Sunday, March 9, 2008

McAfee technical quarry-part 11

No Cookies No Popup:

McAfee has disabled the cookies and pop up blocking feature in the new version of the McAfee Security Center as we got reports of many legitimate web sites being blocked as it conflicted with the cookie settings features and pop up blockers of browsers.

All browsers have cookie settings and pop up blocking feature and customers can use these to block cookies and pop ups from websites.

Mozilla Firefox:

To block pop ups in Firefox, please perform the following steps:

1. Open Firefox and select Tools ->Options

2. Here highlight 'Content' and click in the checkbox beside 'Block pop-up windows'

3. Click OK.

To block cookies from websites, please perform following steps:

1. Open the Tasks menu, choose Privacy & Security, and then choose Cookie Manager.

2. Choose "Unblock Cookies from this Site" or "Block Cookies from this Site."

When you are warned (while browsing) that a web site is requesting to set a cookie, you can click Yes to allow or No to deny the cookie.

Internet Explorer 7:

To block pop ups in Internet Explorer 7, please perform the following steps:

1. Click the Tools menu

2. Click Pop-up Blocker

3. Click Turn on Pop-up Blocker

( If already on, it will offer an option to Turn off Pop-up Blocker )

4. Confirm by clicking the Yes button

To block cookies from websites, please perform following steps:

1. In Internet Explorer, click the Tools button, click Internet Options, and then click the Privacy tab.

2. Move the slider up to Block All Cookies. On this setting, websites will not be able to store cookies on your computer.

Note: Blocking all cookies may prevent you from accessing many websites. The next two Internet Explorer privacy levels, High and Medium High, may be more suitable. In addition, it is possible to block a cookie for a specific site via the Manage sites dialog on the Privacy tab.

--------------------------------------------------------

Register dll files:

regsvr32 scrrun.dll

regsvr32 msxml.dll

regsvr32 mshtml.dll

regsvr32 shdocvw.dll

regsvr32 browseui.dll

regsvr32 msjava.dll

regsvr32 urlmon.dll

regsvr32 actxprxy.dll

--------------------------------------------------------

netsh:

* interface reset all

* routing reset all

* routing

* dump

* exit

--------------------------------------------------------

Prompted about the Acrobat toolbar every time you start Internet Explorer 6.0, even after selecting allow and remember. To turn this off, follow these instructions:

Open SecurityCenter

Switch to the Advanced Menu

Click Configure

Click Computer and Files

Open the SystemGuards option and click Advanced

Select Browser SystemGuards from the dropdown

Change the Internet Explorer Bars option to Log Only

--------------------------------------------------------

Before installing McAfee products:

http://service.mcafee.com/FAQDocument.aspx?id=106738&lc=1033

--------------------------------------------------------

Stop spams (Outlook Express):

If you are are using an IMAP4 server, you will not need to setup a filter/message rule on your email program,

as SpamKiller moves any spam tagged messages automatically into a folder called SpamKiller.

If you are are using a POP3 server and want your email program to automatically filter the SpamKiller-marked messages into a separate folder, so that you can more easily review them, continue as follows:

1. Click Tools--> Message Rules, and select Mail; this will bring up a list of all of the filters (or as Outlook Express calls them, rules) that are current set up.

2. Click New to create a new one.

3. Select to filter "Where the Subject line contains specific words" and an action "Move it to the specified folder" and "Stop processing more rules".

4. Now click the blue "contains specified words" in the box at the bottom; type [SPAM] into the field at the top of the window that appears, and click "Add" to add it to the list. Click OK, then click the blue "specified folder" and click New Folder to create a new folder called SpamKiller1.

