Problem bzkn.exe - virus infection?

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Port 6667 & 10.0.1.128/1.3.3.7/1.1.1.1 Hello, I'm seeing a lot of traffic trying to leave my firewall destined for port 6667 at the IPs 10.0.1.128, 10.10.10.10, 1.1.1.1 and 1.3.3.7 (sounds like l337/elite to me :-). Yes - I know the 10.x.x.x traffic isn't going too far.... RFC1918, etc, etc. Various Google searches and searches on the various A/V sites haven't turned up a definite answer - just more questions about the same thing. Can anyone clue me in to the exact trojan/worm/virus this may be and/or if they're seeing the same kind of traffic. Any insight is appreciated.... Thanks. B Tag: Problem bzkn.exe - virus infection? Tag: 33296
  - 2
    - Is this for real or is it a virus? I received the following e-mail today and I'm suspicious=20 it's malicious. Could someone advise me how to find out=20 and how to alert others if it is? From: Internet Security Center=20 To: MS Corporation Partner=20 Sent: Thursday, September 18, 2003 12:19 PM Subject: Patch Microsoft All Products | Support | Search | =20 Microsoft.com Guide =20 Microsoft Home =20 =20 Microsoft Partner this is the latest version of security update,=20 the "September 2003, Cumulative Patch" update which fixes=20 all known security vulnerabilities affecting MS Internet=20 Explorer, MS Outlook and MS Outlook Express as well as=20 three new vulnerabilities. Install now to continue=20 keeping your computer secure from these vulnerabilities,=20 the most serious of which could allow an malicious user=20 to run executable on your system. This update includes=20 the functionality of all previously released patches. =20 System requirements Windows 95/98/Me/2000/NT/XP=20 This update applies to MS Internet Explorer, version=20 4.01 and later MS Outlook, version 8.00 and later MS Outlook Express, version 4.01 and later =20 Recommendation Customers should install the patch at the=20 earliest opportunity.=20 How to install Run attached file. Choose Yes on=20 displayed dialog box.=20 How to use You don't need to do anything after=20 installing this item.=20 Microsoft Product Support Services and Knowledge Base=20 articles can be found on the Microsoft Technical Support=20 web site. For security-related information about=20 Microsoft products, please visit the Microsoft Security=20 Advisor web site, or Contact Us.=20 Thank you for using Microsoft products. Please do not reply to this message. It was sent from an=20 unmonitored e-mail address and we are unable to respond=20 to any replies. ---------------------------------------------------------- ---------------------- The names of the actual companies and products mentioned=20 herein are the trademarks of their respective owners. =20 Contact Us | Legal | TRUSTe =20 =A92003 Microsoft Corporation. All rights reserved. Terms=20 of Use | Privacy Statement | Accessibility =20 Tag: Problem bzkn.exe - virus infection? Tag: 33293
  - 3
    - error message in Windows 98 I get the mesage "Your current security settings prohibit copying or moving files from this zone". The article in the knowledge base refers to Windows 2000, but I have Windows 98. Is there any way to fix this? Thanks! Tag: Problem bzkn.exe - virus infection? Tag: 33291
  - 4
    - messenger service How can I stop those nasty little messenger service pop- ups? Tag: Problem bzkn.exe - virus infection? Tag: 33289
  - 5
    - msn messenger virus every time i sign onto msn messenger it signs me out after 2 minutes without my permission. it happens constantly no matter how many times i sign back in. Tag: Problem bzkn.exe - virus infection? Tag: 33278
  - 6
    - Security Emails Some how I have gotten on a Microsoft Mailing list about security updates. How do I get off this list? -- Microsoft Customer this is the latest version of security update, the "September 2003, Cumulative Patch" update which eliminates all known security vulnerabilities affecting Internet Explorer, Outlook and Outlook Express as well as five newly discovered vulnerabilities. Install now to protect your computer from these vulnerabilities, the most serious of which could allow an attacker to run executable on your system. This update includes the functionality of all previously released patches. System requirements Win 9x/Me/2000/NT/XP This update applies to Microsoft Internet Explorer, version 4.01 and later Microsoft Outlook, version 8.00 and later Microsoft Outlook Express, version 4.01 and later Recommendation Customers should install the patch at the earliest opportunity. How to install Run attached file. Click Yes on displayed dialog box. How to use You don't need to do anything after installing this item. Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site. For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site, or Contact us. Please do not reply to this message. It was sent from an unmonitored e-mail address and we are unable to respond to any replies. Thank you for using Microsoft products. With friendly greetings, Microsoft Network Customer Support Tag: Problem bzkn.exe - virus infection? Tag: 33275
