Worm Patch

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Security
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - worm what do I need to do to protect against the worm? I do not know a lot about the computer so you will need to tell me in easy terms. My computer is hp pavilion 515x Tag: Worm Patch Tag: 28472
  - 2
    - worm Hello i would really be grateful if someone cud tell me how to use the tool when i try toopen it it says 32 wont open it i think its me lol please someone tell me wot to do love and kisses marilyn xxx Tag: Worm Patch Tag: 28463
  - 3
    - unexpected user account a new user account has suddenly appeared on my pc. called: ASP.NET Machine A... I have no idea what it is and why it has suddenly appeared. any help on this would be much appreciated Tag: Worm Patch Tag: 28459
  - 4
    - What is application/ms-tnef attachment? I recently sent a message to somebody which had an "application/ms-tnef" attached to it. My computer is doing a few strange things recently (eg. my wife got a Reboot? prompt a couple of days ago). I've scanned my system with two up-to-date scanners (PC-CILLIN housecall, NOD32) but not found anything. There seem to be a lot of nasties around at present. Could this be one? Is this a common type of attachment for nasties? Thanks, Robert. Tag: Worm Patch Tag: 28456
  - 5
    - password manager - remember id @ password when signing on to a secure site the logon screen appers. on entering the id and password and press enter - a pop up screen appears asking if you want password manager to remember the id and password. if you select yes. it remembers when you next time go in. but it does not again ask if you want id and password be remembered by password manager. i am running windows me. how do i remove this remember id and password from the sign on. i have tried entering incorrect passwords and ids. it comes with error but represents the remebered id and password. please help = how to remove this. santhi Tag: Worm Patch Tag: 28454
  - 6
    - Blaster patch Hello! I have WIndows XP/home on my PC and I update my Norton anti-virus software weekly. I've run a scan on my computer and am not infected with the Blaster worm. Do I still need to install the Microsoft patch if I continue to update my anti-virus software regularly? I'm reluctant to do so if I don't have to, since I'm afraid the patch will interfere with other programs on my system. And if I still do need to install the patch, can you tell me which one it is? There are quite a few that the Microsoft site lists for me, and I can't tell which one is for Blaster. Thanks. MG Tag: Worm Patch Tag: 28452
  - 7
    - how to put a password to a sharefolder As mention in the subject does anyone know how to put a password to a share folder under windows xp pro? Tag: Worm Patch Tag: 28447
  - 8
    - question about IP I'd like to know if there is any possibility that I could change my PC's IP address or use a proxy server so I could access a webpage that verifies my datas and I'd be sure that it can't get my real ones?I'd really apreciate if you could help me here.I'm using Windows 98 SE,Internet Explorer 5.0 and I use a dial-up connection to access the internet.(if there are any mistakes in my letter,please understand them,I'm a romanian) Tag: Worm Patch Tag: 28423
  - 9
    - All the symptoms no worm yet I have all of the symptoms of this worm on my xp machine the computer restarts, the generic host process for Win32 crashes. I was able to change the rpc settings so the computer would stop restarting that worked, i also went to the registry key through the directions off Microsoft.com but the entry was not there. there is also not a program (blaster etc)running in the task manager I have downloaded 3 different scan tools from Trend micro,symantec,and computer associats and all 3 scans came up with no worm. has anyone had this same problem or is this a feature of one of the new strains that i have been hearing about. please reply if you have any info/ideas that might help thanks Tag: Worm Patch Tag: 28421
  - 10
    - downloading ICF Followed all the directions to download ICF to protect against Blaster virus. Got to step where after you select the connection if I click on Change settings of the connection nothing happens. If I right-clickin Network Connections folder and go to properties again nothing happens. Have tried several times following all instructions on Microsoft web page. What do I do now? Thanks for any help. Tag: Worm Patch Tag: 28375
  - 11
    - Security Event Log Entry We have NT4 SP6. I have been getting the Event ID: 560 entry in the Security Event Log with the following info: Object Server: Security Account Manager Object Type: SAM_USER Object Name: DOMAINS\Account\Users\000003FD New Handle ID: 1318680 Operation ID: {0,4304703} Process ID: 2162013760 Primary User Name: SYSTEM Primary Domain: NT AUTHORITY Primary Logon ID: (0x0,0x3E7) Client User Name: Client Domain: Client Logon ID: (0x0,0x4411) Accesses READ_CONTROL ReadGeneralInformation ReadLogon ReadAccount ListGroups Privileges - I haven't found any info as to what this means. Usually I get usernames from my domain and my domain name but this info does not make sense. The user field in the log reads ANONYMOUS even though the client user name is blank in the info above. Does anyone have any idea as to what this entry means? Thanks in advance. Tag: Worm Patch Tag: 28374
  - 12
    - PC restarting problems Help! Hi I have a PC that doesn't want to boot properly. It had been infected with a virus but was cleaned. When nothing else fixed the problem, I tried a reinstall It doesn't want to boot. I then did a repartition and format of the drive, but still no luck. The OS I'm trying with is W2K It starts up goes through the memory check and find the disks and such... sometime after that it decides to restart itself. any ideas? Please help! Thanks in advance - J Tag: Worm Patch Tag: 28365
  - 13
    - download why is it that i cannot download the blaster for the new virus Tag: Worm Patch Tag: 28360
  - 14
    - The Blaster Microsoft patch available from # 823559 necessary for Microsoft 98 Dear Sir, I notice from reading the description on # 823559 (" Blaster Worm: Critical Security Patch") that the Blaster or LovSan patch available from Microsoft is needed if you have the softward for either Window NT 4.0., Windows 2000, Windows XP and Windows Server 2003. Is it needed if you have Windows 98, 2nd Edition as I have? Donald B. Gilchrist Tag: Worm Patch Tag: 28359
  - 15
    - Variant of MSBlast - Alert for Win9x and other systems According to this bit of info from the Symantec site, there is a variant of the MSBlast Worm which potentially could target the following OS's: W95 / W98 / ME / NT / Win2000 and XP. W32.Randex.E Discovered 12/Aug/2003; Norton Anti-Virus updated 13/Aug/2003 @ 6:23 pm. Symantec Security Response http://www.symantec.com/avcenter/venc/data/w32.randex.e.html For those you have accessed this advisory with the MS web page, copy and paste this URL into your browser address window. Recommendations are to get the latest AV updates and Definitions. Check for any updates for your Operating System at the Windows Update Page. Block any of the affected ports with a firewall. Thanks to ~PA Bear for bringing this latest bit of info to my attention. LuckyStrike LS@smokedamagedfurniture.youcandriveitawaytoday.com ---------------------------------------------------------------------------- ---------- Tag: Worm Patch Tag: 28355
  - 16
    - MS03-026 (823980) Scanning Tool Available The following tool has just been released: Microsoft has released a KB 823980 Scanning Tool (KB823980scan.exe) that can be used to scan networks to identify host computers that do not have the 823980 security patch (MS03-026) installed. For additional information about the 823980 security patch (MS03-026), click the following article number to view the article in the Microsoft Knowledge Base: 823980 MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution http://support.microsoft.com/default.aspx?scid=kb;en-us;823980 For additional information about a new worm virus that tries to exploit the DCOM RPC vulnerability that is fixed by the 823980 security patch (MS03-026), click the following article number to view the article in the Microsoft Knowledge Base: 826955 Virus Alert About the W32.Blaster.Worm Worm http://support.microsoft.com/default.aspx?scid=KB;EN-US;826955 Download location: http://microsoft.com/downloads/details.aspx?FamilyId=C8F04C6C-B71B-4992-91F1-AAA785E709DA&displaylang=en The MS03-026 bulletin is being updated now as well. -- Regards, Jerry Bryant - MCSE, MCDBA Microsoft IT Communities Get Secure! www.microsoft.com/security This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Worm Patch Tag: 28352
  - 17
    - Firewall if i cant get in the properties of the Internet, then how do i create a firewall??? Tag: Worm Patch Tag: 28313
  - 18
