phishing

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - what are firewalls? Can someone explain to me what firewalls are and what they do? Tag: phishing Tag: 82705
  - 2
    - Security How does a firewall work? Tag: phishing Tag: 82699
  - 3
    - Critical Updates - "Try Microsoft Update" The other day we signed into our Critical Update page to see if there were any critical updates for our WinXPsp2. We noticed at the top of the screen the following printed announcement: "Try Microsoft Update." We understand this is a new program for Critical Updates and also included critical updates for MS Office, etc. The previous Critical Update 'Express' button was still there and I clicked on that. #1- We are told that this NEW "Try Microsoft Update" will replace the the Critical Update that we are now using. Is that true? #2- Can we continue to use the 'previous' critical update "Express" button? #3- If we do click on the "Try Microsoft Update" button, will we have to download ActiveX files, etc., so it will work? #4- If we only want to download the Critical Updates for WinXPsp2, is that possible? Or would we have to also download other updates for Office, etc.? (We never use Office!) #5- If we do switch to the new "Try Microsoft Update" and we find that we do not like it, can we switch back to the previuos Critical Update page that we have been using (with the Express and Custom buttons)?...... Please advise because we are quite confused as what to do. We don't want to click on the "Try Microsoft Update" and find out we have to download alot of files that we will never use and also, once we click on it, we can never switch back to the old Critical Update page. (We read the Try Microsoft Update information page but it did not enlighten us too much. We did post in another forum, but think that one was incorrect and that this forum is the right one.) Thank you. Tag: phishing Tag: 82696
  - 4
    - Monitoring msn messenger presence For about 4 months now someone has been trying to guess the answers to my secret questions for my Hotmail email addresses. I am presuming that this is a guy I was seeing very briefly as this has never happened to me before I met him and I have also started getting nuisance calls to both my mobile and landline phone he's the only person who knows of both these numbers, I called my mobile operator and they told me to report these calls to the police and that they'll probably want to ask me a few questions and provide me with a crime reference number so I can have my phone number changed free of charge. When I log onto msn messenger the would-be hacker stops trying to guess the answers to my secret questions, two of my email addresses have had people whom I don't know, add themselves as contacts and I can't remove them as they obviously need to remove me first. I have tried sending these contacts emails and im's to ask them if they can remove me but the emails never get to their inbox as I always receive a failure to deliver email from hotmail. With one of my other email addresses no-one has added themselves as a contact but every time I log onto messenger using this moniker they stop trying to guess the answer to my secret question which is what I don't understand as I also always appear offline when I do log onto messenger so they can't track my online presence through other methods, or so I had thought but it seems as if they can somehow. I have sent hotmail an email and explained to them the problem and asked them to close all email accounts that this person is trying to hack but they said they couldn't and that I shouldn't access my accounts for a number of days then the accounts will be closed automatically. I am wondering if anyone knows of any type of software that this person could be using to monitor my presence on msn messenger. Thanks in advance. Tag: phishing Tag: 82688
  - 5
    - Sever 2000 to Server 2003 access denied I have a network share on a 2003 server that has permissions set for general access (full rights to everyone). I get an "access denied" message when accessing this share from a Server 2000 machine even though I am signed on as a Domain Controller and both machines are in the same domain. I can not even see the share using "net view" from the command line. Once I explicitly attach to the shage using "net use" I get the general access I want, but once this attachment is removed, it is back to "access denied". I have a service that needs to access this share and I don't want to have to explicitly attach to the share every time I need to reboot one of the servers. Is there a Security Setting in 2003 I am missing? Is there a programatic way to attach to the server that mimics "net use"? Tag: phishing Tag: 82685
  - 6
    - IRS/Websense Update Phishing Alerts It's tax time and the internet cyberscum are out there stealing as many identities as they can: http://fraudwar.blogspot.com/2006/03/irs-and-websense-update-phishing.html Tag: phishing Tag: 82682
  - 7
    - Get rid of hijackers How can I get rid of and prevent hijackers in my search engine pages? Any software to use? Currently I run Microsoft Beta, Spybots, Ewido, and Adaware (all at the suggestion of tech support when I had a virus problem). My computer has really slowed down and the search engine won't go to the selected pages. Thanks for any help. Tag: phishing Tag: 82678
  - 8
    - GPO Enable Volume Icon in Systray Is their a GPO entry that changes the setting show/hide volume icon in the systray? I can't find the key. Tag: phishing Tag: 82677
  - 9
