Virus...worm...mrbupd.dll

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - black worm i can not get rid of this thing...a pop up saying i may be infected with the black worm virus.... Tag: Virus...worm...mrbupd.dll Tag: 82507
  - 2
    - msn messenger hacked I dont think there is a solution to this but thought i may as well try. I spoke to a friend today who mentioned something about a conversation we'd had a couple of nights ago on msn messenger..... however i wasnt on. Now i know whoever hacked into my account obviously knew me as they talked about fairly personal things so it isnt a major security issue however i would just like to know who it was. My password wasnt changed and it was definately logged in on another computer. I know its a long shot but is there any chance i can find out who it was?! thanks. Tag: Virus...worm...mrbupd.dll Tag: 82505
  - 3
    - NTFS home folder default permissions. I dont want my users to be able to execute files under their home directory. Using NTFS, how do i achieve this? The problem is, in a domain, when a user logs in in any computer for the firs time, his profile is created with default "full control" permissions. Even if I change it, every new profile created with this propertie. My profile directory is: x:\users\<usernames> Tag: Virus...worm...mrbupd.dll Tag: 82504
  - 4
    - Possible to track user's file system usage? Hello, We have a top level employoee who has given his 2 week notice. The president of the company came to me becuase he is worried that this employee will 'steal' information over the next two weeks. Now likely if he were going to do that, he already would have before putting in his notice. It is important to the company that he trains his replacement over the next two weeks, so they'd rather not terminate him immediatley. So my question is, is there a way (or 3rd party product) in Windows 2000\2003 to capture\audit what files a user copies from network drives to his local computer? Thanks! Tag: Virus...worm...mrbupd.dll Tag: 82497
  - 5
    - Hotmail signout When I click on sign out of Hotmail I get a screen that seems to indicate I didn't sign out sucessfully because there is no checkmark alongside the hotmail account. The screen shows 4 red X marks that seem to indicate I did not sign out of anything. Is this normal and am I signed out after clicking on "sign out"? Tag: Virus...worm...mrbupd.dll Tag: 82495
  - 6
    - Change Journal access to backup Operators Hi, Backup Operators do not have access to change journal. I tried local security settings - user access rights but i cant find a way to provide backup operators to have access to change journal. If change journal is simply like a file then why backup operators do not have access to it. Also is there a way to allow backup operators to have access to change journal in windows. Thanks Udayan Tag: Virus...worm...mrbupd.dll Tag: 82494
  - 7
    - internet explorer password i have forgotten most of my password, because i always use the password remember function that's in internet explorer. now i want to log in from other computer but i cant get my password.. how am i going to get my password back from the internet explorer? Tag: Virus...worm...mrbupd.dll Tag: 82491
  - 8
    - Services.exe strange behaviour I had a virus infection on my Windows XP Pro SP2 installation a month ago. I have successfully removed the infection, but I have noticed some strange behaviour on my system ever since. Upon startup, maybe 25% of the time, services.exe will die, causing my system to shutdown after a 1 minute timeout. Also, if my wireless network connection is enabled, services.exe will enumerate every single file on my hard drive, in alphabetical, depth first order. This can take upwards of 1 hour, and is only noticable because I was using sysinternals filemon utility to trace another problem. About every 30 minutes, the services.exe will hit 100% CPU usage for about 15-30 seconds. Interestingly, if I am connected to a network with the wired network adapter, or if I am not connected to any network, services.exe does not enumerate the files or takeu up the CPU time. There are no suspect ports open on my machine. I have verified that the services.exe file is the same (with a file compare) as the one provided with SP2, and that the services.exe that is running is indeed running out of the c:\windows\system32 directory and not some rogue directory. I have only minimal services running on this machine. The only two running services listed to run under the services.exe are Event Log and Universal Plug and Play. It seems to me that this is not appropriate behaviour. My question, then, is: should I expect this behaviour from services.exe? How can I troubleshoot further to determine if this is a problem or not? Thanks, Sam Tag: Virus...worm...mrbupd.dll Tag: 82489
