Win XP Pro/Win 2k roaming profile

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - opend ports How can i know my opend ports information. and how can i protect my pc from hackers throw these open ports? please sujest good stuff about ports. Jai. Tag: Win XP Pro/Win 2k roaming profile Tag: 31979
  - 2
    - MS03-037 Problem with windows installer Hi, Someone in my comapny has installed Microsoft Update MS03-037, and now says that the Windows installer opens any time he uses any Office application (including everytime he opens an email in outlook). He claims that a window that says "Windows Insstaller" opens for a mintute then closes and then application opens as it should. Is there any way to rollback the patch, or is this a known problem with a resolution? Thanks in advance for any advice you might have! Tag: Win XP Pro/Win 2k roaming profile Tag: 31969
  - 3
    - critical update repeatedly installs I have Windows 98, S.E. Recently, I checked the installation history and noticed that critical update 819696 had requested installation and had been installed on numerous days in the past. Why the multiple installations? Did I do something wrong or is this a sign of some malfunction? Tag: Win XP Pro/Win 2k roaming profile Tag: 31967
  - 4
    - Why Im Writing My Book - OT in a way This babe doesn't post that often so this stuff isn't spam and you'll "know this". There is nothing wrong in trying to help "millions" of computer victims using Windows and the Internet. My topics are not off topic and "you'll know this". So stop all your BS, geez! This babe is tired of your crap and I'll go back to not responding to anyone unless you e-mail me. Try me! Just remember, all your insults make me prouder and my EGO is already big. Way can't some of you make the time to correct my so called "misinformation" and this babe will listen. If my words are incorrect, they will be changed, if you?re worthy of it. "The Trackers" don?t have time for all your street dick games, period. If you don?t want to listen, please just put me on ignore. WHY I'M WRITING THIS BOOK: First off, the members of "The Trackers" are Tracker, Bandito, Pandora, Horse, Sparky and Spooky. My purpose in writing this book is because of what I learned was happening to my computers. At first, the Internet was an object to explore, discover, and communicate with the world around me. When my kid elected to adopt a ferret, I desired to gain as much information on this cute animal in order to raise it up properly. I started my search for Websites which could be of assistance. But as time wore on and my search grew narrower, I limited my options down to alt.pets.ferrets. A few months later, to my amazement, I gave the ferret people another way to use my computer. I was unaware the hackers were going to use my computers for an avenue of their own. So I was glad to have found alt.pets.ferrets, but shocked after posting there to discover, "hackers". To dissuade people who lack the proper knowledge from posting, they started to use personal information as a means of attack. Examples of these can be found in later pages; to the extent they were willing to go to do this. Some information on ferrets were given, but when I went back for additional input, I was advised and told in so many words, "the answer is good enough since we are experts and you have no reason to question them". I felt sorry for the people who lack the proper knowledge when they were told to go away, and that their questions were stupid. No question is stupid, only the answers, so I decided to do further research on this group of people and what their problems were. I then discovered these people had hacked not only my computers, but others who went to their Newsgroup. The following is about the people who were the motivating factor for this Book. How in my research I found hackers, flamers, stalkers, etc. This Book is written to help the thousands of computer owners that are disparaged daily by spiteful individuals; to expose the hackers for who, what, where, and why they continue their malicious activity. Another goal is to have these owners close "all" their open ports to the outside world (where applicable). Tracker Tag: Win XP Pro/Win 2k roaming profile Tag: 31961
  - 5
