Security Bulletin

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Security Warning Banners - Suggestions? Greetings! I'd like to find some examples of various security warning banners used on networks, mainframes, PCs, e-Mails, etc. I couldn't find anything in the MS search facility, so I'm hoping the folks here can assist. Many thanks. Doc Farmer Tag: Security Bulletin Tag: 37865
  - 2
    - Spreadsheet of all MS security patches I'm trying to compile lists of various patches I need to apply for different customer systems I administer. Trundling back and forwards through the list of various MS patches evaluating them is getting overwhelming. Do MS (Or anyone else) have the list of patches in spreadsheet form, with what OS/component they apply to, if they are included in any subsequent rollup or servicepack, how critical they are, any issues they introduce and their fix, etc. This would be a godsend. Regards, Andy Tag: Security Bulletin Tag: 37858
  - 3
    - Certificate Chains and store collections. Are certificate chains and store collections supported in Windows 98? The MSDN says no, but as far as I checked Windows 98 they are de-facto supported. Can sombody clarify my this story or provide me with aditional information on this topic? Regards, Vic Tag: Security Bulletin Tag: 37857
  - 4
    - Automatic Updates Does anyone know about SUS automatic updating? I need to get it to work reliably and also specify more details about when it reboots and what kind of feedback the user gets. Are these things configurable? Also, if a machine misses its time slot, how can I get it to start the updates when it joins the network? (Laptop users) At the moment, its kind of working but not on all the machines i'm testing it with. Does it contact all machines in the OU at once, or does it do them in stages? Any info would be greatly appreciated. Jay Tag: Security Bulletin Tag: 37852
  - 5
    - Homepage Resetting Hello all, My homepage keeps resetting to "coolhomepage.com" instead of google, which is what I set. Even though I have reset it numerous times it keeps doing this. Does anyone have any ideas? It's REALLY annoying! Thanks. Tag: Security Bulletin Tag: 37850
  - 6
    - Cookies: I posted this on the windows 98 general discussion and no answer. Should I clean out cookies and how often.Thanks, JJ Tag: Security Bulletin Tag: 37848
  - 7
    - Microsoft Patch Hoax e-mail This is a multi-part message in MIME format. ------=_NextPart_000_0024_01C39820.E66EC3A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I have been receiving lots of dangerous hoax emails lately from = someone claiming to be Microsoft. These emails all claim to have the = latest PATCH that I need to install. These emails are very well put = together with lots of pretty blue and white authentic looking Microsoft = HTML pages. I use Mailwasher so get to preview my email first. Of course = the "Patch" attachment file is a VIRUS. I did let one come on into my = Inbox and Norton AV jumped right on it as it was coming in.=20 I cannot help believe that Microsoft is already aware of this and = how wide spread it seems to be getting. Many a less savvy operator would = easily be fooled by this hoax email and install the Patch/Virus. =20 I have just been deleting these emails but they keep coming. Two at = a time every several days. You can tell from the full header of the = message that it is a phony and not really from Microsoft. Some of these = appear to be coming from overseas, so Microsoft may have a hard time = doing anything about it.=20 =20 Both of these last two messages were infected with the W32 Swen_A2mm = virus. Here is the header and message. I have xxx out my email address this = was sent to.=20 Don't know if this newsgroup will accept the HTML content or not.=20 --=20 X-Apparently-To: xxx@xxx.net via web80011.mail.yahoo.com; 21 Oct 2003 = 05:54:35 -0700 (PDT) X-YahooFilteredBulk: 213.140.2.40 Return-Path: <filippelli.g@tiscali.it> Received: from mtac1.prodigy.net (151.164.30.65) by mta817.mail.yahoo.com with SMTP; 21 Oct 2003 05:54:35 -0700 (PDT) X-Originating-IP: [213.140.2.40] X-Header-Overseas: Mail.from.Overseas.source.213.140.2.40 Received: from janine.fastweb.it (janine.fastwebnet.it [213.140.2.40]) by mtac1.prodigy.net (8.12.9/8.12.9) with ESMTP id h9LCsXqj027744 for <xxx@xxx.net>; Tue, 21 Oct 2003 07:54:33 -0500 (CDT) Received: from vvgg (23.254.131.61) by janine.fastweb.it (6.7.019) id 3F705948002EF1F4; Tue, 21 Oct 2003 14:47:37 +0200 Date: Tue, 21 Oct 2003 14:47:37 +0200 (added by = postmaster@fastwebnet.it) Message-ID: <3F705948002EF1F4@janine.mail.fw> (added by = postmaster@fastwebnet.it) FROM: "Microsoft Program Security Department" = <szocgqlsbtk_ktcnh@news.ms.net> TO: "Microsoft Corporation Consumer" <consumer-umtebtweim@news.ms.net> SUBJECT: Newest Security Update Mime-Version: 1.0 Content-Type: multipart/mixed; boundary=3D"rcyqmclo" Microsoft All Products | Support | Search | Microsoft.com = Guide =20 Microsoft Home =20 =20 MS Consumer this is the latest version of security update, the "October 2003, = Cumulative Patch" update which fixes all known security vulnerabilities = affecting MS Internet Explorer, MS Outlook and MS Outlook Express as = well as three newly discovered vulnerabilities. Install now to help = protect your computer. This update includes the functionality of all = previously released patches. =20 System requirements Windows 95/98/Me/2000/NT/XP=20 This update applies to MS Internet Explorer, version 4.01 and = later MS Outlook, version 8.00 and later MS Outlook Express, version 4.01 and later =20 Recommendation Customers should install the patch at the earliest = opportunity.=20 How to install Run attached file. Choose Yes on displayed dialog = box.=20 How to use You don't need to do anything after installing this = item.=20 Microsoft Product Support Services and Knowledge Base articles can = be found on the Microsoft Technical Support web site. For = security-related information about Microsoft products, please visit the = Microsoft Security Advisor web site, or Contact Us.=20 Thank you for using Microsoft products. Please do not reply to this message. It was sent from an = unmonitored e-mail address and we are unable to respond to any replies. -------------------------------------------------------------------------= - The names of the actual companies and products mentioned herein = are the trademarks of their respective owners. =20 Contact Us | Legal | TRUSTe =20 =A92003 Microsoft Corporation. All rights reserved. Terms of Use | = Privacy Statement | Accessibility =20 Another similar virus infected email was received from=20 X-Apparently-To: xxx @xxx.net via web80008.mail.yahoo.com; 21 Oct 2003 = 17:13:02 -0700 (PDT) X-YahooFilteredBulk: 205.200.16.113 Return-Path: <vuignr@mts.net> Received: from mtaw3.prodigy.net (64.164.98.47) by mta827.mail.sc5.yahoo.com with SMTP; 21 Oct 2003 17:13:02 -0700 = (PDT) X-Originating-IP: [205.200.16.113] Received: from smtp2.mts.net (smtp2.mts.net [205.200.16.113]) by mtaw3.prodigy.net (8.12.9/8.12.9) with ESMTP id h9M0CfWY019458; Tue, 21 Oct 2003 17:12:41 -0700 (PDT) Received: from qyyccjid (prprmb01bba-ac03-54-99.dial.mts.net = [205.200.54.99]) by smtp2.mts.net (8.12.8-20030918/8.11.3) with SMTP id h9M03dbn004479; Tue, 21 Oct 2003 19:03:40 -0500 (CDT) Date: Tue, 21 Oct 2003 19:03:39 -0500 (CDT) Message-Id: <200310220003.h9M03dbn004479@smtp2.mts.net> FROM: "MS Corporation Security Support" <vqrpwnzdy_geogmq@support.com> TO: "Microsoft Corporation Client" <client.hladedfay@support.com> SUBJECT: Latest Security Patch Mime-Version: 1.0 Content-Type: multipart/mixed; boundary=3D"ohixpuxmfhncximli" ------=_NextPart_000_0024_01C39820.E66EC3A0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2800.1226" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial>    I have been receiving lots = of =20 dangerous hoax emails lately from someone claiming to be Microsoft. = These emails=20 all claim to have the latest PATCH that I need to install. These emails = are very=20 well put together with lots of pretty blue and white authentic looking=20  Microsoft HTML pages. I use Mailwasher so get to preview my email = first.=20 Of course the "Patch" attachment file is a VIRUS.  I did let one = come on=20 into my Inbox and Norton AV jumped right on it as it was coming in.=20 </FONT></DIV> <DIV><FONT face=3DArial>    I cannot help believe that = Microsoft is=20 already aware of this and how wide spread it seems to be getting. Many a = less=20 savvy operator would easily be fooled by this hoax email and install the = Patch/Virus.  </FONT></DIV> <DIV><FONT face=3DArial>    I have just been deleting = these emails=20 but they keep coming. Two at a time every several days. You can tell = from the=20 full header of the message that it is a phony and not really from=20 Microsoft.  Some of these appear to be coming from overseas, = so=20 Microsoft may have a hard time doing anything about it. </FONT></DIV> <DIV><FONT face=3DArial>    </FONT></DIV> <DIV><FONT face=3DArial>Both of these last two messages were infected = with the W32=20 Swen_A2mm virus.</FONT></DIV> <DIV><FONT face=3DArial></FONT> </DIV> <DIV><FONT face=3DArial>Here is the header and message.  