  - 7
    - Answer on MS Security Bulletin I just received an answer from Symantec on the Q254952.exe attachment that came with the fake MS Security Update email. They said it is the W32.Swen.A@mm and sent me an ftp site so I could d/l the betadefs. I've done that and am so glad that I never open attachments! Just thought I'd let you guys know...Thanks so much for the responses! Carol Tag: Problem bzkn.exe - virus infection? Tag: 33272
  - 8
    - cannot access secure sites I am connected to the internet through an 8 port netgear router. None of us can access secure sites. ive called tech support and all they told me was to enable enebled port 443 within the router and still nothing. i have enabled ssl 2.0 and ssl 3.0 but for some reason pct 1.0 is missing from the security options in internet explorer. Occasionally secure sites will work but only momentarily and very slow. It seems to be random and makes no sense. Netscape navigatior is also the same. Im running win xp. Please help me -- Posted via http://dbforums.com Tag: Problem bzkn.exe - virus infection? Tag: 33267
  - 9
    - E-Mail Security Patch from Microsoft! To whom it may concerns, I keep getting this e-mail message from Microsoft indicating that I must update my security patch. When I scan for new critical windows updates, the system tells me that I'm up to date of my critical security updates. Nonetheless, I continue to receive these messages asking that I update my critical security updates. What should I do? Respectuflly Submitted Mario Tag: Problem bzkn.exe - virus infection? Tag: 33264
  - 10
    - error message I have a free download called Spyware. It keeps sending me the message Component 'REGISTRY.OCX' or one of its dependencies not correctly registered: afile is missing or invalid. Can someone tell me what to do about this. It comes up every time I log in. Tag: Problem bzkn.exe - virus infection? Tag: 33246
  - 11
    - PSS Security Alert - New E-Mail Worm: W32\Swen@MM PSS Security Response Team Alert - New E-Mail Worm: W32/Swen@MM SEVERITY: MODERATE DATE: September 18, 2003 PRODUCTS AFFECTED: Microsoft Outlook, Microsoft Outlook Express, and Web-based e-mail ********************************************************************** WHAT IS IT? W32/Swen@MM spreads via e-mail and network shares. The Microsoft Product Support Services Security Team is issuing this alert to advise customers to be on the alert for this virus as it spreads in the wild. Customers are advised to review the information and take the appropriate action for their environments. IMPACT OF ATTACK: Mass Mailing, disabling processes related to security software such as antivirus and firewall software TECHNICAL DETAILS: For additional details on this worm from anti-virus software vendors participating in the Microsoft Virus Information Alliance (VIA) please visit the following links: Network Associates: http://vil.nai.com/vil/content/v_100662.htm Trend Micro: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SWEN.A Symantec http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html Computer Associates: http://www3.ca.com/virusinfo/virus.aspx?ID=36939 For more information on Microsoft's Virus Information Alliance please visit this link: http://www.microsoft.com/technet/security/virus/via.asp Please contact your Antivirus Vendor for additional details on this virus. PREVENTION: 1. This worm is exploiting a previously patched vulnerability. The vulnerability exploited is related to the following Microsoft Security Bulletin: http://www.microsoft.com/technet/security/bulletin/ms01-020.asp As always, customers are advised to install the latest security patch for Internet Explorer. Information on the latest cumulative security patch for Internet Explorer can be found here: http://www.microsoft.com/technet/security/bulletin/MS03-032.asp 2. Outlook 2000 post SP2 and Outlook XP SP1 include the most recent updates to improve the security in Outlook and other Office programs. This includes the functionality to block potentially harmful attachment types. If you are running either of these versions, they will (by default) block the attachment, and you will be unable to open it. To ensure you are using the latest version of Office click here: http://office.microsoft.com/ProductUpdates/default.aspx By default, Outlook 2000 pre SR1 and Outlook 98 did not include this functionality, but it can be obtained by installing the Outlook E-mail Security Update. More information about the Outlook E-mail Security Update can be found here: http://office.microsoft.com/Downloads/2000/Out2ksec.aspx Outlook Express 6 can be configured to block access to potentially-damaging attachments. Information about how to configure this can be found here: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q291387 Outlook Express all other versions: Previous versions of Outlook Express do not contain attachment-blocking functionality. Please exercise extreme caution when opening unsolicited e-mail messages with attachments. Web-based e-mail programs: Use of a program-level firewall can protect you from being infected with this virus through Web-based e-mail programs. RECOVERY: If your computer has been infected with this virus, please contact your preferred antivirus vendor or Microsoft Product Support Services for assistance with removing it. TECHNET SECURITY LINK: http://www.microsoft.com/technet/security/virus/alerts/swen.asp As always please make sure to use the latest Anti-Virus detection from your Anti-Virus vendor to detect new viruses and their variants. If you have any questions regarding this alert please contact your Microsoft representative or 1-866-727-2338 (1-866-PCSafety) within the US, outside of the US please contact your local Microsoft Subsidiary. Support for virus related issues can also be obtained from the Microsoft Virus Support Newsgroup which can be located by clicking on the following link news://msnews.microsoft.com/microsoft.public.security.virus. PSS Security Response Team -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Problem bzkn.exe - virus infection? Tag: 33242
  - 12
    - router security Is it true that routers will prevent hackers from getting into a computer system? if it is true, can anyone briefly explain how and why? I am tempted to get a router, although I don't really need it, to boost security. Thanks Tag: Problem bzkn.exe - virus infection? Tag: 33241
  - 13
    - Is Microsoft re-thinking .Net security I need some considered comment from anyone in the know to save my career and stop my Company making flawed decisions. My Company currently runs ASP with VB components on W2K servers, with W2003 servers just arriving. We are re-architecting and we were led to believe it would be .Net using VB. Our Technical Architect is ex- Java/Unix and his preference for this solution is barely hidden. Recently, a manager from another Company visited us and advise that we went J2EE instead of .Net. His revelation was that few large companies were going .Net because of security concerns. He further claimed that MS had stopped pushing .Net at present, why? because every man and his dog at Redmond was working on fixing these massive security holes. Needless to say, this guy develops solely in J2EE, so he would say that, wouldn't he. The solution at present is to develop the front end in VB.Net and the web services in J2EE. Now, given my limited knowledge of these things, this seems a bodgy solution and impacts on my .Net career. Not good. I haven't seen any information anywhere about MS redeveloping .Net on such a scale and frankly I doubt the claims made. Does anyone out there have a better angle on this? I need some good ammunition to throw back at my Company before a final decision is made. Sorry if this is the wrong forum, I am a little desperate. TIA John Tag: Problem bzkn.exe - virus infection? Tag: 33240
  - 14
    - bogus update anyone get these so called updates with attachments that i have never opened. Microsoft Customer this is the latest version of security update, the "September 2003, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three new vulnerabilities. Install now to maintain the security of your computer from these vulnerabilities, the most serious of which could allow an attacker to run code on your computer. This update includes the functionality of all previously released patches. System requirements Windows 95/98/Me/2000/NT/XP This update applies to MS Internet Explorer, version 4.01 and later MS Outlook, version 8.00 and later MS Outlook Express, version 4.01 and later Recommendation Customers should install the patch at the earliest opportunity. How to install Run attached file. Choose Yes on displayed dialog box. How to use You don't need to do anything after installing this item. Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site. For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site, or Contact Us. Thank you for using Microsoft products. Please do not reply to this message. It was sent from an unmonitored e-mail address and we are unable to respond to any replies. ---------------------------------------------------------------------------- ---- The names of the actual companies and products mentioned herein are the trademarks of their respective owners. Contact Us | Legal | TRUSTe ©2003 Microsoft Corporation. All rights reserved. Terms of Use | Privacy Statement | Accessibility Tag: Problem bzkn.exe - virus infection? Tag: 33238
  - 15
    - September 2003, Cumulative Patch - Possible Warning! I've received this patch in a very authentic MS looking email and downloaded it. Now my Norton anti-virus software and ZoneAlarm firewall software will not initiate due to a memory sharing error. Has anyone else been effected by this and any suggested on how to uninstall it? Thanks Tag: Problem bzkn.exe - virus infection? Tag: 33216
  - 16