5. Under section "4. Name of the rule: " , type SpamKiller1.

Your rule description should now be:

Apply this rule after the message arrives

Where the Subject line contains '[SPAM]'

Move it to the SpamKiller1 folder

And Stop processing more rules

NOTE 1: Check Mail Rules tab

Make sure your new rule for SpamKiller is first in the list, if you have a lot of other message rules you use and als make your SpamPal rule end with And Stop processing more rules

NOTE 2: Blocked Senders tab

If you have a lot of blocked senders then it is worth Removing them from the list, as SpamKiller will do a much better job of coping with Spam and removing the blocked senders will also speed up the processing of email.

http://www.spampal.org/usermanual/clients/oe/oe.html

--------------------------------------------------------

Reset compatibility mode for all current programs:

Use Registry Editor to check if the registry key (AppCompatFlags\\Layers) exists within:

HKEY_CURRENT_USER\\Software\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Layers

Warning: Using Registry Editor incorrectly can cause serious, system-wide problems that may require you to reinstall Windows to correct them. McAfee cannot guarantee that any problems resulting from the use of Registry Editor can be solved. Use this tool at your own risk.

1. Click on the Start button.

2. Click on Run.

3. Type in regedit then click the OK button. The Registry Editor will then appear.

4. Click the + next to HKEY_CURRENT_USER.

5. Click the + next to SOFTWARE.

6. Click the + next to Microsoft.

7. Click the + next to Windows NT.

8. Click the + next to CurrentVersion.

9. Click the + next to AppCompatFlags.

10. Right click on Layers and select Export. Save this file and note the location and name.

11. Right click on Layers again and select Delete.

12. Close the Registry Editor and Reboot your computer.

--------------------------------------------------------

Run the Program Compatibility Wizard:

1. Click Start, and then click Help and Support.

2. Click Fixing a problem, and then click Application and software problems.

3. Under Fix a problem click Getting older programs to run on Windows XP.

4. Read the instructions and then click the Program Compatibility Wizard.

Note If a compatibility problem prevents you from installing a program on Windows XP, run the Program Compatibility Wizard on the Setup file for the program.

--------------------------------------------------------

Stealth Mode, X-Ray:

Mcafee SystemGuards watches your computer for specific behaviors that may signal virus, spyware, or hacker activity.

McAfee Stealth Mode hides your presence on the Internet, making your computer invisible to hackers.

McAfee X-Ray for Windows detects and kills rootkits and other malicious applications that hide from Windows and other anti-virus programs.

Built-in computer health and performance tools keep your PC running at peak performance. Includes automated disk defrag and clean-up for files, applications, and browser history.

--------------------------------------------------------

Cannot send/receive emails (OE):

1. Open Outlook Express

2. Click on Tools -> Options.

3. Click on "Connection" tab.

4. Uncheck the box beside "Hang up after sending and receiving".

5. Click Apply and then click OK.

--------------------------------------------------------

SpamKiller friends list:

1. Open McAfee Security Center.

2. Click on " Email and IM" and then click on the " Configure " button at the right pane.

3. On the next screen, click on "Spam protection is enabled" and then click on "Advanced" button.

4. Click on "Friends" in left pane and then click on "Add" button in the right pane.

5. Beside "Name", type contact's name, beside "Type" select "Single e-mail address", beside "E-mail Address" type the contact's email address.

6. Click OK.

--------------------------------------------------------

Large attachments:

Email is not intended for exchange of files. Large messages can cause various problems:

i) make mailboxes too large to handle

ii) block mail reading during transfer

iii) fill disk space

Therefore a maximum message size of 10 MB has been set by default in webmails (Yahoo, gmail, etc) and email clients (Outlook, Outlook Express, etc). That is why when we try to send attachments of more than 10 MB, we will generally receive error messages, as server will not be able to tranfer the file size properly.

Files should be exchanged by protocols intended for file exchange like FTP.

