spyware outcome

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Give user acces to regkeys Hello, Is there a way to give a user write access to a LOCAL_MACHINE regkey without making him local administrator? And if Yes, how could it be done? -- Jean Paul ------------------------------------------------------------------------------------- C# is Second finger high on the A Tag: spyware outcome Tag: 63988
  - 2
    - Solution to browsing to a Windows 2000 machine from a 98 machine I have found a workaround to that old age problem of browsing WIN2k from 98. I was running w2k as a ICS gateway with a 98 (first edition) client. Forget the internet, it is not important, the trouble I was having was getting Windows 98 to be able to browse through network beighbourhood. First I tried forcing 2k to be master browser through registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\MaintainServerList (can be True, False or Auto) no joy then I started messing about with guest user, still no joy. Setting local security policy to allow enumeration without explicit access (or whatever it is called). This also did not help. I already had common users and passwords on both machines, so this also was not the problem. In the end I found that if you go on WIN98, networking properties, client for MS networks, and the advanced (or something) you can set Browse Master = True. I also went in to w2k above reg, and set it to FALSE. This way the 98 is master computer browser whatever and was able to browse! This also meant my gateway is not the master computer browser which is a bonus. Forget Stupid guest account. Lock down the enumeration setting in local security policy, and you can STILL browse and access your network HOOORAY! anyways, here is your basic checklist to this age old problem. 1 - Put common usernames and passwords for network access on both machines. 2 - Ensure that client for MS networks is there on both machines. (on Win98 make sure this is your default log on in the pull down list). (But please untick this on any connections that are directly on the internet like dial ups or Adsl Modems - you dont want to share out your files on the net (which is done by default on almost every connection I have ever seen - DUH MSFT)). 3 - On win98, go into the file and print sharing setting and tick both boxes to enable File and Print Sharing on that box, (this is not necessary to veiw shares on other pcs). 4 - On 98 machine go into advanced for client for MS networks and set Master Computer Broswer = True. 5 - Go onto w2k machine and set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\MaintainServerList = False. I think that is all you need. Any comments suggestions please post follow ups. Regards James Buttle ADDITIONAL NOTE *************** BTW for security... 1 always have a firewall on your internet connection 2 rename administrator account and have long passwords for all users 3 disable NetBIOS over IP under particular device in advanced, TCP/IP properties, advanced, WINS. 4 have an up to date antivirus package 5 run lavasoft adaware regularly 6 get all microsoft critical updates 7 Restrict anonymous access / enumeration under local policies, security options in local security policy. 8 Untick client for MSFT networks and File and print sharing for any internet connections such as ADSL modems, and dial ups. 9 Disable / kill / remove all guests and other useless accounts 10 If possible leave your computer off and sit in an underground bunker the rest of your days. Tag: spyware outcome Tag: 63986
  - 3
    - Can't use Exchange OWA form based authentication with Smartcard Hi, I run a pilot using Exchange OWA form based authentication and I have encountered the folowing problem; When I enable the "Require Smart card for interactive logon" setings for my domain users , I can no longer authenticate to Exchange OWA in form based authetication since ,obvoiusly, the password is now randomly set. The problem is that remote users may find themselves in Kiosks which do not have the option to use a smartcard. Please advice on workaround, solution , alternatives. TIA Gil Tag: spyware outcome Tag: 63985
  - 4
    - Certutil Hello Does anybody know if it is possible to list all user certificates of all user profiles who exists on an windows xp professional client machine? Is it possible with certutil.exe or does there exist an other tool or command? Does anybody know a complete documentation about certutil in one (1) document? I could imagine that there is no way to get all certificates because of security reasons --> private key configured exportable, e.g. But anyway, maybe someone knows a solution. Thanks a lot Christoph Tag: spyware outcome Tag: 63981
  - 5
    - Administering a microsoft enterprise ca 2003: filtering certificates Hello, Does anybody know a tool or a script to filter certificates on a issuing certification authority in a more comfortable way as the ca microsoft management console is able to? There is no way to fast and easy find all certificates of a certain user. Every time you want to know the certificates of a certain user you must manually add a new filter or search manually for the username. Thanks for every hint, Christoph Tag: spyware outcome Tag: 63980
  - 6
    - Spoof Billing From MSN I found two emails in my bulk mail inbox regarding my MSN account saying that my credit card number had been turned down and I could resolve the problem by contacting "MSN Suport" via the (spoof) link provided. I wanted to forward the two spoof billing emails to MSN as there are probably people out there who have received this and think it's legit, but does MSN care? Tag: spyware outcome Tag: 63977
  - 7
    - Microsoft Security Bulletin Advance Notification Announcement is Hi, Microsoft Security Bulletin Advance Notification Announcement http://www.microsoft.com/technet/security/news/bulletinadvance.mspx Microsoft Security Bulletin Advance Notification for November http://www.microsoft.com/technet/security/bulletin/advance.mspx -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/scriptcenter/default.mspx Tag: spyware outcome Tag: 63959
  - 8
    - Administration password Is it possible to press a combination of keys and reveal the user passwords? I set myself up as administrator and my children as limited, the day after my 14 year old son knew my password? All he would say is that he pressed 2 or 3 keys and it shows the most pressed keys or something like that, but he will not say which keys, he says it's his secret. I would like to know how he's doing this or at the very least how I can prevent him from finding out my new password, without having to ban him from the computer. Any help would be greatly appreciated. Tag: spyware outcome Tag: 63956
  - 9
    - Administrator password Is it possible to press a combination of keys and reveal the user passwords? I set myself up as administrator and my children as limited, the day after my 14 year old son knew my password? All he would say is that he pressed 2 or 3 keys and it shows the most pressed keys or something like that, but he will not say which keys, he says it's his secret. I would like to know how he's doing this or at the very least how I can prevent him from finding out my new password, without having to ban him from the computer. Any help would be greatly appreciated. Tag: spyware outcome Tag: 63955
  - 10
    - Administrator password Is it possible to press a combination of keys and reveal the user passwords? I set myself up as administrator and my children as limited, the day after my 14 year old son knew my password? All he would say is that he pressed 2 or 3 keys and it shows the most pressed keys or something like that, but he will not say which keys, he says it's his secret. I would like to know how he's doing this or at the very least how I can prevent him from finding out my new password, without having to ban him from the computer. Any help would be greatly appreciated. Tag: spyware outcome Tag: 63954
  - 11
    - MSN MESSENGER ON WINDOWS XP How do you disable automatic sign on - ie. it automatically allows others to click on '4444@hotmail.com' and the password is already entered. I don't want others to use my computer to have access to my email. Also, how do I remove the older version of MSN messenger when I've updated to 6.2 version? Thanks. Tag: spyware outcome Tag: 63953
  - 12
    - cyber stalking A person can watch another persons computer monitor through the internet. They can also track another persons events by remote. What countermeasures are available? I have a spyware removal program and can install a firewall. What else? Tag: spyware outcome Tag: 63952
  - 13
    - jerry I have children who can access the computer at any time. I've used the AOL parental controls but since I have broad band as my provider, I have no way to limit my children's use. I would like to find a way to shut down my system at a certain time each day, so the computer is locked off. Is there any software or windows appication that would allow me to do this ? Thanks for any information you may have. Tag: spyware outcome Tag: 63951
  - 14
    - W2K/WXP and USB Memory Sticks Is it possible to force ALL types of USB Memory sticks to use a specific drive letter regardless of which PC they're plugged into? E.x. At the moment we've had to permit users read/write access to drives D/E/F as some PCs have CD-Roms, some have CD-RW+CD-Rom and some have neither, meaning the USB memory stick takes the next available drive letter, can we force it to use drive G: for example regardless of what brand of memory stick is installed and what USB port it's installed into? (Assuming of course that drive G: does not already exist) We use Windows 2000 SP4 and Windows XP SP1a on an Active Directory 2003 Domain. Tag: spyware outcome Tag: 63950
  - 15
    - Hotmail Corruption Beginning yesterday (11/3) afternoon, after signing into my hotmail account, the system is not loading properly. Intermittently the system says it's "done" and there is no data on the screen (white screen), while at other times the "Today" and "In-box" will only partially load. Please help. Thx. Tag: spyware outcome Tag: 63942
  - 16
    - Restrict Folder Creation but not files How do i restrict users from creating more folders on a share where they have write access to. I have tried this solution but have no luck. "To open the Registry Editor, go to Start | Run, enter regedt32 in the Open text box, and click OK. Navigate to HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Services\LanmanServer\Shares. Select Shares and all of the folder's subkeys. Go to Security | Permissions. For the Shares folder and each of its subkeys, grant the Read permissions (at a maximum) to the Everyone group and all untrusted domains, and click OK." Please assit Tag: spyware outcome Tag: 63938
  - 17
    - Ad-Aware new update broken Ad-Aware, Win2000 and Win ME, AVG Free, Sygate Personal Firewall. Beginning a couple of days ago, Ad-Aware would no longer update. It downloads 5% of the new update and then says "update complete." This is the ref file dated 26-10-2002. That's right, 2002. Is anyone else experiencing this and are there any solutions? Tag: spyware outcome Tag: 63934
  - 18
    - XP client security I have a question concerning client security. We have a demo copier that can send scanned documents in a PDF format to a shared folder destination on a workstation in our local domain by means of either SMB or FTP. With SMB, the copier uses an older method of authentication (NTLM v. 0.12) so it is incapable of accessing a folder on our Windows Small Business Server 2003 which requires the digital signing. In order for this copier to send to a folder on our server we would have to disable the digital signing on the server. That is not an option. We need to keep the server secure. Since this device can access a folder on a workstation via SMB by the method described, my question is - will this scenario compromise the overall security of our network? Will the separation from the server by scanning to a workstation allow for greater security considering the logon limitations of the copier? The ultimate goal is to place scans in a common folder on the Windows Small Business Server 2003 that can be accessed only by authorized network clients - either locally or remotely. As I also mentioned, there is a possibility of using FTP to put scans on the workstation. Only the workstation will have to have an FTP server running to accept the scans from the copier. I had heard that we should not run FTP server software on our Windows Small Business Server 2003. How will this affect our network's security to run an FTP Server on the workstation? I know that our security is only as strong as the weakest link. I am curious about the implications of either method and the effect on our secure environment. Thank you for your answers. Marvin Tag: spyware outcome Tag: 63928
  - 19
    - Terminal Service encryption What type of encryption is Terminal Services sessions protected by, by default ? Assume launching a remote desktop session from a WinXP machine and connecting to a Win2000 and Win2003 Server. Tag: spyware outcome Tag: 63920
  - 20
    - SPAM from "myself" to myself I've recently been getting (via AOL only) SPAM messages for pills and such that have my own email address as the sender and recipient. Does anyone have any insights into this before I struggle with the AOL people. Is it possible to stop the real sender from imitating me in this way? Thanks ian Tag: spyware outcome Tag: 63915
  - 21
