Email Scam
I got an email from fourie1500@indiatimes.com, its an
obvious scam to try to steal my identity. Here is a little
excerpt:
"I want to present you as the owner of the funds so you
can be able to claim them with
the help of my attorney. This is simple.I will like you to
provide immediately your full names and address so that
the Attorney will prepare the
necessary documents which will put you in place as the
beneficiary of the funds."
Who can I report this to so that they can bust these guys?
I did a who is search on the domain name and it came back
with this:
Registrant:
Bennett Coleman & Co Ltd (INDIATIMES-DOM)
Times House, 7 Bahadur Shah Zafar Marg
New Delhi, Delhi 110002
IN
Domain Name: INDIATIMES.COM
Administrative Contact, Technical Contact:
Gulati, Raman (20797214I) raman.gulati@TIMESGROUP.COM
Bennett, Coleman & Co. Ltd.
Times House, 7 Bahadurshah Zafar Marg
Delhi
110002
New Delhi, New Delhi 110002
IN
91-11-23492134 fax: 91-11-23492077 Tag: w32.Mydoom.f@mm Tag: 47207
Security update packages
Where do I go to get a complete package of security
updates (for XP)that I can install prior to connecting to
the internet. This is for an upgraded PC and M/B. Tag: w32.Mydoom.f@mm Tag: 47206
update reminder "spam" emails
Microsoft sends me upwards of 10 emails a day, and has
done for ages, telling me to install the Feb 2004 critical
patch update. I did that, but the emails keep coming.
How do I tell Microsoft to stop clogging up my inbox?
Many thanks
Haze Tag: w32.Mydoom.f@mm Tag: 47199
Windows ME Login bypass
Is it possible to force Windows ME to use a Username and
Password to log in so that you cannot get to the desktop
simply by pressing "Cancel" and bypassing the login
prompt? Tag: w32.Mydoom.f@mm Tag: 47198
Suspicious instances of NOTEPAD.EXE running. Hmmm.
Hi
I have been having a hellish couple of days attempting to clean my computer of all the (expletive deleted) that my brother has succeeded in installing (adware, spyware, malware...) but I am encountering a recurring problem: Norton Antivirus refuses to run Autoprotect and quits if I try to run a scan or LiveUpdate. Also, something is triggering the execution of NOTEPAD.EXE constantly, but it only shows up in the Process window, not as a notepad window. Although I have succeeded in briefly halting this irritating state of events, it soon reverts to the old way. I ran a full scan in NAV when I got it running - it came up clean. But this morning, the problem has returned
I have run AdAware, Spybot Search and Destroy and HijackThis! to look for any suspicious stuff, deleted a load and it still won't fix it
HELP ME! Please! Tag: w32.Mydoom.f@mm Tag: 47191
Why would Outlook remove ALL of my attachments?
Does anyone understand why ALL of my attachments from e-
mail received in the past have been removed? At the top
of each e-mail that used to have an attachment, now I get
a little message that says "OE removed the following
unsafe attachments in your mail." But they weren't unsafe
attachments, and I need to retrieve them. Any ideas on
what caused this and how to remedy it? Tag: w32.Mydoom.f@mm Tag: 47186
KB828028
Ive been trying to install the KB828028 for the past few
weeksm and for some reason it isn't installing. It is
like the installer just quits. Does anyone have any
answers on how I can install the patch? Tag: w32.Mydoom.f@mm Tag: 47183
hotmail theft
I am having bunch of returned mail at hotmail. I am not
sending these emails to begin with . I have changed my
password and am still getting these returned emails.
Someone has obviously stolen my id and password. I have
not given it to anyone so what is the best action to
take? Tag: w32.Mydoom.f@mm Tag: 47181
HTML Trojan
I found a chinese site
http://wenjinshan.wx-e.com/index2.htm
Send html mail to another people. His windows will auto execute your Trojan
even if SP4 or higher. You can get sourcecode for only 600$.
