Spyware Blaster 3.3

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Patch deployment files issue When you install Microsoft patches the files that are created are stored under a directory. I assume it is this is to allow the patches to be uninstalled. My question is: Is there a way of removing these files without jeopardizing the system? We currently have space issues (C drive) on some servers and the more patches that are issued will cause more problems. Thanks very much. Tag: Spyware Blaster 3.3 Tag: 68832
  - 2
    - is the _vti_pvt folder safe? i just found that this site http://www.broken-ice.com/hack_site/lessons/ has a link to a webpage on my site ( http://mysite/_vti_pvt/ ) (go to the bottom of first webpage and you will see a list of website addresses all ending with with _vti_pvt/ and my site is one of them. the problem is i don't understand why it is there (the site is in arabic !). i am guessing from the website adress that it has something to do with hacking (and i also figured out it has soemthing to do with frontpage) actually, the page in question belongs to my team mate. and the server is running on my computer. i am running Apache/2.0.52 (Win32) Server on win xp pro sp2 according to the control panel, i have both Microsoft Professional Edition 2003 as well as Microsoft XP Professional with FrontPage installed (i just found that out !) i have been using office 2003 though for the last one year. and i had just assumed that office 2003 installed OVER the previous install of office XP. is my system vulnerable becuase of this page ? if so, what should i do to protect it? if this is not the right newsgroup, pls let me know where i should go with this question. appreciate any help... thank you, julian. Tag: Spyware Blaster 3.3 Tag: 68825
  - 3
    - IPMSG.EXE Some of the users on our compnay network have been found to be using IP based network messeging program ipmsg.exe downloaded from some site.I have couple of queries: 1. Is it unsafe to permit such prorams to be there on network? 2. what are the issues? 3. Can this be stopped , say , by disabling Windows Messenger Service on individaul computers. 4.How to disable it from firewall? Regards Sanjeev Tag: Spyware Blaster 3.3 Tag: 68822
  - 4
    - problems with hotmail I sent a mail to a contact, but when the succesful delivery message appeared, the adress of my contact had been changed to "******@hotmail.cc" instead of "******@hotmail.com". That person never received the mail and I never received a delivery notification failure message. Where did that mail go? Why did it change if i had wroten ".com"? May I have any virus? Tag: Spyware Blaster 3.3 Tag: 68820
  - 5
    - Dream Pack? Need to get into PC w/PW from fired employee I'm trying to help a former client of mine who is somewhat elderly but still runs a small public accounting firm. He has fired his longtime trusted assistant after, you guessed it, she embezzled funds. She knew much more about computers than him and she was the network (small network) administrator. I think he has most problems under control but she placed a PW on her PC and it has important company files on it (in addition to evidence). I've heard of something called "Dream Pack" that is open source and cheap, and which will allow him to get into the PC and just change the password to whatever he wants and gain access to it. I do not have time to travel to his little office but I really want to help this old guy. He is like a grandfather type guy and I just want to point him in the direction of something that will open that computer and perhaps I can walk him through the steps over the phone. Has anybody heard of this software and can anybody give me any leads on this? I'm an Excel/Access/Word programmer but I don't know operating system or security stuff. Thanks for any help. -- RMC,CPA Tag: Spyware Blaster 3.3 Tag: 68804
  - 6
    - Permission Problem/RPC function failure I am having a permission problem with my Windows Server 2003 System. I am attempting to access a HP StorageWorks optical 220mx via QStar software. Qstar has troubleshot the issue to a permission problem. *Please note that I also have problems accessing folders/files on a fat partition of my drive as well and I believe this may be directly related to this same permissions problem. The following is an email explaining their (QStar) findings: Yahoo! Mail - wcdep@yahoo.com Print - Close Window From:"Corey Mayer" <cmayer@qstar.com> To:"'rae frainco'" <wcdep@yahoo.com>, kworkman@qstar.com Subject:RE: White County Sheriff Office Date:Thu, 3 Mar 2005 08:37:25 -0600 Hi Ray, Here is more detail of what is happening. When a user accesses any remote SMB server, Explorer opens srvcvs on share IPC$ and communicates thru srvcvs with NetShareEnum (which is Windows RPC function). If this fails (i.e. remote SMB server replies â??not supportedâ??) Explorer will then call SMB_TRANSACT with function LM_SHARE_ENUM_API, which is a regular request in SMB documentation. The NetShareEnum is Windows specific RPC call and Microsoft has never documented this function, therefore we cannot use this function. So, Explorer will first attempt to use Microsoft RPC function and then if this fails it will use standard SMB function. For your 2 users when they try to connect to QStar the regular Microsoft RPC function fails with â??not supportedâ?? and instead of calling SMB function the user attempts 10 times before giving up on Microsoft RPC function and using SMB function instead. From the debug logs we could see the user that has no issues did not attempt as many times. I am investigating this issue and trying to find a configuration parameter within Windows that will stop the users from attempting 10 times before giving up. If it is as you say "not a QStar issue", than please explain to me why these two personnel never previously had problems accessing the folder/files before it was copied to the jukebox and governed by the QStar system? I am making the assumption that prior to QStar you were using a share on a Windows machine. If so, then the reason is because a Windows server can accept the NetShareEnum connection. Hope this helps explain the situation we are seeing. Thanks Corey ------------------------------------ QStar Technologies, Inc. Corey Mayer Technical Support Engineer cmayer@qstar.com 99 Eglin Pkwy #37 Ft. Walton Beach, FL 32548 tel: 850-243-0900 ext. 209 fax: 850-243-4234 www.qstar.com ------------------------------------ From: rae frainco [mailto:wcdep@yahoo.com] Sent: Thursday, March 03, 2005 7:19 AM To: Corey Mayer; kworkman@qstar.com Subject: RE: White County Sheriff Office If it is as you say "not a QStar issue", than please explain to me why these two personnel never previously had problems accessing the folder/files before it was copied to the jukebox and governed by the QStar system? Corey Mayer <cmayer@qstar.com> wrote: Ray, I just wanted to give you an update. I have discussed the issue in more detail with my development team; they have concluded that this is not a QStar issue but Windows. I will do some investigation to see if we can find some configuration parameters within Windows to solve the issue with the 2 users. Thanks Corey ------------------------------------ QStar Technologies, Inc. Corey Mayer Technical Support Engineer cmayer@qstar.com 99 Eglin Pkwy #37 Ft. Walton Beach, FL 32548 tel: 850-243-0900 ext. 209 fax: 850-243-4234 www.qstar.com ------------------------------------ From: rae frainco [mailto:wcdep@yahoo.com] Sent: Tuesday, March 01, 2005 3:02 PM To: Corey Mayer Subject: RE: White County Sheriff Office And the fix is... Corey Mayer <cmayer@qstar.com> wrote: Ray, Looks like we found what the problem is. Authentication server responds up to 3 seconds. There are 2 types of SMB requests which can be sent to a SMB server from a SMB client b_ a regular and enhanced. Microsoft SMB server supports both, however QStar supports just the regular request. The reason why QStar only supports the regular request is because the enhanced request uses undocumented Microsoft RPC calls. So what happens is the client first sends enhanced request, QStar responds b_ not supported, then client sends regular request, QStar serves the request. Looking at the logs we found that one client performs this procedure just once, but the other client repeats it 10 times before using regular request and each time it also has to get authentication from the server. The behavior depends on client only. My development team feels that there must be some configuration for client communication properties, probably on the server. Also, my development team felt that 3 second response time from the authentication server was a bit slow the normal speed should be 0.5 seconds. Tag: Spyware Blaster 3.3 Tag: 68801
  - 7
    - Active Directory Does anyone know how to automatically join a predetermined OU in the active directory when you join a domain? Thank in advance. Mike Tag: Spyware Blaster 3.3 Tag: 68799
  - 8
    - CLSID_CCertView Hi all, I am using CoCreateInstance(CLSID_CCertView,...) I get the error "Undeclared identifier. --- CLSID_CCertView." I am using all the libs and dlls and headers.. eg . Certidl.lib, certadm.dll, Certsrv.h. Somebody please enlighten me... Is this a version conflict... I am using visual studio 6 on windows server 2003. i registered certadm.dll thanks in advance chan Tag: Spyware Blaster 3.3 Tag: 68792