    - Microsoft Security Bulletin I received an email this morning (9-18-03) from "MS Network Security Division". The subject line said "Latest Microsoft Security Upgrade". It came with a 106 KB attachment "Q254952.exe". Now, my concern is it's been scanned by Norton and no virus was detected. I'm NOT going to open this attachment but would like to know if anyone else has received something like this? It looks like a typical MS page from their web site. Very convincing...Any information would be helpful. Thanks! Carol Tag: Problem bzkn.exe - virus infection? Tag: 33212
  - 17
    - NT 4.0 Security Auditing We're running NT4.0 Server at out business and I was wondering if there was an app, or a simple way to get a list of who has what access to various drives/directories on the server? Thank you, Eric Tag: Problem bzkn.exe - virus infection? Tag: 33210
  - 18
    - Why you must install a firewall NOW http://www.zdnet.com/anchordesk/stories/story/0,10738,2914667,00.html "MSBlast, the recent worm that exploited the buffer overflow in Windows's DCOM RPC protocol, wasn't the sort of e-mail-borne pest that antivirus software is good at catching. Instead, it infiltrated computers directly through their Internet connections. Although installing the latest Microsoft patches should prevent infections from this sort of worm, a simple software firewall will do the trick, too, whether or not you have antivirus software installed. " Tag: Problem bzkn.exe - virus infection? Tag: 33204
  - 19
    - Virus disguised as MS Security bulletin or are we just paranoid? My boss gets what looks like security bulletins from MS regarding patches, but she doesn't think she ever signed up for the service. 1. Is there a way we can check to see if we're on the mailing list? 2. The reason it's critical is that Norton Antivirus 2003 Pro has identified at least one of these bulletins as being infected. Does anyone know of viruses arriving disguised as a security bulletin? Thanks. Tag: Problem bzkn.exe - virus infection? Tag: 33199
  - 20
    - INTERNET EXPLOYER VIRUS SCAN WHEN I USE MINE IT SAYS PROGRAM.EXE IS MISSING???????????///// Tag: Problem bzkn.exe - virus infection? Tag: 33195
  - 21
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.09.18 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I have the RPC Blaster or Welchia / Nachi worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: Problem bzkn.exe - virus infection? Tag: 33194
  - 22
    - virus problem My son has Norton av on his Win98se Dell desktop. He sent me the following e-mail. Can you help me advise him please?: I got a computer virus a few days ago, and it was immediately quarantined...and since it was in a temporary folder, I decided to delete it. I have been having weird troubles with my computer ever since. Just tonight, I rebooted my computer, and I got the following message in a small box... "The C:\WINDOWS\EDLLEXE file appears to be corrupt. Reinstall the file, then try again." Can you help me with what I should do? Tag: Problem bzkn.exe - virus infection? Tag: 33193
  - 23
    - OE blocks MS patch Outlook Express is blocking access to an e-mail attachment from MS for the latest security patch. Why did it do this? How do I re-activate the attachment? Pretty sure its the real deal. Thanks Tag: Problem bzkn.exe - virus infection? Tag: 33191
  - 24
    - Possible new virus email? pack426.exe Just received html-based email that looks like it was cloned from html code on MS site; attachment is a file named: pack426.exe Subject is "Current Update" Virus scan with latest Computer Associates EZAntivirus and Awil-Avast comes up negative, but I sure won't open this puppy... Headers areas follows: Return-Path: <pjlm.jennissen@planet.nl> Received: from smtp05.wxs.nl ([195.121.6.57]) by fep03-mail.bloor.is.net.cable.rogers.com (InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with ESMTP id <20030918123314.LTSM322285.fep03-mail.bloor.is.net.cable.rogers.com@smtp05.w xs.nl> for <------my email removed------>; Thu, 18 Sep 2003 08:33:14 -0400 Received: from odtrovl (ip3e83d606.speed.planet.nl [62.131.214.6]) by smtp05.wxs.nl (iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003)) with SMTP id <0HLE007EPTK4GB@smtp05.wxs.nl> for ------my email removed------; Thu, 18 Sep 2003 14:34:01 +0200 (MEST) Date: Thu, 18 Sep 2003 14:33:41 +0200 (MEST) Date-warning: Date header was inserted by smtp05.wxs.nl From: MS Corporation Public Services <tubfvhoao-mwqqjg@newsletters.com> Subject: Current Update To: <catjc_brtjysja@newsletters.com> Message-id: <0HLE007ERTK4GB@smtp05.wxs.nl> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_yoNwYuiDWWdZViO3VsQTOg)" Tag: Problem bzkn.exe - virus infection? Tag: 33185
  - 25
    - Latest update for Windows 98 appears to be flawed!!! I downloaded the latest 3MB+ security patch for Windows 98 and it screwed up my ActiveX settings and caused several subscription programs to become useless. I had to use my recovery software to go back in time and remove the update. I tried to report the problem to Microsoft, but it appears it could cost me between $20 - $35 to report their problem back to them. Resetting the Active X security options under Internet/Tools/Security did not work. Hope this serves as a warning and keeps some of you from suffering. Thanks, Susan Tag: Problem bzkn.exe - virus infection? Tag: 33184
