THANK YOU

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
 - 1
 - update337.exe Is this legit, or a cleverly disguised virus? I went to open it, & an alert said that "publisher cannot be determined because ... authenticode signature not found." Thanks Tag: THANK YOU Tag: 34325
 - 2
 - Viruses, Worms, IP Addresses, and Different Computers? I made an earlier post about my being bombarded with 400-500 virus/worm email messages a day. This is despite being up to date with all the AV's, MS updates, and the like. I turn off my machine at night and the next morning 8 hours later I have ~200 email virus messages waiting for me. I am an oldtimer network guy (SS7 on Unix platforms) and unfortunately am not too knowledgeable in the TCP/IP arena or Win-XP. My concern now is being "hacked" over the internet, not by email but by some other technique using my IP address. (I do know that the current SWEN email scam simply generates tons of messages for my specific email address and opening an email independent of IP address or computer causes the problem). So I have the following questions: 1) Do I get a different IP address every time I connect to the internet? (I use Earthlink dial-up...like I said I'm an oldtimer) 2) Can two users share the same IP address from a remote perspective and then the ISP multiplexes to the correct destination? 3) I have read that hacker's can somehow send malicious code to my machine and get my personal info (eg - passwords, credit card numbers, etc). Can they do this other than email? If so, how? (a concise explanation will suffice) 4) How would my specific computer be targeted if my IP address changes? Are the hacker's programs just "out there" continually pinging (or whatever) to see what they can find? 5) If I used a different computer would I be just as susceptible or is my computer on a (s)hit-list? Or is my email address used to get my current IP address and then an invasion is attempted? (Again I know the email virus issue is still relevant on a different computer). 6) Fortunately the email issue has been somewhat mitigated in that I have been using Webmail. But I have a question: How is the issue of opening an attachment handled with Webmail? Is there a danger in this? I know for the majority of you these are very dumb and basic questions, but I appreciate your help--this current SWEN worm/virus is my first security problem and now I am pretty worried. Thanks, Ragtopgeek Tag: THANK YOU Tag: 34323
 - 3
 - got a virus but didnt download Hey I got the Virus I beleive. I keep getting Emails telling me that something I sent to someone didnt go through. I did not download the patch from the bogus microsoft email. How is this possible now?? Tag: THANK YOU Tag: 34315
 - 4
 - can not log in interactively On my DC I am locked out as the Administrator with a message stating that the local computer policy does not allow you to log on interactively. I have restarted with out directory services and am able to change the local computer policy settings however, I can not change the Domain level security settings because I do not have AD available to me. I have tried using NTRIGHTS with a message of "success" When I restart, I still can not log it. I have also tried connecting remotely using terminal services but still recieve the same message. Is there anything I can do, short of reinstalling to remove this right at the domain level. I am able to log into a client computer as administrator and I installed the administrator tools but was, once again, not able to get access to AD. Any help would be appreceiated!! thanks. jason/minnesota Tag: THANK YOU Tag: 34309
 - 5
 - Security Certificate Every time i go to a secure site. I get this "Security Alert" that this site has an expired or not yet valid certificate. It happens to all of them.....I tell it to install certificate but every time i go back it brings up the warning again....HELP PLEASE.... Tag: THANK YOU Tag: 34297
 - 6
 - install.exe I keep getting an email from quoted Microsoft entitled "latest security update" or something similar from the following and they seem to change on a daily basis. All of the emails have various attachments (upgrade95.exe, install.exe, etc...) Here are some of the message sources, and some do seem to be coming from Microsoft. How can I stop this?: Return-Path: <vallewis@btopenworld.com> Received: from einsteinium.btinternet.com ([194.73.73.147] verified) by remt30.cluster1.charter.net (CommuniGate Pro SMTP 4.0.6) with ESMTP id 35155949; Sun, 21 Sep 2003 08:41:26 -0400 Received: from host81-128-187-136.in-addr.btopenworld.com ([81.128.187.136] helo=sjmotu) by einsteinium.btinternet.com with smtp (Exim 3.22 #23) id 1A13Vx-0002e1-00; Sun, 21 Sep 2003 13:40:33 +0100 FROM: "Network Security Division" < > TO: "Partner" < > SUBJECT: Last Patch Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="ndidbpxhdck" Message-Id: <E1A13Vx-0002e1-00@einsteinium.btinternet.com> Date: Sun, 21 Sep 2003 13:40:33 +0100 AND Return-Path: <vallewis@btopenworld.com> Received: from einsteinium.btinternet.com ([194.73.73.147] verified) by remt30.cluster1.charter.net (CommuniGate Pro SMTP 4.0.6) with ESMTP id 35166762 for jonfox@charter.net; Sun, 21 Sep 2003 08:56:41 -0400 Received: from host81-128-187-136.in-addr.btopenworld.com ([81.128.187.136] helo=diwso) by einsteinium.btinternet.com with smtp (Exim 3.22 #23) id 