registering an application or otherwise notifying antivirus s/w ?

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Internet Explorer is trying to change your network settings by mod I routinely execute several different scans in an effort to catch variations of spyware and, otherwise, malware that may have infected my systems. On at least a couple of occassions, while executing Symantec's on line scan, I have encountered a Zone Alarm Suspicious Behavior Alert stating "Internet Explorer is trying to change your network settings by modifying the file: WINDRVDIR\etc\hosts". Does anyone have a clue what's going on with this? Why would IE have any business trying to change the hosts file? Thanks Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81199
  - 2
    - 2nd request -- Java: Which version is safe? I'm using Windows XP Home SP 1. I use Outlook 2000, Firefox, and occasionally IE 6. I think the Java I'm using is v1.4. I downloaded it from Sun. I gather there's a security problem with it? Which version of Sun Java should I be using? <*((((><{ Fishy@Ocean.Net <*((((><{ Fishy@Ocean.Net Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81193
  - 3
    - Printer password Is it possible to add a password to a printer at home? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81192
  - 4
    - shared computer tool kit from microsoft downloads i downloaded and installed shared computer toolkit for xp,it worked fine until i tryed to uninstall it,in the end it restricted me from doing anything on my desk top,eg useing the internet,deleting files basicly everything an administrator is capable of doing,it also screwed up the spyware the i had also downloaded from the same place.i had to create an other desktop in order to do anything.im also getting error messages eg; invalid picture, update loader usrprbd.exe dll,also a windows installer error, is there hope? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81189
  - 5
    - email snooping Can email from my home computer using Outlook Express be intercepted en route and read? I am not concerned about security on my or the email recipient's computers . Just in between. Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81182
  - 6
    - windows security center Attempting to check the Windows security center the following message appears"The security center is currently unavailable because the "Security Center" has not started or was stopped. Please close this window, restart the computer (or start the "Security Center"service) and then open the security center again." After following directions above nothing has changed, should I be concerned? I show all the appropriate icons but cannot check the status. Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81181
  - 7
    - A new service in my task manager CAPMSRSK.EXE I am running windows xp sp2 on a disk top with 512 meg. Since my system has been running slow, I decided to invistigate. I ended the process in the task manger-CAPMSRSK.EXE. As soon I ended that process another one with the following name started CAPMSLAK.EXE. I ended that process and a third one started CAPMSSWK.EXE. I searshed for all three files on the hard with no results. I searched for the files in the registry, again with no result. I am woundering if anybody had come accross such a thing. Any help will be appreciated. Mike Hanhan Thanks Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81178
  - 8
    - removing McAfee virus scan from computer i am trying to install a new security on my computer, but first i have to remove McAfee security. i have removed everything or so i thought. but now it seems that i have not removed McAfee virus scan. i have tried everything but it still wont let me do it. i cant fing it anywhere on computer. can anyone help me out here Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81175
  - 9
    - "Unknown Publisher" sometimes and sometimes not Hello, I have a signed executable, that seems to behaving erratically. On certain XP/Server 2003 servers, I am able to get the "Digital Signature" tab when viewing the properties of the file. On some machines I don't get it. In the latter case, it behaves as though it is not signed. The cerfiticates used are from Verisign and I use the MS tools to sign the kits. Using chktrust.exe gives me the expected results after signing. I can provide more information if necessary. Any help or information on this is greatly appreciated Thanks Bobby Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81169
  - 10
    - Security Scanners Hey there, Anyone use a Server and network security sanner other than MBSA to sacn your networks? If so what products are available for free and for purchase? In your opinion what is the best scanner out there? Thanks in Advance. -Adam Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81161
  - 11
    - Win2003 SERVER file security BUG! Hi, I have win2003 server installed and i am sharing some folders. let me explain my problem with an example. i have a toplevel map named data, under data i have a map company and this is on a server named server-test. my toplevel map data is shared and my subfolder company is also shared so i can see them both when i am searching the directory structure of that server. both maps are shared for everyone with full control, change and read (shared, not the security settings!) so that everyone can see the maps. now, for the folder company, i have inheritable permissions ON. so, this means that if i set security permissions on DATA, the security permissions for COMPANY are also changed and yes, they are! When i look to the security settings of data and company, i see in company my username with the security settings grayed-out, so this means that the thing did it's job and inheritable permissions were passed trough to the underlying map. The security permissions is DENY on EVERYTHING, applied to this folders, underlying folders and files. now, when i go to server-test, i see 2 folders named data and company. when i click on data, i don't come in but when i click on company, i get in and i can see all files! The only workaround seems that i FIRST deny everything on the underlying map and then deny again on the top level map. The only problem then is that in the underlying map that is using the inheritable permissions i have both security settings in it. both on 1 name but if you check another box, you can see that the denied box is turning grayed-out. This seems very unlogical and unsafe! does anyone has a solution or am i doing somethig wrong ? regards, Verus Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81153