Is it true? It is terrible! Can microsoft fix this bug? Tag: w32.Mydoom.f@mm Tag: 47180
need help in virus scanning
Hi all. My ISP offers pop3 (or whatever its called)-But I hardly use the
email account I have with them to access email. The email address that is
linked to this account is on our web page. But I have not given that out to
anyone. I have a yahoo address that I have on the business card if anyone
wants to email us something.
Anyways, I got an email in outlook express with this ISP address from
someone else who has the same ISP address. I am afraid to open it.It has a
paper clip next to it so I assume it is an attatchment. I right clicked on
the properties and it is 36k in size. I did not open it but saved it to my
desk top and rt-clicked on it to scan with avg. Nothing was found. Then I
scanned it with an expired norton 2002 and nothing was found. Am I doing the
right thing by scanning it this way and is it accurate and safe to open it
since the results came back negative. Of course I updated my AVG prior to
scanning. is ther an easier way to scan email prior to opening them. should
i open this one? please help Tag: w32.Mydoom.f@mm Tag: 47176
New windows browser
Hi does any one know what the name of the company is that
microsoft is using to deploy new anti theft security for
its new browsers? Tag: w32.Mydoom.f@mm Tag: 47173
IE Content Advisor Password
Help!! I can't remember the password and I can't
remember what the hint means. It's been a long time since
I've had to use the advisor. Any suggestions??! Tag: w32.Mydoom.f@mm Tag: 47169
Server Room Motion Detector
Does anyone know of a good wall mounted motion detector
for server rooms that also has temperature, humidity,
etc... sensors? I've done some looking and found a
company called NetBotz that makes several models. Is
anyone familiar with them or know of any other good
solutions to what I'm looking for? Any suggestions are
greatly appreciated.
Thanks Tag: w32.Mydoom.f@mm Tag: 47153
GatesSpeak by the bucket load
Remarks by Bill Gates, Chairman and Chief Software Architect,
Microsoft Corporation
RSA Conference 2004
San Francisco, Calif. Feb 24 2004
"Microsoft was founded with a vision that software could do some
amazing things"
"I'm going to give you an update. It's not something that's a
completed work, because not only Microsoft but everybody in this
industry has a lot we need to do before we get to the point where this
is not what stands at the top of the list of what would hold us back"
"We have people who are connecting machines to all these wireless
networks, and the wireless network is trying to be made secure, even
though they're not controlled by a central IT department"
"it's very hard for people to plan fo. Knowing exactly what has to be
done, that's been far too difficult"
" I'm very optimistic about this, even though there are many years of
work ahead of us"
"there is a lot of work done on security by experts who are totally
benign"
"the maturity that we're getting in terms of the systems, the updates,
the methodologies, these are exactly what we need to take care of
these other threat models"
"And so it's the dollar loss that comes in -- that gain level or the
national interest piece -- that we can get to by making sure that none
of these types of people can get in and attack these systems. And so
the learning curve is being driven forward very rapidly by the visible
portion of this activity"
"Now, our approach, of course, has two main buckets: the work we're
doing at the technical level, both on our own and around industry
standards, and then the work we're doing in terms of education and
awareness and working with governmental entities"
"A lot of the dollars are going into those technical buckets. Those
technical buckets are very important, and I'm very optimistic about
them"
"but we'll never get away from the need to have both of these pillars,
to be working with customers, setting up Web sites, setting up
auditing tools that can make things easy for them, and raising the
level of awareness of these issues so that somebody can go through
exactly the steps to secure their systems.