- Next
  - 1
    - Some more book reviews - Web Services Security/Security+ Study Guide & DVD Training Sytem/Rethinking Corporate Security Post 9/11 Web Services Security Minimize security risks in your system by successfully rolling out secure Web Services with help from this exceptional guide. Web Services Security covers everything network professionals need to know, including details on Web Services architecture, SOAP, UDDI, WSDL, XML Signature, XML Encryption, SAML, XACML, XKMS, and more. http://www.security-forums.com/forum/viewtopic.php?t=8416 Security+ Study Guide & DVD Training Sytem The Security+ Study Guide & DVD Training Sytem is a one-of-a-kind integration of text, DVD-quality instructor led training and Web-based exam simulation and remediation. This system gives you 100% coverage of the official CompTIA Security+ exam objectives plus test preparation software for the edge you need to pass the exam on your first try. http://www.security-forums.com/forum/viewtopic.php?t=8342 Rethinking Corporate Security In The Post 9/11 Era The attacks on the World Trade Center and the Pentagon on September 11, 2001 changed the way the world thinks about security. Everyday citizens learned how national security, international politics, and the economy are inextricably linked to business continuity and corporate security. Corporate leaders were reminded that the security of business, intellectual, and human assets has a tremendous impact on an organization's long-term viability. http://www.security-forums.com/forum/viewtopic.php?t=8337 Enjoy :) ST From http://reviews.security-forums.com -- Get your Geek Goodies! http://shop.security-forums.com .: http://www.security-forums.com :. Share your knowledge It's a way to achieve Immortality. Tag: Problem bzkn.exe - virus infection? Tag: 33175
  - 2
    - how to get rid of hijacker?? Like others, my computer was hijacked by the site global- finder.com and it's causing various problems. I may seem naive (because I really am) but why do these people do this crap, and does anybody know who/where they are? I'd love to personally visit their home and/or office and look the jerk in the eye. Second, how do I get them off my system if I'm using Windows 98 Second Edition? Please help! Tag: Problem bzkn.exe - virus infection? Tag: 33174
  - 3
    - SPAM Newsgroup Is there a Microsoft Newsgroup specifically to discuss the problem of SPAM? If not, then there ought to be one. I would be happy to help. -G Tag: Problem bzkn.exe - virus infection? Tag: 33173
  - 4
    - Help - Removal of Bonzi InternetAlert I need to remove Bonzi InternetALERT from a friends PC. Of course Bonzi don't have any removal instructions for this spyware programme. If anyone can give me instructions to remove this programme please reply by e-mail and dont forget to remove the SPAMTRAP Thank you very much in anticipation. Martin Tag: Problem bzkn.exe - virus infection? Tag: 33172
  - 5
    - MSN PRofile Prbolem I had installed MSN messenger 4 and used the wizard to create a sign on. now in MSN Msgr window, a link is lying saying "Login as driram@hotmail.com" and click which automatically log me on without the need of passord. The system I use is also used by couple of other guys. can someone tell me how to remove that link. Tag: Problem bzkn.exe - virus infection? Tag: 33162
  - 6
    - package with all the security patches ?? Hi Everybody ! Does anybody know if a package containing all the microsoft security pachtes exists ? Thank you very much !! Tag: Problem bzkn.exe - virus infection? Tag: 33159
  - 7
    - Is this survey for real? I received the following email:To: billwalk@iname.com Cc: Subject: Microsoft Education Newsletter Survey Date: 17 Sep 2003 14:07:21 -0400 Return-Path: <microsoftresearch@surveysite.com> Delivered-To: billwalk:iname.com@iname.com X-Ob-Received: from unknown (205.158.62.35)by 205-158-62- 62.outblaze.com; 17 Sep 2003 18:10:19 -0000 Received: from smtp01.surveysite.net (unknown [209.151.141.202])by spf8.us4.outblaze.com (Postfix) with ESMTP id BF89D7C2D5for <billwalk@iname.com>; Wed, 17 Sep 2003 18:10:17 +0000 (GMT) Received: from localhost.localdomain ([192.168.97.15]) by smtp01.surveysite.net with Microsoft SMTPSVC (5.0.2195.6713);Wed, 17 Sep 2003 14:07:21 -0400 Content-Type: multipart/alternative;boundary="---------- =_1063821461-14770-4350" Mime-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) Reply-To: surveyhelp-2411mt@surveysite.com Message-Id: <MERCURYAATnLE7P95LZ00002870@smtp01.surveysite.net> X-Originalarrivaltime: 17 Sep 2003 18:07:21.0045 (UTC) FILETIME=[89D9F050:01C37D46]This e-mail was sent on behalf of Microsoft Corporation through SurveySite, a marketing research firm commissioned by Microsoft to conduct this survey. For information about SurveySite's relationship with Microsoft, please see http://www.microsoft.com/mscorp/marketing_research/surveysi te.asp. Dear Research Participant: Microsoft is interested in your opinions and attitudes regarding the Microsoft Education Newsletter and would like to invite you to take a few moments to participate in an online e-newsletter survey. Your answers will help Microsoft serve you better. As a thank you, for those who participate in our survey (U.S. and Canada only)*, we will randomly select three (3) respondents who will each win one (1) hp photosmart digital camera (suggested retail value $149.99 US). Please note that your answers to this survey will remain private and confidential. Please click on the following link to review the Microsoft Education Newsletter Survey privacy statement: http://www2.survey-poll.com/email/2411mtPriv.html To enter the survey online, you will need to type in the following 6-digit password: 829235 If you would like to participate in this important survey, please click on the following link: http://www2.survey-poll.com/email/2411mts.html If your Web browser does not support automatic linking, please type the URL above into the address bar of your browser. Thank you for your input. Your opinion counts! Sincerely, Microsoft Marketing Research www.microsoft.com * Open to legal residents of the 50 United States and Canada (excluding residents of the province of Quebec) and who have received a survey/sweepstakes invitation from SurveySite Inc. The sweepstakes opens at 10:00 AM EST on September 16, 2003 and ends at 11:59 PM EST on September 23, 2003. No purchase necessary. Entrants will be asked to provide their e-mail address and answer a few survey questions related to Microsoft. All data requested must be completed in order for the entry to be eligible. Limit one (1) entry per person. Subsequent entries from the same individual will be automatically disqualified. No responsibility is assumed by SurveySite Inc. for lost, late, or misdirected entries or any computer, online, telephone, or technical malfunctions that may occur. All entries become the property of SurveySite Inc. and will not be returned. If you prefer not to receive e-mail invitations to participate in SurveySite market research on behalf of Microsoft, please send an e-mail to: mailto:surveyhelp-2411mt@surveysite.com with the word "remove" in the subject line. Please note that it can take up to two weeks to update customer information in our database; therefore you may receive e-mail from us within that time period. If you have questions about Microsoft products, please submit your comments to "Contact Us" by clicking here: http://register.microsoft.com/contactus/contactus.asp Please direct questions about completing this survey to: mailto:surveyhelp-2411mt@surveysite.com Does Microsoft really use outside firms to do surveys? Am I being spoofed? Tag: Problem bzkn.exe - virus infection? Tag: 33148
  - 8
    - Windows Update In an attempt to update for security purposes, the only result I've received is the following message: "Runtime Error- Program C\Program Files\Internet Explorer\Explore.Exe.R6025 - pure virtual function call" This prohibits me from accessing Microsoft Word. Any clues out there? Tag: Problem bzkn.exe - virus infection? Tag: 33147
  - 9
    - TODAY: 09/17/03 * This was posted to alt.politics.org.un and as to why i put it here, i didn't know of anywhere else in microsoft world to put it. -------------------------------------------- via radio i did hear for the 1st time bush with the aide of homeland security address hurricane isabel via fox news tv i did see president bush speak of the hurricane, the energy crisis, iraq and saddams connection to 911, al queda and bin laden and about that - bush thinks saddam had nothing to do with yet he knows al queda was clearly involved with saddam. whatever... i guess, no i know bush is in dire straights to some extent. even wesley clark had he been president beginning in 2000 would be in a mess of sorts. i do see the importance of a former nato commander - regardless of what you or anyone else thinks of the man being the leader come 2004 as president of the usa. he does need a clearly viable running mate. i suggest my in-law, janet or chris morris. however, there is someone else here in the states of whom probably has more experience than anyone else in the country who knows the flow of almost everything that makes the usa work and is not a person with a military service record that i know of. that man is non other than Mr. Bill Gates, founder of Microsoft. Clark & Gates 2004? again, i state anyone in the oval office as pres of the usa during 91101 would be facing very similar times now. how bush has been perceived by the media and shown to the public via the media and how the public has perceived back, whether what info came and gone in any order, it really is apparent that we are not so well of here in the states. it really is apparent that although we do need to put iraq back together into a free society as perceived by the president and hopefully by you in the un and the people you all represent, it is even more apparent that we here in the states of america need to put our homeland into economical working order immediatly for the benefit of everyone in the states. so please, do as you will and do it with the powers that be. thank you william k. mahler mahlers of cape cod www.mahlers.com Tag: Problem bzkn.exe - virus infection? Tag: 33144
