|
Rbot.aja worm exterminated |
|
|
By host on
2/27/2007 10:41 PM
|
|
|
|
I put in a support call with my host and I just got a cheery response.
Unfortunately, your server has already been compromised. We found WINNT/system32/rdriv.sys. The rdriv.sys is the Rbot.aja worm. The only recourse, at this point, is to reload your operating system on a new primary hard drive.
The virus attacks a weakness in the SMTP service in older versions of Mailenable. The search has come to an end and the misbehaving of applications will cease.
|
 |
|
Comments (0)
|
|
|
|
Some Virus has me in its grasp |
|
|
By host on
2/27/2007 8:33 PM
|
|
|
|
First thing this morning I picked up where I left off yesterday in trying to track down the cause of my recent server malfunctions. No answer from Grisoft yet, but no big surprise there. I expanded my system log search by logging every security event I could get my hands on in the policies. I noticed that IME_User and IME_Admin were generating login failures in the logs. These are the users that Mailenable uses in its webmail and webmail administration applications. I’ve seen them in IIS before. There’s a connection to the issue that started this whole mess.
I used Mailenable’s MEInstaller application to perform the web application set up steps as per the directions found on Mailenable’s site. I still got the same
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials.
And my other IIS asp.net applications are now requesting windows credentials. These all use the IUSR_<machinename> account. Apparently th ...
|
 |
|
Comments (0)
|
More...
|
|
|
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials. |
|
|
By host on
2/25/2007 10:12 PM
|
|
|
|
I use Mailenable Pro version 2.091 for mail. I just recently started getting a strange error when I try to access its webmail applications:
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials. Internet Information Services (IIS)
This is very strange because up until a couple of days ago it worked just fine. No complaints ever.
I used Explorer to check all my permissions. I found a list of required permissions for IIS 6.
The first thing I noticed that was out of the ordinary was in the folder <windir>IIS Temporary Compressed Files . The page I found above said that Creator Owner needs Full Control over this folder. However, when I granted that permission, and pressed Apply, all the checkboxes that I placed in the Allow column just disappeared! Anyway... Moving on. ...
|
 |
|
Comments (0)
|
More...
|
|
|
Unexplained Security Exceptions |
|
|
By host on
2/11/2007 11:36 PM
|
|
|
|
Today I was creating a new DotNetNuke portal with version 3.3.5. When I accessed a module that uses special control inherited from the DNNTreeView control fromdotnetnuke.webcontrols.dll, I encountered this error:
Request for the permission of type System.Security.Permissions.SecurityPermission, mscorlib, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 failed
This error does not happen on any of the other sites using the custom module in question. I did some google searching and learned that I needed to change the trust level of the dnn application from Medium to Full in the web.config file. After doing this, I received this error:
Assembly freetextbox.dll security permission grant set is incompatible between appdomains.
I wasted 2 hours toggling settings, viewing code security settings, blah blah blah. Frustration set in and I rebooted my computer. Problem solved. ...
|
 |
|
Comments (0)
|
More...
|
|
|
Spam has changed the way I email |
|
|
By host on
1/19/2007 8:54 AM
|
|
|
|
Everyone who has an email address has received spam so I'm sure there are some sympathizers out there. I used to check all my email accounts at once through Outlook to save time. But now I get so much spam on all my accounts, even those I've guarded, that it can take me over an hour to sift through all the garbage each time I get email. Between 5 email accounts I receive over 500 spam emails a day. Just a side effect from having a web presence for so long I guess. Who actually responds to that trash? Much of it is indecipherable - not even real English words. If it didn't make money, people wouldn't do it. Regardless, I had to stop the time hemmorage. Now, I'm back to using Internet Mail. I log directly into the server and delete all the spam there. Almost every web email system I've ever used has a way to select and delete multiple messages at once. It now takes me at most 10 minutes to sort through it all and hand-pick the real messages and dump the rest into the cyber delete bin. After the spam i ...
|
 |
|
Comments (0)
|
More...
|
|
|
Internet Explorer 7 and FTP |
|
|
By host on
12/21/2006 10:13 AM
|
|
|
|
I installed internet explorer 7 a couple of weeks ago and for the most part I like it. The tabbed views are cool and I like when I click a link from Outlook that a new tab is opened rather than using any currently open windows. But the FTP support is annoying. In IE 6 I used to just type in an ftp address and go. My username usually popped up in the credentials and all I had to do was put in a password and I was able to ftp to my heart's desires. In IE 7, when I type in the same address, I have to type in the username and password every time. Then it takes me to a folder view where all the files are links instead of objects I can work with like explorer. I can click Page, and then click Open FTP Site in Windows Explorer, then enter the credentials all over again. Finally I can ftp!
You would think that all I would have to do is type in the ftp address into explorer, right? WRONG! When I do that, it opens IE 7 and I have to do the window dance again.
...
|
 |
|
Comments (1)
|
More...
|
|
|
Accessing Values of Dynamic Controls After Postback |
|
|
By host on
12/13/2006 12:19 AM
|
|
|
|
I'm changing around the edit product control on my sites. Products are complex entities that can be made up of any number of different smaller pieces. Kindof like legos for product metadata. The original edit control assumed that users would want to have access to all the bits of data when they added a new product to the database. To accomplish this I added all the information to treeview controls, but it is painfully slow because of the large number of nodes in the treeview. My original assumption was incorrect. Users know what they are adding and only need access to a few different pieces of information for each different product they are trying to sell. My solution is to create a template that defines which types of data the product is built on. This eliminates the need to have access to every bit of available metadata and allows the entire product edit control to load much quicker.
The challenge is to dynamically add the controls necessary to edit the information but maintain ...
|
 |
|
Comments (0)
|
More...
|
|
|
Crystal Reports for Visual Studio .Net 2003 Parameter Passing |
|
|
By host on
11/30/2006 6:58 PM
|
|
|
|
Today I wrote a Report for a client using Crystal Reports for Visual Studio.net 2003. The report uses two stored procedures in MSDE as the datasource for the main report and one subreport. Both stored procedures use the same parameter name, and when I first ran the report I received multiple parameter prompts, even though the parameter name in both stored procedures is the same. There is a linking that can be done between the main report and the subreport to suppress the duplicate parameter prompts. The way you do it is to open the report in Visual Studio. Right click the subreport in the design view of the main report and click "Change Subreport Links." From the Available Report Fields list, I selected the parameter from the Report Fields and added it to the "Field(s) to link to:" list. As soon as I did that, a new control popped up below the two lists where I could select the subreport parameter to link, and then the multiple prompts issue was squashed.
|
 |
|
Comments (0)
|
|
|
|
IIS Under Construction Page |
|
|
By host on
10/23/2006 9:53 PM
|
|
|
|
I just finished porting the content over from www.lowcountrygeologic.com and I was ready to build the new DotNetNuke version. The only problem was that the Lowcountry Geologic was a live site. I needed to display an under construction page to let users know that the site didn't just drop off the map. Putting up an under construction page wasn't as straight forward as I though it should be, but I still came up with a quick and easy solution. In IIS I created another site for the under construction page. Then I removed the identity (host header value) from the old site and moved it to the under construction site. This is done by right clicking on the site in IIS, then clicking Properties. On the Web Site tab, click the "Advanced" button. Click the "Add" button and add the domain. I left the TCP port 80 and entered the domain name as the Host Header Value. It may not be the preferred way to do things, but it was qu ...
|
 |
|
Comments (0)
|
More...
|
|
|
Lessons in GDI |
|
|
By host on
10/15/2006 8:58 PM
|
|
|
|
Today while I was working on my thumbnail generator I ran into a nasty OutOfMemoryException while creating thumbnails from JPEG/JPG files. Of course I spent time pouring over my code to find the memory leak but when nothing turned up, I started researching the problem. Turns out that my code was good, and the issue lies partly with GDI. It turns out that GDI throws the OutOfMemoryException as a default exception. I looked to the images I was converting and found the issue was caused by some invalid images. The file system reported their sizes as 0. As soon as I deleted them, the thumbnail utility worked without issue.
|
 |
|
Comments (0)
|
|
|