    - Willing to PayPal a tech for help ! Here is the situation. I have 2 laptops. The one I am on is working. My previous one is screwed. I am willing to PayPal any tech who knows how to fix this problem. The Operating system (Windows XP) can not be recognized. The hard drive inside the laptop (which I can not even begin to figure out how to take out) is the only contents I wish to retrieve, rescue, save. I can get to the point of partitioning the computer through the "wwbmu" prompt but everything is written in German, which I could wing through it all but truthfully I don't know anything about partitioning without destroying the contents on my hard drive. I also have a Windows 98 bootup CD (in English) which is more or less asking me create a partition but if I do that will that destroy my hard drive contents or what? The options are : 1. Create partition 2. Delete partition 3. Select bootable partition Can I save my hard drive contents by repartitioning or what? The only Windows XP disc set that I have came with the laptop and it will completely restore my laptop to it's original condition wiping out all the contents on the hard drive. Anyway, I am willing to PayPal anyone who can rescue my hard drive any fee needed. Just please be some tech who knows what he's doing (lol). I have a cell phone where talking is free after 7pm Central so I can call you or if you have a cell phone you can call me. Or we can do it through AIM (Instant Message). But I think it would be better/quicker for both of us by cell phone. Email me and I can give you my cell phone number and we can take it from there: rantr13@yahoo.com That is: rantr13 @ yahoo .com Thanks :) Tag: phishing Tag: 82662
  - 10
    - out going e-mail blocked to aol friends When I send e-mails out, they go to everyone except my aol friend and relatives. they don't have a block on their end so I would like to know is going on. I just switched from aol to msn about 4 weeks ago thanks -- mont.nick Tag: phishing Tag: 82654
  - 11
    - Unwanted Explorer search..virus? For the last few days, every time I log onto the internet, I get the following pop up message from Microsoft Internet Explorer "Cannot find "(x-rated name).com" Make sure the path or internet address is correct." Obviously I have some sort of virus, but neither Symantic nor the Microsoft security center can find it. Spyware sweeps also come up clean. Somehow Explorer is set to look for this address every time it starts. How do I get rid of this and clean my computer? Tag: phishing Tag: 82653
  - 12
    - Running VB Scripts in Office 2003 Hi, I suspect a security issue is preventing a script from running in an Access 2003 form, but have not found any acknowledgement of this possibility in the Access group, so I thought I'd try asking here. Since we made some security changes (e.g. deleting the administrator account under which the file was originally created) an Access Script like the one below always fails. The security level on the .mdb file is set to low. No error messages appear other than my own MsgBox. Does Application.FileSearch requires any knd of security credentials? The reason I ask is because I recently found out that InfoPath in Office 2003 does not allow VB Scripts to be run without some security in place. SourceDir = "G:\test\" With Application.FileSearch .NewSearch .LookIn = SourceDir .SearchSubFolders = False .Filename = ".txt" ' also tried "*.txt" If .Execute() > 0 Then ' doesn't go past here even though files exist in G:\test MsgBox "Success ??" Else MsgBox "Execute() - failed" End If End With Tag: phishing Tag: 82641
  - 13
    - ActiveX Security Does anyone know of some good articles or websites that I could use for material to prove to my institution that using ActiveX controls on ASP pages and client-side scripting is an outdated approach towards web application design? We have a web application at my institution that has a lot of sensitive information and it has, what I consider to be, a very antiquated architecture: It is using ASP with all ActiveX controls on the "web forms" and heavy client-side vb scripting. (For example, if you View Page Source you can see all the CreateObject code, login and password variable declares, etc.) I think we should rewrite the application in ASP.NET or J2EE. Any comments or help is greatly appreciated. Thanks, Eric Tag: phishing Tag: 82629
  - 14
    - Internet Pests There are several domains, "affiliatetarget.com", "e-researchgroup.com", "myinsiderdeals.com" among them that are doing all they can to screw up my getting things done on the Web. When I click on links, go back or whatever, they pop up with a marketing scam representing companies such as Target, Wal-Mart, Victorias Secret, Starbucks, etc. They want you to sign up for a $500 gift card. I don't know whether these are worms, trojans, a virus or what. I have a firewall installed and am about to install an anti-virus program but in the meantime cannot seem to keep out these domains. Is there any way to 1) get information on these domains and who owns them, 2) report these domains as internet abusers, and 3) get rid of this problem? I tried also to purge out my cookies and temporary internet files with no success. BTW, this is not free speech because if it were, there would be a way to contact the people responsible directly and let them know how you feel. Jim Nathan Tag: phishing Tag: 82628
  - 15
    - Server that came from a W2000 Domain and has joined a NT Domain Hi, I hope someone can help me, i'm having a huge fight with a W2000 server SP4 installed in french that was moved from a windows 2000 domain and is now joined to a NT server domain. The problem basically is that we can't install any security patch's, we always get a permissions denied error, by using the windows update or by downloading and only then installing the patch's. We don't speak french, but i think all the local policies are set to grant full permissions over the machine for the Domain admin or Local admin. However, untill now we are still facing the same problem. To anyone...could it be a Domain policy that was set on the 2000 Domain that for some reason is still afecting the machine? Please comment -- Francisco Batista Portugal f_batista69@hotmail.com Tag: phishing Tag: 82627
  - 16
