i have a web server set to host about 75 web sites. it runs Windows server 2003 and is fully up to date with patches etc. someone dropped code into every html file on the server that redirecte...
Hi,
I am net admin in a relatively small site (30 nodes). Our company has 5 sites, 4 of them interconnected with VPNs, my site is amongst them. I have access to a web app that provides networ...
I have a client who looked in his Yahoo Sent box one day to find emails purportedly sent by him to his entire Contact List advertising products from a website called buynet4u.com. I verified ...
Dear Experts
I want ur help
Windows XP, Compaq Desktop , Norton Internet Security 2007
and I got Prompt saying that I had a malware, install AntiVir Gear , and I couldn't get ride of it (Fo...
One of our application servers appears to have suffered from an iframe attack.
Some times we get the following prepended to the normal HTML page.
<iframe src=hxxp://122.224.5.8/4.htm width...
What is the best implementation for security using TS? I am looking at am impletation of the server possibly to the outside on port 3389. Also is running FIPS security best option and enough ...
Does anyone know of any free intrusion detection tests ? I wanted to find out how vulnerable my network is to a malicious person ? I want to be able to provide my external IP addfresses and ha...
I'm running a new installation of Windows Server 2008 Standard. My boss is interested in installing an external modem and running the Fax Server Role on the server. I'm concerned that this m...
Hi,
Our Website c2sfa.com is hacked I Guess. when any of the browser points to this site most popular antivirus throw a trojan:JS/redirector.N found in the website.
While Googling I found ...
What is a good platform for on-site or remote "test attack' on a customer's network router? I wish to test the vulnerability of the software firewall and router being used in an office.
Al...
Hi All,
I am currently auditing a website that has recently been attacked as their SQL statements are hard coded and their WHERE clauses were built from variables.
My question is, I unde...
A user with me has received an e-mail re: the above apparent virus.
The e-mail from "virus_scanner@pcmagic.net" says that an e-mail she sent was undelivered because their scanner software d...
I am having trouble removing SurfSideKick from a windows 2000 pro machine. Have tried several removal instructions from the web, spybot, ad-aware, ms-antispyware, hijack this. As soon as I r...
I can not get rid of this thing. I have run Adaware, Spybot and Hijack this (report below). I keep getting this pop up window for www.freerepair.org when closed I will get a message that you...
I need a recommendation for a free (hopefully) port scanner. I need to find out what ports are open on the WAN side of a customer's firewall. Thanks.
The Event Viewer on our SBS2003 server (also runs the MSexchange) has shown two instances of logging multiple 529 errors as below.
There are multiple entries logged in succession over appro...
Hi all, I've run TCPView, autoruns, hijackthis, 2 different good virus scanners (CA Antivirus and Trend Micro), netstat -ab (got some unknown components, but I've seen those before with rpcss....
somebody has been killing me.
our uploads directory on IIS6.0 has been violated.
i first thought it was our SQL server PC or the Web Server PC.
i only open the ports : 80 (on webserver)
...
It seems odd that 'snooping' by specially privileged employees is tolerated in today's workplace. The people in those positions are 'considered to be' among the most ethical in the company wh...
can anyone please help, when i log on i keep getting a message box,with a big x to the left and the message saying"the procedure entry point WSCUpdateProvider could not be located in the dy...
I've gotten infected by something much like a worm, that has been identified by mcaffee as the vbs/redlof@m virus, which has infected every single .htm or .html file on my computer! as far as ...
My Norton Firewall alerted me of some remote machine trying to access mine and that the attack is called HTTP_ActivePerl_Overflow. Of course I blocked this request, but right after I respond...
I am using Internet Explorer 6 and Windows XP Home. When ever I try to login to Hotmail, I get the following error on this computer:
The .NET Passport service is currently unavailable a...
Yesterday I started getting these little message windows that pop up multiple times whenever I use internet explorer or when I search for files to open. Message says "your computer was infect...
