NAV and Blaster

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - ce and .NET thin clients Does anybody know if the RPC flaw effects the MS embedded OS such as CE and the newer .NET embedded thin clients. We have three flavors NT CE and the NET. They are all crap but it is the hardware not MS faults. I have enough that if affected it would be a problem. any thoughts? Tag: NAV and Blaster Tag: 28559
  - 2
    - MS blaster patch (new) step to increase security there is only 1 step for security: INSTALL LINUX! Microsoft know this, because there windows.update page is currently hosted on linux servers. that's it. Tag: NAV and Blaster Tag: 28557
  - 3
    - Checked ( debug ) builds of the security patches. Where can I find the checked versions of the security patches? The Windows update fails to install these patches Error: "No Updates Were Installed. The following items failed to install. To try installing them again, click Review and install updates, and then click Install Now again". Installing the release version on the checked OS also fails. For example running "Windows-XP-KB823980-x86- ENU.exe" on a checked Windows XP Pro OS fails with "KB823980 Setup cannot update a checked (debug) system with a free (retail) version of KB823980, or vice versa". Any help? Thanks Senthil Tag: NAV and Blaster Tag: 28556
  - 4
    - Cannot download .exe Files using I.E. 6 When I click on a link to an .exe file nothing happens. Other computers on the network can do this. I cannot find any settings in I.E. or Windows XP that contol this feature. Can anyone help? Tag: NAV and Blaster Tag: 28555
  - 5
    - Microsoft .NET Framework version 1.1 I do not know if I need to download "Microsoft .NET Framework version 1.1" or not. My ISP is Charter Net. The information given with the update it not to install this if you do not have the software it uses. this is not enough information for me. I have Windows ME. I only use my PCs for home use. I do have two PCs netted within my home. (raising grandchild) Please help this old great grandmother. thanks, Martha Tag: NAV and Blaster Tag: 28548
  - 6
    - Blaster worm I'm running xp-pro. I installedd security upsate 819696 on July 26. Am I protected? Tag: NAV and Blaster Tag: 28547
  - 7
    - For Blaster info [For information on Blaster and how to fix it: http://www.microsoft.com/security/incident/blast.asp] 1. E.g. [For the future, Automate the windowupdate http://windowsupdate.microsoft.com/ You may choose the level of automation that you are comfortable. for Windows XP, On the taskbar at the bottom of your screen, click Start. 2. Click the Control Panel icon. 3. Click the Performance and Maintenance category. If the Performance and Maintenance category is not visible, click Switch to Category View under Control Panel on the left side of the Control Panel window. 4. Click the System icon to open the System Properties dialog box. 5. Click the Automatic Updates tab. Mine is always set to automatic on all my home machines.] For Windows 2000: http://www.microsoft.com/security/articles/stepbystep/windows2000.asp -- Thomas O'Grady, Security Business Unit Microsoft Corporation This posting is provided "AS IS" with no warranties, and confers no rights. Tag: NAV and Blaster Tag: 28541
  - 8
    - Pop Ups I ahve a new computer with xp pro and use aol as well as my office server. aol at home and office at office. Today while on the aol and even while using my ACT e mail I keep getting interrupted by these pop up dialogue boxes. How can I stop this foolishness? Tag: NAV and Blaster Tag: 28537
  - 9
    - Linux and Blaster If I use Linux do I have to worry about the blaster worm? Tag: NAV and Blaster Tag: 28536
  - 10
    - Fix and info for the Blaster Worm! Please go to the following location for our fix for the Blaster Worm! http://www.microsoft.com/security/incident/blast.asp Thanks! Aaron C. Smith Microsoft Video Driver Online Crash Analysis Team Lead Tag: NAV and Blaster Tag: 28532
  - 11
    - about mail problems i was sent a photo from a friend but it said oe removed access to the following unsafe attachment in ur mail but i wanted to see the photo can u help thank u Tag: NAV and Blaster Tag: 28531
  - 12
    - remembering passwords I would like to know how you make a computer forget a password once it has remembered one. When you are logging on to some websites for the first time, a box pops up that asks if you would like your password remembered, so if you choose yes, then would like to change that to no, how do you do that? Tag: NAV and Blaster Tag: 28529
  - 13
    - HIPAA and Windows Me I have recently been told that Windows Me is not HIPAA compliant, and that in order to have the security features needed for HIPAA compliance within a medical office the OS would have to be changed. Anyone know anything about this? Tag: NAV and Blaster Tag: 28515