  - 12
    - Blocking IM Helllo, I have a small netowrk (10 server, & 60 desktops) that I want to block IM completely thoughout the network. What is the easist, least expensive way to block IM that is centralized (not needing to install something on each PC. I have turned off the specific IM ports, so I am assuming IM is using port 80 for access inside my network. I cannot turn off port 80. Thanks for any help Gerald Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81151
  - 13
    - spyware tcp connections from spoolsv.exe to internet!!! The past few days all running programs are trying to connect to the internet at random addreses. (mainly a1981.g.akamai.com and ports 80:http and 53:dns) (even spoolsv.exe) I have tried to search (advanced search) for spywares-rootkits-etc but i did not found any. Was running norton corporate client and had zonealarm freeware at the time it started. (captured it by seeing that spoolsv.exe tried to connect to the internet) replaced norton with avast free antivirus and zonealarm with kerio. the strange behaviour seemed to be more rare but did not got way yet. the behaviour is changing from time to time! Currently my work partner also has the same problem, but the spyware running on his machine mostly tries to connect to the sites listed on HOSTS file (we have putted a dummy site there and it tries to connect to that dummy) Like i had with spoolsv.exe he had also with userinit and lsass trying to connect to an akamai address lets say i connect to a site then close the internet explorer and then i try to go to a dif site the spyware through internet explorer tries to connect to the previous site (noone asked him too!!!) the firewall sees the connections are made from a legit program so they can not be blocked! I have looked at the list loaded by the legit apps and no new dlls are loaded. 1)Is there a good reason for this to be happening???? (i mean spoolsv.exe should not connect to the internet!) 2)Can you recomment a way to find - clean this spyware-or what ever it is? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81150
  - 14
    - McAfee v Norton I have just set up a Dell computer. This came with 90 days AcAfee anti-virus already installed. I have not registered the product. Instead, I installed Norton 2006. Every time I boot up McAfee wants to register. I have tried going to add/remove programs, but it will not let me uninstall it, it says virus scan is already running and will not let me remove it. Anybody any ideas please. Thank you. S Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81149
  - 15
    - Getting XML to display properly My office is having to produce XML files (presidential directive to share data). We are using Apache 2 to serve up the raw XML pages (on a classified network), the client browser is having to compile the XSL files. We have various mandated XSL stylesheets making numerous modifications. We didnâ??t see any problem and have has several customers around the world able to see the pages without a problem. We canâ??t get some important data to a customer (we wrote several reports in XML, posted them and nothing but the combined, raw XSL data). The rest of our community can see the exact same pages without a problem (tested various XML files at various locations with various network configurations). This group has a Windows 2003 domain, security is normally VERY tight in their area so I expect their domain, security rules are very tight as well. This customer is using Windows XP Pro on client systems and Windows 2003 for domain controllers. Other WinXP systems on Windows 2003 domains have no problem. Our Win2K systems running on Server 2003 are not having any problem. I really need to help get these folks to view our reports properly. Do you know of a domain security issue that might be impacting this? -- TIA RoyB Please reply to email roy.mcse at bigfoot.com Thanks! Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81141
  - 16
    - Stolen Password How do I know if someone else has tried to use my password? How can I check to see when my account has been accessed? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81138
  - 17
    - Locking down top level folder permissions We run Windows 2003 on our file servers. We are continually having a problem where top level folders on our shared drive are being accidently moved. I am looking for an easy way to lock down the top level folders with NTFS permissions. When I set the permissions on the top level folders, the permission are inherited by all subfolders and files, which we don't want. What is the easiest way to lockdown the top level folders, but not the subfolders and files. Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81135
  - 18
    - Can Malware Trash Disk? I am putting together a backup strategy and looking at the possible threats. It once used to be said that a virus could trash a HD, damage the mbr, etc. In which case I would need to reformat. However, I have not heard of a virus doing this for some years. Do I not now need to be concerned about this threat? thanks Davy Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81131
  - 19
    - Proxy server vs. DNS Forwarders If websurfing behind a proxy server affords a degree of Internet anonymity because the proxy goes out on behalf of the client and returns Inet resources to the client (and cahces them), is the same degree of anonymity provided by simply having a DNS server use forwarders to resolve all resources external to your inet domain(s)? Thanks -- JCB\1059 Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81129
