Blaster worm +xp
I have xp home edition. When I try to install the patch
this message pops up : "Setup could not verify the
integrity of the file update.inf. Make sure the
Cryptographic service is running on this computer.
Please help me,
Steven. Tag: norton antivirus program Tag: 28498
How can I determine the signer of a CAB/DLL/EXE file?
Hi there,
I'm not sure whether this is the right group to post this query to, but if
not, any pointers to the relevant resources would be helpful :)
What I'm attempting to do is write an installer that will i) download a
CAB/DLL from the internet, ii) verify its digital signature, and iii) check
the name of the signer. Only if our company is the signer will the CAB/DLL
be installed on the user's machine.
I have managed i) with WinInet*() and ii) with WinVerifyTrust(), but I am at
a loss as to how to achieve iii). Can anyone suggest a method that would
allow me to do this? It must be possible since IE displays the name of the
signer when you download an ActiveX from the internet, but I'm stuggling to
find an API function to extract this information from a PE/DLL/CAB file.
Thanks in advance for your help,
Mark. Tag: norton antivirus program Tag: 28475
Worm in Windows 98
I have windows 98 and I have the same glitches, restarts,
and all of the exact same symptoms as the Blaster worm. I
have downloaded the symantec tool and stinger by network
solutions and it still does not detect the bug. Everytime
I try and download updated virus software the computer
restarts. I have tried to report to Microsoft but keep
hitting walls or pages that cost big money that I do not
have to try and report this. What do I do? Tag: norton antivirus program Tag: 28474
Worm Patch
Hello. I have XP home on my PC. I have routinely updated
my software via windows update. Do I still need to go
elsewhere to download a seperate patch, or will windows
update take care of it?
Also, I've tried enabling the personal firewall on XP, but
I cant find where to do so. My dialup connection came
from a CD from my ISP. Would that prevent me from
enabling it on that connection?
I followed the directions on MS website but still gets
stuck. Tag: norton antivirus program Tag: 28473
worm
what do I need to do to protect against the worm? I do not
know a lot about the computer so you will need to tell me
in easy terms. My computer is hp pavilion 515x Tag: norton antivirus program Tag: 28472
worm
Hello i would really be grateful if someone cud tell me
how to use the tool when i try toopen it it says 32 wont
open it i think its me lol please someone tell me wot to
do love and kisses marilyn xxx Tag: norton antivirus program Tag: 28463
unexpected user account
a new user account has suddenly appeared on my pc.
called: ASP.NET Machine A... I have no idea what it is and
why it has suddenly appeared.
any help on this would be much appreciated Tag: norton antivirus program Tag: 28459
What is application/ms-tnef attachment?
I recently sent a message to somebody which had an "application/ms-tnef"
attached to it. My computer is doing a few strange things recently (eg. my
wife got a Reboot? prompt a couple of days ago).
I've scanned my system with two up-to-date scanners (PC-CILLIN housecall,
NOD32) but not found anything.
There seem to be a lot of nasties around at present. Could this be one? Is
this a common type of attachment for nasties?
Thanks,
Robert. Tag: norton antivirus program Tag: 28456
password manager - remember id @ password
when signing on to a secure site the logon screen appers.
on entering the id and password and press enter - a pop up
screen appears asking if you want password manager to
remember the id and password. if you select yes. it
remembers when you next time go in. but it does not again
ask if you want id and password be remembered by password
manager.
i am running windows me. how do i remove this remember
id and password from the sign on.
i have tried entering incorrect passwords and ids. it
comes with error but represents the remebered id and
password.
please help = how to remove this.
santhi Tag: norton antivirus program Tag: 28454
Blaster patch
Hello! I have WIndows XP/home on my PC and I update my
Norton anti-virus software weekly. I've run a scan on my
computer and am not infected with the Blaster worm. Do I
still need to install the Microsoft patch if I continue
to update my anti-virus software regularly? I'm reluctant
to do so if I don't have to, since I'm afraid the patch
will interfere with other programs on my system. And if I
still do need to install the patch, can you tell me which
one it is? There are quite a few that the Microsoft site
lists for me, and I can't tell which one is for Blaster.
