1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

MSblast

Discussion in 'Security and Privacy' started by AceH, 2003/08/14.

Thread Status:
Not open for further replies.
  1. 2003/08/14
    AceH

    AceH Inactive Thread Starter

    Joined:
    2002/01/16
    Messages:
    601
    Likes Received:
    2
    I've been running ZoneAlarm, my McAfee VirusScan is up to date. Knowing how some patches can cause more harm than what they are intended to do, would it be REASONABLY safe to say I can hold off on installing the "worm" patch. I've downloaded it just in cast but I haven't installed it.
     
    AceH,
    #1
  2. 2003/08/14
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    Actually this uses an "exploit" to enter.

    It will enter anyway but if your Virus scanner is up to date it should catch it and clean it.

    Ater you are tired of seeing the Virus scanner catch it then clean it over and over a few times then you will be ready to do the patch to keep it from coming thru in the first place!

    Mike
     
    mflynn,
    #2


  3. to hide this advert.

  4. 2003/08/14
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Gents - normally I'd agree with Mike but they are creating new variants at a rapid rate and very easy to get bit by one that didn't exist when you updated your def files 6 hours ago.

    For this one, I'd patch. And close off ports 69 / 4444. And update my AV files.
     
    Newt,
    #3
  5. 2003/08/14
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    I'm sorry, but I don't see any reason holding off on security patches labeled critical.

    In fact, I do not feel sorry for anybody who got their system infected... Their have been lots of reports (even in the "mainstream" media) about the "critical" nature of the flaw when it was discovered, so anybody had time enough to patch their system.

    How come these same people are checking for the latest AV updates on a daily basis?

    Case of locking down the back door, while leaving the front door wide open!
     
    Admin.,
    #4
  6. 2003/08/14
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hello AceH,

    I feel like I'm preaching in the wilderness about System Restore. This is the second post today when someone was holding off on making a change to Windows and SR never entered their minds.

    Make a restore point just prior to the patch update, and if it really causes a problem, you've got a point to return to.

    And this hotfix is removable via Add/Remove.

    Regards - Charles
     
    Last edited: 2003/08/14
    charlesvar,
    #5
  7. 2003/08/14
    AceH

    AceH Inactive Thread Starter

    Joined:
    2002/01/16
    Messages:
    601
    Likes Received:
    2
    Charlesvar,

    You are right, system restore never crossed my mind. I installed the patch without thinking about it. I just checked system restore and luckily I have a restore point which was created a couple hours before I installed the patch. I also noticed there is a restore point which states "Installed Windows XP KB823980" which is the patch. I'm not to clear on this restore point....does it mean that's a restore point created just PRIOR to installation of the patch? IF I needed to undo something prior to the patch I can use that restore point?
     
    AceH,
    #6
  8. 2003/08/15
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    YES. ALL Microsoft patches do this automatically.
     
    Admin.,
    #7
  9. 2003/08/15
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    Lol...............

    Newt,,, you can agree with me..

    Thats the message I was trying to send "yes do the dad gone patch" in my usual smarta** self. Hee hee!

    Mike
     
    mflynn,
    #8
  10. 2003/08/15
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    "YES. ALL Microsoft patches do this automatically. "

    In this instance it did, does not happen on all MS patches on my system.

    Regards - Charles
     
    charlesvar,
    #9
  11. 2003/08/16
    Panda Lifetime Subscription

    Panda Inactive

    Joined:
    2002/01/07
    Messages:
    498
    Likes Received:
    0
    I've also downloaded the patch even though I never saw the mblaster.exe in my task manager. I just feel safer knowing it's there. I have also read in different reports on closing the 69 and 4444 ports. I use Kerio. How do I close these ports? I am still not too savvy with firewalls and have no clue where to go or what to do. Can someone please point me in the right direction on this one?

    THANKS!

    :)
     
    Panda,
    #10
  12. 2003/08/16
    BillyBob Lifetime Subscription

    BillyBob Inactive

    Joined:
    2002/01/07
    Messages:
    6,048
    Likes Received:
    0
    Maybe it is supposed to but it may not.

    I have to agree with charlesvar here. For me XP DID NOT make a RP before installing the patch.

    BillyBob
     
    Last edited: 2003/08/16
    BillyBob,
    #11
  13. 2003/08/16
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    charlesvar,
    #12
  14. 2003/08/16
    Panda Lifetime Subscription

    Panda Inactive

    Joined:
    2002/01/07
    Messages:
    498
    Likes Received:
    0
    Thank you very much! This was what I needed. It had been a while since I had played with my Kerio and I forgot where it was that I could set up rules. I had to click my ADVANCED button to get there. That link was very helpful. I now have ports 69 and 4444 denying incoming access from any address and I want it to let me know if they try to sneak in.

    Thanks, again, for pointing me in the right direction.

    :)
     
    Panda,
    #13
  15. 2003/08/17
    Christer

    Christer Geek Member Staff

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    From Newts post above:
    My Firewall (Norton) shows a "HTTP port list" which has eight ports listed to be available. The two ports mentioned above are not on the list. Am I correct in assuming that those two ports are closed or am I missing something?

    Thanks in advance,
    Christer
     
    Last edited: 2003/08/18
    Christer,
    #14
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...