  - 20
    - HOW can i subscribe to a Thread? Hi, Could any one let me know, how can i subscribe to a Thread? Tks In Adv Thiru -- Ramthir ----------------------------------------------------------------------- Ramthiru's Profile: http://www.highdots.com/forums/m184 View this thread: http://www.highdots.com/forums/t325405 Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81124
  - 21
    - Event ID 529 - Advapi My administrator account keeps loggin out. By reviewing my CD logs, I've found it is coming from one of my servers, see log entry below. However, I can't find exactly what on this machine is causing this or where it is coming from. I have checked Scheduled Tasks, Services, IIS virtual directories and security tabs, etc.. Am I missing something? Are there any tools or utilities I can use to narrow track this down?? Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 529 Date: 2/6/2006 Time: 8:55:54 AM User: NT AUTHORITY\SYSTEM Computer: SERVER1 Description: Logon Failure: Reason: Unknown user name or bad password User Name: administrator Domain: domain1 Logon Type: 2 Logon Process: Advapi Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Workstation Name: SERVER1 Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81122
  - 22
    - auto complete after many attempts and trying all the settings in Internet options and other areas my tablet pc running XP Pro...........I am unable to use auto complete or auto fill. It has not worked since the tablet was new, any suggestions Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81121
  - 23
    - Auto complete will not work on XP Pro Tablet PC I cannot after many attempts and suggestions get autofill/autocomplete to work on my tablet pc running XP Pro....any suggestions to make it work would be appreciated Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81120
  - 24
    - Install DC on the non secure server room. Hi. My company is planning to install a DC in its branch office for some reasons. There isnâ??t special secure server room in that office. I am afraid of some usersâ?? password recovery tools. Are there any recommendation about locate DC in the no secure server rooms? Thanks! Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81117
  - 25
    - Second User Setup ? Hello, I am using winXP SP2 Pro. There are 2 users on this computer, "Me" and "Myself". Me has admin.rights,and Myself is a limited user. Myself should only be able to surf,download a picture, run security,and clean up. I have noticed that I can get all the way down to the "system32" folder,which I heard is not the best thing for a limited user. I am not familiar with configuring any users, and just used what was provided to make a new user, and do not mess with the administry part if I can help it. So if someone could point me to some layman tutorials on "how to" it would be appreciated very much.. What I am trying to accomplish here ,or at least deter is, anyone,getting to know me and/or my machine, through the internet, since I am the only one on this computer,nothing can harm me from this side.. Thanks for any help. >worried< Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81101
- Next
  - 1
    - Can`t file shere whith another computer! i try to file-shere to another computer by writing the complete computer name (i have a router between the both computers). whitch is called local internet but the is askes for a password?? have no idea what password i should write! pleese help me! Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81097
  - 2
    - cracking DMZ servers username/password We have a Windows 2003 server on our DMZ, it's patched up to the latest and we have enabled Remote desktop Connection, so we can manage it remotely over the internet. Obviuosly I think this can be a risk, but I need to know if the username and password can be cracked etc. I did a port scan on it and it showed the RDC port open. I have changed the administrators username, what tool can I use? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81091
  - 3
    - Remove Active-x Hi How can I delete or disable Active-X Regards Curt Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81090
  - 4
    - Tracking unauthorized access to my computer I am a Systems Analyst with full Admin privileges. I'm having a serious problem, someone has been connecting to my computer and controlling my email, accessing files/folder, etc. I'm certain that it is someone who also has Admin privileges but there are six people with these rights and I don't know who it is. I've spoken to my Boss about the situation but without specific proof talking about it has done nothing. I'm just wondering if there is a way to trace and log who is actually logging onto my computer remotely or if there is any software that I can install or scripts that I can run in the background that would identify the individual/individuals that are doing this? Even if there is something that I could use that would record the actions as they are happening would be helpful. I desparately need some kind of concrete evidence. It's gotten to the point where the amount of times someone is connecting to my machine is unbearable and very harassing. If anyone can help me with this please respond ASAP. Thanks. Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81083
  - 5
    - Internal Server Security Hi all hope I'm in the right group. Our company is working with an outside firm to provide web hosting for us that requires real time data from an internal server. Their software sits on any machine and listens to to a predetermined port that we have forwarded [from the firewall]. We have conteplated setting this port forwarding directly to our internal server. We have also contemplated setting up another machine with their software and then mapping a drive to our internal server for the data their software needs. Given the fact that the secondary machine would have a drive mapped to our internal server is it any more secure than just forwarding the traffice to the server. Any clarification would be appreciated. TIA Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81074
