MS04-016 Windows XP question

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - DirectX MS04-016 version question I'm looking to determine the versions of DirectX I have installed in my network and running dxdiag shows I have 8.1 - I've also noticed the 4.08.01.0810 listed as the version also. I'm wondering if the two numbers are the same in some way? Tag: MS04-016 Windows XP question Tag: 54616
  - 2
    - Virus attacks Hi. I have a strange problem... I'm trying to install a fresh copy of Win XP. Right after I instal it, I'm trying to connect to the internet to download the security updates get rid of all this holes that the viruses us. But at the second I connect to the net, some vituses geting in and craping the win. So I thought, maybe there's some sort of security update file, that I can download from the MS site and then intall it offline??? If you guys have any idea, where I can find such thing, it would be very helpful. Tag: MS04-016 Windows XP question Tag: 54604
  - 3
    - Syn Flood Attack My office computer has been under a Syn Flood Attack for about 1 week. We have had over 56,000,000 attacks and am wondering if anyone knows how to stop this Tag: MS04-016 Windows XP question Tag: 54593
  - 4
    - Restriction in effect on this computer ?? All of a sudden when I try to access any type of hyperlink, either in Outlook 2003 and or website, I get the following error message... â??This operation has been canceled due to restrictions on this computerâ?¦â?? I am running XP Professional and the only user account is mine (administrator). Any help or suggestions would be appreciated. Tag: MS04-016 Windows XP question Tag: 54580
  - 5
    - Problems disabling ports 135 and 1025. Hello I have a Windows Server 2003 Web Edition box I'm trying to get ready to put on the net and I can't get I've read all sorts of procedures to disable ports 135 and 1025, and none of them have worked. I would settle even to change them to listen on localhost instead of all IPs at this point. DTC is disabled, NetBIOS is disabled, Task Scheduler is disabled, I've changed a bunch of registry keys and everything save deleting rpcrt4.dll but it doesn't close the thing. Port 1025 is owned by lsass.exe and 135 by svchost.exe, which doesn't help very much. rpcdump.exe says 1025 is "ncacn_ip_tcp", an "IPSEC policy agent endpoint", but disabling IPSEC Services doesn't close it either. Everything seems to depend on the RPC service, so maybe port 135 is an unwinnable battle for a usable IIS server. Is there a way to tell either or both of these services to listen on localhost, or a specific IP? Slapping a firewall on it isn't a desirable hack/kludge/"solution" Thanks for any advice. Tag: MS04-016 Windows XP question Tag: 54575
  - 6
    - passwords I want to create a folder or file that only I can open iewith a password.can't seem to find any help so I'm appealing is there anyone here that can help me. Tag: MS04-016 Windows XP question Tag: 54574
  - 7
    - new adware? I have a process running adware. The process associated with a blank window is shrinkwrap.exe Anyone have any clue how to remove this I ended process and it comes back. I do not have IT powers, but I can get the IT department to make changes if it needs to be done at the system level adaware does not pick it up. I search the internet and its not anywhere Thanks in advance. Tag: MS04-016 Windows XP question Tag: 54572
  - 8
    - Error 1304 Access Problem... HELP!!! Hi there, I'm getting an access error suggesting that I dont have sufficient rights to a certain foler (C:\WINDOWS\INF) while trying to install a Bluetooth USB adapter. I have opened this folder independantly of the installer and found that although it is not read only, i still cant right to it?? Any ideas? Do I need to get additional rights on my own computer???? Tag: MS04-016 Windows XP question Tag: 54570
  - 9
    - Install of SCEP fails When installing the Simple Certificate Enrollment Protocol (SCEP) Add-on for Certificate Services I keep getting the following error after clicking finish. "Setup Failed. Failed to enroll RA certificate. The parameter is incorrect." Any ideas. Thanks in Advance Tag: MS04-016 Windows XP question Tag: 54568
  - 10
    - Network Security. Hi all. We currently have a scenario where all our users connect to a main terminal server, and from here they can terminal serve to various other machines on the network. What we would like to be able to do is limit where the users can get access to. So for instance user A can get access to 192.*.*.* but not get access to 10.*.*.* I have looked at ISA server but it doesnt seem to allow you to specify IP ranges that users can access. Any Ideas?? Many thanks. Tag: MS04-016 Windows XP question Tag: 54567
  - 11
    - What protocol does MSN messenger used? Hi All What protocol does MSN messenger used? I have blocked HTTP LAN to WAN access on the firewall, but users are still accessing MSN Messenger. Thanks in advance Best regards June Tag: MS04-016 Windows XP question Tag: 54565
  - 12
    - SpyHunter & ieloader.dll I got warned of ieloader.dll and found Spyhunter, is that one good? It warned of WinActive, Gator, UCmore and GlobalNet as "severe" and many more "Medium" under "Danger", best to take all away? Tag: MS04-016 Windows XP question Tag: 54561
  - 13
    - Protection From HB How do I protect myself from HITLERS BROTHER, oops, I mean Bill Gates. When I set my computer up to do certain things, what gives HB the right to implant commands on my equipment that indiscriminatly changes my set up to what he thinks my set up should be. Gates does not have the intellectual prowess to be the GOD he believes himself to be. Have Little Hitler give me a call so he can tell me how to system back to the way it was. Best time to contact is 18:00 to 17:00 EST 905-357-5457 ask for Wesley Tag: MS04-016 Windows XP question Tag: 54559
  - 14
    - need help from someone who knows I recently found this warning come up on my home edition of XP: The system has detected that a third-party appliction has removed 180search Assistant, possibly without your consent. This may cause some programs not to run as expected. Please choose an option below. 1-re-install 2-leave and clean any remaining 180search assistant files 3-remind me later Now as I am a novice at this computer thing this window is colored like Microsoft but does not have any markings from them so how do I know if this is not a virus? I have never seen this before and don't know what to do please advise. Thx jamie Tag: MS04-016 Windows XP question Tag: 54558
  - 15
    - Hijac log guys whats wrong with my pc Logfile of HijackThis v1.97.7 Scan saved at 13:33:08, on 09/06/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVG6\avgserv.exe C:\Program Files\Common Files\Microsoft=20 Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\ZONELABS\vsmon.exe C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Acer\Notebook Manager\almxptray.exe C:\Program Files\Launch Manager\LaunchAp.exe C:\Program Files\Launch Manager\PowerKey.exe C:\Program Files\Launch Manager\HotkeyApp.exe C:\Program Files\Launch Manager\CtrlVol.exe C:\Program Files\Launch Manager\Wbutton.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\ltmoh\Ltmoh.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\WINDOWS\System32\gsicon.exe C:\WINDOWS\System32\dslagent.exe C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe C:\WINDOWS\System32\wmmon32.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\System32\NAVSCAN32.exe C:\Program Files\Microsoft Office\Office10\msoffice.exe F:\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start=20 Page =3D http://p221.ezboard.com/bafcbohemia R1 - HKLM\Software\Microsoft\Internet=20 Explorer\Main,Default_Page_URL =3D http://global.acer.com/ O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E- 00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [LaunchApp] LaunApp O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32 \igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32 \hkcmd.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program=20 Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program=20 Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [AcerNotebookManager] C:\Program=20 Files\Acer\Notebook Manager\almxptray.exe O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch=20 Manager\LaunchAp.exe O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch=20 Manager\PowerKey.exe" O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch=20 Manager\HotkeyApp.exe O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch=20 Manager\CtrlVol.exe O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch=20 Manager\Wbutton.exe" O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility]=20 C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe O4 - HKLM\..\Run: [MessengerPlus2] "C:\Program=20 Files\Messenger Plus! 2\MsgPlus.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common=20 Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [GSICONEXE] gsicon.exe O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB O4 - HKLM\..\Run: [NAVSCAN32.EXE] NAVSCAN32.exe O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\Avast4 \ashmaisv.exe O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6 \avgcc32.exe /STARTUP O4 - HKLM\..\Run: [Windows Update] C:\WINDOWS\System32 \hivel.exe O4 - HKLM\..\Run: [WSSAConfiguration] wmmon32.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program=20 Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [MSConfig]=20 C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\RunServices: [NAVSCAN32.EXE] NAVSCAN32.exe O4 - HKLM\..\RunServices: [WSSAConfiguration] wmmon32.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32 \ctfmon.exe O4 - HKCU\..\Run: [ChkMail] =08=3DŒ O4 - HKCU\..\Run: [MSMSGS] "C:\Program=20 Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN=20 Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [NAVSCAN32.EXE] NAVSCAN32.exe O4 - Global Startup: Microsoft Office.lnk =3D C:\Program=20 Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft Excel -=20 res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE=20 Class) - http://software- dl.real.com/065cc0611b2d6ffb8314/netzip/RdxIE601.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update=20 Class) -=20 http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl .CAB?38107.2100347222 Tag: MS04-016 Windows XP question Tag: 54557
  - 16
    - Virus XP The virus is stopping my search page, my help and support and my user control panel in XP, any ideas what it is? Cheers Tag: MS04-016 Windows XP question Tag: 54556
  - 17
    - What's this service? Anyone ever heard of Senarpnkdpns? I have this running in my Services and a search of my files comes up empty of anything similar. I ran Adaware and Spybot S&D but they come up with no problems except the usual which I'm able to delete. Tia Tag: MS04-016 Windows XP question Tag: 54555
  - 18
    - VIRUS HELP? URGENT I am in need of your help guys. I think I have some sort of virus on my laptop. I have run sasser and welchia symantec, nohing found, i have run avg and ad-aware, NOTHING that could be the MAIN virus. I sometimes get the LSASS shutdown but have now patched my current problems are....My search facility and help and support facilities in xp do not even load, my user accounts do not load. Occasionally when online my I.E. goes to geocities.com/nubeee or similiar. My PC does tentd not to shut down properly. Tag: MS04-016 Windows XP question Tag: 54548
  - 19
    - Is it over? I'm so depressed. I'm 27 years old; no college degree; no job; about to lose my car (that's actually breaking down badly) since I don't have any money to pay the car insurance; I only have $500 left to my name; I live at home with family who have no money themselves; I have bad rhinitis and throat problems that causes me to have bad breath so I don't even have the self-esteem or confidence to talk to people or enjoy the simple pleasure of a kiss from a female; and I'm at a loss as to what to do with my life, career-wise. Tag: MS04-016 Windows XP question Tag: 54545
  - 20
    - HOW TO GET AROUND LOG ON PASSWORD I HAVE A LAPTOP DELL AND SOMEONE GOT ON OT AND CHANGED THE USERNAME AND PASSWORD WHEN YOU LOG ON -- I CANT GET IT AND DONT KNOW HOW TO GET AROUND THIS PROBLEM. WHAT DO I DO NOW. ANY HELP APPRECIATE THANKS Tag: MS04-016 Windows XP question Tag: 54543
  - 21
    - Temporarily Unavailable My Account seems to be Temporarily Unavailable by this message: We apologize, but your account is temporarily unavailable. This delay does not affect the entire site or result from any problem specific with your account however the server that holds your account information is temporarily unavailable. We do not expect this delay to last much longer, so please continue to check our site for your account status. We will do our best to make your account available as quickly as possible. We appreciate your support, and sincerely apologize for the inconvenience. TERMS OF USE Advertise TRUSTe Approved Privacy Statement GetNetWise Anti-Spam Policy How long will this take? begin 666 c.gif?RF=&PI=44364&DI=7474&PS=68416 J1TE&.#EA`0`!`( ``````/___R'Y! $```$`+ `````!``$```(!3 `[ ` end Tag: MS04-016 Windows XP question Tag: 54530
