Jump to content

Conficker - MS08-067


Recommended Posts

Guest Charlie Moore
Posted

Does MS08-067 need to be reapplied to a Windows 2003 server when upgrading

from SP1 to SP2?

  • Replies 11
  • Created
  • Last Reply
Guest Peter Foldes
Posted

No it does not. W2K3 SP2 already contains that fix.

 

--

Peter

 

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

 

"Charlie Moore" <CharlieMoore@discussions.microsoft.com> wrote in message

news:7F85E0C7-A995-43DA-99D9-454DE8C50663@microsoft.com...<span style="color:blue">

> Does MS08-067 need to be reapplied to a Windows 2003 server when upgrading

> from SP1 to SP2? </span>

Guest David H. Lipman
Posted

From: "Charlie Moore" <CharlieMoore@discussions.microsoft.com>

 

| Does MS08-067 need to be reapplied to a Windows 2003 server when upgrading

| from SP1 to SP2?

 

Windows 2003 Server SP2 was published in March '07

 

MS08-067 was published AFTER Win2003 SP2 in Oct. 08

 

You should have had SP2 already installed PRIOR to the MS08-67 HotFix.

 

If you are re-installing the Server OS, install SP2 and then get all post SP2 updates

including MS08-67 (KB958644).

 

If MS08-67 (KB958644) is already installed you should be able to find;

%windir%\KB958644.log

 

If you go to Windows Update it will make sure all required updates/patches are

installed.

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Posted

I am receiving automatic security updates from MS for Windows XP(don't know

what version I have..I am almost 'puter illiterate..lol) According to my

records,my last sec.update was Mar.11/09.How can I be sure that I am

protected against this "worm"? I have recently installed Avast

anti-virus(Mar.28)and uninstalled my "usual" AVG...Any help/comments would be

appreciated.

 

"David H. Lipman" wrote:

<span style="color:blue">

> From: "Charlie Moore" <CharlieMoore@discussions.microsoft.com>

>

> | Does MS08-067 need to be reapplied to a Windows 2003 server when upgrading

> | from SP1 to SP2?

>

> Windows 2003 Server SP2 was published in March '07

>

> MS08-067 was published AFTER Win2003 SP2 in Oct. 08

>

> You should have had SP2 already installed PRIOR to the MS08-67 HotFix.

>

> If you are re-installing the Server OS, install SP2 and then get all post SP2 updates

> including MS08-67 (KB958644).

>

> If MS08-67 (KB958644) is already installed you should be able to find;

> %windir%KB958644.log

>

> If you go to Windows Update it will make sure all required updates/patches are

> installed.

>

> --

> Dave

> http://www.claymania.com/removal-trojan-adware.html

> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

>

>

> </span>

Guest FromTheRafters
Posted

"Jo" <Jo@discussions.microsoft.com> wrote in message

news:262C7632-DCE1-40B2-84F4-94445E2BB34F@microsoft.com...<span style="color:blue">

>I am receiving automatic security updates from MS for Windows XP(don't

>know

> what version I have..I am almost 'puter illiterate..lol) According to

> my

> records,my last sec.update was Mar.11/09.How can I be sure that I am

> protected against this "worm"? I have recently installed Avast

> anti-virus(Mar.28)and uninstalled my "usual" AVG...Any help/comments

> would be

> appreciated.</span>

 

You should be okay as far as the patch for the vulnerability is

concerned.

 

Most AVs should be able to detect the worm by now as well.

 

It is important to note that both the patch and a good antivirus are

needed because the worm no longer relies on the exploiting of that

vulnerability to propagate.

Guest David H. Lipman
Posted

From: "FromTheRafters" <erratic@nomail.afraid.org>

 

 

 

| You should be okay as far as the patch for the vulnerability is

| concerned.

 

| Most AVs should be able to detect the worm by now as well.

 

| It is important to note that both the patch and a good antivirus are

| needed because the worm no longer relies on the exploiting of that

| vulnerability to propagate.

 

 

Turning off AutoPlay/AutoRun is also suggested.

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Guest FromTheRafters
Posted

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message

news:%23bwHuRksJHA.4592@TK2MSFTNGP06.phx.gbl...<span style="color:blue">

> From: "FromTheRafters" <erratic@nomail.afraid.org>

>

>

>

> | You should be okay as far as the patch for the vulnerability is

> | concerned.

>

> | Most AVs should be able to detect the worm by now as well.

>

> | It is important to note that both the patch and a good antivirus

> are

> | needed because the worm no longer relies on the exploiting of that

> | vulnerability to propagate.