"There are a lot of architectural principles. We talk about
SD-cubed-plus-C; that's secure by design, that's security-aware
features"
"Clearly, there's more to do, but that is one of the metrics that
shows us that we're definitely on the right track"
"the tactics we go through to make sure that all of those things come
together for those systems vary according to the audience"
"If somebody is sending around a mail thing and they're clicking on
executable files"
"The idea that you can look at that machine before it comes onto the
network, see if it's up to date"
"As soon as we got good enough to handle that in an auditable, totally
predictable way, people saw this as the software that would solve that
problem"
"we'll get even the corporate applications to get out there and not
require any privilege escalation to either install that application or
use that application"
"An area of particular innovation is this idea of scanning source code
and finding areas that might be security vulnerabilities, things like
checking the size of the buffer, checking the size of an on-stack data
structure"
"Things come in across the network, using open ports that are there
for benign reasons"
"There are attacks through e-mail attachments and Web downloads"
"I want to talk about spam. Spam is both a nuisance"
"So we're putting out, as an industry proposal this week what we call
caller ID for e-mail. And it's a very specific technical proposal
about how you can make sure that the domain is authentic. We've
actually taken *our* we have some *patents* around this, we're saying
are *royalty* *free*, available for everyone to use, the ones that
relate to the fundamentals of this, and so we're talking with other
ISPs and mail providers, and we believe that by this summer, with the
*right* *agreements*, we can put this in place"
"When I meet with developers, one of the key messages is the
opportunity created by the Web services standard. You've probably seen
the momentum building behind these, the acceptance of XML as the rich
data standard"
"what WS Security does is it creates a protocol-based approach that's
not subject to spoofing or replay attacks"
Windows is certified at what's called EAL level 4, and of all the
popular operating systems, that is the highest level of
certification."
"hardware level things to verify that the operating system you're
running, that nobody's tampered with that"
"making sure that, at the OS level, secrets can be maintained"
"Anyway, the recent advance is that the offline scenario was one that
required innovation on both sides, us working with RSA to understand,
okay, how do you get the information onto the machine so that it still
can be used but used in a secure way when the network is not there and
available"
"Microsoft Research has done so many different things in the security
area I had to pick which one I thought would be very interesting, and
what I picked is a really neat piece of work called the Tamper
Resistant ID Card"
http://www.microsoft.com/billgates/speeches/2004/02-24rsa.asp Tag: w32.Mydoom.f@mm Tag: 47152
home page gets switched
Everytime I go on-line some "thing" I must have picked up
on the net keeps changing my home page to
res://mshp.dll/index.html#10213. No matter how many times
I reset it, it changes it back the next time. I've done a
virus search and spybot too. Nothing. Also anytime I do a
search (usually on Google) that same "thing" throws in
its 2 bits of info. Where is it and how do I get rid of
it???? Please e-mail me if you have any suggestions,
because I'll never find this page again. Many thanks, Paul Tag: w32.Mydoom.f@mm Tag: 47143
How do i remove these popups
This isnt the well known messenger pop ups, but after=20
downloading a program form this website:
"http://www.personaltest.co.uk/?
ref=3D&sw=3Dtest&id=3DWH3_1836003"
thinking i could test my IQ i found out it was some dialer=20
thing at =A310 a min which i quickly went to remove.
Anyway im not one for having a problem with spyware, and i=20
know how to remove every single piece i have come accross=20
but this thing is really a BIG pain and impossible to=20
remove.
Everytime i open internet explorer or go to check my=20
hotmail or AOL email, i get 3 popup pages one is usually=20
that IQ page.. and another=20
is: "http://www.cybertrigger.co.uk/?
ref=3D9999&sw=3Dfree&id=3DWH3_1836003"
and another is some porn page. This constant pop up thing=20
is really a big pain for myself and the family. We have=20
already searched and done every possible virus check, we=20
normally use norton, and we have used Spy Bot search and=20
destroy 1.2, and spywareblaster, hijackthis, spyware=20
remover form bullsetsoft. These program sometimes do show=20
stuff up which i then remove, but they never manage to=20
remove this pop up pages and they keep coming back.
Also there is nothing strange that can be seen on the add=20
remove programs list either.