  - 6
    - A password problem about Zone Alarm.. really need help! A password problem about Zone Alarm.. really need help! I have a serious pity problem. I use Zone alarm and have set a password previously. However, I just have forgotten the password already. I am not autourised by the firewall to uninstall itself. What can I do to control the settings again? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81067
  - 7
    - security on a certain program I have other users on my computer. I have installed Turbo Tax. How can I secure this program so no other user can get in to it? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81056
  - 8
    - Unauthorized use of Server 2003 Someone has hacked into my server 2003 and changed MY password so I could not use it. I managed to change it back to my password and hopefully block future access from this person. Is there a "back way" into the server that I do not know about that would let this person in. I have terminal services and remote access. I need to block this possible entry. Anyone have this problem? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81052
  - 9
    - Java -- which version is safe? I'm using Windows XP Home SP 1. I use Outlook 2000, Firefox, and occasionally IE 6. I think the Java I'm using is v1.4. I downloaded it from Sun. I gather there's a security problem with it? Which version of Sun Java should I be using? <*((((><{ Fishy@Ocean.Net Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81048
  - 10
    - Help please - Can not use/export private key after domain change I have a self signed certificate in Windows XP (private/pulic key pair). Recently my company changed my login domain (keeping the same password and Profile directory). But after that I can not use my certificate (private key). Looking at the password manager, it shows the certificate, also when I view it, it says that I have private key corresponding to the certificate. But when I try to export it greys out the option for private key export saying "The associated provate key can not be found. Only the certificate can be exported." I guess the reason might be that the key was encrypted based on password + domain name. Just my guess, based on my limited understanding from what I found on the net: "Windows XP protects you against such attacks. Windows XP encrypts the private key with a derivative of your password. If the password is changed and you don't provide the old password, access to the public key will be permanently blocked, and you or a thief can no longer decrypt files with this key." Is the only way to recover the key to ask for switching back to the old domain ? Please advise, I would really be very greatful for any help to recover my key. Thanks a lot, Sandeep Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81046
  - 11
    - LDAPS--certificate request I am trying to generate a certificate request for enabling LDAPS. When I >run > certreq -new request.inf request.req, I get the following error and am > having > trouble getting past the prob > > C:\>certreq -new > Certificate Request Processor: Bad INF file section name line 0xe0000001 > (INF: - > 536870911) > C:\request.inf > > I am using Article ID: 321051 for the example .inf file. That files reads > in part: > > [Version] Signature="$Windows NT > [NewRequest] Subject = "CN=<mydc.mydomain.myorg.edu>" > ; replace with the FQDN of the DC KeySpec=1 KeyLength=1024 > ; Can be 1024, 2048, 4096, 8192, or 16384. ; Larger key sizes are more > secure, but have > ; a greater impact on performance. Exportable=TRUE > MachineKeySet=TRUE > SMIME=False > PrivateKeyArchive=FALSE > UserProtected=FALSE > UseExistingKeySet=FALSE > ProviderName="Microsoft RSA SChannel Cryptographic Provider" > ProviderType=12 > RequestType=PKCS10 > KeyUsage=0xa0 > > [EnhancedKeyUsageExtension] OID=1.3.6.1.5.5.7.3.1 > ; this is for Server Authentication > > Ideas? > > Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81036
  - 12
    - keylogger 1.7 for windows uninstall information One of my ex's installed this on my computer it logs every key stroke and every place you visit, how do I get this off. I tried talking to the company that makes it and they wont return my emails. I can delete the icon but it doesnt remove it. Please help me get this off my computer Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81033
  - 13
    - Restricting use of CD writer Hi, Is there a way to restrict certain users or non-administrative users from using the CD writer on the system? If possible, disable the writing function while allowing reading. Thanks Ramesh Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81032
  - 14
    - Changes to Windows 2000 / XP After applying all of the security updates and patches on several machines, I have been noticing errors when burning dvds and cds. I get errors when I burn at the highest speeds; however, if I burn at slower speeds everything works fine. Prior to applying the patches and updates, I was able to burn all of my cd/dvd's at the highest speed. Have there been changes in the hardware/software layers for security reasons? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81029
  - 15
    - Excluding archive files from virus scan I have around 5GB of disk space on my Windows 2000 laptop occupied by archives bundled up using the "tar" facility, and compressed with gzip. This is really slowing down a complete system scan. McAfee's antivirus lets the user specify what files to exclude from scanning. Is there much risk associated with doing this? What is the likelihood of some malware adding itself to a file within one of the archive files (each archive file is several hundred megabytes)? Most of the archive is data, though there are some unix shell scripts and possibly some binary executables. I unpack items from those archive files as needed (about once every 2-3 days). Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81020
  - 16
    - Anti-malware on Win2K: Run as administrator or user I am using Windows 2000, and I scan my PC with McAfee antivirus, SpyBot Search&Destroy, and LavaSoft Ad-Aware. I sometimes do it from the administrator account, and sometimes from the user account. I am most often using the user account. I haven't noticed any difference between using the 2 accounts. Is there a best practice? Thanks. Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81019
  - 17
    - How do you get certificates to work I'm trying to get the SSL working on our web page so users can use it change their domain password. I reviewed MS KB228821 (how to generate certificate request file) and KB228836 (Installing new certificate for use in SSL/TLS). My platform: Windows 2003 Server SP2, IIS 6.0 Here are the steps I followed: 1. Genreated request file - text format. 2. Read the file in on my CA then issued the the certificate. 3. Exported the issued certificate as a DER 509 type with file ext .cer 4. Ran IIS 6 manager and imported the certificate into my web page. When I try to run the aexp.asp script, that allows users to change their password, it complains that SSL is not running.. What am I doing wrong and how can I make this work? Thanks... Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81015
  - 18
    - Change from Root CA to Subordinate CA I currently have an Enterprise CA that issues certificates from a subdomain in my network (usa.abc-company.com). I have several thousand certs already issued. I now want to create an offline root CA in the forest root (abc-company.com) and be able not to affect the certificates that I have already issued. 1) Is is possible to change the role of a CA from enterprise ca to subordinate? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81010
  - 19
    - AD object permission list Hi all, We are trying to create a security property page exactly the same as in the Active Directory Users and Computers mmc snapin. So, we need names of permissions to be shown. Could any body help to find API to enumerate and read these strings? Thanks in Advance, Victor. Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 81009
  - 20
    - How to check for computer abuse? I have a situation where I need to know if a user is copying information from the server or/and their local drive to some sort of removable storage device. Is there any log files or event log I can look at that would show this? Or Is there a utility of app that I can run in the back ground of this p.c. that would record such info? I also need to know if a device such as a USB flash drive is being used on this specific p.c. Any ideas? Enviroment is XP on desktop, Win2003 network Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 80997
  - 21
    - Could not establish secure channel for SSL/TLS Hello, I am trying to connect to a SSL Secured Webservice with my ASP.NET (C#) webapplication. On my local machine everything works well, but on my server the folling error appears. --- Could not establish secure channel for SSL/TLS at System.Net.HttpWebRequest.CheckFinalStatus() at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult) at System.Net.HttpWebRequest.GetRequestStream() at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at ... System.ComponentModel.Win32Exception: The message received was unexpected or badly formatted --- I allready granted the access for ASP.NET(NETWORK_SERVICE on server) to certificates store on the local machine by using winhttpcertcfg.exe Thx in advanced Peter Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 80995
  - 22
    - what the hell is KB7218151.LOG? Hi guys, I found that every process running in my winxp system contains a strange module with the name "KB7218151.LOG". the file is located under "c:\windows" folder, instead of being a plain text file as the name suggested, it's actually an executable module (start with the "MZ" header). after some further investigation, i found that it's is loaded by the following registry entry. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="KB7218151.LOG" that's why every process in the system is injected with this dll module. I dont think it's a patch released by MS as MS wouldnt use these kind of misleading filename to hide their actual intention. i have searched through the internet but cannot find anything about this "KB7218151.LOG". is there any guru here know what it is? i will mail the "KB7218151.LOG" file to you if you need to examine it. Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 80993
  - 23
    - Panda Platinum 2005 Internet Security Panda_man wrote: > Boot in Safe Mode and just delete all the folder > Panda Software in > C:\Program files I booted into Safe Mode, and logged in as Owner, and I still couldn't delete these files: icl_cfg.dll"; "pavlsp.dll"; and "PavTrc.dll". Windows said that they were in use. I'm on XP Home, SP 1. Any other ideas on how to get rid of all the vestiges of this application? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 80992
  - 24
    - Admistrator Password Reset OK -- Maybe a simple solution (maybe not.. we'll see) ... here goes -Have a computer that some knucklehead made an administrator name and passworded it. Person is no longer around and no one seems to know the p/w. I need to know how I can reset it. The computer is in need of some work and I can't access administrator options. The people who use it (a standalone PC in an office) just have been signing on as guest. I hope someone has a useful suggestion... I am at a loss.... Thanks! Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 80988
  - 25
    - !!Email snooping question We use a microsoft exchange server at our office, and everyone's password is a certain combination of letters from their first and last name - same for everyone, so everyone knows each others password. I have noticed that I can, if I want to, access anyone's e-mail. And of course, the situation is also reversed. My question is this - if i go into someone else's mailbox, via internet explorer and through the exchange server, am I easily detected by our IT guys? And how do i know someone is not in mine? Tag: registering an application or otherwise notifying antivirus s/w ? Tag: 80981