>

>

> Turning off AutoPlay/AutoRun is also suggested.</span>

 

A good idea even if there weren't any worms about.

Posted

Make sure all your system w/in the network is patched if one missed out all

with since Conficker.A/B/C/D also known Worm_Downad has a different

propagation and injection attack it would be advised to do the patch.

 

http://www.microsoft.com/technet/security/...n/ms06-040.mspx

 

use this as well.

 

http://www.microsoft.com/protect/computer/.../conficker.mspx

 

 

--

Milo

 

 

 

"Jo" wrote:

<span style="color:blue">

> I am receiving automatic security updates from MS for Windows XP(don't know

> what version I have..I am almost 'puter illiterate..lol) According to my

> records,my last sec.update was Mar.11/09.How can I be sure that I am

> protected against this "worm"? I have recently installed Avast

> anti-virus(Mar.28)and uninstalled my "usual" AVG...Any help/comments would be

> appreciated.

>

> "David H. Lipman" wrote:

> <span style="color:green">

> > From: "Charlie Moore" <CharlieMoore@discussions.microsoft.com>

> >

> > | Does MS08-067 need to be reapplied to a Windows 2003 server when upgrading

> > | from SP1 to SP2?

> >

> > Windows 2003 Server SP2 was published in March '07

> >

> > MS08-067 was published AFTER Win2003 SP2 in Oct. 08

> >

> > You should have had SP2 already installed PRIOR to the MS08-67 HotFix.

> >

> > If you are re-installing the Server OS, install SP2 and then get all post SP2 updates

> > including MS08-67 (KB958644).

> >

> > If MS08-67 (KB958644) is already installed you should be able to find;

> > %windir%KB958644.log

> >

> > If you go to Windows Update it will make sure all required updates/patches are

> > installed.

> >

> > --

> > Dave

> > http://www.claymania.com/removal-trojan-adware.html

> > Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

> >

> >

> > </span></span>

Guest FromTheRafters
Posted

"Milo" <anisha@indiamail.com> wrote in message

news:63FC99D3-755A-415C-971D-2E82EDA75A25@microsoft.com...<span style="color:blue">

>

> Make sure all your system w/in the network is patched if one missed

> out all

> with since Conficker.A/B/C/D also known Worm_Downad has a different

> propagation and injection attack it would be advised to do the patch.

>

> http://www.microsoft.com/technet/security/...n/ms06-040.mspx</span>

 

2006?

 

If you need this patch, you have more problems than you know about.

Posted

On 04/01/2009 01:01 AM, Milo sent:<span style="color:blue">

> Make sure all your system w/in the network is patched if one missed out all

> with since Conficker.A/B/C/D also known Worm_Downad has a different

> propagation and injection attack it would be advised to do the patch.

>

> http://www.microsoft.com/technet/security/...n/ms06-040.mspx

>

> use this as well.

>

> http://www.microsoft.com/protect/computer/.../conficker.mspx</span>

 

Hello Milo:

 

I know that Microsoft has called the latest Conficker as being the "D"

variant. However, IMHO the rest of the world calls it Conficker.C or

thereabouts. This might lead to an unfortunate misunderstanding down

the line.

 

Just my $0.02USD

 

Best wishes to you,

 

Pete

--

1PW @?6A62?FEH9:DE=6o2@=]4@> [r4o7t]

Guest FromTheRafters
Posted

"1PW" <barcrnahgjuvfgyr@nby.pbz> wrote in message

news:gqvo8j$8bl$1@nntp.motzarella.org...<span style="color:blue">

> On 04/01/2009 01:01 AM, Milo sent:<span style="color:green">

>> Make sure all your system w/in the network is patched if one missed

>> out all

>> with since Conficker.A/B/C/D also known Worm_Downad has a different

>> propagation and injection attack it would be advised to do the patch.

>>

>> http://www.microsoft.com/technet/security/...n/ms06-040.mspx

>>

>> use this as well.

>>

>> http://www.microsoft.com/protect/computer/.../conficker.mspx</span>

>

> Hello Milo:

>

> I know that Microsoft has called the latest Conficker as being the "D"

> variant. However, IMHO the rest of the world calls it Conficker.C or

> thereabouts. This might lead to an unfortunate misunderstanding down

> the line.

>

> Just my $0.02USD</span>

 

Actually, from what I understand, the latest has very little code in

common with either of the previous variants.

 

The next "update" could conceivably leave it with no family resemblance

at all couldn't it?

 

Can a malware family disown a member?

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...