1A13Wv-0002ko-00; Sun, 21 Sep 2003 13:41:33 +0100 FROM: "Administrator" <emailengine@yahoo.com> TO: "Internet Recipient" <user@mxdomain.net> SUBJECT: Error Advice Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="dtveocl" Message-Id: <E1A13Wv-0002ko-00@einsteinium.btinternet.com> Date: Sun, 21 Sep 2003 13:41:33 +0100 OR Return-Path: <nussbicker@infonie.fr> Received: from mail.libertysurf.net ([213.36.80.91] verified) by remt19.cluster1.charter.net (CommuniGate Pro SMTP 4.0.6) with ESMTP id 165515007 for jonfox@charter.net; Sun, 21 Sep 2003 18:59:57 -0400 Received: from dcxaq (81.166.53.166) by mail.libertysurf.net (6.5.034) id 3F55821100A77460; Mon, 22 Sep 2003 00:55:11 +0200 Date: Mon, 22 Sep 2003 00:55:11 +0200 (added by postmaster@libertysurf.fr) Message-ID: <3F55821100A77460@mail04.pds.libertysurf.fr> (added by postmaster@libertysurf.fr) FROM: "Network Storage System" <masterroutine@puremail.net> TO: "email recipient" <receiver@mxdomain.com> SUBJECT: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="cterqfmhjvmw" AND Return-Path: <aneo@libertysurf.fr> Received: from mail.libertysurf.net ([213.36.80.91] verified) by remt20.cluster1.charter.net (CommuniGate Pro SMTP 4.0.6) with ESMTP id 167964851 for jonfox@charter.net; Mon, 22 Sep 2003 07:42:38 -0400 Received: from tinm (213.36.170.175) by mail.libertysurf.net (6.5.034) id 3F5300E500D9AB67; Mon, 22 Sep 2003 13:32:16 +0200 Date: Mon, 22 Sep 2003 13:32:16 +0200 (added by postmaster@libertysurf.fr) Message-ID: <3F5300E500D9AB67@webmail03.pds.libertysurf.fr> (added by postmaster@libertysurf.fr) FROM: "Microsoft" <vfrxui@news_msn.com> TO: "MS Corporation User" <user@news_msn.com> SUBJECT: Last Net Security Update Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="bsvzcxdll" Tag: THANK YOU Tag: 34295
 - 7
 - OE is blocking attachments I have read for hours & have not discovered how to keep OE from block attachments send to me. I recieve a pop up stating: OE has blocked an unsafe attachement. Yet it is from a know friend & I know it is not an unsafe attachment. This has only started in the last few months. WHY IS IT DOING THIS? HELP. Tag: THANK YOU Tag: 34280
 - 8
 - Is Cumulative Patch OK? I run Windows 98. I received an e-mail today supposedly from MS telling me to download "September 2003, Cumulative Patch." The e-mail had the MS logo and looked real. The download was an attachment, "Installation89.exe". When I clicked to open it, I got an MS Security Warning window that said the publisher could not be determined because an authenticode signature was not found. It sure seems if it were authentically from MS it would have a signature. So I didn't open it. Is it for real? Tag: THANK YOU Tag: 34269
 - 9
 - Messages from Microsoft In the last three days I have received over 100 messages from Microsoft regarding security patches etc. I have not opened any of them because the sheer quantity has made me very suspicious. They are all entitled Last Srecurity Update, Latest Critical Security Patch, Net Security Patch, Net Critical Pack etc etc. Should I just delete the lot? Is microsoft under some sort of DOS attack? Tag: THANK YOU Tag: 34268
 - 10
 - History in address bar If you clear history how do some addresses stay in when you begin typing and how do you get rid of them? Tag: THANK YOU Tag: 34265
 - 11
 - MS03-039 Apply Problems I am trying to apply the MS03-039 patch on NT 4 (6a) workstations. I have a batch of particulary troublesome boxes that won't accept the patch for whatever reason. When I run the patch it appears to have successfully run, says the patch is installed, and asks to reboot. However, upon the reboot the patch isn't listed in the registry, or in the add/remove programs listing and the files that should have been dropped don't version increase to the correct version. I sent the patch down through Marimba with the silent and suppress reboot switches, as well as connecting to the boxes with remote control software and running the patch manually with the gui. The patch always returns an exit code of zero to marimba and never returns an error from the gui. Anyone have some suggestions to try? I spoke briefly with MS's phone support and they said that it would be OK if I just bundled up the three files and new registry keys and dropped them onto the machines. Anyone had any luck with that route? Thanks for you help! Chad Tag: THANK YOU Tag: 34262
 - 12
 - KB824146scan results are inconsistant? We have applied the ms03-039 patch to all managed PCs in our environment. We are now using the KB824146scan program to identify "unmanaged" vulnerable PCs. However, we are getting inconsistant results from the scanner. On a W2KSP3 workstation (PC-A for example) the scanner will say that PC-A is patched with both patches one day, patched with only one patch the next day and completely unpatched the next! On NT4SP6a workstations, we are receiving "error 997" which is explained in Knowledge Base Article - 827363. Unfortunately we do not have the RestrictAnonymous reg key in out build AND, even after adding it and setting it to 0, we still receive the "error 997." Any ideas? Tag: THANK YOU Tag: 34261
 - 13
 - virus i have received the Worm.Automat.AHB virus every day several times a day from someone using this email address. mgtzcussej@support.msdn.com. i want microsoft or someone in microsoft to find this person and shut him down. he can't infect my computer and is annoying me. i know it is a valid address and i am reporting this to my isp and will press charges against this and three other individuals when i find them. Tag: THANK YOU Tag: 34260
