Virus

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - accessing user files without logging in I have had problems with WinXP home, so I upgraded to WinXP pro. For fear it would delete my files, I created a new folder for pro to be installed in (same drive). Pro works fine. However, home doesn't work at all. My files are in my old home user account that has a password to logon. When I try to open the folder of my home user account files all it says is that I don't have access rights-it doesn't even give me a prompt for the password. If there was no password I would be able to access it (i.e.:all my files are still there). If I could merely enter the password when trying to open the folder, that would very nice. Also, if many of you are 100% sure it won't delete my files in an upgrade I might take that path instead. Thank you, ninjascyther@juno.com Tag: Virus Tag: 61392
  - 2
    - Friend logging onto my comp I have a roomate who continually logs onto my comp. He doesn't know my passwords (at least I don't think he does). I saw him starting it under safe mode once, then when I returned to the room I opened the laptop to find out that he had somehow managed to log into my account. Please help me block this opening and stop this from happening again. Thanks. Sean Tag: Virus Tag: 61390
  - 3
    - password I have my own computer and I have put a password, and I have installed an anti virus (Norton System Works)but I don't understand how someone else can be logged onto my computer when I installed it? It means that my computer is not protected although I have a password and anti virus.I am person who is bound for the computer and it is my job and I have bought the computer for myself and at the same time I am disappointed how can it happen? It means that your personnel do it. Please , explain it to me. Thank you sonja_917@msn.com Tag: Virus Tag: 61389
  - 4
    - MS Proxy Server 2: Hide IP in LAN Hi! I don't have much experiece with networking, but i heard there's a way to setup a proxy on your own computer to mask your IP or something similar. I want to do this because I dont want others on my LAN to see my private IP. How do i get started? Tag: Virus Tag: 61386
  - 5
    - All updates fail Hi I'm running xpI can not get any updates to install they all fail at that point any Ideas. Thank You, Dave Tag: Virus Tag: 61383
  - 6
    - Forced autodownload reboots - NOT LEGAL! This is a very unhappy IT consultant, who has had several Servers I am responsible for have a forced reboot of them occur at 3:00am after downloading a security update. the following is from the EVENT VIEWER: Restart Required: To complete the installation of the following updates, the computer will be restarted within five minutes. Until this computer has been restarted, Windows cannot search for or download new updates. - Security Update for Windows Server 2003 (KB833987) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. I am dismayed at the apparent lack of concern for sites operating 24/7 and forcing a reboot of critical server systems after an autodownload! I got paged by two sites in the middle of the night wanting to know why their Servers just crashed! These reboots should ONLY be done after fair warning and be planned. When has this policy changed? -it cost one of my engineering sites a huge loss in productivity and $$$ due to steel pattern cutting robot control files having to be reloaded! NOT HAPPY! This shouldnt be allowed to happen! Tag: Virus Tag: 61372
  - 7
    - What are these?? Whilst running a virus scan I noticed these files appearing but they were not flagged by my AV (Panda Titanium 2004). I checked through Explorer and found the folloeing (empty) folders. I Googled some of the names but the websites on Google were all foreign. Is it OK to delete them? PUTA!!.EXE HACKE!.EXE ALEVIR.EXE MSTASK.EXE SCRSVR.EXE SRV32.EXE INSTIT.BAT Any help would be very welcome Colin. Tag: Virus Tag: 61371
  - 8
    - Publisher Hi Guys, I have run into a slight snag. I am runningXP, SP2, when I go to Hoyles games to play some backgammon, I get a pop-up that says Microsoft cannot verify the publisher,,any way around this?,,firewall turned off. "Help",,Thank You, Dennis M. Tag: Virus Tag: 61370
  - 9
    - AuthzReportSecurityEvent Does anyone know the format/content of the ... portion at the end of the AuthzReportSecurityEvent API call. The documentation says a "List of AuditParamFlag type/value pairs that provide additional information about the event." When I try passing an array of type AUDIT_PARAM I get error 87 (The parameter is incorrect). I have not been able to find an example of code that actually calls this method yet. Any help would be greatly appraciated. Thanks, Chris Tag: Virus Tag: 61369
  - 10