    - 5 Pages from 5 Chapters Figured out the excerpts from the five Chapters that I can put on my Website. The Chapters were written in order per their importance to "me" in my book. All I have to do now is figure out how to get all of them on the site and make the time. Thanks for all your suggestions and they surely are appreciated. May be now, the world will realize that "My Book" on CD-ROM does exist and it will help millions of computer users. Tracker Shining and Glowin Tag: Win XP Pro/Win 2k roaming profile Tag: 31956
  - 6
    - MSXML My windows 98 laptop is determined to need the "Security Update, February 13, 2002 (MSXML 4.0)" every time Windows Update does it's thing. Does anyone know how to make the scanner happy? Thanks Tag: Win XP Pro/Win 2k roaming profile Tag: 31955
  - 7
    - repeated downloads of the same security update I keep getting the same security update (#823559) from Microsoft (3 times in the last 36 hours, at least 6 times in the past week). I have Windows 98 and McAfee virus protection, and I'm a computer illiterate. It doesn't seem to cause any problems, but I wonder if there are other updates I'm not getting, and it does take a little time and trouble each time. Whom do I contact to find out? Thanks, Wendy Metzger Tag: Win XP Pro/Win 2k roaming profile Tag: 31954
  - 8
    - Lost license cd key I have lost my cd key. I have my receipt from gateway that I bought the software with my computer, I have the disks to load onto the new computer but I can't find that blasted certificate of Authenticity. I thought I had the number written down, but it's asking for a 25 digit cd key and I can only find 20 digit numbers in my notes. Tag: Win XP Pro/Win 2k roaming profile Tag: 31952
  - 9
    - Question about network share access Hi All, I have a small office network with a win 2000 server and XP Pro workstations. I have set certain security access to some files on the server for some users in my network. My problem is with the network just not letting me get into these folders some days, and letting me on others. I end up having to shut down my server to get the network working again, and I am hosting websites so shutting down is a bad idea. Any idea why this access is inconsistent? One day: I get in fine Next day: I get "Not Accessible" errors. Please help. I hope there is something I can do and this isn't just an "Undocumented Feature" of MS OS's! Geoff Murray Sales/Development N R Computronics Multimedia Software and Web Development Charlottetown, Prince Edward Island Canada www.make-it-simple.com Tag: Win XP Pro/Win 2k roaming profile Tag: 31935
  - 10
    - ~tilde on desktop i think it important to start a new thread with this subject titled so. though this is discussed in many threads throughout db it is difficult to get the search to parse out such a file. if you go to my reply to thread 794192 i have stated my experience with this file and so this is an update since that open, and hope to help others. first, i now firmly believe it is a security flaw that is able to find its way in by not having downloaded any language support from ms. since my bandage-fix it has not happened yet though it can happen if you open a file that has been corrupted. when you tag it with .wab and open it, it will have up to three new rolodex cards in your list. working with an isolated machine and w98se. one person mentioned opeing it with .doc. one will notice that it has a header. in viewing the hexadecimal page of this file i noticed that the header is MsingID with tilde within it. without making anychanges and retaging it with .wab these new cards can contain simply the two letters. in my case it was: eG; yy ; and blank, labeled "unknown". i have since, been able to find extract tilde to come up on the desktop by opening old saved mail (transfering to a flop and opeing on an isolated machine without the enhancement). for me if i taged it with messenger and retagged it with .wab it would create yet another address card. this is creative backups to be sure. another experiment in logic one can conduct and i urge to be very careful, is while it is on your desktop, go to "find" and punch in ~ and you'll get a bunch of stuff as expected. but if you type in "~" you'll get that file alone. i think and i do not have any fancy conversion or import/export software, that a symbol is added to one or more of the address cards if not a new card each time a conversion