    - Weird actions of blaster? Or maybe this is normal...I have and have always had my norton up to date for live up date. Then my comptuer pops up with the 'red alert' box from norton that my computer is infected with the blaster worm. I cannot quarantine or anything, only can hit ok. This will always pop up twice in a row. Then I do a system scan in all files for a virus, and it won't show up, I've downloaded the fixblast tool from norton to fix it and it says my computer is not infected. After connecting to the interent my machine gives me the 1 min countdown to restart. I have since turned my RPC to not restart my computer but to restart the service if it's interuppted so I could get the patch put on. Also in my processes the msblast.exe doesn't show up and my registry doesn't have the added key to run the ms blast. My question is how the heck do I get rid of it? Am I going to have to completely reinstall my XP? Thanks for any help! Jeanne Tag: Worm Patch Tag: 28304
  - 19
    - Weird actions of blaster? Or maybe this is normal...I have and have always had my norton up to date for live up date. Then my comptuer pops up with the 'red alert' box from norton that my computer is infected with the blaster worm. I cannot quarantine or anything, only can hit ok. This will always pop up twice in a row. Then I do a system scan in all files for a virus, and it won't show up, I've downloaded the fixblast tool from norton to fix it and it says my computer is not infected. After connecting to the interent my machine gives me the 1 min countdown to restart. I have since turned my RPC to not restart my computer but to restart the service if it's interuppted so I could get the patch put on. Also in my processes the msblast.exe doesn't show up and my registry doesn't have the added key to run the ms blast. My question is how the heck do I get rid of it? Am I going to have to completely reinstall my XP? Thanks for any help! Jeanne Tag: Worm Patch Tag: 28303
  - 20
    - Beware the popup ad imitating the blaster worm FYI Last night while browsing web sites I hit a popup ad that created a full screen white window with a dialog that looks very much like the crash dialog for RPCSS complete with a countdown timer. The only difference is there is some small ad text in the bottom of the dialog. It's a fake but it gave me a start. -- Ken Wickes [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights. Tag: Worm Patch Tag: 28294
  - 21
    - XP Blast gone but services still cant run Ok everyone check this out...I had the blast.exe removed from my XP home eddition. Attemted to disable the system restore before I reboot. failed. The blast worm appears to be gone in the registry current version_run_ is empty. Upon install of the update I received the "crypo service not running" error, unable to verify .inf file. So when I attempt to start that service it errors saying the dependencies are not running (RPC is that dependency). Cant even view properties of any services. Anyone heard of this? Tag: Worm Patch Tag: 28287
  - 22
    - Net Admins and Blaster What I find hard to believe is the number of network admins that didn't already have these ports blocked on their internet routers. I read where Maryland's Motor Vehicle Administration shut all its offices at noon. Whoever is in charge of security there should be fired. Remember to set those routers up to deny all and then only open up what you have to. Tag: Worm Patch Tag: 28278
  - 23
    - question on new virus is windows98 vunrable? and is there a pach for 98? Tag: Worm Patch Tag: 28276
  - 24
    - blaster worm I wanted to download patch, but was told there were no critical updates for my system. Is there something else I can do? Tag: Worm Patch Tag: 28265
  - 25
    - Certificate Server Installation Failure - Solution During the installation of Enterprise CA on Windows 2003 stops with error: An error was detected while configuring Certificate Services. The Certificate Services Setup Wizard will need to be rerun to complete the configuration. Certificate Services setup failed with the following error: Windows cannot find the network path. Verify that the network path is correct and the destination computer is not busy or turned off. If Windows still cannot find the network path, contact your network administrator. 0x80070033 (WIN32: 51) Wanted to post the solution I worked through to assist others in the future. After troubleshooting this for awhile I thought that this was being caused by a failed attempt to reach an AD Server even though the error was somewhat generic. All DNS possibilities were looked at and nothing was incorrect, although this was a multihomed server running ISA. I temporarily disabled the Internet NIC and the installation was successful,however I am investigating Event ID 103 Warning which appears to be the only event that this change produced. Hope this will help someone in the future. Tag: Worm Patch Tag: 28263
