KB824141 Patch BREAKS SOFTWARE

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
 - 1
 - Hotbar Is Hotbar adware and spyware? What's the difference between the two? Is is just not worth the risk to have it on your system? Thanks,JJ Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37706
 - 2
 - Still fighting funlove virus Is there a particular security setting or patch I can deploy to help prevent the infection of the funlove virus? I'm currently running McAfee's NetShield on one of our servers (and desktops use virus scan), however, the server continously gets hit with this virus. I'm wondering what others are doing to help prevent the spread of this virus. Also, can an IDS or firewall system (ISA server?) help prevent the infection of this virus? Thanks, - Dave Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37705
 - 3
 - Help: Unable to install WinXp Security Critical Service Pack Hi There: I tried to update my WinXP Home Edition with the Service Pack 1 (Express) critical Update but unable to install it. The update was successfully downloaded and extracted but when it goes to the installation part, it recommended me to close all anti-virus program which I did and did the Back up system or close all open program which I also did. But still this important Critical Update is not able to install and pop-up a window saying: Service Pack 1 Set up Error - Set Up canceled. In the Web Page Dialog - it is shown that it is not done. I review the download history and "Retry" many times but not able to do it. Any help to give me an idea to let me install this important Critical Update. I have just spent 2 months to remove the viruses I have even though I have the latest McAfee Virus Scan and do the DOS SCAN, turn off the System Restore, Disk Clean etc. It is like hell, believed it. I need to go back and forth to McAfee to online chat with them for 12 times with different technicians and also includes 2 supervisors. Hope helping hands are there this time. Tks. H. . Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37704
 - 4
 - secure websites wont display i cant get secure websites to display on my laptop. ive tried every troubleshooter i can find and cant get anything to work . i just want to play the new game i bought but i cant register to play it. its driving me nuts. if you know anything about this please help Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37703
 - 5
 - XP came with comp/need cd 4 repair About a month ago, I downloaded this game called BINARY from natomic.com, it was a simple little Nintendo style game, but it somehow changed some important files. Whenever I restart my computer, and i log in, a message displays saying that some files have been changed, and it asks me to insert the Windows XP CD so the computer can restore the original files. XP came with my comp, so I don't have the CD. The file changes weren't big enough to do much damage, because I haven't noticed anything wrong. But, I just bought a game, and the game required that I install Direct X 9.0b. It tried but then a message came up saying that Direct X didn't pass the security test for XP. I thought this strange, but was sure it was the fault of the changed files. I then downloaded Direct X 9.0b directly from Microsoft.com. It tried to install but the same prompt came up telling me that the download files didn't pass the security test. I'm sure that if I repaired the files, that I would be able to install direct x 9.0b, but I don't have a CD. Does anyone know a way to restore the files without an XP CD? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37701
 - 6
 - XP came with comp, but need CD for repair About a month ago, I downloaded this game called BINARY from natomic.com, it was a simple little Nintendo style game, but it somehow changed some important files. Whenever I restart my computer, and i log in, a message displays saying that some files have been changed, and it asks me to insert the Windows XP CD so the computer can restore the original files. XP came with my comp, so I don't have the CD. The file changes weren't big enough to do much damage, because I haven't noticed anything wrong. But, I just bought a game, and the game required that I install Direct X 9.0b. It tried but then a message came up saying that Direct X didn't pass the security test for XP. I thought this strange, but was sure it was the fault of the changed files. I then downloaded Direct X 9.0b directly from Microsoft.com. It tried to install but the same prompt came up telling me that the download files didn't pass the security test. I'm sure that if I repaired the files, that I would be able to install direct x 9.0b, but I don't have a CD. Does anyone know a way to restore the files without an XP CD? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37700
 - 7
 - search engines not working I know that this has been posted before, but I tried to do what it said and it didn't work. When I go to search at msn.com it says that I have downloaded a malicious program that won't let me get to the site and that I should go tweakxp.com. When I try to go to google.com, it sends me to a page that says that I have software on my computer that won't let me go the website. However, using search on netscape.com is no problem. I tried going to http://securityresponse.symantec.com/avcenter/venc/data/tro jan.qhosts.html and used the removal tool found there, but it said that the trojan was not on my computer. What else should I try? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37697
 - 8
 - Problem searching using search engines Recently I am unable to search using search engines such as Yahoo or Google. I receive the message "The page cannot be found" when I try to search for anything. Is this related to any of the recent security patches & is there a way this problem can be fixed? Any help will be greatly appreciated. Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37696
 - 9
 - help getting to microsoft I went to the microsoft.com website to ask for some assistance several days ago and completed my business. Since then, I have been inundated with multiple copies of the following message. I am getting dozens of these a day. I cannot figure out how to contact microsoft to get them to look into this without paying a fee. I would like them to look into why I am receiving these and stop them. I have not opened any of the attachments for fear of virus. Please help. Thanks. Wabravanel@dc.rr.com ----- Original Message ----- From: Microsoft Customer Assistance To: customer@updates_ms.com Sent: Sunday, October 19, 2003 9:43 AM Subject: New Net Security Patch ALERT!!! This e-mail in its original form contained one or more attached files that were infected with a virus or worm, or contained another type of security threat. The following attachments were infected and have been repaired: No attachments are in this category. The following attachments were deleted due to an inability to clean them: 1. Q977282.exe: W32.Swen.A@mm The Following attachments were not delivered due to inbound mail policy violations: No attachments are in this category. Road Runner does not contact the sender of the infected attachment(s) in the event that they were not actually sent from the indicated party. Please contact the sender directly to alert them of their issue with infected files if you wish to do so. For more information on Road Runner's virus filtering initiative, visit our Help & Member Services pages at http://help.rr.com, or the virus filtering information page directly at http://help.rr.com/faqs/e_mgsp.html. Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37693