 - 14
 - KB824146scan.exe Issues We have applied the ms03-039 patch to all managed PCs in our environment. We are now using the KB824146scan program to identify "unmanaged" vulnerable PCs. However, we are getting inconsistant results from the scanner. On a W2KSP3 workstation (PC-A for example) the scanner will say that PC-A is patched with both patches one day, patched with only one patch the next day and completely unpatched the next! On NT4SP6a workstations, we are receiving "error 997" which is explained in Knowledge Base Article - 827363. Unfortunately we do not have the RestrictAnonymous reg key in out build AND, even after adding it and setting it to 0, we still receive the "error 997." Any ideas? Tag: THANK YOU Tag: 34256
 - 15
 - Unsolicited emails from MS I have received two unsolicited emails purportedly from MS, one with an attachement called Pack1452.exe and the other called Installation711.exe Are these real and from Microsoft or are they things which will attack my PC - I'd love to know before I execute them! Tag: THANK YOU Tag: 34255
 - 16
 - Trojan.ByteVerify Virus Infection Risks? A Norton Anti-Virus scan just detected the Trojan.ByteVerify virus on my system and I've removed it, apparently successfully. I'd be grateful if anyone could tell me whether I should regard information held on or keyed into my system in the period since the last clear scan as compromised? I should say that I am running Norton Personal Firewall. Dick Kingsland Tag: THANK YOU Tag: 34254
 - 17
 - FW: Look at these security patch from M$ Corporation --hhcixrcu Content-Type: multipart/related; boundary="yhiqvwcfbtj"; type="multipart/alternative" --yhiqvwcfbtj Content-Type: multipart/alternative; boundary="vwayduhgslhlq" --vwayduhgslhlq Content-Type: text/plain Content-Transfer-Encoding: quoted-printable MS Customer this is the latest version of security update, the "September 2003, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three newly discovered vulnerabilities. Install now to maintain the security of your computer from these vulnerabilities. This update includes the functionality = of all previously released patches. System requirements: Windows 95/98/Me/2000/NT/XP This update applies to: - MS Internet Explorer, version 4.01 and later - MS Outlook, version 8.00 and later - MS Outlook Express, version 4.01 and later Recommendation: Customers should install the patch = at the earliest opportunity. How to install: Run attached file. Choose Yes on displayed dialog box. How to use: You don't need to do anything after installing this item. Microsoft Product Support Services and Knowledge Base articles = can be found on the Microsoft Technical Support web site. http://support.microsoft.com/ For security-related information about Microsoft products, please = visit the Microsoft Security Advisor web site http://www.microsoft.com/security/ Thank you for using Microsoft products. Please do not reply to this message. It was sent from an unmonitored e-mail address and we are unable = to respond to any replies. ---------------------------------------------- The names of the actual companies and products mentioned = herein are the trademarks of their respective owners. Copyright 2003 Microsoft Corporation. --vwayduhgslhlq Content-Type: text/html Content-Transfer-Encoding: quoted-printable <HTML> <HEAD> <style type=3D'text/css'>.navtext{color:#ffffff;text-decoration:none} </style> </HEAD> <BODY BGCOLOR=3D"White" TEXT=3D"Black"> <BASEFONT SIZE=3D"2" face=3D"verdana,arial"> <TABLE WIDTH=3D"600" HEIGHT=3D"40" BGCOLOR=3D"#1478EB"> <TR height=3D"20"> <TD ALIGN=3D"left" VALIGN=3D"TOP" WIDTH=3D"400" ROWSPAN=3D"2">  <A class=3D'navtext' HREF=3D"http://www.microsoft.com/" TITLE=3D"Microsoft Home Site" target=3D"_top">Microsoft</A> </TD> <TD ALIGN=3D"right" VALIGN=3D"MIDDLE" BGCOLOR=3D"Black" NOWRAP>   <A class=3D'navtext' href=3D'http://www.microsoft.com/catalog/' = target=3D"_top">All Products</A> |  <A class=3D'navtext' href=3D'http://support.microsoft.com/' = target=3D"_top">Support</A> |  <A class=3D'navtext' href=3D'http://search.microsoft.com/' = target=3D"_top">Search</A> |  <A class=3D'navtext' href=3D'http://www.microsoft.com/' target=3D_top> Microsoft.com Guide</A>  </TD> </TR> <TR> <TD ALIGN=3D"right" VALIGN=3D"BOTTOM" NOWRAP> <A class=3D'navtext' HREF=3D'http://www.microsoft.com/' TARGET=3D" top"> Microsoft Home</A>   </TD> </TR> </TABLE>  <IMG SRC=3D"cid:ccdntyu" BORDER=3D"0"> <TABLE WIDTH=3D"600"><TR><TD> MS Customer this is the latest version of security update, the "September 2003, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three newly discovered vulnerabilities. Install now to maintain the security of your computer from these vulnerabilities. This update includes the functionality = of all previously released patches. </TD></TR> </TABLE> <TABLE BORDER=3D"1" CELLSPACING=3D"1" CELLPADDING=3D"3" WIDTH=3D"600"> <TR VALIGN=3D"TOP"> <TD NOWRAP><IMG SRC=3D"cid:gmxsdzn" = ALIGN=3D"absmiddle" BORDER=3D"0"> System requirements </TD> <TD NOWRAP>Windows 95/98/Me/2000/NT/XP</TD> </TR> <TR VALIGN=3D"TOP"> <TD NOWRAP><IMG SRC=3D"cid:gmxsdzn" = ALIGN=3D"absmiddle" BORDER=3D"0"> This update applies to </TD><TD NOWRAP> MS Internet Explorer, version 4.01 and later MS Outlook, version 8.00 and later MS Outlook Express, version 4.01 and later </TD> </TR> <TR VALIGN=3D"TOP"> <TD NOWRAP><IMG SRC=3D"cid:gmxsdzn" = ALIGN=3D"absmiddle" BORDER=3D"0"> Recommendation</TD> <TD NOWRAP>Customers should install the patch = at the earliest opportunity.