    - windows CA question hi! I am not sure i this is the right newsgroup so if there is a better one excuse me and point me to it... And just in case it is the right one: I installed a Windows Server 2003 Enterprise CA in my Active Directory and suddenly all DCs got a certificate. I looked where this behaviour is defined but did not find anything. I found the GPO that says "allow auto-enrollment", but there are no setting for the type of certificate to get. Also this is defined in the default domain policy so it should apply to all computers, but only the DCs got a certificate. So where to block this behaviour? The reason why I want to block it is: Our Policy does not allow auto-enrollment for servers cause we need a paper from the admins first. hope anyone can help me. -- ciao, ralf --- ralf wigand university of karlsruhe, germany Tag: phishing Tag: 82619
  - 17
    - Windows Defender Question(s) When is the client/server offering of Windows Defender going to be offered? I refuse to roll out Symantec 10.0's Antispyware offering on the Windows 2003 server, and push it out to all the clients. Recently I put MS antispyware manually on 40 or so machines. In ms antispyware there were options I could set so each user could or could not see the progress of the scan, get prompted to quarantine items or auto quarantine items, it was like 5 check boxes, checkboxes that improve or not improve irratibility and convenience for the end user who doesnt want to see a progress scan in the middle of generating an excel spreadsheet lets say. Now I notice Antispyware is gone, and it is now named Windows Defender. Alot of the aesthetics are different, but the most important question I have or most desired question to be answered is: where did those 5 or so checkboxes go that let me control if the user sees the progress of a scan, or if they get the option to manually say yes or no to a quarantine or deletion of a suspected malware piece, or to do it automatically in the background, that is now gone? Any help. So is MS also delving into client/server for anti spyware, ie: Defender Corporate? or anything? Ryan. -- ---------------------------------------------- Posted with NewsLeecher v3.5 Beta 3 * Binary Usenet Leeching Made Easy * http://www.newsleecher.com/?usenet ---------------------------------------------- Tag: phishing Tag: 82616
  - 18
    - On Rootkits... What are the experts opinions on Sysinternals rootkit tool? -- Duncan Tag: phishing Tag: 82605
  - 19
    - Can I switch hard drives w/o losing data? The Windows XP is not working properly in my Compaq Presario laptop. I was wondering if it was possible to take the Hard drive out of that Compaq laptop and put it in another Laptop brand such as a Toshiba without losing it's data, then copy it all onto DVD? Then I could put the Compaq hard drive back into the Compaq Laptop & restore Windows XP from scratch since I don't have any way of restoring Windows XP without losing it's hard drive data. Any help is appreciated. Thanks :) Tag: phishing Tag: 82604
  - 20
    - ZeroSpyware Enterprise Evaluation Hi, I work for FBM Software, and we have just released the enterprise version of ZeroSpyware. If you would like a free 30 day evaluation, go to: http://www.fbmsoftware.com/registration~sid~9192591.html Sorry for the spam, but thought some people might be interested. Thanks, FBM Tag: phishing Tag: 82603
  - 21
    - data security on removable media (dvd) I am looking for a good freeware/cheapware application that will allow me to lock down all the data on a dvd, but allow me to access that data relatively easily & quickly wherever i take the dvd. is there anything that can do this? i see some apps where the entire dvd has to be processed, and files have to copied over to whichever computer you're on. that's a bit too cumbersome ... i would like to be able to access the data right off the dvd once the dvd has been unlocked. thanks! Tag: phishing Tag: 82601
  - 22
    - i might have a virus... strange things happening: when Symantec is open, it scans a million messages, until i have to close it. also, when it try to run trend micro's housecall, it closes a few seconds after the scan starts. this sounds like a virus to me, and it sucks because it's disabling my ability to find it. this is my hijackthis list: Logfile of HijackThis v1.99.1 Scan saved at 10:31:27 PM, on 3/21/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: F:\WINDOWS\System32\smss.exe F:\WINDOWS\system32\winlogon.exe F:\WINDOWS\system32\services.exe F:\WINDOWS\system32\lsass.exe F:\WINDOWS\system32\svchost.exe F:\WINDOWS\System32\svchost.exe F:\WINDOWS\Explorer.EXE F:\WINDOWS\system32\spoolsv.exe F:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe F:\PROGRA~1\Iomega\System32\AppServices.exe F:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe F:\Program Files\Norton AntiVirus\navapsvc.exe F:\WINDOWS\System32\svchost.exe F:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe F:\WINDOWS\system32\Tablet.exe F:\WINDOWS\wanmpsvc.exe F:\WINDOWS\system32\MsPMSPSv.exe F:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe F:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe F:\Program Files\Norton AntiVirus\SAVScan.exe F:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe F:\Program Files\BroadJump\Client Foundation\CFD.exe F:\PROGRA~1\SPRINT~1\SMARTB~1\MotiveSB.exe F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe F:\Program Files\HP\HP Software Update\HPWuSchd2.exe F:\Program Files\iTunes\iTunesHelper.exe F:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe F:\WINDOWS\system32\WTablet\TabUserW.exe F:\Program Files\iPod\bin\iPodService.exe F:\WINDOWS\system32\devldr32.exe F:\Program Files\Norton AntiVirus\OPScan.exe F:\Documents and Settings\x\Desktop\matthew\programs\folders\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.earthlink.net/partner/more/msie/button/search.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://start.earthlink.net/AL/Search R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.earthlink.net/AL/Search R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com R3 - URLSearchHook: {B5AB638F-D76C-415B-A8F2-F3CEAC502212} - - (no file) R3 - URLSearchHook: {B5AB638F-D76C-415B-A8F2-F3CEAC502212} - - (no file) O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: PnIEBrowserHelperObj Class - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - F:\Program Files\EarthLink TotalAccess\PnEL.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {77701e16-9bfe-4b63-a5b4-7bd156758a37} - (no file) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O4 - HKLM\..\Run: [Microsoft Works Update Detection] F:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [Microsoft Works Update Detection] F:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [ccApp] "F:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe O4 - HKLM\..\Run: [BJCFD] F:\Program Files\BroadJump\Client Foundation\CFD.exe O4 - HKLM\..\Run: [Motive SmartBridge] F:\PROGRA~1\SPRINT~1\SMARTB~1\MotiveSB.exe O4 - HKLM\..\Run: [PrevxHome] F:\Program Files\PREVX\Prevx Home\SAGUI.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] F:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [OSS] f:\windows\system32\rk.exe -boot O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [iTunesHelper] "F:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKCU\..\Run: [g3q24Tt25] mfctab32.exe O4 - Global Startup: Adobe Gamma Loader.lnk = F:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = F:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? O4 - Global Startup: TabUserW.exe.lnk = F:\WINDOWS\system32\WTablet\TabUserW.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O12 - Plugin for .spop: F:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O18 - Protocol: g7ps - {9EACF0FB-4FC7-436E-989B-3197142AD979} - F:\PROGRA~1\COMMON~1\G7PS\SHARED~1\G7PSDLL\G7PS.dll O23 - Service: AOL Connectivity Service (AOL ACS) - Unknown owner - F:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe (file missing) O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Iomega App Services - Iomega Corporation - F:\PROGRA~1\Iomega\System32\AppServices.exe O23 - Service: iPodService - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - F:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: Pml Driver HPZ12 - HP - F:\WINDOWS\System32\HPZipm12.exe O23 - Service: Prevx Agent (PrevxAgent) - Unknown owner - F:\Program Files\PREVX\Prevx Home\PXAgent.exe" -f (file missing) O23 - Service: SAVScan - Symantec Corporation - F:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - F:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe O23 - Service: TabletService - Wacom Technology, Corp. - F:\WINDOWS\system32\Tablet.exe O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - F:\WINDOWS\wanmpsvc.exe Tag: phishing Tag: 82600
  - 23
    - [?] IPSEC Firewall FilterLists [?] IPSEC Firewalling how would I add as a filter list these aggregated addresses http://rafb.net/paste/results/uY7aE757.html Example of aggregated addresses : --------------------------------- 0.0.0.0/7 2.0.0.0/8 5.0.0.0/8 7.0.0.0/8 10.0.0.0/8 23.0.0.0/8 27.0.0.0/8 31.0.0.0/8 36.0.0.0/7 Tag: phishing Tag: 82595
  - 24
    - Any other software on the market similar to this one? Does anybody know of any other software that works the same as ACS software from SteelCloud, i.e. security and the compliance with legislations such as Sarbanes Oxley, Gramm-Leach-Bliley, HIPAA, etc. More info at this link: http://www.steelcloud.com/security/na_steelcloud.asp Tag: phishing Tag: 82583
  - 25
    - Excel security upgrade I have window xp pro with current service packs and Office 2003 professional edition. Each time I try to install the excel security update KB905756, my computer freezes and will not continue. I have to power off the system. Any suggestions would be helpful. Tag: phishing Tag: 82582
- Next
  - 1
    - Windows Defender - client/server - other misc questions When is the client/server offering of Windows Defender going to be offered? I refuse to roll out Symantec 10.0's Antispyware offering on the Windows 2003 server, and push it out to all the clients. Recently I put MS antispyware manually on 40 or so machines. In ms antispyware there were options I could set so each user could or could not see the progress of the scan, get prompted to quarantine items or auto quarantine items, it was like 5 check boxes, checkboxes that improve or not improve irratibility and convenience for the end user who doesnt want to see a progress scan in the middle of generating an excel spreadsheet lets say. Now I notice Antispyware is gone, and it is now named Windows Defender. Alot of the aesthetics are different, but the most important question I have or most desired question to be answered is: where did those 5 or so checkboxes go that let me control if the user sees the progress of a scan, or if they get the option to manually say yes or no to a quarantine or deletion of a suspected malware piece, or to do it automatically in the background, that is now gone? Any help. So is MS also delving into client/server for anti spyware, ie: Defender Corporate? or anything? Ryan. Tag: phishing Tag: 82568
  - 2
    - DNS appliances vs servers Currently I am running Win2000 DNS Servers (external, split configuration). Since I need to upgrade to Win2003 and also replace hardware, I am wondering whether buying an appliance to offer DNS servers would be a better option. Let me know if you have any thoughts and recommendations to which appliance (could be loaded with Win2003 OS) I could pick. Let me know whether there is any hidden cost of getting an appliance instead of server hardware. Tag: phishing Tag: 82567
  - 3
    - Unknown workgroup on the wire This morning we had a workgroup show up under â??Microsoft Windows Networksâ?? with a very inappropriate name. I tried to access it from all subnets but was unable to find it. Any suggestions as another way to look for it or even better keep it from happening. Tag: phishing Tag: 82555
  - 4
    - Can a password be required to print? I work at a Juvenile Probation Department where we are loking to introduce to the youth a computer lab and library system. One of the concerns that has arose is a concern related to them printing. We are looking to be able to manage what they print and how much they print. One option is to have the printers only accessable by certain computers or users on the network. However, this is a hassle because it would require staff to have to log the youth off of the computer, then them log on either at that computer or on a different computer (depending on the set-up), then finally go through the network and find the youth's document(s) and print it/them. Instead, we would like a way to simply require a password to print. TO give a visual: When a youth has something to print, they will first press the print button, then raise their hand. Thereafter, a staff would come and approve or disapprove of the print job. In the case of approval, a password would be entered. THere is a software out there that does this, UNiPrint by Pharos Systems. However, it is expensive. $5000 for the asic software, then $150 per printer license for each printer on the network that will be configured with this system. Are there any other software programs out there that can do this. Can you do this with Microsft and I just don't know it? -Zakhary Tag: phishing Tag: 82554
  - 5
    - Microsoft Takes the Fight Against Cybercrime Worldwide (eBay Fraud/Phishing) eBay Fraudsters and Phishers are being taken on by Bill and friends. http://fraudwar.blogspot.com/2006/03/microsoft-takes-fight-against-cyber.html Tag: phishing Tag: 82551
  - 6
    - Repair Damaged Windows Script Host Files sHow do you repair damaged script host files. I installed Norton's Internet Security and cannot open the program console. Norton's says that my windows script host files are damaged. I have tried everything that is available (downloaded a fix from Microsoft) and nothing seems to work. Anyone got a clue what to do? Tag: phishing Tag: 82544
  - 7
    - pfx certificate chain problem Hi I have .spc and .pvk files from Thawte for our digital certificate and I'm currently working on making an application that will install a ClickOnce deployment of one of our products on a client's server. I used pvk2pfx.exe to create a pfx file to use for signing with mage.exe. Everything works fine except when using mage.exe I update the providerUrl, so that it will load from the server the client wants to run from, this works fine. But when i do "mage.exe -Sign MyProgram.application -CertFile myCert.pfx -Password ******" it works perfectly fine on my system, but when I run it on any other system it gives me: "Internal error, please try again. An internal certificate chaining error has occurred." The tree goes from our certifcate to: Thawte Code Signing CA... and the root is... Thawte Premium Server CA... The thing is both these parents of our certificate are in the other machines certificate store... so I don't understand why its giving me this error, its not exactly like Thawte aren't trusted on machines... I've tried this on Win 2000 SP4 and Win XP SP2 machines... any ideas? I tried importing the certificate into my store then exporting it again as pfx and not include all certificates in the path... but this still doesn't work. thanks for any help Kris Wragg Tag: phishing Tag: 82543
  - 8
    - track user's operation to files or folder in windows 2003 server there are many person have right write/delete right to our files / folder in shared folder on windows 2003 server , some time , the files is deleted by mistakes , we want to find the person who delete this files/folder , I try to use Windows 2003 audit , but the log is large , is there software or tools to do this ? Tag: phishing Tag: 82540
  - 9
    - Virus...worm...mrbupd.dll Hi, Message: mrbupd.dll qagent.exe this applicatin was not found; reinstalling the application may fix this problem In addition her computer is loading in a temporary profile and states that she doesn't have security access to get into her profile...the system goes straight into the temporary profile and bypasses her regular profile option. She cannot get into any of her programs in the temporary profile. She cannot find her original system disks. Any clues anyone can give? How can she get her security back to get into her profile? Thanks. Kathy Tag: phishing Tag: 82533
  - 10
    - black worm i can not get rid of this thing...a pop up saying i may be infected with the black worm virus.... Tag: phishing Tag: 82507
  - 11
    - msn messenger hacked I dont think there is a solution to this but thought i may as well try. I spoke to a friend today who mentioned something about a conversation we'd had a couple of nights ago on msn messenger..... however i wasnt on. Now i know whoever hacked into my account obviously knew me as they talked about fairly personal things so it isnt a major security issue however i would just like to know who it was. My password wasnt changed and it was definately logged in on another computer. I know its a long shot but is there any chance i can find out who it was?! thanks. Tag: phishing Tag: 82505
  - 12
    - NTFS home folder default permissions. I dont want my users to be able to execute files under their home directory. Using NTFS, how do i achieve this? The problem is, in a domain, when a user logs in in any computer for the firs time, his profile is created with default "full control" permissions. Even if I change it, every new profile created with this propertie. My profile directory is: x:\users\<usernames> Tag: phishing Tag: 82504
  - 13