    - Security Event Messages Hello, Does anyone know of a good reference (web or book) that gives the meaning/definition of security event messages? I referenced Microsoftâ??s web site but does not provide what I need. Example: Event ID 618 â??Encrypted Data Recovery policy changed.â?? What does this mean? How was this generated? Event ID 612 â??An audit policy was changed.â?? I see quite a bit of these entries but no changes were made in the policy; this was generated by system account. I need a reference that explains why this happens and what it does? Any thoughts on a good reference for what I am looking for? Thanks Tag: spyware outcome Tag: 63911
  - 22
    - VIDEO STREAMING DOES NOT WORK The video streaming on" foxnews" no longer work on my computer.It comes on with a black screen. I had no problem untill a few weeks ago. we have tried everything, but to no avail. HELP!!! I received an e-mail that had freaky virus.Norton found and fixed it. Could there be a connection? I have windows xp Tag: spyware outcome Tag: 63909
  - 23
    - "A program is trying to automatically send e-mail..." workaround I have just installed SpamAssassin on my mail server. If it misses a Spam, I need to resend the spam to a particular mailbox to "Re Learn" the message as spam. Using Outlook, I have to Open the message (sometimes they are offensive), click Actions/Resend answer the "You didn't send this originally" warning, change the TO to "spam", click Send, Close the original message, and finally delete it. I wrote a macro For Each objMailItem In objExplorer.Selection objMailItem.To = "spam@visioncomm.net" objMailItem.Send Next objMailItem so I could just select a bunch of False Negatives and click one toolbar button. I guess I don't really mind the "A program is trying to automatically send e-mail..." dialog (although I'd prefer not to see it) but the 5 second delay before you can click YES is particularly annoying. I wrote a rule that does this, but it can't be called automatically. I have to move all the FN spams to a particular folder, click Rules Wizard, Run Now, confirm the correct folder is selected, select the Spam rule, and Ok, then Cancel. Also way too much work. Anyone have any ideas on working around this silly 5-second wait? Sending/Deleting a selected few messages another way? Tag: spyware outcome Tag: 63905
  - 24
    - security: 4 Millions Domains data with Category Successfull Internet and Direct Marketing products on www.promotionsite.net * NEW * DOMUS Domains Toolkit Fall 2004 - Unique on the Net 4 Millions "Whois" Domains data with Expiration Date and Category*. Ultimate Version (October 2004) - Our best rate starts from US *$149*. A wonderful tool for Internet and Direct Marketing. Available in Basic, Advanced and Full Editions. It contains a domain database with 4 millions *FRESH* October 2004 New records .com, .net, .org. 4 Gigabytes MS Excel data zipped on CD-Roms/Dvd. Compression 3:1. MS Excel or Text tab delimited data files Available! Each record include the full "whois" fields info and homepage info: Domain Name, Registrant Company, Contact, Address, City, Tel, Fax, Email, Administrative Company, Contact, Address, City, Tel, Fax, Email, Technical Company, Contact, Address, City, Tel, Fax, Email, Billing Company, Contact, Address, City, Tel, Fax, Email, Zone Company, Contact, Address, City, Tel, Fax, Email, Name Servers until 6 name servers with IP addresses Record Created on Date, Record Updated on Date, Record *Expires* on Date Domain Title, Domain Description, Domain Keywords (*Category*), First 300 Words in the Domain Website Homepage. Download Free Demo, Screenshot, see Products Details or Order On-Line at www.promotionsite.net. Available On-Line many other Promotion Products. Instant Shipment or Download On-Line Registered Versions available! Best Regards, www.promotionsite.net The Best place where to find Internet Marketing Resources on the Net. --- This is a one-time only information. The enrolled (final) text of S. 877 as it was passed by the Senate on November 25, 2003, and agreed to by the House of Representatives on December 8, 2003, allows e-marketers to send UCE as long as the message contains an opt-out mechanism, a functioning return e-mail address and the legitimate physical address of the mailer. The bill was signed by the President on December 16, 2003, and takes effect on January 1, 2004. Your address isn't in any of our archives, however for Can Spam Act 2003 Compliance, you can remove at http://www.promotionsite.net/remove.html Tag: spyware outcome Tag: 63904