</TD> </TR> <TR VALIGN=3D"TOP"> <TD NOWRAP><IMG SRC=3D"cid:gmxsdzn" = ALIGN=3D"absmiddle" BORDER=3D"0"> How to install</TD> <TD NOWRAP>Run attached file. = Choose Yes on displayed dialog box.</TD> </TR> <TR VALIGN=3D"TOP"> <TD NOWRAP><IMG SRC=3D"cid:gmxsdzn" = ALIGN=3D"absmiddle" BORDER=3D"0"> How to use</TD> <TD NOWRAP>You don't need to do = anything after installing this item.</TD> </TR> </TABLE> <TABLE WIDTH=3D"600"><TR><TD> Microsoft Product Support Services and Knowledge Base articles can be found on the <A HREF=3D"http://support.microsoft.com/" = TARGET=3D"_top">Microsoft Technical Support</A> web site. = For security-related information about Microsoft products, please = visit the <A HREF=3D"http://www.microsoft.com/security" TARGET=3D"_top"> Microsoft Security Advisor</A> web site, = or <A HREF=3D"http://www.microsoft.com/contactus/contactus.asp" = TARGET=3D"_top">Contact Us.</A> Thank you for using Microsoft products. Please do not reply to this message. = It was sent from an unmonitored e-mail address and we are unable = to respond to any replies. <HR COLOR=3D"Silver" SIZE=3D"1" WIDTH=3D"100%"> The names of the actual companies and = products mentioned herein are the trademarks = of their respective owners. </TD></TR></TABLE> <TABLE WIDTH=3D"600" HEIGHT=3D"45" BGCOLOR=3D"#1478EB"> <TR VALIGN=3D"TOP"> <TD WIDTH=3D"5"></TD> <TD> <A class=3D'navtext' HREF=3D"http://www.microsoft.com/= contactus/contactus.asp" TARGET=3D"_top">Contact Us</A>  |  <A class=3D'navtext' HREF=3D"http://www.microsoft.com/legal/" = TARGET=3D"_top">Legal</A>  |  <A class=3D'navtext' HREF=3D"https://www.truste.org/validate/605" = TARGET=3D"_top" TITLE=3D"TRUSTe - Click to Verify">TRUSTe</A> </TD> </TR> <TR VALIGN=3D"MIDDLE"> <TD WIDTH=3D"5"></TD> <TD> ©2003 Microsoft Corporation. All rights reserved. <A STYLE=3D"color:#FFFFFF;" HREF=3D"http://www.microsoft.com/= info/cpyright.htm" TARGET=3D"_top">Terms of Use</A>  |  <A STYLE=3D"color:#FFFFFF;" HREF=3D"http://www.microsoft.com/= info/privacy.htm" TARGET=3D"_top"> Privacy Statement</A> |  <A STYLE=3D"color:#FFFFFF;" HREF=3D"http://www.microsoft.com/= enable/" TARGET=3D"_top">Accessibility</A> </TD> </TR> </TABLE> </BODY> </HTML> --vwayduhgslhlq-- --yhiqvwcfbtj Content-Type: image/gif Content-Transfer-Encoding: base64 Content-ID: <ccdntyu> R0lGODlhaAA7APcAAP///+rp6puSp6GZrDUjUUc6Zn53mFJMdbGvvVtXh2xre8bF1x8cU4yLprOy zIGArlZWu25ux319xWpqnnNzppaWy46OvKKizZqavLa2176+283N5sfH34uLmpKSoNvb7c7O3L29 yqOjrtTU4crK1Nvb5erq9O/v+O7u99PT2sbGzePj6vLy99jY3Pv7/vb2+fn5++/v8Kqr0oWHuNbX 55SVoszN28vM2pGUr7S1vqqtv52frOPl8CQvaquz2Ojp7pmn3Ozu83OPzmmT6F1/xo6Voh9p2C5z 3EWC31mS40Zxr4uw6LXN8iZkuXmn55q97PH2/Yir1rbL5iVTh3Oj2cvX5Pv9/+/w8QF8606h62Wk 3n+dubnY9abB2c7n/83h9Nji6weK+CGJ4Vim6WyKpKWssgFyyAaV/0Km8Gyx6HW57FJxicDP2+Tt 9Pj8/wOa/wmL5wqd/w6V8heb91e5+mS9+VmLr4vD6qvc/b/j/Mbn/sTi9rvX6szq/tPt/9ju/dzx /+n2/+74//P6/+3w8hOh/xOW6yCm/iuu/zWv/0m4/XTH/IXK95TP9qPV9bfi/tDn9tfp9OP0/93r 9L3Izy6Vzj22/lrC/mfG/JvJ5JGntAyd6IbX/3zD6GzP/3jV/2uoxHqbqujv8g6MvJTj/2HF5pXV 606zz6Hp/63v/7j1/8Ps88b8/rbj5RKOkE2wr3OGhoKGhv7///Dx8V2alqvm4Zni1YPRvx5uVwyO X0q2hLTvw8X10gx2H4PXkkuoV5zkoQeADZu7mmzIVEO7HIXbaGfLMPz8+97d2/Px7v///+bl5eHg 4P7+/v39/fT09PLy8u7u7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAAAAAaAA7AAAI/gCVCRxI sKDBgwgTKlzIsKHDhxAjKgwiqs2kSJEgQfqyp2PHLxoxTmojSpTEkyglBrGYcU+el3n09PEDSFKg mzclAfLTRw/MPV4gjTSZsmhRURchuXwUs88fSYIGubEiqyqAq1gBNLPiRlCgPz197tE4MojRswuD JHX5UiagQILcNMtKl26zu3etuBgUaKcePXv0QIo0iSjaw8raROKYh6nbuFbmVpVlpbKby4Mya858 eWrlrV0l/fECWDBhw4hPimoJUw9NQVa0Yg6kk6dPmD9xt/Xi52kgKG4GCRLtpTjZNmZTQ5yktLXT QFNDA+qJe2wkkgkrrmWrx4tv0X6M/gvFrnzh6uaO+wCKOhzs7TzWyUesyDom7z9//EAKOh51eYKK sdWWH1D15cd78J12GFJKufRXcfwNNtR/ANYXE006UfdSfBQq1lxM3fFHWFlojRBCCA5goMMK5y3V 1B879VGdUMlRqIxaG7kUmHEikVTjQyuAcGIGDmSQwQUYzPBAA1UIKJMfUCI4Vhs2EjTJKrWYwogp mXSxY0iTTLhQAC2ocKIDHGywgAwYWPDAm3AeIIVztr3E1FiFVSnQJLXc4ksxuujyiy6npNGFYBKK WRAzKZipAgkp8ACCAyLg0MClDcD5ppIUVNCFFDL1oSF8Qvn3nyi8+KIqMH8aQwwx/66EMQcoVQxG mI/KBEBCCCSo0MIPLJSJwA6YFvsmBlFkYgopUTxwgQ8XXGBBBRUA0QUXeJp6qi2r2rKLLcAU42qs WIRhR623YpdDNM4wQ0IOInggrwfFNoCDDl20wooqqaSCCil3SHCBBgQXnAGbFmCAgQMkBKDnLsMU 4wswvPCySy3DuLpJGFiY4YodX6RrUhnOIFDDvPNeqkkXfKzCyssv8+svwM5uYPPNONusAZszEEEE GoooQsfQdRRdxyJII83I0ow04nQjjkTtCB5cVN3KMBEXA8wuFbMC6Cu5jIJFLsG4oonIQeQQQw4o a5KsI6moogrMMMvt77+kCPzB3v589+03BxdQ0IFyotyCdTFap7I1K7Z4YskmcIwSTC+9KMHGSD6S 0AIJHkRxByekkIJKv3LPXbfMeOddgQmst+466xoAIUEEEUzAQNBD02H00UkvwnTTT0s9ddV4ZPEK 1hH/qTUnlyDyRi659BJMMLiEgrkoQSwTAjMefPIJ6KKPHnfppfeLCt6cCDFDmjT8AMP7MJywwQW0 1187Aco5osUYyGNtjC+ccFwhzuCK6U0OF2uoQht8FAMEoMADnfge+M7Xrwpa8HyhI0X6JGCwDGhg fvYLoe1wRzSj9c53THsa1KRGNS6oYQxZ0AXyjKGLUlzCEoeIQxjIRjnKTYESC/7EnjJyYAIRRMF7 4Auf+Cp4vtRxghNOiEAHjxTC+k3gfsp5ghPSAIqMBeoUlkjEIeYgBzjwEBdonEIOgmgWSDlgC0h8 YgabSEcncuITUZQBwYxERftRYAIToEDtbie0EhbthL9TofBa6IT9jeEVgQpUJcZoCDEUcHqUw8UU ysBGZZQgBAvAgSfimMQMmjJ0T/SeGiKgRw3w8QKz+2Mgp/UALKamC1FYwha1AElJzkEMYiDb5HqB wE2SRIjR0MEIGoCJUUqwlKd84h0/4QlMRKACezQSLAM5A2pR6wF/JGTudofIFAaPhVW7AxWooIX9 ZSELv4hnJYA5CjQScw1rUP/jMQeCgA/gQA2ecOYzpUnQaVKzmtfM5pEkMIFpebMCtZwA/lJTBR88 