pop up windows

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - http://images.only-virgins.com/cgi-bin/warning.cgi Help. The subject item ( CoolWeb Search) is driving me crazy. I have tried everything to remove it from IE BRowser set up : All the more popular Spyware removers, manually deleting, going to the Microsoft website and down loading the particular patch for this. STILL it comes back . How do I really get rid of this monster. Thanks. Tag: pop up windows Tag: 42221
  - 2
    - Parental supervision Can anyone help me with monitoring web sites that have been visited by my computer. Im using WindowsXP. In earlier versions i could go to C://windows/temporary internet and view a list of all sites visited. Can't seem to do this with XP. Any ideas? Tag: pop up windows Tag: 42216
  - 3
    - Norton Internet Security 2003 // switched off and could not be turned on again Hi, I got the following behaviour which might stem from an attack or (which I think is more likely) from a malfunction of Internet Security 2003 The symptoms .. * first I noticed that I could not connect to any https:// site * then I noticed that the Virus Scanner and the Firewall were switched off * then I tried to switch them on again but I was blocked by the password feature to do so If an attacker would have done such a thing, then this would look the hell like an attack - but I'm behind two firewalls and therefore the machine is not very likely to get victim to port scans - email attacks would be most likely for such a pattern - but I've seen no actual worm in the alerts that has such a behavior and I tend to erase any unknown emails, do not use outlook and the like ... Anybody seen something similar? Thanks Wolfgang Tag: pop up windows Tag: 42215
  - 4
    - Popups and more problems Sometimes my Internet explorer will begin to have problems. 1. I get multiple popups all the time 2. When surfing sometimes my text size changes when I scroll my mouse wheel 3. All of the words on a webpage will automatically be highlighted/selected and I can't click on anything 4. My scroll wheel on my mouse will make me back up a webpage 5. It takes a really long time to open excel programs I have paid for max.netshield and use several spyware removal programs and I still have problems. Here is a copy of my hijackthis log: Logfile of HijackThis v1.97.7 Scan saved at 8:06:36 PM, on 12/19/2003 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe C:\PROGRA~1\NORTON~1\navapw32.exe C:\WINDOWS\System32\devldr32.exe C:\WINDOWS\System32\Jyd2.exe C:\WINDOWS\System32\Fcf0LIcq.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\ntvdm.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\JASONT~1\LOCALS~1\Temp\Rar$EX00.757\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ R3 - Default URLSearchHook is missing O2 - BHO: (no name) - {41353F8B-78CE-48A5-BE44-153ED293D192} - C:\PROGRA~1\POPUPP~1\PopLib.dll O3 - Toolbar: (no name) - {C2FEAAB7-DF19-40AD-B6D7-9D24C92F997E} - (no file) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [4AJ9@7T2A#54KW] C:\WINDOWS\System32\QzygH.exe O4 - HKLM\..\Run: [3PDQ3EH35@N@QY] C:\WINDOWS\System32\HuoTdA.exe O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe O4 - HKLM\..\Run: [SpyHunter] C:\Program Files\SpyHunter\SpyHunter.exe O4 - HKCU\..\Run: [SpyBan] "C:\Program Files\SpyBan\SpyBan.exe" /s O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: PopupPopper Control Panel (HKLM) O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://support.gateway.com/support/profiler/PCPitStop.CAB O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://tinyurl.com/2yrx2 O16 - DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} (MSSecurityAdvisor Class) - http://tinyurl.com/2uwt3 O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab O16 - DPF: {9A57B18E-2F5D-11D5-8997-00104BD12D94} (compid Class) - http://support.gateway.com/support/serialharvest/gwCID.CAB O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://tinyurl.com/2gdej Anyone have any suggestions? Thanks. JThrasher11 ------------------------------------------------------------------------ Posted via http://www.mcse.ms ------------------------------------------------------------------------ View this thread: http://www.mcse.ms/message200739.html Tag: pop up windows Tag: 42211
  - 5