--------------------------------------------------------

Australia support:

http://www.mcafee.com/us/about/contact/australia.html

--------------------------------------------------------

Block Spams:

http://www.mcafee.com/us/local_content/white_papers/wp_unsubscribing_spam_en.pdf

http://us.mcafee.com/root/identitytheft.asp?id=spam#

--------------------------------------------------------

After virus removal:

http://www.mcafee.com/us/threat_center/tips.html?cid=36136

--------------------------------------------------------

Compare McAfee products:

http://us.mcafee.com/root/product.asp?productid=comparison

--------------------------------------------------------

SecurityCenter may display 'Not Protected' after updating

http://service.mcafee.com/FAQDocument.aspx?id=107095&lc=1033

--------------------------------------------------------

Configure Outlook, Outlook Express:

http://www.vcn.com/knowledgebase/article.php?id=434

--------------------------------------------------------

Disable a Program in Vista / Disable Windows defender:

1. Click Start -> Control Panel

2. In the left pane of the Control Panel, click on " Control Panel Home "

3. Under "Programs", click on "Change Startup Programs".

4. Select "Windows Defender" and click on "Disable"

5. Accept any security warnings and close the Window.

--------------------------------------------------------

Internet Explorer 6 Security Settings:

http://www.microsoft.com/windows/ie/ie6/using/howto/security/settings.mspx

--------------------------------------------------------

Email client filters:

http://www.sitedeveloper.ws/tutorials/spam.htm

--------------------------------------------------------

WMUtil:

http://www.oehelp.com/WMUtil/wmutil151.zip

NOTE: Close Windows Mail and WinMail.exe in Task Manager

--------------------------------------------------------

Cannot send/receive emails (Outlook Express):

1. Open Outlook Express

2. Click on Tools tab and select "Options"

3. Click on "Connection" tab

4. Uncheck the box beside " Hang up after sending and receiving "

5. Click "Apply" and then click "OK"

--------------------------------------------------------

SpamKiller not working properly:

1. Open Outlook Express

2. Click on Tools tab and select "Options"

3. Click on "General tab" tab

4. Uncheck the box beside " Send and receive messages at startup "

5. Click "Apply" and then click "OK"

--------------------------------------------------------

SpamKiller not filtering spams/ Filtering Options:

1. Open McAfee Security Center

2. Click on "E-mail and IM" and click on "Configure" at the right pane.

3. Select "Spam protection is enabled" and click on "Advanced" button.

4. In the left pane, click on "Filtering Options" and in the right pane, move the slider to "Medium-High"

5. Click "Apply" and then click "OK".

--------------------------------------------------------

Manage Network:

1. Stop the McAfee Network Agent (start/run "net stop mcnasvc") on all computers on your network.

2. Remove the file \Documents and Settings\All Users\Application Data\McAfee\MNA\NAData on all computers on your network.

3. Restart the McAfee Network Agent on the machine you want initially to have administrative access (start/run "net start mcnasvc").

4. Restart the McAfee Network Agent on the rest of the machines.

--------------------------------------------------------

Configure Firewall- Legacy (Incredimail):

http://www.incredimail.com/incredimail/help_center/help_article.aspx?article_id=54

--------------------------------------------------------

Configure VirusScan - Legacy (Incredimail)

http://www.incredimail.com/incredimail/help_center/help_article.aspx?article_id=253

--------------------------------------------------------

malware folders:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

--------------------------------------------------------

Windows XP Tweaks:

http://www.kellys-korner-xp.com/xp_a.htm#aor

--------------------------------------------------------

Delete hidden software in Add/Remove Programs:

http://www.kellys-korner-xp.com/regs_edits/AddRemoveCleaner.zip

--------------------------------------------------------

Disable Parental Control in Windows Vista:

1. Go to the Control Panel from the Windows Start menu.

2. Click User Accounts and Family Safety.

3. Click Parental Controls.

4. Click Continue in the User Account Control window.

5. Select the User Account from the Parental Controls window.

6. Select Parental Controls: Off from the User Controls window.

--------------------------------------------------------

Error installing applications in Vista:

http://www.petri.co.il/error_installing_applications_on_vista.htm

--------------------------------------------------------

ComboFix:

http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

--------------------------------------------------------

Outlook Express Errors:

http://www.insideoe.com/problems/errors.htm

--------------------------------------------------------

Cannot receive emails (Outlook Express):

1. On the Outlook Express Tools menu, click Accounts.

2. Click the Mail tab, and then double-click your e-mail account.

3. Click the Advanced tab.

4. Check the box labeled "Leave a copy of messages on server." Doing this activates two clean-up options:

• If desired, check the box to "Remove from server after 5 days." You may change this to any number between 1 and 100.

• If desired, check the box to "Remove from server when deleted from ‘Deleted Items.'"

Be careful using this option! Most ISPs limit the size of your POP3 mailbox. Saving messages on the server can cause your mailbox to become full very quickly, and so you might not receive important messages until you delete the server copies.

http://www.microsoft.com/windows/IE/community/columns/mailserver.mspx

--------------------------------------------------------

Spyware Removal Steps:

http://forums.majorgeeks.com/showthread.php?t=74501

--------------------------------------------------------

Free online scan:

http://www.mwti.net/antivirus/mwav.asp

http://dl.winsite.com/files/369/ar2/winnt/dskutil/delfiles.zip

http://files3.majorgeeks.com/files/8a8aee6f4d29fa77828d4f011a237ea5/spyware/AboutBuster.zip

http://www.windowsbbs.com/attachment.php?attachmentid=1069&d=1116572495

http://www.trendmicro.com/ftp/products/online-tools/cwshredder.exe

http://computercops.biz/modules.php?name=Forums&file=download&id=3715

Click start then run and type services.msc, then hit enter. Locate Network Security Service, right click and choose properties. Stop the service, then set to disabled. Click Apply then OK. Close the services window.

Procedure:

Double click the delfiles.bat on your desktop.

Double click the cwsserviceemove.reg file you unzipped earlier. Click yes to merge it to the registry.

Open AboutBuster, click start then OK. Exit when finished.

Open CWShredder and click fix.

Open Ad-aware and run in full scan mode. Delete all it finds.

--------------------------------------------------------

Install SpamKiller from CD:

Insert CD and cancel the autorun. The click "start", "run", "browse", go to the CD drive, open folder "msk", then open folder "msk" (inside the first msk folder), then open "winxp" (this works for other windows versions as well I think - I'm using Me), then select "spamkiller.exe".

Then click "run". This will install SpamKiller without Security Center

--------------------------------------------------------

Download all .dll files:

http://www.dlldump.com/dllfiles/

--------------------------------------------------------

Cannot uninstall McAfee:

Install the following dll file and then run the MCPR:

http://www.dlldump.com/download-dll-files_new.php/dllfiles/W/wtsapi32.dll/5.1.2600.2180/download.html

--------------------------------------------------------

Verify that the Microsoft Cryptographic Services service is started:

1. Click Start, and then click Run.

2. In the Open box, type cmd, and then click OK.

3. At the command prompt, type net start cryptsvc, and then press ENTER.

4. Type exit to quit Command Prompt.

--------------------------------------------------------

Enable pop ups in Firefox:

1. Click Tools, then Options.

2. Click Web Features on the left.

3. Remove the tick from the "Block Popup Windows" box.

4. Click OK.

--------------------------------------------------------

MSXML for 64 bit:

http://www.microsoft.com/downloads/details.aspx?familyid=993C0BCF-3BCF-4009-BE21-27E85E1857B1&displaylang=en

--------------------------------------------------------

dotnet 2.0:

http://download.microsoft.com/download/5/6/7/567758a3-759e-473e-bf8f-52154438565a/dotnetfx.exe

http://www.microsoft.com/downloads/details.aspx?familyid=0856EACB-4362-4B0D-8EDD-AAB15C5E04F5&displaylang=en

--------------------------------------------------------

No comments: