And just when we thought the IRS Phishing Scams were over ........

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - what do I risk...? Hi all of you ! My antivirus is PCCIllin Trend. I discover by chance my machine also holds a series of McAfee files and folders. It takes up space, and I dont have much. I fear interference with PCCillin. Can I just wipe them out ? Thanks for advice Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85847
  - 2
    - Be careful using AIM & all Instant Messengers Worm appears as Microsoft antipiracy program http://www.infoworld.com/article/06/06/30/HNwormmsantipiracy_1.html <QP> Security analysts have detected a new piece of malware that appears to run as a Microsoft program used to detect unlicensed versions of its operating system. The malware has been classified as a worm and spreads through AOL's Instant Messenger program, said Graham Cluley, senior technology consultant for Sophos, a security vendor. Sophos is calling it W32.Cuebot-K, a new variation in the Cuebot family of malware. The worm has a range of malicious functions. After it's installed, the worm immediately tries to connect to two Web sites, a sign it may try to download other bad programs on the machine. Cuebot-K can disable other software, shut off the Windows firewall, download new malicious programs, perform basic DDOS (distributed denial of service) attacks, scan local files and spawn a command prompt, Sophos said. Worms that spread through instant messaging programs often appear as messages or links sent from friends, which trick a user into executing the program. Cuebot-K propagates by sending itself as a file named "wgavn.exe" to more people in the user's "Buddy List" but without a message, Cluley said. </QP> -- ~Robear Dyer (PA Bear) MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85836
  - 3
    - help please I am a layman. Somehow after recently installing microsoft 2000 pro edition on my computer I constantly get pop up windows warning me of damage to my registry and directing me to sites like rclean.com, fixreg.com and numerous others. In fact IT JUST HAPPENED! it said go to regfixit.com (or regfixes.com)! Like an idiot I initially bought in, figuratively and literally and paid 29.95 for a registry cleaner product. Guess what? I still get these messages up to 40 times a day. I e-mailed the company and asked for a refund but am not holding my breath. any advise would be greatly appreciated. I re-installed my OS three times and it doesn't help. Thanks, Larry Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85832
  - 4
    - View a certificate I've created some certificates so we can use SSL to access remote email. How do I go about opening the certificate. I want to open it so I can view it. I want to see the: BEGIN CERTIFICATE Stuff here END CERTIFICATE But when I open the certificate with notepad, its just a bunch of giberish. What do I need to do? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85831
  - 5
    - Cannot update hosts file. After downloading latest update I find the disk is read only. Is there anyway to change the attribute with windows explorer? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85822
  - 6
    - Kerberos pre authentication question Hi, Can anyone help me on this one. What are the security risks of switching of kerberos pre authentication? The reason for this question is that our VPN3000 concentrator does not support pre authentication. However before we go switch off pre auth i would like to get your view on the risks, if any? -- Thanks Andy Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85821
  - 7
    - Bug in 802.1x stack (Windows XP) Hi, I am testing 802.1x authentication in our network. The client I use for testing is one Windows XP SP1 and one with SP2. Both have problems to authenticate the user. When I sniff the packets send by the XP Client I can see that Windows is using a wrong domain name. The switch sends the wrong login credentials to the IAS Radius server which denies the access request because the domain controller for this, wrong, domain can not be found. Our domain is 3SOFT, normal login works, but when I enable 802.1x the domain name used by Windows in the EAPoL packets is "MDOFT". So does anybody if there a fix for this problem? Bye Tom Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85818
  - 8
    - Remote Desktop for Windows Server 2003 Hi, Is it possible to access/change the options from the Windows Server 2003 User management tabs (right click my computer => manage => local users and groups => users => right click on user properties => remote control tab) from a (Visual Basic) program?? I want to turn on/off the permissions for remote access simply by one mouseclick, and I want a little timer on it, so for example the system management has got 5 hours to work on our server and then it closes the remote desktopconnection. Can someone please help me with this problem?? Thank you in advance, Lennart Klaver R&D, server management Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85791
  - 9
    - How many "current" microsoft bulletins are there? By that I mean to say that one Microsoft bulletin ( eg. MS99-025 ) can supersede another ( MS98-004 ) ( ref: http://www.microsoft.com/technet/security/bulletin/ms99-025.mspx ) How can one find out? I did look at the mssecure.xml that MBSA 1.2 uses and found that there are (Currently) 342 'SupercededBy' tags. Is this any indicator of the number i.e. 493 (total bulletins) - 342 (superseded) giving 151? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85790
  - 10
    - Windows 2003 remote admin access Hello, I have a query which is only apparent due to politics in the work place. On a technical level I can quite easily stop this issue but am intrigued as to how this can be happening?.. One of our Windows 2003 servers is being accessed by a user who does have an administrator account, but does not have local access to the server. From outside the local network the only permitted inbound access is for HTTP, HTTPS, SMTP and FTP, all using the standard ports. There is no remote access software installed, e.g. Remote Desktop, NetOp etc. How can it be possible for files to be added / removed, permissions changed etc on this server via these protocols? (Obviously the user can interact with the services that are provided, but things are changing outside of these locations). Any ideas at all, anyone? Thanks, John Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85788
  - 11
    - Microsoft User-Modem Driver Framework Feature Pack 1.0.0 (Pre-rele Can anyone tell me what this is or what its use is intended for. I found it on my Add/Remove portion of the control panel and presuem that it was placed into my system by the automatic update route. Please help is you can. I understand this my not be a serious issue, or even a security issue, but frankly I want to know what it is and have searched every possible way I know how on the Microsoft web site and came up with ZERO results. Thank You -- Larry D Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85786
  - 12
    - Disabling local user accounts on remote servers I have a local user account that is a member of the local admins group on over 100 hundred servers. I would like to disable this local account from a central location (my pc) instead of logging into each server and manually disabling. I am a domain admin. I would also prefer not to do this by using computer management and connecting to the servers I want to disable the account on. If I cannot do this i'd like to at least be able to change the password of this local user account from my pc instead of logging into each server. Can this be done with a script or batch file. If so can anyone provide some sample code as I am not very familiar with writing scripts? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85785
  - 13
    - Local System Account & Network Access Hi, I have a custom developed windows service running on XP - very simple , it accepts commands via TCP/IP and executes them on the pc on which it is installed. The service gets installed with 'Local System' account credentials which by all accounts does not have access to network resources. I am however able to send commands to the service instructing it to install software packages which reside on a network share (shared read-only for domain users) and it works just fine. I am concerned because all the documentation I have read indicates that this should not be possible, are there any special circumstances where the System account can access UNC share paths? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85784
  - 14
    - Is Acitve Directory keeping track of old account names? After an account has been renamed (and the proper audit settings have been set) event 685 will be created in the security log of the DC. Event 685's description displays the old Account name and the new account name. Does anyone know whether MS-AD itself keeps track of the old names? Are the old names being stored in some attribute or is it possible to enable such a feature? Regards, Frank Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85782
  - 15
    - where to upload unknown files for analysis I ran a virus(nod32) and spyware(webroot) check which could not find anything wrong with the following files: daneng.dll ddayy.exe Both of them have the same date and time stamp. daneng.dll caused explorer.exe to crash which, when I renamed the file, explorer did not crash anymore. It crashed when using fast user switching in xp. The files do not have any version or company information, and do not seem to be associated with any application. I could not find daneng.dll in a google search. I found one reference to ddayy.exe but no information about it. Does anyone know where I can upload them for analysis? Thanks, Chris Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85780
  - 16
    - msn messanger not working i can t get into my msn dcasingena@hotmail.com and my brother and my friends have tried there s on my cpu and they managed to get in and mine has been giving me a trouble shooter for 4 days now Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85769
  - 17
    - how to secure VPN to a SQL server? I have a deployment package that automatically sets up a VPN on a remote client PC (public). What I'm concerned about is the client PC obtaining a virus and that virus finding its way to our server via the VPN. The client PC's do need Internet access & Email access while the VPN is enabled. The VPN is used only for communication with the SQL server -- basically a split tunnel VPN solution. (TCP/IP settings, Use default gateway on remote network is NOT checked) What are my options? Thanks, Rob. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85767
  - 18
    - Renaming a Certificate Root authority I need to rename the certificate root, the "issued by" field on the certificate. Is this possible with Windows 2000, or Win2k3? If so, would the certificates previously issued by that CA be invalidated? Thank you, Bill Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85765
  - 19
    - Patch rerelease question I loaded all the patches on 6/13/2006 with no problems. Should I do something regarding the patch that was rereleased today 6/27? I think it's only for dial-up scripting but I've never even heard of that. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85758
  - 20
    - question about previous response forward looking environment ? I'm not sure what that means. I have the impression that at some point I'll need a version 6, but when ? And should it be Microsoft's ? Isn't the internet supposed to be non-proprietary ? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85753
  - 21
    - Microsoft Security Bulletin Microsoft Security Bulletin 'Microsoft Security Bulletin MS06-025 re-released (http://www.arcon5.com/modules.php?name=News&file=article&sid=315) Microsoft fanatics and antifanatics here lol, maybe interested i this. Yet another f**k up by the Microsoft Corp -- GenerationTal ----------------------------------------------------------------------- GenerationTalk's Profile: http://forums.techarena.in/member.php?userid=1595 View this thread: http://forums.techarena.in/showthread.php?t=54142 www.techarena.i Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85745
  - 22
    - Computer Hijack Somehow I have managed to get hijacked. When I open up IE it now goes to the following: http://www.syssecuritysite.com/ Even if I change it to my normal default page it keeps coming back. Also, I have a virus alert in my system box flashing and when I click on it it says there is virus activity and it directs me to another virus software detection site. I run XP SP2 and I have run defender and spybot with no luck. Can anyone hlep me please. Thanks in advance Buster Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85743
  - 23
    - source workstation question hi all! just a quicky query about the xp event log! i am curious about the "source workstation" entry you will often see in event log entries. i see some login attempts that failed in my security event log....under the "source workstation" entry in the event log is the name of my local pc.....thus i assume some service is trying to logon..... my question then - does the "source workstation" entry in an event log entry show where the event *originated from* and can this be faked? cheers! Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85741
  - 24
    - Security Alert I'am using P4 windows XP. When i was using internet last 3 days I recieve a Security alert message.That looks like below. Security Alert. You are about to leave a secure Internet Connection.It will be possible for others to view information you send. Please advice me how to get rid of this problem. Thank You. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85740
  - 25
    - U.S. Dept. of Agriculture hacked "Online thieves compromised systems at the U.S. Department of Agriculture, stealing personal information on 26,000 employees in the Washington D.C. area, including names, social security numbers and photos, the agency said in a statement published Wednesday. U.S. Agriculture Secretary Mike Johanns told reporters during a press conference that the incident took place during the first weekend in June 2006. Johanns indicated that the information stolen was used for employee, contractor and media badges. The department will be giving one year of free credit monitoring to help affected people detect possible identity theft." http://www.securityfocus.com/brief/235?ref=rss -- Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85730
- Next
  - 1
    - Microsoft HLINK.DLL Link Memory Corruption Vulnerability "Microsoft HLINK.DLL is prone to a memory-corruption vulnerability. This issue is due to the library's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successfully exploiting this issue allows attackers to execute arbitrary machine code in the context of applications that use the affected library. This facilitates the remote compromise of affected computers. Failed exploit attempts will likely crash targeted applications. This issue has been shown to be exploitable through Microsoft Excel files. Other applications using the affected library may also be affected." http://www.securityfocus.com/bid/18500/discuss -- Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85729
  - 2
    - Microsoft Internet Explorer Vulnerability "Microsoft Internet Explorer is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain policies. This issue may allow attackers to access arbitrary websites in the context of a targeted user's browser session. This may allow attackers to perform actions in web applications with the privileges of exploited users or to gain access to potentially sensitive information. This may aid attackers in further attacks. Microsoft Internet Explorer version 6.0 on Windows XP SP2 is vulnerable to this issue; other versions may also be affected." http://www.securityfocus.com/bid/18682/discuss -- Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85728
  - 3
    - Brussels poised to fine Microsoft A little of topic but a good read... "The European Commission is ready to impose a fine of 2m euros ($2.5m; £1.4m) a day on Microsoft. The Commission is expected to rule that Microsoft has failed to fully implement its 2004 antitrust decision." http://news.bbc.co.uk/2/hi/business/5120536.stm -- Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85727
  - 4
    - Alleged MPAA hacker named in court filing "TorrentSpy.com and its parent company Valence Media filed additional court documents this week, naming the person the companies claim breached their business systems to gather evidence for the Motion Picture Association of America. The latest court filings include a statement by Robert Anderson, a resident of Vancouver, Canada, who claims that the MPAA contacted him in June 2005 to provide information on TorrentSpy.com. The Web site allows BitTorrent users to search through files that are being offered by others online, including illegal copies of music and movies. The MPAA sued the Web site in February for contributing to copyright infringement." http://www.securityfocus.com/brief/236?ref=rss -- imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85726
  - 5
    - ip/tcp version 6 from microsoft, to install or not ? I recently reinstalled a wireless adapter on my computer, and somehow I got Microsoft's tcp/ip version 6 added to my network. I didn't have it before, and decided to remove it. So far, no problems. Do I need this new version ? Will I need to install it ? If so, when ? Googling this issue didn't help me. What are the advantages and disadvantages ? Regarding to safety ? Thank you. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85721
  - 6
    - New MSSECURE.XML Version 2006.06.27.00 Available MSSECURE.XML Data Version 2006.06.27.0 (for use by MBSA 1.2 and SMS SUS Feature Pack) was last modified today, June 27, 2006, and is now available for all supported languages (English, French, German and Japanese). Today's release contains 1 re-release bulletin as a result of a change made to MS06-025 which addresses an issues caused to a small number of customers using the terminal window function in Dial-up networking. This re-release of the detection logic is a refresh only and if the v1 version of the security update has been installed, you are considered to be not vulnerable and will not require the new version of the security update unless you are experiencing issues with dial-up networking as a result of the original v1 security update. The new version of the MSSECURE.XML file also addresses an issue with the detection logic that was found in Microsoft Exchange bulletin MS06-029. Charles Weidner [MSFT] cweidner@online.microsoft.com If newsgroup discussion with experts and MVPs is unable to solve a problem to your satisfaction, feel free to contact PSS for support on the Microsoft Baseline Security Analyzer (MBSA). Information is available at the following link: http://support.microsoft.com/default.aspx This e-mail address does not receive e-mail, but is used for newsgroup postings only. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85720
  - 7
    - CRL LDAP question... Is there a tool that will validate/fetch a CRL via a LDAP distribution point? A windows tool would be ideal. But I'll take anything. Thanks in advance Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85714
  - 8
    - Security Breaches Pandemic - Deloitte Touche 2006 Global Security Survey http://digg.com/security/Security_Breaches_Pandemic_-_Deloitte_Touche_2006_Global_Security_Survey A nice summary of the Deloitte Touche 2006 Global Security Survey, and links to the Survey, and other articles that cover the survey. Deloitte survey of 150 companies in technology, media, telecommunications ... more than half reported Security Breaches in the past 12 month; 48% via spyware / malware; 50% of respondents reported internal breaches.. Read More: http://digg.com/security/Security_Breaches_Pandemic_-_Deloitte_Touche_2006_Global_Security_Survey Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85704
  - 9
    - Microsoft Windows Live Messenger Contact List Processing Remote Denial of Service Vulnerability "Microsoft Windows Live Messenger is reported prone to a remote denial-of-service vulnerability when handling malformed contact list (.ctt) files. A successful attack can result in a denial of service condition by crashing the application. Windows Live Messenger 8.0 is reported to be vulnerable. Other versions may be affected as well." http://www.securityfocus.com/bid/18639/discuss Imhotep -- ************************************* Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ ************************************* Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85698
  - 10
    - warning Has anyone had this sent to them in an e-mail it is supposed to be from Microsoft ( Microsoft [WARNING: VIRUS REMOVED] Use this patch immediately !) if so is it genuine?? if so contact me at rdb61554@insightbb.com Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85694
  - 11
    - My documents permissions Hello- Just inherited a network and there is strange issue going on The MY document are redirected to the u:\users\%username% folder The domain users group is part of the domain admins group and administrators group. I'm trying to remove this and tighten up the security on the folde rbecaue right now it is wide open But when I do this users cannot save documents in their my documents folder, they get access denied or file is read only I have compared the permissions to other servers I have that but I cannot pinpoint it Any insight wpuld be appreciated Thanks Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85693
  - 12
    - How to give multiple users access to encrypted files. I am fairly new to file encryption and I am attempting to implement EFS in a winxp/sbs 2003 environment. I would like to encrypt file and have multiple users access those files. The process seems quite clear. Encrypt a file then import the certificate of any user that will be given access to that file. however i have been unable to get it to work. i have been able to allow the administrator account and an end user to both decrypt the same file but i cannot between to end users. What am i doing wrong. thanks. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85690