Thanks. MG Tag: norton antivirus program Tag: 28452
how to put a password to a sharefolder
As mention in the subject does anyone know how to put a
password to a share folder under windows xp pro? Tag: norton antivirus program Tag: 28447
question about IP
I'd like to know if there is any possibility that I could
change my PC's IP address or use a proxy server so I could
access a webpage that verifies my datas and I'd be sure
that it can't get my real ones?I'd really apreciate if you
could help me here.I'm using Windows 98 SE,Internet
Explorer 5.0 and I use a dial-up connection to access the
internet.(if there are any mistakes in my letter,please
understand them,I'm a romanian) Tag: norton antivirus program Tag: 28423
All the symptoms no worm yet
I have all of the symptoms of this worm on my xp machine
the computer restarts, the generic host process for Win32
crashes. I was able to change the rpc settings so the
computer would stop restarting that worked, i also went
to the registry key through the directions off
Microsoft.com but the entry was not there. there is also
not a program (blaster etc)running in the task manager I
have downloaded 3 different scan tools from Trend
micro,symantec,and computer associats and all 3 scans
came up with no worm. has anyone had this same problem or
is this a feature of one of the new strains that i have
been hearing about. please reply if you have any
info/ideas that might help
thanks Tag: norton antivirus program Tag: 28421
downloading ICF
Followed all the directions to download ICF to protect
against Blaster virus. Got to step where after you select
the connection if I click on Change settings of the
connection nothing happens. If I right-clickin Network
Connections folder and go to properties again nothing
happens. Have tried several times following all
instructions on Microsoft web page. What do I do now?
Thanks for any help. Tag: norton antivirus program Tag: 28375
Security Event Log Entry
We have NT4 SP6. I have been getting the Event ID: 560
entry in the Security Event Log with the following info:
Object Server: Security Account Manager
Object Type: SAM_USER
Object Name: DOMAINS\Account\Users\000003FD
New Handle ID: 1318680
Operation ID: {0,4304703}
Process ID: 2162013760
Primary User Name: SYSTEM
Primary Domain: NT AUTHORITY
Primary Logon ID: (0x0,0x3E7)
Client User Name:
Client Domain:
Client Logon ID: (0x0,0x4411)
Accesses READ_CONTROL
ReadGeneralInformation
ReadLogon
ReadAccount
ListGroups
Privileges -
I haven't found any info as to what this means. Usually I
get usernames from my domain and my domain name but this
info does not make sense. The user field in the log reads
ANONYMOUS even though the client user name is blank in the
info above. Does anyone have any idea as to what this
entry means? Thanks in advance. Tag: norton antivirus program Tag: 28374
PC restarting problems Help!
Hi
I have a PC that doesn't want to boot properly.
It had been infected with a virus but was cleaned.
When nothing else fixed the problem, I tried a reinstall
It doesn't want to boot.
I then did a repartition and format of the drive, but still no
luck. The OS I'm trying with is W2K
It starts up goes through the memory check and find the disks
and such... sometime after that it decides to restart itself.
any ideas?
Please help!
Thanks in advance
- J Tag: norton antivirus program Tag: 28365
The Blaster Microsoft patch available from # 823559 necessary for Microsoft 98
Dear Sir,
I notice from reading the description on # 823559 ("
Blaster Worm: Critical Security Patch") that the Blaster
or LovSan patch available from Microsoft is needed if you
have the softward for either Window NT 4.0., Windows 2000,
Windows XP and Windows Server 2003. Is it needed if you
have Windows 98, 2nd Edition as I have?
Donald B. Gilchrist Tag: norton antivirus program Tag: 28359
Variant of MSBlast - Alert for Win9x and other systems
According to this bit of info from the Symantec site, there is a variant of
the MSBlast Worm which potentially could target the following OS's: W95 /
W98 / ME / NT / Win2000 and XP.
W32.Randex.E
Discovered 12/Aug/2003; Norton Anti-Virus updated 13/Aug/2003 @ 6:23 pm.
Symantec Security Response
http://www.symantec.com/avcenter/venc/data/w32.randex.e.html
For those you have accessed this advisory with the MS web page, copy and
paste this URL into your browser address window.
Recommendations are to get the latest AV updates and Definitions. Check for
any updates for your Operating System at the Windows Update Page. Block any
of the affected ports with a firewall.
Thanks to ~PA Bear for bringing this latest bit of info to my attention.
LuckyStrike
LS@smokedamagedfurniture.youcandriveitawaytoday.com
----------------------------------------------------------------------------
---------- Tag: norton antivirus program Tag: 28355
MS03-026 (823980) Scanning Tool Available
The following tool has just been released:
Microsoft has released a KB 823980 Scanning Tool (KB823980scan.exe) that can
be used to scan networks to identify host computers that do not have the
823980 security patch (MS03-026) installed. For additional information about
the 823980 security patch (MS03-026), click the following article number to
view the article in the Microsoft Knowledge
Base:
823980 MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/default.aspx?scid=kb;en-us;823980
For additional information about a new worm virus that tries to exploit
the DCOM RPC vulnerability that is fixed by the 823980 security patch
(MS03-026), click the following article number to view the article in
the Microsoft Knowledge Base:
826955 Virus Alert About the W32.Blaster.Worm Worm
http://support.microsoft.com/default.aspx?scid=KB;EN-US;826955
Download location:
http://microsoft.com/downloads/details.aspx?FamilyId=C8F04C6C-B71B-4992-91F1-AAA785E709DA&displaylang=en
The MS03-026 bulletin is being updated now as well.
--
Regards,
Jerry Bryant - MCSE, MCDBA
Microsoft IT Communities
Get Secure! www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights. Tag: norton antivirus program Tag: 28352
Weird actions of blaster?
Or maybe this is normal...I have and have always had my
norton up to date for live up date. Then my comptuer
pops up with the 'red alert' box from norton that my
computer is infected with the blaster worm. I cannot
quarantine or anything, only can hit ok. This will always
pop up twice in a row. Then I do a system scan in all
files for a virus, and it won't show up, I've downloaded
the fixblast tool from norton to fix it and it says my
computer is not infected. After connecting to the
interent my machine gives me the 1 min countdown to
restart. I have since turned my RPC to not restart my
computer but to restart the service if it's interuppted
so I could get the patch put on. Also in my processes the
msblast.exe doesn't show up and my registry doesn't have
the added key to run the ms blast. My question is how
the heck do I get rid of it? Am I going to have to
completely reinstall my XP?
Thanks for any help!
Jeanne Tag: norton antivirus program Tag: 28304
Weird actions of blaster?
Or maybe this is normal...I have and have always had my
norton up to date for live up date. Then my comptuer
pops up with the 'red alert' box from norton that my
computer is infected with the blaster worm. I cannot
quarantine or anything, only can hit ok. This will always
pop up twice in a row. Then I do a system scan in all
files for a virus, and it won't show up, I've downloaded
the fixblast tool from norton to fix it and it says my
computer is not infected. After connecting to the
interent my machine gives me the 1 min countdown to
restart. I have since turned my RPC to not restart my
computer but to restart the service if it's interuppted
so I could get the patch put on. Also in my processes the
msblast.exe doesn't show up and my registry doesn't have
the added key to run the ms blast. My question is how
the heck do I get rid of it? Am I going to have to
completely reinstall my XP?
Thanks for any help!
Jeanne Tag: norton antivirus program Tag: 28303
Beware the popup ad imitating the blaster worm
FYI
Last night while browsing web sites I hit a popup ad that created a full
screen white window with a dialog that looks very much like the crash dialog
for RPCSS complete with a countdown timer. The only difference is there is
some small ad text in the bottom of the dialog.
It's a fake but it gave me a start.
--
Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights. Tag: norton antivirus program Tag: 28294
XP Blast gone but services still cant run
Ok everyone check this out...I had the blast.exe removed
from my XP home eddition. Attemted to disable the system
restore before I reboot. failed. The blast worm appears
to be gone in the registry current version_run_ is empty.
Upon install of the update I received the "crypo service
not running" error, unable to verify .inf file. So when I
attempt to start that service it errors saying the
dependencies are not running (RPC is that dependency).
Cant even view properties of any services.
Anyone heard of this? Tag: norton antivirus program Tag: 28287
Net Admins and Blaster
What I find hard to believe is the number of network
admins that didn't already have these ports blocked on
their internet routers. I read where Maryland's Motor
Vehicle Administration shut all its offices at noon.
Whoever is in charge of security there should be fired.
Remember to set those routers up to deny all and then
only open up what you have to. Tag: norton antivirus program Tag: 28278
blaster worm
I wanted to download patch, but was told there were no
critical updates for my system. Is there something else
I can do? Tag: norton antivirus program Tag: 28265
Certificate Server Installation Failure - Solution
During the installation of Enterprise CA on Windows 2003
stops with error:
An error was detected while configuring Certificate
Services. The Certificate Services Setup Wizard will need
to be rerun to complete the configuration. Certificate
Services setup failed with the following error: Windows
cannot find the network path. Verify that the network path
is correct and the destination computer is not busy or
turned off. If Windows still cannot find the network path,
contact your network administrator. 0x80070033 (WIN32: 51)
Wanted to post the solution I worked through to assist
others in the future. After troubleshooting this for
awhile I thought that this was being caused by a failed
attempt to reach an AD Server even though the error was
somewhat generic. All DNS possibilities were looked at and
nothing was incorrect, although this was a multihomed
server running ISA. I temporarily disabled the Internet
NIC and the installation was successful,however I am
investigating Event ID 103 Warning which appears to be the
only event that this change produced.
Hope this will help someone in the future. Tag: norton antivirus program Tag: 28263
Firewall
I already have the MCAffee Firewall installed - do I need
to install more security and will it interfere with the
MCAfee firewall? Tag: norton antivirus program Tag: 28262
Outlook Express 6 Team
Hi,
Has anyone out there heard of this " Team" . I have
received a number of emails ( less than 5 ) with the above
heading. They usually come with an attachment.
The attachment I received today was called
Alex-judo1.eml.scr. (72.3KB)
I understand that generally the .scr is a screen saver ,
but why would someone from Microsoft be sending me this?
I didn't open it and have deleted the message.
Any ideas?
Thanks Tag: norton antivirus program Tag: 28260
Any recent changes in IE Security w/ .NET components? e.g. IEExec?
Does anyone know of any recent changes/patches/updates affecting how
Internet Explorer handles embedded and "no touch deployment" Windows Forms
.NET Controls?
I was working on a hosted .NET control a while back (not an ASP.NET control,
but a Windows Forms .NET control that is embedded with the <object> tag. It
was working very well then. I shelved it and recently came back to it and
now ti doesn't show in the page. I also created a container EXE that can run
from the same web site that was also working just fine, and now it throws a
Security exception, with no useful information as to why. The control and
the exe do nothing that required any additional permissions - no file
access, etc.
Im trying to figure what has changed - could it be that IEExec has been
updated to be more "secure"? (in other words, cripple .NET in the browser so
it takes the same downward spiral as java applets). It could also be that
something was added to the code, but I just tried a new sample with a
control containing only a label and no other code, and that failed to.
If something has indeed changed, which it appears it has, where can I find
more information on it? This needs to be deployed soon as part of an
Intranet application, and additional client install needs to be avoided.
Sorry for the wide cross-post, but this topic really does cross over several
newsgroup boundaries.
________________________________________________________
Luther Miller . MCSD (.NET), Sr Software Architect / Engineer
Softagon Corporation . www.softagon.com . San Francisco Tag: norton antivirus program Tag: 28259
Wireless Security
I need clairification on a wireless issue.
If 2 seperate LAN systen are running. The first LAN is NOT
connected to the Internet for security reasons. The second
LAN is using the Wireless Microsoft MN-500 Wireless router
and does have an Internet connection through High Speed
cable. Can the signal emmisions emmitted from the
unshielded CAT5 wireing on LAN(1) be broadcasting inside
of the wireless bubble. And if a hacker (with a wireless
reciever NIC) gets in into the wireless LAN (which is no
doubt possible) could they then grab the packets floating
around from LAN system (1).
This is what I heard and I'm wondering if this is actually
true, because as I understand it, if the hacker connected
to the Wireless LAN , which has it's own DNS, DHCP,
Gateway and Subnet can they sniff packets that might be
floating around that are from an entirely different DNS,
DHCP, Gateway and Subnet? Or if they have a wireless
reciever NIC can they just scan within the bubble for any
packets of information without needing to make a
connection to either Network?
I hope I explained it properly, but if you would like to
help with this situation and need further details, just
ask.
Thanks Tag: norton antivirus program Tag: 28256
encryption - combos vs keys question
I want to encrypt some documents on my computer, but I don't want to use
"combo" encryption, but rather burn a security key to a cd-r so if the CD is
in the drive, I can open up the documents without so much as a popup box,
but without the cd in the drive, I cannot gain access to the documents. Is
there a program out there that can effectively do this? Tag: norton antivirus program Tag: 28254
Worm
I use Windows 98 4.10.1998
Do I need a patch for the worm?
Also - does my system have anti-virus software imbedded? Tag: norton antivirus program Tag: 28250
Reboot-reboot-reboot
My computer reboots so quickly that a had to remove the
msblast.exe file while running in safe mode. I also
deleted that line in the registry. I was never able
to "end process" in the Task manager while in normal mode
because my computer would not stay on long enough.
My computer still reboots. How can I get it to stop. Tag: norton antivirus program Tag: 28249
microsoft windows server 2003
I am concerned about the "worm". How do I know whether I
have microsoft windows server 2003? I have microsoft '98
and I must have a server. Tag: norton antivirus program Tag: 28246
Any blaster worm security patch for windows98..??
My all users are Windows 98 based. I saw the blaster worm
security patch for windows XP/2000/NT. But there is
nothing written Windows 98 vunerability regarding this
worm or about patch for it.
I tried to find online support, but there is no specific
email id for writing my query to Microsoft Tech. Support
regarding this issue.
If somebody knows the answer, then Help me out please..... Tag: norton antivirus program Tag: 28239
Using Group Name in an Internationalized application.
Hi,
I am seeking the opinion of people that have implemented the use of
Group policies in internationalized applications.
In our application we have some core components that have to validate
the credentials of users, for instance we check if a user is a member of the
"Acme Administrators" group or "Acme Users" user. The problem comes from the
fact that in our french version the groups will be named "Acme
Administrateurs" and "Acme Usagers", so we cannot search by group name. One
obvious solution is to store in the registry the SID's of the variaous
groups we have created and lookup by SID's instead of names.
Are there any other way?
Thank you!
Martin Paré Tag: norton antivirus program Tag: 28237
is that possible ?
I have computers in a network behind NAT, do they vulneable to blaster
worm, coz they are not infecetd yet? Tag: norton antivirus program Tag: 28236
anti-MSblast program run, still evidence of worm in system?
Sorry if this has been covered and I missed it. We ran the
anti-worm program-- which said the worm was found and
eliminated. We downloaded/installed the patch. Why when we
search files using the search function in XP does it
appear that there's a file related to the MSblast worm:
msblast.exe-3646SF... C\WINNT\Prefetch with a date and
time? This has occured on both of our infected computers.
When we search the directory through dos as outlined in
one of the instructions sheets on this website, however,
it says the virus/worm isn't in the system.
Any idea what all this means, and how to straighten it
out? Thanks. Tag: norton antivirus program Tag: 28233
Method of object failed
All of my users are running Windows XP Professional. The
users who access our license system which uses MTS 1.0 and
SQL Server 7.0 are experiencing a problem when trying to
use the license system. It seems that when a call is made
to the SQL database it brings back the following error:
The Error_Num: 2147221503
Error_Sources:licensedata2.clsScreenData()
Errors Are: method of '~' of object failed
method of '~' of object failed.
I noticed other postings here with this same error and SQL
related. Tag: norton antivirus program Tag: 28212
w32.ircbot virus
this virus will not allow excell to run. how do i clean it
up. c\winnt\system32\system.exe has been curupted Tag: norton antivirus program Tag: 28210
about windows xp
now i have a message at any time i enter the internet and
this message tells me that the conmputer will close after
1 minute and i think this is a virous that attack any NT
windows . i want to download the (blaster worm :windows xp
security patch ) and i can't download it from windows 98se
how can i download this patch using windows 98se? Tag: norton antivirus program Tag: 28207
NEW SECURITY DOWNLOAD
I am a business owner and I have recently followed MS
urgent suggestion to download new anti=hacker security
program..at the same time, I downloaded the current 2000
Pro updates.
PROBLEM>>>>>>
Now I cannot receive the attachments from my INsurance
Companies that are ESSENTIAL to operate my
business...message is "OE has removed potentially harmful
attachment" HOW CAN I GET MY E-MAIL ATTACHMENTS BACK???
SOMEONE, please help. I can't figure out how to
communicate directly with MS. Tag: norton antivirus program Tag: 28205