 - 10
 - to delete a programe hi pl tell how to delete arograme from address bar Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37692
 - 11
 - grisoft or avast AV protection?? I went to download.com ,as was once suggested here, and I > saw both grisoft & avast as free AV protection- I read > the user opinions on both.The grisoft one sounds good but > I noticed that they do not offer free tech support for > the free version-I know that I would be one to need help > & have lots of questions- > So, then I read about Avast. and it had lots of great > reviews except for some bad ones-the negative ones stated > that it is not good if you have windows XP (which I do)- > it said that pc crashes alot. so now I am back to square > one- Can someone list a few freeware versions of AV > protection that are decent-or maybe you know something > about avast or grisoft you can share with me & others > reading these newsgroups.thanks 4 help Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37684
 - 12
 - Microsoft Patch I have downloaded, from Microsoft Updates, the Cumulative Patch for the Internet Explorer 6, however I keep receiving something in my Yahoo e-mail box to download immediately, The Patch. when I checked into this attachment, my virus scan tells me the attachment is "dirty". I keep deleting, but it keeps coming back. Is this a legitimate Microsoft warning? I do not want any viruses and currently have McAfee virus scan. Is this enough protection? Thank you. lvnv# Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37666
 - 13
 - Bookedspace Hello all! I have a question. Recently I discovered a file named bs2.dll And in the Run folder in the registry there's an entry like "Rundll32.exe bs2.dll" When I connect to internet, this stuff connects to www.bookedspace.com and www.ignkeywords.com Does anybody know what is it? Thanks in advance. -- -=/ Nihr0M \=- Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37665
 - 14
 - Web Sites Reading my E-mail address I am hoping that one of you gurus can help with this. It seems like my e-mail address is getting plucked off of my computer as I surf the web and then being given to spammers. I am inferring this from the type of e-mails I am receiving right after I visit sites (music spam after hitting music sites, diet spam after wieght-loss sights, etc.). I there a way to shield my personal information from these web sites? Thanks in advance Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37664
 - 15
 - Please help...security question! Hi - I am hoping someone can help me! I have been using my Windows 98 computer fine for quite some time. In the last 2 days when I access the internet, my Home page gets changed to www.tooncomics.com everytime I restart - even though I change it back every time and my Favorites menu gets loaded with several links to this website as well. I have run ad-aware from lavasoft and housecall from trendmicro to clean this up and it is still happening. I don't know how to find the program that is loading/changing this information. Any help greatly appreciated! Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37646
 - 16
 - Impact on how to keep a blueprint of my Ad structure, network structure on servers I work as a sysadmin for a 2,000 node organization. I created documentation where I list changes on AD structure (such as delegation of rights, schema modifications, domain admin usernames) and I am wondering how bad would be keep that word file on a folder where only domain admins could access it. I would never keep a file with passwords on a networked server and I would like to confirm how you approach that type of structure information file on the 'network' ? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37645
 - 17
 - norton anti-virus can anyone help me move norton anti-virus from a file in kazaa lite to where I need to have it for it's proper use? thanks Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37643
 - 18
 - Webpage dialed my modem to ? A German *webpage* dialed out over my modem, when I clicked that I was 18 years old (18 Jarhen). It also put a new Icon on my desktop. I'm worried I'm going to have a $100 charge on my phone bill for 20 seconds of a call to God-Knows-Where. I knew email trojans could do this, but the webpage attack was a surprise. I am on DSL. The modem was just there for a backup, if/when the DSL line is down. Is there an option that would give me a prompt before a webpage does this again, or block modem calls that do not come from me? I already had the: Network and Dialup Connections > Advanced > Dialup Preferences set to "always ask me before autodialing" -but it did it anyway. I found a new New Connection Icon. The number it called was: 0112463531444 WIN2000 IE6.0 ZoneAlarm Norton Anti-Virus Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37632
 - 19
 - Dwn.Updates I have an windows up-date to dwn.load and install which is 5.2 mgz and 30 mintue dwn.load time. I have a slow processor and dial up isp.when I go to install the up-date I get disconnected. Is their a way I could install half now and half later. I have windows me.I/E6.0. Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37625
 - 20
 - Security update I keep getting this security update #823559 once or twice a week. Is this the same update that I keep downloading over and over or not? If so,why do they keep sending it to me? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37623
 - 21
 - PGP Signed MS security bulletins...fail I received two MS security bulletins on 10/15 both with the subject: Microsoft Exchange Server Security Bulletin Summary for October 2003 One talked about an exchange patch, the other talked about MS03-41 through MS03-45. The information they provided looked legitimate, but **Both** failed PGP verification with Microsoft's key. Ire-downloaded the key with same results. Thumbprint matched so that was expected. I went to technet and found the Oct. article through technet (as if I'd never seen the email) and went and got the patches OK, but did so with due skepticism along the way. Did anyone else have this happen? -- Jim (for e-mail replace invalid with com) "Remember, an amateur built the Ark; professionals built the Titanic." Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37622
 - 22
 - Bogus Microsoft Updates I posted on the Microsoft OneNote newsgroup a few hours ago. I used my email address instead of leaving it anonymous. I have suddenly recieved two bogus emails regarding Windows updates. Silly me. How was I so naive to not know that the villians of the world monitor the newsgroups. beware all. David Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37621
 - 23
 - Lock Violation What is a lock violation? How do I uninstall or install when I keep getting a lock violation message? How do I unlock?? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37620
 - 24
 - help someone please since some relatives of mine came to visit and used my computer, my home page has been set to luckysearch.com, globe-search.cc or icansearch.net, i have changed it in my registry back to my original homepage but everytime i change this, something is changing it back, does anyone know if there is a maliscous program going about that virus checkers don't recognise or microsoft security updates don't resolve. if someone could help me it would be a great help Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37615
 - 25
 - using my email address to send spam Hi there, Below is a spam letter i got but their usinng MY EMAIL ADDRESS IVE HAD ABOUT 18MONTHS. Hoe can they do this and what about the legality of it. Bob. >From: bobburns43@hotmail.com >Date: 18 Oct 2003 01:40:09 -0700 > ><html><center>225u3105o10307j65652454sc4z 0x48m2316121gz1m4l050705258 str4 $ >You wouldn't pass up an extra $1,000.00 a year... Would you? > We do the work for you. By subrnitting your information across to hundreds of Ienders, we can get you the best interest rates around. str5$ Imterest rates are lower than they have been in over 40 years, but it won't stay that way for long. Our simple form only takes a few moments, there is absolutly NO OBLlGATlON, and it's 100% FREE. You have nothing to lose, and everything to gain. <a href="strurl$cgi- bin/affiliates/clickthru.cgi?id=mail01">str3 $</a> 3438a10126uw2915qr7qy7wn63 i k8v8hd14e3pkb3779tjr625037c 6z93twg7f5p174313m60225u3105o10307j65652454sc4z0x 48m23 >str6$, <a href="strurl$gone/">un s ubscr11be</a>. Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37614
- Next
 - 1
 - Win2K3 Enterprise Server Checked + Debug Updates Hey, I have a checked (etc) version of Win server 2003, I am unable to install any updates, this would be no problem appart from the current situation with the blaster virus, Is there anywhere which i can go to get update's that will install or can i change a setting so that it will accept the updates? Many thanks in advance Richard. Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37613
 - 2
 - Password Protect? My brother keeps getting in and deleting my files. Can anyone tell me how to password protect my files or folders? thanks! Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37600
 - 3
 - Error when loading 2003 Norton Internet Security I get the following run time error after loading 2003 Norton Internet Secuirty Program C:\Program Files\Common Files\Symantec Shared\ccApp.exe R6025 -pure virtual function call I am running Windows XP Professional and am trying to install a Linksys wireless router Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37599
 - 4
 - Pop Ups: This is only my experience and I do not want take away from all of the other posts that give out free program info to get rid of pop ups. 3 1/2 weeks ago I installed Internet Security from Norton (2004)version. Since that time I have not had 1 pop up(I'm not kidding) anywhere and I do surf a lot with cable. I tried some other programs before (free) and they helped somewhat but still very frustrating. It also learns you spam habits and will put them in a spam folder or do whatever you want. All I will say is if you are looking for pop ups to go away this is the program not to mention the firewall,anti- virus,anti-spam and more. No I don't work for Norton but this program is great! Costco $58.00 with $30.00 upgrade rebate. Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37593
 - 5
 - Auto dial out Computer dials out automatically on seemingly random basis. Seems to use Acord32. Why? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37590
 - 6
 - Microsoft updates & patches I'm not sure, but I think I may be a victim of what David Barnard wrote about. I thought I was setting up automatic updates from Microsoft. Now I get dozens of emails every day from Microsoft Corporation, MS Corporation, subject: patch update, bug,...etc. They completely clog my email because they are large files. I put the settings on my computer so as not to receive automatic updates, but they continue. How do I stop this???? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37587
 - 7
 - Get email about new security updates! In the aftermath of swen (some of us are still dealing with it) I was stunned to read this on the Microsoft homepage: "Stay Secure - Get email about new security updates". This is targeted at home users (the same home users who, in their thousands, clicked on that wonderful attachment courtesy of swen). Now, does this sound like Trustworthy Computing? There is, admittedly, a separate page explaining how to tell whether an email came from Microsoft or not, but this is beside the point. People are confused enough already. Providing a quick fix is no solution - this just opens the door for more swen variants, claiming to be sent because YOU subscribed for it, and with no attachment (Microsoft will NEVER send you an attachment. Click on <fakeurl> instead). Does anyone care to attempt to reconcile this irresponsible action with Microsoft's public stance on security? David Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37577
 - 8
 - none none -- Posted via http://dbforums.com Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37569
 - 9
 - Microsoft Windows Update Site Broken in IE6 I am the admin for several NT4 workstations. The Windows Update site (which had previously been working, and only works in IE) seems to have been broken with the new method of releasing patches (the October patches). The website shows "No updates of this type are available at this time." under the section "critical updates and service packs." Because the workstation had not been patched with the latest updates it should have shown: KB824141 KB828035 KB823182 KB825119 Good job, you guys at Microsoft. Keep up the good work -- breaking two things for every one you fix! --Douglas Mayne Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37566
 - 10
 - Digital ID without email address Hi! Sorry aboy cross posting, but I just saw this group so... If I want to use Digital ID which does not contain email address to sign emails how can I do that in Outlook 2003. I know it should be possible, but what I should do excatly? Cheers, Mikko Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37557
 - 11
 - WINS ADMIN delegation Can someone tell me the best approach to delegating WINS admin to my network team. We recently migrated our WINS from UNIX servers to our AD DC's. We do not want to add them to any unnecessary high level groups (e. g. server operator or DA) to do this delegation. Please advise. Thank you Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37556
 - 12
 - ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.10.17 Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette I just heard about a new Microsoft security patch update. Where can I get the patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I just installed a Microsoft security patch update, and now my computer is having problems. http://securityadmin.info/faq.htm#patchbroke I received an email from Microsoft / Microsoft Support / Microsoft Internet Security Center claiming to be a security patch [or comprehensive Internet Explorer update]. Is this a virus? http://securityadmin.info/faq.htm#microsoftemail ALSO NOTE: www.grisoft.com is free antivirus, USE IT. I received a virus email from a Microsoft email address. Who do I report this to? http://securityadmin.info/faq.htm#microsoftemail I have the RPC Blaster worm "virus," what do I do? http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. My computer is giving RPC Remote Procedure Call messages. There is a TFTP message or file on my computer. My computer keeps locking up, and/or rebooting, or telling me that it will reboot in 1 minute. http://www.microsoft.com/security/incident/blast.asp ALSO NOTE: www.grisoft.com is free antivirus, USE IT. Where can I download the Blaster worm / RPC DCOM patch? http://windowsupdate.microsoft.com OR http://www.microsoft.com/technet/security/current.asp I'm having a problem caused by the JDBGMGR.EXE Teddy Bear "virus" hoax, or I want to replace this file. http://securityadmin.info/faq.htm#jdbgmgr I forgot my Windows logon password and can't log in. How do I reset it? http://securityadmin.info/faq.htm#password I have a problem or a question with a virus or with antivirus. http://securityadmin.info/faq.htm#virus NOTE: www.grisoft.com is free antivirus, USE IT. Why is Outlook Express blocking my attachments as "unsafe"? http://securityadmin.info/faq.htm#attachments How do I stop getting pop-up messages? Or adware? Or spyware? http://securityadmin.info/faq.htm#pop-ups How do I block people from viewing adult or objectionable content on a computer? http://securityadmin.info/faq.htm#contentfilter How do I block spam emails? http://securityadmin.info/faq.htm#spam There is a Content Advisor password blocking me from certain web sites. http://securityadmin.info/faq.htm#contentadvisor How do I delete an FTP folder that a hacker put on my computer and I cannot delete? http://securityadmin.info/faq.htm#ftpfolder Have I been hacked? What do I do if I've been hacked? http://securityadmin.info/faq.htm#hacked How do I re-secure a computer that has been hacked? http://securityadmin.info/faq.htm#re-secure How do I test or improve the security on my computer to avoid being hacked? http://securityadmin.info/faq.htm#harden How do I investigate a suspicious IP address that may be trying to hack me? http://securityadmin.info/faq.htm#trace How do I report a hacker? http://securityadmin.info/faq.htm#reporthacker How do I use a port scanner or vulnerability scanner to test my security? http://securityadmin.info/faq.htm#portscanner How do I encrypt my files and/or hard drive? http://securityadmin.info/faq.htm#encryption How do I get a firewall? IDS? http://securityadmin.info/faq.htm#firewall I want to use the IPSec filtering or IP filtering feature of Windows to block certain ports and have a problem or question. http://securityadmin.info/faq.htm#ipsec I have a problem or question with the XP ICF firewall. http://securityadmin.info/faq.htm#icf I have a problem or question with the IIS URLScan tool. http://securityadmin.info/faq.htm#urlscan How do I change the banner on my computer or server to hide what software version I'm using? http://securityadmin.info/faq.htm#banner How do I enable Windows Auditing to tell who logged into Windows or who accessed a file? http://securityadmin.info/faq.htm#auditing How do I inspect and disable programs that start up when Windows starts? http://securityadmin.info/faq.htm#startup How do I use RUNAS or let someone use RUNAS to run commands as administrator without having to type the password? http://securityadmin.info/faq.htm#runas How do I let non-administrator users run Defrag or change their IP address? http://securityadmin.info/faq.htm#runas My question is not mentioned above. How do I get an answer immediately, with no waiting? http://securityadmin.info/faq.htm#moreinfo See also: http://www.google.com/groups?as_ugroup=microsoft.public.* See also: http://www.google.com/advanced_group_search See also: http://www.google.com I want to post a problem or question to the newsgroup. What info do I need to post in order to get a correct answer quickly? http://securityadmin.info/faq.htm#netiquette Note that this is NOT a full list of all the questions answered in the FAQ. Chances are, your question has probably already been answered. The complete FAQ is at: http://securityadmin.info/faq.htm#contents I hope this is helpful. Feedback, suggestions and criticism regarding the FAQ are welcome and may be emailed to me. kind regards, Karl Levinson, CISSP, MCSE, MVP email: levinson_k@despammed.com Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37554
 - 13
 - Malicious Hacker Activity OK malicious hackers you have pissed ,me off. deal with it. This babe is going to expose your hacking activites, and I'm going to hit ya hard, Tracker Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37548
 - 14
 - pop ups I continue to get more pop ups and it makes my newer computer non-function when I am on the web....any idea how I can stop all pop ups...bought and downloaded software to stop it and it does not seem to help...is there some ways on my computer control panel that I can stop these disturbances Thanks Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37544
 - 15
 - Security Hotfix blue screened my duel proc. NT box Last weekend, during an upgrade, I took advantage of the downtime to upgrade some member servers, get those security patches all up to date. One box, which I recently added a 2nd processor too, NT 4 SP6a, IIS 4 blue screened after one of the updates (no, I don't remember which, and didn't write it down - within a few months though). I was able to fix the box by booting into another NT config (the one created when I added the processor) and copy back the system files the patch backed up. Here is my question, it would appear security hotfix was not for a second processor, and replaced system files incorrectly. I scoured MS site tonight, and found no mention of different patches for different kernels. Am I on the right track or did I just have a blowup after a patch? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37534
 - 16
