Broadband Tech > Security > Security > Microsoft Security Bulletin(s) for 1/9/2007

Microsoft Security Bulletin(s) for 1/9/2007

Thanks melissatrv .

reply to melissatrv
Thank you Melissa

reply to melissatrv
Gracias, Melissa.

reply to melissatrv
Many thanks melissa

Windows Malicious Software Removal Tool - January 2007 (KB890830)
Malicious Software Encyclopedia: Win32/Haxdoor

Win32/Haxdoor is a family of rootkit-capable backdoor trojans which gather and send private user data to remote attackers. Collected data might include user names and passwords, credit card numbers, bank logon credentials, or other sensitive financial information. Files and processes related to a Win32/Haxdoor infection may be hidden by a kernel-mode rootkit component, detected by Microsoft as WinNT/Haxdoor. Win32/Haxdoor can also disable security-related software and redirect the infected user’s URL connection requests. Depending on the version of the operation system infected, Win32/Haxdoor may perform other malicious actions, such as clearing CMOS settings, destroying disk data, and shutting down Windows unexpectedly.

New Additions

We have added detection and cleaning capabilities for the following malicious software:

Haxdoor/ Technical Analysis
http://www.microsoft.com/security/encyclopedia/details.aspx?name=Win32%2fHaxdoor
--
Wilders Security Forum Admin
Microsoft MVP-Windows Security

reply to melissatrv
Thanks Melissa!

reply to melissatrv
Thanks Melissa !

reply to melissatrv
Thanks forgot it was second Tues.

reply to melissatrv
Much appreciated Melissa.

reply to melissatrv
Thanks, Melissa

reply to melissatrv
Event Type: Information
Event Source: KB929969
Event Category: None
Event ID: 4377
Date: 1/9/2007
Time: 10:53:24 PM
User:
Computer:
Description:
Windows XP Version 2003 Hotfix KB929969 was installed.

For more information, see Help and Support Center at »go.microsoft.com/fwlink/events.asp.

This was the only update I found at Microsoft Update for XP64. Any restarts required? I was not prompted so I guess not?

Severity Ratings and Vulnerability Identifiers:

Vulnerability Identifiers Impact of Vulnerability
Windows 2000 Service Pack 4
•Critical
Windows XP Service Pack 2
•Critical
Windows Server 2003
•Critical
Windows Server 2003 Service Pack 1 (XP64SP1)
•Moderate

Interesting security rating.
NOTE: By default, Internet Explorer on Windows Server 2003 runs in a restricted mode that is known as Enhanced Security Configuration.

EDIT: Thanks for the update melissatrv
--
»/forum/wall

reply to melissatrv
melissatrv, thanks for the update!

reply to melissatrv
Thank You melissatrv .

reply to Dustyn

Hi Argle,
I got that update. If you read the article again, although XPsp2 isn't listed among the affected components, XPsp2 is listed among affected software (which appears above affected components). You should install it.
Sincerely, Libra

Hi Libra!
Thanks for the response! Always a pleasure!

You're probably right. Though it's more than likely I'm going to UN-install the other one, actually. Along with any other IE patch that requires user interaction to execute the vulnerability.
I never use IE. Ever. So any patch that fits that description is actually useless to me. Excess baggage. And I'm becoming more and more convinced that some of these patches slow the machine down, as they interact with or alter the previous coding & what-not.
A statement bordering on security heresy, no doubt, but there it is anyway. I said it.
I don't recommend the kids at home try this, though.
I don't know. We'll see. No final decision made yet.
Thank you very much though, Libra. I thought that post was going to die of loneliness!
Enjoy your evening!

Yours,
A.B.