  - 9
    - Security Audit Does anyone know if the Security Audit Log logs and entry when a user or user group is added to the Security Setting or a Network Share? Tag: Spyware Blaster 3.3 Tag: 68781
  - 10
    - Security Audit Does anyone know if the Security Audit Log logs an audit when a user or user group was added to the security setting of a Share or Hard Drive? Tag: Spyware Blaster 3.3 Tag: 68779
  - 11
    - Spyware Beta 1 Has anyone else encountered the problem of thier system rebooting or hanging from standbye mode after installing and running the Spyware Beta? Thanks Elaine Beaurauxgart-Weiderhoff Tag: Spyware Blaster 3.3 Tag: 68777
  - 12
    - Monitoring Servers Hey guys, I have a network with about 14 windows 2003 servers, Exchange 2003, and we also host our two website in house. We have a PIX firewall and an IDS System on the outside of the PIX. But I really need a good solution for securing and monitoring our servers and network. right now I really have no way of telling if someone has gotten in to our network. I've looked around a lot and havent really found anythign that will do what I need. Can someone give me some ideas? thats for all the help Jason Tag: Spyware Blaster 3.3 Tag: 68753
  - 13
    - Spyware assistance required!! I recently came across an app on my machine which I am told is a Spyware app with a threat capability described as 'guarded'. Meanwhile my virus update provider has told me that Microsoft provide a free Anti-Spyware app that can be downloaded from the M'Soft website which will guard and protect against such threats in future. Is this so? And if so can someone point me to the appropriate link? I use my PC for alot of security sensitive transactions and the idea of a Spyware app sitting on my PC is not particularly appealing? Can such apps compromise security by recording passwords etc ...?? Any help would be greatly appreciated, Don- Tag: Spyware Blaster 3.3 Tag: 68750
  - 14
    - security word hi, There is a word box on some websites that asks you to type what you see in it.I would like to know what is that and how dos it work. thanks Tag: Spyware Blaster 3.3 Tag: 68742
  - 15
    - Kelvir.B worm My PC infected by this Kelvir.B worm because I click on a URL in a message reading: "lol! see it! u'll like it" Any1 can help me.... HELLPPP !!! Thanks a bunch. Tag: Spyware Blaster 3.3 Tag: 68730
  - 16
    - Security Summit Downloads... Hi there, I have twice tried downloading the "Introduction to Programming with SQL Server 2005" materials from the Security Summit recently held in capital cities around OZ (the link is provided below). Unfortunately the file appears to be corrupt as it gives the following error when attempting to open it after d/load: "Powerpoint can't read this file. The file you tried to open does not appear to be a PowerPoint file (.ppt). Check the original file to find out the real file type; you may be able to edit it in another program designed for that file type." Can someone refer this to the appropriate MS personnel? Thanks, Kim. http://download.microsoft.com/documents/australia/security/summit/presentations/Introduction_To_Programming_With_SQL_Server_2005.ppt Tag: Spyware Blaster 3.3 Tag: 68728
  - 17
    - How to keep kids off of computer I have four girls between 8-13 years old and I don't want them to use the computer when I am at work... How can I password protect the computer to keep them off? Putting a password on the screen safer doesn't work, they will just reset the computer... Thanks for any help! Tag: Spyware Blaster 3.3 Tag: 68726
  - 18
    - Time and date lock I am running Windows 2003 Server with 15 client Windows XP workstations. It is configured as one domain with 15 users as part of an Active Directory. The users are not local users of the workstations, but log on to their XP workstations as users within the domain. What can I configure so that the users cannot change the time and/or date of the Windows XP workstations? Thanks. Tag: Spyware Blaster 3.3 Tag: 68723
  - 19
    - Microsoft Security Bulletins for March 2005 March 8, 2005 Today, no new security bulletins were released. Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summary: For March 2005 there are no new security bulletins being release so there will not be a summary bulletin. Revised Bulletins: Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711) http://www.microsoft.com/technet/security/Bulletin/ms05-002.mspx Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution (888113) http://www.microsoft.com/technet/security/Bulletin/ms05-015.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Spyware Blaster 3.3 Tag: 68713
  - 20
    - Password Hello: One of my colleagues has forgotten the administrator password for the server. What can be done about this? Do we have to format the drive? Thanks, TJ Tag: Spyware Blaster 3.3 Tag: 68707
  - 21
    - Obtaining permissions from recursive directories I want to say first that the new Security scripting site is great. Now, I have takent the security script for finding the permissions on folders and set it up as a function that recurses through folders and returns permissions for each folder. Tha problem I am having is that the script only retrieves the 4 basic groups with permissions after the recurse to a second level folder. The root of my path returns correctly, but folders under it do not. I have included the function below. Can any one help with why this doesn't work. Second, what would be the variable to add for inherited permissions? I would like to not have every folder reported back, only folders where the permissions change. Thanks.... Script Below *************************************************** strFolderName = "W:\Apps" row = 2 SE_DACL_PRESENT = &h4 ACCESS_ALLOWED_ACE_TYPE = &h0 ACCESS_DENIED_ACE_TYPE = &h1 FILE_ALL_ACCESS = &h1f01ff FOLDER_ADD_SUBDIRECTORY = &h000004 FILE_DELETE = &h010000 FILE_DELETE_CHILD = &h000040 FOLDER_TRAVERSE = &h000020 FILE_READ_ATTRIBUTES = &h000080 FILE_READ_CONTROL = &h020000 FOLDER_LIST_DIRECTORY = &h000001 FILE_READ_EA = &h000008 FILE_SYNCHRONIZE = &h100000 FILE_WRITE_ATTRIBUTES = &h000100 FILE_WRITE_DAC = &h040000 FOLDER_ADD_FILE = &h000002 FILE_WRITE_EA = &h000010 FILE_WRITE_OWNER = &h080000 ' Bind to Excel object. On Error Resume Next Set objExcel = CreateObject("Excel.Application") If Err.Number <> 0 Then On Error GoTo 0 MyVar = MsgBox ("Excel Application Not Found", 16, "Excel Application") Wscript.Quit End If On Error GoTo 0 strRightsPath = "H:\Groups & File Rights\RightsList.xls" objExcel.Workbooks.Add objExcel.Visible = "True" Set objSheet = objExcel.ActiveWorkbook.Worksheets(1) objSheet.Name = "Permission Listings" row = 2 ' Format the spreadsheet. objExcel.ActiveWindow.FreezePanes = False objExcel.Columns(1).ColumnWidth = 35 objExcel.Columns(2).ColumnWidth = 110 objExcel.Columns(3).ColumnWidth = 45 objExcel.Columns(4).ColumnWidth = 255 objExcel.Columns(5).ColumnWidth = 110 objSheet.Cells(1,1).value = "Folder Path" objSheet.Cells(1,2).Value = "Group Name" objSheet.Cells(1,3).value = "Permissions Allowed" Set objShell = WScript.CreateObject("WScript.Shell") Set FSO = CreateObject("Scripting.FileSystemObject") Subfolder FSO.GetFolder(strFolderName) objExcel.ActiveWorkbook.SaveAs strRightsPath objExcel.ActiveWorkbook.Close objExcel.Application.Quit MyVar = MsgBox (""&location&" "& "Permission List Successfully generated", 65, "PERMISSION LIST STATUS") Function Subfolder(Folder) For Each objFolder In Folder.Subfolders Set objWMIService = GetObject("winmgmts:") Set objFolderSecuritySettings = _ objWMIService.Get("Win32_LogicalFileSecuritySetting='" & strFolderName & "'") intRetVal = objFolderSecuritySettings.GetSecurityDescriptor(objSD) intControlFlags = objSD.ControlFlags If intControlFlags AND SE_DACL_PRESENT Then arrACEs = objSD.DACL For Each objACE in arrACEs ' If objACE.AceType = ACCESS_ALLOWED_ACE_TYPE Then ' WScript.Echo vbTab & "Allowed:" ' Elseif objACE.AceType = ACCESS_DENIED_ACE_TYPE Then ' WScript.Echo vbTab & "Denied:" ' End If If objACE.AccessMask AND FILE_ALL_ACCESS Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_ALL_ACCESS" row = row + 1 End If If objACE.AccessMask AND FOLDER_ADD_SUBDIRECTORY Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_ADD_SUBDIRECTORY" row = row + 1 End If If objACE.AccessMask AND FILE_DELETE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_DELETE" row = row + 1 End If If objACE.AccessMask AND FILE_DELETE_CHILD Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_DELETE_CHILD" row = row + 1 End If If objACE.AccessMask AND FOLDER_TRAVERSE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_TRAVERSE" row = row + 1 End If If objACE.AccessMask AND FILE_READ_ATTRIBUTES Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_READ_ATTRIBUTES" row = row + 1 End If If objACE.AccessMask AND FILE_READ_CONTROL Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_READ_CONTROL" row = row + 1 End If If objACE.AccessMask AND FOLDER_LIST_DIRECTORY Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_LIST_DIRECTORY" row = row + 1 End If If objACE.AccessMask AND FILE_READ_EA Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_READ_EA" row = row + 1 End If If objACE.AccessMask AND FILE_SYNCHRONIZE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_SYNCHRONIZE" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_ATTRIBUTES Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_ATTRIBUTES" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_DAC Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_DAC" row = row + 1 End If If objACE.AccessMask AND FOLDER_ADD_FILE Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FOLDER_ADD_FILE" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_EA Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_EA" row = row + 1 End If If objACE.AccessMask AND FILE_WRITE_OWNER Then objSheet.Cells(row, 1).Value = objFolder objSheet.Cells(row, 2).Value = objACE.Trustee.Name objSheet.Cells(row, 3).Value = "FILE_WRITE_OWNER" row = row + 1 End If Next Else WScript.Echo "No DACL present in security descriptor" End If Subfolder objFolder Next End Function *************************************************** Tag: Spyware Blaster 3.3 Tag: 68695
  - 22
    - Microsoft Anti-Spyware Software Auto Scan I want to have Microsoft Anti-Spyware run at night on my Win2K network when everyone is logged off. I tried scheduling the scan in the software but this requires you to be logged in, or may not run because of lack of rights when someone is logged off. I also tried putting it in the task scheduler with no results. Let me know how I can run this scan whenever I want with no one logged in. Tag: Spyware Blaster 3.3 Tag: 68694
  - 23
    - Problems with Virtual Server 2005 Installation Hello all, I am trying to run Virtual Server 2005 on a Windows 2003 Server system. I initially had trouble getting the installation program to realize that I was running IIS 6.0 and it kept denying creation of virtual site. I got the latest build and this was bypassed. Now after installation, when I browse to the website, it pops up user credentials. I gave it a local administrative account (and tried many other accounts too) - but it keeps throwing back a HTTP 401 error message. Things I tried already: 1. I checked out the posts that mentioned the Launch permissions to be given to the Virtual Server DCOM object. Did that. In fact, my screen looked a little different that most of those in the posts - not sure why. I don't get a Remote Activation checkbox at all. 2. I tried allowing all unrecognized ISAPI and CGI applications in IIS. Didn't help. 3. I tried changing to Anonymous Access, Basic Authentication, etc. Didn't work. I guess there is some problem with IIS being able to launch .exe (vswebapp.exe is the CGI application that is to be run). Any pointers? -- blog: pandurang.thinkingMS.com Tag: Spyware Blaster 3.3 Tag: 68690
  - 24
    - Can I customise standardWindows lockot message? Hi, I would like to customise "Unable to log you on because your account has been locked out, please contact your administrator." to another message. Can I do it? I know that we can setup a message text for users attempt to login in the Domain Security Policy. Is there a similar for a Account Lockout message? Charles Tag: Spyware Blaster 3.3 Tag: 68677
  - 25
    - Can a standard windows lockout message customize? Hi, I would like to customise "Unable to log you on because your account has been locked out, please contact your administrator." to another message. Can I do it? I know that we can setup a message text for users attempt to login in the Domain Security Policy. Is there a similar for a Account Lockout message? Charles Tag: Spyware Blaster 3.3 Tag: 68676
- Next
  - 1
    - Task Manager permissions. Is there a way to allow non-administrators to permission to "Show processes for all users" in task manager? I have some people who can benefit from this information but giving them administrative rights is inappropriate. The platform is Windows Server 2003. Thank you. Tag: Spyware Blaster 3.3 Tag: 68668
  - 2
    - Is there a way to track/log policy changes? Hello, Beofre I start, this question is not about auditing files or folders (and my searching thus far seems to always lead me down that road)... what I'd like to know is if there is a way/setting which will log when someone changes a group policy. For example, if someone (yes, I understand that they'd have to do permission to do this) goes into the domain security settings and disables the prevent users from installing print drivers setting, how can I get that in the log? Thanks! Tag: Spyware Blaster 3.3 Tag: 68663
  - 3