  - 10
    - Possible Virus E-Mail I received an e-mail from "Microsoft" today with the heading "Urgent Virus Update-Open Now!"---Needless to say I did not open them. THere were 2 sent at the same time. Microsoft will not send e-mails like this--do NOT open any e-mails that are tagged Microsoft unless you are 100% sure it is not a virus! FYI. Tag: Problem bzkn.exe - virus infection? Tag: 33140
  - 11
    - Blocking access to internet from networked computers How do I block certain computers on a network from accessing the internet while allowing certain computers to acces the internet from the Network ? Tag: Problem bzkn.exe - virus infection? Tag: 33138
  - 12
    - virtual Machine patch I installed 816093: Security Update Microsoft Virtual Machine (Microsoft VM) because I kept getting a virus whenevr I surfed the web, PC-Cillin said that installing this patch would resolve the problem but it has not... I am frustrated - I have all the critical windows xp updates, but am still plauged by this virus - I can delete it but whenevr I surf the net I get this viris again - JAVA_BYTVERIFY.A http://www.trendmicro.com/vinfo/virusencyclo/default5.asp? VName=JAVA_BYTVERIFY.A any help would be great Jason Tag: Problem bzkn.exe - virus infection? Tag: 33137
  - 13
    - Spyware Hello, I'm trying to aid a friend who has a significant problem with spyware on his computer. He's running a Compaq Presario 7750 (I believe that's the number), 2ghz with 128 mb of RAM, running Windows XP home. He has a tendancy to download things from sources he doesn't know, and now his computer is barely functioning. Running Norton Antivirus shows nothing, and I've downloaded all the necessary windows updates for him. This is the nature of the problem. Whenever he attempts to open up Internet Explorer (he uses our school's network), his browser is hijacked by all this spyware, rendering the screen unusable unless he does ctrl-alt-del in order to clear away all of the popups and random websites that are maximized too far for him to close the normal way. Does Microsoft have any downloads or patches available that will scan and delete this spyware off of his computer? Thanks,Jade Tag: Problem bzkn.exe - virus infection? Tag: 33123
  - 14
    - welchia worm removal tool Hello all, I am in search of a network tool that will tell me which computer on my network is infecting other computers with the welchia worm. Does this exist? Every time I introduce a new computer onto the network, it instantly gets infected. Any ideas? Thanks. Chris Tag: Problem bzkn.exe - virus infection? Tag: 33121
  - 15
    - Help! VM won't install Ok, somehow, even though I had my machine completely patched with all the latest MS patches, I still managed to get hit with the WORM.NACHI.A and the PE_VALLA.A virus. This thing really tore up my Windows 2K machine. I finally have it up and running and now I am trying to fix all the little annoying things that are left behind by the virus' destruction (ie. Windows Installer coming up everytime I click on something and then going away by itself, etc...) First thing I am trying to do is get the latest Critical patches from the "Windows Update Site" I can install all of them except the VM. It keeps giving me this error when I try and install it. (The Microsoft VM you are attempting to install is a protected system component and can only be updated with a later release of the operating system or service pack). Any help, thanks. Tag: Problem bzkn.exe - virus infection? Tag: 33119
  - 16
    - Russians invaded my system It seems an internet porn site has installed its own program on MY browser's SEARCH button. Russian search engines, russian porn banners, and even pop-under porn ads that refresh every minute or so have replaced my MSN search. My kids regularly use this search option, so I need to fix it now! How can I find the program, and destroy it? Tag: Problem bzkn.exe - virus infection? Tag: 33110
  - 17
    - software update services Has anyone had luck with Software Update Services? I've got it loaded on a web server here, and I've configured our group policy to setup the automatic download on my client machines, but it's not doing ANYTHING! I can tell from my machine that the GPO is right, because it is set the way I chose and it greyed out so I can't modify it. However, I'm yet to receive a message regarding updates for my PC, yet, if I go to WindowsUpdate, I show 3 when I run the scan. This isn't working for anyone in my office. Now, my thinking is that this is caused by the fact that I am using this web server for my corporate intranet as well, but I've not found anything saying that I can't put SUS on a server that has other pages. Any help would be appreciated. Thank you! Chris Smith csmith@nutone.com Tag: Problem bzkn.exe - virus infection? Tag: 33106
  - 18
