Spam problem via HTTP

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Thanks (and apologies) for your comments on "The Most Obvious Question You Are Ever Likely To See" (e.g. No-Brainer security question) Dear Colleagues: In all of my years of posting to newsgroups I would have to say that the response you all provided me are among the best I have ever seen. I thank you all so very much for your advise. To those of you who mentioned my excessive cross-posting, please accept my apologies but this total lack of security is something that has given me nightmares. To those of you who suggested that I publish the address of one of our parking lots, I would like to, if anything to prove a point, however, being that I am the poor slob who would be called upon to remedy the problem (and likely be the one who is blamed) its not advisable. Now, without going into much fanfare (and to better respond to those of you who inquired), my boss is one of those people who thinks they know it all. My boss is a teacher and we are a school and every time that I have suggested that we secure our wireless network, my boss rolls her eyes as if I were crying wolf. The people who installed our waps said that we should have some type of security in place, but her thing is all about what happens if somebody comes in with a laptop and cannot connect. Of course I said that such a person would have to visit the IT department, but this has fallen upon deaf ears. The biggest problem is not with the fact that my boss knows precious little about managing a network and that the last time she was involved in any form of network management was sometime back in 1985, it is because she is adamant about her technical knowledge. It does not matter if 99% of the industry believes in something (for example, having SDLT tape backup devices) its what she thinks works and does not. In short, she is completely ignorant. To be clear, I have no quams about having a woman boss. What I have a problem with is somebody who is so adamant that they are right and I am wrong that it seems that no matter what I say, she will go against it. There are more issues here than meet the eye, but I had to draw the line when it came to the integrity of our data, not to mention what could happen if the wrong person got in. For those of you who mentioned that I should tread carefully, thank you. I already have my resume and cover letter updated for even if they turned around and changed all of the things that are totally wrong and dangerous, I cannot stay in the sort of environment where our administrators take the advice of somebody who clearly has precious little technical knowledge over the advice of somebody who comes in with recommendations from a plethora of experts. This being said, I thank those of you who graciously contributed to this thread and apologize to those who feel that my cross posts were excessive - regardless of these complaints, those of you who took issue with my crossposting also contributed good advise never the less. Thank you so very much for your time and advice - I hope that somehow we can cross paths in the future and I can repay the favor. Curious George Tag: Spam problem via HTTP Tag: 67054
  - 2
    - pop up for removing spyware twice when I was online a pop up from microsoft came up and asked if I wanted to run the antispy ware I clicked ok both times and nothing happened now one comes up and says 18% of my computer is infected do I want to fix it and again a clicked on ok and still nothing. Im not sure what to do from here. thanks for any advice! Melissa Tag: Spam problem via HTTP Tag: 67053
  - 3
    - Instant Messenger Can you get a virus from typing on im. Can you find someones ip address from typing on im. Tag: Spam problem via HTTP Tag: 67045
  - 4
    - Sasser.exe Hello all ---- I hope you can help me. Within the past few weeks I've been infected with spyware. Not fun at all. I dled Microsoft Antispyware and ran it a few times and it was able to remove most of the infected files. The only spyware I can't remove is sasser.exe. When I try to remove it (or quarantine it) it simply freezes the program. Any ideas? I'm not what you call a super techy person...so I might not understand all the jargon. :) TIA, kat Tag: Spam problem via HTTP Tag: 67042
  - 5
    - computer hi-jacked need help please!!! everytime i go to homepage or email a web site called www.i--search.com has taken over the computer. is there anyway i can get rid of this? i tried deleting it in cookies and history and it will not delete. please help thank you Tag: Spam problem via HTTP Tag: 67040
  - 6
    - I am having problems with my laptop...someone help please? For the past week or so, I have been having some rather serious issues with my laptop...For whatever reason, I am unable to access anything that is a java-based application. Also, there are certain apps on my windows XP that no longer function properly (i.e. when i try to "run" or "search" for something, it doesn't work). My windows media player doesn't work either, i had to disable it completely, there was some internal error that stopped it from playing anything, audio OR video. As a matter of fact, I'm writing this message on my roomate's computer. I was unable to sign onto my .net passport on my computer. Here is basically a chronological listing of what has taken place, considering my computer, in the last week or so: About two weeks ago, Norton Internet Security started becoming a pain, not working properly, reporting of some type of internal error. I