    - Virtual Server 2005 not running on Windows 2003 Hello all, I am trying to run Virtual Server 2005 on a Windows 2003 Server system. I initially had trouble getting the installation program to realize that I was running IIS 6.0 and it kept denying creation of virtual site. I got the latest build and this was bypassed. Now after installation, when I browse to the website, it pops up user credentials. I gave it a local administrative account (and tried many other accounts too) - but it keeps throwing back a HTTP 401 error message. Things I tried already: 1. I checked out the posts that mentioned the Launch permissions to be given to the Virtual Server DCOM object. Did that. In fact, my screen looked a little different that most of those in the posts - not sure why. I don't get a Remote Activation checkbox at all. 2. I tried allowing all unrecognized ISAPI and CGI applications in IIS. Didn't help. 3. I tried changing to Anonymous Access, Basic Authentication, etc. Didn't work. I guess there is some problem with IIS being able to launch .exe (vswebapp.exe is the CGI application that is to be run). Any pointers? -- blog: pandurang.thinkingMS.com Tag: Spyware Blaster 3.3 Tag: 68662
  - 4
    - SMS Client Installation & Microsoft Anti-Spyware Program Sorry if this has been asked already (if so, can someone point me to the answer! I was told to post here instead of the SMS forums) When I push new clients to PC's on the network, it will not install on machines that have the Microsoft Anti-spyware software installed because it asks the user if they wish to make the dll change and of course, if you haven't warned them ahead of time or they have forgotten they usually press no which stops the client. Is there a way around this issue? Thx Dave Tag: Spyware Blaster 3.3 Tag: 68661
  - 5
    - windows xp changes We have an application that worked fine in Windows 2000, but now fails in Windows XP. It fails both when the initial installer is running when it asks for the Regkey and if I manually install the app it fails when it tries to retrieve the Regkey from the registry and validate the # of allowable users, which components to load, etc. The error message just says "Cryptography Error". I have tried unsuccessfully to contact the app's developers. My question is this: Can anyone think of any changes from Win2000 to WinXP that would account for this? Tag: Spyware Blaster 3.3 Tag: 68659
  - 6
    - XP/2003 vulnerable to LAND attack? from http://www.securityfocus.com/archive/1/392354 - Windows Server 2003 and XP SP2 (with Windows Firewall turned off) are vulnerable to LAND attack. LAND attack: Sending TCP packet with SYN flag set, source and destination IP address and source and destination port as of destination machine, results in 15-30 seconds DoS condition. Tools used: IP Sorcery for creating malicious packet, Ethereal for sniffing it and tcpreplay for replaying. Results: Sending single LAND packet to file server causes Windows explorer freezing on all workstations currently connected to the server. CPU on server goes 100%. Network monitor on the victim server sometimes can not even sniff malicious packet. Using tcpreplay to script this attack results in total collapse of the network. Vulnerable operating systems: Windows 2003 XP SP2 - Can anyone confirm / deny this ? Steve Tag: Spyware Blaster 3.3 Tag: 68657
  - 7
    - Auto Logon? I set up my user name and password. Someone wanted to use my computer and just put in my user name(no password) then slicked the cancel button. It sogged them on. How do I stop this? I want it so that you HAVE to put in the password. Tag: Spyware Blaster 3.3 Tag: 68656
  - 8
    - Script file denied permission to run with Spyware I have a dos program that I need to run that is blocked by the Spyware. It does not allow me to accept this program. Is there a way to suspend the Spyware program so I can run my program? Tag: Spyware Blaster 3.3 Tag: 68652
  - 9
    - Grant access to share Hello, I try to grant access to shared folder in witch, the users can create and modify files and directories, but not to delete them. I do this: I grant access to the directori "modify" and in details "deny delete" and "deny delete files and folders". The result is that the users can modify and copy new files and directories, but it is some problem with create new files and direcotry - if I create the file with WordPad, there is a message like "The file exist, do you want to replace it?". Click on "yes" and the file is created. But when I try to create the file with MS Word or MS Excel the same message pop-up and after my confirmation there is message that the directory is protected. But there is a file with the selectet file name, created with lenght "0" bytes. Can somebody help me with this? Thank you in advance. Tag: Spyware Blaster 3.3 Tag: 68641
  - 10