  - 9
    - Embed-tag referring to dynamic rendered SVG content is blocked in IE6 Hi all, I have a problem regarding the embed tag using IE6 with most recent security patches running on a Windows XP. The following scenario lets me loose hours figuring out the reason, why it doesn't work :-( : I have a simple ASPX-page containing an EMBED-tag, which refers to another page, which dynamically creates SVG code. <html> <embed src="svgContent.aspx" id=svg width="888" height="1050" type="image/svg+xml" /> </html> This worked fine until a few weeks ago. Until then, IE 6 just shows an empty page. No errors, no nothing, only a white readonly frame with no content. Checking the html-protocol it seems, IE just doesn't adress the "svgContent.aspx" at all. It's not even trying to load the page. On an older machine, this works perfectly. So I guess, it must be a security issue. But scanning the web I found nothing that could give me a hint and what I could do making it work again. Also, if I link the src attribute to static content, eg. helloworl.svg, everything works perfectly. It seams, IE6 (or IIS6) realizes, that there is dynamic content and does not allow redirecting it to the SVG-ActiveX Control. The svgContent.aspx looks something like this: <script language="c#" runat="server"> protected override void Render(HtmlTextWriter writer) { string svgSource = Server.MapPath(@"svgsimple1.svg"); Response.ClearContent(); Response.ContentType = "image/svg+xml?"; System.IO.StreamReader reader = new System.IO.StreamReader(svgSource); string content = reader.ReadToEnd(); reader.Close(); Response.Write(content); Response.Flush(); Response.End(); } </script> Of course, this sample makes not much sense, since I just load a static svg-file. In the real application, the code is fully dynamically composed and written into the Response object. These are the configurations: Client: - IE6 running on Windows XP SP2 - most recent security patches - Adobe SVG Viewer 3.03 installed Server: Windows Server 2003 with IIS 6 Anybody has an idea, how to solve this problem? Any help appreciated! Thanks in advance Daniel Tag: Virus...worm...mrbupd.dll Tag: 82488
  - 10
    - Ink Sorry guys. The spam stuff was not my intent. I do oppoligies and won't happen again. I have never been on newsgroups before and not sure how to work them. I hope you guys can forgive a bad choice. Murphey Tag: Virus...worm...mrbupd.dll Tag: 82486
  - 11
    - Ink Man I have found this site that has the cheapest ink for any printer. You can compare prices and then review the companies on service and quality. <http://www.imagraphix.com> Let me know what you think Tag: Virus...worm...mrbupd.dll Tag: 82480
  - 12
    - Open file - security warning....How do I disable it? I would like to disable this feature for all users. Here is the context 1. We are in the process of migrating to windows server 2003. We have our data directories setup so that each client server accesses DFS shares instead of directly talking to the servers that hold the client data. The basic file system looks something like this: \\domain\dfs\dfs_folder1 \\domain\dfs\dfs_folder2 \\domain\dfs\dfs_folder3 \\domain\dfs\dfs_folder4 \\domain\dfs\dfs_folder5 etc......... When I click on certain .exe's or .bat's I notice that a dialog box comes up for any user: open file - security warning. I have already gone through the posts on this subject and I am able to remove the warning if I go into gpedit.msc and then to the "User configuration\attachment manager", I can specify a file type, ie. all .exe's or all .bat's which doesn't help me because this appears to say to ignore ANY .exe which is dangerous. I need the protection. I want to be able to specify a list of permitted programs and have the computer not ask me about them similar to creating an exception in the windows XP firewall menus. The reason I think it is not working is because gpedit.msc seems not to recognize the UNC names of my DFS structure. "\\domain\dfs\share". I would love to be able to add a wild card so it understands to treat the entire domain as intranet or local and then remove security inside the network. 2. Next, I need to be able to make this a system wide adjustment without going in the individual profies and making the changes all across the network. I have also added the domain and all the servers to the trusteds and local internet/intranet sites. Any viable solution I find is a USER specific fix. I need to be able to run this GLOBALLY meaning for everyone on the network including the system admins. This would be great if either a .reg file existed or a script that I could use in order to manualy add the exceptions, or disable the IEES altogether. If we can keep it active great, but if it not then it is certainly not the first priority. 1. My question is how can I set a group policy rule to allow programs originating from inside the network wihtout this prompt Tag: Virus...worm...mrbupd.dll Tag: 82477
  - 13
    - No Admin Rights How can I overcome the obstacle of not having admin rights to install or download on a "Work" PC? Recently assigned a new PC, however, I can not reload my personal programs I'd previously used in order to complete my assignments. Can not go through my "Administrator" Tag: Virus...worm...mrbupd.dll Tag: 82474
  - 14
    - Automatic Security Update I have MS Office Prof & XP. Windows recently auto dl'ed an update. I tried to install it and rec a msg that tells me that some required files are on the original Office CD and that I should put that CD in the machine. That is part of the prob, I am on the road and do not have the software with me. The other part of the prob is that I need to use Excel and when I try to start it the auto installation of the security update starts instead and we go through the same process which effectively blocks Excel from running. My question is how do I block or delete this particular auto update? Thank you. roger1938 Tag: Virus...worm...mrbupd.dll Tag: 82466
  - 15
    - Several encryption schemes suddenly missing in Excel 2003 From one day to the next one I suddenly can't open a password-protected Excel file anymore. After investigating this issue I found out that the Excel file uses the encryption scheme "RC4, Microsoft Base Cryptographic Provider v1.0". However for some strange reason this encryption scheme isn't available any more in my Excel 2003. From all the encprytion schemes listed at http://support.microsoft.com/kb/294414/en-us my Excel 2003 suddenly only knows these anymore: - XOR encrpytion - Office 97/2000-compatible - RC4, Microsoft Base DSS and Diffie-Hellman Cryptographic Provider - RC4, Microsoft DH SChannel Cryptographic Provider - RC4, Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider Another user on this laptop however has the full list of encryption schemes available and can open the password-protected Excel file. Now how do I get back the other encryption schemes? Thanks in advance, Boris Tag: Virus...worm...mrbupd.dll Tag: 82464
  - 16
    - How can I decrypt a Microsoft Word document for which I have the key? Hi all, I'm rather a novice when it comes to security concerns in the Microsoft realm, so please bear with me. Here's my situation: A friend has an old Microsoft Word (97+, I am guessing) document for which she has set an "open document password." That is, the file is password-protected and encrypted. She has forgotten the password for the file and now needs to open it, but can't without cracking the security protection she has already placed on it. I have never before even attempted anything like this, but figuring it a good opportunity to learn something I took it upon myself to see if I could help. My research uncovered a plethora of Windows-based tools (applications) which promise to recover the password if I buy the full version of the program, but since this task is largely for my own edification it would be utterly pointless just to pay for a program. Nevertheless, I tried to the demo versions of plenty of these programs. One proved fruitful: it has managed to recover the encryption key used on the document. So now I have learned several things about the Word document. Firstly, the password is more than five characters long. Secondly, that it is likely a "modern" version of Microsoft Word. Thirdly, and I am assuming most helpful, I know the precise encryption key. Knowing these things, especialy the encryption key, how can I now decrypt the document and read its contents? Thanks in advance for pointing me in the right direction. Regards, -Meitar Tag: Virus...worm...mrbupd.dll Tag: 82460
  - 17
    - Norton Intrusion Detection - I can't activate it! :( When I try to activate Norton Internet Security Intrusion Detection, a pop up window appears saying "Failed to save setting, please verify that your windows account is not restricted". I have no idea what this means or how to rectify it, if anyone has any idea, please help as I am having a great deal of trouble trying to uninstall/disable adware on my computer, so being able to prevent it loading onto my system in the first place would save alot of bother. Thank You ;) -- Nad x Tag: Virus...worm...mrbupd.dll Tag: 82438
  - 18