  - 14
    - Security Patch 2nd request. Is there a way to determine if I've already installed the blaster security patch? If not, since I'm not sure if I've already installed it, is there any problem in installing it on top of the previous one? I run Windows NT 4.0 and Win 2K. (two computers) Tag: NAV and Blaster Tag: 28510
  - 15
    - Patch a business I require to know how to patch all the pc's on a network other than visiting each machinr & logging on as the administrator. We have a mixture of win2k & xp systems that need the blaster patch. i have downloaded the patches & written a batch file, but when i go to a user pc(power user) it says i do not have enough privages i.e. i require adminitrator privages to install the patch. How can i get around this. 50 systems, including 5 remote workers. Tag: NAV and Blaster Tag: 28509
  - 16
    - Auto Account Disable Warning Hi All, I am look for a way to automate sending a warning to the user that thier account will be automaticly disabled in X days. I know that there is the Password Expiry Warning Application in the Exchange 200 Resource kit that will tell you that your password will expire in X days, does anyone know if this will work for accounts that are set to disable on a specific day? Does anyone know if this can be configured through a GPO? Is there a tool out there that will do this? TIA, Steve Iadarola Tag: NAV and Blaster Tag: 28508
  - 17
    - Zone Alarm annoynace Hi, I just installed Zone Alarm 4.0 and everytime I try to access pages outside my ISP proxy server area IE just times out and loads nothing. I'm running with win XP. Mozilla and Opera work fine with access to www pages, and ftp, mail and telnet programs work as well, but with IE 6.0, it simply refuses to connect to external links. I've tried disabling program control in ZAP, but its no good. The only way to get IE working is to turn ZAP off and that's not very feasable. Tag: NAV and Blaster Tag: 28507
  - 18
    - norton antivirus program how i can restarte norton antivirus program Tag: NAV and Blaster Tag: 28506
  - 19
    - Blaster worm +xp I have xp home edition. When I try to install the patch this message pops up : "Setup could not verify the integrity of the file update.inf. Make sure the Cryptographic service is running on this computer. Please help me, Steven. Tag: NAV and Blaster Tag: 28498
  - 20
    - virus Just what is jdbgmgr.exe and what purpose does it serve in XP? Thanks Tag: NAV and Blaster Tag: 28497
  - 21
    - NTLM authentification how do I turn NTLM authentication off on the Exchange Virtual Web in IIS Tag: NAV and Blaster Tag: 28480
  - 22
    - How can I determine the signer of a CAB/DLL/EXE file? Hi there, I'm not sure whether this is the right group to post this query to, but if not, any pointers to the relevant resources would be helpful :) What I'm attempting to do is write an installer that will i) download a CAB/DLL from the internet, ii) verify its digital signature, and iii) check the name of the signer. Only if our company is the signer will the CAB/DLL be installed on the user's machine. I have managed i) with WinInet*() and ii) with WinVerifyTrust(), but I am at a loss as to how to achieve iii). Can anyone suggest a method that would allow me to do this? It must be possible since IE displays the name of the signer when you download an ActiveX from the internet, but I'm stuggling to find an API function to extract this information from a PE/DLL/CAB file. Thanks in advance for your help, Mark. Tag: NAV and Blaster Tag: 28475
  - 23
    - Worm in Windows 98 I have windows 98 and I have the same glitches, restarts, and all of the exact same symptoms as the Blaster worm. I have downloaded the symantec tool and stinger by network solutions and it still does not detect the bug. Everytime I try and download updated virus software the computer restarts. I have tried to report to Microsoft but keep hitting walls or pages that cost big money that I do not have to try and report this. What do I do? Tag: NAV and Blaster Tag: 28474
  - 24
    - Worm Patch Hello. I have XP home on my PC. I have routinely updated my software via windows update. Do I still need to go elsewhere to download a seperate patch, or will windows update take care of it? Also, I've tried enabling the personal firewall on XP, but I cant find where to do so. My dialup connection came from a CD from my ISP. Would that prevent me from enabling it on that connection? I followed the directions on MS website but still gets stuck. Tag: NAV and Blaster Tag: 28473
  - 25
    - worm what do I need to do to protect against the worm? I do not know a lot about the computer so you will need to tell me in easy terms. My computer is hp pavilion 515x Tag: NAV and Blaster Tag: 28472
- Next
  - 1
    - worm Hello i would really be grateful if someone cud tell me how to use the tool when i try toopen it it says 32 wont open it i think its me lol please someone tell me wot to do love and kisses marilyn xxx Tag: NAV and Blaster Tag: 28463
  - 2
    - unexpected user account a new user account has suddenly appeared on my pc. called: ASP.NET Machine A... I have no idea what it is and why it has suddenly appeared. any help on this would be much appreciated Tag: NAV and Blaster Tag: 28459
  - 3
    - What is application/ms-tnef attachment? I recently sent a message to somebody which had an "application/ms-tnef" attached to it. My computer is doing a few strange things recently (eg. my wife got a Reboot? prompt a couple of days ago). I've scanned my system with two up-to-date scanners (PC-CILLIN housecall, NOD32) but not found anything. There seem to be a lot of nasties around at present. Could this be one? Is this a common type of attachment for nasties? Thanks, Robert. Tag: NAV and Blaster Tag: 28456
  - 4
    - password manager - remember id @ password when signing on to a secure site the logon screen appers. on entering the id and password and press enter - a pop up screen appears asking if you want password manager to remember the id and password. if you select yes. it remembers when you next time go in. but it does not again ask if you want id and password be remembered by password manager. i am running windows me. how do i remove this remember id and password from the sign on. i have tried entering incorrect passwords and ids. it comes with error but represents the remebered id and password. please help = how to remove this. santhi Tag: NAV and Blaster Tag: 28454
  - 5
    - Blaster patch Hello! I have WIndows XP/home on my PC and I update my Norton anti-virus software weekly. I've run a scan on my computer and am not infected with the Blaster worm. Do I still need to install the Microsoft patch if I continue to update my anti-virus software regularly? I'm reluctant to do so if I don't have to, since I'm afraid the patch will interfere with other programs on my system. And if I still do need to install the patch, can you tell me which one it is? There are quite a few that the Microsoft site lists for me, and I can't tell which one is for Blaster. Thanks. MG Tag: NAV and Blaster Tag: 28452
  - 6
    - how to put a password to a sharefolder As mention in the subject does anyone know how to put a password to a share folder under windows xp pro? Tag: NAV and Blaster Tag: 28447
  - 7
    - question about IP I'd like to know if there is any possibility that I could change my PC's IP address or use a proxy server so I could access a webpage that verifies my datas and I'd be sure that it can't get my real ones?I'd really apreciate if you could help me here.I'm using Windows 98 SE,Internet Explorer 5.0 and I use a dial-up connection to access the internet.(if there are any mistakes in my letter,please understand them,I'm a romanian) Tag: NAV and Blaster Tag: 28423
  - 8
    - All the symptoms no worm yet I have all of the symptoms of this worm on my xp machine the computer restarts, the generic host process for Win32 crashes. I was able to change the rpc settings so the computer would stop restarting that worked, i also went to the registry key through the directions off Microsoft.com but the entry was not there. there is also not a program (blaster etc)running in the task manager I have downloaded 3 different scan tools from Trend micro,symantec,and computer associats and all 3 scans came up with no worm. has anyone had this same problem or is this a feature of one of the new strains that i have been hearing about. please reply if you have any info/ideas that might help thanks Tag: NAV and Blaster Tag: 28421
  - 9
    - downloading ICF Followed all the directions to download ICF to protect against Blaster virus. Got to step where after you select the connection if I click on Change settings of the connection nothing happens. If I right-clickin Network Connections folder and go to properties again nothing happens. Have tried several times following all instructions on Microsoft web page. What do I do now? Thanks for any help. Tag: NAV and Blaster Tag: 28375
  - 10
    - Security Event Log Entry We have NT4 SP6. I have been getting the Event ID: 560 entry in the Security Event Log with the following info: Object Server: Security Account Manager Object Type: SAM_USER Object Name: DOMAINS\Account\Users\000003FD New Handle ID: 1318680 Operation ID: {0,4304703} Process ID: 2162013760 Primary User Name: SYSTEM Primary Domain: NT AUTHORITY Primary Logon ID: (0x0,0x3E7) Client User Name: Client Domain: Client Logon ID: (0x0,0x4411) Accesses READ_CONTROL ReadGeneralInformation ReadLogon ReadAccount ListGroups Privileges - I haven't found any info as to what this means. Usually I get usernames from my domain and my domain name but this info does not make sense. The user field in the log reads ANONYMOUS even though the client user name is blank in the info above. Does anyone have any idea as to what this entry means? Thanks in advance. Tag: NAV and Blaster Tag: 28374