Hello,

I am working on a program in which the front end and back end
talk to each other through a socket, so that triggers Norton AV on
a lot of people's systems. Sure, the user can click through the
warning but some people make the wrong choice and then they
have trouble undoing it. It would be better overall if we can avoid
notifying users in the first place.

Is there any way to register the application with Norton and/or any
other popular antivirus s/w makers? I'm hoping it can be arranged
so that the application is recognized as OK (thus obviating the
need to ask the user).

It seems like antivirus s/w must come with some sort of built-in list,
otherwise you would get warnings popping up all over the place ...

Maybe this registry business is just wishful thinking on my part.
If so, please feel free to tell me.

Thanks for any information on this topic.

Robert Dodier

Top

Re: registering an application or otherwise notifying antivirus s/w ? by David

David
Wed Feb 08 09:55:57 CST 2006

From: <robert.dodier@gmail.com>

| Hello,
|
| I am working on a program in which the front end and back end
| talk to each other through a socket, so that triggers Norton AV on
| a lot of people's systems. Sure, the user can click through the
| warning but some people make the wrong choice and then they
| have trouble undoing it. It would be better overall if we can avoid
| notifying users in the first place.
|
| Is there any way to register the application with Norton and/or any
| other popular antivirus s/w makers? I'm hoping it can be arranged
| so that the application is recognized as OK (thus obviating the
| need to ask the user).
|
| It seems like antivirus s/w must come with some sort of built-in list,
| otherwise you would get warnings popping up all over the place ...
|
| Maybe this registry business is just wishful thinking on my part.
| If so, please feel free to tell me.
|
| Thanks for any information on this topic.
|
| Robert Dodier

Robert:

That's a very Symantec/Norton specific question and the following News Group may be better
for addresing this issue; symantec.support.winnt.nortonantivirus.general

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Top