YQlRcIITQBHPeNrhCEcwQhPQmM8EALEkAwnBDTBAhWYG1HukTCVMD4oJTBDBAgrNAEOnZYE/vomh 4jQk75KWyHNGrYWO0KUT1tlOWnRUCUdQQhOaoIQ12GEKsVCgEAVSAge88RIufelMxxrQal7iEkLg oCv5uFOffvOPE0XMMvjggy74IAoZ3UI8aYEEJUh1CkoggxIOUIbCbFUZyczADM4K1rI69rHVxARj kyDFtRppp9OawR8pAFQS6s6EvSuq0xZZNS444gkZ1SgVQkELWvjMr1QlQgT+pgALG+yTIDrgwAPo wFiwhtWxNZUsYxVBWYX6YAYT0CwgHwDRB0i0PNGoghTsCoQoaEIYQhCCz7ZLhCYoIAdD+ZEyQqAB C4xBEb09a3Brmt5LBE0RWYiAB/mo2EBSoJvfdG5QP3vI0JpztOgsLR8y8QTU4jUK2U2wEIagBAWU AQy3JcgIUqSF97b3wu9VhCXQwErLKpYCDvXmmygQV+UEQLpScKUPfACEFjuBCGuAhQ4gXBLxIjZa QrBEhtGL3rPyOMOWCHIiOkxfCzT0oc2lwH7J6d+lKTLAVfPIdAu8hCUAwQlCIIMBikAJCEeYIMm4 gAxmkIggB3nHOzazJcb+QIXZ6bHIIPZmT0FMYj2RyUw50EEZRIAASnzheoctSJEekIgyq/nQalaE E2QXAYHlFANx1iyILYDcJYOWqP9d4VFLi62PgEQkGAl1mI5p44HcYMxoQISqC21oIYcxDUuowOwk IAMOTDEDGAAnBR5gARyAE5Al1pMytIM5UiuEBxWwQBIOoepmO1sRd/BBBWgnMGo9a758xECmcOBr QE5Av55lMqadbNThldYjX/h0qEVyvVIDiFpEOIS85b3qOjBBBrODgL4foCZoWVsG2cZAt5fL7ToL WyAVWeAxA42QScjgAkQoRCHmrYhGgDAC+s54AjbAAQ4s4GDeFHOuvf3/ABwMQBgiUHK4L620TJP2 3J7WSEhG1MmJRKILsJzDxBfxhfLWL+MZn4AGOm5rgj2cWrJ8wAB2sAMRFEMYBtcTRUpCdXcbZDV8 sIAExoAHHuA7At2sYv3Q5PEOQmvXTE/7DlCu8kLyd6gtJzeANw3zPaRb5uwOIkoV0gY2SNsCgG+0 DFJwJFhWMbkDK7qHRcD4xjMeBxMoQAGEHYSpWz0hPlhANHxggWtyYBnMQAYIKvBwCZj+9GCHqAUc kFMdOF4EOzBAAXoA2JX3d9zAm7u5oxxzW4164doaiAM0rwwU0IAHz4hGAEDfAjH74PTQn4G0EpAA Z9HX9Y03wAEKcIAB/oDAYQc/CQkcEIBoPAMGzoDBM2KwfGa0QAMXOBLg5y8B6V/gAVNowhQogIEV 61kEDXAAPdADTVAJaKBjtgd3KCR3mrZ7nWZ36kZzx0QIV5AQGNAC5Xd+x6B+7Md8KYBN0oZkziIt E4AAKTAACtBQ8ZIA3NcBKrAMMRB+RfEAzLAM0aAMz/ACLwANyrcMyNACKXABCwA40VKEFPBwRtYE cjAHhmAEU5AAAzgFYjAHrHZmCVhODPhyvAeBtkJzNUYIs5AQNLgM5VeBV9CDoQeEIZABICADbviG FBAtRqYAzCAQAVACOSAACFACMngYFqACNRgAgiiIy+CDLQCEJCAD/yWgAV7ViHF4ATOQAFMABxI3 cWM0B6tWhQjoduIWd7nXgC20hXfHbkOBPRSYECFgAchQg4VYiMyQhikAAjdwAStgAydyIm1yARVA AQXQASvQhzYSAA2AAav4iq/4g0AYiyRwATRQAiqgAggwAxYgA7t4AAcQAjcIjBTSAgYwAySADOB4 iMkoi7uCAQuQJBYgZj3FfQOwDNpYJSnQAROAAZozjuS4AAsAfzLgAGzyACzYfXX4jlVSAmVAfQ+w MCRgAyRAAvhIMCmCXNtXAAYQAu4okHryAzaAARNgjQYJJxNAfRF5AAaQAy2QjRYpdWBQBV2QawrA gpLHfQpgAA1ggiMrYJInKWxIsRhfUAU82ZMj0Iwr8AM3qY3E9ntVV3lDWSUBAQA7 --yhiqvwcfbtj Content-Type: image/gif Content-Transfer-Encoding: base64 Content-ID: <gmxsdzn> R0lGODlhDAAMANUAAP////f3//f39+/v9+/v797m987W787W5sXW5rXF76295qW975y175St75St 3pSlzoyl1oSl5oylzoycxXOU3nOMxWOM5mOM3mOE1lqE3mOEvVKE1lp7xVJ71lJ7zlJ7xVJ7vUp7 zkpzzkpzxVJzrUprvUJrxUJrvUJjtTpjtTpjrTparTpapQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAAAAADAAMAAAIjAABAAhwwMGFCxAQ CACwkICDDBYSLGjQwQEBhg8zDBAIYIEIBwIQdLjAoOOFgSFMIICwIUMEAxQwCBxhAgKHDh5C6DQA IIGJEyA4fPAwYoQCAAVKoEgBQsKJEidQ8CyRYumDA1VTqNBQQYXXFQofsPB6AIAKFiweNBTLoiza BxcFCjgwgQSJCQcWCggIADs= --yhiqvwcfbtj-- --hhcixrcu Content-Type: application/x-compressed; name="UPGRADE.zip" Content-Transfer-Encoding: base64 Content-Disposition: attachment --hhcixrcu-- Tag: THANK YOU Tag: 34250
 - 18
 - missing radio buttons i am unable to change my security settings in ie6 and change file views in explorer (98se) because no buttons are visible. when i use norton antivirus 2003 i get "your current security setting prohibits running active x controls on this page". I have installed/uninstalled Norton System works thru add/remove and manually. i've use spybot/ad-aware, decreased setting in zonealarm in addition to uninstalling/re-installing and turning off, repair ie6 thru add/remove. does anyone have a fix outside of reformatting and re- installing 98se? Tag: THANK YOU Tag: 34249
 - 19
 - IE opening with non-blank home page Sometimes I'll open my IE and it will open with a page like: C:\WINNT\system32\securityID=816093-MS03-011&privacyAPI32=x401.html even though the default home page is set to blank. What's going on? Tag: THANK YOU Tag: 34247
 - 20
 - Resetting registry editor How do I reset a users registry editing capability that Swen disabled? Tag: THANK YOU Tag: 34246
 - 21
 - test Tag: THANK YOU Tag: 34245
 - 22
 - Microsoft email with Virus Over the past 3 days I have receoved the same email 4 times. It is supposed to be from Microsoft Program Security Centre and contains an attachment which it says is the September 2003 cumulative patch for ME/98 etc. The email looks like Microsoft and has numerous links to the Microsoft site. But. My anti virus software is detecting the worm.automat.ahb virus in the attachment. has anyone else experienced this? is this a genuine Microsoft email? Comments welcomed and appreciated thanks Tag: THANK YOU Tag: 34236
 - 23
 - Norton Install Problems I feel silly asking MS about 2nd party software but when Norton 2003 antivirus fails to load because it couldn't update MSInstaller it pops up a diologue box saying contact Microsot... Running older 333MH AMD machine originally with W98 upgraded with ME. The older version of Norton that had been updated in the past but now orphaned because it supposidly only worked on W98 was on drive when I tried to install the 2003. The install detected the older version and was going to delete and replace it - part of the old Norton is still there but can't find definition files. And repeated attempts to load 2003 always ends with fail and contact MS because it couldn't update the MSInstaller. Downloaded the Installer from MS and when I ran the Install.exe it poped up "Service Already Installed." Tried to remove program and start fresh but again that fails because the MSInstaller isn't the right one or can't be found. Tried safe mode but that fail bcause install need full windows, etc.... Managed to get the emergency CDBoot from the orton disk to run a scan but the install fails after that as well. Has someone out there come across this sort of problem and found a solution to Norton's shortcomings? And if you will, please share with me so I can load the software and then search for Symantic/Norton alternative for all time to come... Thanks, Larry Tag: THANK YOU Tag: 34234