    - Kazza/Perfect Nav It appears that Kazza has struck an agreement with an internet company called "Perfect Nav" (www.perfectnav.com). When you download the New update this program installs itself onto your computer as well as othe programs like GAIN Advertising. It messes about with your Internet Explorer and stops you accessing secure sites like your Hotmail email address. To stop this please follow these instructions 1. Uninstall Kazza using the Add/Remove Programs on the Control Pannel 2. Follow these steps, Click Start, and then click Run In the Open box, type "cmd" after the intial text, and then click OK At the command prompt, type the following lines and press ENTER after each line regsvr32 softpub.dll <----Note The Space between 32 and the next letter that MUST be entered in just as it reads line for line, one at a time Click OK when you receive the message that DllRegisterServer in FileName succeeded after each line regsvr32 wintrust.dll regsvr32 initpki.dl regsvr32 dssenh.dll regsvr32 rsaenh.dll regsvr32 gpkcsp.dl regsvr32 sccbase.dl regsvr32 slbcsp.dll regsvr32 cryptdlg.dl When Finished: Type exit to quit Command Prompt Then you should be able to access secure web sites Tag: pop up windows Tag: 42209
  - 6
    - Virus detected When running my virus scanner this evening it found the following problem. "BAT.Trojan.FormatCQ.E" Located along the following path: C:\Program files\microsoft visual studio\msdn98\98vs\1033\kb.chm=>/source. I cannot locate any file kb.chm. I can however find the file kb.chi I have tried several search engines and cannot find anything on this problem? Is this something I should worry about? Tag: pop up windows Tag: 42207
  - 7
    - Desktop password security? Win98 Does Windows 98 have a security feature that allows the user to set a password so unwanted users cannot access their desktop, files, applications, etc.?? Tag: pop up windows Tag: 42206
  - 8
    - bogus? patch! I received this in the email, -----Original Message----- From: Microsoft [mailto:security@microsoft.com] Sent: Friday, December 19, 2003 2:19 AM To: brenda@asresources.net Subject: Use this patch immediately ! Dear friend , use this Internet Explorer patch now! There are dangerous virus in the Internet now! More than 500.000 already infected! Return-Path: <admin@duma.gov.ru> Received: from inbound-mx14.atl.registeredsite.com ([64.224.219.111]) by imta04a2.registeredsite.com with ESMTP id <20031219171926.ZXDX5131.imta04a2.registeredsite.com@inboun d-mx14.atl.registeredsite.com> for <brenda@asresources.net>; Fri, 19 Dec 2003 12:19:26 -0500 Received: from rly-ip05.mx.aol.com (rly-ip05.mx.aol.com [64.12.138.9]) by inbound-mx14.atl.registeredsite.com (8.12.8/8.12.8) with ESMTP id hBJIIlwi017836 for <brenda@asresources.net>; Fri, 19 Dec 2003 13:18:47 -0500 Received: from logs-ta.proxy.aol.com (logs- ta.proxy.aol.com [152.163.240.15]) by rly-ip05.mx.aol.com (v95.1) with ESMTP id RELAYIN3-43fe2a734292; Fri, 19 Dec 2003 02:22:28 1900 Received: from localhost (ACCA142E.ipt.aol.com [172.202.20.46]) by logs-ta.proxy.aol.com (8.12.10/8.12.10) with SMTP id hBJ7Iqlp213909 for <brenda@asresources.net>; Fri, 19 Dec 2003 07:18:53 GMT Date: Fri, 19 Dec 2003 07:18:52 GMT Message-Id: <200312190718.hBJ7Iqlp213909@logs- ta.proxy.aol.com> From: "Microsoft" <security@microsoft.com> To: <brenda@asresources.net> Subject: Use this patch immediately ! MIME-Version: 1.0 Content-Type: multipart/mixed;boundary="xxxx" X-Apparently-From: ERR_USER_NULL X-AOL-IP: 152.163.240.15 Brenda Mitchell A&S Resources Staffing, Inc. A Professional Staffing Company Phone: 770-469-1858 Email: brenda@asresources.net Email: info@asresources.net Web Site: http://www.asresources.net "Uniting People and Careers" A Member of The Georgia Association of Personnel Services - GAPS A Sponsor and Participant for The American Stroke Association - Marathon "Do not let what you cannot do interfere with what you can do." --John Wooden This email and any files transmitted with it are onfidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the originator of the message. Tag: pop up windows Tag: 42203
  - 9
    - security update my updater keeps telling me to update security 823559 over and over i have installed it several times before i relized it was the same patch my history says sucessful install each time I downloaded it. Well my updater is saying I need it again! Anyone know what the problem is Thanks. Tag: pop up windows Tag: 42201
  - 10
    - Mkaing the daministrators foldres private If someone wants to password / make private individual folders "make private" grey) on XP pro. but the help section states they cant becuase ".... do not convert drive C to NTFS if you dual-boot Microsoft Windows 95, Microsoft Windows 98, or Microsoft Windows Millennium Edition (Me) on the same computer, and do not convert other drives to NTFS I am using windows xp and do now want other users on the computer to view my folders. The little grey box can not be ticked. Is there a way to over come this problem? Any help would be much appreciatied Cheers Marie Tag: pop up windows Tag: 42198
  - 11
    - creating passwords for folders someone wants to password / make private individual folders ("make private" grey) on XP pro. but the help section states they cant becuase ".... do not convert drive C to NTFS if you dual-boot Microsoft Windows 95, Microsoft Windows 98, or Microsoft Windows Millennium Edition (Me) on the same computer, and do not convert other drives to NTFS if you dual-boot Windows 95, Windows 98, or Windows Me on the same computer .....". i also read that moving the folder " If you want to make a file in a private folder available to others, move it to the Shared Documents, Shared Pictures, or Shared Music folder. " can the folder then be moved back to the orginal folder?? is here anyway single folders can be "made private" that use fat 32/ dual boot / ME & xp pro?? please pass his on to the correct department if this isnt it and have them email me with any info ajlyca@netscape.net thanks for any help arthur Tag: pop up windows Tag: 42196
  - 12
    - Screen Saver Lockout through group policy To all, Does any one know of a group policy setting that forces a users screen saver to lock after a certain amount of time of inactivity? Also is there a group policy setting that will force a user to log off after a certain amount of time of inactivity? Thanks Tag: pop up windows Tag: 42189
  - 13
    - How to close possibility of operation offline OLAP in Excel How to close possibility of operation offline OLAP in Excel. Excel 2003 So I want to increase security the data. That users might not transmit the data for limits of the company. Tag: pop up windows Tag: 42185
  - 14
    - Encryption Hi all, I need to encrypt my passwords which can be sent on the internet, or through our client applications. What are the tools etc can I use. Should I use MD5 hash, MS Crypto APIs. Can somebody provide links, some usefull sites, information where I can some test scripts etc. Thanks before hand. Regards Ravi Tag: pop up windows Tag: 42182
  - 15
    - outlook express attachments Does anyone know how to stop Outlook Express from 'blocking access to attachments' that come through with emails. Its blocking attachments it thinks are unsafe but which in fact are important documents I need to read!!! Thank you Tag: pop up windows Tag: 42179
  - 16
    - Watchguard Firewall and PPTP I am trying to use microsoft's vpn connection to connect to a VPN ready watchguard firewall. I can get connected; however, I cannot use any resourses (such as mapping a drive or connecting to the exchange server). Does anyone have any experience that they could offer? Thanks, John w Tag: pop up windows Tag: 42177
  - 17
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.12.19 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: pop up windows Tag: 42174
  - 18
    - Hijacked by My Own System Restore Hijacked by my own System Restore. Oh no! What am I gonna do? I'm no network administrator and all these fantastic companies with whom I do business provide such an excellent level of support! I've been told: Oh what harm is it really doing. To lets complete another debug sequence to have you turned off system restore. I swear to The Good Lord Above. Network Associates Tech support asked me that question a total of over one hundred times.Thank You Network Associates?!?!? Your product is disabled by this worm (comes in as a windows update) Undetected by your virus shield and Whats more it removes a vso.dll from the virus shield online. So not only does it disable Privacy Service it turns off Virus Shield. Then it dumps and recreates more junk across your startup and your boot.ini. I'm pretty sure I've got N(xxx).exe/install. There is no info at all on this deal. I looked through 1000's of pages. CVS 6 months to add definition., tech outdated, I'm all alone. This was the most pervasive virus in the history of buggers. I'm not sure if it was the virus or Bill Gates' wonderful XP product; but this thing was able to allocate itself along with Dos when a complete debug sequence and repartition are completed. It HiJacks System Restore. It Locks you out from turning the settings down...No Toggle enabled. You can not reach the Commands screen to toggle System Restore. And access denied on The Sys Config. You can see it as file when you toggle show hidden files under folder options (you know remove manually) Access Denied. Try to run a .dat engine from Dos..Well the bright guys over there at Microsoft and their support and peripheral companies have decided to allocate the Service packs and the updated patches their own restore points and this deal hides with them! (Bill! whats up with all that computer lingo about turning off WMP and Network and NetMeeting privacy features and network views?) I know I read every file on my computer. What happens on my side of the wall at the ether net cable into MY COMPUTER IS MY BUSINESS!!! I know all about these hotfixs after attempting sfc /scanboot and receiving error insert XP pro with sp2 (I only have sp1. thanks again Bill!!) Thanks for the great support. I knew there was a reason I am sitting on 1000's of dollars worth of Microsoft products. WOW! I had no idea how to execute