- Next
  - 1
    - Firewall I already have the MCAffee Firewall installed - do I need to install more security and will it interfere with the MCAfee firewall? Tag: Worm Patch Tag: 28262
  - 2
    - Outlook Express 6 Team Hi, Has anyone out there heard of this " Team" . I have received a number of emails ( less than 5 ) with the above heading. They usually come with an attachment. The attachment I received today was called Alex-judo1.eml.scr. (72.3KB) I understand that generally the .scr is a screen saver , but why would someone from Microsoft be sending me this? I didn't open it and have deleted the message. Any ideas? Thanks Tag: Worm Patch Tag: 28260
  - 3
    - Any recent changes in IE Security w/ .NET components? e.g. IEExec? Does anyone know of any recent changes/patches/updates affecting how Internet Explorer handles embedded and "no touch deployment" Windows Forms .NET Controls? I was working on a hosted .NET control a while back (not an ASP.NET control, but a Windows Forms .NET control that is embedded with the <object> tag. It was working very well then. I shelved it and recently came back to it and now ti doesn't show in the page. I also created a container EXE that can run from the same web site that was also working just fine, and now it throws a Security exception, with no useful information as to why. The control and the exe do nothing that required any additional permissions - no file access, etc. Im trying to figure what has changed - could it be that IEExec has been updated to be more "secure"? (in other words, cripple .NET in the browser so it takes the same downward spiral as java applets). It could also be that something was added to the code, but I just tried a new sample with a control containing only a label and no other code, and that failed to. If something has indeed changed, which it appears it has, where can I find more information on it? This needs to be deployed soon as part of an Intranet application, and additional client install needs to be avoided. Sorry for the wide cross-post, but this topic really does cross over several newsgroup boundaries. ________________________________________________________ Luther Miller . MCSD (.NET), Sr Software Architect / Engineer Softagon Corporation . www.softagon.com . San Francisco Tag: Worm Patch Tag: 28259
  - 4
    - Wireless Security I need clairification on a wireless issue. If 2 seperate LAN systen are running. The first LAN is NOT connected to the Internet for security reasons. The second LAN is using the Wireless Microsoft MN-500 Wireless router and does have an Internet connection through High Speed cable. Can the signal emmisions emmitted from the unshielded CAT5 wireing on LAN(1) be broadcasting inside of the wireless bubble. And if a hacker (with a wireless reciever NIC) gets in into the wireless LAN (which is no doubt possible) could they then grab the packets floating around from LAN system (1). This is what I heard and I'm wondering if this is actually true, because as I understand it, if the hacker connected to the Wireless LAN , which has it's own DNS, DHCP, Gateway and Subnet can they sniff packets that might be floating around that are from an entirely different DNS, DHCP, Gateway and Subnet? Or if they have a wireless reciever NIC can they just scan within the bubble for any packets of information without needing to make a connection to either Network? I hope I explained it properly, but if you would like to help with this situation and need further details, just ask. Thanks Tag: Worm Patch Tag: 28256
  - 5
    - encryption - combos vs keys question I want to encrypt some documents on my computer, but I don't want to use "combo" encryption, but rather burn a security key to a cd-r so if the CD is in the drive, I can open up the documents without so much as a popup box, but without the cd in the drive, I cannot gain access to the documents. Is there a program out there that can effectively do this? Tag: Worm Patch Tag: 28254
  - 6
    - blaster virus I don't see as fix for users of M/S ME. Is this system immune from this virus? JR Tag: Worm Patch Tag: 28253
  - 7
    - Worm I use Windows 98 4.10.1998 Do I need a patch for the worm? Also - does my system have anti-virus software imbedded? Tag: Worm Patch Tag: 28250
  - 8
    - Reboot-reboot-reboot My computer reboots so quickly that a had to remove the msblast.exe file while running in safe mode. I also deleted that line in the registry. I was never able to "end process" in the Task manager while in normal mode because my computer would not stay on long enough. My computer still reboots. How can I get it to stop. Tag: Worm Patch Tag: 28249
  - 9
    - microsoft windows server 2003 I am concerned about the "worm". How do I know whether I have microsoft windows server 2003? I have microsoft '98 and I must have a server. Tag: Worm Patch Tag: 28246
  - 10
    - worm Is there a patch for Windows98? If not do I need to be concerned? Tag: Worm Patch Tag: 28242
  - 11
    - Any blaster worm security patch for windows98..?? My all users are Windows 98 based. I saw the blaster worm security patch for windows XP/2000/NT. But there is nothing written Windows 98 vunerability regarding this worm or about patch for it. I tried to find online support, but there is no specific email id for writing my query to Microsoft Tech. Support regarding this issue. If somebody knows the answer, then Help me out please..... Tag: Worm Patch Tag: 28239
  - 12
    - Using Group Name in an Internationalized application. Hi, I am seeking the opinion of people that have implemented the use of Group policies in internationalized applications. In our application we have some core components that have to validate the credentials of users, for instance we check if a user is a member of the "Acme Administrators" group or "Acme Users" user. The problem comes from the fact that in our french version the groups will be named "Acme Administrateurs" and "Acme Usagers", so we cannot search by group name. One obvious solution is to store in the registry the SID's of the variaous groups we have created and lookup by SID's instead of names. Are there any other way? Thank you! Martin Paré Tag: Worm Patch Tag: 28237
  - 13
    - is that possible ? I have computers in a network behind NAT, do they vulneable to blaster worm, coz they are not infecetd yet? Tag: Worm Patch Tag: 28236
  - 14
    - anti-MSblast program run, still evidence of worm in system? Sorry if this has been covered and I missed it. We ran the anti-worm program-- which said the worm was found and eliminated. We downloaded/installed the patch. Why when we search files using the search function in XP does it appear that there's a file related to the MSblast worm: msblast.exe-3646SF... C\WINNT\Prefetch with a date and time? This has occured on both of our infected computers. When we search the directory through dos as outlined in one of the instructions sheets on this website, however, it says the virus/worm isn't in the system. Any idea what all this means, and how to straighten it out? Thanks. Tag: Worm Patch Tag: 28233
  - 15
    - Method of object failed All of my users are running Windows XP Professional. The users who access our license system which uses MTS 1.0 and SQL Server 7.0 are experiencing a problem when trying to use the license system. It seems that when a call is made to the SQL database it brings back the following error: The Error_Num: 2147221503 Error_Sources:licensedata2.clsScreenData() Errors Are: method of '~' of object failed method of '~' of object failed. I noticed other postings here with this same error and SQL related. Tag: Worm Patch Tag: 28212
  - 16
    - blaster worm and windows Me Is Windows Me vulnerable to the Blaster Worm? Tag: Worm Patch Tag: 28211
  - 17
    - w32.ircbot virus this virus will not allow excell to run. how do i clean it up. c\winnt\system32\system.exe has been curupted Tag: Worm Patch Tag: 28210
  - 18
    - about windows xp now i have a message at any time i enter the internet and this message tells me that the conmputer will close after 1 minute and i think this is a virous that attack any NT windows . i want to download the (blaster worm :windows xp security patch ) and i can't download it from windows 98se how can i download this patch using windows 98se? Tag: Worm Patch Tag: 28207
  - 19
    - NEW SECURITY DOWNLOAD I am a business owner and I have recently followed MS urgent suggestion to download new anti=hacker security program..at the same time, I downloaded the current 2000 Pro updates. PROBLEM>>>>>> Now I cannot receive the attachments from my INsurance Companies that are ESSENTIAL to operate my business...message is "OE has removed potentially harmful attachment" HOW CAN I GET MY E-MAIL ATTACHMENTS BACK??? SOMEONE, please help. I can't figure out how to communicate directly with MS. Tag: Worm Patch Tag: 28205