    - Club Shepherd 2005 v1.00 WILL Re-solve ALL Derivatives of A CHEATE I am having A Time with being CHEATED UPON, ON-LINE The Zone, so I thought HARD AND Worked an Estimated 225++ hrs, I honestly WORKED 700 Hours, I estimate to RE-Solve cheaters! Because, They are Sooooooo Rampant on-line the Zone! To Solve Cheaters and TO Add many features Specialized to the Zone, I created, Club Shepherd 2005 v1.00 which U can Re-view under ZoneSysops.com! THX! Tag: Spyware Blaster 3.3 Tag: 68625
  - 11
    - Home networking I have two desktops. One I wish to make very secure (Nortions IS, Virus scanner, no file sharing, Win XP prof). The other one is old for internet use only. It is running Win 95 with a copy of opera and no security software. Both are connected to a linksys router. both have file/printer sharing turned off. I have no concern for anything getting on the old pc, but I just dont want to jeopordize the new one. If I go to a website that has some malicious code or intentions, is there a hazard for my good PC? Thank you !!! Tag: Spyware Blaster 3.3 Tag: 68608
  - 12
    - xp pro / xp home / profiles I have just bought a laptop w/ homeXP. I created an account on the local machine. A week later I upgraded to XPpro. I then made my laptop join a domain. When I did this, it created an entirely new profile. I don't want a new profile, I spent the entire week setting up the profile I have for the local machine. Also, it might have been a waste of money to upgrade to pro, as I can log in and use the resources in the domain with no problems. If a user wants to use their own laptop for work at the office (this user is a partner at a brokerage). Do they need to have pro? Since I was able to use the network freely with a local machine login, what is the point of a domain from security perspective? I hope I haven't been too scattered with my question, I'm having trouble defining what I don't know. (which seems quite a bit). Thanks in advance. Tag: Spyware Blaster 3.3 Tag: 68599
  - 13
    - Patch2.exe Every time I run AVG it finds a virus in Patch2.exe. Can I safely remove this file? Thakyou. Tag: Spyware Blaster 3.3 Tag: 68590
  - 14
    - How do i customise an account lockout message? Hi, I would like to customise "Unable to log you on because your account has been locked out, please contact your administrator." to another message. How can I do it? I know that we can setup a message text for users attempt to login in the Domain Security Policy. Is there a similar for a Account Lockout message? Tag: Spyware Blaster 3.3 Tag: 68583
  - 15
    - IE vs. Netscape in security I've been downloading the patches for a year and have Norton AV. Is Netscape still safer than IE? I prefer to use IE because I'm used to it. I read the Wired cover story on the Firefox creator and he said he got a nasty virus thing (through IE) that made his computer send tons of spam but it didn't mention the details and it didn't say if Netscape wouldn't have done the same thing. Tag: Spyware Blaster 3.3 Tag: 68565
  - 16
    - Huge security hole in Kerio 2.1.5 I've just been told that Kerio 2.1.5, which was considered to be the (or one of the) best choice, doesn't "see" (and doesn't intercept...) fragmented packets, and thus wouldn't be efficient toward an attack based on fragmented packets (see below) In these conditions, which FW can be suggested, which would be simultaneously - free - parameterizable - controlling both IN and OUT (thus, not Win WP FW...) - efficient (thus, not kerio 2.1.5...) Thanks for advice About Kerio issue, this is the very simple test I've been suggested to do... and whose result is a little bit frightening : - Create a Kerio rule denying all Input ICMP (anwsers to ping request), and put this rule in 1st position - ping whoever_you_want : no answer. OK. - ping -l 5000 whoever_you_want : damned, you get answer ! (-l parameter, setting a packet size above MTU obliged ping to fragment) Even more serious : don't even add any rule, but with systray icon, have the choice "Stop traffic" (or something like that, my own Kerio is in french, and I don't know the exact label in english) Even in this case, "simple" ping doesn't work, but "fragmented" ping does... -- Laurent GRENET Tag: Spyware Blaster 3.3 Tag: 68564
  - 17
    - Lockout policy Hi I applied lockou pocily at domain level. So, i moved a computer account to OU where the Block inheritance was ENABLE, so i though that the domain policy, will not applying on this OU, but always that i tried to logon, the policies it was applied. So, what am i doing wrong ??? Thanks Tag: Spyware Blaster 3.3 Tag: 68561
  - 18
    - backing up Is it possible to completely save the settings that I have now and move them to a partition on my hard drive so that I can wipe clean the C partition and reinstall xp? I have a 30 gb NTFS HD which is split into 3 partitions. Can anyone take me through the process and recommend a way of totally wiping clean the c partition. TIA Tag: Spyware Blaster 3.3 Tag: 68557
  - 19
    - Homepage Hijacking Help!! i'm new to the computer stuff...downloaded the beta progm. now, my homepage is kronge.com...not my preferred. tried changing by tools, and in the spyware program...not working. still kronge.com. how do i allow my roadrunner.com page via internet provid. be default. please be simple...still learning tech stuff. also, i've gotten notices that the hijacking has been blocked by beta...but it's NOT being prevented. Thanks. Tag: Spyware Blaster 3.3 Tag: 68547
  - 20
    - Question about GPO Hi 1) If applied the policies about Password expiration and so on and the user has the option of Password never expires, the policies wouldn't be effective on it ??? 2) If the user is connecting throug RAS, the policies will be apply in the home machine or whatever??? Many thanks Tag: Spyware Blaster 3.3 Tag: 68532
  - 21
    - Power Users Local Group Access I have noticed that after created a new local user account and added this local account to the local Power Users Group it does not have the ability to write to the root of C: unlink any other version of windows e.g. Win2000. Is this by design. If so could you direct me to some MS Documentation. Thanks John Tag: Spyware Blaster 3.3 Tag: 68529
  - 22
    - Fact or Fiction? Hello, is it true that if you do an online transaction involving personal information (ie, checking acct., credit card, etc...) that you should restart your computer immediately after completing the transaction? I once read that the hackers don't have access to the info. if you shut down your computer afterwards ????? And one more question, how do I know that my computer is safe? Please advise and thank you for your time! -- TJ Tag: Spyware Blaster 3.3 Tag: 68527
  - 23
    - Howto export ipsec polices with ipseccmd ? Hi, later it was quite simple : netsh ipsec static exportpolicy ... but in Windows XP SP2 it cannot be done in this way. So, what is the key to export ipsec policy from local machine to file and after then import it to another machine ? Is it possible ? Thanks for Your attention, Robert Tag: Spyware Blaster 3.3 Tag: 68526
  - 24
    - How to change the password in multiple Schedule Task at the same t I have many servers running schedule task and I need to change the password in all the task at the same time. Is there a way to do this. Thanks. Tag: Spyware Blaster 3.3 Tag: 68525
  - 25
    - There's no reason to forget (or remember) most passwords! I'm puzzled by the number of people who don't take basic precautions to backup critical passwords. I think some of this is due to ignorance of available software. There are great freeware programs like "Password Corral" that put an end to the stories of forgetting one's password. This presumes you have the software installed on all your machines and update the master file thereon. It's not that difficult. http://www.cygnusproductions.com/freeware/pc.asp (Password Corral) The master password (to run Password Corral, etc.), should be at least 10 digits long and totally unrelated to your birthday or personal data, but unforgettable. Remember just that one password and you can unlock all the others when needed. It allows you to have dozens of different passwords with no fear of remembering them. My general tactic is to use a different password (usually gibberish) with every website I make purchases from. If some hacker or site employee abuses one they won't know my others and the damage will be limited. I also have 2 or 3 that are easy to remember for less critical sites. And I never write them on paper (security risks aside) because I never _use_ them on paper. JT Tag: Spyware Blaster 3.3 Tag: 68511

Spyware Blaster 3.3 has been issued and is now available for download at:
http://www.javacoolsoftware.com/sbupdate.html

Tom

Top

Re: Spyware Blaster 3.3 by jopa66

jopa66
Fri Mar 11 19:10:29 CST 2005

Upgrade Instructions

It is recommended that you uninstall your current version of
SpywareBlaster before installing the new version. To do this:

1.) Open SpywareBlaster and press the "Disable All Protection" link
under "Quick Tasks".
2.) Close SpywareBlaster.
3.) Go to Add/Remove Programs and uninstall the entry named
"SpywareBlaster v3.2"
4.) Download the latest SpywareBlaster installer from the link above and
run it.
5.) Enjoy the new version of SpywareBlaster!
--
~john aka: jopa

--
~john aka: jopa

In news:%23P1$mfpJFHA.4028@tk2msftngp13.phx.gbl,
Tom Pepper Willett <tompepper@mvps.org> typed:
> Spyware Blaster 3.3 has been issued and is now available for download at:
> http://www.javacoolsoftware.com/sbupdate.html
>
> Tom

Top