    - Strange Security Message Had an unusual message show up my screen...went something like: Your system may be vulnerable to blackworm..and recommends a download to prevent further malware infections. It give an IP address of 154.11.109.30(if that means anything).The software download names are Antivirus pro and Antispy,both 2006. Is this for real???? I recently downloaded firefox because I was having a problem with IE. I took a snapshot of the message if anyone wants to have a look. I also am getting little pop up messages saying a security alert for default block DM setup Trojan Horse. I am fairly new at this,so please be gentle. I think I'm in BIG trouble! TMacK Tag: Virus...worm...mrbupd.dll Tag: 82426
  - 19
    - Copying local policy from one computer to another (No AD) Hi, I have created local policies on 1 PC. Now, I would like to copy and apply these local policies on another computer. I know it has to be done with SecEdit but I have problem figuring out the whole process (I tried to do it but it didn't work. Can someone refer me to a good doc on the web ? Thanks JM Tag: Virus...worm...mrbupd.dll Tag: 82420
  - 20
    - Setting Folder Permissions????? I was wondering if anyone could tell me how to set folder permissions on a shared folder. The problem is, my computer is set up on a small workgroup on a large network, and within our workgroup we have to share certain files amongst ourselves, however I don't know how to keep these important, private files from being accessed anywhere else on the network. Is there a way to set a password to these files that only we would know in order to still gain access to these files but also to keep them from the rest of the network? Tag: Virus...worm...mrbupd.dll Tag: 82410
  - 21
    - Enabling Norton Anit-Virus At my home computer, when I start the computer and it loads, Norton Anti-Virsus loads but see It has an x through it in the system tray, I always to have to manually enable the virus protection. How can I have it so that it enables by itself when Windows loads instead of having me do it? Please Help! Tag: Virus...worm...mrbupd.dll Tag: 82409
  - 22
    - Microsoft Security Bulletin(s) for 3/14/2006 Note: There may be latency issues due to replication, if the page does not display keep refreshing March 14, 2006 Today Microsoft released the following Security Bulletin(s). Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summary: http://www.microsoft.com/technet/security/Bulletin/ms06-Mar.mspx Critical Bulletins: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (905413) http://www.microsoft.com/technet/security/Bulletin/ms06-012.mspx Important Bulletins: Permissive Windows Services DACLs Could Allow Elevation of Privilege (914798) http://www.microsoft.com/technet/security/Bulletin/ms06-011.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- -- Melissa Travers, MCSE MVP Lead - Exchange Server, Security & Virtual Machine Please do not send email directly to this alias. This alias is for newsgroup purposes only. This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Virus...worm...mrbupd.dll Tag: 82397
  - 23
    - svchost.exe hi all, I understand it is not unusual to have multiple instances of svchost.exe running in, processes>task manager, i have 6 running at the moment. my problem is one of these processes is using 15,000-18-000k. personally i have never known this process to use much more than 1,500k. could this process be up to no good? i have scanned with AVG, spy-bot and Ad-aware (all updated) but nothing showed. Not really had any problems with my pc although running slightly slower than usual but i would like to solve this little problem before it becomes a big one. any help is appreciated. regards lee. Tag: Virus...worm...mrbupd.dll Tag: 82396
  - 24
    - Re: window defender Tried that and it said cannot find. -- Peggy Tag: Virus...worm...mrbupd.dll Tag: 82389
  - 25
    - window defender My defender icon on the tool bar is showing a notice that it has not been updated in 14 days but it has been twice by windows itself, 7 times by me and 5 automatics according to the history log at windows.com just today. I have rebooted twice and turn comp off for 10 min once. Still icon hasn't changed. What's wrong? -- Peggy Tag: Virus...worm...mrbupd.dll Tag: 82386
- Next
  - 1
    - Perfmon is Unable to connect to machine I am unable to view performance counters on another server. When I attempt to connect I receive the followign message "Unable to connect to machine". I am logged in using a domain admin account. The server I'm attemting to view is a Windows 2003 Standard Edition Service Pack1 and the machine I'm attempting to view from is Windows 2003 Web Edition SP1. Note: I am able to view performance counters on some of the servers in this domain using this account, however, not all servers. With the event viewer I am able to connect to the computers I'm unable to view the performance counters on. Is there a local polity that can disable this feature? Tag: Virus...worm...mrbupd.dll Tag: 82385
