integrity monitoring

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - virus checkers can someone please tell me if there are any free virus checkers thankyou Tag: integrity monitoring Tag: 54458
  - 2
    - how to close ports Nessus tells me to close ports on my XPHE and W3K3 boxes, including specificying registry settings to do so. I am a newbie to the registry. Can anyone point me to a quality document/book for learning how the registry works and how to use it, AND how to close/open TCP/UDP ports, and disable/enable associated services on XPHE and W2K3 machines? Thanks! Tag: integrity monitoring Tag: 54457
  - 3
    - SmartCard-based security software Hello Group, I am looking for a smartcard-based security software. Features should be like boot protection and file encryption. I am running Windows 98 and and an o2micro pcmcia smartcard reader. Thanx, Christian Tag: integrity monitoring Tag: 54452
  - 4
    - symproxysvc.exe uses 99% cpu time Recently, there was an Internet Explorer Script Error (Expected ',' Code 0) shown on my PC for each clicking on new web page. Then I renewed my Norton Internet Security (2002) subscription. The Script Error seems to be stopped; but it took a long time (3-5 mins.) to open the new page. Checking the Task Manager I found a 'symproxysvc.exe' task, run by system, always used 99% of cpu time. The process can be ended, but was reactivated when clicking the IE browser. Therefore, I disabled the Norton Internet Security to find out that IE worked perfectly without the script error and the 'symproxysvc.exe' is not running. What is the problem? How to solve it? TIA. Tag: integrity monitoring Tag: 54451
  - 5
    - How Force a user to use a token or a smart card to logon to his computer ? How it is possible to force the access to the Windows environment only using a USB key or a smart card ? It is to force a user laptop to use a token or a smart card, then inside or outside his office. Thanks in advance. Eric Tag: integrity monitoring Tag: 54450
  - 6
    - router log hi, what does this log entry mean; 2004/06/07 00:40:10 ** Unauthorized HTTP Access ** <IP/TCP> 222.144.85.173:4821 ->> a whois search says this; Whois: Final results obtained from whois.nic.ad.jp. Results: [ JPNIC & JPRS database provides information on network administration. Its ] [ use is restricted to network administration purposes. For further infor- ] [ mation, use 'whois -h whois.nic.ad.jp help'. To suppress Japanese output, ] [ add'/e' at the end of command, e.g. 'whois -h whois.nic.ad.jp xxx/e'. ] Network Information: a. [Network Number] 222.144.0.0-222.144.255.0 b. [Network Name] OCN g. [Organization] Open Computer Network m. [Administrative Contact] AY1361JP n. [Technical Contact] MO081JP n. [Technical Contact] KK551JP n. [Technical Contact] IM657JP p. [Nameserver] ns-kg001.ocn.ad.jp p. [Nameserver] ns-kn001.ocn.ad.jp y. [Reply Mail] db-admin@ocn.ad.jp [Assigned Date] 2003/11/28 [Return Date] [Last Update] 2003/11/28 14:02:11 (JST) ip-alloc@nic.ad.jp I have other searchs of different ip's that are from china and germany. I think this is only the service provider. Is someone using my ip address for spam or phishing? Tag: integrity monitoring Tag: 54438
  - 7
    - password autofill How do I change the settings on my webbrowser (Explorer 6.0) so that the password will autofill when the username is entered? Tag: integrity monitoring Tag: 54434
  - 8
    - MD5-Challenge on winXP service pack 1 Hi, i recently installed an AP that has IEEE 802.1x in it and also it has RADUIS server built-in. The AP only supports EAP-MD5 Challenge protocol, while winXP SP1 only support MS-CHAPv2. How do i install the EAP-MD5 Challenge protocol on winXP SP1? the AP setting are correct. i know this because i tried using other client - odyssey client manager (demo for 30days) and uses MD5 challenge protocol and everything running smoothly. So the only problem is that i want to use WinXP so i don;t need to pay for the client. plese help. Tag: integrity monitoring Tag: 54432
  - 9
    - VPN Logins Is there any way to tell who has logged in using VPN and for how long ? Tag: integrity monitoring Tag: 54425
  - 10
    - WINDOWS/SYSTEM32/drvddll.exe Hi EVERYBODY Does anaybody know what this message of alert means : "drvddll.exe try to connect to internet" programme : c/windows/system32/drvddll.exe tcp (sortant) I'M QUITE ANXIOUS ABOUT THAT - THANKES IN ADVANCE Isabelle Tag: integrity monitoring Tag: 54418
  - 11
    - NTFS Convert I converted my C: Drive from Fat32 to NTFS. I now have major problems with the computer freezing and not allowing me to continue. I have to restart the computer and everything is fine until it freezes again, can anyone help?? Thanks Shawn Tag: integrity monitoring Tag: 54417
  - 12
    - Spam does anyone know a free tool to block spam'Lockspam was free, now they have put 30day limit,,,,,it is good though any ideas, and easy to use Tag: integrity monitoring Tag: 54416
  - 13
    - Network Information Centres and Spammer tracking.... ok i once read on a tech forum that spammers and hackers can be tracked down by the help of Network Information Centres like APNIC... but what puzzles me most is that i know only the mail address of the spammer... how can i find his IP in order to take action against such individual/group? Tag: integrity monitoring Tag: 54413
  - 14
    - Firewall Having nothing but troubles with the new 5.0 version of ZoneAlarm Pro. Considering other alternatives. Anyone had experience with Tiny Personal Firewall and care to share your thoughts? Thanks! Tag: integrity monitoring Tag: 54405
  - 15
    - I am having some spyware problems...HELP please! First off I have Windows XP Pro and I have the messenger disabled in services. I also have the most current up to date version of Norton Anti-Virus/Internet Security. I clicked on some site and and it was trying to install something and I kept trying to close it so I had to do it using the taskmanger. Now all these pop-ups keep coming up: "Welcome to the System Performance Wizard", "Spyware Detected" which all say to click here for software that can get rid of it (yeah right). There is even one pop-up that says "Attention" in the header and the body of the pop-up has cartoons of bugs in different sexual positions! Also my IE's default homepage has been changed to a site that says "about:blank" in the URL bar and when I launch IE more of these pop-ups come up. Any ideas???? Tag: integrity monitoring Tag: 54399
  - 16
    - Should I disable system restore b4 removing spyware/malware/virus? Tag: integrity monitoring Tag: 54396
  - 17
    - Web pages I had to reformat because of system error, now I cant get back in American Singles WEb page. Ive put my IE6 security settings all on Default and my zonealarm on the same settings as before I reformatted. Can anyone please tell me what is stopping this web page from working. I type in my password/login name and it reverts back to the main page again, it wont let me in. Tag: integrity monitoring Tag: 54391
  - 18
    - PLEASE READ: Microsoft policy regarding patch distribution I keep seeing this question come up over and over again, so I thought I'd post a reminder message. +-----------------------------------------------------+ | Microsoft NEVER distributes patches through e-mail. | +-----------------------------------------------------+ If you ever receive an email with an attachment and it claims to come from us, delete it. (Or, forward to secure@microsoft.com.) No matter how official-looking it might appear, I promise you it is a forgery. Furthermore, if you are enticed to click a link to download a patch, scrutinize the link closely. If you see an "@" in the link, then again you are reading a false message. Someone has crafted a link to look like it's on microsoft.com, when in fact the destination site will be whatever's *after* the "@". So again, delete it or forward it to us. Steve steriley@microsoft.com Tag: integrity monitoring Tag: 54386
  - 19
    - Spybot message:"DSO EXPLOIT: There is a security hole..... I see some reassuring responses from "Sandi" and "Saljaline." I hate to make you respond once again to the same brush fire as you say, but I really want my mom to be reassured that she is really safe. She is a senior citizen who knows little about computers and I don't know much either. Just a brief 'yes' or ' no' would be great. The message she's getting seems to be a little bit different from the others, and spybot is claiming they can't fix the problem. Here's her message: "DSO Exploit: There is a secuity hole in IE allowing websites to execute code without asking you first. You can find more information at . . . My mom is a Windows XP user and she is updated with all the Microsoft critical updates. Is she safe? Can she quit worrying about this Spybot message or should she do something more Thank you very, very much. Tag: integrity monitoring Tag: 54379
  - 20
    - Product Activation via non Microsoft Firewall I cannot activate MS products via my firewall. Is there a port(s) that needs to be opened? Tag: integrity monitoring Tag: 54376
  - 21
    - Sniffing packets on the wire How do you remotely sniff packets on a server to find out what activity is going on that machine I know you can sniff through packet analyzers like ethereal but how do sniff just about any traffic going over the wire on a particular machine or server I am new to packet sniffers and network protocol analyzer Any help would be appreciated Ripul Tag: integrity monitoring Tag: 54374
  - 22
    - Web Problem I'm hoping someone with computer knowledge can help me out: I'm having trouble viewing certain images. Example: The following website is for a local record store near my home: www.letitbe.com If you visit this site you will notice a scrolling banner ad on the top for contests,etc. The banner ad simply doesn't appear on my screen. I figured it was my Norton Internet Security 2004 (antivirus and firewall) causing the problem...so I turned it off entirely, but still have the same problem. The images just aren't there. Maybe it is a Windows XP security setting I need to adjust? On another site where I have the same problem, www.livephish.com (unable to view s scrolling banner/image), the FAQ for that site suggests to "make sure your network administrator is allowing HTTP access on port 8000 on your machine." To be honest I have no idea what this means or how to check it. I amdoubting this is the problem. The only thing I can imagine blocking a "port" would be the firewall but, like I said, I turned that off and am still having the same problem. The second site, www.livephish.com, is supposed to show a scrolling son title in the "Now Playing" box in the upper right conrner. I am unable to see that scrolling amage on my screen. Can anyone see a similarity between the livephish.com buttons/scrolling song title & the banner ad on top of www.letitbe.com? Is it a java thing or a flash problem maybe? What exactly is my computer not allowing in?! Any troubleshooting help would be GREATLY appreciated. Thi is driving me CRAZY! Please take a second and check those sites to see if there is a similarity in the stuff not showing up on my screen. I'm thinking XP must be blocking something. You have no idea how happy it would make me to solve this problem. Thanks a lot! Tag: integrity monitoring Tag: 54372
  - 23
    - CRITICAL BUG I know of a major threat to alot of people ill tell ya how it works, well im kinda new to it so i want but i have information on it and such it is a program which enables you to put .exe files into web sites .html format and when the peron/persons visitng that site there are being infected with the .exe file say the person puts a trojen horse into the site it automaticly downloads it into thier system, contact me if your interested in more info it isnt a huge secruity bug that needs fixing....... Contact "Chuckie_egg@msn.com ok. Tag: integrity monitoring Tag: 54371
  - 24
    - MAJOR BUG I know of a major threat to alot of people ill tell ya how it works, well im kinda new to it so i want but i have information on it and such it is a program which enables you to put .exe files into web sites .html format and when the peron/persons visitng that site there are being infected with the .exe file say the person puts a trojen horse into the site it automaticly downloads it into thier system, contact me if your interested in more info it isnt a huge secruity bug that needs fixing....... Contact "Chuckie_egg@msn.com Tag: integrity monitoring Tag: 54370
  - 25
    - SPAM HOW DO I STOP SPAM EMAILS 512 LAST COUNT ALL SPAMMERS. DO I REQUIRE FIREWALL AND WHAT IS IT AND HOW DO I SET IT UP? Tag: integrity monitoring Tag: 54368
- Next
  - 1