  - 22
    - WIndows XP & IE 6 & Accessing Secure Websites Cant access secure site in XP. Have been to Microsoft Support..did not work. Any help? Tag: MS04-016 Windows XP question Tag: 54529
  - 23
    - Exchange and Spam Hello, Im a new exchange server user, y notice that in my Microsoft Outlook appear a new folder name SPAM, some people told me that the Exchange Server 2003, have a permanent comunicacion with spme pages in the internet were are publish the black list domains. Weel my doubt is if this is true, and if its, how many times that the server updates in a day Please excuse my poor english, I`m practicen, I hope some could answer my doubts. Tag: MS04-016 Windows XP question Tag: 54526
  - 24
    - msn messenger i am having problems signing on to the msn messenger it tells me that there may be prblems with the server,or that my password or screen name is incorrect, or that my connections are in correct now i have checked my connections many times and they are correct and i retype my screen name and password many times and i still can't sign on please tell me what is the problem it cant be my connections because i could sign on to yahoo and aol perfectly i only have problems with msn please let me know what is the problem Tag: MS04-016 Windows XP question Tag: 54524
  - 25
    - Windows Special Security Groups Not sure if this is the right group but ... Im trying to get an idea on what the 'SELF' group is in active directory. I am making a Distribution list in active directory and i want everyone who is a member of the DL to be able to send mail as the group. I thought 'self' might work for this but such is not the case. Is there a group that can do this? Thanks, Roy Tag: MS04-016 Windows XP question Tag: 54522
- Next
  - 1
    - Microsoft Security Bulletins for June 2004 June 8, 2004 Today Microsoft released the following Security Bulletins. Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletin Summaries: Microsoft: http://www.microsoft.com/technet/security/Bulletin/ms04-jun.mspx Moderate Bulletins: MS04-016 - Vulnerability in DirectPlay Could Allow Denial of Service (839643) http://www.microsoft.com/technet/security/Bulletin/MS04-016.mspx MS04-017 - Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service (842689) http://www.microsoft.com/technet/security/Bulletin/MS04-017.mspx This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: MS04-016 Windows XP question Tag: 54518
  - 2
    - KHOOKER.EXE I was looking at my task manager (XP Pro) and this file was on the list of processes. can anyone tell me more about this file? Is this a virus of some sorts? Thx JR Tag: MS04-016 Windows XP question Tag: 54516
  - 3
    - Spam I'm getting spam from my own email address(!?) that shows up as me as the sender but in the properties another name is stated in the From: textbox!!! Also the times and dates are spoofed! See the Internet Header from the Message Options below. Any suggestion on what is going on or how to stop this? /Adde Message Options Internet Headers " Microsoft Mail Internet Headers Version 2.0 Received: from my.exchange.server.ip ([61.163.45.201]) by my.domain-name.com with Microsoft SMTPSVC(5.0.2195.6713); Mon, 7 Jun 2004 19:24:27 -0700 X-Message-Info: 3QJU735AYSppgax6ksWgnTHO492BQ63fwcOCSwCS982 Received: from tirade7porchhappenstance (91.89.032.45) by mail457.my-email@domain-name.com (Bluewin AG 9.1.212) id 13472MY0TQJW19TPS87376 for my-email@domain- name.com; Sat, 12 Jun 2004 05:29:25 +0600 Message-ID: <9338754862.35859@my-email@domain-name.com> Reply-To: "Kip Clayton" <my-email@domain-name.com> From: "Kip Clayton" my-email@domain-name.com (the From name is a random name followed by my email address!) To: "my-name" <my-email@domain-name.com> Subject: auriga lagrangian Date: Fri, 11 Jun 2004 17:35:25 -0600 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--=_94rdEWBVUy4d8p" Return-Path: my-email@domain-name.com X-OriginalArrivalTime: 08 Jun 2004 02:24:31.0261 (UTC) FILETIME=[BB19ACD0:01C44CFF] ----=_94rdEWBVUy4d8p Content-Type: text/html; charset="iso-0130-7" Content-Transfer-Encoding: 7Bit ----=_94rdEWBVUy4d8p- " Tag: MS04-016 Windows XP question Tag: 54513
  - 4
    - securing folder on external disk(s) I have an external (firewire) disk (60GB) which I use daily between my home- and the office-computer. Both computers run Win2000. I have tried to encrypt the data and add user rights, but using other computers this is easy to change once logged in as administrator on a third party Win2k computer. What is the best way of securing access to this (firewire) disk (or directories) such that if I loose it "no one" can have (easy) access to it? Many thanks -- Zen Andreas Tag: MS04-016 Windows XP question Tag: 54509
  - 5
    - Certificates Hi; I would like to know what is a certificate? should I have one? how do I get one? and what is the Pro and Con for having one? Thanks Terry Tag: MS04-016 Windows XP question Tag: 54504
  - 6
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2004.06.08 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info I'm getting an LSASS error message, and/or I have the Sasser virus. 1) Run anti-virus that is configured to download the latest updates every week or even every day. www.grisoft.com is free anti-virus. 2) You also need to install all the patches for your system software from http://windowsupdate.microsoft.com, starting with the MS04-011 patch. Microsoft generally releases security patches on the second Tuesday of more or less every month. [Theh MS04-011 patch is also available here: http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx ... though you still want to visit the Windows Update site to get all patches.] 3) Once you're infected, you may need to download and run a free Sasser virus removal tool such as the Stinger tool from www.McAfee.com or the free tool from http://www.microsoft.com/security/incident/sasser.asp 4) You're not running a firewall, or your firewall isn't protecting you. Running a firewall would have protected you from this. Free firewall software is available from www.kerio.com, www.zonealarm.com and/or www.sygate.com 5) You need to do ALL of these things, or you won't have much success. You should also make sure you get the latest Microsoft patches monthly and anti-virus updates at least weekly. My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: MS04-016 Windows XP question Tag: 54501
  - 7
    - MSN messenger WON'T LOG OUT Hey there. I just installed MSN messenger. I have set the privacy settings to say that it is a public computer and to always ask for my password. For some reason, whenever I click on MSN messenger I am automatically logged in. No matter what I do. Tag: MS04-016 Windows XP question Tag: 54497
  - 8
    - CAPICOM, getting issuer certificate Hello everyone, I have the following problem - I'm receiving a message signed/encrypted with a certificate on the client, which does not have the certificate's issuer in the local machine trusted root CA store. I would like the user to decide whether to accept a message signed by an untrusted certificate, but I need to add the issuer of this certificate to the trusted root CA store to get the message processed. How can I get the issuer of a certificate on the client? Would I have to download it from the server instead? Any suggestions are appreciated. Kiril Tag: MS04-016 Windows XP question Tag: 54495
  - 9
    - PKI + S/mime problem... hi to you all... my situation is like this i'm going to implement a fully operational S/mime + PKI infrastructure. i'm going to use the digital signature, as well the encrypted mail option. the thing is, that i need for legal avidance, to reroute all the mail in the organization, to a public folder, that a legal advisor could read all the mail running threw the organization. how could he do this, if he dosent have the private keys of all the users?(if solved can cause a non-repudation problem?...). the recovery agent option has very little documentation, and the solution is very complex to implement for such a reason... any suggestion Tag: MS04-016 Windows XP question Tag: 54488
  - 10
    - Trend Micro Whenever I try to run the free online scan of Trend Micro, a box appears on the screen indicating a problem encounter and the page gets closed. Anyone knows why it happens so? Is this related to the explorer settings? Then how to set this right? Tag: MS04-016 Windows XP question Tag: 54486
  - 11
    - Fport on W2K3? does Fport work for anyone on W2K3 http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/intrusion_detection.ht (only output I get is header line) Tag: MS04-016 Windows XP question Tag: 54483
  - 12
    - what HIDS to use? any free Host intrusion Detection System (a.k.a Integrity Monitoring System) to use for Windows one option is Osiris (http://osiris.schmo.com) any experience with this and/or any other free hids for windows Tag: MS04-016 Windows XP question Tag: 54481
  - 13
    - unable to connect to exchange 2000 server from Outlook Clients This is a weird one. Has anyone ever experienced this? I have Exchange 2000 server running. Suddenly this morning, NONE of the outlook clients (Outlook 2000 and XP) from all workstation are able to logon to the Exchange server. The logon box keeps popping up like you're not authenticated to the domain. When I manually enter the the user id, password, and domain info this is the error message I get: "Your logon information was incorrect. Check your username and domain, then type your password again..." However, I am already successfully logged onto the domain and am able to access all network resources, except Exchange. So I'm thinking that maybe it a MAPI issue. However, I am able to go to a workstation, logon as the administrator, create a outlook profile, and am able to access the mailbox with no authentication issues. But if I logon as another user on the same workstation, I can't successfully authentication with Outlook. It seems like a permission issue, so I even tried giving a user as a member of the admins group, but that didn't help. Virus scan also comes clean. Any suggestions? Would sure appreciate it. Tag: MS04-016 Windows XP question Tag: 54480
  - 14
    - explorer dl.html windows freeze?! HELP After 25-30 min. on-line windows millenium explorer version 6 windows named "C:\windows\dl.html\ - microsoft internet explorer" cascade until my computer freezes! I have run Adaware 6, Spybot Search & Destroy, and CWShredder and nothing helps. What is this and what do I do? Mcuh thanks for info. and help... Mark B. Tag: MS04-016 Windows XP question Tag: 54474
  - 15
    - iexplore still runs when it's shut seems to be opening for popups Like the title says iexplore still runs when it's shut down and seems to be opening for popups. I'm trying to fix a system for a friend who is not a computer person and who had so much garbage on her system it should be the Guinness book of world records. It's 95% better. She is running Norton AV and Zonealarm Basic. I installed Spybot S&D and Ad-aware. Did aggressive scans and removed 1000's of things. BUT, this iexplore thing is weird. You shut everything down......you still see occasional popups. If you go to the task manager there is still an iexplore running. You shut it down and all the popups go poof.....gone. This iexplore running in the background also seems to sometimes interfere will running iexplore when you want it to. Tag: MS04-016 Windows XP question Tag: 54472
  - 16
    - Deny group access, Allow specific group members I have a shared folder, which I want to deny write access to a specific workgroup of about 250 users. However, at the same time, I need to grant write access to 5 of the members in this group. How can I do this without removing these 5 members from the workgroup? Thanks. John. Tag: MS04-016 Windows XP question Tag: 54469
  - 17
    - Windows Messenger Virus?? Once I go online on my computer and see a prop-up Windows Messenger message saying that "A newer version of messenger is availabe. You MUST download in order to continue" and with buttons for action. I suspect this is something virus; does anyone know of such instant message? Any advice and thoughts? Thanks. Tag: MS04-016 Windows XP question Tag: 54465
  - 18
    - integrity monitoring Can anyone recommend/know of a free host integrity monitoring systems? The free version of Tripwire is for Linux only (tripwire.org). OSIRIS is free for Windows but I'm wondering is there are any others. Can anyone comment on Orisis? (http://osiris.shmoo.com) Thanks! Tag: MS04-016 Windows XP question Tag: 54463
  - 19
    - virus checkers can someone please tell me if there are any free virus checkers thankyou Tag: MS04-016 Windows XP question Tag: 54458
  - 20
    - how to close ports Nessus tells me to close ports on my XPHE and W3K3 boxes, including specificying registry settings to do so. I am a newbie to the registry. Can anyone point me to a quality document/book for learning how the registry works and how to use it, AND how to close/open TCP/UDP ports, and disable/enable associated services on XPHE and W2K3 machines? Thanks! Tag: MS04-016 Windows XP question Tag: 54457
  - 21