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.09.17 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: Problem bzkn.exe - virus infection? Tag: 33104
  - 19
    - attatchments i am unable to view anything that has an attatchmnet to it in my out look express....i click on the paper icon and it says that " oa is unable to open it" i think i did something to my configuration so that i couldn't open attatchments ....need help to undo my mistake Tag: Problem bzkn.exe - virus infection? Tag: 33103
  - 20
    - Windows Security Update Hello, I am trying to find a solution for the following: Finally, I succeeded to do the Critical Updates yesterday but then I found out that my previous updates were not there anymore ( under Installation History). And also I have been getting several messages to innstall the Critical Updates and it's the same Security Update over and over again. Does anybody know why this is happening? How can I find and re-install the previous updates since they seem to have disappeared in the installation history? Thanking you in advance. Tag: Problem bzkn.exe - virus infection? Tag: 33098
  - 21
    - Port 1033 (netinfo) port is open - what's it for and how do I close it I've run Shields up (www.grc.com) to test a clients new Wingate Pro firewall on Win2000 server sp4. Ideally I'd like all ports to be in full stealth mode. The problem is that I'm seeing Port 1033 which I'm told is local netinfo port open. Now I know what you're thinking 'netspy' - but I don't think so. Norton AV with latest definitions doesn't see it and neither does Mcafee's excellent online scan. I can't see what process might be using this port or what it's using it for. I'm downloading fport and I'll try that the next time I'm onsite - but I was hoping one of you kind folk would have an idea. Hopefully, Neil neilarmstrong1969@hotmail.com Ireland Tag: Problem bzkn.exe - virus infection? Tag: 33097
  - 22
    - Port 1033 (netinfo) port is open - what's it for and how do I close it I've run Shields up (www.grc.com) to test a clients new Wingate Pro firewall on Win2000 server sp4. Ideally I'd like all ports to be in full stealth mode. The problem is that I'm seeing Port 1033 which I'm told is local netinfo port open. Now I know what you're thinking 'netspy' - but I don't think so. Norton AV with latest definitions doesn't see it and neither does Mcafee's excellent online scan. I can't see what process might be using this port or what it's using it for. I'm downloading fport and I'll try that the next time I'm onsite - but I was hoping one of you kind folk would have an idea. Hopefully, Neil neilarmstrong1969@hotmail.com Ireland Tag: Problem bzkn.exe - virus infection? Tag: 33096
  - 23
    - scan after logon? Will WINXP reload virus scanner updates if you just log off? I was told that you totally have "restart" for the upddates to take effect. True or not? Thanks! Patty Tag: Problem bzkn.exe - virus infection? Tag: 33091
  - 24
    - SecUpd (KB824146) - hangs Outlook After I have installed "Security Update for Windows 2000 (KB824146)" on a Win 2000 workstation, Outlooks hangs when checking mail (about 10-20 secs after starting outlook) on a few PC's (4 of 15). I cannot se anything incommon with these machines that doesnt match the others that works ok. They are all Win 2K english version, with latest Servicepack. I have tried to repaire the PST-file, but there are no errors.... I'm totaly out of ideas :-( Tag: Problem bzkn.exe - virus infection? Tag: 33088
  - 25
    - Win2K SP4 after MS03-039? I have a bunch of PCs that need SP4. I've also already sent MS03-039 to all of them. Do I need to reapply MS03-039 after installing SP4? Thanks, Tom Tag: Problem bzkn.exe - virus infection? Tag: 33087

Hi
Some help please.
Some .exe files have been loaded onto my machine after I
go a lot of bogus mails about secuity supposed to be from
microsoft.
One of these (bzkn) cannot be disabled or applications do
not start. Even when it start some programs have to be
started from "DOS". I am running windows NT SP5 and have
the latest patch from Microsoft. (It wont work - needs SP
6)
What can I do to clean up my machine?
My virus checker find nothing. AdAware does not act on
these executable one is called XBOXEmulator.

Regards

Top

Re: Problem bzkn.exe - virus infection? by Bill

Bill
Thu Sep 18 20:43:37 CDT 2003

http://www.microsoft.com/technet/security/virus/alerts/swen.asp

Read the links in the above article--see if they help

"Terry Turner" <terryturner@eircom.net> wrote in message
news:068a01c37e2e$872c5210$a301280a@phx.gbl...
> Hi
> Some help please.
> Some .exe files have been loaded onto my machine after I
> go a lot of bogus mails about secuity supposed to be from
> microsoft.
> One of these (bzkn) cannot be disabled or applications do
> not start. Even when it start some programs have to be
> started from "DOS". I am running windows NT SP5 and have
> the latest patch from Microsoft. (It wont work - needs SP
> 6)
> What can I do to clean up my machine?
> My virus checker find nothing. AdAware does not act on
> these executable one is called XBOXEmulator.
>
> Regards

Top