re: kb891711 problems
Sunday, March 13, 2005 at 5:50 pm
Windows Me Annoyances Discussion Forum
Posted by Jack Gulley
(5917 messages posted)
That is now a vote of two having problems with this new security fix. I have only
found one other reference to a known software compatibility problem using it. I have
not seen any problems with it, but then I don't use ASDL connection software or ZoneAlarm.
But I am sure that Microsoft tested with those software combinations before releasing
this fix (they took two extra months).
The concern, is that there are now a number reports of large companies that provide
shared hosting web servers, who have been compromised and their customers web pages
modified to attack visitors using the exploits that this fix blocks. In other words,
the hackers are starting to attack users who do not have the fix installed and have
found ways to do it on a large scale. There is also a report of one known hacker
site using this exploit (MS05-002) to infect visitors with two files, that only the
Kaspersky AV is currently detecting.
I would recommend both search their systems for any hidden reference to "mhh.exe"
or "sr.exe" files. You may already be infected before you installed the KB891711
update. Open a MS-DOS window and search with the following command:
ATTRIB /S \sr.exe
ATTRIB /S \mhh.exe
I suspect your system may be infected with something that is not currently being
detected. Update your AV and run full scans. Then verify that you only have problems
when this update is enabled in the MSCONFIG Startup tab. I would also recommend an
on line scan with HouseCall_AV as they tend to update their definitions frequently.
Next get the current copy of HijackThis and run its output through the on line web
pages for checking the results. If you are unable to resolve the issue with this
"fix", then post your HijackThis log to your prior thread so everyone can look at
it. There may be some common element or problem.
See:  page
|
All messages in this thread [show all]
 | |  | re: kb891711 problems (Jack Gulley: Sun, Mar 13, 2005, 5:50 pm) |
| |
| |
| |
Return to the Windows Me Discussion Forum
|
|