I have xxx = out =20 my  email address this was sent to. </FONT><FONT = face=3DArial></FONT></DIV> <DIV><FONT face=3DArial></FONT> </DIV> <DIV><FONT face=3DArial>Don't know if this newsgroup will accept the = HTML content=20 or not. </DIV> <DIV><BR>-- <BR>X-Apparently-To: </FONT><A = href=3D"mailto:xxx@xxx.net"><FONT=20 face=3DArial>xxx@xxx.net</FONT></A><FONT face=3DArial> via = web80011.mail.yahoo.com;=20 21 Oct 2003 05:54:35 -0700 (PDT)<BR>X-YahooFilteredBulk:=20 213.140.2.40<BR>Return-Path: <</FONT><A=20 href=3D"mailto:filippelli.g@tiscali.it"><FONT=20 face=3DArial>filippelli.g@tiscali.it</FONT></A><FONT = face=3DArial>><BR>Received:=20 from mtac1.prodigy.net (151.164.30.65)<BR>  by = mta817.mail.yahoo.com with=20 SMTP; 21 Oct 2003 05:54:35 -0700 (PDT)<BR>X-Originating-IP:=20 [213.140.2.40]<BR>X-Header-Overseas:=20 Mail.from.Overseas.source.213.140.2.40<BR>Received: from = janine.fastweb.it=20 (janine.fastwebnet.it [213.140.2.40])<BR> by mtac1.prodigy.net=20 (8.12.9/8.12.9) with ESMTP id h9LCsXqj027744<BR> for = <xxx@xxx</FONT><A=20 href=3D"mailto:jon48@swbell.net"><FONT face=3DArial>.net</FONT></A><FONT = face=3DArial>>; Tue, 21 Oct 2003 07:54:33 -0500 (CDT)<BR>Received: = from vvgg=20 (23.254.131.61) by janine.fastweb.it=20 (6.7.019)<BR>        id = 3F705948002EF1F4;=20 Tue, 21 Oct 2003 14:47:37 +0200<BR>Date: Tue, 21 Oct 2003 14:47:37 +0200 = (added=20 by </FONT><A href=3D"mailto:postmaster@fastwebnet.it"><FONT=20 face=3DArial>postmaster@fastwebnet.it</FONT></A><FONT = face=3DArial>)<BR>Message-ID:=20 <</FONT><A href=3D"mailto:3F705948002EF1F4@janine.mail.fw"><FONT=20 face=3DArial>3F705948002EF1F4@janine.mail.fw</FONT></A><FONT = face=3DArial>>=20 (added by </FONT><A href=3D"mailto:postmaster@fastwebnet.it"><FONT=20 face=3DArial>postmaster@fastwebnet.it</FONT></A><FONT = face=3DArial>)<BR>FROM:=20 "Microsoft Program Security Department" <</FONT><A=20 href=3D"mailto:szocgqlsbtk_ktcnh@news.ms.net"><FONT=20 face=3DArial>szocgqlsbtk_ktcnh@news.ms.net</FONT></A><FONT = face=3DArial>><BR>TO:=20 "Microsoft Corporation Consumer" <</FONT><A=20 href=3D"mailto:consumer-umtebtweim@news.ms.net"><FONT=20 face=3DArial>consumer-umtebtweim@news.ms.net</FONT></A><FONT=20 face=3DArial>><BR>SUBJECT: Newest Security Update<BR>Mime-Version:=20 1.0<BR>Content-Type: multipart/mixed; boundary=3D"rcyqmclo"</FONT></DIV> <DIV><FONT face=3DArial></FONT> </DIV> <DIV><FONT face=3DArial></FONT><FONT face=3DVerdana = size=3D2> </FONT>=20 <TABLE height=3D40 width=3D600 bgColor=3D#1478eb> <TBODY> <TR height=3D20> <TD vAlign=3Dtop align=3Dleft width=3D400 rowSpan=3D2>  <FONT = face=3Dsans-serif=20 size=3D5><I><B><A class=3Dnavtext title=3D"Microsoft Home Site"=20 href=3D"http://www.microsoft.com/" target=3D_top><FONT=20 color=3D#ffffff>Microsoft</FONT></A> </B></I></FONT></TD> <TD vAlign=3Dcenter noWrap align=3Dright bgColor=3Dblack><FONT = size=3D1><FONT=20 color=3D#ffffff>  </FONT><A class=3Dnavtext=20 href=3D"http://www.microsoft.com/catalog/" target=3D_top><FONT=20 color=3D#ffffff>All Products</FONT></A><FONT = color=3D#ffffff> | =20 </FONT><A class=3Dnavtext href=3D"http://support.microsoft.com/"=20 target=3D_top><FONT color=3D#ffffff>Support</FONT></A><FONT=20 color=3D#ffffff> |  </FONT><A class=3Dnavtext=20 href=3D"http://search.microsoft.com/" target=3D_top><FONT=20 color=3D#ffffff>Search</FONT></A><FONT = color=3D#ffffff> |  </FONT><A=20 class=3Dnavtext href=3D"http://www.microsoft.com/" = target=3D_top><FONT=20 color=3D#ffffff>Microsoft.com Guide</FONT></A><FONT = color=3D#ffffff> =20 </FONT></FONT></TD></TR> <TR> <TD vAlign=3Dbottom noWrap align=3Dright><FONT face=3D"Verdana, = Arial"=20 size=3D1><B><A class=3Dnavtext href=3D"http://www.microsoft.com/"=20 target=3D" top"><FONT color=3D#ffffff>Microsoft=20 Home</FONT></A>  </B> = </FONT></TD></TR></TBODY></TABLE> <IMG=20 src=3D"mhtml:mid://00000014/!cid:riebkyk" border=3D0><BR><BR> <TABLE width=3D600> <TBODY> <TR> <TD><FONT size=3D2>MS Consumer<BR><BR>this is the latest version of = security=20 update, the "October 2003, Cumulative Patch" update which fixes = all known=20 security vulnerabilities affecting MS Internet Explorer, MS = Outlook and MS=20 Outlook Express as well as three newly discovered vulnerabilities. = Install=20 now to help protect your computer. This update includes the = functionality=20 of all previously released patches. = </FONT></TD></TR></TBODY></TABLE><BR><BR> <TABLE cellSpacing=3D1 cellPadding=3D3 width=3D600 border=3D1> <TBODY> <TR vAlign=3Dtop> <TD noWrap><FONT size=3D1><B><IMG = src=3D"mhtml:mid://00000014/!cid:hqdbogt"=20 align=3DabsMiddle border=3D0> System requirements</B> = </FONT></TD> <TD noWrap><FONT size=3D1>Windows = 95/98/Me/2000/NT/XP</FONT></TD></TR> <TR vAlign=3Dtop> <TD noWrap><FONT size=3D1><B><IMG = src=3D"mhtml:mid://00000014/!cid:hqdbogt"=20 align=3DabsMiddle border=3D0> This update applies to</B> = </FONT></TD> <TD noWrap><FONT size=3D1>MS Internet Explorer, version 4.01 and = later<BR>MS=20 Outlook, version 8.00 and later<BR>MS Outlook Express, version = 4.01 and=20 later </FONT></TD></TR> <TR vAlign=3Dtop> <TD noWrap><FONT size=3D1><B><IMG = src=3D"mhtml:mid://00000014/!cid:hqdbogt"=20 align=3DabsMiddle border=3D0> Recommendation</B></FONT></TD> <TD noWrap><FONT size=3D1>Customers should install the patch at the = earliest=20 opportunity.</FONT></TD></TR> <TR vAlign=3Dtop> <TD noWrap><FONT size=3D1><B><IMG = src=3D"mhtml:mid://00000014/!cid:hqdbogt"=20 align=3DabsMiddle border=3D0> How to install</B></FONT></TD> <TD noWrap><FONT size=3D1>Run attached file. Choose Yes on displayed = dialog=20 box.