    - Possible to track user's file system usage? Hello, We have a top level employoee who has given his 2 week notice. The president of the company came to me becuase he is worried that this employee will 'steal' information over the next two weeks. Now likely if he were going to do that, he already would have before putting in his notice. It is important to the company that he trains his replacement over the next two weeks, so they'd rather not terminate him immediatley. So my question is, is there a way (or 3rd party product) in Windows 2000\2003 to capture\audit what files a user copies from network drives to his local computer? Thanks! Tag: phishing Tag: 82497
  - 14
    - Hotmail signout When I click on sign out of Hotmail I get a screen that seems to indicate I didn't sign out sucessfully because there is no checkmark alongside the hotmail account. The screen shows 4 red X marks that seem to indicate I did not sign out of anything. Is this normal and am I signed out after clicking on "sign out"? Tag: phishing Tag: 82495
  - 15
    - Change Journal access to backup Operators Hi, Backup Operators do not have access to change journal. I tried local security settings - user access rights but i cant find a way to provide backup operators to have access to change journal. If change journal is simply like a file then why backup operators do not have access to it. Also is there a way to allow backup operators to have access to change journal in windows. Thanks Udayan Tag: phishing Tag: 82494
  - 16
    - internet explorer password i have forgotten most of my password, because i always use the password remember function that's in internet explorer. now i want to log in from other computer but i cant get my password.. how am i going to get my password back from the internet explorer? Tag: phishing Tag: 82491
  - 17
    - Services.exe strange behaviour I had a virus infection on my Windows XP Pro SP2 installation a month ago. I have successfully removed the infection, but I have noticed some strange behaviour on my system ever since. Upon startup, maybe 25% of the time, services.exe will die, causing my system to shutdown after a 1 minute timeout. Also, if my wireless network connection is enabled, services.exe will enumerate every single file on my hard drive, in alphabetical, depth first order. This can take upwards of 1 hour, and is only noticable because I was using sysinternals filemon utility to trace another problem. About every 30 minutes, the services.exe will hit 100% CPU usage for about 15-30 seconds. Interestingly, if I am connected to a network with the wired network adapter, or if I am not connected to any network, services.exe does not enumerate the files or takeu up the CPU time. There are no suspect ports open on my machine. I have verified that the services.exe file is the same (with a file compare) as the one provided with SP2, and that the services.exe that is running is indeed running out of the c:\windows\system32 directory and not some rogue directory. I have only minimal services running on this machine. The only two running services listed to run under the services.exe are Event Log and Universal Plug and Play. It seems to me that this is not appropriate behaviour. My question, then, is: should I expect this behaviour from services.exe? How can I troubleshoot further to determine if this is a problem or not? Thanks, Sam Tag: phishing Tag: 82489
  - 18
    - Embed-tag referring to dynamic rendered SVG content is blocked in IE6 Hi all, I have a problem regarding the embed tag using IE6 with most recent security patches running on a Windows XP. The following scenario lets me loose hours figuring out the reason, why it doesn't work :-( : I have a simple ASPX-page containing an EMBED-tag, which refers to another page, which dynamically creates SVG code. <html> <embed src="svgContent.aspx" id=svg width="888" height="1050" type="image/svg+xml" /> </html> This worked fine until a few weeks ago. Until then, IE 6 just shows an empty page. No errors, no nothing, only a white readonly frame with no content. Checking the html-protocol it seems, IE just doesn't adress the "svgContent.aspx" at all. It's not even trying to load the page. On an older machine, this works perfectly. So I guess, it must be a security issue. But scanning the web I found nothing that could give me a hint and what I could do making it work again. Also, if I link the src attribute to static content, eg. helloworl.svg, everything works perfectly. It seams, IE6 (or IIS6) realizes, that there is dynamic content and does not allow redirecting it to the SVG-ActiveX Control. The svgContent.aspx looks something like this: <script language="c#" runat="server"> protected override void Render(HtmlTextWriter writer) { string svgSource = Server.MapPath(@"svgsimple1.svg"); Response.ClearContent(); Response.ContentType = "image/svg+xml?"; System.IO.StreamReader reader = new System.IO.StreamReader(svgSource); string content = reader.ReadToEnd(); reader.Close(); Response.Write(content); Response.Flush(); Response.End(); } </script> Of course, this sample makes not much sense, since I just load a static svg-file. In the real application, the code is fully dynamically composed and written into the Response object. These are the configurations: Client: - IE6 running on Windows XP SP2 - most recent security patches - Adobe SVG Viewer 3.03 installed Server: Windows Server 2003 with IIS 6 Anybody has an idea, how to solve this problem? Any help appreciated! Thanks in advance Daniel Tag: phishing Tag: 82488
  - 19
    - Ink Sorry guys. The spam stuff was not my intent. I do oppoligies and won't happen again. I have never been on newsgroups before and not sure how to work them. I hope you guys can forgive a bad choice. Murphey Tag: phishing Tag: 82486
  - 20
    - Ink Man I have found this site that has the cheapest ink for any printer. You can compare prices and then review the companies on service and quality. <http://www.imagraphix.com> Let me know what you think Tag: phishing Tag: 82480
  - 21
    - Open file - security warning....How do I disable it? I would like to disable this feature for all users. Here is the context 1. We are in the process of migrating to windows server 2003. We have our data directories setup so that each client server accesses DFS shares instead of directly talking to the servers that hold the client data. The basic file system looks something like this: \\domain\dfs\dfs_folder1 \\domain\dfs\dfs_folder2 \\domain\dfs\dfs_folder3 \\domain\dfs\dfs_folder4 \\domain\dfs\dfs_folder5 etc......... When I click on certain .exe's or .bat's I notice that a dialog box comes up for any user: open file - security warning. I have already gone through the posts on this subject and I am able to remove the warning if I go into gpedit.msc and then to the "User configuration\attachment manager", I can specify a file type, ie. all .exe's or all .bat's which doesn't help me because this appears to say to ignore ANY .exe which is dangerous. I need the protection. I want to be able to specify a list of permitted programs and have the computer not ask me about them similar to creating an exception in the windows XP firewall menus. The reason I think it is not working is because gpedit.msc seems not to recognize the UNC names of my DFS structure. "\\domain\dfs\share". I would love to be able to add a wild card so it understands to treat the entire domain as intranet or local and then remove security inside the network. 2. Next, I need to be able to make this a system wide adjustment without going in the individual profies and making the changes all across the network. I have also added the domain and all the servers to the trusteds and local internet/intranet sites. Any viable solution I find is a USER specific fix. I need to be able to run this GLOBALLY meaning for everyone on the network including the system admins. This would be great if either a .reg file existed or a script that I could use in order to manualy add the exceptions, or disable the IEES altogether. If we can keep it active great, but if it not then it is certainly not the first priority. 1. My question is how can I set a group policy rule to allow programs originating from inside the network wihtout this prompt Tag: phishing Tag: 82477
  - 22
    - No Admin Rights How can I overcome the obstacle of not having admin rights to install or download on a "Work" PC? Recently assigned a new PC, however, I can not reload my personal programs I'd previously used in order to complete my assignments. Can not go through my "Administrator" Tag: phishing Tag: 82474
  - 23
    - Automatic Security Update I have MS Office Prof & XP. Windows recently auto dl'ed an update. I tried to install it and rec a msg that tells me that some required files are on the original Office CD and that I should put that CD in the machine. That is part of the prob, I am on the road and do not have the software with me. The other part of the prob is that I need to use Excel and when I try to start it the auto installation of the security update starts instead and we go through the same process which effectively blocks Excel from running. My question is how do I block or delete this particular auto update? Thank you. roger1938 Tag: phishing Tag: 82466
  - 24
    - Several encryption schemes suddenly missing in Excel 2003 From one day to the next one I suddenly can't open a password-protected Excel file anymore. After investigating this issue I found out that the Excel file uses the encryption scheme "RC4, Microsoft Base Cryptographic Provider v1.0". However for some strange reason this encryption scheme isn't available any more in my Excel 2003. From all the encprytion schemes listed at http://support.microsoft.com/kb/294414/en-us my Excel 2003 suddenly only knows these anymore: - XOR encrpytion - Office 97/2000-compatible - RC4, Microsoft Base DSS and Diffie-Hellman Cryptographic Provider - RC4, Microsoft DH SChannel Cryptographic Provider - RC4, Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider Another user on this laptop however has the full list of encryption schemes available and can open the password-protected Excel file. Now how do I get back the other encryption schemes? Thanks in advance, Boris Tag: phishing Tag: 82464
  - 25
    - How can I decrypt a Microsoft Word document for which I have the key? Hi all, I'm rather a novice when it comes to security concerns in the Microsoft realm, so please bear with me. Here's my situation: A friend has an old Microsoft Word (97+, I am guessing) document for which she has set an "open document password." That is, the file is password-protected and encrypted. She has forgotten the password for the file and now needs to open it, but can't without cracking the security protection she has already placed on it. I have never before even attempted anything like this, but figuring it a good opportunity to learn something I took it upon myself to see if I could help. My research uncovered a plethora of Windows-based tools (applications) which promise to recover the password if I buy the full version of the program, but since this task is largely for my own edification it would be utterly pointless just to pay for a program. Nevertheless, I tried to the demo versions of plenty of these programs. One proved fruitful: it has managed to recover the encryption key used on the document. So now I have learned several things about the Word document. Firstly, the password is more than five characters long. Secondly, that it is likely a "modern" version of Microsoft Word. Thirdly, and I am assuming most helpful, I know the precise encryption key. Knowing these things, especialy the encryption key, how can I now decrypt the document and read its contents? Thanks in advance for pointing me in the right direction. Regards, -Meitar Tag: phishing Tag: 82460

can somebody explain what phishing is?

Re: phishing by David

David
Thu Mar 23 20:09:22 CST 2006

From: "spikevermin" <spikevermin@discussions.microsoft.com>

| can somebody explain what phishing is?

You couldn't ask this in your last question ? It could have been a two-part question.

Additionally you posted this AFTER I replied to your last query.
Why should I reply to this one when you failed to respond to the last thread you created ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Top

Re: phishing by PA

PA
Thu Mar 23 20:11:47 CST 2006

http://www.google.com/search?hl=en&q=what+is+phishing%3F
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org

spikevermin wrote:
> can somebody explain what phishing is?

Top

Re: phishing by Mark

Mark
Fri Mar 24 02:32:23 CST 2006

Presuming you are not a Chinese dissident, Google is your friend.

--
- Mark Randall
http://www.temporal-solutions.co.uk

"We're Systems and Networks..."
"It's our job to know..."

"spikevermin" <spikevermin@discussions.microsoft.com> wrote in message
news:9B93D4DA-BD87-4E28-8667-91B4866D7804@microsoft.com...
> can somebody explain what phishing is?

Top

RE: phishing by Pandaman

Pandaman
Fri Mar 24 10:36:02 CST 2006

My reply is at the bottom of your message :

"spikevermin" wrote:

> can somebody explain what phishing is?
>

Phishing = internet fraud.
It isn't dangerous for your computer but is dangerous for your life because
somebody can steal personal info such as bank account passwords and so on.

Panda_man
--
Prevention is always better than cure !
--
My web page:
http://pandaman.my.contact.bg
Learn how to protect your computer:
http://www.microsoft.com/protect
Please , rate posts

Top

Re: phishing by siljaline

siljaline
Sat Mar 25 12:30:40 CST 2006

"spikevermin" wrote:
> can somebody explain what phishing is?

<http://www.microsoft.com/mscorp/safety/technologies/antiphishing/default.mspx>

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.

Top