one of these commands or searches but over the last 5 days 12-16 hours a day I have learned quite a bit. People do not count on these huge conglomerates to whom we pay sickeningly inflated sums of money to help you when the chips are down.because they have moved all their tech support to Pakistan (God forbid this is not ethnocentric the Pakistani people with whom I spoke were the most polite and considerate people in the world.One woman in particular was such a good little employee.She wanted so much to promote herself as the representative for an Oh Great and Powerful Oz...opps Dell.I felt glad that I was able to promote the economy of that Semi Peripheral country..for like 2 minutes) Lets face it she was so out of her league it was a joke. (Certainly not her fault but a training issue.And why would huge Empire trying to cut cost invest in extra training?) I finally found this sucker after much reading and then by clicking on and off power to frieze up boot sequence I was able to get into msconfig and then System Registry. I had to read through and try and elucidate what each one of theses files were. I finally found it like 15 minutes ago. I can't open it and I don't know what to do with it yet..I will by tomorrow. HUGHE COPORATE GIANTS!!!!! HERE BY TAKE NOTE JOE CONSUMER IS STANDING UP!!!!! HE SAYS ENOUGH IS ENOUGH!!!!! YOU WILL BE HELD ACCOUNTABLE: NO MORE INEFFECTIVE PRODUCTS & SUPPORT!!!! One01percenteven@aol.com Tag: pop up windows Tag: 42173
  - 19
    - Is it possible to secure private objects with hierarchical relationship taking, hierarchy into account? Hi, everybody I have some private objects which I would like to secure. These objects have some hierarchical relationship similar to those found in the file system and registry. Is it possible to use standard mechanisms for inheriting access rights from parent object, propagation etc. in case of private objects? If yes, where can I possibly find some examples of proper way of doing this kind of things? I'm using CreatePrivateObjectSecurity, SetPrivateObjectSecurity, GetPrivateObjectSecurity functions to get/set private object's security and they are working fine on each particular object, however I'm not sure whether I can use them to define hierarchical inheritance of rights in the same way in which files can inherit some rights from their folders which in turn inherited them from their parent folders etc. Ability to inherit rights and to define the hierarchy for this inheritance is the key point for me and I will appreciate very much if you can give any ideas on this matter. I'm sure that this is quite a common task and will be surprised if there is no appropriate support for this kind of things in Windows Thanks in advance, Antonio Tag: pop up windows Tag: 42171
  - 20
    - Pornography I have graphic pornography on my home pages (most frequently exits.cash). I have tried everything from adware to stopzilla to get rid of it but I can't. Can you please suggest or recomend something. Many thanks Tag: pop up windows Tag: 42170
  - 21
    - content advisor password i have forgoten the password on my content advisor how can i disable it without formating my system...please get back to me at my email addy as soon as possible using this subject line so i will open your reply thank you any help desperatly appreciated normariggsby@hotmail.com Tag: pop up windows Tag: 42169
  - 22
    - Programmatically Wake PC Hi, I was just wondering if anyone knows how to programmatically wake a PC with VB6 or .NET? I'm not sure if it is even possible, but any guidance on this will be greatly appreciated. Thanks Vyyk Tag: pop up windows Tag: 42168
  - 23
    - How to modify the expiration period of a digital certificate How can i to modify the espiration period of a digital certificate that my internal certification authority (Windows 2000 Server) should iussue? Thanks. Tag: pop up windows Tag: 42166
  - 24
    - DNS Security Why should I not allow all my workstaions to query DNS directly on the internet and why should only the DNS servers be able to access external DNS queries through the firewall Tag: pop up windows Tag: 42165
  - 25
    - Unwanted Favorites Sites A persistent program (which neither AdAware nor SpyBot has been able to detect or remove) keeps adding the same few sites to my Favorites every once in a while. Shortcuts matching these sites also sometimes turn up in c: (no directory) or in C:\WINDOWS\system32\config\systemprofile\Favorites I've run HijackThis, but I'm not enough of an expert to tell what is or isn't spyware. Any tips? Here's the HijackThis log (all the Trusted Zones are mine): Logfile of HijackThis v1.97.7 Scan saved at 5:07:08 PM, on 12/18/2003 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\atiptaxx.exe C:\Program Files\Compaq\EAB\EabServr.exe C:\Program Files\BroadJump\Client Foundation\CFD.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe C:\WINDOWS\System32\GEARSEC.EXE c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\iPod\bin\iPodService.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\WINDOWS\explorer.exe C:\PROGRA~1\MICROS~3\Office\OUTLOOK.EXE C:\Program Files\Outlook Express\msimn.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Craig T\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.mail.lycos.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/customize/yessentials_cq/defaults/sb/*http://www.yahoo.com/search/ie.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=1c02&lc=0409 R3 - URLSearchHook: (no name) - {6CC1C918-AE8B-4373-A5B4-28BA1851E39A} - (no file) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SafeGuard Popup Blocker - {B824E7B0-E8E3-4D75-895E-2C309EA4CC5D} - C:\Program Files\SafeGuard Popup Blocker Pro\SGPopupBlocker.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\Compaq\EAB\EabServr.exe /Start O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Cpqset] c:\compaq\cpqsetup\cpqset.exe O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe" O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe O4 - HKCU\..\Run: [MoneyAgent] "c:\Program Files\Microsoft Money\System\Money Express.exe" O4 - HKCU\..\Run: [cnet] "C:\Program Files\Kontiki\bin\kontiki.exe" -s cnet -q O4 - HKCU\..\Run: [SpyKiller] C:\Program Files\SpyKiller\spykiller.exe /startup O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? O9 - Extra button: Real.com (HKLM) O9 - Extra 'Tools' menuitem: Popup Blocker Options (HKLM) O9 - Extra button: MoneySide (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O9 - Extra button: Advisor (HKCU) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storer edir2.dll?s=consumerfav&c=1c02&lc=0409 O15 - Trusted Zone: http://polls.cnn.com O15 - Trusted Zone: http://www.cnn.com O15 - Trusted Zone: http://www.cruisecritic.com O15 - Trusted Zone: http://espn.go.com O15 - Trusted Zone: http://sports.espn.go.com O15 - Trusted Zone: http://lw9fd.law9.hotmail.msn.com O15 - Trusted Zone: http://loginnet.passport.com O15 - Trusted Zone: http://login.passport.net O15 - Trusted Zone: http://www.telus.com O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,5,0,4307/mcfscan.cab O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab Tag: pop up windows Tag: 42160
- Next
  - 1
    - WEB Attacks I am setting up ISA server for our local network. If I, only, allowed outgoing request, should I be concerned that someone could steal files or packets of data that travel internally or somebody could destroy the installation? If it is the later, then I would mind a lot less. If it means that somebody could steal the data, would DMZ setup resolve this problem? I guess the question is: eventhough it is possible, is it being done today? If it is being done today, is there a solution? Thanks in advance Tag: pop up windows Tag: 42155
  - 2
    - Spy ware I think I have spyware on my computer, I have XP. What can I do to detect and delete it? Thanks! Tag: pop up windows Tag: 42151
  - 3
    - Password Protection for Notepad We frequently need to use Notepad to store sensitive data for sending to others. We use Notepad as it leaves the data in its original format whereas WORD imposes formatting. I don't see how to password protect the Notepad file. We use encryption but would also like to use a password. If I can't password protect Notepad files can you refer me to another product that is generic like Notepad (no special formatting goin on) that I can password protect? Tag: pop up windows Tag: 42149
  - 4
    - Converting to AD Can someone tell me where to find information to back my opinion. My company is converting from Windows NT 4.0 to Windows 2000 and Active Directory. I am telling them that the Data Security Unit needs to play a key role in this convertion. Can anyone help??? Tag: pop up windows Tag: 42147
  - 5
    - windows update stops I am able to load the Windows update website; I ask the site to scan my computer so the current setup can be checked...scan reaches 66% then update site freezes; can't find exact reference to my problem in Microsoft Knowledge Base. Tag: pop up windows Tag: 42146
  - 6
    - internet eMail security breach message I received an unsolicited eMail from: ebnkdq@bulletin.com with title: Newest Internet Critical Update that looks like a web page from Microsoft. It says to install attached security patch to outlook, outlook express & Internet explorer. The attahced file is named: resultado_escaneo_Q313372.exe.txt I believe this to be a trojan. Please pass onto Microsoft for verification & security alert, if neeeded. John Tag: pop up windows Tag: 42144
  - 7