  - 25
    - User profiles /SID Problem Description: My Windows 2000 Server had a hardware failure. I had to contact dell to send replacement parts. I had to reinstall the server OS. Then I connected my XP workstations to the server. I changed to a workgroup and then re-attached to the server. Now my User profile can not be accessed. \my computer\properties\advanced\user profile indicates the "Account unkrown" I have reattached to the server and can not get to the profile. My Backup software does not read my tapes even though they verified after every backup. I need my profile and My Documents back. What can I do. My network has been down for over a week. I am writing this email from my laptop. It too was affected. I have five computers (XP Pro) that are affected. Has anyone used regedit to change the user profile? What are my options? -- thanks Tag: spyware outcome Tag: 63897
- Next
  - 1
    - Excessive Outgoing Packets Sent When I click on my Network Connection i see excessive packets sent. It always seems to be in increments of 4 Gig. For example, in one day, with minimal to no computer use, my computer will have 1 K packets received and 24 Gig sent. I am running Windows XP Home Edition w/ SP2. I have a cable broadband connection with a Linksys Firewall. I have always used Norton Securtity, and it never detects a virus or such. Anybody have any ideas of what might be going on? I have also used Spybot to try and troubleshoot, but haven't found much. Thanks Tag: spyware outcome Tag: 63890
  - 2
    - LuComServer_2_5.exe After getting Norton Internet Securuity update yesterday, my computer to day first "says": ccApp.exe is attempting to access the internett and later: LuComServer_2_5.exe is attempting to access the internett. Both times asking What do you want to do? permitt or block. What's up? Knut-Frode Lid Tag: spyware outcome Tag: 63888
  - 3
    - Outlook have a Whitelisting Policy? I see MSN/Hotmail use IronPort's Bonded Sender Program. What about Outlook? How do legitimate publishers of solicited bulk email apply for similar whitelist status with Outlook? Thanks. Tag: spyware outcome Tag: 63886
  - 4
    - Revoking ability to set default printer? Is there any (commonly used) way to revoke a user's ability to set their default printer, such as security policies, etc. Thanks in advance Tag: spyware outcome Tag: 63881
  - 5
    - spyware nuker I have tried several spyware programs and use online scanners as well-use ad-aware as my main one. I downloaded spyware nuker 3 days ago and it found 213 things in the registry- 2 were hot bar and the many others were web game channels (it did not specify wild tangent but I used to have that til I got rid of it...or think I did) Those of u who know about spyware nuker know that you have to register and pay to have the items removed.Same with bazooka scanner (which only found hotbar)- Of course I could manually remove them. They are ALL in the registry. WHy is it that adaware,ss&d,pest patrol,Hijack this, cwshredder, etc did not find the same ones that spyware nuker did?? 213 objects is alot. Are they an honest spyware company??Opinions please will be appreciated,thanks Tag: spyware outcome Tag: 63878
  - 6
    - malignant process I get a window labeled process scanner that says "the program has detected 1 malignant process. It is recommended that you remove these proceses before proceeding. " I click yes to preceed and the window disappears and nothing happens. It points out that "realsched.exe" is the issue. I have ran a search and deleted it but it still comes up as the problem. How can I resolve this problem? I have also run Spybot/spybloc and spyware doctor. These do not seem to improve the situation. -- Paul Tag: spyware outcome Tag: 63876
  - 7
    - MBSA shows two administrator accounts not listed in users&groups control panel BACKGROUND: I have a new XP system that I just recieved from my corporate IT department. While the hardware is new, there are signs in the registry that their "gold image" that they used to ghost my computer was infected with a backdoor virus about a month ago (I know you don't need to tell me!). Our INTRAnet is under daily virus attack, and they seem quite content to spend all day cleaning up user systems. But I would like mine to be secure... I have added all the security patches that they refuse to put on their gold image, and have run microsoft baseline security analyzer (MBSA) to check. SO ANYWAY - HERE IS THE QUESTION... When MBSA runs it claims that there are four administrator accounts on my system. 1) local machine\administrator 2) corporate domain\"me" 3) corporate domain\EST 4) corporate domain\"1300 it" Should I be worried? Tag: spyware outcome Tag: 63871
  - 8
    - What could be on 25 and 110? Hi! There is one Windows Server 2003 machine with system firewall running. However while scanning this machine (using GFI LANguard N.S.S., Shadow Security Scanner and Angry IP Scanner) it shows that also ports 25 and 110 are opened. There were never neither SMTP nor POP3 service installed, netstat -ano shows no process listening on them and when I try to telnet to these ports it's also unsuccessful. So what could be a reason of such strange result? Regards Silmar Tag: spyware outcome Tag: 63864
  - 9
    - rasmans.exe I found rasmans.exe in system32. It has been identified as trojan, maybe. So I don't know what to do, it seems there is no information about it on the Internet. I use windows xp home edition Thank in advance. Beppe Tag: spyware outcome Tag: 63863
  - 10
    - Win XP I am using win XP. I cant see my program windows which are supposed to be on task bar, they are kinda hidden. IF I do Alt + Tab I do see them... Can anyone tell me what is my problem. Thanks Salim Tag: spyware outcome Tag: 63862
  - 11
    - What is this batch file missing (for privacy cleaning of a windows PC) I started writing a batch file for quick cleanup of an WinXP PC. My batch file is below. I'm no expert so I am sure stuff is missing (what is missing)? The goal is a decent batch file which removes most privacy concerns. Let's say the PC should be clean enough to hand to your boss or mom. How can we improve this cleanpc.bat script? Is another cleanpc.bat script out there that is better for starters? How can we add variables (eg for the username & mozzilla directory)? Orak Listalavostok echo off erase /s/q/f "c:\temp" erase /s/q/f "c:\documents and settings\administrator\recent" erase /s/q/f "c:\documents and settings\administrator\my recent documents" erase /s/q/f "c:\documents and settings\administrator\local settings\my recent documents" rmdir /s/q "c:\quarantine" erase /s/q/f "c:\windows\downloaded program files" erase /s/q/f "c:\windows\temp" erase /s/q/f "c:\windows\cookies" erase /s/q/f "c:\windows\history" erase /s/q/f "c:\windows\tempor~1\content.ie5" erase /s/q/f "c:\windows\recent" erase /s/q/f "c:\windows\applog" erase /s/q/f "c:\windows\desktop\*.tmp" erase /s/q/f "c:\windows\prefetch\*.*" erase /s/q/f "c:\documents and settings\administrator\cookies" erase /s/q/f "c:\documents and settings\administrator\local settings\history" erase /s/q/f "c:\documents and settings\administrator\local settings\temp" erase /s/q/f "c:\documents and settings\administrator\local settings\temporary internet files" erase /s/q/f "c:\documents and settings\administrator\local settings\application data" erase /s/q/f "c:\documents and settings\administrator\userdata" erase /s/q/f "c:\documents and settings\administrator\my recent documents" erase /s/q/f "c:\windows\system32\catroot2\*.log" erase /s/q/f "c:\documents and Settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\cache" erase /s/q/f "c:\documents and Settings\administrator\application data\mozilla\Profiles\default\\mhy0feee.slt\cache.Trash" erase /s/q/f "c:\documents and Settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\cookies.txt" erase /s/q/f "c:\documents and settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\downloads.rdf" erase /s/q/f "c:\documents and settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\history.dat" erase /s/q/f "c:\documents and settings\administrator\application data\mozilla\Profiles\default\mhy0feee.slt\bookmarks.html" erase /s/q/f "c:\windows\debug\usermode\userenv.log" erase /s/q/f "c:\windows\debug\usermode\userenv.bak" Tag: spyware outcome Tag: 63861
  - 12
    - spyware/cannot uninstall I have installed several progs from a win xp mag cd and when I run yahoo antispy it tells me that I have gator/claria, trouble is I cannot get rid of it how do I do this without having to uninstall all of the progs Tag: spyware outcome Tag: 63856
  - 13
    - Offer any Help for XP When I double click to open anything, my computer automatically opens Search, for searching files on my computer.... anyone know how to fix this? The only way I can open files or click icons is by right clicking and chosing open from the menu that appears... I am using XP Tag: spyware outcome Tag: 63852
  - 14
