Applying Microsoft Security Bulletin MS03-001 - 810833 gives problems

[Guest it's Hadrian]

Hello after applying Microsoft Security Bulletin MS03-001 Unchecked

Buffer in Locator Service Could Lead to Code Execution (810833) gives

some problems on this dual processor NT4 - Sp6A system.

 

** The information

at

http://support.microsoft.com/?kbid=810833

looks about the same as my pdf file made at 26 January 2003 **

 

Since applying the patch to this system I have some trouble starting

up which might take two or three tries.

Since I have installed the patch for a part the first time (forgot to

switch off the NOd 32 AV) and later I installed completely I can't

roll the patch back. I can't find what files are involved in this

patch but I would be happy if someone could tell what files were

installed so I could take them off and replace them if possible.

I remember, if not mistaken, trouble about this same patch some years

ago but can't remember exactly a date.

I would be very happy if someone would help me out.

 

Best regards,

 

it's Hadrian

 

hadrian@40whyspamxs.com

[Guest it's Hadrian]

Re: Applying Microsoft Security Bulletin MS03-001 - 810833 gives problems

 

On Thu, 04 Oct 2007 07:43:22 +0000, it's Hadrian

<hadrian@40whyspamxs.com> wrote:

>Hello after applying Microsoft Security Bulletin MS03-001 Unchecked

>Buffer in Locator Service Could Lead to Code Execution (810833) gives

>some problems on this dual processor NT4 - Sp6A system.

>

>** The information

>at

>http://support.microsoft.com/?kbid=810833

>looks about the same as my pdf file made at 26 January 2003 **

>

>Since applying the patch to this system I have some trouble starting

>up which might take two or three tries.

>Since I have installed the patch for a part the first time (forgot to

>switch off the NOd 32 AV) and later I installed completely I can't

>roll the patch back. I can't find what files are involved in this

>patch but I would be happy if someone could tell what files were

>installed so I could take them off and replace them if possible.

>I remember, if not mistaken, trouble about this same patch some years

>ago but can't remember exactly a date.

>I would be very happy if someone would help me out.

>

>Best regards,

>

>it's Hadrian

>

>hadrian@40whyspamxs.com

 

Btw It's a workstation.

Thanks a lot.

 

it's Hadrian

 

hadrian@40whyspamxs.com

[Guest Calvin]

Re: Applying Microsoft Security Bulletin MS03-001 - 810833 givesproblems

 

Re: Applying Microsoft Security Bulletin MS03-001 - 810833 givesproblems

 

Hi Hadrian,

 

it's Hadrian wrote:

>>Since applying the patch to this system I have some trouble starting

>>up which might take two or three tries.

>>Since I have installed the patch for a part the first time (forgot to

>>switch off the NOd 32 AV) and later I installed completely I can't

>>roll the patch back. I can't find what files are involved in this

>>patch but I would be happy if someone could tell what files were

>>installed so I could take them off and replace them if possible.

>>I remember, if not mistaken, trouble about this same patch some years

>>ago but can't remember exactly a date.

>>I would be very happy if someone would help me out.

 

Patch KB810833 changes only 1 file - namely locator.exe - it's full

version information (after the patch) is V4.0.1381.7202

 

I'd suggest manually rolling this file back to the version supplied in

the "Post SP6a Security Rollup" - file details: locator.exe V4.0.1381.7097

 

I'm not sure if any other hotfixes after the security rollup has changed

this file. (prior to KB810833 doing it last)

 

To be absolutely sure you are rolling back "only 1 step", you could

manually go through and open each of the hotfixes post the SRP with

Winzip and check to see if any of them contain a copy of locator.exe -

but that's a fair bit of work !

 

Calvin.

[Guest it's Hadrian]

Re: Applying Microsoft Security Bulletin MS03-001 - 810833 gives problems

 

On Thu, 04 Oct 2007 19:54:56 +1000, Calvin <nospam@spamcop.net> wrote:

>Hi Hadrian,

>

>it's Hadrian wrote:

>>>Since applying the patch to this system I have some trouble starting

>>>up which might take two or three tries.

>>>Since I have installed the patch for a part the first time (forgot to

>>>switch off the NOd 32 AV) and later I installed completely I can't

>>>roll the patch back. I can't find what files are involved in this

>>>patch but I would be happy if someone could tell what files were

>>>installed so I could take them off and replace them if possible.

>>>I remember, if not mistaken, trouble about this same patch some years

>>>ago but can't remember exactly a date.

>>>I would be very happy if someone would help me out.

>

>Patch KB810833 changes only 1 file - namely locator.exe - it's full

>version information (after the patch) is V4.0.1381.7202

>

>I'd suggest manually rolling this file back to the version supplied in

>the "Post SP6a Security Rollup" - file details: locator.exe V4.0.1381.7097

>

>I'm not sure if any other hotfixes after the security rollup has changed

>this file. (prior to KB810833 doing it last)

>

>To be absolutely sure you are rolling back "only 1 step", you could

>manually go through and open each of the hotfixes post the SRP with

>Winzip and check to see if any of them contain a copy of locator.exe -

>but that's a fair bit of work !

>

>Calvin.

 

Hello Calvin,

The file I have put in place is locator.exe (date 16/07/01) from the:

Post-Windows NT 4.0 Service Pack 6a Security Rollup Package (SRP),

file name Q299444i.exe (http://support.microsoft.com/kb/q299444/)

so

the fix directly after the release of Windows NT 4.0 Service Pack 6a.

It seems to work so far.

I have a log in which i write down what I install of hotfixes and

patches and the trouble started after installing Patch KB810833.

 

Thanks for your help.

 

it's Hadrian

 

hadrian@40whyspamxs.com