  - 13
    - Win XP Client to 2003 Server Requires Username/Password I am not familiar with security, so I apologize in advance for what are likely very naive questions. Our site has 2 domains. Users log into domain A which is an old NT 4 server. Domain B has windows 2k DCs, win 2k exchange 2003 server, and a win 2003 standard member server. A trust relationship exists between domain A and domain B. A new client/server application has been installed on the win 2003 server (no service packs) with a client app on Win XP Pro/SP2 desktops. Whenever users attempt to use the client, it will not run until they use explorer to browse to the proper 2003 folder. They then get a username/password request. They must log in to Domain B after which they can map to the application folders and access what is needed. After they log off, the whole thing must be repeated the next time they log on and want to use the app. I have scanned the security and account policies on the 2003 server but am wary of changing anything and causing bigger problems. Can someone help me understand what needs to be done to avoid the logon issue every time a user wants to use this application? More applications of this type are coming, so I just see the issue increasing. Thanks very much for your help. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85679
  - 14
    - Is it advisable to allow pop3 through internet My network environment does not have pop3 server nor Exchange pop3 email service. Basically, no network or Microsoft require POP3 service. Recently, some of the user requested to for pop3 service as they claimed that they cannot access thier internet using email client via pop3. They do not want to used web-based as it is not so user as email client. What are the risk if i allow pop3 access to internet? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85666
  - 15
    - Is it advisable to allow pop3 through internet My network environment does not have pop3 server nor Exchange pop3 email service. Basically, no network or Microsoft require POP3 service. Recently, some of the user requested to for pop3 service as they claimed that they cannot access thier internet using email client via pop3. They do not want to used web-based as it is not so user as email client. What are the risk if i allow pop3 access to internet? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85665
  - 16
    - Is it advisable to allow pop3 through internet My network environment does not have pop3 server nor Exchange pop3 email service. Basically, no network or Microsoft require POP3 service. Recently, some of the user requested to for pop3 service as they claimed that they cannot access thier internet using email client via pop3. They do not want to used web-based as it is not so user as email client. What are the risk if i allow pop3 access to internet? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85664
  - 17
    - Destructive, dangerous Autochk.exe An observation that someone from MS might care to comment on: Relates to all NT- based OS's including XP: When an unscheduled reboot happens, the system runs AUTOCHK.EXE to check the system partition before reloading the OS. In principle this sounds like a sensible precaution, however if any files were found to be damaged, then the files are SILENTLY DELETED. The user is not told of this, nor is any option to cancel given. This in fact creates a far worse problem than if no automatic check had taken place. The user now has a disk from which an unspecified number of files are missing, and no easy way to tell which files, or even which folders they were in. From this point on, no program on the disk can be relied upon to function correctly, and no documents, media or sourcecode can be treated as complete or reliable. In fact, if the disk contents are in any way valuable, then the only proper resolution is a full restore from tape. Technically, the deletion is logged in the event logs, but this would only be apparent to a very tech-savvy user, and even then, only if the user knew something had gone amiss. Which he likely doesn't, especially if he didn't observe the reboot. The fragments of the files are moved to a FOUND.xxx folder in the root of C:, however there is no simple way of identifying what the original filenames were, hence again no way of telling what has been destroyed, or where it came from. To cap it all, autochk.exe itself (in the system folder) is protected by SFT and cannot be removed from the system. I reackon the guys at MS need to have a long, hard think about this. Any system which zaps files at random - the user unaware it's happening - is a crazy piece of design. Windows 9x used to run Scandisk in similar situations, however its action was to inform the user of any damaged files found. Autochk does not. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85663
  - 18
    - POP3 What are the risks if i allow POP3 ? Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85653
  - 19
    - Security Question I work at a healthcare facility and we have an outside IT consultant that wants to create a tunnel to our internal lan to supposedly help with monitoring and remoting users. However, I believe this could be a vialoation of HIPAA and that we would also be risking the networks security, meaning that anything that may come on to their LAN could cross over to ours. Does anyone have insite into this or where I could fine any type of documentation that would show that this is a possibility? Thanks. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85647
  - 20
    - Cannot run download from the internet Anytime I try to run cmd or download any program from the internet, the laptop restart and prevents me from carrying out the task. Can somebody help? Thanks in advance Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85634
  - 21
    - Defender Beta 2 ----- NEEDS SOME ATTENTION At this point, great program and I love it EXCEPT FOR ------ Why does it not catch and stop adware, and the other types of low lovel junk that likes to watch what you do on the Internet??????? Once a week I crank up my Spy Sweeper and run it and I always come up with 12-15 cookies that are the same each week and in my opinion that type of junk should be stopped by Defender. Before I shut off Spy Sweeper and stopped it from runnning in the background that program always stopped that type of stuff !!!!!! Yes I know it is Beta, but come on MS this is now part of OneCare Live to which I have a paid one year subscription to and Defender is still not catching and stoping these cookies from these very basic annoying types of adware and what ever the other stuff is called. If Defender is not going to stop this stuff/junk then will MS change the program so I can run Spy Sweeper all of the time to catch and stop this stuff and not cause a conflict with Defender and OneCare. Maybe MVP Bill Sanderson would be kind enough to way in on this, if so thank you very much Bill for any comments/background that you may be able to provide. -- Larry D Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85624
  - 22
    - FTC Loses Laptops - Compromises Information of Suspected Fraudsters Now the FTC has lost two laptops containing personal information. In this instance, some of the information is on people suspected of fraud. Free "credit monitoring services" will now have to be provided to them. Is this politically correct, or what? http://fraudwar.blogspot.com/2006/06/ftc-loses-laptops-compromises.html Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85622
  - 23
    - The spyware Browsezilla, and the vulnerability discovered in HLINK Browsezilla is an Internet browser that can be downloaded from numerous web pages. When installed, it installs the adware PicsPlace on computers, which in turn connects users, without their knowledge, to certain adult content web pages. This generates an artificial number of hits on these websites, with the consequent financial benefits to the owners of the websites and the creators of Browsezilla. The consequences for users that install this browser are primarily unnecessary bandwidth usage caused by the hidden connection to these web pages. In addition, users could find themselves unjustly accused of visiting these pornographic websites. PandaLabs has also warned this week of a vulnerability discovered in HLINK.DL, a library used by several Microsoft Office programs, such as Microsoft Excel. Exploits of this vulnerability have been detected that can infect computers using a specially-crafted Excel file. This document could be distributed by email or downloaded from a website. There is currently no patch available for this vulnerability, and users are therefore advised to treat all Excel files received with caution, regardless of their origin. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85612
  - 24
    - USB pen drives and safe cryptosystems (looking for references) We are working on forensic cryptology and computer security expert witnessing in Spain. Right now we need a list of freeware cryptosystems for USB pen drives, as well as comments or cryptoanalysis of standard ones. For instance, we would like to know about Microsoft XP encryption options in "properties" (we are very interested about any case or news concering Microsoft help to Courts of Law or Police in order to crack their own standard cryptosystem for USB pen drives), or manufacturers utilities to allow partitioning, make the drive bootable and have a password protected security area.like VFUEL_Security.exe you can download for free at http://vfuel.net/driverstool.aspx Our idea is to publish a Website in Spain with links to free downloads, advice and news about risks on USB pen drives specially for lawyers. I shall appreciate any help technical help, news and "off-the-records". There is a lot of work to be done in Spanish speaking countries on USB pen drives security. Miguel A. Gallardo, cryptologyst (engineer and criminologist) at www.cita.es Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85611
  - 25
    - Opening a Document gives me the Windows password dialog box .When i try to open a document it comes up with the Windows password dialog box. The document can be in a zip file format or a single document. I hit cancle and the document opens as normal. The document nor is the zip file password protected. Not sure what's going on with this. This only accurs on one PC out of 35. Does nay one have any ideals as is to what's going on. WinXP sp2 all updates installed. Tag: And just when we thought the IRS Phishing Scams were over ........ Tag: 85607

Despite the fact that the tax season is over and all the press on the
IRS Phishing scam, the phishermen must think the IRS name is a good
"lure."

http://fraudwar.blogspot.com/2006/06/and-just-when-we-thought-irs-phishing.html

Top