legitimate files or spyware?

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Any help please After I run Spybot Search & Destroy,what do I do with the 66 problems that were found?Do I click on the "fix selected problems" tab?I am a moron when it comes to these program things.Thanks for any help and Merry Christmas to all. Tag: legitimate files or spyware? Tag: 65626
  - 2
    - Noob's first post..need a wee bit o'help Ever since this past wed, ive had issues with connecting and staying connected. Im on DU. When i connect, 9 times out of 10 before my first browsers brings up yahoo as my homepage, i get disconnected. So i connect again, get about a page or two into my surfing, and disconnected again. Generally the 3rd time is the charm and dont seem to have any issues after that. Ran a virus check etc etc and nothing seems to be comming up and i havent been told ive gotten something so what would be my other options? -Will Tag: legitimate files or spyware? Tag: 65625
  - 3
    - SonicWALL/cable Internet/dynamic IP configuration help needed Hi... I have a small home/office network with 4 PCs running XP Home. Until today, I used DSL and my ISP used static IP addresses. I have a SonicWALL/10 firewall/router connected to the DSL modem, and a switch connected to the SonicWALL. The PCs are connected to the switch via Cat5 cable. Using the static IP addresses, it all works fine. Today, I had Comcast high speed Internet service installed. The tech attached one of my PCs to the new cable modem and it works fine. I have been struggling all day trying to configure the SonicWALL to connect all the PCs to the Internet using dynamic IP addresses. I set the SonicWALL to use NAT with DHCP Client. I can see that the SonicWALL is getting IP and DNS addresses from Comcast -- these numbers show up on the SonicWALL setup screen. I have enabled DHCP in the SonicWALL, and I've set the PCs TCP/IP setting to automatically obtain IP addresses. After making all the changes, I restart the SonicWALL and the cable modem. I am not able to connect to the Internet. I have talked to Comcast several times and they aren't familiar enough with the SonicWALL to help. My SonicWALL is old and SonicWALL won't talk to me because my service agreement expired a long time ago. They want $75 for a one-time tech support call. I have the feeling that I have one small incorrect setting in the SonicWALL interface that's keeping this from working. It seems the SonicWALL setup is a bit more complicated than other routers because the Comcast tech on the phone said a Linksys, Netgear or D-Link router is pretty much plug and play. I hate to have buy one of those since I have the SonicWALL. Can anyone help? I am pulling my hair out.... what's left of it. Many thanks. John Tag: legitimate files or spyware? Tag: 65606
  - 4
    - Can wildcards be used for sites in the Restricted Sites settings i There is a domain called media43.fastclick.net that has a tricky scheme of changing the two digits everytime it "pops" up when I browse. I was curious, if I put media**.fastclick.net as a site in my restricted sites web content zone, would it work to restrict media??.fastclick, not matter what numbers they put in? I know it won't keep it from popping up, but I just want to make sure that when it does pop up, that it is restricted. Using wildcards would be easier than typing in media01...media02...etc... Just wondering, Craig Tag: legitimate files or spyware? Tag: 65603
  - 5
    - spam and adware-spyware and MS Patches spam and adware-spyware and MS Patches can SPAM and spyware/adware be prevented in a PC was all patched up with the most recent service pack and security patches from MS? Or does Spam alone bring Spyware/adware? We have been expiriencing many issues with adware/spyware on our PCs, i think its because 90% of our computers arent pacthed up with the most recent SP's and security patches. Im trying to convince management that we need a adware/spyware solution. If anyone has some good links on any of these questions,i sure would appreciated it. thank uou Tag: legitimate files or spyware? Tag: 65594
  - 6
    - Default Permissions Hi! Can someone explain why the default permissions in every harddrives and partitions in Windows 2003 Server look like they do? For example if you look at advanced settings on security the "Users" group will appear with three different settings. And what is the reason to put the "System" group there. We feel like we want to remove all the default security and only leave the Administrators as default with full control and then add the permission we need in the subfolders. Tag: legitimate files or spyware? Tag: 65583
  - 7
    - FILE IDENTIFICATION & FUNCTION Can you help me identify files named INFCACHE.1, and net_save.dna ? They are on my Local Disk (C:) drive and are not in a folder. After conducting my own research (e.g. via http://filext.com/) I see thes files can be a for a number of things. Can you please me with amplifying instructions as to what these file can be used for. I believe they are bad ju-ju. -- thanks rj Tag: legitimate files or spyware? Tag: 65576
  - 8
    - ??'s about Certificates & AD Hello, Our certificate authority is going to expire in a few weeks and we are trying to extend it in our pilot environment. We use it to access our Active Directory through SSL/ port 636. We have already renewed the CA and everything looks good on paper but the client machines keep getting an error message saying that it's expired. How can one tell which certificate is being used and how can one tell which certificate has been published to AD? Thanks Tag: legitimate files or spyware? Tag: 65575
  - 9
    - IPsec - restrict communcation Platform= Windows 2000 Server Hi is it possible to restrict servers communicating using IPSec. ie. if you had 3 servers A, B and C Can you use IPSEC so that A talks to B and C.... but B can only talk to A and C can only talk to A so that B and C do not commuicate Tag: legitimate files or spyware? Tag: 65570
  - 10
    - Questions on Security Hello: I just finished installing windows 2003 Server. I set up a user, Venki, and made him a member of all groups including Adminstrators. But when I sign up as Venki, I am not even allowed to view the event log. When I click on any of the logs, I get a message, "Unable to complete the operation on "DNS Server". Access denied." This is the case on Application, Security, System. Can somebody tell me why? Venki Tag: legitimate files or spyware? Tag: 65568
  - 11
    - Certificates required to join domain i am running windows 2003 server in mixed mode. we have a enterprise CA. is it possible to require a valid certificate on a workstation to join a domain and access resources in the domain? as part of that can you setup a way to notify you if a computer is plugged in to the network so it can get a valid certificate installed by an administrator? Tag: legitimate files or spyware? Tag: 65567
  - 12
    - Connecting to Mapped drives via Cisco Client VPN I have a Cisco PIX 506e on my Windows 2000 Server. I am installing Cisco VPN Client on my remote Windows XP Pro SP2 Workstations. Everything works fine except I cannot automatically connect to Mapped Network Drives on the workstations when I log in. I have logon scripts running to connect to the drives. The drives appear on the "My Computer" window, but the only way I can access the drives after logging in is to manually navigate to the source folders via the "Network Places" function. -- Charles Masteller MIS Manager Marimed Foundation Kaneohe, Hi. Tag: legitimate files or spyware? Tag: 65564
  - 13
    - Norton Ghost or Acronis TrueImage? Can anyone recommend which of the two programmmes in the subject line is the easiest and most reliable? I hope to back-up my entire hard drive contents to an external hard drive so I can "re-install" if things go badly wrong. I'm looking for ease of use and reliability only. Any help appreciated. Thanks Chrisss....... Tag: legitimate files or spyware? Tag: 65557
  - 14
    - Program deleting itself after Execution Hello. I work at an Corporation down here in Puerto Rico in the IT department, we have come across a very strange and serious problem, that i would appreciate any and all insight or solutions in. Over the past few weeks I had noticed that for some reason or another a particular application(EXTRA!emu program) was(my assumption atm) being desasociated from the OS therefore not being able to run files associated to that program. A simple reinstall would fix the problem, so at that particular moment we didnt give it much attention however I was concerend about it but had other more pressing issues to deal with. Last week one of our main Apps(PremierII) for a department that is launched from a webpage in our intranet stoped working , and after a couple of ours with the apps techsupport we couldnt find a solution. Yesterday however I was assigned to try and fix this applications problem, and came across something very suspicious. The application is accessed by all the Users from one of our servers(it resides there). When i went to the server to look at the files of the application I was able to see that there was still one user using it and i was unable to check some of the files associated with it and try to see if they were corrupted. So i called up to the Dept. and asked for the user to log off from this application which he had been connected to for over 5 days, When he does disconnect I see the applications .exe file disapear from the Folder view aswell as all the .ocx files that it uses. This explained to me why other ppl couldnt access the application(and why no one could figure out what exactly was going on since the OS still showed the app and its file being there). So after a reinstall of the APP everything went back to normal. So once I saw this right in front of me It came clear to me that the application that I belived wsa being disasociated from the OS in the past few weeks, actually suffered from the same problem this current application had. Anyways I am trying to find any information ppl may have on anything of this kind happening to them, or something I may try to stop this from happening. In our Corporation we run Trend Micro Officescan and all our machines are up to date on the definitions. I have yet to see Officescan find a virus on the server, or any of the terminals(Extra! app) that were afected by this problem the weeks prior to the big incident(PremierII). Any help will trully be appreciated. Thank you Tag: legitimate files or spyware? Tag: 65552
  - 15
    - SUS - Can't approve or refresh I am having problems on a clean install of SUS... Win 2K3 server... I can download all updates when I synchronize the server but then I cannot approve anything. The list is blank. I try to refresh on the monitor server page and nothing reloads. Any help is greatly appreciated. Thanks, S Fisher Tag: legitimate files or spyware? Tag: 65546
  - 16
    - Enumerating the current user's privileges (GetTokenInformation API) Hi all, I need to list all the privileges (and if they are enabled/disabled) for a specific user. I checked MSDN but I don't manage to make it work. Can anyone help me out please ? Maybe someone has an example (VB, C++, ?) ? Thanks, Marc. Tag: legitimate files or spyware? Tag: 65543
  - 17
    - Is this a Security Issue? In Internet Explorer (Windows XP pro SP2) when right clicking on any accessed site the following appears in the floating menu: >>> HARDCORE MOVIES <<<. Is there any way I can remove this? I have no >>> Malware, virus etc... Cheers, Arbel Tag: legitimate files or spyware? Tag: 65534
  - 18
    - Something is changing my firewall settings! Hello, I posted this already in microsoft.public.windows.networking.firewall but haven't heard anything, thought maybe this group would be appropriate -- this seems like a big deal, security-wise(?): I unchecked the "file and printer sharing" exception in XP SP2's firewall. (This exception is enabled by default) Somehow it re-checks itself! I can't tell when it happens but eventually (not necessarily just a reboot) it gets checked. A similar issue was posted in this item: http://groups-beta.google.com/group/microsoft.public.windows.networking.firewall/msg/7b293705ef8a35d2 But there didn't seem to be any resolution. How can this happen? How can i tell what is re-checking this? Thanks! Ed postscript: I loaded up the Regmon utility, and filtered on "FirewallPolicy". I caught the change occuring when I accessed shared files on my PC from a second PC on my *un-firewalled* LAN -- i have a second wireless LAN which is the one I want to protect. According to regmon, the process doing this was explorer.exe (which doesn't really tell me much). I say I "caught" it: I caught it once, and now I can't reproduce it !#$%^ For the curious, the registry keys are at: HLM\SYSTEM\ControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List Tag: legitimate files or spyware? Tag: 65525
  - 19
    - Step to map a network drive I need refreshed on mapping network drives... I tried to get it by looking through Microsofts site, they removed it due to a lack of access to it... Any help would be appreciated.... Tag: legitimate files or spyware? Tag: 65524
  - 20
    - Automatic updates vs. Windows Update website I have my W2K set to download Automatic Updates. However, if I go to the Windows Update website and scan for necessary updates, it usually lists at least one "critical update" to be downloaded. Aren't these done through the automatic upadate feature? Am I supposed to manually download those shown on the website as well? What good is the automatic update feature if it misses some critical updates? Tag: legitimate files or spyware? Tag: 65523
  - 21
    - Microsoft Security Bulletin vs Workarounds I would like to know if applying a Microsoft Security Bulletin workaround is sufficient enough. Some of these bulletins to not always seem to apply and the workaround seems to be the best answer, but is it? For example, the MS 04-041 Microsoft Security Bulletin workaround reads that the workaround "helps reduce attacks"....and? It does not go on to provide further information as to what is or not reduced. All assistance is appreciated. Thank you -brian- Tag: legitimate files or spyware? Tag: 65522
  - 22
    - Share Permissions and Security Groups I have the follwoing setup and I wanted to know if this is correct. Global Domain Share Share SubFolder Group local Perms NTFS NTFS PrjGrp1 Dept Dept-FC Dept-RX PrjGrp1-Modify The PrjGrp1 group is a global group of user accounts for an OU. The Dept group is Domain local for the OU which has a member of PrjGrp1. A Share call Sales has share permissions for the Domain Local group Dept as Full control. I know I can put the group Everyone but this adds an extra layer of security to the whole setup. The Sales Share NTFS permissions has the same domain local group but here it is given only Read, Execute and list folder permissions. A subfolder within the Sales Share - Project1 has NTFS permissions set to Modify for PrjGrp1 global group. This means that if Fred is in Global groups PrjGrp1 and PrjGrp3 (each referencing a subfolder in the Sales share ie Project 1 and Project 3), he will not gain access to the subfolder Project2 within Sales and the NTFS share permissions will not allow him to fiddle within the Share folder itself. For one domain setup are my group assignments correct? Should I make the Dept group a Global Group instead of a Domain local or should I be looking at a different setup? TIA Tag: legitimate files or spyware? Tag: 65521
  - 23
    - removing old workgroup names We have some old workgroup names showing up in our windows explorer from when we added computers into our network. Does anyone know how to remove obsolete workgroups from the domain. We are in a windows nt environment. Tag: legitimate files or spyware? Tag: 65513
  - 24
    - DCOM security I am having problems creating a DCOM component under Windows XP SP2. I am creating the component locally to eliminate any remote access issues. When I set the identity to "The interactive user" I can create the component okay so I know that its registered okay and all its dependencies are present. When I set the identity to the logged on user but specified explicitly under "This user" I get VB error "ActiveX component can't create object". What is the difference between "interactive user" and specifying the same user under "This user"? I have tried adding "Everyone" with full control under each security section to no avail. I have checked for any DCOM restrictions in "Local Security Settings\Local Policies\Security Options" but none are set. Where else should I look? O my own computer there are only six policies in "Local Security Settings\Local Policies\Security Options" - four "Accounts", a "Network access" and a "Network security". On the problem computer there are sixty-four. What has added these additional policies? Tag: legitimate files or spyware? Tag: 65509
  - 25
    - Open Source Project Secure DHCP Provisioning System, Anyone Know o I was wondering if anyone knows of a commercial application or preferably an open source project that operates similar to the way users gain access to a broadband hotel internet connection. General description listed below: A network level application that manages access to your network. It prevents rogue computers from connecting to your network and gaining access to network resources. By restricting what computers can obtain a valid network IP Address, a network administrator has a low maintenance tool for managing access. A new user plugging into a SecureDHCP network will be assigned a "Special", non-routable IP address that will only allow them access to the SecureDHCP web site. This customizable web site can require a new user to, for example, fill out a form identifying themselves, acknowledge the reading of an "Acceptable Use Policy" document or download and install current virus software. The system will then replace their "Special" IP address with a valid network address that provides full access. Hardware addresses as well as user data are saved in a database for reporting and troubleshooting purposes. Anyone know of an open source project that seeks to meet this kind of need? Any information would be appreciated. -- Sincerely, J.M.Aloye Tag: legitimate files or spyware? Tag: 65502
- Next
  - 1
    - Panda & RAV fail I am running Win98 and the latest IE. I have downloaded and installed all critical windows security updates. When I try to scan with RAV, it fails at the beginning when it downloads the initial update files: Please wait to update the virus definitions... Updating from: http://www.ravantivirus.com Updating from: ftp://ftp.us.ravantivirus.com Updating from: http://www.rav.ro Updating from: ftp://ftp.ro.ravantivirus.com Updating from: ftp://ftp.ravantivirus.com Updating from: ftp://ftp.us.ravantivirus.com Updating from: http://ftp.us.ravantivirus.com Updating from: ftp://ftp.ro.ravantivirus.com Updating from: http://ftp.ro.ravantivirus.com Update failed ! undefined I also tried scanning with Panda. Panda makes it most of the way, but when it gets to my Outlook 6 files, it stops and prompts me for an Outlook Profile. When I try to click on choices, it freezes. Any suggestions? Thank you in advance, Bryan Tag: legitimate files or spyware? Tag: 65500
  - 2
    - Can't open a window Hi, I'm trying to take a web-based class. I can make it through several pop-up windows but hit a wall at the one I really need. When I click on the "Take a Lesson" button the window pops up, starts to load, and then the word "Done" appears in the taskbar and a small white box with a little red x in it shows up in the upper left-hand corner. That's it. No lesson to take. The schools help desk assures me thyat all the programs and permissions I need are installed and set. I use XO with SP2 & IE6. Does anybody have any ideas? -- P-3 LDO Tag: legitimate files or spyware? Tag: 65497
  - 3
    - .net passport password problem I have been using the same password for msn messenger for about 4 years now- yes, I prob should have changed it. A couple of days ago it told me the password was incorrect- the only way this could have happened was if someone else has changed it. I have followed all the recommended ways for changing it back. i.e. https://memberservices.passport.net/ppsecure/MSRV_ResetPW.srf however, I don't know the answer to the secret question. I also do not have an alternative email address or billing information so I can't use either of those methods. Finally I have tried to contact the support team but keep getting an automated reply with the above info and telling me they cannot change my password by email. Has anyone else come across this problem and found a way to solve it? Thanks. Tag: legitimate files or spyware? Tag: 65490
  - 4
    - Dec. 1 patch and other patches Isn't the Dec. 1 2004 patch the one being discussed in the recent articles like this one: http://story.news.yahoo.com/news?tmpl=story&cid=1093&ncid=1093&e=4&u=/pcworld/20041220/tc_pcworld/118997 (which is actually displayed on yahoo.com's home page) Tag: legitimate files or spyware? Tag: 65489
  - 5
    - were there any patches after Dec 14 2004? There is a rash of articles about an IE hole (including the one below) that suggest there was another patch after Tuesday Dec 14 but I'm not clear on that. The latest patches I could find in microsoft.com were not after Dec. 14. http://techrepublic.com.com/5100-22_11-5495409.html?part=rss&tag=feed&subj=tr Norton also had an update for the Bafor worm quite a while ago. I have XP SP1 - is the new problem just for SP2? Robert C. Tag: legitimate files or spyware? Tag: 65488
  - 6
    - NLS (Network Load balancing) and NetBIOS Can NLS be used while disabling NetBIOS? Tag: legitimate files or spyware? Tag: 65480
  - 7
    - Access to other drives in the Workgroup I have one 'wired' computer (my desktop) and one 'wireless' computer (my laptop) all connected together thru a linksys router/access point. I've made both computer's "My Docs" shareable... but when I go to the workgroup the only thing I have 'access' to is the shared folders. When I try to access "my docs" on the other computer, I get and Access Denied error. I know I'm missing something...just don't know what it is. Thanks in advance for your help. mike Tag: legitimate files or spyware? Tag: 65473
  - 8
    - Norton Firewall "MSSQL_Null_Packet_DoS" I'm using an application to manipulate data in SQL server database on a remote computer. Sometimes when I use this application I'm getting this message on my Norton Personal Firewall and the application terminates: 'Attempted Intrusion "MSSQL_Null_Packet_DoS" from your machine against [IP] was detected and blocked.' The program was written by a new small company and I can't change the code. If I'm running this program on a computer without firewall, it works fine. My question is how I can allow this kind of communication for this application only in my Norton Personal Firewall without disabling the firewall. Tag: legitimate files or spyware? Tag: 65470
  - 9
    - mysearch browser hijacker I have the mysearch browser hijacker, I cannot delete it using spybot or adaware or cwsshredder or removing it from add remove, what can I do? Tag: legitimate files or spyware? Tag: 65469
  - 10
    - Make my GINA Dll I have some problem with the creating procces UserInit.exe in function WlxActivateUserShell bRet = CreateProcessAsUser(pgContext->UserToken, pszUserInitApp, NULL, NULL, NULL, FALSE, CREATE_UNICODE_ENVIRONMENT, pEnvironment, NULL, &si, &pi ); it's ok, but userinit.exe program isn't stat correctly Tag: legitimate files or spyware? Tag: 65457
  - 11
    - Win 2k Password Security I Use Win2k for my own use (nobody else uses it) and I'm Getting a password will expire in (#of days) do I want to change it? Is There A Way To Bypass it? Thanks In ADvanced Tag: legitimate files or spyware? Tag: 65452
  - 12
    - Firewall Problem Hi, I have CA EZ Firewall. Today it was the last day of the trial period. (only 15 days?) It asked for the key. I entered the key. But it still says "you have 0 days left." Then "New Network Wizard" comes up and says it detected a new network. There is no network on this computer except the internet. I checked the DNS, it does not match the DNS entries in the Connection Properties (DSL). Although the "subnet mask" number is the same. Can anyone explain what's going on? Why did it detect a new network after 2 weeks of using the internet? Why is the DNS different than mine? I am getting no response from the CA support. I would appreciate any help. I am using XP. Thanks Tag: legitimate files or spyware? Tag: 65443
  - 13
    - virus? Hi, This morning I received a mail that had an attachment im_shocked.doc.zip and detail in the subject field, the body contained this message I was surprised, too! Who_could_suspect_something_like_that? shityiiiii First question is, is this a virus? How did it get past my AV? In the header it says that X-apparently sent to >>>my address, how does it get sent to me? Tag: legitimate files or spyware? Tag: 65439
  - 14
    - Is it possible to "disable" Internet Explorer in this case? Is it possible to "disable" Internet Explorer in this case? I run a franchise-like business. I am an independent contractor, and I have three employees. I sell services for a major national company. In order to maintain quality control and security, the company I work for provides the PC's, the software, and the internet access to do our work. We use Windows 2000 OS, Microsoft Office, and Internet Explorer. In order to quality control and security of the PC's, we cannot load or delete any software from the PC's. In fact, there is no Add/ Remove Programs option in the control panel. It's been removed. Here's my problem: I have an employee who simply cannot stay off the internet during work. I have done all the routine actions required by an employer: I have talked to him, provided written company policy, written office policy, given a written reprimand, and talked to him again and again. About a year ago, I even wrote an agreement that if he surfed the internet during work hours, I could deduct $20 per website. He agreed to it and he signed it. But he continues to surf when I am not in the office. I did not have the heart to enforce it. I don't want to withhold his money. I want his full attention to give 100% excellent customer service! That's what my customers deserve! And he is not getting all his work done. I am noticing an increase in errors and his customer service has suffered. He has been with me three years, and is important to my business, so I have not fired him (but I am getting really close). I am seeking a better "win-win" solution. Months ago I contacted our corporate office and asked, "can I please have IE removed from one PC?". They said no. They simply don't want to do it. I don't fully understand why. My guess is that since they are responsible for thousands of PC's in the US (configured just like mine), I think they don't want to be bothered with an individual request to customize a PC. It might create a precedent that could create more work for them, and more headaches. From their perspective, I guess that makes sense. I spoke to my employee last week about the continued problem, and he admitted that he is basically addicted to the internet. (His main passion is cars - not porn or gambling. He just loves cars. And Ebay.). I told that I had inquired about removing IE from his PC. He said he would be in favor of that and that he thought it would be a good idea. Most of his work does not require internet access. And every PC in my office has IE and broadband access, so it's available elsewhere when needed to do his work. And there are other PC's with IE that are readily available for use. Again, yes I could easily fire him. I have volumes of documentation. I have even found one instance where what he was viewing was adult oriented, is NOT family friendly or workplace safe. But he wants me to work with him and I am trying to find a creative solution (yes, I have fired people before. Firing people, IMO, is a last resort and not very creative). Here's where I am seeking help: can you suggest a way that I can go to his PC and disable IE? Remember, I can't add or remove any programs, and I don't own the PC. And, since I don't have the company blessing, I don't want to create any technical problems that would impede any other operation of the PC. I am fairly PC literate. If I can disable IE, I will explain it to him before I do it. Can you give me a suggestion to disable IE? I have run out of ideas. Got any ideas for me? If you think there is a more appropriate forum for this question, pls let me know. (sorry to write so much....just trying to anticipate questions). Thanks. Ralph Tag: legitimate files or spyware? Tag: 65416
  - 15
    - virus Has microsoft issued a warning about THE WORST VIRUS EVER,dated dec.4? This virus is said to destroy Sector Zero from the hard drive if a card is received "A Card for You" is opened. It is said that when it is opened the computer will "freeze" and when it's tried to be rebooted and the "alt, ctrl and another key (can't remember the third) is pushed this Sector zero will be destroyed. Please advise. ofaloon Tag: legitimate files or spyware? Tag: 65415
  - 16
    - NIS 2005 compatibility with MS 2003 I have just installed NIS 2005 and now get an error message every time a MS office application starts "Norton Anti Virus 2005 does not support the Repair feature, please uninstall & reinstall" What is the problem? Is it a common problem and what needs uninstalling, Office or NIS 2005. Will reinstalling make any difference. Live update says NIS is fully up to date. Tag: legitimate files or spyware? Tag: 65411
  - 17
    - sp2 SP2 is not displaying pictures when I surf the net. I had no problem before but now I have to click the stupid yellow bare each time. Is there a way to get rid of this. Tag: legitimate files or spyware? Tag: 65407
  - 18
    - Are current personal firewall available in the market 100% foolpro I uses broadband and often there is attempted hacking via port 443, many times such attempts were twarted by installed firewall e.g. Spynet and zone alarm. Are there other potential ways that a hacker could break through a home pc? Briefly what are they. Tag: legitimate files or spyware? Tag: 65406
  - 19
    - Disabling domain password requirements How do I disable the function of my win2k3 domain server requiring a complex password for my users? I check the default domain security policy and the passord policys are all set to not defined. Tag: legitimate files or spyware? Tag: 65405
  - 20
    - Cumulative Update for Outlook Express (887797) Outlook Express for Windows update available http://support.microsoft.com/?kbid=887797 APPLIES TO . Microsoft Outlook Express 5.5 Service Pack 2 . Microsoft Outlook Express 5.5 . Microsoft Outlook Express 6.0 If you choose 'Custom Install' at Windows Update, 887797 will be available via 'Select optional software updates' in left pane. Before this update is made available to you on the Windows Update Web site, you must install MS04-018: Cumulative security update for Outlook Express (823353). -- ~Robear Dyer (PA Bear) MS MVP-Windows (IE/OE) Tag: legitimate files or spyware? Tag: 65393
  - 21
    - Dynamic DNS advice/recommendations http://dmoz.org/Computers/Software/Internet/Servers/Address_Management/Dynamic_DNS_Services/ I am researching dynamic DNS providers and was quickly overwhelmed by the number of options. (see above link) I would appreciate any feedback or recommendations that anyone may be able to offer. I'm not adverse to spending some money. I am primarily interested in being able to VPN or RDP to various machines in the Midwest. Static IP's are not an option for them, at least not for the foreseeable future. Thanks in advance. Pete Tag: legitimate files or spyware? Tag: 65391
  - 22
    - virus, trojan horses, worm I have a computer that is running Windows 98. I had a challenge recently with the machine rebooting by itself after shutdown. I was able to fix it with a tool from the symantec site. The problem is back and I cannot remember the name of the worm or virus.... Please Help Tag: legitimate files or spyware? Tag: 65390
  - 23
    - noadware - friend or foe? I recently downloaded a program called 'noadware'. Now, Spybot is flagging it as malware. Is noadware legit or should I deinstall it? Thanks, Bryan Tag: legitimate files or spyware? Tag: 65381
  - 24
    - 4 security updates on 15th Dec to WinXP SP2 seem to have screwed McAfees 8.0 Hi On 15th-December-2004 I updated Windows XP Professional, SP2 with 4 security updates. Since then the update procedure (via Internet Explorer) of McAfees VirusScan 8.0 gets so far but the windows it opens remain blank. McAfees: Version 8.0, Build 8.0.41, Engine Version: 4.3.20 I notice also that in the bottom right corner of IE is "Unknown Zone". Anything I can do to put it right? Cheers Stephen Howe Tag: legitimate files or spyware? Tag: 65378
  - 25
    - virus? At who's end? One contact occasionally gets my mail with an attachment. This attachment is her MY Documents directory and it contains all her personal files. What causes this? My virus defs are updated and complete scans find nothing. My updated spybot and several other spy apps find nothing. I have current ver of Zone Alarm. It must be at the other end, but I find nothing in web searches about this threat. If I could find some info, then I could send it to her, Otherwise it is just me saying "its not me". She has never gotten this form anyone else. help. tks, Paul Tag: legitimate files or spyware? Tag: 65370

hi

could anyone tell me whether the following files are legitimate. i have the
tablet pc edition of windows.

- C:\WINDOWS\GetEsc.exe
- C:\WINDOWS\system32\ratptr.exe

Thanks in advance,
Clive

Top

Re: legitimate files or spyware? by PA

PA
Sat Dec 25 13:54:53 CST 2004

Most likely, yes.

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE)

Posting and You
http://www.trials-shack.co.uk/posting.html

Clive wrote:
> hi
>
> could anyone tell me whether the following files are legitimate. i have
> the
> tablet pc edition of windows.
>
> - C:\WINDOWS\GetEsc.exe
> - C:\WINDOWS\system32\ratptr.exe
>
> Thanks in advance,
> Clive

Top