    - Cleaning a Hard Drive I just recieved a new computer and I would like to donate my old computer. Before I donate my old computer I would like to make sure there is no personnal information left on the hard drive. I have heard that I should format my old hard drive then there are programs to be ran which will over-wright the old information which still exist on the hard drive just marked as deleted. I hope that makes some sense. Can anyone tell me if I'm on the right track to do what I want to do and what the name of these type of programs are? Tag: pop up windows Tag: 42140
  - 8
    - Installing backup exec (8.6.3308) after hardening w2k / IIS / MSSQL Server After following both microsofts advice and those that can be found in the O'Reilly book "Securing Windows NT/2000 Servers for the Internet", I found out that the server went into production without running backup exec, we are currently running the backup that follows with 2k, but I would much preffer the added functionality of BE. The problem is that so far, I have failed to install the software, I get all manners of different errors(or none at all, the installation just never starts) Long story short, I have a production box running without sufficient backup, for a smooth restore. I realize that I might be too late, to salvage this box, but hoped the expertise here might be able to help me. I might be missing the obvious as I have little experience in running w2k(or any windows box) as a webserver. When I try to run the installation from the cd, it fails without any error, just never starts. If I try to run the specific setup.exe from the cd(or a copied over version), it tells me it is not a valid w32 application. If I try from remove / add programs, it tells me: "Access to the specified device, path or file was denied" When I click ok to that, I get: "Windows could not run the installation program. You may be out of memory. Close some files or programs, and try again" Which I expect is just windows way of telling me it doesn't really know what goes wrong ;o) running the setup from command line(silent setup), doesn't even create the appropiate log file, which kinda strengthens my idea that it never initiated the install procedure... Any ideas/suggestions/help would be much appreciated Sincerely Dan A Tag: pop up windows Tag: 42133
  - 9
    - Event ID 534 Has anyone seen this event on an XP station. I have seen it before but it would always have a username, domain, and workstation name... not sure how to trace it without any of the above. Thank you! Logon Failure: Reason: The user has not been granted the requested logon type at this machine User Name: Domain: Logon Type: 3 Logon Process: Kerberos Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Workstation Name: - Tag: pop up windows Tag: 42131
  - 10
    - SUS Server + Exchange 2003 on Windows 2003 Too many services have too many issues on the same box. When I installed SUS on my homegrown, everything was alright for about 2-3 months. Then, all of a sudden, after a while, the webadministration for SUS dies. However, I can still tell that the service still works. For example. SUS is configured to automatically deploy fixes that were previously approved. Not being able to approve new fixes, a month or so ago, I recovered new fixes from the SUS server. WTF. How can I get the web interface back. I've tried uninstalling and reinstalling the services. I think there is something wrong with the ACL on the directory to where it installs and haven't been able to figure it out for the life of me. Help the Securely Waning, Christopher Beasley Tag: pop up windows Tag: 42129
  - 11
    - virus? my dial-up connection pop up spontanously and begines to dial up every one minutes what is the problem thanks Tag: pop up windows Tag: 42128
  - 12
    - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.12.18 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: pop up windows Tag: 42126
  - 13
    - Exchange 5.5 Security Hi We run exchange 5.5 and I am interested in the NTFS security on these directoires that are shared on our exchange server: Add-ins Address Resources Tracking.log Firstly what are these directories used for and secondly the NTFS permissions on these shares are all Everone Full control. What could we set these permissions to make them more restrictive but without stopping exchange from functioning? Thanks in advance. Tag: pop up windows Tag: 42124
  - 14
    - print post to file When you print a post to file instead of to the printer, what do you use to read it? Tag: pop up windows Tag: 42119
  - 15
    - Password How do I reset my Outlook Express password if I don't know what my current password is? Tag: pop up windows Tag: 42116
  - 16
    - 3DES encryption and unable to browse https sites! I chose to take advantage of the best encryption offered by XP Pro by enabling 3DES encryption. Nasty side effect: whenever I try to access a secure website, I receive "The page cannot be displayed". As soon as I disable 3DES, accessing secure websites works fine. Anybody have any input on this (other than "why use 3DES" or "don't use 3DES!) Thanks- Samir Tag: pop up windows Tag: 42113