  - 2
    - Any usiing Windows Rights Management? Is anyone using Windows Rights Management (WRM) for securing files? I have a file (Front-end/Back-end Acees Database) on our network that I would like to restrict users from having the ability to copy. I was told that if I want them to have the ability to update the database, then they by default must have the ability to copy the DB. Anyone know if WRM can achieve this? Or is there another way I can do this. thanks Roman Tag: Virus...worm...mrbupd.dll Tag: 82379
  - 3
    - How to clear the Certificate Services "failed requests" log Windows 2000 Server, with Certificate Services installed. Some months ago, a use was removed from the domain, but that user was specified in a couple of the local policies on this server. Long story short, for the past several months, there's been an entry added every 5 minutes to the "failed requests" log seen in the Certification Authority mmc snap-in. Things have been working, so I never noticed the problem until today. I have corrected it, but am left with the problem that there are so many thousands of failed requests in the log, it is virtually unusable. How do I clear that log? Tag: Virus...worm...mrbupd.dll Tag: 82374
  - 4
    - Password Expiration for Remote Users We are finally getting smart about security. We want to implement password expiration. The problem is that we have a significant field user base that uses Outlook running RPC over HTTP to access Exchange. I need to find out if I set these users to have their passwords expire, how do they get prompted to change the password or do they even get prompted? I have been looking for info but haven't found anything on this YET. Any help would be appreciated. -- Donald Palmer, MCSE Tag: Virus...worm...mrbupd.dll Tag: 82373
  - 5
    - Strange Traffic Coming from the NetBios Service Im having a problem with 4 out of 6 of win2k server. The server keep issuing Netbios enumeration requests (every second) to server which are in the range of 128.X.X.X to 138.X.X.X. (Most of these server are class B network belong to NEC and JP government).They are small packets, but this happening continousaly. It looks very like a virus but why would it be coming from the Service.exe process. Ive unbound Netbios from the interfaces which has stoped the speurios traffic but i still dont have an idea whats causing it, any why is happening. Tag: Virus...worm...mrbupd.dll Tag: 82372
  - 6
    - dear malke dear malke thankyou very much for responding to my question so promptly. your help was very much appreciated. linda Tag: Virus...worm...mrbupd.dll Tag: 82354
  - 7
    - Alfacleaner - Removal questions Hi, we are running Windows XP and use McAffee Suite. Last week, AlfaCleaner appeared on our computer. I had no idea what it was or where it came from. I noticed it only because I was getting warnings saying it was trying to connect to the internet. I tried to remove the program by clicking on the "uninstall" option. However, after 3 attempts at this, each one resulting in a "fatal error" which shut down the computer, I opted to do a system restore back to a date before the appearance of the AlfaCleaner. This removed the program from my desktop and list of programs. My concern is that I did some research on AlfaCleaner today and learned it is malware and has teh ability to reactivate itself even after removal. I'm not a computer whiz and concerned this will happen to us. I found 11 pages worth of instructions on bleepingcomputer.com outlining how to remove the Alfacleaner and am wondering if that's what I need to do. This evening I dowloaded Windows Defender. It scanned and only came up with one suspicious file (not AlfaCleaner) that I had it remove. My question is...was the system restore I did sufficient to remove AlfaCleaner or could it still be out there lurking on my computer. I would appreciate any help or guidance you could offer. Thanks, Tag: Virus...worm...mrbupd.dll Tag: 82349
  - 8
    - CPSHOST.DLL Security Hi All, I have a web application that is a mix of ASP and ASP.NET, and there are a few areas where authenticated users can upload files using CPSHOST.DLL. What are the potential risks that some unknown person would be able to upload malicious software to my web server? Is there a way to lockdown IIS 6.0 without causing everything to fail? Tag: Virus...worm...mrbupd.dll Tag: 82345
  - 9
    - Help-My laptops Windows keeps rebooting I have a laptop here (not the one I'm posting from) where suddenly it will not boot to Windows but instead tries to start over, reboots then starts over again, over and over continuously. If I press the F5 key it will bring me to the page where I can choose: -Safe Mode -Reboot from network -Reboot from last known working Windows (however it's worded) -Boot from Windows -(& a few other choices) but no matter which choice I choose it all still does the same thing. It tries to load Windows then cuts of & reboots, tries to start Windows then cuts off and reboots over and over and over. In other words, I can not get into the Safe Mode or anything. This morning the laptop was working properly. This afternoon the laptop was malfunctioned-----or infected. I am wondering if I possibly have the following virus (w32/IRCbot.worm) but then I have no earthly clue what is actually going on. Can anyone help me out on what to do to get this laptop back to where Windows without having to reinstall Windows XP to where I loose all of it's contents. Is there any programs I can install by inserting a bootable CD to get rid of this problem? In other words, I have a seperate laptop to make a bootable CD to get rid of the problem in the other laptop. Any advice is appreciated. If you know a place where I need to ask this question somewhere else on a different message board or diffferent newsgroup, please let me know. Thanks :) Tag: Virus...worm...mrbupd.dll Tag: 82344
  - 10
    - Bad booters on yahoo chat rooms Hi ! I chat in a room in yahoo chat but I am having problems with some bad people that all they do is swearing on the mic all the time and booting everyone trying to use the mic or to talk to them to stop.The problem that I can not block them because they use special software that protect them from being blocked. If there is any solution or anything I can do to boot them from that room, please provide me with. Looking forward to getting an answer to my issue. Simo from Colorado. Tag: Virus...worm...mrbupd.dll Tag: 82336
  - 11
    - How do I know if I am being compromised Sometimes I use my computer and it seems so slow at times a IE window takes forever to load. (XP service pack 2, Win Defender, Spybot, AdawareSE, Spywareblaster) Tag: Virus...worm...mrbupd.dll Tag: 82335
  - 12
    - Defacement on MSN? Just noted that titles on "Latest Stories" are showing odd characters. Confirmed on second computer. Anyone else see this at: http://moneycentral.msn.com/investor/home.asp CT Tag: Virus...worm...mrbupd.dll Tag: 82332
  - 13
    - x509 General question about x509. My understanding is that x509 is used to protect data while it is in transit (from one web server to another, etc). Once the web server receives the data , it is decrypted accordingly. x509 is only a transport encryption. You cannot use x509 to encrypt a file and keep it safe on your file system. Is this correct? If this is the case, how is x509 different from SSL? My guess is that x509 provides more security, such as authenticating the sender, etc so you can reject the request (keep unwanted people away from your webservice). Any help is appreciated. Links to good x509 sites are good too. Chris Tag: Virus...worm...mrbupd.dll Tag: 82326
  - 14
    - Rename running process (can't) I posted this on the XP general newsgroup, but I'm not sure that was the right place, this might not be either. On all my computers, with Windows 2000 and up (apparently it should work lower NT versions as well) I can rename an executable that is currently running with either a MoveFile inside the program, or manually in the shell. On one of my machines I can't, and I get a sharing mode (code 32) error. Does anyone know what could influence this functionallity and make it impossible to do this on that particular machine? The machine is close to a fresh install, mostly there's just Windows OneCare on it. I only found one post about not being able to do this, back in 2003, with no real anwser http://groups.google.ca/group/microsoft.public.win2000.file_system/browse_thread/thread/d061625492aababe/5613724362886a6d?tvc=2&q=group%3Amicrosoft.*+rename+running+process -- Etienne Boucher Tag: Virus...worm...mrbupd.dll Tag: 82323
  - 15
    - spybot scan advice on a security issue on doing a spybot scan it reported spyware of Windows security centre override antivirus. which in turn i deleted. but this returns on start up. have i been redirected at ant such time to a hoax microsoft site downloading updates or is this some sort of other problem. why would windows override my antivirus programme any help much appreciated Tag: Virus...worm...mrbupd.dll Tag: 82320
  - 16
    - Cannot install any antivirus software I've Windows XP profession system currently without any anti-virus protection. I suspect there is some kind virus after verifying DoS to microsoft, symantec etc. Winlogon.exe is always consuming much of the system resources. When I tried to install Norton antivirus, I got directory access permission denied error. Then I checked Program Files\Common Files\Symantec Shared it was marked as Read Only, even if I remove read-only flag within seconds it was set back to Read Only (I have admin previllages in this system) Similar errors (directory access permission denied) were met with Kaspersky installation, AVG installation. And I and stuck without having a anti-viurs soultion. Can somebody help me to solve this problem? thanks in advance Raj Nair Tag: Virus...worm...mrbupd.dll Tag: 82304
  - 17
    - Web Certificate Enrollment security problem Have a problem that many others have, but haven't found any solution in KB or another NG Post. There are hints that something has to be ajusted with dcomcfg, but not any hint what has to be changed. - Have an enterprise CA on a Windows 2003 SP1 enterprise edition member server - Have the Certificate Web Enrollment Website installed on another Windows 2003 SP1 member server - Have enabled "trust this computer for delegation" on the computer with the Certificate Enrollment Website according KB 239452 - Rebooted both member servers - Have tried with either Windows and Basic authentication When requesting a certificate, after the Website shortly displays "processing request", the following error appears: Error Your request failed. An error occurred while the server was processing your request. Contact your administrator for further assistance. Request Mode: newreq - New Request Disposition: (never set) Disposition message: (none) Result: Access is denied. 0x80070005 (WIN32: 5) COM Error Info: CCertRequest::Submit Access is denied. 0x80070005 (WIN32: 5) LastStatus: The operation completed successfully. 0x0 (WIN32: 0) Suggested Cause: The Certification Authority Service has not been started. Thank you all in advance for any suggestions. Franz Tag: Virus...worm...mrbupd.dll Tag: 82301
  - 18
    - MS06-011 question I was a little surprised when MS06-011 was released today for Windows 2003 when installed with no service pack, even though the security already exists in SP1 for 2003. I would have expected Microsoft to just have people install SP1. Any insights why MS did it this way rather than pushing SP1 --Scott Tag: Virus...worm...mrbupd.dll Tag: 82295
  - 19
    - I need help with a rights issue Last week one workstation started giving me the message "You do not have sufficient privileges to uninstall devices...........blah blah blah" when I open the device manager. This computer is XP Pro on a corp network. I am a workstation admin with domain, workstation, admin, etc rights. Nothing has changed on the local pc according to my knowledge. It does not happen on other computers so it has to be on this one. If I logon with the administrator account of the local computer it also occurs. I had one of our company's domain admin's login and it does it to him. I would appreciate any info I can get. Tag: Virus...worm...mrbupd.dll Tag: 82286
  - 20
    - User privileges Hi All, I am trying to give a user the following privileges in an MS2003 Active Directory environment: This user must be able to: 1-Logon to the server locally and remotely trough terminal services 2-Backup and restore data 3-create users and mailboxes 4-Join workstations to the domain This user must be unable to: 1-Change the permission on a folder or file. 2-Take the ownership of a folder or file 3-Make himself member of the administrators group Any ideas on how this can be done? Thank you all, Do u have an idea how this can be done? Tag: Virus...worm...mrbupd.dll Tag: 82284
  - 21
    - How block the file tranfer service from msn 7.5 i won't send files from my pc, how can i block this, i have a norton personal firewall, is this possible??? Tag: Virus...worm...mrbupd.dll Tag: 82283
  - 22
    - Assigning Security through W2k3 to W2k Trusted Domains Situation: I have created a trust between two domains in two different forests. DomainA is a mixed Windows 2003 domain. DomainB is native Windows 2000. The trust can be validated and seems to be working in every way. I have validated on both ends of the trust. There is no firewall blocking the servers. Problem: When I try to add access for a user or security group from DomainB to a folder on a server running w2K on DomainA, I get the following error: "Could not display objects from this location because of the following error: No authority could be contacted for authentication. " I can do the same steps on a windows 2003 server and it browses the domain and adds the security just fine. Also, I can assign security on any server or PC on DomainB with groups or users from DomainA. OS does not seem to matter. Process I am using to assign security Right-click on folder, select security tab, click location and select DomainB. This is when I get the error. Please help. Thanks DevGD Tag: Virus...worm...mrbupd.dll Tag: 82280
  - 23
    - New MSSecure.XML Version 2006.03.14.0 Now Available MBSA 2.0 detection is based directly on Microsoft Update, so all inquiries regarding MBSA 2.0 patch detection for this month's release should by sent to the public microsoft.public.softwareupdatesvcs newsgroup. This announcement is specific to MBSA 1.2.1 and the underlying MSSecure.XML file that services the MBSA 1.2.1 tool. MSSECURE.XML Data Version 2006.03.14.0 (for use by MBSA 1.2 and SMS SUS Feature Pack) was last modified today, March 14, 2006, and is now available for all supported languages (English, French, German and Japanese). Today's release contains 2 new bulletins which are fully supported by MBSA 1.2 for detection with the integrated version of the Office Detection Tool (ODT): New March Bulletins 1) MS06-011 (Windows Services) - 914447. This patch affects Windows XP SP1 and Windows Server 2003 RTM only and does not supersede any previously-released bulletin. 2) MS06-012 (Microsoft Office and Excel) - 905413. This patch affects Office 2000 and 2002 (XP) Office and MUI components, all Microsoft Works Suites and only the Excel 2003 component in Office 2003 (see MS06-012 bulletin for details and supersedence). MBSA supports scanning for these vulnerabilities using an integrated version of the Office Detection Tool which supports local scans only. -- Doug Neal [MSFT] dugn@online.microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for support on the Microsoft Baseline Security Analyzer (MBSA). Information is available at the following link: http://support.microsoft.com/default.aspx This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: Virus...worm...mrbupd.dll Tag: 82279
  - 24
    - Convert Group Policy to Template Is it possible to take the settings in a GPO and make a template out of them, which would create the settings in the SDL language? I can and do import settings, but I don't have the original template and need to go the other way. Tag: Virus...worm...mrbupd.dll Tag: 82276
  - 25
    - Intrusion attempt I am running Norton AV on XP SP2 Just lately it keeps blocking MSSQL Stack BO. I am just a bit concerned that this has been going on for a couple of weeks now and happens several times a day. previoulsy I haven't noticed any intrusion attempts that have been so persistent! have I got anything to be worried about? Thanks for your advice -- Kevin Tag: Virus...worm...mrbupd.dll Tag: 82268

Hi,

Message:
mrbupd.dll
qagent.exe
this applicatin was not found; reinstalling the application may fix this
problem

In addition her computer is loading in a temporary profile and states that
she doesn't have security access to get into her profile...the system goes
straight into the temporary profile and bypasses her regular profile option.
She cannot get into any of her programs in the temporary profile. She cannot
find her original system disks.

Any clues anyone can give? How can she get her security back to get into
her profile?

Thanks.
Kathy

Top

Re: Virus...worm...mrbupd.dll by Patrick

Patrick
Mon Mar 20 23:00:27 CST 2006

Kathy wrote:
> Hi,
>
> Message:
> mrbupd.dll
> qagent.exe
> this applicatin was not found; reinstalling the application may fix this
> problem
>
> In addition her computer is loading in a temporary profile and states that
> she doesn't have security access to get into her profile...the system goes
> straight into the temporary profile and bypasses her regular profile option.
> She cannot get into any of her programs in the temporary profile. She cannot
> find her original system disks.
>
> Any clues anyone can give? How can she get her security back to get into
> her profile?
>
> Thanks.
> Kathy
>
>
>

Two things for you. It appears that the mrbupd.dll file is for Need For
Speed Porsche Unlimited (amongst other games), although there could be
other uses for it. Also, the qagent.exe is the Quicken Download
Updater. So, I would venture that if you have Quicken installed, you'll
want to do a repair on it.

As for the temporary profile issue, I'm afraid that I won't be of much
help there. Since I'm not sure whether the profile is her user profile,
or a profile inside of a program (such as Need For Speed).

HTH a little,
Patrick.

Top