</FONT></TD></TR> <TR vAlign=3Dtop> <TD noWrap><FONT size=3D1><B><IMG = src=3D"mhtml:mid://00000014/!cid:hqdbogt"=20 align=3DabsMiddle border=3D0> How to use</B></FONT></TD> <TD noWrap><FONT size=3D1>You don't need to do anything after = installing=20 this item.</FONT></TD></TR></TBODY></TABLE><BR> <TABLE width=3D600> <TBODY> <TR> <TD><FONT size=3D2>Microsoft Product Support Services and Knowledge = Base=20 articles can be found on the <A = href=3D"http://support.microsoft.com/"=20 target=3D_top>Microsoft Technical Support</A> web site. For = security-related=20 information about Microsoft products, please visit the <A=20 href=3D"http://www.microsoft.com/security" target=3D_top>Microsoft = Security=20 Advisor</A> web site, or <A=20 href=3D"http://www.microsoft.com/contactus/contactus.asp"=20 target=3D_top>Contact Us.</A> <BR><BR>Thank you for using = Microsoft=20 products.<BR><BR></FONT><FONT size=3D1>Please do not reply to this = message.=20 It was sent from an unmonitored e-mail address and we are unable = to=20 respond to any replies.<BR></FONT> <HR width=3D"100%" color=3Dsilver SIZE=3D1> <FONT color=3Dgray size=3D1>The names of the actual companies and = products=20 mentioned herein are the trademarks of their respective = owners.</FONT>=20 </TD></TR></TBODY></TABLE><BR> <TABLE height=3D45 width=3D600 bgColor=3D#1478eb> <TBODY> <TR vAlign=3Dtop> <TD width=3D5></TD> <TD><FONT size=3D1><B><A class=3Dnavtext=20 href=3D"http://www.microsoft.com/contactus/contactus.asp" = target=3D_top><FONT=20 color=3D#ffffff>Contact Us</FONT></A><FONT color=3D#ffffff> =  | =20 </FONT><A class=3Dnavtext href=3D"http://www.microsoft.com/legal/" = target=3D_top><FONT color=3D#ffffff>Legal</FONT></A><FONT = color=3D#ffffff>=20  |  </FONT><A class=3Dnavtext title=3D"TRUSTe - Click to = Verify"=20 href=3D"https://www.truste.org/validate/605" target=3D_top><FONT=20 color=3D#ffffff>TRUSTe</FONT></A><FONT color=3D#ffffff>=20 </FONT></FONT></B></TD></TR> <TR vAlign=3Dcenter> <TD width=3D5></TD> <TD><FONT color=3D#ffffff size=3D1>=A92003 Microsoft Corporation. = All rights=20 reserved. <A style=3D"COLOR: #ffffff"=20 href=3D"http://www.microsoft.com/info/cpyright.htm" = target=3D_top>Terms of=20 Use</A>  |  <A style=3D"COLOR: #ffffff"=20 href=3D"http://www.microsoft.com/info/privacy.htm" = target=3D_top>Privacy=20 Statement</A> |  <A style=3D"COLOR: #ffffff"=20 href=3D"http://www.microsoft.com/enable/" = target=3D_top>Accessibility</A>=20 </FONT></TD></TR></TBODY></TABLE></DIV> <DIV><FONT face=3DArial></FONT> </DIV> <DIV><FONT face=3DArial>Another similar virus infected email was = received from=20 </FONT></DIV> <DIV><FONT face=3DArial></FONT> </DIV> <DIV><FONT face=3DArial>X-Apparently-To: <A = href=3D"mailto:xxx@swbell.net">xxx=20 @xxx.net</A> via web80008.mail.yahoo.com; 21 Oct 2003 17:13:02 -0700=20 (PDT)<BR>X-YahooFilteredBulk: 205.200.16.113<BR>Return-Path: <<A=20 href=3D"mailto:vuignr@mts.net">vuignr@mts.net</A>><BR>Received: from=20 mtaw3.prodigy.net (64.164.98.47)<BR>  by mta827.mail.sc5.yahoo.com = with=20 SMTP; 21 Oct 2003 17:13:02 -0700 (PDT)<BR>X-Originating-IP:=20 [205.200.16.113]<BR>Received: from smtp2.mts.net (smtp2.mts.net=20 [205.200.16.113])<BR> by mtaw3.prodigy.net (8.12.9/8.12.9) with = ESMTP id=20 h9M0CfWY019458;<BR> Tue, 21 Oct 2003 17:12:41 -0700 = (PDT)<BR>Received: from=20 qyyccjid (prprmb01bba-ac03-54-99.dial.mts.net = [205.200.54.99])<BR> by=20 smtp2.mts.net (8.12.8-20030918/8.11.3) with SMTP id=20 h9M03dbn004479;<BR> Tue, 21 Oct 2003 19:03:40 -0500 (CDT)<BR>Date: = Tue, 21=20 Oct 2003 19:03:39 -0500 (CDT)<BR>Message-Id: <<A=20 href=3D"mailto:200310220003.h9M03dbn004479@smtp2.mts.net">200310220003.h9= M03dbn004479@smtp2.mts.net</A>><BR>FROM:=20 "MS Corporation Security Support" <<A=20 href=3D"mailto:vqrpwnzdy_geogmq@support.com">vqrpwnzdy_geogmq@support.com= </A>><BR>TO:=20 "Microsoft Corporation Client" <<A=20 href=3D"mailto:client.hladedfay@support.com">client.hladedfay@support.com= </A>><BR>SUBJECT:=20 Latest Security Patch<BR>Mime-Version: 1.0<BR>Content-Type: = multipart/mixed;=20 boundary=3D"ohixpuxmfhncximli"</FONT></DIV> <DIV> </DIV> <DIV><FONT face=3DArial></FONT> </DIV></BODY></HTML> ------=_NextPart_000_0024_01C39820.E66EC3A0-- Tag: Security Bulletin Tag: 37846
  - 8
    - Windows Updates I'm from Ontario,Canada and all I want to know is why I keep getting this Windows Update:817787:Security Update Windows Media Player 7.1.I've been trying for an hour or so to find someplace to write for help.My head is spinning from being sent here and their and all over and ending back up where I started.I finally found this site to write too but I really don't know who I'm writing too.I just want to get rid of this stupid update that I have already installed four times. Why? And it keeps on comeing back.I'll try to find this site again to-morrow if you have any solutions please help me.Thanks.Connie. Tag: Security Bulletin Tag: 37845
  - 9
    - continuous boot loop I am really hoping someone can help me. I ran a norton scan on my home pc and it found a virus called W32.HLLP.Spreda.B (also called savenow)It had not actually infected my computer yet. It was quarantined. I followed the diretions on the norton site to remove it. At the end of the directions i was instructed to edit the registry. I followed all directions to a t and thought all would be well when i restarted. i was wrong. My computer isnow stuck in a continuous booting loop. The farthest it ever gets is the black WINDOWS XP screen that shows windows is loading, then it makes somne noises and starts to reboot. It does this over and over and over again without stop. I don't know what to do!!! Is there anyone out there who can help me? The dirctions i followed are at the link below. http://securityresponse.symantec.com/avcenter/venc/data/w32 ..hllp.spreda.b.html . Tag: Security Bulletin Tag: 37844
  - 10
    - Spider Search I've got a spider search application on my PC that has itself hidden somewhere I cannot find. It added its toolbar for casino games, and pops up several ads for porn. Does anyone know the app or executable I have to remove to stop this? Thanks Tag: Security Bulletin Tag: 37838
  - 11
    - Home page I have no idea what is going on but no matter what I do I always have this one homepage. I have switched home pages, deleted my cookies and temp files, and searched my computer for the name of the website but no matter what I do every time I restart my computer it is back to that same site as my homepage..... Can anyone help me with this? Tag: Security Bulletin Tag: 37837
  - 12
    - Security Patch Bugs!!! Hello, I bought the XP Home Edition with my Dell PC. One day I update my PC with Windows Updates Patch: Windows XP Q811493 Patch: Windows XP KB826939 These two patch are the same and same bugs! I installed it and when I reboot my PC 1. It load the Login User menu and I log in or 2. It load the Login User menu 3. A few seconds later my PC suddenly turned off and restart 4. It kept repeating 5. Later I removed the two patches by System Restore in Safe Mode I wonder why these two patches do this way to my PC. lol It's buggy patches. I check that it's not any video or driver conflict. ****If you have a similar problem I have please reply and talk about it!**** -- :: K-Man :: Tag: Security Bulletin Tag: 37832
  - 13
    - Emails Everytime I get an email with an attachment I can't open it. It says "OE removed access to the following unsafe attachments in your mail. I can't open things I know are safe. Can you help me with this problem Thank you Tag: Security Bulletin Tag: 37829
  - 14
    - Microsoft Messenger Info and Help Never rec'd a response to a couple posts in regards to a mysterious "Microsoft Messenger" pop up. It was telling me I had to update to use. I used the "what's new" button, which was a microsoft website, so I updated and BOOM! It took down my Norton Virus Dectection and email scan. Any ideas how to fix the problem, and do you know of any other problems I might encure? Has anyone ever heard of this type of virus, attack, ect? D.Jones Tag: Security Bulletin Tag: 37827
  - 15
    - ENDADS.com The following should have been added to the post I just sent (the speed of the 'send' click). I have disabled admin. messengering - but I am looking for a fix that will allow options on whom I want to block or a bazooka when they try to message. Tag: Security Bulletin Tag: 37825
  - 16
    - ENDADS.com Have I just not seen the fix to keep the (subject) out of my computer? Wether I am online or not, once I have been on line their pop-ups just keep coming. My firewall alerts me and I click X and deny passage - BUT, why this? Is there a fix to keep out this marketing that is as appealing as telemarketing? Please let me know Thank you Tag: Security Bulletin Tag: 37824
  - 17
    - Info Given and Info Needed Ok, no response to prior "Microsoft Messenger" pop-up. Went ahead and hit update because the "what's new" was an actual microsoft website. BAD mistake. Downloaded something that disabled my Norton virus detection and email scan. Any suggestions of what to do get Norton working again, and do you know of any future problems this may effect? PLEASE>>>>>>>>>> Original message: Every time I log on to AOL, I get a message from Microsoft Messenger (pop up type). States I must upgrade and download to use. When I click more info, I get http://www.microsoft.com/windows/messenger/whatsnew.asp I have my computer set on security against adult sites, so I cannot excess due to adult content. I think it may be a virus or hi-jack. I ran Norton and came up with the following virus... Backdoor.Sinit JS.Exception.Exploit Java.Nocheat I think I deleted all and also ran Spybot and Lava, but I am still getting the Microsoft messenger. I have tried deleting Microsoft messenger, but will not let me. PLEASE HELP! Thanks . Tag: Security Bulletin Tag: 37823