tinkered with it a little bit, and finally got rid of it, because every time I tried to re-install it, it wouldn't do it. Anyway, I replaced it a couple days later with Mcafee's Ad-aware and software called Spyware Doctor, to combat spyware. Also, early last week, our local internet service provider (time warner cable) came to switch over the connection to my other roomate's name, since our former roomate was moving out. I figured I'd mention it, even though I doubt it has anything to really do with it. Who knows, maybe they screwed something up on their end. Anyway, I suspect that somehow, someway, my operating system got srewed up, and I don't know how to fix it. I need some help, if someone out there has a clue as to what might be the deal with my computer, I'd appreciate it if you could give me some feedback. Just so it's put out, yes, I have java intalled, and all that other stuff. Tag: Spam problem via HTTP Tag: 67039
  - 7
    - DeltaType AddOrChangeUser Hi, In NetLogon.log, what's the significations of the following line: <time stamp> [CHANGELOG] DeltaType AddOrChangeUser (5) SerialNumber: 560 2e927 Rid: 0x1035 Name: 'Some_user_name' Google doesn't provide me with anything relevant. Thanks in advance. Tag: Spam problem via HTTP Tag: 67028
  - 8
    - Missing Firewall in XP In 2003 I purchased a computer with XP Home Ed already installed. Therefore, Miscrosoft won't answer my question. My question is, everything I have been reading lately says that a firewall comes with XP. However, when I access the Internet Connection in the Control Panel, there is no indication that there is a firewall. Should one be there? I have not loaded SP2. I did once but I had so many problems that I just removed it. How can I get the Windows firewall? thank you. -- Dee Tag: Spam problem via HTTP Tag: 67015
  - 9
    - Hacked Printer? How? To whoever may be interested While browsing on the internet an advertisement printed out on my printer without me requesting it or in any way giving permission to do so. If they deliberately set a web-page to force your printer to print their adds, is it illegal? I am unsure as to who may be interested in perhaps investigating the company. The ad was as follows minus the graphics; VONAGE - The Broadband Phone Company, $24.99 a month CALL ANYWHERE in the US and Canada with your broadband connection I have the most up-to-date security software running on my machine. They start using your printer without your knowledge and all of a sudden you don't feel like you own your computer anymore. Thank you for your time. Tag: Spam problem via HTTP Tag: 67013
  - 10
    - How do I programmatically set *inheritable* permissions on registry I'm struggling to find a way to programmatically set inheritable permissions on registry keys. The only examples I've seen set them on a specified key and advise one to apply it recursively. This is fine if that part of the registry is static... but useless if new keys are to be created in the future as they won't inherit the new permissions. I've cobbled together two code examples that do what I describe. How would I modify them to make them inheritable? I read somewhere about CONTAINER_INHERIT, but I don't know it's value, and nor where I should apply it. BOOL setPermissionsExample1() { // Resets permissions on a key so that they are Full Access to special // group INTERACTIVE. Appears to only set permissions for the specified // key and not for subkeys as well. HKEY hKey = NULL; TCHAR szSubkeyName[] = _T("SOFTWARE\\MyKey"); if (ERROR_SUCCESS != ::RegOpenKeyEx(HKEY_LOCAL_MACHINE, szSubkeyName, 0, WRITE_DAC, &hKey)) { return FALSE; } SID_IDENTIFIER_AUTHORITY SecIA = SECURITY_NT_AUTHORITY; PSID pSid = NULL; if (FALSE == ::AllocateAndInitializeSid(&SecIA, 1, SECURITY_INTERACTIVE_RID, 0, 0, 0, 0, 0, 0, 0, &pSid)) { return FALSE; } BOOL bSuccess = FALSE; DWORD dwAclSize = sizeof(ACL) + sizeof(ACCESS_ALLOWED_ACE) + ::GetLengthSid(pSid) - sizeof(DWORD); PACL pDacl = (PACL) new BYTE[dwAclSize]; if (TRUE == ::InitializeAcl(pDacl, dwAclSize, ACL_REVISION)) { if (TRUE == ::AddAccessAllowedAce(pDacl, ACL_REVISION, KEY_ALL_ACCESS, pSid)) { SECURITY_DESCRIPTOR SecDesc; if (TRUE == ::InitializeSecurityDescriptor(&SecDesc, SECURITY_DESCRIPTOR_REVISION)) { if (TRUE == ::SetSecurityDescriptorDacl(&SecDesc, TRUE, pDacl, FALSE)) { bSuccess = (ERROR_SUCCESS == ::RegSetKeySecurity(hKey, (SECURITY_INFORMATION)DACL_SECURITY_INFORMATION, &SecDesc)); } } } } ::RegCloseKey(hKey); delete[] (BYTE*) pDacl; if (pSid != NULL) { ::FreeSid(pSid); } return bSuccess; } void setPermissionsExample2() { // Resets permissions on a key so that they are Full Access to special // group EVERYONE. Appears to only set permissions for the specified // key and not for subkeys as well. TCHAR szSubkeyName[] = _T("SOFTWARE\\MyKey"); HKEY myKey; unsigned char *p = new unsigned char[9000]; PSECURITY_DESCRIPTOR psecdesc = (PSECURITY_DESCRIPTOR)p; DWORD sts = ::RegOpenKeyEx(HKEY_LOCAL_MACHINE, szSubkeyName, 0, KEY_ALL_ACCESS, &myKey); if (sts == ERROR_SUCCESS) { sts = InitializeSecurityDescriptor(psecdesc, SECURITY_DESCRIPTOR_REVISION); sts = SetSecurityDescriptorDacl(psecdesc, TRUE, NULL, TRUE); sts = ::RegSetKeySecurity(myKey, DACL_SECURITY_INFORMATION, psecdesc); sts = ::RegCloseKey(myKey); } delete [] p; } Tag: Spam problem via HTTP Tag: 67012
  - 11