  - 20
    - Blaster Worm downloads You can get the Blasterworm patch from this Microsoft website but it will only install the patch on the computer online- you can not download the patch from one computer and install it on another computer. Since my computer can only stay online for a couple of minutes due to this virus, how is anyone supposed to install the patch????? Tag: Worm Patch Tag: 28204
  - 21
    - Windowsupdate.com I loaded the above update and now I can't open any attachments to E-Mail that I receive. What can I do? Please help. Bill Tag: Worm Patch Tag: 28200
  - 22
    - blasterworm? I was using a computer that belongs to a friend of mine to check email when all of a sudden it just started rebooting itself. Then I saw the news about this blaster worm. I am a mac user and would like to fix her computer since I'm the one that messed it up. Are there step by step instructions somewhere to get rid of it? She is running Windows XP. Any help would be appreciated since I am not that familiar with the OS. Thankyou. Tag: Worm Patch Tag: 28182
  - 23
    - Microsoft's Milestone Q: Better testing for Office, but not Windows? What gives? What is going on with Trust Worthing for all Microsoft product lines, especially Windows? Look at this article about Microsoft's new Milestone Q program to do better testing of Office 2003 before it is released. http://www.crn.com/sections/News/top_news.asp?ArticleID=43822 Why is microsoft only applying new tight testing policies with Office Only? Why are they not applying the same new basic tighter engineering and testing requirements for ALL products? -- Hector Santos WINSERVER "Wildcat! Interactive Net Server" support: http://www.winserver.com sales: http://www.santronics.com Tag: Worm Patch Tag: 28178
  - 24
    - Security Downloads fm MS On viewing CNBC (Liz Claymans Financial Program) she stated that one of the security downloads from MS would prevent the user from viewing any "attachments" sent by others E-mail. My Outlook Express is experienceing this right now. I get the OU symbol in the upper left corner when I try to view an "attachment".....Thanks, Charlie Tag: Worm Patch Tag: 28175
  - 25
    - supposed attack on the windows update site this saturday 16th august 2003 can anyone tell me what is the likelyhood of being infected with the hacker attempt of the windows update site this saturday. as i believe the attack will be in the form of a worm that is designed to attack internet explorer . unfortunetely i am not able to acces online the windows update patches list at this time (although i am fully updated until july 2003) i am worried that when i go back online i wont have been able to install the necessary update that is required (if it is required) before the 16th and so if anyone can shed some light on this subject - which patch i need - i would be most grateful. regards LC Tag: Worm Patch Tag: 28171

Hello. I have XP home on my PC. I have routinely updated
my software via windows update. Do I still need to go
elsewhere to download a seperate patch, or will windows
update take care of it?

Also, I've tried enabling the personal firewall on XP, but
I cant find where to do so. My dialup connection came
from a CD from my ISP. Would that prevent me from
enabling it on that connection?

I followed the directions on MS website but still gets
stuck.

Top

Worm Patch by David

David
Fri Aug 15 08:57:38 CDT 2003

It should be under the "Advanced" tab of your network
connection properties box. Right-click on your network
connection, whether it is dial-up or LAN, and click
Properties, then click the Advanced tab. You should see
a check box for the personal firewall. I am running XP
Professional at home, but I assume it's the same for
regular XP Home edition. Hope this helps.

Top

Re: Worm Patch by David

David
Fri Aug 15 09:05:32 CDT 2003

> Hello. I have XP home on my PC. I have routinely updated
> my software via windows update. Do I still need to go
> elsewhere to download a seperate patch, or will windows
> update take care of it?
>

You should be OK. If you can get to Windows Update select "View Installation
History" in the left pane. If you see and update that says: "Security Update
for Windows XP (823980)" you have the patch.

Top