    - NicTech Spyware OK, I was having problems with pop-ups and after running Ad-Aware, decided to run SpyBot. However after running both, Ad-Aware kept showing the same exploit (VX32.BetterInternet) but in a different DLL. Each file would require a reboot to fix, and then when I ran Ad-Aware again, it would show a different DLL with the same exploit. Finally after some internet searching I determined that the problem initiated from HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\Notify and a key GuardianXXXXX (4 or 5 random alpha characters following the Guardian). Well this pointed to a dll called adaamon.dll in my System32 directory. I was unable to delete the the DLL under any circumstances. Even tried logging in to safe mode. Tried deleting the Registry Key but on reboot it would reappear with a different random string and Ad-Aware kept finding a different DLL.. Appears to have been a copy of the adaamon.dll. Finally resolved this issue by rebooting and not logging in, then using a second PC and Windows Explorer, connected to my PC via the C$ share and was able to delete the adaamon.dll. (Which is a Hidden System Read Only file). Then I was able to delete the registry key and it did not reappear on reboot. Current versions of NAV2004 with up to date sig files did not catch this. Finally ran Ad-Ad-Aware and Spybot until both were satisfied, used advanced features for the Ad-Aware search as specified at computercops.us for the BetterInternet issue. Don't know how someone without the second PC could fix this as I would assume there is NO way to bypass the Winlogon Notify reg key. Since this notification was to run on both logon and logoff, I would assume the dll could re-configure itself if you deleted the key or changed permissions on the key (Which I had also tried), during the logoff process for reboot. Carl Tag: integrity monitoring Tag: 54364
  - 2
    - Can't surf the web What virus could keep me from being able to surf the internet? My computer allows me to get emails and connect to my home page...but not anywhere else on the web. Tag: integrity monitoring Tag: 54358
  - 3
    - SpotOn Is anyone else having trouble with Internet Explorer? When I open a web page or link I get a pop up from SpotOn with additional search results. What can I do, I have a no adware program running but it still pops up Tag: integrity monitoring Tag: 54357
  - 4
    - Password Loss I am running Win 2000 and do not know my password, How can I get back into my system? Tag: integrity monitoring Tag: 54351
  - 5
    - Critical Update Critical Update for Windows Media Player Script Commands (KB828026). This keeps updating everyday in the automatic windows update. what should i do? Tag: integrity monitoring Tag: 54348
  - 6
    - password Please help. My daughter has her computer password protected and she cannot remember the password to get in. How can we resolve this?? Tag: integrity monitoring Tag: 54343
  - 7
    - Missing google/search engines I do not understand why everytime I try to use a search engine that I do not go where I am attempting (i.e I type google.com and I am sent to cpanel.net. Is my computer infected? My virus/secrutiy program does not detect this? Can you help? Thanks Tag: integrity monitoring Tag: 54341
  - 8
    - Password My daughter has used a password on her computer and does not remember what it is. So now she is not able to even get into her computer. Can anyone help with how to resolve this issue? Tag: integrity monitoring Tag: 54340
  - 9
    - security patches for windows media player 7.1 folks, I have installed the latest security patch for the 7.1 windows media player. I have booted after this install even though it doesn't require it (to eliminate that reasonf or the error). Every time I log in (I am using auto update) it identifies the same patch as needing applied. I have pasted part of my install log and am wondering if anyone else has had the same issue. I cannot find a free place to email microsoft and ask them the same question so I am turning to the user group. Help Mike Murph Successful Saturday, June 05, 2004 817787: Security Update Windows Media Player 7.1 Web site Successful Friday, June 04, 2004 817787: Security Update Windows Media Player 7.1 Web site Successful Thursday, June 03, 2004 817787: Security Update Windows Media Player 7.1 Web site Successful Wednesday, June 02, 2004 817787: Security Update Windows Media Player 7.1 Web site Successful Tuesday, June 01, 2004 817787: Security Update Windows Media Player 7.1 Web site Successful Saturday, May 29, 2004 817787: Security Update Windows Media Player 7.1 Web site Successful Saturday, May 15, 2004 817787: Security Update Windows Media Player 7.1 Web site Successful Saturday, May 15, 2004 Critical Update for Internet Explorer 6 Service Pack 1 (KB831167) Web site Successful Wednesday, April 14, 2004 817787: Security Update Windows Media Player 7.1 Web site PLEAE REPLY TO EMAIL ADDRESS Tag: integrity monitoring Tag: 54326
  - 10
    - run 2 A.V.'s on computer? Hello i would like your opinion if its recommended to run more than one A.V. program for more security or would they cause conflict with each other? i am running xp pro ,nortons 2003 and zoneAlarm. Thankyou for your input. Regards Alan Tag: integrity monitoring Tag: 54319
  - 11
    - Task Schedular TCP port Hi, In order to secure my Windows XP system, I would like to eliminate unnecessary IP port usage. I am also using a firewall, but better not to have port open in the first place. I have found that the Task Scheduler service opens a TCP port (usually 1025 but may be different if not started at boot time). It took some time to find that Task Scheduler was responsible for this port, since it runs in the monolithic svchost.exe -k netsvcs process, and unlike almost every other service does not close the port when the service is stopped. (I presume it would be closed if _every_ svchost.exe -k netsvcs service was stopped such that this process terminated, but I didn't want to turn off System Restore). I would have expected Task Scheduler to be an entirely local service, without need for network connectivity. Why does it open this port, and how can I request a 'local computer only' mode where it does not do so? Thanks Jonathan Tag: integrity monitoring Tag: 54318
  - 12
    - Spurious network activity from HTML Help Hi, In order to secure my Windows XP system, I would like to eliminate unnecessary IP port usage. I have found that HTML Help often opens a UDP port, as well as sending a number of HTTP POST requests to different internet addresses for ocget.dll. You can see this using a Personal Firewall and/or packet sniffer after selecting Help Topics in Registry Editor or Calculator, for example. The ocget.dll requests appear to be part of the generic Internet Component Download mechanism, related to the CODEBASE attribute of OBJECT tags and the HKLM \SOFTWARE \Microsoft \Windows \CurrentVersion \Internet Settings\CodeBaseSearchPath registry key. I presume the OBJECT references relate to the HTML Help control, trying to ensure that the latest version is being used every time the control is loaded. My point is that HTML Help should be an entirely local process, quite unlike web browsing. The version on my computer should be perfectly sufficient, so there is no need to keep checking it is up to date. Is there anyway to disable this check just for HTML Help? My google searches have only thrown up ways to turn Internet Component Download off altogether, affecting web browsing as well, which is not what I want. Finally, why is HTML Help opening the UDP port? I have not yet seen any traffic on it. Thanks Jonathan Tag: integrity monitoring Tag: 54317
  - 13
    - Password...Please help...a.s.a.p I just posted the password help, but i cant open it? PLEASE SEND IT T hamre_2@msn.com thats my moms account Tag: integrity monitoring Tag: 54315
  - 14
    - Password...Please Help a.s.a.p Ok some unauthorized person has logged onto my account. They changed my password, and my secret question....is there any way i will ever get back on? Tag: integrity monitoring Tag: 54313
  - 15
    - Turning off Allow Inheritable Permissions Is there any way to stop the OS from making new folders with the "Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here." option on? I have turned this off on the root folder, but the subfolders continue to have it turned on when they are created. I would prefer to avoid doing it the VBScript way, unless there is a way to do it in less than 100 lines of code >_< All I need is to be able to turn off that one thing, or stop the OS from doing it all together. -----= Posted via Newsfeeds.Com, Uncensored Usenet News =----- http://www.newsfeeds.com - The #1 Newsgroup Service in the World! -----== Over 100,000 Newsgroups - 19 Different Servers! =----- Tag: integrity monitoring Tag: 54312
  - 16
    - Open Attachments to email How do I set my computer so I can open attachments from my emails? Tag: integrity monitoring Tag: 54306
  - 17
    - Spybot I've downloaded Spybot and like what it does. After the initial clean out, it tells me every day that I have DSO Exploit which is apparently a windows fault. Is this something I can patch? It seems to be the only problem I have posted each day. The program website doesn't seem to address this at all. Thanks! Hoping you can help me. Tag: integrity monitoring Tag: 54298
  - 18
    - major problem!!!!!! somehow somebody jacked my hotmail account which unfortunitaly had access to my amazon account and ebay account!! they already changed the passwords for all and the extra security measures(secret question, etc.) What the hell should i do before i'm fincially ruineD!?! Tag: integrity monitoring Tag: 54295
  - 19
    - can't get away from unwanted page I keep getting interupted, losing all work in progress from a web page called www.cadabra.biz It has become the home page and constantly redirects back to that site. I deleted all cookies and temporary files to no avail. I selected another default home page as well. Any suggestions on how to permanently stop this harrassment? I am not very windows educated so in laymens tems if you can help. Tag: integrity monitoring Tag: 54293
  - 20
    - loggin on domain Hello again Ok, here's the situation, I logged 3 more xp pro machines off of the domain and rejoined the domain, one worked but the other two lost their profiles. I couldn't even find it on one of the boxes. The backup I made for the personal files (.pst) would not even restore (the error read that I do not have the appropriate permission). Is there a special way to do this on XP Pro? I've done this to roughly 50 W2K machines and had no problems. The fourth one as you've seen from previous posts I can't even log on to the machine. I tried to use a password re-write program but that didn't work. I'm going to download another one and try. As for the one that worked, it worked for 2 days, now I am getting netlogon errors from that machine as well. I would really appreciate more help on this. Thank you very much especially to Elijah and Frasier for helping me already Ra Tag: integrity monitoring Tag: 54284
  - 21
    - e-mails Can anybody help me with my problem with attachments. Since upgrading my e-mail to version six on outlook express I cannot send or receive e-mails with an attachment.Any ideas how I can remove this protection? Tag: integrity monitoring Tag: 54283
  - 22
    - DoI need yet another program or what? I've got Norton's SystemWorks and it looks for viruses in incoming emails. What about outgoing, is it checking outgoing? How comes some persons emails show [scanned] in the subject line? Tag: integrity monitoring Tag: 54279
  - 23
    - Problems loading KB835732 Update My Windows Server 2003 Standard in a Dell box ALWAYS locks up and is unsuccessful when installing the kb835732 update. I've tried many different solutions. I can't seem to get into safe mode on this machine either. I'd like to try the installation in there. Does anyone have any tips Thanks Will Sawye Vermont Tag: integrity monitoring Tag: 54278
  - 24
    - Password protection I have my pc password protected so, when I turn it on, the box comes up requesting a password. If entered, my personal desktop proceeds to load. My question, why does my desktop load when I click "cancel" in the password box and is there anyway to prevent that from occurring. I don't want everyone in my house looking at my stuff!!! HELP! (please). Tag: integrity monitoring Tag: 54269
  - 25
    - Standard Desktops !! Can anyone help - I'm looking at ways to implement Standard Desktops within our organisation, has anyone had any experience of this ? I just want to get a few ideas on this. Tag: integrity monitoring Tag: 54267

Can anyone recommend/know of a free host integrity monitoring systems? The free version of Tripwire is for Linux only (tripwire.org). OSIRIS is free for Windows but I'm wondering is there are any others. Can anyone comment on Orisis? (http://osiris.shmoo.com) Thanks!

Top