    - XP SP2 IE6 vulnerability Background information ====================== Windows XP Service Pack 2 has introduced new features that improve browsing security in Internet Explorer. Most of them are additional messages that force the user to validate everything that is done by the browser. Most of these messages are displayed in the new Information Bar. For example if you try to open a web page that contains Javascript code or ActiveX objects, it is likely that they will be blocked, the Information Bar will appear and offer you to reload the page with the untrustworthy components enabled. More information can be found at: http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2brows.mspx The side effect of these features is that some web sites can't be used as easily as before because the user has to respond to an increasing number of notifications and questions. Vulnerability Explained ======================= As an example I created a simple XHTML document containing MathML and installed the MathPlayer ActiveX plugin from DesignScience (http://www.dessci.com/en). This type of document used to render correctly in IE6 but since SP2 was installed the new features interfere with the loading of the component : the page is first loaded without MathPlayer which has to be enabled via the Information Bar. But there seems to be a vulnerability in Internet Explorer that allows this protection to be bypassed. All that needs to be done is to add a fake comment between the DOCTYPE declaration and the <html> tag that mimics those added by IE when a page is saved to disk. The "fake" comments must be formatted as follows :  where URL is to be replaced by an URL (for instance http://www.example.com/) and XXXX by a 4 digit integer that represents the number of characters in the URL (for instance 0023). System Affected =============== Windows XP Pro and Home editions with SP2 IE 6.0 (SP2) How to reproduce ================ Install the plugin from DesignScience. Paste the following text in a file with an .xml extension. Open it with IE with and without the comment on line 4. <?xml version="1.0" encoding="ISO-8859-1"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1 plus MathML 2.0//EN" "http://www.w3.org/TR/MathML2/dtd/xhtml-math11-f.dtd">  <html xmlns="http://www.w3.org/1999/xhtml"> <HEAD> <TITLE>IE Vulnerability example</TITLE> <BODY> <math displaystyle="true" xmlns="&mathml;"> <mfrac> <mn>27</mn> <mn>12</mn> </mfrac> </math> </BODY></HTML> Remarks ======= This also works with pages containing Javascript code. -- Cyrille SZYMANSKI Tag: Virus Tag: 61367
  - 11
    - Windows Security I have Norton Virus Protection installed.On start up a balloon comes up on taskbar,> Your virus protection status is unknown < If I click on this Balloon I am told, > Norton A/Virus reports that it is installed, but its status is unknown, click recommendations for suggested actions you can take < When I do that it takes me to, > Windows Security Center < but from here I am lost,can you help an old one please? Kind Regards, Ken. Tag: Virus Tag: 61357
  - 12
    - Windows messenger Every time I open the internet I am bombarded with pop ups about windows messenger. There is a new version and do I want to download it now. Yes or No. I am fed up saying no 3 or 4 times a session. How do I get rid of these popups.Has anyone else got this problem?Thanks Gerry Tag: Virus Tag: 61348
  - 13
    - Windows Server 2003 I have a client who is running Windows Server 2003 and Windows XP workstations. Three of the stations log on around 6:30am and lock up every day around 4:30pm. I feel that this has something to do with SECURITY settings. None of the other stations (logon around 8:30am) have this problem. Tag: Virus Tag: 61344
  - 14
    - My MS04-028 FAQ The instructional text in this latest MS04-028 Security Bulletin seems totally ridiculous for anyone trying to effect patch management on more than 3 PC's. Their FAQ is just blowing me away. I'm not sure whether to laugh or to cry. Here's my FAQ. Let's see them answer THESE! Feel free to play along and either answer or add to the list. It won't likely accomplish much, but it will be more fun (and probably more productive) than sitting in a meeting with a bunch of other confused IT's trying to figure out "how to deploy this one." 1. Are you *%^ing kidding me! OK, I just had to get that out. Moving on... 2. What is this "vulnerable component"? "Windows XP, Window XP Service Pack 1, and Windows Server 2003 are the only operating systems that contain the *vulnerable component* by default. By default, Windows 98, Windows 98 SE, Windows Me, Windows NT 4.0, and Windows 2000 are not. However, the *vulnerable component* will be installed by any of the programs listed in the affected software section of this bulletin on these operating systems and you should install the appropriate security update for those programs." 