  - 11
    - PC restarting problems Help! Hi I have a PC that doesn't want to boot properly. It had been infected with a virus but was cleaned. When nothing else fixed the problem, I tried a reinstall It doesn't want to boot. I then did a repartition and format of the drive, but still no luck. The OS I'm trying with is W2K It starts up goes through the memory check and find the disks and such... sometime after that it decides to restart itself. any ideas? Please help! Thanks in advance - J Tag: NAV and Blaster Tag: 28365
  - 12
    - download why is it that i cannot download the blaster for the new virus Tag: NAV and Blaster Tag: 28360
  - 13
    - The Blaster Microsoft patch available from # 823559 necessary for Microsoft 98 Dear Sir, I notice from reading the description on # 823559 (" Blaster Worm: Critical Security Patch") that the Blaster or LovSan patch available from Microsoft is needed if you have the softward for either Window NT 4.0., Windows 2000, Windows XP and Windows Server 2003. Is it needed if you have Windows 98, 2nd Edition as I have? Donald B. Gilchrist Tag: NAV and Blaster Tag: 28359
  - 14
    - Variant of MSBlast - Alert for Win9x and other systems According to this bit of info from the Symantec site, there is a variant of the MSBlast Worm which potentially could target the following OS's: W95 / W98 / ME / NT / Win2000 and XP. W32.Randex.E Discovered 12/Aug/2003; Norton Anti-Virus updated 13/Aug/2003 @ 6:23 pm. Symantec Security Response http://www.symantec.com/avcenter/venc/data/w32.randex.e.html For those you have accessed this advisory with the MS web page, copy and paste this URL into your browser address window. Recommendations are to get the latest AV updates and Definitions. Check for any updates for your Operating System at the Windows Update Page. Block any of the affected ports with a firewall. Thanks to ~PA Bear for bringing this latest bit of info to my attention. LuckyStrike LS@smokedamagedfurniture.youcandriveitawaytoday.com ---------------------------------------------------------------------------- ---------- Tag: NAV and Blaster Tag: 28355
  - 15
    - MS03-026 (823980) Scanning Tool Available The following tool has just been released: Microsoft has released a KB 823980 Scanning Tool (KB823980scan.exe) that can be used to scan networks to identify host computers that do not have the 823980 security patch (MS03-026) installed. For additional information about the 823980 security patch (MS03-026), click the following article number to view the article in the Microsoft Knowledge Base: 823980 MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution http://support.microsoft.com/default.aspx?scid=kb;en-us;823980 For additional information about a new worm virus that tries to exploit the DCOM RPC vulnerability that is fixed by the 823980 security patch (MS03-026), click the following article number to view the article in the Microsoft Knowledge Base: 826955 Virus Alert About the W32.Blaster.Worm Worm http://support.microsoft.com/default.aspx?scid=KB;EN-US;826955 Download location: http://microsoft.com/downloads/details.aspx?FamilyId=C8F04C6C-B71B-4992-91F1-AAA785E709DA&displaylang=en The MS03-026 bulletin is being updated now as well. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: NAV and Blaster Tag: 28352
  - 16
    - Firewall if i cant get in the properties of the Internet, then how do i create a firewall??? Tag: NAV and Blaster Tag: 28313
  - 17
    - Weird actions of blaster? Or maybe this is normal...I have and have always had my norton up to date for live up date. Then my comptuer pops up with the 'red alert' box from norton that my computer is infected with the blaster worm. I cannot quarantine or anything, only can hit ok. This will always pop up twice in a row. Then I do a system scan in all files for a virus, and it won't show up, I've downloaded the fixblast tool from norton to fix it and it says my computer is not infected. After connecting to the interent my machine gives me the 1 min countdown to restart. I have since turned my RPC to not restart my computer but to restart the service if it's interuppted so I could get the patch put on. Also in my processes the msblast.exe doesn't show up and my registry doesn't have the added key to run the ms blast. My question is how the heck do I get rid of it? Am I going to have to completely reinstall my XP? Thanks for any help! Jeanne Tag: NAV and Blaster Tag: 28304
  - 18