These website should really be reported for tricking=20
people into to thinking they are getting a benign IQ test=20
and instead getting some advanced worm or something that=20
is impossible to remove.
I hope someone can help me to sort this out, as i have=20
tried everything. Tag: w32.Mydoom.f@mm Tag: 47138
Popup
I had a popup on my machine telling me that there is a
tracking device on my computer. Is this for real or is
it a hoax? If it is real what should I do? Tag: w32.Mydoom.f@mm Tag: 47133
Link 2 Jumpstart ??
Hi experts ,
I am bit confused about how a reverse proxy works and a DMZ . Ca
someone cite an example of reverse proxy/ DMZ or provide a URL link fr
where i can study that. ?
Will appreciate ur help.
Thank
-
techonlin
-----------------------------------------------------------------------
Posted via http://www.mcse.m
-----------------------------------------------------------------------
View this thread: http://www.mcse.ms/message428482.htm Tag: w32.Mydoom.f@mm Tag: 47128
constantly running connection?
I've noticed that my pages have been loading rather
slowly, and even when nothing is loading, there is still a
data exchange going on when I would think that nothing
should be being transfered. If anyone has any idea how to
identify the reason for this and stop it, please let me
know. Tag: w32.Mydoom.f@mm Tag: 47121
Security Assessment
All,
I am trying to build a security related checklist for Outlook to assess
security settings.
Wondering if anyone of you have allready done such a list or can privide
some other information what to assess from a security point of view.
Any input is really appreciated.
Thanks
Stefan Tag: w32.Mydoom.f@mm Tag: 47120
securing ldap
Hello,
First, the scenario: 150 external sites (actaully shops) on ADSL (512k),
collecting their email to an exchange FE server in the dmz, using IMAP. Now,
what I want is some sort of centralised email address list for these stores.
Was thinking about using ldap and pointing it at one of our GCs. Are there
any secutiy issues I should be aware of...? Im sure there are in fact,
anyone care to gimme a hand?
For info, they're windows 98 (yay)
running OE 5 (yay)
Failing everything, should I just forget the imap / ldap route and just make
them use OWA?
Cheers,
Barry Tag: w32.Mydoom.f@mm Tag: 47114
Creating Security Checklist
All,
I am trying to create a security checklist for e-mail clients, especially
for Outlook.
Does anyone has any ideas what should be included in that list??
Any input is appreciated!!
Thanks Stefan Tag: w32.Mydoom.f@mm Tag: 47111
email from Microsoft
I am getting email with sender Microsoft to download
immediately. This has been going into my spam and I have
not opened it yet and need to know if Microsoft sends out
this type of email. Tag: w32.Mydoom.f@mm Tag: 47110
Automatic Updates
Hi all,
Don't know if this is the right place, but here it goes:
811493: Security Update (Windows 2000) keeps getting
downloaded over and over again (on w2k pro and w2k
server). If I install the update, it gets downloaded
again. This happens on systems that connect to my local
SUS server AND to systems that connect directly to the
Update Servers from Microsoft.
Has anyone seen this behaviour before, and better: does
anyone know a fix for that???
Regards,
Danee Tag: w32.Mydoom.f@mm Tag: 47109
Trying to create a security checklist for Outlook Clients
All
I am trying to create a security checklist for Outlook
and other e-mail clients.
What do you think this checklist should include??
All comments are welcome!
Thanks
Stefan Tag: w32.Mydoom.f@mm Tag: 47104
Security problem Mircosoft Mill.edition
When I go onto the net my computer starts up with this
message:
'can't find ///c:/WINDOWS/secure.html'
then I have to manually dial into web ...I'm hopeless with
computers can anyone help. But make it easy for me to
understand what to do!!!please Tag: w32.Mydoom.f@mm Tag: 47101
Searching for something like hfnetchk
Hi,
does someone know a tool similar to hfnetchk or qfecheck that determines
which hotfixes are installed on your system...