3. Is it "GDI+"? (Then say so!) 4. If it is GDI+ and Windows is such a shared resource OS, why can't the GDI+ component be patched at the OS level without requiring a patch for each individual app? 5. "Typically, when these programs are installed on Windows XP, Windows XP Service Pack 1, or Windows Server 2003 they only use the version that is provided by the operating system, even if they install a copy of the vulnerable component." Oh, really? (Trying to find a nice way of asking #1 again.) 6. Can the "vulnerable component" be removed/uninstalled? 7. Would removing it disable viewing/using JPEG files and/or disable some other desired functionality? 8. Would removing the .Net Framework help the situation? 9. Does this prove my original fears that installing the .Net Framework is merely an act of inviting *yet another MS security nightmare*? 10. If the recent .Net Framework 1.0 & 1.1 SP's contained such critical patches as this one, why didn't MS issue a Security Bulletin for them? 11. Why DOESN'T the "GDI+ Detection Tool" do all the things that MS tells us it doesn't do? (Basically: why doesn't it detect ALL affected sw AND tell us whether that sw is patched?) 12. If the existing GDI+ detector says I'm clean, and then I install something vulnerable, am I "SOL"? Will the detector say, "I've already run," and ignore my new app? 13. Can MS provide us with a detector that works? 14. Will someone else make one that works? 15. If so, can we buy *their* OS and/or sw? 16. Does this vulnerability affect only MS sw? 17. Are any other sw companies saying, going to say, or have they already said anything about this vulnerability in regards to their sw? 18. If so, is it only because they're using MS SDK's to write their sw? 19. Is it time to jump the MS ship? 20. How many more MS apps are going to get their own patches for this same vulnerability a month or two down the road? 21. How many vulnerable apps won't get patches because MS doesn't "support" them anymore? (implies they "supported" these apps previously) 22. Should I simply use the GDI Detection Tool to find the vulnerable apps and just remove those apps rather than wait for a follow-up patch that "fixes" the same vulnerability and/or a totally new and scarier one? 23. Which Linux distro should I start with if I'm a newbie to it, but have been in IT for 15+ years? 24. How do I know what hardware to put this Linux distro with if I'm building a new system? 25. How do I build a completely MS-free, Linux-based system that even my technophobe wife (who may freak if it doesn't look exactly like our old MS system) can use? 26. Is Linux any better, since I'll have to depend on several distros and/or word of mouth to get bug/security fixes for it, as opposed to one company like MS? 27. Last but far from least, the associated WindowsUpdate entry for MS04-028 doesn't update anything. So, why is it listed as a Critical Update? Tag: Virus Tag: 61343
  - 15
    - Should this be reported I've been receiving several messages a day similar to the one below. Luckily McAfee catches them, but I was wondering if I should report them by forwarding them to somewhere on Microsoft. If yes, WHERE? Thank you, Orville Microsoft All Products | Support | Search | Microsoft.com Guide Microsoft Home Microsoft Partner this is the latest version of security update, the "September 2004, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express. Install now to protect your computer from these vulnerabilities, the most serious of which could allow an attacker to run executable on your system. This update includes the functionality of all previously released patches. System requirements Windows 95/98/Me/2000/NT/XP This update applies to MS Internet Explorer, version 4.01 and later MS Outlook, version 8.00 and later MS Outlook Express, version 4.01 and later Recommendation Customers should install the patch at the earliest opportunity. How to install Run attached file. Choose Yes on displayed dialog box. How to use You don't need to do anything after installing this item. Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site. For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site, or Contact Us. Thank you for using Microsoft products. Please do not reply to this message. It was sent from an unmonitored e-mail address and we are unable to respond to any replies. -------------------------------------------------------------------------- The names of the actual companies and products mentioned herein are the trademarks of their respective owners. Contact Us | Legal | TRUSTe ©2004 Microsoft Corporation. All rights reserved. Terms of Use | Privacy Statement | Accessibility Tag: Virus Tag: 61341
  - 16
    - MS04-028 - .NET Framework Does anyone know if an ASP.NET web application that uses GDI+ can be exploited by the vulnerability described in MS04-028? And, if so, how? thanks Tag: Virus Tag: 61332
  - 17
    - Certificate Template The validity period from the user certificate template in win2k certificate authority is only one year if it is a enterprise ca. How can I change validity period to a longer value? Exists other templates for w2k enterprise ca? Tag: Virus Tag: 61329
  - 18
    - Spybot Search & Destroy recovery? Hello, Does anyone here know antything about Spybot Search & Destroy? I have used Spybot to remove some of the spyware on my computer but when I open Spybot and go to Recovery there is nothing listed there. Aren't all the "fixed problems" supposed to show up so that I can undo them if I need too? Sorry if this is the wrong newsgroup to ask this but I didn't know where else to go! Thanks, Val Tag: Virus Tag: 61326
  - 19
    - HOWTO: Enable/Disable USB interface and/or USB storage devices using Group Policy in Windows XP Hello from Istanbul/Turkey, In Windows 2000 or 2003 Active Directory and Windows XP workstation environment, you can enable or disable all the USB interface or just USB storage devices using group policy. Just follow: 1. Create a custom adm file, you can name it usb.adm with the following content: ; Beginning of the file ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CLASS MACHINE ;;;;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; CATEGORY !!USB POLICY !!REstrictUSB KEYNAME "System\CurrentControlSet\Services\usbuhci" PART !!RestrictionValue NUMERIC VALUENAME Start END PART END POLICY POLICY !!REstrictUSBStorage KEYNAME "System\CurrentControlSet\Services\USBSTOR" PART !!RestrictionValueStorage NUMERIC VALUENAME Start END PART END POLICY END CATEGORY #endif [strings] USB="Restrict USB Access" RestrictUSB="USB Interface Restriction" RestrictionValue="Enter 4 to restrict USB interface, 3 to enable" RestrictUSBStorage="USB Storage Restriction" RestrictionValueStorage="Enter 4 to restrict USB storage, 3 to enable" ; End of the file 2. Put this file in C:\Windows\Inf in one of your Domain Controllers (DC). 3. On this DC, run AD Users and Computers, select the Organizational Unit (OU) you want to enable or disable USB. Open Group Policy (GP) for this OU. 4. Select Administrative Templates under Computer Configuration. Right click and select Add/Remove Templates, click add and select usb.adm and click open, then close Add Remove Templates window. 5. Now you can see "Restrict USB Access" category under Administrative Templates. To see its contents, you should click Administrative Templates and on View menu clik Filtering. Clear "Only show policy settings that can be fully manages" option. Click OK. 6. Click Restrict USB Access. There are two policies here, USB Interface Restriction (UIR) and USB Storage Restriction (USR). 7. If you want to fully enable full USB, enable two of the policies and enter the value of 3. If you want to enable USB interface but disable USB storages, enter 3 for UIR, 4 for USR. If you want to disable USB all, enter 4 for both values. PS: Because this registry setting is considered as a preference, even if you remove the policy, the setting remains there. So you should enable this settings in all your organizational units. I've tried this in Windows 2003 and Windows XP environments and saw it works. I didn't try in Windows 2000, but i guess it works there too. I hope this helps you too. Tag: Virus Tag: 61325
  - 20
    - Can webmail be attached with digital signature? Is it only allowed to attached with plain text signature? Tag: Virus Tag: 61321
  - 21
    - Questions about digital signature I have installed a digital certificate into my OS. How can I know whether an email address is with a digital certificate? If the person whom I will send email to holds a certificate which didn't come from the CA wich issueed mine, Can I send him a secured email? If my OS is hacked by someone, Is my certificate secure( because the secure level I set is medium without passwords)? Thank you very much. Tag: Virus Tag: 61320
  - 22
    - computer protiction Help, can anyone give me some insight as to which Anti- Virus protiction to use? I was going to use Vcom SystemSuite5, but I don't think it works good with WindowsXP. I was using McAfee, but got a virus anyway. I just don't know what to pick, help me if you can. Thanks meme Tag: Virus Tag: 61313
  - 23
    - Front page extensions If I enable front page extensions, is there any security risks? thanks Tag: Virus Tag: 61305
  - 24
    - kernell files Hello i just have a question about the kernell files on windows xp pro.Like i use my pc for studying and i copy my cds so i can listen to them . I dont access pornography or any crap like that and all my softwares bought from shops Nothing pirate on it .yet in the kernell files loads of bad things are turning up like hack hotmail files and that and all they do is regenerate. Theres only one program in the folder and thats msconfig so i cant delete that because its a program i know nought about. virus's that also appear in my registry keep regenerating only the same two envolo and autoupdate.exe. So can anyone help me eradicate these cracks,serials,viruses because i fear for my pc health Tag: Virus Tag: 61301
  - 25
    - Unsupported Extension (SMTP) Outllook Express 6 McAfee says I need to disable an unsupported extension on outgoing e-mail otherwise clean outgoing mail cannot be assured. Does anyone know anything about this? Tag: Virus Tag: 61298
- Next
  - 1
    - Crash with SP2 Any ideas? I've crashed 10 times today. Own a DeskBook from XOpen America. P3 processor, 1GB RAM STOP: 0x0000009C (0x00000004, 0x00000000, 0xb2000000, 0x00020151) Susan Tag: Virus Tag: 61297
  - 2
    - Confused about latest patches I read on microsoft.com/technet about (critical update) "Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)" and (important update) "Vulnerability in WordPerfect Converter Could Allow Code Execution (884933)". If I visit Microsoft Office Downloads Home Page (http://office.microsoft.com/en- us/officeupdate/default.aspx) and also www.windowsupdate.com, will these two sites tell me if I need to install these two updates? I have Windows 2000 (not XP) but I do have Office XP. Why won't office.microsoft.com (updates) or windowsupdate.com tell me? Do I have to read down the list of affected software and update manually. So confused, Jimmy Tag: Virus Tag: 61291
  - 3
    - Disabled Viewing of PDF files I cannot view pdf files since I installed a spyware programme. I think an 'add on' has been disabled. Some add ons I can't enable since a message says this is under the control of the administrator. Can anybody help me solve this problem. Thanks. Malcolm Tag: Virus Tag: 61284
  - 4
    - making a folder truly private and unsearchable I need to know how to make a folder truly private. Of course I can hide the folder but anyone who knows how to use windows knows how to find it. I thought I heard once that if I put the $ symbol before and after the file name it would hide it but that didn't work. Can anyone out there help me out? Tag: Virus Tag: 61282
  - 5
    - Search? Can I see someone's search history (ie with Yahoo or Google) when the HISTORY and TEMP internet files are cleaned out? Thanks Tag: Virus Tag: 61281
  - 6
    - New MSSecure.XML Version 2004.09.14.0 Now Available MSSECURE.XML Data Version 2004.09.14.0 (for use by MBSA 1.2 and SMS SUS Feature Pack) was last modified today, September 14, 2004, and is now available for all supported languages (English, French, German and Japanese). Public download locations for these updated versions - pending worldwide replication and local proxy and caching issues - are listed below. If there are delays obtaining the latest, updated XML files, be sure you review KB842432 to troubleshoot potential local proxy and caching issues. ENU: http://go.microsoft.com/fwlink/?LinkId=18922 DEU: http://go.microsoft.com/fwlink/?LinkId=18121 FRN: http://go.microsoft.com/fwlink/?LinkId=18122 JPN: http://go.microsoft.com/fwlink/?LinkId=18120 This release supports the following new bulletins (with only limited support as detailed below and in today's web cast): a.. MS04-027 (WordPerfect Converter) - 884933. This bulletin is not supported for detection in MBSA. See KB306460 for more details on supported products. b.. MS04-028 (GDI+) - 833987. This bulletin will generate a Note message on the applicable platforms indicated in the MS04-028 bulletin. This is critical to understand since even though some operating systems may be affected by having a vulnerable Microsoft product installed on an otherwise unaffected operating system, the only platforms that will show a Note message are the Affected Operating Systems (Windows Server 2003 and Windows XP RTM and SP1) and Affected Components (Internet Explorer 6 SP1) as called out in the MSRC bulletin. See KB306460 for more details on supported products. This XML is fully supported for use with MBSA 1.2, MBSA 1.2.1 and the SMS SUS Feature Pack. To get the latest updates, features and Windows XP SP2 compatibility, be sure to upgrade to MBSA 1.2.1. SMS SUS Feature Pack users do NOT need to upgrade since all of the features are already provided by SMS. Details of the added and improved features in MBSA 1.2.1 can be found on the MBSA home page (http://www.microsoft.com/mbsa). This release does not include any other fixes, updates or improvements beyond the items stated above. -- Doug Neal [MSFT] dugn@online.microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for the Microsoft Baseline Security Analyzer (MBSA) at the following link: http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer20a This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: Virus Tag: 61278
  - 7
    - Microsoft Security Bulletins for September 2004 September 14, 2004 Today Microsoft released the following Security Bulletins. Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summaries: September Summary http://www.microsoft.com/technet/security/Bulletin/ms04-sep.mspx Critical Bulletins: MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) http://www.microsoft.com/technet/security/Bulletin/MS04-028.mspx Important Bulletins: MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933) http://www.microsoft.com/technet/security/Bulletin/MS04-027.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Virus Tag: 61277
  - 8
    - has hotmail been hacked? anybody out there notice something is wrong with msn's hotmail.........anybody??? Tag: Virus Tag: 61267
  - 9
    - HLLW.Anig worm - what a pain Hello - Does anyone have any good ways to trap the Anig worm in a large-scale environment? (30,000+ users)? Apparently it's snagged one of our Domain Admin credentials, and it's spreading like mad cow disease in the UK. :) Thanks in advance. Tag: Virus Tag: 61264
  - 10
    - Monitoring machine usage Hi, Part of the great Sarbanes Oxley audit requires that we monitor our third party application providor when they are in the program changing stuff. They usually dial in and then run the program as a terminal service client. My requirements are to capture everything they do. Is this possible? Any products out there? HELP!!!! Tag: Virus Tag: 61262
  - 11
    - Scheduled backups password probs I have yet to successfully run a scheduled M/S backup due to password problems. M/S help suggests running under administrator, this failed also. Why the hell do we need passwords just to run backups? Surely backups take priority over security, it certainly does in the real computer world. Tag: Virus Tag: 61250
  - 12
    - How safe/unsafe is it to use winxp w/o built in firewall? As the subject says, thanx! Tag: Virus Tag: 61249
  - 13
    - users password i set up an individual user & password from the control panel. i no longer need this setting & was looking to delete it & couldn't figure it out? p.s. i have 98!plus Tag: Virus Tag: 61247
  - 14
    - hackers conference malaysian bigest hackers conference to be held on Oct 04-07 2004 http://conference.hackinthebox.org Tag: Virus Tag: 61246
  - 15
    - password doesn't lock anyone out of my pc I want to know if there is a way to lock people out of my pc with a password on windows '98. Tag: Virus Tag: 61244
  - 16
    - password secure Why can't I lock my children out of my computer with a password on windows '98 Tag: Virus Tag: 61243
  - 17
    - CAPICOM Win98SE I have a simple VB application to load a *.pfx file into localMachine certificate store using the CAPICOM api. It seems to work fine on Windows XP, however when I try and run it on Win98SE. I get an error on the load method "Incorrect Parameter" I have tried different combinations but they all seem to fail in the same way. The Load works fine to CurrentUser,My store on Win98. It doesn't seem to like importing to localMachine,root on win98? Dim st As New Store Dim storeLocation As CAPICOM_STORE_LOCATION Dim storeName As String Dim fileName As String storeName = "Root" storeLocation = CAPICOM_LOCAL_MACHINE_STORE fileName = "certname.pfx" st.Open storeLocation, storeName, CAPICOM_STORE_OPEN_READ_WRITE st.Load fileName, "password", CAPICOM_KEY_STORAGE_DEFAULT Any ideas are much appreciated. Thanks, Kevin Tag: Virus Tag: 61235
  - 18
    - Use this Patch immediately I keep getting this e-mail, 5 a day that has an attachment called patch.exe The return e-mail is security@microsot.com It seems fishy to me, but how do I get rid of it? Tag: Virus Tag: 61233
  - 19
    - email distribution When I send email about my link website to any more than 50 addresses at a time, they don't seem to go through. Could this be a virus? Julie Tag: Virus Tag: 61225
  - 20
    - strange files on my computer I was advised to delete anything unusual from c:/documents and settings/owner/local settings/temp. Whenever I try to do this, there is a file that I cannot delete because the system says someone else is using it. The file name first was 1376.fdr. At the time, I was not signed on to the internet, and I didn't even have the telephone line plugged in. This morning, I had the same problem with fdr1416.fdr. What is worse, I went to delete the cookies on temporary internet files, and when I came back to look at the temp folder, there was a file called ~df434c.tmp there, and I cannot delete that either. Since I was not signed on to the internet then and did not have my computer plugged in to the internet, either, and I have disabled the wireless zero configuration on msconfig. It seems to me that there is no way this could happen unless someone is on my computer when I am. I run adaware every day, and also have spywareblaster running. I have installed security pack 2. What next? Tag: Virus Tag: 61221
