7 New security hotfixes announced

Schrodinger wrote:

Quote:

---

And what do you know - it told me it was infected ( which may explain why it refused to unzip ).

---

I had the same exact problem. I'm running McAfee VirusScan with DAT files 4298 dated 10/15/03. It said something about the being infected with the DCOM exploit.

I didn't download it due to this but suspect it is a false positive as I wouldn't think Foundstone would put an infected tool on their website.

You are right, these testing tools *DO* emulate viruses or use the code to test with which is why I sometime disable AV when using them (of course only during the test, after which I immediately re-enable AV).

Let us know what Foundstone says. Like I said earlier: it's probably OK.

Is it a corp version of McAfee? It might be that Mc Afee put this into thier virus def's to keep users on companies networks from using this tool to scan the network for unpatched machines.

ric-o - thank you. My personal assessment of my sanity is significantly improved.

CXGJarrod - I am wondering if the corporate app is trying to be clever and detect anything that seems to be exploiting this vulnerability, rather than being specific. I can't see any obvious reason for them not wanting users to use tools to help fix holes, but I can see how, in the absence of specific viruses that exploit this, they want to be alert to anything. Which is a good think, I think.

I will let you know what Foundstone say, if anything.

FYI: Microsoft has revised the October bulletin with the 7 vulnerabilities and one of the vulnerabilities, MS03-045 (ListBox/Combobox one) has had a major revision.

Check it out: http://www.microsoft.com/technet/tre...n/winoct03.asp

M$ just LOVES to keep us busy! :mad: