n-case

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - What's the real scoop on wireless security? Many articles make reference to the vulnerability of going wireless (in my case, a wireless 802.11g-enabled PC to DSL router connection inside the house). But what are the numbers? For example, in a suburban- type housing development, what is the range for someone to hack in? Should I be concerned about my neighbors or someone passing by on the street? Or is it wider, like a few blocks? I plan to install WEP, but I'm interested in what the vulnerability is without it. Thanks, dag Tag: n-case Tag: 50665
  - 2
    - false microsoft security updates does microsoft send automatic secirity updates to your computer? i have an update icon on my toolbar that i cannot delete and it porports to be a microsoft security update - however i did not request this update. could it be a fake? it is not possible to 'cancel' the update when the window is opened. Tag: n-case Tag: 50655
  - 3
    - I am having a lot of problem since I installed MS security patch My operating system is windows 98 and I am having a lot of problems with my computer freezing, not able to open programs and so on since I installed MS security patch. I cannot also find a way to stop MSUPDATE from running automatically. PLEASE PLEASE HELP!!!!!!! Tag: n-case Tag: 50654
  - 4
    - Hijacked Search Engine & Home Page Something has gotten into my system that changes the Registry Settings for IE homepage and all search engines. The page that loads is " http://search-dot.com/net/ " and redircts all searches. I have tried editing the Registry, but it entries are changed again at re-boot. If anyone has encountered this, or knows the file to delete to kill it, let me know. Tag: n-case Tag: 50650
  - 5
    - Event ID 615 Event ID 615 IPSec Services: IPSec Services failed to get the complete list of network interfaces on the machine. This can be a potential security hazard to the machine since some of the network interfaces may not get the protection as desired by the applied IPSec filters. Please run IPSec monitor snap-in to further diagnose the problem. I installed the IPSEC monitor snap-in as suggested, but at a lose as how to activate it to further diagnose the problems. Thanks, Donna J. Tag: n-case Tag: 50649
  - 6
    - Error Code C00D11CD Everytime i try to play a song downloaded from MSN music club, it prompts me that I need to upgrade DRM properties. When I click on OK to do this I get unknown error code above. This is making my membership to the above useless. Please help. Tag: n-case Tag: 50645
  - 7
    - security what security guard company is the best? i have a vault that I don't want some master criminal getting inside of. maybe I've seen too many movies =( Tag: n-case Tag: 50641
  - 8
    - remove spyware Does anyone have advice on which free spyware removal is the best to download??? I don't want one just to scan. Tag: n-case Tag: 50636
  - 9
    - Someone sending e-mails with my address I have been receiving various "failure to deliver" messages stating that messages from my hotmail address have been denied because of content, etc. The problem is that I have not been sending these messages. In fact, I have never seen the addresses to which they are supposedly being sent. I don't want someone sending these in my name and with my address. What should I do? Tag: n-case Tag: 50634
  - 10
    - password for system admin forgotten i just bought a new computer with windows xp on it. i tried to set up two account users and pass protected the system admin account..i now cannot open this account. does any one know how to find out what i used as my password. Tag: n-case Tag: 50631
  - 11
    - broser highjacking my browser has been highjacked from this address mk:@MSITStore:C:\WINDOWS\start.chm::/spplain.html any ideas Tag: n-case Tag: 50628
  - 12
    - Windows XP re-activation This may not be the right newsgroup to post to but it seems the most appropriate. I added a hard disk to my PC today, now Windows XP says it needs to be activated (again). Unfortunately, when I attempt to activate on-line a message appears basically saying that local scripting needs to be enabled first, the message fails to describe how to do this. Any ideas? Thanks. Tag: n-case Tag: 50624
  - 13
    - can not get rid of program I downloaded the Hotbar onto my computer. Big mistake. Now every time I try to take it out of my programs the computer add/remove control panel locks up. I have to restart my computer just to get off my screen. I need it off. What can I do. Tag: n-case Tag: 50608
  - 14
    - help with Zone alarm kicking me off sorry I forgot to put a subject :-) I keep getting kicked off on outlook express- WIN xp & dial-up/I use ZA free version (new to Z.A).Here is the message: the tcp/ip terminated the internet connection 224 overview info:account-MSnews.Microsoft.com server:MSnews.Microsoft.com protocol:NNTB port:119 secure SSL:0 error # 224 800cccof So........then I reconnect and then its fine (sometimes) If I get off line then on line again, it happens over & over again Ive posted before but get no response. help if you can- I thank you Tag: n-case Tag: 50607
  - 15
    - Missing emails after latest security updates I noticed a post from Bill Bradley describing Remote Desktop issues after installing the MS04-011 thru MS04-014 patches. I just received an email stating that after the installtion of the MS04-011 thru MS04-014 patches, the user can no longer see any emails sent to him from the day he installed the updates (including the one I sent with the links to install them). I assume this was caused by the MS04-013 Outlook Express patch. Has anyone seen this occur? Better yet, has Microsoft released any info on issues that occur after the installtion of these patches? Tag: n-case Tag: 50604
  - 16
    - spying? 1.) I am using Windows ME. And, does creating a logon password helps protect my computer? 2.) How do i determine if someone is spying on my computer? is netstat a way? 3.) If netstat is a way. How do i use netstat and to determine whether or not i am being spied? 4.) If i am being spied or easily hacked, how do i protect myself? someone please reply . Tag: n-case Tag: 50594
  - 17
    - how are they getting into my machine? in the event viewer i see this every time i log onto the net: the user User Name successfully established a connection to The Internet (1) using the device IRDA12-1 under explanation or the click to find an answer, it says this: The user %1 successfully established a connection to %2 using the device %3. anyone understand that?? zone alarm, just put in (pro) is blocking 200 attempts a day. when i shut off za, i have norton also. it shows about 10 attempts every session. looking deep into the users, there is NO "user name" showing as an 'account' only the default names are there. what's the darn deal here? please help Tag: n-case Tag: 50589
  - 18
    - Security update is from "Windows update" page I have been trying to install the update patch (823559)for a few weeks now. Every time I get on the Microsoft website to update 98SE, I get an advisory to install this security patch which I do each time. Apparently it is not being installed. Any suggestions? Tag: n-case Tag: 50588
  - 19
    - 135 Hey all, I've been researching and am having difficulty finding out how to unbind the remote procedure call service from port 135. I'm beggining to wonder if it's possible. I messed around with my system configurations a while ago and discovered that rpc 135 was closed from netstat. I don't know what I did, but it worked at the time. Now I can't seem to find a way to do this. Please help me. Thank you. With appreciation, Terry Tag: n-case Tag: 50585
  - 20
    - Effects of Port Blocking on Apps Hi, I am considering blocking certain ports on my workstation that are well known to be used by viruses. For example I could block 2283 which the W32/Dumaru.ad virus listens on. I don't expect to be running any servers on this port However, some programs like Internet Explorer, occasionally use this port to go outbound From what I can tell, Internet Explorer, Outlook, MMC, and other apps seem to just tr ascending ports and if they can't connect on 2283, they'll connect on 2284. Is that true? Also, will blocking 2283 or other non-registered ports (i.e. i am not talking about port 80) for all communications have bad effects on any Windows/Microsoft programs Thanks Tag: n-case Tag: 50581
  - 21
    - Effects of Port-Blocking on Applications Hi, I am considering blocking certain ports on my workstation that are well known to be used by viruses. For example I could block 2283 which the W32/Dumaru.ad virus listens on. I don't expect to be running any servers on this port However, some programs like Internet Explorer, occasionally use this port to go outbound From what I can tell, Internet Explorer, Outlook, MMC, and other apps seem to just tr ascending ports and if they can't connect on 2283, they'll connect on 2284. Is that true? Also, will blocking 2283 or other non-registered ports (i.e. i am not talking about port 80) for all communications have bad effects on any Windows/Microsoft programs Thanks Tag: n-case Tag: 50580
  - 22
    - firewalls I am thinking of installing a firewall such as zonealarm ..should I switch off the in built firewall thats with XP or is XP's firewall suffienient .................. Tag: n-case Tag: 50571
  - 23
    - belgian.com removal Hi, I got some trojan from belgian.com and it pops up ads randomly. I think it also killed my Windows Media Player. I have tried Spybot Search and Destroy and it doesn't remove it. Any advice would help. Thanks in advance. -Manny Tag: n-case Tag: 50570
  - 24
    - microsoft email of patch i keep receiving an email from microsoft advising me this is an april 2004 cumulative patch for security update is this safe to open it has attachments but i'm not 100% its a valid email as i was told microsoft don't email patches. please advise Tag: n-case Tag: 50565
  - 25
    - Help with Possible Virus/Trojan? My Win98se machine has started to act very strange during the last week. I have the Microsoft Office Toolbar on the top of my Desktop which includes shortcuts to MSWord, Notepad, Windows Explorer, etc. When I try to use the MS Word shortcut icon on the Office Toolbar, Sygate Personal Firewall tell me that "Microsoft Word For Windows is trying to connect to crl.verisign.com (64.94.110.12) using remote port 80.....". I instruct Sygate not to allow the connection, then everything slows down and it takes a long time for Word to load. When it finally does load, everything has slowed down and it takes forever to Open files, Save files, etc.. I have never gotten this warning from Sygate before and why would activating Word from a shortcut on the Office Toolbar, cause it to try to connect to the internet? I get the same Sygate message when I try to launch Windows Explorer from the Tool Bar. Sounds like some kind of Virus/Trojan/Hijacker has infected my computer. Any help or ideas will be greatly appreciated. Thank you. Mike H PS: I've run Norton Antivirus, Spybot, Stinger, and CWshredder. All are current. They don't find anything on my computer. Occasionally when I'm on the internet I get the "About:Blank" window on the bottom of my screen. I don't know if that has anything to do with the current problem. Tag: n-case Tag: 50564
- Next
  - 1
    - start page.eb trogan horse can't delete this trogan horse. my computer continues to rebut. help! i start my anti-virus software, then the computer start to rebut. Tag: n-case Tag: 50560
  - 2
    - thanks to Bbonner Thanks Bill. You have alot of great stuff you share. Tag: n-case Tag: 50552
  - 3
    - securtity patch I am using Windows 98SE. I continuously receive a Windows update notice for Security update #823559. I have downloaded and installed this update many times but I continue to receive this critical update notice. Why? Tag: n-case Tag: 50551
  - 4
    - Not enough storage is available to complete this operation After installing SP2 for XP on both client & servce machine, callback registration with server failing with error "Not enough storage is available to complete this operation". Before installation of SP2 for XP, this was working properly. Can someone help me? Tag: n-case Tag: 50550
  - 5
    - MSN Been Hacked My hotmail account has been hacked and Microsoft's website is about as helpful as your average bureaucratic mess - ie: none at all. If someone can direct me to the correct place to lodge for my account to be returned to me I'd be very grateful. I cant remember the psuedonym I used to signup with so the automated response sheet is useless to me. My password and Secret Question have both been changed. Tag: n-case Tag: 50549
  - 6
    - redirected to http://searchpage.cc/ everytime i use a program such as vzones or any amazon as soon as i try to log in or listen to a music sample i get redirected to the page http://searchpage.cc/ for no reason. Not only this but also toolbars have appeared on my browser which i have not loaded. What can i do to fix the problem? Tag: n-case Tag: 50548
  - 7
    - Can visit to website endanger security? I received a spoof email asking me to update my CitiBank details. It was obviously created by an oriental English speaker, but I was curious because the link therein led to an https: site (ie, secured site). So I had a look, and was redirected to an insecure site. I looked there, thinking they would have a form for us suckers to fill in giving away passwords etc, but the page was totally blank, and even though my browser said "Done" I still had my hourglass (but this often happens anyway). Has my curiosity made me vulnerable? I don't have a firewall because when I installed ZoneAlarm I didn't understand it. (I know... but all it seemed to do was list IP numbers and I just carried on as normal. I don't normally visit dodgy sites. Obviously I won't do it again, and yes, I do know what curiosity did to the cat. Patricia Tag: n-case Tag: 50547
  - 8
    - Problems after applying MS04-011 to 014 After the installation and reboot (using WindowsUpdate or manual methods) RemoteDesktop can no longer connect to the patched computers (RemoteDesktop computer was patched previously)--all you get is a black window. All are servers, all are Win2Kw/SP4 and had all previous patches applied. DameWare works. Anything you guys at Microsoft want to tell us about these patches?? Tag: n-case Tag: 50546
  - 9
    - Spybot Search and Destroy 1.2---->Replacement for the program ? I have run Spybot since it first came out and love the way the program works. It seems to work well with Zone Alarm Pro and Ad-Aware Plus picking up the things the others miss. However...Not sure if the Spybot people are on a long vacation or too busy with Beta 1.3, but there have been no updates for almost 6 weeks (Since 4 March) and in the past, they usually have a new update about every week. Also they are not responding to email support, before they always did within a day. Does anyone know what is going on with them ? I hope Mr. Kolla did not "retire" as its a great little program, but no updates in this long a period is not a good sign to me. Anyone have an alternate to Spybot that I can use until (if..) Spybot starts updating again ? I have seen a few names tossed around in here, but never really paid attention to the comments as Spybot had been working so well for me. Looking for something that works well on Windows XP Pro (I am also using the SP2 RC1 release) Thanks ! -- Tedd Riggs PDA Square Content Developer www.pdasquare.com Redmond, WA Tag: n-case Tag: 50543
  - 10
    - activex control and internet explorer i am doing a project which contains an activex controls the problem faced is when am i trying to veiw my site on some other m/c within intranet, a messagebox for downloading the activex control is shown with message that the certificate is not in the trusted root and it ask for installation of the certificate before installing the control. how can i auto install a certificate in IE while downloading an activex control without the message for installation for the certificate. the control is signed and certified on the server and there it shows a message of a valid certificate. Tag: n-case Tag: 50538
  - 11
    - SUS Question Hello Everyone, I have searched the KB and looked for an SUS newsgroup, but there appears to be nothing available. I have a problem and I guess that this is the best place to request assistance. Here it goes: I installed SUS on a Windows Small Business Server 2003 machine and redirected SUS to work off of the "companyweb" web site. When I attempt to Synchronize the server and approve the updates, the server appears to synchronize correctly, but when I go to approve the updates, I receive this error message: "No Packages ar available to be approved. This may be a because a synchronization has never been performed of because your Software Update Services Server is not functioning correctly." The approval log appears to work fine, but the approve updates page does not... Any assistance will be greatly appreciated. Stewart Tag: n-case Tag: 50535
  - 12
    - 3rd Party Server monitoring! G/day forum, I've been asked to recommend a software that sits on a file server that montors usage activity, users, access, etc. I've enabled a high level of user monitoring through GPO but its difficult to analyse the high volume of logs generated. Is their a 3rd party application that i can use to comprehend these logs? Seperate 3rd party logging? Host intrusion protection? Your thoughts are greatly appreciated. Regards, Steve. Tag: n-case Tag: 50533
  - 13
    - MSN CRITICAL UPDATES I have a critical update, # 835732, that when downloaded, uses all of my PC's resources and I am unable to use my PC. I then have to delete this update in order to use my PC. Has anyone had this problem? Tag: n-case Tag: 50532
  - 14
    - wipe old hard drive I am selling my old pc and want to know if there is a way to encrypt or fully erase all the old data on it. I know that reformatting it won't be safe enough. Any suggestions? Tag: n-case Tag: 50529
  - 15
    - security options for embedded objects in MSWord I have recently tried desperately to set password protection on a word doc object embedded within another word document (what I'm really wanting is to keep part of a word document password protected, this is the only way I could think of doing it) but without success. I have tried the normal way, by opening the embedded doc and using Tools|Options|Security tab to set a password but as soon as I exit this dialog box and close the embedded doc the password protection settings appear to get wiped. Does anyone know if what I'm trying to do is possible, or is this a bug? Or do you have any suggestions on a better way to do what I'm attempting as described in the brackets above? Thanks in advance C Tag: n-case Tag: 50528
  - 16
    - spying on me? someone get me educated! 1.) I am using Windows ME. And, does creating a logon password helps protect my computer? 2.) How do i determine if someone is spying on my computer? is netstat a way? 3.) If netstat is a way. How do i use netstat and to determine whether or not i am being spied? 4.) If i am being spied or easily hacked, how do i protect myself? someone please reply Tag: n-case Tag: 50527
  - 17
    - Windows Failed Updates I have 2 update failures of security updates, and i attempted to reupdate a second time but the scan no longer recognizes those updates as being updates that I need. I checked the log and I am sure that those specific updates have not been installed. 2 updates that are more recent have been installed but I am not sure if these include the other updates. Does anyone know? Tag: n-case Tag: 50523
  - 18
    - Zone Labs Security Scanner I just got an e-mail from Zone Labs (makers of the firewall ZoneAlarm). In it, they are advertising the new Zone Labs Security Scanner, which is "a Web-based scanner that detects tracking cookies. It utilizes server based content and updates to assist users in blocking the latest threats." Anyone using this yet, and if so, what do you think? I'm thinking it's useless for me since I'm frequently deleting my cookies anyway, but I like ZoneAlarm firewall so far so I'm thinking I should give this scanner a try. Any thoughts or opinions? Tag: n-case Tag: 50520
  - 19
    - EZ Armor LE Just received this CD from Microsoft. To install it says I must uninstall Norton Anti Virus. Is EZ Armor better than Norton? Very new at computers. Tag: n-case Tag: 50515
  - 20
    - new start up program???? I am now getting a window that pops up asking if I want the program "Watson Subscriber for SENS Network Notifications" in my start up menu. Can someone explain what this is? It apparently comes from microsoft. Thank you. David Tag: n-case Tag: 50513
  - 21
    - Trojan Downloader Virus I have been having problems with my computer. It showed a lot of color and then it showed what looked like a lot of worms. Then I was notified that I have a Trojan Downloader:Win32/Agent. H Virus. Can anyone tell me what to do about this. Pelase help. hummingbird@compuwise.net Tag: n-case Tag: 50510
  - 22
    - locked out of computer My password isn't working and I can't get into my computer. Any one can help?????????? PLEASE!!!!!!!!!!!!!!!!!!! Tag: n-case Tag: 50502
  - 23
    - Policy change, hacker attack ? Event Type: Success Audit Event Source: Security Event Category: Policy Change Event ID: 612 Date: 4/15/2004 Time: 5:18:52 PM User: NT AUTHORITY\SYSTEM Computer: CP250405-A Description: Audit Policy Change: New Policy: Success Failure + + Logon/Logoff + + Object Access + + Privilege Use + + Account Management + + Policy Change + + System - - Detailed Tracking + + Directory Service Access + + Account Logon Changed By: User Name: CP250405-A$ Domain Name: MSHOME Logon ID: (0x0,0x3E7) For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Looks like a hacker attack that wants to prevent detection ? What do you think ? Tag: n-case Tag: 50501
  - 24
    - Internet browsing problem Whenever I start browsing the internet and I enter an internet address my search gets hijacked and this appears before my entered address:- WWW.NKVD.US/1251/Yahoo.com(example) I've tried everything and it won't stop. Please help Regards Tag: n-case Tag: 50492
  - 25
    - http://www.windows-patch.info/ is this a bogus site? i keep having this message popup that i cant stop this is one of the sites it leads to... should i download the patch? Tag: n-case Tag: 50491

I keep getting messages that say "n-case" needs to be
updated. I just delete it because I don't know if this
is a scam nor not. Does anybody know what this is?

Re: n-case by Trafton

Trafton
Sun Apr 18 00:07:05 CDT 2004

Hi,

nCase is a spyware program. Try downloading Spybot Search and Destroy here:

http://www.safer-networking.org/

Note that Spybot is a third-party program, so Microsoft does not provide
support for it. However, in my experience, it is quite excellent.

Sincerely,
Benjamin Johnstone-Anderson
Microsoft MVP - Windows Security
Remove "SPAM" from email address to reply!
Security Manifest: www.msmvps.com/trafton/

"s" <anonymous@discussions.microsoft.com> wrote in message
news:072901c42502$06b4c8d0$a501280a@phx.gbl...
>I keep getting messages that say "n-case" needs to be
> updated. I just delete it because I don't know if this
> is a scam nor not. Does anybody know what this is?

Re: n-case by siljaline

siljaline
Sun Apr 18 04:25:53 CDT 2004

"s" <anonymous@discussions.microsoft.com> wrote:
> I keep getting messages that say "n-case" needs to be
> updated. I just delete it because I don't know if this
> is a scam nor not. Does anybody know what this is?

http://www.kephyr.com/spywarescanner/library/ncase/index.phtml
http://www.doxdesk.com/parasite/nCase.html
http://sarc.com/avcenter/venc/data/adware.ncase.html

HTH
~Silj

--
siljaline

MS MVP - Windows (IE/OE)
________________________
Anti-Parasite Definition Updates
http://forum.aumha.org/viewforum.php?f=31

(Reply to group, as return address
is invalid - that we may all benefit)