or export/import takes place. i do not know of anyone out there who has come up with a fix, but it has not happened since i bandged it as i descibed in thread 794192. it did however happen when i opened an old saved foreign sourced email on the isolated machine. this happening to many, but it is hard to find when an extension is used as a file name. i do suggest before you experiment that you put it on a flop and conduct find in there. you can use find/advanced but be sure you are offline and without any communication programs open such as IM, OE, NM as far as windows is concerned. please, reply or if you start a new thread use tilde or ~tilde in the title so searches can find it. be very careful of files that use extensions as names without extensions. next i expect a hidden version of this annoyance. jacques, in formfactor heaven -- Posted via http://dbforums.com Tag: Win XP Pro/Win 2k roaming profile Tag: 31934
  - 11
    - Pop -Ups when not on Internet Explorer I am getting pop-ups constantly! Even when I am not on Internet Explorer they are coming up. Sometimes close to one hundred pop-ups. Does anyone know why this is happening or more importantly, how to fix it? Tag: Win XP Pro/Win 2k roaming profile Tag: 31932
  - 12
    - expired pages When I do a search and then select one of the search results, when I try to go back to the original list of search results I get a "page has expired" message. Then when I go to the original form, all of the blanks have returned to default and I have to start the search all over again. This started happening around the time I installed service pack 4. Tag: Win XP Pro/Win 2k roaming profile Tag: 31929
  - 13
    - Windows Passwod I want to change my windows password so I can have it prompt the person logging in to enter a password. When I go to change it though, it asks for my old password. I have never used this feature so have no idea what it is. Any suggestions? Tag: Win XP Pro/Win 2k roaming profile Tag: 31927
  - 14
    - ISNSYS.dll I have found a file called ISNSYS.dll that is apparently logging every keystroke I make. I have tried everything I can think of to remove it but nothing seems to work. Norton Antivirus is not detecting it (even after a reinstall) and even deleting it from my registry does not work. Can anyone help with this? -- Posted via http://dbforums.com Tag: Win XP Pro/Win 2k roaming profile Tag: 31925
  - 15
    - Spyware Alert ! >bb-search.com Please see my post at Forums Spyware Info: http://forums.spywareinfo.com/index.php?act=ST&f=11&t=10946 Seems to be a new variant - the CWS Shredder may not target this one. Anyone seeing complaint posts of this Spyware Hijacker should prescribe "Hijack This" - Instructions as such - feel free to clip and paste in your post reply! >Go to: http://www.spywareinfo.com/~merijn/files/hijackthis.zip Unzip, double-click "HijackThis.exe" and Press "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button. Click: "Save Log" (generates "hijackthis.log") Next, HijackThis | Config [button] | Misc Tools [button] Click: Generate StartupList log [button] (generates "startuplist.txt") Next, go to the below location: Spyware and Hijackware Removal Support. http://forums.spywareinfo.com/index.php?showforum=11 Sign in, then copy and paste both files in your message. HTH -- siljaline "Arguing with anonymous strangers on the Internet is a sucker's game because they almost always turn out to be -- or to be indistinguishable from -- self-righteous sixteen-year-olds possessing infinite amounts of free time." - Neil Stephenson, _Cryptonomicon_ Tag: Win XP Pro/Win 2k roaming profile Tag: 31923
  - 16
    - password change How do I change my screen saver password? Tag: Win XP Pro/Win 2k roaming profile Tag: 31922
  - 17
    - email attachments I just up graded my computer to the 6, so I could download other programs. In doing this, I can't get any of the attachments that are being sent to me by friends. It says for security reason I can't get them. One of the attachments was from my daughter, her resume. I don't even know who I should be asking for help, but if someone can tell me what I can do, to get all my attachments, by disabling something, Itwould be greatly appreciated. thanks Liz Tag: Win XP Pro/Win 2k roaming profile Tag: 31902
  - 18