  - 18
    - Preview pane security in outlook express If you have the preview pane enabled on outlook express and can see the message will a virus have a better chance of engaging your computer? Tag: Security Bulletin Tag: 37822
  - 19
    - Security Update (329834) Why does the Security Update for Windoxs XP(329834)appear as a new update for me to install, since I have already installed it numerous times and the status was Successful. Regards, Michael Tag: Security Bulletin Tag: 37817
  - 20
    - Deleting Previous searches on msn How do I delete previous search terms in the Msn "search the web" area? When clicked twice it drops down a list of all my previous searches. Tag: Security Bulletin Tag: 37816
  - 21
    - cant disable the firewall to do virus scan A short time ago I read in these N.groups about a link here at Microsoft on how to enable the firewall that comes with the computor. I have "Win. XP". I click to that site and it gave me the option to manually set up the firewall or have it done for me- (I had already gone to the 'properties' part in my isp box and clicked on "advance tab" and checked the first box that said "Protect my computor .......")before I went to this web site- ANYHOW, I chose for 'them' do enable this security for me- So when I went to check this same box in the prop section>adv tab> then I noticed that the words UNDER the part where it says "protect my comp." had disapeared. So then I went to get a free virus scan at panda and realized it would not down load- I went back into the box and un-checked the "protect my comp" and it downloaded the activeX needed to do these scans-HOWEVER, it does NOT do anything when I click on SCAN my comp, or anything for that matter-I tried getting support via email from them but they have not responded-If I made my question clear, please advice me where to go.If not, I'll check back and see if I can give you more info. thanks Tag: Security Bulletin Tag: 37813
  - 22
    - What to do (if anything) about SubSeven I used to report these to the FBI when they came from outside the USA but I've gotten lazy. I noticed yesterday our firewall dropped 17 SubSeven Attacks. One host tried 4 times but the others came from all over the place. Are these bots attempting these or actual idiots w/ nothing better to do? Should I just ignore them? Maybe there 's a public website where we can post the hostnames of the computers that launch these, or someone who keeps a database of such things. Patrick Rouse Microsoft MVP - Terminal Server Tag: Security Bulletin Tag: 37808
  - 23
    - Microsoft email attachments? Over the past week, I've been getting thousands of emails claiming to be from microsoft telling me that there is a patch attached to this email. I know this isn't true and someone has a virus but how do I track them down? The email headers are coming from dozens of places. Should I just shut down my email account and start over or is there a way to fix this. These are like 116kb attachments and my pc is geting quite bogged down. I have 4678 of them right now. I called Verio, who hosts my email server and they said they can show me the email server that the mail came from but that's it. How do I stop this madness? Tag: Security Bulletin Tag: 37798
  - 24
    - Virus or Microsoft Messenger Problem? Every time I log on to AOL, I get a message from Microsoft Messenger (pop up type). States I must upgrade and download to use. When I click more info, I get http://www.microsoft.com/windows/messenger/whatsnew.asp I have my computer set on security against adult sites, so I cannot excess due to adult content. I think it may be a virus or hi-jack. I ran Norton and came up with the following virus... Backdoor.Sinit JS.Exception.Exploit Java.Nocheat I think I deleted all and also ran Spybot, Hijack this, and Lava, but I am still getting the Microsoft messenger. I have tried deleting Microsoft messenger, but will not let me. PLEASE HELP! Thanks . Tag: Security Bulletin Tag: 37792
  - 25
    - Security patches Hi, just installed latest update patches KB828035,KB825119,KB823182,KB824141 for Oct.Problem,after installation & I reboot, my desktop screen comes back about 50% larger, so I system restore to get it back to a normal size screen. How do I get these latest security patches on my computer(XP) without distorting the screen. Howard Tag: Security Bulletin Tag: 37774
- Next
  - 1
    - Signing in This may not be the right place to answer this question but anyways. When I sign in for the msn messagner. There is a thing that pops up at the bottom saying to verify your email address click here, but when I do it just takes me to msn today. Dose anyone know where I go to verify my email address. Thanks Tag: Security Bulletin Tag: 37773
  - 2
    - security Who you know the mothod to security for network, please to send to me on my e_mail:thuongnguyenduy@yahoo.com Tag: Security Bulletin Tag: 37772
  - 3
    - Blocking?? I keep getting these 3 porn sites in my favorites everytime I logon. But when I click on them - it's either can't find, 404 error, or Forbidden. I don't want these on my computer. I keep deleting them, but they just keep popping up. Also, my homepage changes EVERYTIME as well!!! Do I have a virus??? Tag: Security Bulletin Tag: 37771
  - 4
    - 128 bit encrpt update I have wasted an hour of my life on microsoft trying to find out how to update my internet explorer ver 5 to 128 bit encryption. I use Win 95 Thanks Tag: Security Bulletin Tag: 37770
  - 5
    - help ! with security settings for ActiveX I cannot get any embedded messages or graphics to appear (explode) as I constantly get an error message that my ActiveX security settings will prevent images from displaying properly. Please help ! ! - - Thanks ! Tag: Security Bulletin Tag: 37766
  - 6
    - Weird Emails I have been getting emails from microsoft corporation but the come every minute. I also get emails from administrator and return notices without even sending any emails. I keep deleting them but they keep coming. What can I do? Tag: Security Bulletin Tag: 37763
  - 7
    - errorlevel I am using errorlevel in a batch file to see if the hotfixes install correctly: if errorlevel 1 goto :label On some of the systems it works correctly and others it does not. My question is this, does anyone know what error levels the hotfixes output and what they equal or how to see what they are outputting? I tried 1>filename.txt 2>error.txt and that does not work. TIA! Tag: Security Bulletin Tag: 37759
  - 8
    - Security patch Hi, I have been receiving the same email over and over again. The sender is security@microsoft.com, the message tells me to download the attached patch. This is the message: Dear friend , use this Internet Explorer patch now! There are dangerous virus in the Internet now! More than 500.000 already infected! The attachment: patch.exe Can anyone tell me if this is ligit and secure, and is it really from Microsoft? How can I verify this? Ryg rygatout@videotron.ca Tag: Security Bulletin Tag: 37756
  - 9
    - outlook express address file I find a file called "~" on my desktop every three or four times I shut down Outlook Express. When I open the file using Word, it appears to be coded but seems to have my address book in it, although the characters are separated by other symbols. So you know anything about this file? Is it normal? Is it something I should stop deleting whenever I find it? Is someone worming his way into my files? Any insight would be appreciated. Tag: Security Bulletin Tag: 37755
  - 10
    - Web page timeout How can I setup a page so that it will timeout if the user walks away and fails to signoff Tag: Security Bulletin Tag: 37754
  - 11
    - "SUS Client" is not working I have installed SUS Server SP1 on 2003 Server. I am testing it on two machines, one has 2000 sp3 another xp sp1. I set 'em up using gpedit.msc. It looks alright, but when look at the log file there is nothing, " THE LOG FILE IS BLANK ". Anyone wants to help me out ?? Tag: Security Bulletin Tag: 37747
  - 12
    - Install CA Hi all, I am installing CA on main domain as Enterprise CA , but when I am trying to request certificate for computer , is show me that my CA is Template ! How to have a normal Cert. which will work normally ?and is there any risk using cetificates in a domin ? Tag: Security Bulletin Tag: 37745
  - 13
    - Windows update for Windows NT Why are none of the October security updates (MS03-41, MS03-43 to MS03-45) available via Windows updates for Windows NT workstation? Tag: Security Bulletin Tag: 37737
  - 14
    - INTERNET UPDATE Same as "Paul King", I received an email from someone purporting to be MS Corporation for a security update. I received this immediately after going to MS newsgroups to ask a question and like a dummy, gave my correct email address! Now, this was a week ago. Everytime I open Outlook Exp. I get from 3-9 alerts of infected email. Attachment name is different each time but all have W32.Swen.A@______. Besides MS Patch, some say mail undeliverable to ___________ (different names & email addresses.) How do I stop these messages from coming in my email? I have Norton AntiVirus which warns me every time so I delete them at that time. Thanks for any help. Sam Tag: Security Bulletin Tag: 37736
  - 15
    - Real weird situation. Hello, I have been asked to setup the security for our application suite and one setup in our lab causes me a great deal of headache! In this setup there are 3 machines, machine A is the pdc, machine B and machine C are normal worstation in the domain. All machines are running windows 2000. As far as I can tell everything is configured OK on the machines, not warning in the event viewers.... BUT On the PDC (machine A) the domain administrator password is 'toto', on machine B the local administrator also has its password set to 'toto'. So I logon machine B as local administrator and then I run 'net group AGroup /ADD /DOMAIN' and to my surprise that works. A new group is created in the domain. If I go on the PDC, and the group has really been created. I don't get it at all. But if the administrator's password on machine B is different that the domain administrator's password, the group is not created. Can anyone help me to understand this one? Thank you! MP Tag: Security Bulletin Tag: 37734
  - 16
    - Can't open attachments I recently installed microsoft updates as recommended for my system and I now cannot open attachments that are sent to me by e-mail. What should I do? Tag: Security Bulletin Tag: 37732
  - 17
    - xeturn b & delf c how do I sort out xeturn.b & delf c trojans Tag: Security Bulletin Tag: 37731
  - 18
    - Technet plus member but no answer!? Hi I posted a question oct 15 2003 2:57 and got no answer I have a Technet plus license ... Is it something wrong with my newsgroup registration? This is not the first time I have not got any answer .. Best regards Stefan Tag: Security Bulletin Tag: 37724
  - 19
    - How to find if a domain is Win2K or Win XP Hi * Given a domain name, how to find if a domain is Win2K domain or NT domain? * Also, is there any method to do the same without contacting the domain? Thanks MD Tag: Security Bulletin Tag: 37719
  - 20
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.10.20 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: Security Bulletin Tag: 37715
  - 21
    - KB824141 Patch *****BREAKS SOFTWARE***** In the hopes that someone at MS is listening, KB 824141 breaks third party software, specifically Avid XPress, the most high-end video editing software for PCs in the industry. What the patch does has to be seen to be believed. It causes Avid to open jillions of windows on load and then hang. How this can happen from a patch that "fixes" list and combo boxes I have no idea. The "break" has been experienced by every Avid user. See www.avid.com/community/forums/Forum38/HTML/000704.html Dan Tag: Security Bulletin Tag: 37708
  - 22
    - KB824141 Patch *****BREAKS SOFTWARE***** In the hopes that someone at MS is listening, KB 824141 breaks third party software, specifically Avid XPress, the most high-end video editing software for PCs in the industry. What the patch does has to be seen to be believed. It causes Avid to open jillions of windows on load and then hang. How this can happen from a patch that "fixes" list and combo boxes I have no idea. The "break" has been experienced by every Avid user. See www.avid.com/community/forums/Forum38/HTML/000704.html Dan Tag: Security Bulletin Tag: 37707
  - 23
    - Hotbar Is Hotbar adware and spyware? What's the difference between the two? Is is just not worth the risk to have it on your system? Thanks,JJ Tag: Security Bulletin Tag: 37706
  - 24
    - Still fighting funlove virus Is there a particular security setting or patch I can deploy to help prevent the infection of the funlove virus? I'm currently running McAfee's NetShield on one of our servers (and desktops use virus scan), however, the server continously gets hit with this virus. I'm wondering what others are doing to help prevent the spread of this virus. Also, can an IDS or firewall system (ISA server?) help prevent the infection of this virus? Thanks, - Dave Tag: Security Bulletin Tag: 37705
  - 25
    - Help: Unable to install WinXp Security Critical Service Pack Hi There: I tried to update my WinXP Home Edition with the Service Pack 1 (Express) critical Update but unable to install it. The update was successfully downloaded and extracted but when it goes to the installation part, it recommended me to close all anti-virus program which I did and did the Back up system or close all open program which I also did. But still this important Critical Update is not able to install and pop-up a window saying: Service Pack 1 Set up Error - Set Up canceled. In the Web Page Dialog - it is shown that it is not done. I review the download history and "Retry" many times but not able to do it. Any help to give me an idea to let me install this important Critical Update. I have just spent 2 months to remove the viruses I have even though I have the latest McAfee Virus Scan and do the DOS SCAN, turn off the System Restore, Disk Clean etc. It is like hell, believed it. I need to go back and forth to McAfee to online chat with them for 12 times with different technicians and also includes 2 supervisors. Hope helping hands are there this time. Tks. H. . Tag: Security Bulletin Tag: 37704

Microsoft Security Bulletin MS03-043 Print

Buffer Overrun in Messenger Service Could Allow Code
Execution (828035)
Issued: October 15, 2003
Version Number: 1.0

Is this patch safe to install on:
- Micros server running NT
- Odyssey server running NT
- FMS server running Windows 2000

Top