  - 17
    - mslaugh.exe , system ..... Can anyone explain me what this application is used for and what does it do? mslaugh.exe - it is transmiting some data or just opens a port all the time. the port is 135. The remote adress is 66.11.143.*** Then a process name "system" transmits Remote Procedure Call (TCP) through random ports, but to an ip: 81.36.**.*** Then "NetBIOS" (UDP) transmits something called NetBIOS Traffic through random ports also. Then what is ICMP Traffic for Echo Request? Thanks Tag: pop up windows Tag: 42108
  - 18
    - Under a rock Thanks for you "witty" reply.... NO... I haven't been under a rock... I KNOW this is OLD news. I wanted to advise everyone that it is STILL going on in increasing numbers. Have a nice day :-) Tag: pop up windows Tag: 42103
  - 19
    - Viewing .jpg - Download Warning Up until yesterday, no problem viewing jpg's or mpg's. After using Photosuite to print some digital pix, when I click on jpg now, I get a warning about downloading files but then can click open. But the checkbox to always allow is grayed out. Suggestions? Tag: pop up windows Tag: 42102
  - 20
    - Fake Microsoft Update Email Boy, talk about guts! After posting a question on the Newsgroup for PowerPoint on Monday and posting my email address to boot, I was bombarded with four Emails (and maybe even seven) that all had the "LOOK" of an official Microsoft Email / Website. They all told me that the attachment in the Email was the latest patch / update / fix to whatever (Outlook, Explorer, Windows, etc.). Fortunately, my ISP's virus software caught the W32.Swen.A@mm worm in each attachment sent, before my virus software even had a chance to get it. So, look out everyone - tis the season to wreak havoc among us all. And they are checking the newsgroup postings to find their victims. Dave D Tag: pop up windows Tag: 42100
  - 21
    - Turn off WindowsXP firewall? When I open the Control Panel, Internet Connections, right click on the connection and select Properties, nothing happens. Also tried selecting the conection and then in the left pane click on "Change Settings" and still nothing happens. David Tag: pop up windows Tag: 42094
  - 22
    - content advisor i forgot my password for content advisor and dont know how to retrieve it. please advise Tag: pop up windows Tag: 42089
  - 23
    - When will December's updates be released????? Anybody have any clue as to when MS will release the December patch updates? I know IE has a serious exploit with no patch. I have a room full of servers that are curious. Thanks Ron Tag: pop up windows Tag: 42085
  - 24
    - unable to access secure sites Why can't I access them, it was fine a few days ago and now I can't check me email(hotmail) and can't buy anything. Can anyone help???? Tag: pop up windows Tag: 42084
  - 25
    - i wanna know my password???????? my e-mail is::::::::: slipknot_20f@hotmail.com ..this is my email where i have serious troubles to sign=20 in.. please my secret question has been changed..so i can=B4t=20 enter to my msn please if you can give me the secret=20 question=B4s answer will be so cool.please there i have=20 many contacts that are very important to me..please if=20 you find out the answer send me it to=20 eminem_21f@hotmail.com this is my other email.please ..i=20 hope you can help me luis felipe medina corac... lima_peru Tag: pop up windows Tag: 42079

I have been having problems with pop-up windows. When the
desktop comes up, I get a 1 inch by 2 inch text window
that comes up on the desktop and it says "here" in the
upper left hand corner and in the middle it
says "outsideerror=success=0" and it has an "ok" tab
underneath this. It does not appear to be causing any
harm, but me Explorer has been craching a lot lately. I'm
thinking I might have a trojan, but can't seem to find
any specific information. any ideas?

Top

Re: pop up windows by Jurren

Jurren
Sat Dec 20 11:52:17 CST 2003

"Matt" <anonymous@discussions.microsoft.com> wrote in message
news:06d001c3c714$b293f460$a401280a@phx.gbl...
> I have been having problems with pop-up windows. When the
> desktop comes up, I get a 1 inch by 2 inch text window
> that comes up on the desktop and it says "here" in the
> upper left hand corner and in the middle it
> says "outsideerror=success=0" and it has an "ok" tab
> underneath this. It does not appear to be causing any
> harm, but me Explorer has been craching a lot lately. I'm
> thinking I might have a trojan, but can't seem to find
> any specific information. any ideas?

See this website:
http://www.mvps.org/winhelp2002/nopopups.htm
and this one:
http://www.mvps.org/winhelp2002/unwanted.htm

--
Jurren Bouman
MVP Windows - Security

Top