    - Apology Re: access denied by OE, I have since found discussion on this board of the same subject. Forgot to look before I sent! Sorry. Jdani Tag: Win XP Pro/Win 2k roaming profile Tag: 31900
  - 19
    - security port 443 My security port 443 has been blocked and I am not able to view any secure sites. I have spent hours on the phone with different people,online provider, computer maker, software people and nothing they do seens to be able to help me access that port. Any suggestions???????????????????????????????????????????? Thanks for the help Tag: Win XP Pro/Win 2k roaming profile Tag: 31897
  - 20
    - KB 823980 Scanner HOW CAN I KNOW IF THIS PATCH IS ALREADY INSTALLED INTO MY COMPUTER.I HAVE A; COMPAQ PRESARIO 5000 WINDOWS XP HOME EDITION Tag: Win XP Pro/Win 2k roaming profile Tag: 31896
  - 21
    - use this patch immediately I, too, have been getting this email several times a day and my Spam Dam will mot let it through. If it is essential and truly from Microsoft I'd like to know. Tag: Win XP Pro/Win 2k roaming profile Tag: 31895
  - 22
    - porn on computer I am a stay at home mom and I only use my computer to check my email and run my avon business. I have had porn pop-ups appear on my computer and confronted the only 2 other people about it and they both seem to have no idea what I'm talking about. We have had porn problems before and have tried software programs, in fact this is the 3rd computer and "somehow" it keeps reapearing. I know nothing about computers and I feel like porn is being accesed but I can't prove it. Please someone tell me how this keeps happening when everyone in my home seems to be innocent. it even appears someone has tried to put some sites on the restricted list after viewing them. I feel like they are accessing it from their email but I can't prove that either. Help! -- Posted via http://dbforums.com Tag: Win XP Pro/Win 2k roaming profile Tag: 31894
  - 23
    - infected by ad popups Within this past week I have been getting a number of popups for advertisements ("Evidence Eliminator, Privacy update, etc..") even when I am not using IE and just the desktop is displayed. What steps should I take to eliminate these? Tag: Win XP Pro/Win 2k roaming profile Tag: 31893
  - 24
    - Message rules for Outlook Express I would like to know how to create a message rule that will NOT allow people to send me emails that do not have my email address/name in the 'TO' line. I am getting email messages from people I do not know and thus getting viruses. My name is NEVER included in the TO line. Some times it is just plain junk. I do have a rule for Spam and that has helped considerably. But, others still come through. THANKS A BILL! Tag: Win XP Pro/Win 2k roaming profile Tag: 31892
  - 25
    - Windows update & System restore If you regularly use Windows update, as I do, but then have to use system restore you lose the updates but they remain on your update record. I cannot then find the source files to repeat the updates. Especially the Blaster virus update 823980. Windows update just send you in a circle where the system checks your update, advises that they are there but, I assume that as the restore date was prior to the update, they are not. Anyone know how to get around this? Tag: Win XP Pro/Win 2k roaming profile Tag: 31890
- Next
  - 1
    - IE6.0 security Everytime when I try to login a secured page with IE6.0 on XP Home OS,I always failed, while I can access the page via Netscape. I even could not access to my hotmail account with IE6.0. Is anything wrong in internet options setting? Thanks William Tag: Win XP Pro/Win 2k roaming profile Tag: 31889
  - 2
    - Contingency? How can I prepare to recover from a possible virus attack? Previous operating systems (Windows95, ..Me)let me prepare a system disk. I never had to use one, but that option does not seem to exist in Windows XP. I keep my McAfee Virus and Firewall as well as Windows XP updated. Thanks for your suggestions. Tag: Win XP Pro/Win 2k roaming profile Tag: 31882
  - 3
    - unwanted "favorites" porn additions recently in my favorites column some bastards are attaching several porn and even kiddie porn sites. How in hell can they do this, and I can I stop them? I almost puked when I saw one of their lures. Tag: Win XP Pro/Win 2k roaming profile Tag: 31880
  - 4