    - MP3W.EXE This program is displayed on my Windows 2000 Professional Task Manager Processes using 95-98% CPU time. Is this a system file? Is it a virus? Norton doesn't recognize it. AdWare SE doesn't recognize it. Explorer Find can't find it on any of my hard drives. Does anyone know what this is? Tag: spyware outcome Tag: 63850
  - 15
    - Lost Property Window and MP3W.EXE I have noticed a process in the Task Manager called MP3W.EXE running up to 95-98% of my CPU cycles almost constantly. I have run AdWare and Norton's Antivirus to detemine if this was a foreign file to no avail. To further investigate, I tried to isolate the program through the Services folder by changing through the properties most services running as "Automatic" to "Manual" and then stopping them. With most of my services now "Stopped" and the MP3W file still running, I have found I can't change the properties from Manual to Automate because the property window will not display. I have tried to reload Windows 2000 Prof to resolve my dilemna but Windows installer says there is another installation in process and terminates. I have searched all hard drives for MP3W.EXE using Explorer Find but to no avail. I fear I have compounded the problem and now can't tell if this MP3W is a virus or a system file. Is there anything I can do to resolve this situation? Tag: spyware outcome Tag: 63849
  - 16
    - Applications that require Internet access I am running an application that must connect to the Internet. I can configure proxy settings. However, if the firewall is configured to prompt that an external connection is being made, the application cannot complete its Internet access procedure. How should the firewall policies be configured so that the application can access the Internet without intervention. Tag: spyware outcome Tag: 63840
  - 17
    - Are credentials sent via a client browser->IIS6.0 if using 'integrated authentication' protected by Kerberos? Imagine I am not using SSL or a certificate.I go to IE and launch http:\\ MyServerSite The authentication in use is "Windows integrated authentication". Since I am not using SSL, if somebody uses a packet decoder to grab data from that connection, what type of information would be retrievable ? Is the login information/password protected by Kerberos in this scenario ? Tag: spyware outcome Tag: 63839
  - 18
    - enhancemysearch browser hijack? I have a friend how has a Windows Media Edition XP. He goes to use the Internet and gets pop-ups until IE fails. All the sites say enhancemysearch.com. I have ran 3 different virus scans I have ran 3 different "spyware" fixing tools Can someone help me please? Thank you, Craig Tag: spyware outcome Tag: 63838
  - 19
    - win2k3 and isa2k vulnerability scan I ran a nessus (free open source vulnerability scanner) scan on my 'public-ip/web server'. It was able to identify the version of ISA and IIS that i was running. It also reported a MS Predictable TCP sequence vulnerability, i dont know if it was referring to Win2k3/IIS 6.0 or ISA2K. The recommendation for the tcp sequence vulnerability was to get a patch from the vendor? It also recommended to use URLSCAN to hide the identity of IIS 6.0? Does anyone know how i can get that patch from MS for the tcp sequence vulnerability, and how to configure urlscan to hide the IIS version im using? Tag: spyware outcome Tag: 63837
  - 20
    - L2TP over IPsec VPN and nat-t I am having problems making a L2TP over IPsec VPN work when the remote client is behind a NAT device. The VPN uses IPsec certificates and this all works good if the remote user is directly connected to the internet (i.e. the machine has a public IP address assigned), but as soon as the computer is behind a device and receives a private IP address, the VPN tunnel times out. (The IPsec creates successfully, but the L2TP connection fails...error 682). These remote clients are connecting a Netscreen 25 for their VPN tunnels. This device supports nat-t. The L2TP connections for this device only work in "transport mode". One other thing, this process works just fine if I have the remote clients connect just using an L2TP tunnel (no IPsec). Then there seems to be no problem with NAT and the remote clients. I have tested this VPN setup using windows 2000, windows XP pro, and windows XP home edition. All three OSs respond the same. I am wondering if there is some type of setting I need to modify in windows that will allow IPsec to function in "transport mode" or at least apply nat-t to the L2TP connection. Thanks in advance, Adam Tag: spyware outcome Tag: 63823