  - 21
    - security alert pop ups I get the same pop up message time and again directing me to a website for a windows patch to fix a problem it claims to have identified on my computer running on Windows2000. www.windowspatch.net Is this a genuine alert or is it bogus ? Tag: Virus Tag: 61219
  - 22
    - IP logging I have recieved an email from a friend of mine saying that I had registered them to recieve mails from there site as it logged my IP (this is from a porn site btw) and I know for a fact I have not done this can anyone shed any light onto how this is possible he is furious about it and so am I. It has been suggested to me that it could be that I have been logged when I have tried to unsubscribe from these mails (stupid move) as I have access to his mails him being my b/f please help ANYONE !!! Tag: Virus Tag: 61217
  - 23
    - Password Locked Hi there. I just want to make sure about something. We have a user whose password keeps locking out. We checked our security event log and there are 2 PC that registers that locks her password. Both these machines are hers and only she uses them. She insists that there is some kind of problem because she types the password in correctly. First off she is very high up and does not appreciate a technician to tell her that she types like her ass. 2nd Some other technician told me that there can be a dialer installed on her PC that tries to connect to a site and it runs in the back ground. Is this possible? Can't I load a key logger so that I can proof to her that it is a user error and not the PC or network. Tag: Virus Tag: 61211
  - 24
    - Disabling the ability to read/write to a USB device?? It is highly desirable that USB drives are not used in certain locations (such as financial institutions) - In general this is a very difficult policy to enforce as USB is so handy you don't want to generally disable it. Is it possible to disable the ability to read and/or write to a USB device using the inherent security settings (e.g domain or group policy) for different user groups ? Cheers Mark Tag: Virus Tag: 61210
  - 25
    - Where is a good place to report websites deliberately hacking sufe Where does one report a site deliberately trying to infect surfers with a hacking virus? I mean other than the abuse address shown by Whois, because the netzone holder and my ISP are essentially the same, and my ISP doesn't give a hoot, based on prior reports to them from the same netzone that were responded to with, basically, the information that I ought to resolve the matter myself. I come across a website that tries to compel acceptance of a virus (in this case Mhtreder.ge) which enables further hacking, at 4.31.21.33, at a textually described (from Google) site called nakedpics.name/britney-spears-clips-sexy/ britneyspearsclipssexy.html (three guesses what I was surfing for). My Panda firewall/virus picked up the named virus or variant being downloaded via one of those OS-mimetic pop-up windows and which requires going to task manager and completely nuking the browser to get out of. By coincidence, or perhaps not, I have been having persistent port scan attacks from the 4.31.x.y netzone since at least the start of September. They're a busy little set in that netzone! At any rate, is there a proper place for me to report a website deliberately virus infecting surfers other than a nonresponsive company and potentially nonresponsive abuse email address? Tag: Virus Tag: 61208

Dear Sir / Madam,

Recently I always receive an error message :
This compute is infected with a spyware called " Online Dialer / MaConnect ".

Security Scan Report show :
A broweser parasite called " My Search " has infected this computer .

I need your advise.

Thank you.

Top

Re: Virus by Jurren

Jurren
Thu Sep 16 06:26:48 CDT 2004

Matt wrote:
> Dear Sir / Madam,
>
> Recently I always receive an error message :
> This compute is infected with a spyware called " Online Dialer / MaConnect ".
>
> Security Scan Report show :
> A broweser parasite called " My Search " has infected this computer .
>
> I need your advise.
>
> Thank you.
>

See:

"Dealing with Unwanted Spyware and Parasites"
http://mvps.org/winhelp2002/unwanted.htm

And/or:
"THE PARASITE FIGHT"
http://aumha.org/a/parasite.htm

"Remove MySearch Spyware"
http://www.spyany.com/program/article_spy_rm_MySearch.html

--
Jurren Bouman
MVP Windows - Security

"Microsoft Trustworthy Computing: Security"
http://www.microsoft.com/security/default.mspx

Top