    - http://youfindall.net/101/ wont leave me alone The URL http://youfindall.net/101/ keeps installing itself as my home page and my default search engine. I have cleared temp files,history,and tried installing other pages as my default. I have also tried prtect spy wear to see if it is collecting data from me. but I cant get rid of it. I really dont want to rebuild my computer Tag: Win XP Pro/Win 2k roaming profile Tag: 31858
  - 5
    - address book question.. a long time ago i read somewhere that the first name and email in address book should be aaaa(@)aaaa.com. or some other name similar that does not point to a real email address. the article stated that this will stop a worm virus from getting past your address book to others. is this true? seems like virus writer would set the virus to bypass the first address and go to second etc. Tag: Win XP Pro/Win 2k roaming profile Tag: 31857
  - 6
    - alerts i need some one to help me get the microsoft explorer alerts of my computer it wont let me play games or download anything Tag: Win XP Pro/Win 2k roaming profile Tag: 31852
  - 7
    - Key Code I had a new computer built for me but have somwhow lost the key code for XP. Don't know if I threw it away or they did not give it to me. Can anyone tlee me if there is a way to get it from my computer? Thanks a bunch if you can. Kris Tag: Win XP Pro/Win 2k roaming profile Tag: 31839
  - 8
    - Advice on firewall Hi All Does anyone here have any recommendations on a hardware firewall. I need it for a small office of about 50 computers. Any help greatly appreciated. Tag: Win XP Pro/Win 2k roaming profile Tag: 31838
  - 9
    - MBSA Report Error Heeeelpp!!! I run "Microsoft Baseline Security Analyzer" on my XP machine with 'mbsacli.exe' command prompt utility. But I always recieve the error message... Error: All attempts to load xml failed Any help will be appreciated. Thanx in advance... PS: I stopped the WWW Publishing service Tag: Win XP Pro/Win 2k roaming profile Tag: 31837
  - 10
    - Problems with pc going to porn sites by it self Everytime i get online for awhile it goes into the same porn site by itself and can not close the site. PLEASE HELP Tag: Win XP Pro/Win 2k roaming profile Tag: 31830
  - 11
    - Urgent! I been hacked and i dunno wat to do Hi, basicaly, i just got a nu PC, as my previous one went coocoo. I went to see what i thought was a friend on SLSK, when all of a sudden things like Virus scanner and firewall started dissapearing. i restarted my PC, and it was still happening, so i opened the task manager, and that dissapeared after 2 seconds. i done a system restore, and had the same problem. i need my PC, as i have just spent all my saved wages on it (i am only 16, with a crappy part time at macdonalds), yet i need my PC to take part in my paid place for a diploma in IT. can Any1 help me pleeeeease? Tag: Win XP Pro/Win 2k roaming profile Tag: 31811
  - 12
    - Unable to access a web site I am not able to access a web site. I have been visiting this web site quite often. My IE asks for a login and pwd to connect to this web site. Pls help Thanks Tag: Win XP Pro/Win 2k roaming profile Tag: 31806
  - 13
    - Possible information leakage from DNS quirks Hello, Two possible issues here, Microsoft DNS client related. I don't know if they are seriously exploitable, or just information leakage: 1 - I suppose this one is related to Microsoft Knowledge base article 272020 (Unnecessary DNS Query for _ldap._tcp.dc._msdcs.<WorkgroupName>) (http:/ /support.microsoft.com/default.aspx?scid=kb;EN-US;272020). Although not mentioned on the KB, if your WorkgroupName happens to be similar to an existing Internet domain, you'll be querying a DNS server outside your network. For example, I take care of rf.com.br domain. It seems someone (oustide my domain) has set his Win workgroup name as RF. We are in Brazil, so it looks like Windows 'decided' the machine is part of rf.com.br domain (more on this on the second issue). Because of this, the guy's ISP DNS servers forwards the unnecessary queries to my DNS: 200.204.0.138 -> 200.232.120.2 DNS Standard query SOA _ldap._tcp.Primeiro-site-padrao._sites.gc._msdcs.www.rf.com.br 200.232.120.2 -> 200.204.0.138 DNS Standard query response, No such name 200.204.0.10 -> 200.232.120.3 DNS Standard query SOA _ldap._tcp.Primeiro-site-padrao._sites.gc._msdcs.www.rf.com.br 200.232.120.3 -> 200.204.0.10 DNS Standard query response, No such name That goes on for the following names too (hundreds of times a day): _kerberos._tcp.Primeiro-site-padrao._sites.dc._msdcs.www.rf.com.br _gc._tcp.Primeiro-site-padrao._sites.www.rf.com.br Note that "Primeiro_site_padrao" means "First_template_site" or something like that. The aforementioned KBA does not mention anything but "_l dap._tcp.dc._msdcs.WorkgroupName" being queried out - maybe it's not the same bug. I wonder if this is just information leakage, or exploitable in any way (by crafting the DNS reply). 2 - Probably the same guy has his Dynamic DNS update enabled, so his machine (up 24/7) also keeps asking to dynamically update my DNS (I ended up firewalling his IP out; opened it just to grab this). Although my DNS refuses the update, Windows seems to insist, down to trying to negotiate TKEYs: 200.168.31.51 -> 200.232.120.2 DNS Dynamic update SOA rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Dynamic update response, RRset does not exist 200.168.31.51 -> 200.232.120.2 DNS Standard query SOA rf-ubpumac1u03q.www.rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Standard query response, No such name 200.168.31.51 -> 200.232.120.2 DNS Standard query A yankee.rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Standard query response A 200.232.120.2 200.168.31.51 -> 200.232.120.2 DNS Dynamic update SOA rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Dynamic update response, Refused 200.168.31.51 -> 200.232.120.2 DNS Standard query TKEY 996432412690-2 200.232.120.2 -> 200.168.31.51 DNS Standard query response, Refused 200.168.31.51 -> 200.232.120.2 DNS Standard query TKEY 996432412690-2 200.232.120.2 -> 200.168.31.51 DNS Standard query response, Refused 200.168.31.51 -> 200.232.120.2 DNS Dynamic update SOA rf.com.br 200.232.120.2 -> 200.168.31.51 DNS Dynamic update response, Refused 200.168.31.51 -> 200.232.120.2 DNS Standard query TKEY 1047972020242-3 200.232.120.2 -> 200.168.31.51 DNS Standard query response, Refused Note that his Netbios name is rf-ubpumac1u03q (used to be RF only - looks like he fresh-reinstalled and is using the default installation name). Again, not sure if this can be exploited (I'm no hacker), but it sure is information leakage. Regards, Joao S Veiga Tag: Win XP Pro/Win 2k roaming profile Tag: 31805
  - 14
    - pop ups How can you get rid of pop ups that appear when you are not connected to the internet in any way. Tag: Win XP Pro/Win 2k roaming profile Tag: 31803
  - 15
    - policty option "only run allowed windows applications" restricts everything No applications work when I implement the "only run allowed windows applications" option in a windows 98 policy. I've listed the full path to each app I want to run, but nothing runs. I even tried notepad and calculator by specifying their respective paths and executable names with no luck. Tag: Win XP Pro/Win 2k roaming profile Tag: 31799
  - 16
    - Invalid install parameters /q:u /r:n - MDAC 03-033 I can't believe these guys can't even get their installations consistent. Q fixes can usually be installed in Quiet mode (no user prompts) and without forcing a reboot by putting /q:u /r:n at the end. With this fix, the user must hit OK to do the install and a reboot is forced at the end - we have no control of how this install is done. I want to push this install blind (no user needing to be logged in) for unattended (shared, test, backup) workstations, and quiet for users (don't ask them to approve). Anyone figure out how to do this for this patch? Microsoft, you're just not getting better at this! What about your stated intent of not making patches force a reboot! Tag: Win XP Pro/Win 2k roaming profile Tag: 31796
  - 17
    - key code I need a generic key code to reinstall works suite 2002 because we do not have the case with number on it. Tag: Win XP Pro/Win 2k roaming profile Tag: 31791
  - 18
    - Critical update MS03-026 I auto download updates, but when I view my installation history I do not see that the update MS03-026 has been installed. MS tells me I have to do this to protect against Worm Blaster. I am running XP over ME. Tag: Win XP Pro/Win 2k roaming profile Tag: 31785
  - 19
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.09.06 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: Win XP Pro/Win 2k roaming profile Tag: 31775
  - 20
    - Log on problems I screwed up my company supplied laptop by tring to set it up for home internet use. I went into the System Setting and set it for home use. Now I get a screen that comes up during start up that says "admin" and it wants a password. My user password no longer works and I can't get back into the control panel to reset it back the way it was. Any ideas how to log on? Tag: Win XP Pro/Win 2k roaming profile Tag: 31769
  - 21
    - "use this patch immediately" I keep receiving this patch from "microsoft." Is this a valid Microsoft patch? I don't like the way the e-mail is formatted (doesn't look very professional - from Microsoft)and am not sure it's really from Microsoft. I keep deleting the e-mail - just wondering if anyone else has seen or received this. Thanks Dennis Tag: Win XP Pro/Win 2k roaming profile Tag: 31768
  - 22
    - Strange RPCSS activity caught by File Monitor Using ZAP firewall (135->127 blocked) and AVGP antivirus, all MS Updates applied. OS is registered Win98 1st. Also have AdAware & Spybot. None of these are indicating any security issues. However, my domain is having LOTS of static IP's scanned (ICMP ping) every few seconds - pings are blocked on all machines). I've previously implemented "UnPlug n' Pray" to turn off MS UPnP, too. Recently on one machine I had font for a few 3rd party pgms (old installs, until now been displaying fine for years) start showing blank square boxes instead of readable text (such as with the Spell Checker named WordWeb 1.51). Restoring backup of Fonts folder content and Registry didn't cure, so used File Monitor (http://www.sysinternals.com) to watch WordWeb and saw it try to use a font named MANGAL.TTF (probably installed from MS Update to support other languages in IE). Used Fonts Folder utility to delete it. Rebooted, no cure & no trace by File Monitor of what font it was trying to load for a replacement. But while monitoring with File Monitor this entry occurred: 6:51:18 AM Rpcss Read C:\BATCH\MOUSEMGR.DLL SUCCESS Offset: 20770816 Length: 4096 Interesting thing is I do have that BATCH folder (I created it years ago) but no such filename exists there or anywhere on any drive (does now, since I put a attrib +S+H+R dummy text file of that name in BATCH folder). But how could File Monitor have had a read success before I created that dummy filename??? I am seriously suspecting a security breach, but no luck in pinning it down. Anyone have some comments, ideas, etc.? Mostly Anonymous Tag: Win XP Pro/Win 2k roaming profile Tag: 31767
  - 23
    - Critical Update Problem I have windows 98 SE. I first downloaded and installed the latest MS critical update MS03-017 (Windows Media Player)when it came out. This critical update continues to pop up on my screen every other day. In frustration, I downloaded and installed this critical update a second time (which is displayed on my download history). I would like to know what I can do to stop this download from popping up on my system. This critical update will even pop up randomly when I am surfing the web. The most frustrating aspect of this is that I don't even have Windows Media Player 7.1. I would appreciate any help you can offer. Tag: Win XP Pro/Win 2k roaming profile Tag: 31766
  - 24
    - Non-printing password characters and Remote Desktop logon Is it possible to use a password with non-printing characters to logon to a Remote Desktop session? Thanks Tag: Win XP Pro/Win 2k roaming profile Tag: 31765
  - 25
    - NDIS I have recently installed Sygate firewall and see the processes accessing internet. However, what is really bothering me, is one called "NDIS User Mode I/O driver". It downloads increadible amounts of data from internet (just today during 5 hours about 140MB). Could someone please explain what is it good for and whether it can harm security of my PC somehow? Thx... Tag: Win XP Pro/Win 2k roaming profile Tag: 31763

I want to make a back up of win profile on a PDC server, but I don't
want to back up all the files.

I have seen that there is a NTUSER.INI file with some information like

[General]

ExclusionList=Local Settings;Temporary Internet Files;Historique;Temp;

What is the entire command or parameters to complete the list

I am interesting in a parameters like

"InclusionList" .

Thanks for information

--
Posted via http://dbforums.com

Top