 - New security bulletin format: Where's the 'will be included in...' information? Always appreciate new-and-improved-ness, but there is one very important piece of information left out of the new security bulletins that would be most helpful to have back in. Previous bulletins would tell you explicitly in what future service pack the hotfix would be included (if it was going to be included in a service pack). If we know a hotfix was to be included in a future service pack, we may hold off for the service pack; we would only deploy the hotfix if necessary. This lets us be a bit more deliberate about which hotfixes we deploy. We also keep track of which service pack the hotfix was included, so we can do periodic audits of our security bulletin database. Many times we find that a critical hotfix is now moot as a subsequent service pack has 'fixed' the issue. Microsoft, can you please add this 'feature' back in? Or at least give us a quick way to determine which service packs (or security roll-ups) take care of which security issues besides having to sift through service pack release notes? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37532
 - 17
 - mssecure.xml does not check for latest patches Hfnetchk and mbsa (with the latest mssecure.xml) do not scan for the Oct 15th patches on NT 4SP6a workstation even though the bulletins say they are required. Same thing with windowsupdate.com. Is this a mistake or is MS no longer supporting scanning for hotfixes on NT workstation? Thanks Matt _______________________________________________________________________________ Posted Via Uncensored-News.Com - Accounts Starting At $6.95 - http://www.uncensored-news.com <><><><><><><> The Worlds Uncensored News Source <><><><><><><><> Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37529
 - 18
 - Newest Security Bulletins MS03-041/047 Hi, If I open the latest security bulletins MS03-041/047 by clicking one from http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/current.asp I can see the Print icon in the top right hand corner. If I click on it to print I get a box that says The attempt to print failed. Please use your browsers default print services. This is not the case with previous bulletins. Why is this failing now? Thanks Chris Wood Alberta Department of Energy CANADA Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37522
 - 19
 - Patching according to KB828489 when Exchange and OWA are not on the same server??? Hi All From what I understand the patch for OWA 5.5 described in KB 828489 affects both Exchange Server and IIS.... now in my case the OWA 5.5 service is not on the same server where Exchange 5.5 is. Question 1) Should I apply the same patch on both servers or only on the one where OWA is? 2) Is patch going to do its job or was it conceived to work on a single box (Exchange and OWA on the same box). Thank you for your help!!! Theo Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37521
 - 20
 - jig.ms.smv virus Gotz to be wack when it ain't all dat. I be sayin' like yo foo, cool chill like no otha, criznap. Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37518
 - 21
 - Respond To Review Four Remember, we?re talking about Windows 95,98 and ME Platforms and my book was written for basic home computer users only. It?s has since grown into a book which will help three levels of computer Windows users. The following is from a reviewer with the nick name of "Jack" Part 1: Throughout the document, there area number of sentences that make absolutely no sense whatsoever. An few examples: "The time seemed like forever, with no end; On the technical side, there is no mention of the time between the request to close the account(s) and the time it was discovered that the logins had not been disabled. This may indeed display poor housekeeping on the part of the ISP but does not provide evidence that this method is being used by "hackers" to access others systems. ME: I?m not going to be honest about how long the ISP dial-up access was truly used, but a guideline could be two months. Read Review 3 for the response provided. The three separate ISP e-mail accounts were closed months prior, but I was still able to access them through dial-up. Even if it was poor housekeeping on an ISP?s part, the point is, hackers are using your canceled account Cable/DSL dial-up access and this should tell the world how hackers are accessing the Internet for free. AT&T and Qwest provided 20 free hours of dial-up at the time of writing my book, but we used the same 20 hours, plus, each month. Hackers can then set-up a Dial-up Server on a victims computer and use pre-paid phone time. Or the hacker can set-up an ISPs Primary and Secondary DNS IP addresses and just connect using their own modem and your canceled Cable/DSL dial-up accounts. The method used to calculate the potential loss to the ISP(s) was " Estimated the above by the amount of attacks our compromised computers were receiving on a daily, weekly and monthly basis." According to the text, these attacks numbered 50,000 in a month. This equates out to roughly one "attack" per minute just on the compromised machines. There is no mention of what constituted an attack nor how it was determined that all of these attacks came from closed or hacked accounts. ME: There were two different computers online at any given time. Zone Alarm and Blackice Defender logs listed a number of attacks and we also calculated the Blackice firewall logs which was owned by the hackers, hidden in a Folder. You have to remember, "The Trackers" were a six member crew and we had at least one computer up almost 24/7. We never could understand how the ferret owners never figured out how one person, "ME", could be online 24/7 and not notice this. They would go to bed and the computer would be online, they would wake up and the computer was still online and someone was actively using the Internet. DAMN! "Malicious hackers aren?t going to use their own computers to scan any system, network or server for open ports". I know some secrets around this, but they won?t ever be shared with any one. About 90% or so of firewall log evidence will come from innocent victims computers and some of these computers are only misconfigured. How does this babe know this, it?s because I?ve contacted nearly a thousand of the owners of these IP addresses listed in my firewall logs and either they had no idea what the fuck I was talking about, they didn?t know their computer had open ports or they didn?t even know what an open port was. Their IP address was port scanned and it revealed to me their computers with either open ports, Trojan Horses or Backdoors. The discussion in the paragraph revolves around potential lost revenue and does not address the methods used to gain the access to the accounts nor does it indicate methods to minimize the risk (i.e.strong passwords). ME: Will assume your talking about the two million dollar articles. I?m not totally sure how to address this, but will try. Most individuals on