    - SmartCard-based security software Hello Group, I am looking for a smartcard-based security software. Features should be like boot protection and file encryption. I am running Windows 98 and and an o2micro pcmcia smartcard reader. Thanx, Christian Tag: MS04-016 Windows XP question Tag: 54452
  - 22
    - symproxysvc.exe uses 99% cpu time Recently, there was an Internet Explorer Script Error (Expected ',' Code 0) shown on my PC for each clicking on new web page. Then I renewed my Norton Internet Security (2002) subscription. The Script Error seems to be stopped; but it took a long time (3-5 mins.) to open the new page. Checking the Task Manager I found a 'symproxysvc.exe' task, run by system, always used 99% of cpu time. The process can be ended, but was reactivated when clicking the IE browser. Therefore, I disabled the Norton Internet Security to find out that IE worked perfectly without the script error and the 'symproxysvc.exe' is not running. What is the problem? How to solve it? TIA. Tag: MS04-016 Windows XP question Tag: 54451
  - 23
    - How Force a user to use a token or a smart card to logon to his computer ? How it is possible to force the access to the Windows environment only using a USB key or a smart card ? It is to force a user laptop to use a token or a smart card, then inside or outside his office. Thanks in advance. Eric Tag: MS04-016 Windows XP question Tag: 54450
  - 24
    - router log hi, what does this log entry mean; 2004/06/07 00:40:10 ** Unauthorized HTTP Access ** <IP/TCP> 222.144.85.173:4821 ->> a whois search says this; Whois: Final results obtained from whois.nic.ad.jp. Results: [ JPNIC & JPRS database provides information on network administration. Its ] [ use is restricted to network administration purposes. For further infor- ] [ mation, use 'whois -h whois.nic.ad.jp help'. To suppress Japanese output, ] [ add'/e' at the end of command, e.g. 'whois -h whois.nic.ad.jp xxx/e'. ] Network Information: a. [Network Number] 222.144.0.0-222.144.255.0 b. [Network Name] OCN g. [Organization] Open Computer Network m. [Administrative Contact] AY1361JP n. [Technical Contact] MO081JP n. [Technical Contact] KK551JP n. [Technical Contact] IM657JP p. [Nameserver] ns-kg001.ocn.ad.jp p. [Nameserver] ns-kn001.ocn.ad.jp y. [Reply Mail] db-admin@ocn.ad.jp [Assigned Date] 2003/11/28 [Return Date] [Last Update] 2003/11/28 14:02:11 (JST) ip-alloc@nic.ad.jp I have other searchs of different ip's that are from china and germany. I think this is only the service provider. Is someone using my ip address for spam or phishing? Tag: MS04-016 Windows XP question Tag: 54438
  - 25
    - password autofill How do I change the settings on my webbrowser (Explorer 6.0) so that the password will autofill when the username is entered? Tag: MS04-016 Windows XP question Tag: 54434

I've got a WinXP Pro SP1 system that dxdiag shows I have
DirectX 8.1 installed. Running Windowsupdate shows I need
the patch. However, the Security Bulleting MS04-016 seems
to say that only version 8.2 and 9.0 are affected if
installed on XP. Is something missing here?

Top

Re: MS04-016 Windows XP question by Tom

Tom
Wed Jun 09 18:59:12 CDT 2004

Simply run Windows Update. If it appears there, install it.

Tom
"Sandy Wood" <sandy.wood@nospam.com> wrote in message
news:1a4ef01c44e7a$c7599510$a301280a@phx.gbl...
| I've got a WinXP Pro SP1 system that dxdiag shows I have
| DirectX 8.1 installed. Running Windowsupdate shows I need
| the patch. However, the Security Bulleting MS04-016 seems
| to say that only version 8.2 and 9.0 are affected if
| installed on XP. Is something missing here?

Top

Re: MS04-016 Windows XP question by Sandy

Sandy
Thu Jun 10 11:09:07 CDT 2004

I realize I can do that, I've got over 900 computers in
my network that I must update and I'm trying to be sure
of what I'm doing....windowsupdate for all system won't
cut it......SMS is what we use and I don't want to push
updates to machines that don't need it.
>-----Original Message-----
>Simply run Windows Update. If it appears there, install
it.
>
>Tom
>"Sandy Wood" <sandy.wood@nospam.com> wrote in message
>news:1a4ef01c44e7a$c7599510$a301280a@phx.gbl...
>| I've got a WinXP Pro SP1 system that dxdiag shows I
have
>| DirectX 8.1 installed. Running Windowsupdate shows I
need
>| the patch. However, the Security Bulleting MS04-016
seems
>| to say that only version 8.2 and 9.0 are affected if
>| installed on XP. Is something missing here?
>
>
>.
>

Top