    - Weird actions of blaster? Or maybe this is normal...I have and have always had my norton up to date for live up date. Then my comptuer pops up with the 'red alert' box from norton that my computer is infected with the blaster worm. I cannot quarantine or anything, only can hit ok. This will always pop up twice in a row. Then I do a system scan in all files for a virus, and it won't show up, I've downloaded the fixblast tool from norton to fix it and it says my computer is not infected. After connecting to the interent my machine gives me the 1 min countdown to restart. I have since turned my RPC to not restart my computer but to restart the service if it's interuppted so I could get the patch put on. Also in my processes the msblast.exe doesn't show up and my registry doesn't have the added key to run the ms blast. My question is how the heck do I get rid of it? Am I going to have to completely reinstall my XP? Thanks for any help! Jeanne Tag: NAV and Blaster Tag: 28303
  - 19
    - Beware the popup ad imitating the blaster worm FYI Last night while browsing web sites I hit a popup ad that created a full screen white window with a dialog that looks very much like the crash dialog for RPCSS complete with a countdown timer. The only difference is there is some small ad text in the bottom of the dialog. It's a fake but it gave me a start. -- Ken Wickes [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights. Tag: NAV and Blaster Tag: 28294
  - 20
    - XP Blast gone but services still cant run Ok everyone check this out...I had the blast.exe removed from my XP home eddition. Attemted to disable the system restore before I reboot. failed. The blast worm appears to be gone in the registry current version_run_ is empty. Upon install of the update I received the "crypo service not running" error, unable to verify .inf file. So when I attempt to start that service it errors saying the dependencies are not running (RPC is that dependency). Cant even view properties of any services. Anyone heard of this? Tag: NAV and Blaster Tag: 28287
  - 21
    - Net Admins and Blaster What I find hard to believe is the number of network admins that didn't already have these ports blocked on their internet routers. I read where Maryland's Motor Vehicle Administration shut all its offices at noon. Whoever is in charge of security there should be fired. Remember to set those routers up to deny all and then only open up what you have to. Tag: NAV and Blaster Tag: 28278
  - 22
    - question on new virus is windows98 vunrable? and is there a pach for 98? Tag: NAV and Blaster Tag: 28276
  - 23
    - blaster worm I wanted to download patch, but was told there were no critical updates for my system. Is there something else I can do? Tag: NAV and Blaster Tag: 28265
  - 24
    - Certificate Server Installation Failure - Solution During the installation of Enterprise CA on Windows 2003 stops with error: An error was detected while configuring Certificate Services. The Certificate Services Setup Wizard will need to be rerun to complete the configuration. Certificate Services setup failed with the following error: Windows cannot find the network path. Verify that the network path is correct and the destination computer is not busy or turned off. If Windows still cannot find the network path, contact your network administrator. 0x80070033 (WIN32: 51) Wanted to post the solution I worked through to assist others in the future. After troubleshooting this for awhile I thought that this was being caused by a failed attempt to reach an AD Server even though the error was somewhat generic. All DNS possibilities were looked at and nothing was incorrect, although this was a multihomed server running ISA. I temporarily disabled the Internet NIC and the installation was successful,however I am investigating Event ID 103 Warning which appears to be the only event that this change produced. Hope this will help someone in the future. Tag: NAV and Blaster Tag: 28263
  - 25
    - Firewall I already have the MCAffee Firewall installed - do I need to install more security and will it interfere with the MCAfee firewall? Tag: NAV and Blaster Tag: 28262

I am using Win NT with NAV corporate edition 7.x. Does
anyone know if I still need to download the patch from
Microsoft, or will my machine be protected if I have the
latest file from NAV?

Top

NAV and Blaster by Charles

Charles
Fri Aug 15 15:11:29 CDT 2003

You still need to install the latest patch. NAV will find
Blaster only if you scan your box. It doesn't prevent it
from being attacked.

>-----Original Message-----
>I am using Win NT with NAV corporate edition 7.x. Does
>anyone know if I still need to download the patch from
>Microsoft, or will my machine be protected if I have the
>latest file from NAV?
>.
>

Top