    - HP t 5700 Thin client I am having a problem patching the thinclient. I receive packets on port 445 and packets of 177 bytes. This is flooding my network. Any Ideas? I do have a patch kb 828741_1.00-1_a1.exe. 828741_1.00-2_a1.exe But having trouble installing it on those machines. It is running Windows Xp Embeded. Is there a way to get them on the devices.Some machines is not on a Domain. Will SUS work? Tag: Spam problem via HTTP Tag: 67007
  - 12
    - Perhaps the most OBVIOUS question you will ever see. Dear Colleagues: For the life of me I don't know why I have to ask this question since the answer is so obvious, however, I need to have others tell me that I am not completely insane. I work at a place where we have a myriad of wireless access points and NO, I am not writing from there at present. NONE of the wireless access points has any form of security on them whatsoever. No WEP, no CHAP. . . no nothing. Everything is open so you could walk into our joint, grab an IP address and surf the web to your heart's content. Here is the problem. My boss insists that its "no big deal" and that since the servers are on the inside and protected, we really don't have a thing to worry about. Furthermore, my boss is under the impression that since we are situated in a wide area, that nobody would be able to get into our network because of this distance. Needless to say, my boss does not consider somebody sneaking into a parking lot with a laptop, a good network card and a directional bazooka antenna a possibility. So here is what I have to explain to my boss' boss and, perhaps, the board of directors. . . and here is where I can't help but laugh. I hope that I will be able to keep a straight face come Monday when I have to explain myself to people why its important. Okay, so I know the analogies. For example, I understand that not having a secure wireless network with many Waps and high gain transmission antennas is the same as putting cables out to anybody within 'x' amount of yards with a sign that says "free internet access", but since I am going to be asked these obvious questions, just what type of damage could somebody do? Yeah, I know about denial of service attacks, yeah I also know about enumeration and password guessing, but considering that we have an SQL server on the inside of our network (no, the sa account password is not null) what are we talking about. I can envision so many things. Like somebody just sitting there caputring packets to get things like usernames, passwords and the like, but come on. . . what else could they do. I have read my boss the riot act many times, but this is now going to go in front of somebody over my boss' head, so, aside from giving them worst case scenarios, end of the world analogies, etc., how else could people break in. Creative responses are appreciated and will be rewarded with much praise. I can't believe that I have to actually explain this to people, and this entire thing would last about two seconds when it comes to talking with a computer professional, but you see, my boss is under the impression that they are a computer professional because they received a Master's degree in Comp Sci back in the 80's. I know that this line of thinking is dangerous, but I really want some creative answers to put my point across strongly, and yet professionally. Although I realize that this post will likely be the butt of many jokes (which I will appreciate immensely) I never the less would appreciate a bit of useful information in your responses. I am going to have a serious drink now, and then bang my head against the wall. Thanks in advance, CC Tag: Spam problem via HTTP Tag: 66989
  - 13
    - One computer on network blocking attempts I have 4 pcs networked using a router. I also run Zone Alarm, mostly for outbound monitoring. My machine, running win2K has NO logs in Zone Alarm about blocking inbound attempts. However, my daughter who has Winxp does indeed show in ZA, x number of blocked attempts. I checked the ip's on those to ensure they weren't from the home network, and sure enought some are from outside. Could this be from her running AIM or one of the P2P file programs? I just find it odd that I have none and she has several. (NOT as many as my mom at her house running Cable Internet, no router (I did load her ZA, who as of Christmas had over 16,000 attempts!) Tag: Spam problem via HTTP Tag: 66984
  - 14
    - Microsoft Anitspyware Beta I have a Windows XP Home PC Service Pack 2 with all the latest updates Norton Antivirus, Spybot Search & Destroy, Ad-Aware and MS Antispyware all with the latest updates. After running both Spybot and Ad-Aware the system was running well. I installed the MS Antispyware and ran the first scan and clean. It removed 18 severe to moderate threats. It required a reboot after which the Service Pack 2 Firewall would not activate automatically or manually. I restored Windows prior to the scan and systematically eliminated the threats down to one. CouponDeals (Adware) located C:\Windows\System32\cdlsp.dll If this one is removed the Firewall will not start so I have set it to ignore allways. Is this file infected or has it been mis-identified by MS Antispyware ? Anyone have a clue? Tag: Spam problem via HTTP Tag: 66979
  - 15
    - recommended anti-spyware progs? any recomendations would be appreciated. preferably free, but if there are known excellent ones i'd be willing to pay. thank you. Tag: Spam problem via HTTP Tag: 66976
  - 16
    - Script and ActiveX Blocked Hi all, My friend is a designer. He installed service pack 2 for xp. But when he preview his web pages after making changes using dreamweaver, IE always prevents the javascripts from running. Is there anyway to allow it to run by default? I can't seem to find the settings Regards, Kit Kai Tag: Spam problem via HTTP Tag: 66973
  - 17
    - Clearing URLs in IE the problem may be simple.... but i have certain restrictions!! Well i would like to clear the URLs that come up when I type the URL or view the drop down list in the IE. The problem that I face is that my clear history and days to keep pages in history are disabled by or administrator. I can delete cookies and delete the temporary internet files. However, I cannot clear the list of URLs that I visited. The security level is also disabled. Is there a file or any other way that helps me in clearing the visited links? Thanking you Jojy K Kuriakose Tag: Spam problem via HTTP Tag: 66954
  - 18
    - Problem with my Hosts File I'm using the Hosts file and the RenHosts.bat file (for toggling on and off) from this site below http://www.mvps.org/winhelp2002/hosts.htm Since downloading the Hosts file a few days ago I've always had it on but today I've tried to turn the hosts file off for the first time and if wont de-activate. Along the top of the prompt screen I get a message saying, "duplicate file name exists, or the file cannot be found". Can somebody shed some light as to what this means? Tag: Spam problem via HTTP Tag: 66953
  - 19
    - patch info for advapi32.dll in win2k sp4 I am installing cspdk in window 2000 sp4. I signed the sample csp. However, when I run testcsp.exe, I got "Calling CryptAcquireContext - CryptAcquireConext returned error 80090006 (NTE Bad signature)Failed" error. I know the problem is due to incorrect patch version of advapi32.dll. I got a advapi32.dll version of 5.0.2195.6876, Can someone provide me the patch info for this version of the advapi32.dll? I know there are many postings regarding this information. But I can't find the patch info via searching "advapi32" in this forum. Your help is much appreciated. Phoebe Tag: Spam problem via HTTP Tag: 66942
  - 20
    - virus I have a virus[ TROJ_BDI.A] how can I get it off my compurter? thanks meaginn -- do it right the first time and you wont have to di it over Tag: Spam problem via HTTP Tag: 66941
  - 21
    - Port management , closing ports from intrusion I read that one can prevent port scans by 'closing off' all ports , while maintaining an open port 80 for surfing. Is there a method to block port scans? Tag: Spam problem via HTTP Tag: 66940
  - 22
    - DHCP and VLANs I'm currently in college and we are setting up a network to experiment with. I was wondering if there was a way to set DHCP on our server so that it either corrosponds with a port number on the switch or the VLAN number. So I have the 10.3.x.x /16 network and I want to make all the clients on VLAN 2 to use 10.3.2.x scope, clients on VLAN 3 to use 10.3.3.x scope and so on. I have all my scopes setup and now I'm to the point where I either have to go in and figure out how to set the switch up to handle this or set up Server 2003 to handle this. The problem is I'm not real sure on how to accomplish this. I'm going to graduate this spring and I've had Cisco classes 1-6 and a Microsoft Server 2003 class. Sadly my Server 2003 class had a teacher that really didn't know much other then the basic set up users, the AD, and basic DHCP, DNS. I've read some other posts that people are trying to do similar things but it's just not the same. I'm sure I have the resources to accomplish this I just need a push in the right direction. I'm want to do it like this way so that when we setup ACLs and put up the firewall, that it will be easier to monitor and restrict access. Also if anyone out there has just some basic tips on security (I'm in the middle of my security class now and haven't learned all that much) I'd appreciate it. Thank you for your time!!!! Josh Tag: Spam problem via HTTP Tag: 66926
  - 23
    - Multiple Accounts Being Locked Out - HELP Please!! I am running a Windows NT 4.0 Domain with a PDC and BDC. We have about 800 users. What I noticed today is that each account is being alphabetically locked out because there are a lot of unsuccessful logon attempts (approx. 100 attempts per account). I noticed that the attacks were coming from 3 PCs. I removed the PCs from the network and checked to verify that the eventlogs on the PDC/BDC had stopped locking out accounts. About 30 minutes later, the problem started again from a different PC. The PCs I had removed were checked for spyware and viruses. One had the Bat.Noshare.v virus, the other was clean. The 4th PC that started causing the problem was also checked for viruses and spyware. It was also updated with critical patches, yet the problem persists. Please help!! I can't determine what is causing this and therefore, I can't find a fix for it. Sincerely, Jerry (At My Witts End) Tag: Spam problem via HTTP Tag: 66920
  - 24
    - Which regulation governs data backup retention ? I work for a 5,000 public institution and I would like to confirm whether there are regulations that dictates data backup should be performed on tapes and stored off-site ? How often back-up should be performed ? The discussion here is that a co-worker would like to adopt disk-to-disk backups in the data center (what I agree) and perform only backups on remote locations connected via fiber for DR purposes. My point is that backing up to remote locations don't cover threats against cyberattack or virus outbreaks. I mean, in my view in addition to a data backup in disk, there are still reasons to perform a data backup in a portable medium such as tape to assure that such data is clean and out of range of virus or cyber-attack events. In addition, if it is determined that a data backup to tape is necessary, such co-worker would like to perform a tape backup only once a month. Does Sarb-Oxley handles such data backup requirementss ? Please advise. Let me know what you think. Tag: Spam problem via HTTP Tag: 66918
  - 25
    - can't delete virus - Java Bytevera.A This virus/Trojan was not detected by my NAV but It was detected when I did an online scan. I did everything that it said to remove it but I am unable to access it in normal or safe mode....any help would be appreciated. MGD Tag: Spam problem via HTTP Tag: 66915
- Next
  - 1
    - 1 Tier PKI We are a small Company with 25 employees and 50 machines. We want to deploy PKI for authentication, encryption and at a later time Secure VPN and Wireless. I was thinking of a 1 Tier Architecture. Where can I find a good example of how to implement a single tier PKI infrastructure? Thanks - Sean Tag: Spam problem via HTTP Tag: 66910
  - 2
    - Security hole in file sharing (bug?) I don't know if this has already been reported. I have a Windows XP SP2 computer, fully up-to-date with patches, which connects to the Internet through a dial-up connection. In the network settings for the dial-up connection, I have disabled the "client for Microsoft networks" and "file and print sharing" components, and I've also disabled NetBIOS on the TCP/IP settings. With this configuration, I was quite sure my shares wouldn't have been exposed to Internet users... but I found, instead, that they are. Altough disabled, the file sharing services are fully accessible, and I was able to connect to them and also use them (by supplying my username/password). What's happening here? Are not the connection-specific settings valid anymore? This seems to me quite a serious bug! Massimo P.S. I know I can activate the built-in firewall, or stop the server service, or fully remove the file sharing network component, and so on... but I want to know why I'm settings things right and they're behaving wrong! Tag: Spam problem via HTTP Tag: 66909
  - 3
    - Getting Pounded by failed logon attempts I am getting hundreds of failed logon attempts from device names that don't seem to exist either in DNS or WINS. Here on of the event viewer error messages: Event Type: Audit Failure Event Source: Security Event Category: Account Logon Event ID: 680 Date: 1/26/2005 Time: 7:22:29 AM User: SYSTEM Computer: COM1 Description: Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: uucp Source Workstation: \\ENDO Error Code: 0xC0000064 Data: How can I find the source IP of these? Thanks, Brian Tag: Spam problem via HTTP Tag: 66906
  - 4
    - Hot Mail Staff I received an email from "Customers Support" stating that an audit had reveiled a problem with my acvcount and that if I did not go to the enclosed link within 48 hours my email service would be come limited. Is this an issue that I need to follow up on or is it some kind of scam or illegal attempt to obtain personal information? Tag: Spam problem via HTTP Tag: 66905
  - 5
    - trojan or not i cant remove it recently my nortons has detected a so called trojan called mmviewer_101.Is it a false positive or is it a real one.i cant seem to deleate it at all.ive serched thru everything looking for it.any help would be appreciated. Thanks zero Tag: Spam problem via HTTP Tag: 66897
  - 6
    - Mysterious Stranger - Unknown "Program Running" When I start to switch users (WinXP home - Fast User Switching), the logon screen often indicates that the User Account I have exited has One More Program running than I think it should have. I can re-enter the User Account and run Task Manager only to find no applications running. Yet I can close Task Manager, fast switch to the logon and there is the message "1 program running". I'm not sure but I think this started appearing at about the same time as I installed MS AntiSpyware Beta1 and intalled the recent updates. Could a "process" or "service" be falsely identified as a "Program Running"? Any thoughts are appreciated. I tried looking at processes with "services.msc" and found much more than I expected (is all this really necessary?!?!?). I have also become more aware (sleepily so) of scanner reports indicating that 700+ processes have been scanned, etc. My brain hurts... Thanks for help, CT Tag: Spam problem via HTTP Tag: 66896
  - 7
    - Mysterious Stranger - Unknown "Program Running" When I start to switch users (WinXP home - Fast User Switching), the logon screen often indicates that the User Account I have exited has One More Program running than I think it should have. I can re-enter the User Account and run Task Manager only to find no applications running. Yet I can close Task Manager, fast switch to the logon and there is the message "1 program running". I'm not sure but I think this started appearing at about the same time as I installed MS AntiSpyware Beta1 and intalled the recent updates. Could a "process" or "service" be falsely identified as a "Program Running"? Any thoughts are appreciated. I tried looking at processes with "services.msc" and found much more than I expected (is all this really necessary?!?!?). I have also become more aware (sleepily so) of scanner reports indicating that 700+ processes have been scanned, etc. My brain hurts... Thanks for help, CT Tag: Spam problem via HTTP Tag: 66895
  - 8
    - Future of DUN connection Windows updates? Just read the MSNBC article "Pirated Windows copies to get fewer fixes: Microsoft plans severe restrictions on security updates" from http://www.msnbc.msn.com/id/6868504/ BTW - All my PC's contain valid Windows XP Pro software. What I hope this does NOT mean - that updates must be download and applied ONLY from the computer the updates apply to. In other words, will I be still be able to download updates from my broadband connection at work for my home computer with a slow rural 24Kbps dial-up modem connection? If not, then my home computer is screwed. Updates larger than 2MB, on my DUN, are rarely successfull, so, try to imagine doing a 15+MB update! A solution would be to have an option where Windows Update creates a file of the updates for my HOME PC that I could take to work, download the updates from work, take them home and apply them. All of this could be managed through Windows Update to verify the validity of the OS at each location, i.e. HOME and WORK. Of course, this all applies to Office updates too. Any thoughts people? Tag: Spam problem via HTTP Tag: 66888
  - 9
    - Antispyware won't run at lunchtime How can I schedule Microsoft Antispyware to run at lunchtime? I can specify just about any time of the day with no problems, but if I enter 12 noon, it automatically changes it to midnight. If I enter 12:30, it changes it to 00:30. Tag: Spam problem via HTTP Tag: 66879
  - 10
    - Unable to open excel sheet in Protected mode from VB 6.0 Hi, I am working on a project in VB6.0 and SQL Server. We use MS Excel for our reports. We also use server side COM+ components. We have a situation where we are not able to open some of the reports in 'protected' mode (i.e, to prevent the users from making changes to the excel report). When we try to open these in protected mode, the application is crashing, giving a Dr. Watson error. When we change the VB code to open the excel reports in 'Unprotected' mode, the applcation works alright. But in this case, the users would be able to change the reports as they like. Why am I not able to open these excel reports in protected mode from my VB6.0 exe? Is there a way, where we can prevent the users from making changes to the excel report, even if we open it in 'unprotected' mode? We tried using the 'Read Only Recommended' option but that allows the users to make changes and save changes as some other file name (although the users are prevented from making changes to the same file) and this cannot be allowed in our application. Any help in this regard is greatly appreciated. Thanks in advance ourspt Tag: Spam problem via HTTP Tag: 66876
  - 11
    - Screen Saver and Media Player I have my screen saver configured to activate after 5 minutes of inactivity. It works great as long as I am not listening to music with Windows Media Player. My OS Media Player Version Windows 2000 Pro SP 3 9 Windows XP SP2 10 Have any of you seen this? Do you know of a fix? Thanks, Tag: Spam problem via HTTP Tag: 66861
  - 12
    - Custom PASSFILT.DLL and Complexity in GP I have developed my own passfilt.dll file. I copied it to all four of my Win2K3 DC's and added the registry entry under the LSA key Notification Packages. My problem is that I only enabled password complexity on a single group policy (not the default domain policy or default domain controller policy) that I applied to a test OU. I also further limited the policy to a single user for testing in the GPMC. However any user that now tries to change their password has the new password go through the passfilt.dll even though complexity is not enabled on any policy that applies to them. What gives? From what I have read, you have to add the reg value to the Notification Packages key AND enable complexity on a group policy. Why would it apply the password filter to users from whom it is not enabled? Tag: Spam problem via HTTP Tag: 66855
  - 13
    - PKI newsgroup? Is this the right news group for PKI related questions? Sean Tag: Spam problem via HTTP Tag: 66853
  - 14
    - E-mail threatening to DEACTIVATE my MSN service An E-mail dated January 24th threatened to deactivate my service unless I provide identifying information. Is this request authentic? Tag: Spam problem via HTTP Tag: 66849
  - 15
    - event log-logging in/out How/what do I use from the event viewer to see when a users logs in/out of their XP/2000 workstation? I have auditing turned on in my group policy but there are several events showing in the event log. I'm not sure which ones are actually the user loggin in/out -- Joel Young Tag: Spam problem via HTTP Tag: 66848
  - 16
    - Browser Highjacker I have a Browser Highjacker on my Internet Explorer home page ( about:blank ) Microsoft Antyspyware Beta 1 will not remove it. I have completed 11 scans and it is still on there. Infact it has put itself on the default page of the antyspyware programme. I have also got Norton System works 2005 and that will not touch it either. Has anyone else had this and do you know how to get rid of the pest. Andy Tag: Spam problem via HTTP Tag: 66842
  - 17
    - serious severe problems i am running xp home with sp2 and all of a sudden all the text everywhere can only be seen partially and when i try to do anything an error message comes up but i cant read it then after i do anything it freezes also when loading my personal settings it takes a long time. i deleted my user profile and created new one but it didnt help. it runs just fine in safe modes and also i scanned for viruses and spyware etc and it is clean. please help me Tag: Spam problem via HTTP Tag: 66841
  - 18
    - Can ISA Server 2004 handle two different links to the internet? Hi there, I hope this question hasnâ??t been asked before, but I couldnâ??t find it. I would like to know if ISA 2004 can deal with two different links to the Internet. Suppose I have a link via Frame Relay and a Radio link, for example. Can one server with ISA 2004 in my network handle both? Traffic will come from two different networks using two different links. I hope Iâ??ve made myself clear enough. Thank you! -- Carlos Figueiredo. Tag: Spam problem via HTTP Tag: 66837
  - 19
    - Breach in security I got directed to a site that was offering to do a security check, when it ran the check it gave my ip address and showed a message that I had posted on the newsgroups under my newsgroup profile. How the hell did it do this? I ran MBSA and it said that I was protected full strength security so how did this site get these details? Tag: Spam problem via HTTP Tag: 66835
  - 20
    - OWA Security In OWA when you open an attachment its gets downloaded to the Temp internet folder. Then when you logoff OWA that attachment still stays in the temp folder. The problem is when you are viewing your attachments at a Kiosk (unsecured machine) or Customer site the attachment will still be on that machine. I know in IE there is a checkbox to clear Temp internet folder but I can control that on my secured machines. Ijust don't want this to be on machines that I have no contyrol over. Is there any way to control attachment handling on the server side with OWA? or is there a way to clean the temp internet folders from the server in OWA? If there is no solution Can I control attachment handling through ISA2k4? I would be looking for solutions for Exchange 2k and 2k3 Thanks for your help Tag: Spam problem via HTTP Tag: 66822
  - 21
    - Weird session names I did a netstat on my Windows 2000 Pro machine and saw some connections that are probably legit from other machines on our company internal network. However those machines are appearing with weird names. When we look at sessions using our Windows 2003 server, the weird names appear on lots of our machines. The machine name is ok, but the session name is strange. The session names are all in the form of an Internet domain. Here are a couple of examples: play.battle.game.idle.rpgtechnologies.com kau.tinggalkan.aku.setelah.semuanya.ku.serahkan.info (kau tinggalkan aku is a song title) Is this "normal" or do we have some kind of bug? Thanks in advance, Kevin Tag: Spam problem via HTTP Tag: 66801
  - 22
    - Anyone seen this? http://www.theregister.co.uk/security/security_report_windows_vs_linux/#myth2 at least it was not sponsored by one of the products being looked at--unlike some previous studies publicized on the web by a certain corporation. I use both products and I'm finding myself using XP less and less and enjoying computing more and more. Why are we locked into a cetain OS again? Mainly PR and false advertising, try it you'll like it.(less filling, tastes great : ) ) -- Use Linux and WinXp Tag: Spam problem via HTTP Tag: 66800
  - 23
    - Installing Fonts Hello, I am responsible for about 40 computers on a Windows 2000 Server, which some of them have XP Pro. Do not want users to be able to install software, so I have them set up as a User. Although, I have one user who needs to be able to install fonts as he needs them, but no other software or hardware. With User rights, we get a message "The ERASER.TTF is currently being used and cannot be replaced. Wait until Windows is finished using the file, and then try again." It doesn't say you don't have permissions to do this. When I give this individual Power User rights, he is able to install fonts with no error message. I don't want to give him Power User rights. If I give him Power User rights, he'll be able to install other software and hardware. Is there a work around to accomplish this? Any suggestions would be helpful. Thank You, -- Minione Tag: Spam problem via HTTP Tag: 66799
  - 24
    - File that manages login details Is there a file that manages the login details. Details of the users who has loged in, how long they logged in, time they loged out, if they chose shut down or hybernate ... etc is there a file that the administrator can view o see which all users have loged in Tag: Spam problem via HTTP Tag: 66791
  - 25
    - Event 533: User not allowed to logon at this computer I am the system administrator of 400 windows 2000 professional in a windows 2000 AD. From time to time, 1 or 2, may be 10 computers suddenly shows this error message "User not allowed to logon at this computer" or something like that, when a normal domain user tries to log on. The same user is able to log into other workstations that are in the same OU. Reboot does not solve the problem. Reset the computer account does not solve the problem. Leave the workstation for a few days does not solve the problem. Disjoin the workstation from domain and rejoin it back solve the problem. Users belong to the local administrators group are able to log onto the computer. I used the domain admin to logon and checked the local security settings. I found nothing wrong. I checked the local groups and found nothing wrong too. When I checked the event log, there were 533 events generated everytime a denied logon was attempted. Other than that there was nothing suspicious. I used "netdom" to verify the security channel and it returned an ok to me. I had turned off the workstation maintenance policy ages ago. That did not help. Any idea? Jeremy Tag: Spam problem via HTTP Tag: 66789

