use the digital signature, as well the encrypted mail option. the thing is, that i need for legal avidance, to reroute all the mail in the organization, to a public folder, that a legal advisor could read all the mail running threw the organization. how could he do this, if he dosent have the private keys of all the users?(if solved can cause a non-repudation problem?...). the recovery agent option has very little documentation, and the solution is very complex to implement for such a reason... any suggestion Tag: Interesting reading Tag: 54488
  - 19
    - Trend Micro Whenever I try to run the free online scan of Trend Micro, a box appears on the screen indicating a problem encounter and the page gets closed. Anyone knows why it happens so? Is this related to the explorer settings? Then how to set this right? Tag: Interesting reading Tag: 54486
  - 20
    - Fport on W2K3? does Fport work for anyone on W2K3 http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/intrusion_detection.ht (only output I get is header line) Tag: Interesting reading Tag: 54483
  - 21
    - what HIDS to use? any free Host intrusion Detection System (a.k.a Integrity Monitoring System) to use for Windows one option is Osiris (http://osiris.schmo.com) any experience with this and/or any other free hids for windows Tag: Interesting reading Tag: 54481
  - 22
    - unable to connect to exchange 2000 server from Outlook Clients This is a weird one. Has anyone ever experienced this? I have Exchange 2000 server running. Suddenly this morning, NONE of the outlook clients (Outlook 2000 and XP) from all workstation are able to logon to the Exchange server. The logon box keeps popping up like you're not authenticated to the domain. When I manually enter the the user id, password, and domain info this is the error message I get: "Your logon information was incorrect. Check your username and domain, then type your password again..." However, I am already successfully logged onto the domain and am able to access all network resources, except Exchange. So I'm thinking that maybe it a MAPI issue. However, I am able to go to a workstation, logon as the administrator, create a outlook profile, and am able to access the mailbox with no authentication issues. But if I logon as another user on the same workstation, I can't successfully authentication with Outlook. It seems like a permission issue, so I even tried giving a user as a member of the admins group, but that didn't help. Virus scan also comes clean. Any suggestions? Would sure appreciate it. Tag: Interesting reading Tag: 54480
  - 23
    - explorer dl.html windows freeze?! HELP After 25-30 min. on-line windows millenium explorer version 6 windows named "C:\windows\dl.html\ - microsoft internet explorer" cascade until my computer freezes! I have run Adaware 6, Spybot Search & Destroy, and CWShredder and nothing helps. What is this and what do I do? Mcuh thanks for info. and help... Mark B. Tag: Interesting reading Tag: 54474
  - 24
    - iexplore still runs when it's shut seems to be opening for popups Like the title says iexplore still runs when it's shut down and seems to be opening for popups. I'm trying to fix a system for a friend who is not a computer person and who had so much garbage on her system it should be the Guinness book of world records. It's 95% better. She is running Norton AV and Zonealarm Basic. I installed Spybot S&D and Ad-aware. Did aggressive scans and removed 1000's of things. BUT, this iexplore thing is weird. You shut everything down......you still see occasional popups. If you go to the task manager there is still an iexplore running. You shut it down and all the popups go poof.....gone. This iexplore running in the background also seems to sometimes interfere will running iexplore when you want it to. Tag: Interesting reading Tag: 54472
  - 25
    - Deny group access, Allow specific group members I have a shared folder, which I want to deny write access to a specific workgroup of about 250 users. However, at the same time, I need to grant write access to 5 of the members in this group. How can I do this without removing these 5 members from the workgroup? Thanks. John. Tag: Interesting reading Tag: 54469

Just an interesting newspaper article for all those that
feel you don't need to update your system or take measures
to protect yourself.

http://www.usatoday.com/tech/news/computersecurity/2004-06-
09-sasser_x.htm

Top

Re: Interesting reading by Me

Me
Thu Jun 10 14:10:06 CDT 2004

On Thu, 10 Jun 2004 06:23:10 -0700, "Captain O"
<anonymous@discussions.microsoft.com> wrote:

>Just an interesting newspaper article for all those that
>feel you don't need to update your system or take measures
>to protect yourself.
>
>http://www.usatoday.com/tech/news/computersecurity/2004-06-
>09-sasser_x.htm

<http://www.usatoday.com/tech/news/computersecurity/2004-06-09-sasser_x.htm>

Top