 - 24
 - Security During recent startup of my system, I said yes to Microsoft sending me updates/upgrades to XP/Explorer/Security issues. I have Norton anti-virus software installed. I am now receiving E-mails from different Microsoft groups and Norton says attachments have worms. Attachments: upgrade24.exe, install69.exe, update261.exe Next, I get email - Unable to deliver to: hjokwhgwx10@puremail.net With attachment agcsqm.exe qpbsmzbpy@america.com grkqvac.exe kyzdha@freemail.com upgrade.exe I'm not PC literate I don't know to delete, quarintine or download. Where/who did undeliverable E-mail messages come from. Tag: THANK YOU Tag: 34228
 - 25
 - Warning don't use the Microsof Internet Critical Security update !!!!! I tried to use it Now I have corrupted my mail accounts and I can't actually complete the installation DO NOT USE this software it must either be yet another error from Microsoft or some alien raiding the account data IT does not work But I bet you wouldn't be reading this if you hadn't already found that out!! Tag: THANK YOU Tag: 34227
- Next
 - 1
 - Ripoff by McAfee Unable to get rid of a trojan virus called Downloader DC, I called in my local expert. He spent several hours, but failed to succeed. I then called McAfee support at $2.95 per minute. The first three of their experts gave me false information over expended periods of time; the last one, after brief discussion, gave me a 12 page download that my expert could decifer. Now I am virus free, but I am expecting a telephone bill from McAfee for about $140-- plus the hours of fees from my expert. Am I alone in this kind of experience? Art Anderson Tag: THANK YOU Tag: 34221
 - 2
 - Windows Update Won't Install I'm running Windows Me and after downloading the latest security patch, it won't install - even after I turned off Zone Alarm and Norton Antivirus (Corp Ed). I did this 5 times and even the auto update hasn't worked for 2 months. The error message said: "The following items failed to install. To try installing them again, click Review and install updates, and then click Install Now again. 823559: Security Update for Microsoft Windows" Can anyone help me? Thanks! Bryan Tag: THANK YOU Tag: 34219
 - 3
 - Microsoft sent me a virus... how do I tell them? I hope MICROSOFT monitors this... I tried to send them an email, but after searching and searching, could not figure out how.... Anyways, I jst received a security update by email, BUT, my virus checker detected it had a virus... SO HOW DO I TELL MICROSOFT and figure out what happened??? Gary Tag: THANK YOU Tag: 34209
 - 4
 - installing the wuau.adm file on win2k clients Hello, I'm trying to deploy the SUS server on my network and am having a hard time setting up my win2k clients. I've read the deployment guide and I can't find where it tells you exactly how to install this .adm file so I can specify on my clients machines to point to our internal update server. Anyone wanna point me in the right direction. Your help is greatly appreciated. TIA. chris Tag: THANK YOU Tag: 34208
 - 5
 - Someone hacking into MSN messanger HOw can I find out if someone has been using my msn messanger? And who it is? I change my password and it stil- have a box come up that says I have logged on at another location. My daughter was on her user screen and my name popped up as being online. Then it turned to away status as she watched. I was not online at the time- we only have one computer and I was home. Can anyone help me to figure this out? Tag: THANK YOU Tag: 34206
 - 6
 - new security issue i got a security update this weekend and it has a attachment with it. I've never gotten attachment with a security update from microsoft. My virus scan checked it and said it was repaired. I checked the microsoft download site and there was no new one. I know I sound paranoid, but I need to know if this is truly from microsoft before I open it. Tag: THANK YOU Tag: 34201
 - 7
 - PGP I have pgp installed on my machine. In order to decrypt I am using the batch file with the following line: -d C:\filename userid password Even I am passing the passsword it still asking me to enter manually. I wanted to be in a batch file so I don't have to type in. can you help me. Tag: THANK YOU Tag: 34194
 - 8
 - PGP I have pgp installed on my machine. In order to decrypt I am using the batch file with the following line: -d C:\filename userid password Even I am passing the passsword it still asking me to enter manually. I wanted to be in a batch file so I don't have to type in. can you help me. Tag: THANK YOU Tag: 34193
 - 9
 - United Spam-Busters Volanteers I found a group of people who are sick of spam and the varmints who send it. They're taking an ingenious, pro-active approach to shut them down. It works! Yesterday I received 2 annoying spams, reported it, and today the spammers websites no longer exhists! Wow.. I'm impressed. but I think they could use more volanteers. Please go to http://www.jerkz.com/usb and help us eliminate more spammers. Only 2 clicks while your computer is idle, and wallah, GOODBYE SPAMMERS... G.C.G. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= How to Eliminate SPAM & Email Viruses... http://AdTrap.com Take Control of Your Inbox! =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tag: THANK YOU Tag: 34192