Hi Guys,

Not sure if this is the right newsgroup, but i have this really annouying
problem that i have a proxy server that when i check the logs is some how
generating spam from an outside IP address. when i stop the http service of
the proxy server the spam stops, below is a couple of line from the log files.

203.98.164.138 - - [29/Jan/2005:00:22:55 -0000] "CONNECT 168.144.1.79:25
HTTP/1.0" 200 425 - -
212.25.72.224 - - [29/Jan/2005:00:22:57 -0000] "CONNECT 213.133.104.11:25
HTTP/1.0" 200 345 - -

i cant find how this is happening, we have a firewall all the latest av/anti
spyware and ms updates and still it keeps happeing as soon as i start the
http service.

Any ideas much appreciated.

Top

Re: Spam problem via HTTP by N

N
Sat Jan 29 17:46:02 CST 2005

In article <8866A288-DB80-465D-92E9-60814A561611@microsoft.com>, =?Utf-8?B?
RGFuIHRoZSBtYW4=?= says...

> Not sure if this is the right newsgroup, but i have this really annouying
> problem that i have a proxy server that when i check the logs is some how
> generating spam from an outside IP address. when i stop the http service of
> the proxy server the spam stops, below is a couple of line from the log files.

> 203.98.164.138 - - [29/Jan/2005:00:22:55 -0000] "CONNECT 168.144.1.79:25
> HTTP/1.0" 200 425 - -
> 212.25.72.224 - - [29/Jan/2005:00:22:57 -0000] "CONNECT 213.133.104.11:25
> HTTP/1.0" 200 345 - -

> i cant find how this is happening, we have a firewall all the latest av/anti
> spyware and ms updates and still it keeps happeing as soon as i start the
> http service.

> Any ideas much appreciated.

If you don't understand how your proxy works, stop using it until you do
understand. Please. I don't use such a proxy, so I can't tell you how to
proceed. Unfortunately, if you fail to secure a proxy properly, it will be
abused by spammers trying to send their spam in such a manner that they
won't lose their Internet connections for their activity.

Start by reading the documentation for your proxy; manuals, help files,
whatever. Also, you might tell us which proxy server you are using.
Dedicated hardware? Software product? Have you checked the manufacturer's
web site?

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Top