a Windows Platform don?t know they need to disable any services, especially file and print sharing. If a Windows Platform owner doesn?t disable these services then any one in the world can view what is on their hard drive, install a Backdoor, Trojan Horse or Virtual Private Network. (an elite hackers secret) Passwords don?t mean shit because many applications expose clear text passwords directly on your hard drive. I have a listing of the applications which expose clear text passwords, but if you want to know, purchase my e-book. This topic could go on and on forever and it?s not worth my time to address this issue. Purchase my book and the rest of your question shall be answered. Moving on to paragraph B, the paragraph mentions that the "hackers" are "Previous owners are unaware that the general public, or malicious hackers, are using their old account information, and all vital information that only the customer should know and have." The discussion now moves from free access to an account to access to the ISP's database of customer information. This would involve compromising more than just a logon into a dial-up account. ME: I?m not totally understanding your remarks here. See above remarks. We move on the the statement that previous customer would be liable for any wrongdoing on a closed account. A previous customer would have no liability whatsoever for what happens with a closed account. When an account is closed, the ISP would become the responsible party. ME: Many ISP?s don?t give you a confirmation number when they close your accounts besides AOL that I know of. My point is, the malicious hackers, some working for the 1%er Clubbers continue to use these canceled dial-up accounts and it?s not limited to the time limit an ISP provides. Some ISP?s don?t close the dial-up access and these accounts are being abused, revenue given away for free. Just as I did when testing "my" Cable/DSL dial-up accounts which were still accessible to me for as long as my heart desired. But when the law checks the source of an ISPs communications IP and it links to a specific computer, yours, sorry you?re misinformed. The law will knock on the source not the ISP. Since the hacker is using your computer for abusive purposes, the owner of the computer is responsible. Paragraph C indicates that everyone is vulnerable to the dial-up access since the "hackers" already have the email ID and password. Finally a true statement, If your account has been compromised then you are indeed vulnerable to someone using your account without permission. Hence the need to utilize strong passwords and to change them often. ME: Read earlier remarks and I?m only concerned with canceled Cable/DSL dial-up access which is accessible after a person cancels their account. Paragraph D shows a complete misunderstanding of what a MITM attack is and how it operates. In the scenario shown, the MITM attack would have had to compromise the ISP's server and not the computer of the user to block information from the user to the ISP relating to their network. A MITM attack forces a redirect the connection from one computer to the next by re-routing information to the MITM system. MITM attacks, while possible are also very fragile and typically would not be used in an attempt to block email from a user to an ISP. ME: Read in a few hacker books about a MITM and Loky Servers and how they work. God gave me a gift and when I realized my abuse complaints were coming back "mainly" from many "Loky Servers", this expressed that a MITM was involved. Another sign was not receiving responses from Internet Service Providers with a ticket number. This "told me" the hackers had installed a MITM Server and only the hackers were receiving our mail. DUH! Even e-mails to my friends went unnoticed until I called them on the phone and asked them why they didn?t respond to me and their response was, I never received any mail from you. Many ISP?s I contacted didn?t even realize that when you send in an abuse complaint with a MITM that the complaint would go to the hacker first. They advised us to e-mail them any complaint and we advised them of their ignorance. I decided to give up on either Earthlink or Qwest Security Personal and what a shame. Being a basic computer user, they should know a hell of a lot more about MITM then me. The hacker directs my mail to their server, they read what they want and then forward only what they want to. In the paragraph following D (E??), There is a direct contradiction of the statement in paragraph A that number of ISP's were contacted and all held the same policy of allowing unlimited access to closed accounts via dial-up. The un-lettered paragraph states that only AT&T was contacted but all of the other companies provide dial-up access. ME: At the time only AT&T, Earthlink and Qwest were contacted. Earthlink and Qwest were separate companies, then they merged. At some point during the writing of my book, AT&T discontinued their free dial-up access. The remaining ISPs listed were contacted on the phone pertaining to their dial-up access. Three TOP well known ISPs couldn?t or wouldn?t cancel their dial-up access, so how could you expect small ISPs to do the same. "THE SECOND MILLION DOLLAR EXPOSURE" Once again we find nonsensical sentences like: "On unlimited occasions then you could count, while the system was online, it would freeze or lock-up." A system freezing or locking up can be caused by a number of factors including but not limited to OS issues, software or hardware conflicts, hardware problems etc. Making a correlation between a computer locking up and that same computer being compromised is ludicrous to say the least. Other than being an annoyance, locking up a compromised computer does very little for the "hacker" since a locked up computer is useless while it is in that state. ME: I believe the computer freezing up had to do with us changing between DCHP, PPP and dial-up connections and the settings between the different Internet Service Providers. Most basic computer users wouldn?t be changing their set-ups as often as we did. The Second Million Dollar Exposure wasn?t exposed to me until about a year after I discovered my systems were compromised. The test mentioned here merely shows what MS already told her, that is no charge for connections to multiple email addresses. Interestingly, the "test" mentions access to email accounts only. There is no mention if the "other Tracker" was using their ISP to attach to the MS mail server or if they were connecting via a login. Also, I noticed that there were not simultaneous connections to the SAME email account. Either way, if this is how MS wants to bill their customers, it is not evidence of a "hacker" doing anything to the account. It is merely a benefit of an MSN account and nothing more. Currently Compuserve, AOL and a number of other ISP's allow concurrent acess to member accounts in the same household. This is an indicator that more households have multiple computers that need to be online simultaneously and nothing else. ME: The other Tracker had their own MSN account. An ISP account can only track e-mail addresses, the phone number which the account is accessed from. A Tracker was connecting through their own MSN set-up using my main e-mail account e-mail address. Concurrent doesn?t mean the same as simultaneously at the same time. We both used my main email address and one other e-mail address of the nine addresses MSN provides. We connected at the same time one after the other using both my main e-mail address and one of the other eight e-mail addresses MSN provided. We both live in different states and we still were able to use the same e-mail addresses, simultaneously. No extra bill was sent my way, of which I would have paid. Just because "The Trackers" are friends doesn?t mean any one that is given any of my nine e-mail addresses should be able to connect at the same time. This is allowing hackers and 1%er Clubbers to also use these addresses to log onto Microsoft Networks or Servers which is providing free access to eight other people whom I may or may not know. And don?t forget them Dial-up Servers and pre-paid phone cards the criminals are using. DAMN! The Best Kept Secrets of Backdoors, Cracking, Firewalls, Hacking, Proxies, The Internet, Trojan Horses, Virtual Private Networks, Virus, Windows and different types of Servers can be found at: http://geocities.com/secure2003flop Tracker Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37517
 - 22
 - Asp.Net.Vulnerability: Asp.Net buffer overflows (potential security problems) Have anybody tested if the latest RPC vulnerabilities can be executed from an Asp.Net page running in an un-patched server? Since it is possible to make direct Win32 API calls from Asp.Net there is a high change that these vulnerabilities will work. If that is possible, please provide the test code in order for me to add it to our ANSA (Asp.Net Security Analyser, see http://www.gotdotnet.com/Community/Workspaces/Workspace.aspx?id=36ae9a2c-8740-4b52-924e-320edf64fba5) so that system administrators can quickly identify the vulnerable servers and patch them. Note that at the moment there is no 'real' solution to disabling Win32 API calls in IIS 5.0 and IIS 6.0. Which means that if these vulnerabilities exist, then it would be a critical problem, because everybody that hosts .Net websites in shared hosting environments would be affected. Best regards Dinis Cruz .Net Security Consultant DDPlus (www.ddplus.net) Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37511
 - 23
 - Asp.Net.Vulnerability: Win32 API calls (potential security problems) Asp.Net.Vulnerability: Win32 API calls (potential security problems) Since win32 calls are supported in Asp.Net and cannot be disabled when the website is running with 'Full trust', it is imperative to identify all potentially dangerous Win32 DLLs. Here is a short list of the ones we have identified whose risk needs to validated and (if required) write test scripts for: - New: CopyMemory, GetCurrentProcess, GetCurrentThread, GetTokenInformation, GetWindowsInformation, isNTAdmin, OpenProcessToken, OpenTheadToken, SendMessage - Compress: CopyLZFile, LZCopy - Crypto: CryptGetUserKey, CryptDestroyKey - Drives: GetLogicalDrives, GetVolumeInformation - EnvironmentVariables: GetEnvironmentString, GetEnvironmentVariable - Error: RaiseExeption, ReportFault, SetLastError - EventLog: OpenEventLog, ClearEventLog, ReportEvent - Exit: ExitWindowsEx, FatalAppExit, InitiateSystemShutdown, LockWorkstation - Files: CopyFile, CreateFile, GetFileAttributes, MoveFile, OpenFile, ReadFile, SetFileAttributes, SetFilePointer, SHGetFileInfo, TouchFileTimes, Writefile, FindFile: FindClose, FindFirstFile, FindNextFile - Heap: GetProcessHeap, HeapAlloc, HeapFree - Hook: CallNextHookEx, SetWindowsHookEx - ICMP: IcmpCreateFile, IcmpSendEcho - INI-Files: GetPrivateProfileSection , GetPrivateProfileString - Internet: FtpGetFile, InternetAttemptConnect, InternetConnect, InternetOpen, InternetOpenURL, InternetaReadFile, IsDestinationReachable, IsNetworkAlive, IsValidURL, URLdownloadtoFile - {List Not completed} Since we are not Win32 API experts (although we did manage to write a test script for the Kernel32 'WinExec' - see bellow) we would like ask for help to the more serious win32 developers which will be able to provide us with much more detailed and accurate information regarding the 'security risk' posed by each API call. The following is the code that we use in ANSA to test if a server is vulnerable. '**************************************************************** ' ANSA:W32_execute_cmd - This test checks if it is possible to execute ' commands on the server using a direct Win32 API call to the ' kernel32 'winExec'function . For this test to work a copy of 'cmd.exe' must ' be copied to the same directory containing this script '**************************************************************** <script runat=server> Declare Function WinExec Lib "kernel32" Alias "WinExec" (ByVal lpCmdLine As String, ByVal nCmdShow As Long) As Long Declare Function CopyFile Lib "kernel32" Alias "CopyFileA" (ByVal lpExistingFileName As String, ByVal lpNewFileName As String, ByVal bFailIfExists As Long) As Long public Function Run_test(mode) try Dim winObj, objProcessInfo, item, local_dir, local_copy_of_cmd, Target_copy_of_cmd Dim objStartup, objConfig, objProcess, errReturn, intProcessID, temp_name Dim FailIfExists Dim Cmd_to_execute = "dir" local_dir = left(request.servervariables("PATH_TRANSLATED"), _ inStrRev(request.servervariables("PATH_TRANSLATED"),"\")) local_copy_of_cmd = Local_dir+"cmd.exe" Target_copy_of_cmd = Environment.GetEnvironmentVariable("Temp")+"\_test.exe" ' Copy CMD.EXE to temp directory CopyFile(local_copy_of_cmd, Target_copy_of_cmd,FailIfExists) ' Execute Command and save results in temp file errReturn = WinExec(Target_copy_of_cmd + " /c " + cmd_to_execute, 10) Run_test = OK + Critical +" The server allows the remote execution of commands using a direct call to WinExec API!" catch Run_test = OK + low + "It was not possible to execute commands using cmd.exe" end try end function </script> '**************************************************************** Thanks for the help Best regards Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37509
 - 24
 - i get this on my desktop Hi every week or so..i get a file called ~ on my desktop... i only get it when i have been surfing the net... it is small.84Kb.no signature..no properties. what is it?????? Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37507
 - 25
 - how to install IE security patches remotely i want to remotely install ie security patches and hotfixes to all my users. we have sms, and want to know if there is a way to update all out pcs remotely. we have no budget for this so it has to bee with sms or something that MS offers for free. Tag: KB824141 Patch *****BREAKS SOFTWARE***** Tag: 37506

In the hopes that someone at MS is listening, KB 824141
breaks third party software, specifically Avid XPress,
the most high-end video editing software for PCs in the
industry.

What the patch does has to be seen to be believed. It
causes Avid to open jillions of windows on load and then
hang. How this can happen from a patch that "fixes" list
and combo boxes I have no idea.

The "break" has been experienced by every Avid user.

See www.avid.com/community/forums/Forum38/HTML/000704.html

Dan

Top

Re: KB824141 Patch BREAKS SOFTWARE by Karl

Karl
Mon Oct 20 03:33:09 CDT 2003

MS does listen... but the info below may not be enough. Someone affected
might really want to call MS phone support, it's free for problems with MS
patches. phone numbers are at www.microsoft.com/support, click on the
"$245" option.

"Dan Holme" <anonymous@discussions.microsoft.com> wrote in message
news:2fa701c396d1$e0f4b290$7d02280a@phx.gbl...
> In the hopes that someone at MS is listening, KB 824141
> breaks third party software, specifically Avid XPress,
> the most high-end video editing software for PCs in the
> industry.
>
> What the patch does has to be seen to be believed. It
> causes Avid to open jillions of windows on load and then
> hang. How this can happen from a patch that "fixes" list
> and combo boxes I have no idea.
>
> The "break" has been experienced by every Avid user.
>
> See www.avid.com/community/forums/Forum38/HTML/000704.html
>
> Dan
>

Top

Re: KB824141 Patch BREAKS SOFTWARE by tech

tech
Mon Oct 20 20:58:52 CDT 2003

This update also affects 4D client applications.

"Dan Holme" <anonymous@discussions.microsoft.com> wrote in message
news:2fa701c396d1$e0f4b290$7d02280a@phx.gbl...
> In the hopes that someone at MS is listening, KB 824141
> breaks third party software, specifically Avid XPress,
> the most high-end video editing software for PCs in the
> industry.
>
> What the patch does has to be seen to be believed. It
> causes Avid to open jillions of windows on load and then
> hang. How this can happen from a patch that "fixes" list
> and combo boxes I have no idea.
>
> The "break" has been experienced by every Avid user.
>
> See www.avid.com/community/forums/Forum38/HTML/000704.html
>
> Dan
>

Top

KB824141 Patch *****BREAKS SOFTWARE*****

Re: KB824141 Patch *****BREAKS SOFTWARE***** by Karl

Re: KB824141 Patch *****BREAKS SOFTWARE***** by tech

KB824141 Patch BREAKS SOFTWARE

Re: KB824141 Patch BREAKS SOFTWARE by Karl

Re: KB824141 Patch BREAKS SOFTWARE by tech