  - 21
    - PKI I don't know if this is the right forum to post this qestion, but I couldn't find a specific PKI Newsgroup...so here goes. To make a long post short, we have deployed a enterprise sub ca server that is issuing certificates to our test clients. Our application develpor created logic that connects to the certificate database when a user enrolls for a certificate to see if a certificate has been issued for this particular user. It seems that after 20 connections to the certificate database, you get the following error message: "Server was unable to process request. And attempt was made to open a Certification Authority database session, but there are already too many active sessions. The server may need to be configured to allow additional sessions." After about 1 minute, you can make valid connection attempts again. Does anyone know of a concurrent connection limitation when connecting to a certificate database? If so, is there a way you can expand this connection limit? I can't seem to find anything on the web that lists anything about his issue for PKI is not as well documented as most of the technologies out there. Thanks! Tag: spyware outcome Tag: 63822
  - 22
    - Local Area Quarantine System Hello All, I am looking for a system that would quarantine users, run some sort of checking rountine before allowing them full access to internal systems. The Network Quarantine Control in RRAS does this for remote VPN connections but I am looking for an internal network system. Does Microsoft have this functionality for internal AD logon authentication? Tag: spyware outcome Tag: 63821
  - 23
    - Password must meet complexity requirements on Domain Controllers Hi there, Can anyone help me to retrieve the value of â??Password must meet complexity requirementsâ?? on Domain Controllers? The location for this setting is: Start->Program->Administrative Tools->Local Security Policy-> Security Settings->Account Policies-> Password Policy->Password must meet complexity requirements. This has two settings â??Local Settingsâ?? and â??Effective Settingsâ??. The â??Effective Settingsâ?? has higher priority then â??Local Settingsâ??. One can enable the â??Effective settingsâ?? by following the path: Start->Program->Administrative Tools->Domain Security Policy-> Windows Settings->Security Settings->Account Policies-> Password Policy->Password must meet complexity requirements. I need to retrieve the value of â??Password must meet complexity requirementsâ?? for both â??Local Settingsâ?? and â??Effective settingsâ??. Any help in this regard would be appreciated. Thanks. Suchitra Gupta. Tag: spyware outcome Tag: 63818
  - 24
    - MS04-038 cumulative patch for IE5.5 SP2 on WinNT4.0 server ? The MS04-038 mentioned that WinNT4 SP6a will be affected and when i ran the hfnetchk on my system, it had requested for the cumulative updates. But the problem is i cou'lnd find the cumulative updates release by MS for IE5.5 SP2 (WinNT Server) nor one for WinNT server. Is MS going to release the updates later or i have miss out the download someone? Tag: spyware outcome Tag: 63817
  - 25
    - Run As for Internet Protocol How do I open and configure Internet Protocol (TCP/IP) logged on as a regular user? Is there a way to do a â??run asâ?? with administrative privileges to some folder that contains Internet Protocol (TCP/IP)? Tag: spyware outcome Tag: 63808

my computer just messed up a couple of days ago and then as soon as i knew
that it had spyware, i downloaded from AOL the spyware blocking thing but now
is not letting me go into my documents, It says that "an error...bla,bla,bla"
and the thing is that i cannot get rid of the folders that have all the spam,
Why is this happening? Do i need to buy a program? and would my computer
become normal again? what do i need to do in the first place?

Top

Re: spyware outcome by PA

PA
Fri Nov 05 17:27:18 CST 2004

1. Uninstall that AOL spyware blocking crap.

2. See:

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE)

Isaac wrote:
> my computer just messed up a couple of days ago and then as soon as i knew
> that it had spyware, i downloaded from AOL the spyware blocking thing but
> now is not letting me go into my documents, It says that "an
> error...bla,bla,bla" and the thing is that i cannot get rid of the
> folders that have all the spam, Why is this happening? Do i need to buy a
> program? and would my computer become normal again? what do i need to do
> in the first place?

Top