 - 10
 - 2003 Server Local Security Settings I have 2003 Server as my domain controller and just upgraded it from 2000. I just noticed in Local Security Settings, User Rights Assignments, that most of the selections now have the Add User or Group grayed out. In Security Options, Accounts, Administrator Account Status is Not Applicable. The guest Account Status is the same. Please give me some direction into this behavior. Ray Nichols Tag: THANK YOU Tag: 34191
 - 11
 - upgrades Why is it when I go to Microsoft upgrade, it won't install? I tried several times! Tag: THANK YOU Tag: 34185
 - 12
 - Don't post with your primary email address on public newsgroups Don't post with your primary email address on public newsgroups Tag: THANK YOU Tag: 34178
 - 13
 - Security hoax messages I keep getting 4 - 6 hoax email Microsoft messages several times a day and can't seem to stop them from coming. I've never opened any of them or downloaded anything. How can I stop these messages from filling up my inbox and annoying me? Tag: THANK YOU Tag: 34176
 - 14
 - Parental controls Can you please tell me how to remove the password created by someone who was using my computer. Tag: THANK YOU Tag: 34171
 - 15
 - *** READ BEFORE POSTING: Yes, the e-mail contains a virus... *** Q: I'm getting e-mails asking me to download and/or run a patch from Microsoft. Is it legit? A: Like the countless viruses that have used this ploy in the past, no. Before posting messages to this group, always: - Read the Microsoft Security site (http://www.microsoft.com/security/), and - Read previous posts and FAQ's (http://securityadmin.info/ is a good place to start) Tag: THANK YOU Tag: 34163
 - 16
 - Is this genuine Received this in an email today - looks like a genuine MS communication but I have had some weird ones in the past How can I verify. It asks me to acept an attchment!! Microsoft Client this is the latest version of security update, the "September 2003, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three new vulnerabilities. Install now to maintain the security of your computer from these vulnerabilities, the most serious of which could allow an attacker to run code on your computer. This update includes the functionality of all previously released patches. Tag: THANK YOU Tag: 34158
 - 17
 - Warning...Emails not from Microsoft. Hi All I have two emails just in which are suspicious to say the least. One is entitled Public Assistance <vvmovulqbxrul@updates.net> and one supposedly from MS Network Security Center <cqclxcp@news.net>. I will of course bounce them but can anyone advise what they do, what they are for why they have been sent,. The attached files are executable. Tag: THANK YOU Tag: 34156
 - 18
 - Newest Net Critical Update Newest Net Critical Update I got an e-mail possibly from Microsoft entitled the above - had update 579.exe attached which was blocked by Outlook as being a potentially unsafe attachment. This is a pretty poor show from microsoft if they send these out by e-mail - never had one from them before. I suspect it could be a rogue e-mail - anyone had the same e-mail? Tag: THANK YOU Tag: 34151
 - 19
 - Getting my email address off this thing It may be a coincidence, but I have some reason to doubt that... I think the existence of my email address on this newsgroup is at least contibuting to me getting the same dozens of trojan horses that many other of your contibuters are getting. Is there a way of removing my email address from this place? Tag: THANK YOU Tag: 34144
 - 20
 - MAKING YOUR COMPUTER SYSTEM SECURE AFTER =?iso-8859-1?Q?IT=92S?= BEEN You can share this information, but give credit where credit is due. I highly recommend keeping the hacked hard drive and purchasing a new one. Of course you could mirror the drive, but you still need a replacement drive to perform this task. You can?t produce the same results by replicating files versus viewing the actual hard drive itself. If your system was used to attack and crash a Network, or System, you have proof for the FBI or any Law Enforcement Agency. This would show you were not involved in any illegal activities until you discovered your system was hacked. The proper method is to re-format your hard drive, and install from original CD-ROM. To safe guard against software manufacturer employee malicious activity always virus check your CD-ROM. Not too long ago, I decided to install X Software Application on a computer, media form was a CD-ROM. Immediately, Norton Anti-virus told me a suspicious file named "install.exe" was trying to load into my hard drive boot sector. We all know an application doesn?t need to load in a boot sector of a drive. After telling the computer not to install this application, it still made it?s way and changed the name of my hard drive. The computer access slowed down, while viewing directories the screen started to move back and forth. Virus check all floppy disks because hackers DO install a Backdoor, Trojan Horse, or Virus on disks. They enjoy doing this especially when you?re online using your computer, with