Thanks
Tibor Tag: w32.Mydoom.f@mm Tag: 47097
CWShredder v1.5.1
http://www.spywareinfo.com/~merijn/files/cwshredder.zip
Required reading:
http://www.merijn.org/cwschronicles.html
http://www.doxdesk.com/parasite/CoolWebSearch.html
--
siljaline
MS - MVP Windows IE/OE
______________________
(Reply to group, as return address
is invalid - that we may all benefit) Tag: w32.Mydoom.f@mm Tag: 47094
HTTP 500 Internal Server Error
My operating system is Microsoft ME. When I use Explorer,
I can no longer enter secure websites, like my hotmail
inbox, bank account info, and other financial sites. I get
a Message of "HTTP 500 Internal Server Error." This
started all on its own.
I don't have a lot of techno smarts. Can somebody offer
technical help, so this can be fixed?
Thanks Tag: w32.Mydoom.f@mm Tag: 47089
Disabling banners and NDS in Exchange 5.5
Is it possible to change the messages sent for non
delivery and telnet port 25 to hide the identy of an
Exchange Server 5.5?
Thanks Tag: w32.Mydoom.f@mm Tag: 47086
Log File Review
Hi,
Can anyone provide or suggest "Best Practices" or Best Practice Resources
for reviewing the NT Log files. Thanks! Tag: w32.Mydoom.f@mm Tag: 47071
fake emails from microsoft
I keep getting (junk) emails
from "fuelqkpb@newsletters.msn.com," regarding some "ms"
security updates. I get a couple others with similar
subjects - some referring to a network. Strangely, most
of these are 144kb or 156 kb, so I recognize them
quickly. I update antivirus software religiously, scan,
and I've double checked for mydoom - all are okay.
May I assume these emails are bogus? Some have an exe
file attached - I suppose this is trouble?
Thanks. Tag: w32.Mydoom.f@mm Tag: 47068
email virus?
My daughter opened an attached file from an email sender
anasr@ccib.org.lb, sent to her university mail srever on
my computer. The file was an info.zip file, which when
opened said 'file corrupted'. Since then the hard drive on
the computer sounds like it has gone into overdrive. I
have a broadband connection and the data light flashes
continually even when I'm not using the internet. I'm very
concerned that she's opened something horrible. I'm
ashamed to say I have no virus protection. What can I do? Tag: w32.Mydoom.f@mm Tag: 47054
Malicious Scropt
Everytime I open Outlook Express I get a message from
Norton Internet Security that the computer has been halted
due to detection of a "malicious scrpt" running. It
advises me to block it which I do and then it runs OE. Is
there a Malicious Script or is it part of OE. Is there
something to do with OE ot NIS? Tag: w32.Mydoom.f@mm Tag: 47046
Cipher Strength
Can anyone please tell me how I alter my Cipher Strength
as it is at 56 bit at present but for certain Websites it
needs to be at a minimum of 128 bit.
I thank you for your help in this matter.
Ian Tag: w32.Mydoom.f@mm Tag: 47043
To clarify the link for CWShredder Update
This morning I saw that a certain Svyatoslav Pidgorny, MVP, MCSE slammed me
for <quote/> "Distributing viruses, huh?" <end/quote> in response to my post
Subject: New CWShredder update available which was dated Wednesday, February
25, 2004 2:34 AM (MST)
news:eD#UZK4#DHA.2512@TK2MSFTNGP11.phx.gbl
I have not in anyway offered a link that contains a virus, or am in any way
distributing a virus! I demand a retraction and an apology from that person.
Now, you may follow through in a logical and orderly manner through these
links to see that the link I offered is Bona Fide and genuine, if you care
to do so.
