Posting of e-mail addresses
Do not use your e-mail address on this site. I made that
mistake a couple of weeks ago, and my in box is filled
with virus attachments. I now use mail washer and preview
all e-mails. These newsgroups are mined for addresses to
spread the viruses. Tag: VPN & mapped drives to remote server Tag: 39157
FTC Obtains Order Barring Pop-up Spam Scam
"This is nothing more than a high-tech version of a classic scam," said
Howard Beales, Director of the FTC's Bureau of Consumer Protection. "The
defendants created the problem that they proposed to solve - for a fee.
Their pop-up spam wasted computer users' time and caused them needless
frustration."
http://www.ftc.gov/opa/2003/11/dsquared.htm Tag: VPN & mapped drives to remote server Tag: 39154
KDC certificate
I can't log on with my smartcard to the domain.
The event error message on the DC displays that the KDC
certificate is missing. On the workstation the error
message 'error 0x8000bb' is displayed.
How can i renew or install a new certificate for the KDC? Tag: VPN & mapped drives to remote server Tag: 39150
Bogus Microsoft messages
Ever since I installed a new HP Printer in October, 2003,
I have been receiving messages, with a Microsoft logo,
telling me about a "November 2003 Cumulative Patch" and
directing me to open the attachment below to receive it.
When I scan the attachment with my anti-virus software, it
tells me a virus exists. I don't open the attachment.
I get floods of this alleged Microsoft message, sometimes
a dozen or more a day. How can I get them to stop.
Robert Tag: VPN & mapped drives to remote server Tag: 39149
Simple CA guide
Hi,
I'm at a small company (35 people) but we need some Certificates for IPSec
VPNs and SSL connections. I found some guides from MS, but they all seam to
be build for Enterprise level customers. I need a simple guide for a simple
infrastructure... Not with top level security but with a reasonable level of
protection...
Is there anything like that?
Thanks,
Thomas Tag: VPN & mapped drives to remote server Tag: 39146
Successive anonymous logons
At times I may have 30 or 40 successful Anonymous Logons or Logoffs within
virtually the same timeframe. The only thing that changes is the LogonID.
This occurs on a Win2K IIS 5.1 server. Web log files show activity at that
time from one authenticated user. What can be causing this and is it
suspicious activity?
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 11/6/2003
Time: 8:50:16 AM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: SERVER
Description:
User Logoff:
User Name: ANONYMOUS LOGON
Domain: NT AUTHORITY
Logon ID: (0x0,0x12F88DE5)
Logon Type: 3 Tag: VPN & mapped drives to remote server Tag: 39144
Backup report issue
I want to view the backup report on a member server. The
backup sets are created by my assistant. When I log onto
the system using my user account, the backup report does
not show the backup sets performed. When I have the
assistant log on using his account, the last 10 backup
jobs are displayed.
My account is a member of the backup operators group on
the server. Questions:
1) Why can I not view the backup jobs in the report?
2) Can anyone point me to a TechNet reference on this
situation? I've poured through it and cannot find
anything on rights or permissions necessary to view other
user's backup report. Tag: VPN & mapped drives to remote server Tag: 39139
Exchange 2003 security
My company is about to deploy Exchange 2003 and I am
currently looking at implementing the new security
features. I do have the follow questions.
1. If I use a digital certificates and also S/MINE, does
the user who receives the email have to have the same
certificate?
2. How can I set up Exchange to uses both non-certificate
and certificate base. For example: We are doing business
with the GOV and they require strict security. While we
also do business with small companies but require less
security. How can we setup exchange to meet all the
requirements?
Thanks for you help!!! Tag: VPN & mapped drives to remote server Tag: 39138
can't open attachments in OE
I am having the same problem as a few others, apparently.
I cannot open any attachments because "OE removed access
to the following unsafe attachments." And I, too, cannot
find help anywhere that solves the problem. HELP! Tag: VPN & mapped drives to remote server Tag: 39134
MS03-046- Exchange Vulnerability
Are there any viruses out there that exploit this
vulnerabilty yet? Just wondering because we are
experiencing VM problems on one of our exchange servers.
Thanks. Tag: VPN & mapped drives to remote server Tag: 39129
install does not finish
I have windows ME and i have downloaded last three
sercurity updates from microsoft website.But
when both blue bars for downloading and instilling
are finish noting else happens the screen just stays
there i have already wait a whole day but it does not
finish its process.what can be happening if there is any
one out there that can please help
thanks jason Tag: VPN & mapped drives to remote server Tag: 39123
Horse at my back door
Could someone answer a question for me? What is the safest
way to get rid of the "trojan" horse virus on a home
computer? If I was able to quarantine it with Norton and
follow their instructions to delete it, did I? Or, is
there a "patch" as with the other 'worms' that's availbale
to me and where is it made available to the public?
Thanks in advance:) Tag: VPN & mapped drives to remote server Tag: 39093
New bounty system for hackers
I think it is great that MS is putting a bounty
on the heads of hackers. Apply political and
social and economic heat on these guys so it becomes
unacceptable from many angles.
In my old it manager days I had too much misery
from cleanups and updates so going after the source
is sound business practice too. Tag: VPN & mapped drives to remote server Tag: 39090
Outlook Express fault
Can anyone tell me why my folders disappear on my folder
list (I haven't mistakenly deleted them!)
Thank you. Tag: VPN & mapped drives to remote server Tag: 39087
Spam
Help please - I have been getting 8 email spams from
Microsoft every day, how do I stop them?
I've made the mistake of posting my email address on a
newsgroup now I get daily spam - am I too late to do
anything?
Many thanks Tag: VPN & mapped drives to remote server Tag: 39086
VBScript causes ActiveX warning
I have a web page with a small amount of VBScript embedded
in it. When the page is run, I get a warning from Active X
that the control may be unsafe to interact with other
parts of the page. I can get around this by adding the
page to my Trusted Sites list, but I wonder if there is a
way to mark my page as "safe". Please advise. Regards, Rob Tag: VPN & mapped drives to remote server Tag: 39084
group policy object gone?
point and print group policy object(WxpPro)no longer shows
up in gpedit.exe
what can I do to resolve this issue?? Tag: VPN & mapped drives to remote server Tag: 39083
home page
My msn home page keeps changing to one of two search
engines I delete all files under these names but they
always come back is there a way to block them Tag: VPN & mapped drives to remote server Tag: 39076
** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.11.05
Before you post a question to a Microsoft.public.*.security newsgroup, note
that your question may already be answered below:
Answers to Top Frequently Asked Questions:
http://securityadmin.info
My question is not mentioned below. How do I get an answer immediately,
with no waiting?
http://securityadmin.info/faq.htm#moreinfo
See also: http://www.google.com/groups?as_ugroup=microsoft.public.*
See also: http://www.google.com/advanced_group_search
See also: http://www.google.com
I want to post a problem or question to the newsgroup. What info do I need
to post in order to get a correct answer quickly?
http://securityadmin.info/faq.htm#netiquette
I just heard about a new Microsoft security patch update. Where can I get
the patch?
http://windowsupdate.microsoft.com OR
http://www.microsoft.com/technet/security/current.asp
I just installed a Microsoft security patch update, and now my computer is
having problems.
http://securityadmin.info/faq.htm#patchbroke
I received an email from Microsoft / Microsoft Support / Microsoft Internet
Security Center claiming to be a security patch [or comprehensive Internet
Explorer update]. Is this a virus?
http://securityadmin.info/faq.htm#microsoftemail
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
I received a virus email from a Microsoft email address. Who do I report
this to?
http://securityadmin.info/faq.htm#microsoftemail
I have the RPC Blaster worm "virus," what do I do?
http://www.microsoft.com/security/incident/blast.asp
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
My computer is giving RPC Remote Procedure Call messages.
There is a TFTP message or file on my computer.
My computer keeps locking up, and/or rebooting, or telling me that it will
reboot in 1 minute.
http://www.microsoft.com/security/incident/blast.asp
ALSO NOTE: www.grisoft.com is free antivirus, USE IT.
Where can I download the Blaster worm / RPC DCOM patch?
http://windowsupdate.microsoft.com OR
http://www.microsoft.com/technet/security/current.asp
I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I
want to replace this file.
http://securityadmin.info/faq.htm#jdbgmgr
I forgot my Windows logon password and can't log in. How do I reset it?
http://securityadmin.info/faq.htm#password
I have a problem or a question with a virus or with antivirus.
http://securityadmin.info/faq.htm#virus
NOTE: www.grisoft.com is free antivirus, USE IT.
Why is Outlook Express blocking my attachments as "unsafe"?
http://securityadmin.info/faq.htm#attachments
How do I stop getting pop-up messages? Or adware? Or spyware?
http://securityadmin.info/faq.htm#pop-ups
How do I block people from viewing adult or objectionable content on a
computer?
http://securityadmin.info/faq.htm#contentfilter
How do I block spam emails?
http://securityadmin.info/faq.htm#spam
There is a Content Advisor password blocking me from certain web sites.
http://securityadmin.info/faq.htm#contentadvisor
How do I delete an FTP folder that a hacker put on my computer and I cannot
delete?
http://securityadmin.info/faq.htm#ftpfolder
Have I been hacked? What do I do if I've been hacked?
http://securityadmin.info/faq.htm#hacked
How do I re-secure a computer that has been hacked?
http://securityadmin.info/faq.htm#re-secure
How do I test or improve the security on my computer to avoid being hacked?
http://securityadmin.info/faq.htm#harden
How do I investigate a suspicious IP address that may be trying to hack me?
http://securityadmin.info/faq.htm#trace
How do I report a hacker?
http://securityadmin.info/faq.htm#reporthacker
How do I use a port scanner or vulnerability scanner to test my security?
http://securityadmin.info/faq.htm#portscanner
How do I encrypt my files and/or hard drive?
http://securityadmin.info/faq.htm#encryption
How do I get a firewall? IDS?
http://securityadmin.info/faq.htm#firewall
I want to use the IPSec filtering or IP filtering feature of Windows to
block certain ports and have a problem or question.
http://securityadmin.info/faq.htm#ipsec
I have a problem or question with the XP ICF firewall.
http://securityadmin.info/faq.htm#icf
I have a problem or question with the IIS URLScan tool.
http://securityadmin.info/faq.htm#urlscan
How do I change the banner on my computer or server to hide what software
version I'm using?
http://securityadmin.info/faq.htm#banner
How do I enable Windows Auditing to tell who logged into Windows or who
accessed a file?
http://securityadmin.info/faq.htm#auditing
How do I inspect and disable programs that start up when Windows starts?
http://securityadmin.info/faq.htm#startup
How do I use RUNAS or let someone use RUNAS to run commands as administrator
without having to type the password?
http://securityadmin.info/faq.htm#runas
How do I let non-administrator users run Defrag or change their IP address?
http://securityadmin.info/faq.htm#runas
My question is not mentioned above. How do I get an answer immediately,
with no waiting?
http://securityadmin.info/faq.htm#moreinfo
See also: http://www.google.com/groups?as_ugroup=microsoft.public.*
See also: http://www.google.com/advanced_group_search
See also: http://www.google.com
I want to post a problem or question to the newsgroup. What info do I need
to post in order to get a correct answer quickly?
http://securityadmin.info/faq.htm#netiquette
Note that this is NOT a full list of all the questions answered in the FAQ.
Chances are, your question has probably already been answered. The complete
FAQ is at:
http://securityadmin.info/faq.htm#contents
I hope this is helpful. Feedback, suggestions and criticism regarding the
FAQ are welcome and may be emailed to me.
kind regards,
Karl Levinson, CISSP, MCSE, MVP
email: levinson_k@despammed.com Tag: VPN & mapped drives to remote server Tag: 39073
Security patches deleted by Norton Antivirus
It's not uncommon for me to receive several e-mails each
day from Microsoft Network or Microsoft Technical support
with their latest security patch. Norton Antivirus
removes each attachment. When I go to the Microsoft update
page, it scans my system and says I already have all the
latest critical updates. Either I need to stop Norton
Antivirus from blocking the updates, or stop getting the e-
mails. I don't know which to do or how to do either. Tag: VPN & mapped drives to remote server Tag: 39070
Can you patch install files ?
Is there a way to update install files with patches, like you can do with
service packs, my Win2K and XP automated installs install as SP4 and SP1
respectively but that's not enough, do a virgin install and whammo the thing
is infected before you can do anything.
So the question is, can you apply KB823980 for example to your install
files, I have looked around and cannot see how to do this ? I could probably
do it by making Wininstall packages but don't see why I should have to use a
3rd party product, even SMS is not really an option because it will take
time to be discovered etc etc, you really want it updated when it's
installed.
Cheers and any help greatly appreciated
Phill Tag: VPN & mapped drives to remote server Tag: 39061
brower support
cannot access online banking, need 128 bit version, don't
know how to access and load. pls help. Tag: VPN & mapped drives to remote server Tag: 39055
Virus: w32ircbot.gen detected by Norton - Pls read
Hi!
Norton detected a program: WebPrint.exe within which it found a virus:
W32.IRCBot.Gen.
Norton could not guarantine it, I cannot more, rename or delete it. Each
time Norton runs, it is seen/detected but no action is or can be
(apparently) taken.
Does anyone know anything about this virus? How do I remove it?
Pls advise,
Wayne Tag: VPN & mapped drives to remote server Tag: 39048
Need to install ALL patches?
After using WinXP for 1 yr, I've reformatted my laptop
back to as new. (Too clean up a bit).
Ran the Windows XP security update scan, identified 45
patches that need to be installed.
I've just finished installing Service Patch 1.
Now do I have to install ALL 44 patches???
There are multiple patches that fix the same thing (but
each came out at different dates)
"Fixes a hole in IE that prevents hackers from taking over
your computer".
Can I just pick the latest version of this type of patch? Tag: VPN & mapped drives to remote server Tag: 39015