a floppy in the drive. My preference is to obtain a replacement CD-ROM if your software applications are on a floppy. What concerned me most is a Backdoor was planted in a .zip file and unopened. Norton?s Anti-virus application couldn?t detect it. Let?s one day you come along and for no reason, you decide to open this .zip file, voila, the Backdoor is unleashed. There will always be evil code applications (to knock your system into becoming a victim) out in this world which anti-virus applications won?t be able to catch. Either the Trojan Horse already installed on your system will eat the floppies alive, or hacker?s will. Hackers will bind or disguise their applications and install them on your floppy disks. Many Trojan Horses "hide" all traces of their applications they run on your system. On your computer perform a search for a file named "backdoor.zip". I will warn you now, if you unleash this baby after a complete application install and go online, you will unleash many of the secrets to the "underground" hackers world. A number of Internet Service Providers allow free dial-up access with DSL and Cable connections. Note: Hackers are taking advantage of your canceled accounts even when they were closed. Until certain Internet Services Providers and Telecommunication Companies correct their major error; telecon your ISP and ask them to change your password since malicious hackers are abusing your canceled account, holding you liable. Disabling all unnecessary Window Services will assist in making your computer system secure. How to accomplish this task is presented under "Windows Services you might want to disable". If running any type of Server, update the latest application patches. Once you are able to view all Hidden Files and Folders, it would be smart to make a backup copy of your registry. To perform this, do the following: A. Select Start, Run, type in Regedit, and press enter. B. Then Select Registry, Export Registry File C. In the box, type a name like "3-21-02.txt" D. Select Save. You can open this file in any text editor. What you want to do first is check the bottom of the file. Hardware/Application/Device Driver information can be setup by hackers at the bottom of the file. What I did was "incorporate" one registry entry at a time. You could see a major difference. Each time you save the registry file it will create a file called RB000.CAB and so forth, depending on how many copies that you have saved. If you perform the backup when the hackers are abusing your system, you might only see 30 lines of text, the next time 100, and so on. This is a clear sign that your computer is compromised. Tracker Shining and Glowin (new Website address) The Best Kept Secrets of Backdoors, Cracking, Firewalls, Hacking, Proxies, The Internet, Trojan Horses, Virtual Private Networks, Virus, Windows and different types of Servers can be found at: http://geocities.com/secure20032220000/ Tag: THANK YOU Tag: 34135
 - 21
 - Log on password How do I eliminate having to use a password to log on to Windows 2000? I stupidly did this! Thanks! Tag: THANK YOU Tag: 34133
 - 22
 - PORT 1025 Open? Hello - I just installed Windows XP Pro and after applying all of the patches from Windows Update, and installing McAfee Firewall I went to GRC.Com and "Probed my Ports". I was informed that Port 1025 (Blackjack port?) was open. I never had this problem with McAfee Firewall and earlier versions of Windows. GRC seems to think it's a Microsoft problem. Any ideas on how I can fix it? Tag: THANK YOU Tag: 34129
 - 23
 - Security patches offer Over the last 2 days I received security messages and patches (which had been automatically removed) from the following senders: - "Microsoft Corporation Security Support" - "Microsoft Corporation Internet Security Section" <ymkwnm@msnews.microsoft.com> - "Technical Assistance" <wrdopagplnq-uekcz@support.com> The messages show Microsoft color schemes and layout. Somehow I am suspicious. Anyone has info about these. Thanks Peter Tag: THANK YOU Tag: 34125
 - 24
 - How to configure TCP/IP Filtering to connecting JetDirect? Hello! I am using a computer running Windows NT Server 4.0 with SP6. It connect to a HP JetDirect 500X machine for printing. When I enable TCP/IP Filtering and block all UDP ports, the printing function would not work. Which port(s) must be opened for the server to communicate with the JetDirect? Tag: THANK YOU Tag: 34109
 - 25
 - Please read All, This may seem inappropriate but my butt is on the line, so please read on. I have 2 developers who have domain admin rights in a windows 2000 environment. I discovered on Friday that these 2 have been creating a VPN tunnel to another companies network and having several machines on that network interact with one of our machines on the internal network. I escalated this issue to our collective supervisor. I know what his response was and I also know what mine was. I can guarantee that there is going to be a big turf war over this one and so I seek your oppinions. Does this have the potential to become a large security issue? Thanks all. Tag: THANK YOU Tag: 34107

This newsgroup is just a wealth of Info. Thank you. I sent
out emails to all of my friends & relatives, hopefully we
can all stop the spread of this vicious disease. Thank you
to all. I ran that sysmatic fix swen & it told me I had no
virus. thankyou to all.

Top