Windows Support Center
James A. Eshelman, Proprietor & Webmaster
http://www.aumha.org/
http://www.aumha.org/support.htm
http://www.aumha.org/a/noads.htm
No www. is required for the link I initially offered for CWShredder at the
bottom of this page.
http://aumha.org/a/parasite.php
http://www.aumha.org/a/parasite.htm
This website is about getting help solving computer problems and getting
support for Microsoft products using the Microsoft Communities, or the NNTP
equivalent, newsgroups.
http://www.dts-l.org/
http://www.dts-l.org/gallery.htm
Jim Eshelmans original link :
http://free.freespeech.org/Khephra/
now redirects to:
http://www.aumha.org/
So we have come full circle. I hope this will clarify matters as it appears
that some of you may have been put off by the name of the URL that was
offered. If you're not satisfied with this, I'm sorry, but it's the best I
could do to allay your concerns. If this has done nothing to assuage your
worries, *don't* install the update then. Suit yourselves and you be the
judge.
Again, I expect a full and complete apology from this person Svyatoslav
Pidgorny, who has wrongfully accused me of "distributing viruses".
--
LuckyStrike
LS@smokedamagedfurniture.youcandriveitawaytoday.com
-------------------------------------------------------------------- Tag: w32.Mydoom.f@mm Tag: 47040
O E removing access to attachments
O E is removing all attachments to incoming mail as
being " unsafe " even tho they are known safe files.How
do I remove this filter? Tag: w32.Mydoom.f@mm Tag: 47039
securing IE6 printing
Hi,
In IE6 when you click Page Setup there is a box labelled "Printer...". This
allows a user to browse for shared printers.
We're tryingto secure it so that while they can use existing print shares
they can't browse for more.
Does anyone know how to grey out that box so it's not accessable? We need to
use shares so I can't just turn off the browsing feature.
thanks Tag: w32.Mydoom.f@mm Tag: 47031
Hotbar
I have discovered the Search Engine 'HOTBAR' installed in
my program library. What surprises me is it seems to have
appeared without my knowledge. I surf a lot, mainly on
scientific and news media topics. I have tried uninstal
which seemed to have ran ok and yet some of the
components stubbornly resides in prog library. No matter
what i try, itsimply refuses to go! This particlar web
site , as i understand, passes personal informatn to all
and sundry like a sort of spy spook. Pleas can you
help. Tag: w32.Mydoom.f@mm Tag: 47030
Security Suggestions??
I have a client with a software package and many Access
DB's developed around the package to support additional
functionality. Currently the only security is the SQL
logoin ID for all databases. The client needs to tighten
this down, but doesn't want to invest the time to put
security in all the additional supporting db's. Is there
any packages or such that will provide a level security
greater than they have now and provide user level security
to each database?
Thanks in advance. Tag: w32.Mydoom.f@mm Tag: 47029
New CWShredder update available
latest version is 1.50 available through this alternate link:
http://aumha.org/a/parasite.php
Scroll down to the very bottom of the page and listed as item #3 access the
CWShredder .zip file for version 1.5 from the *Alternate link*, as the
Merijn download site is still DD0S'ed. The Major Geeks site for CWShredder
still has the ~ 1 week old version 1.49 as it's download, so don't bother.
--
LuckyStrike
LS@smokedamagedfurniture.youcandriveitawaytoday.com
-------------------------------------------------------------------- Tag: w32.Mydoom.f@mm Tag: 47018
HELP!!!
i need someone that knows ANYTHING about msn to add me to
their list.........it's VERY IMPORTANT.......PLEASE my e-
mail is tru_godfather@hotmail.com........PLEASE ADD ME
IT'S VERY IMPORTANT Tag: w32.Mydoom.f@mm Tag: 47011
is there a way of disabling usb ports on xp pro
I'm looking for a way of disabling usb ports. While the system is up with
admin privileges, I've noticed someone smuggling data using small usb
storage devices. Any help for a work around?
TIA. Tag: w32.Mydoom.f@mm Tag: 47010
Hello:
jcorn@ytci.com has infected my Outlook Express.
Norton Anti Virus deletes it, but I get no other
e-mail after that. What can I do ?
Bob