Sign in with
Sign up | Sign in
Your question

Patches MS05-02 and MS05-15 for W98/WME released!

Last response: in Windows 95/98/ME
Share
Anonymous
March 9, 2005 1:58:35 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

The decision to release patches for Windows 98 and ME users is described as
a "bonus" because of the critical nature of the vulnerabilities being
addressed, a Microsoft spokeswoman said. "Those products are out of
lifecycle, but we made a commitment to provide critical updates, and that's
what you're seeing."

http://www.eweek.com/article2/0,1759,1774106,00.asp


Regards, Roman
Anonymous
March 9, 2005 1:58:36 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

thanks for the tip
Anonymous
March 9, 2005 1:58:36 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Anyone have some direct links to these patches?


"roman modic" <modicr@myrealbox.com> wrote in message
news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
> The decision to release patches for Windows 98 and ME users is described
as
> a "bonus" because of the critical nature of the vulnerabilities being
> addressed, a Microsoft spokeswoman said. "Those products are out of
> lifecycle, but we made a commitment to provide critical updates, and
that's
> what you're seeing."
>
> http://www.eweek.com/article2/0,1759,1774106,00.asp
>
>
> Regards, Roman
>
>
Related resources
Anonymous
March 9, 2005 1:58:37 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Bulletin Summary:
For March 2005 there are no new security bulletins being release so there
will not be a summary bulletin.

Revised Bulletins:
Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code
Execution (891711)
http://www.microsoft.com/technet/security/Bulletin/ms05...

Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution
(888113)
http://www.microsoft.com/technet/security/Bulletin/ms05...

Obtained from Windows Update.
--
mae


"darkrats" <darkrats@hotmail.com> wrote in message
news:u9eXXuLJFHA.4060@TK2MSFTNGP14.phx.gbl...
| Anyone have some direct links to these patches?
|
|
| "roman modic" <modicr@myrealbox.com> wrote in message
| news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
| > The decision to release patches for Windows 98 and ME users is described
| as
| > a "bonus" because of the critical nature of the vulnerabilities being
| > addressed, a Microsoft spokeswoman said. "Those products are out of
| > lifecycle, but we made a commitment to provide critical updates, and
| that's
| > what you're seeing."
| >
| > http://www.eweek.com/article2/0,1759,1774106,00.asp
| >
| >
| > Regards, Roman
| >
| >
|
|
Anonymous
March 9, 2005 1:58:38 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

I go through this every time there's a new patch.
I don't use Windows Update. I'm looking for some direct links.

Update: I found the patch KB891711 for both 98 and ME.
Still looking for the other one.


"mae" <agrannie@notemail.msn.com> wrote in message
news:eBo86$LJFHA.2136@TK2MSFTNGP14.phx.gbl...
> Bulletin Summary:
> For March 2005 there are no new security bulletins being release so there
> will not be a summary bulletin.
>
> Revised Bulletins:
> Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code
> Execution (891711)
> http://www.microsoft.com/technet/security/Bulletin/ms05...
>
> Vulnerability in Hyperlink Object Library Could Allow Remote Code
Execution
> (888113)
> http://www.microsoft.com/technet/security/Bulletin/ms05...
>
> Obtained from Windows Update.
> --
> mae
>
>
> "darkrats" <darkrats@hotmail.com> wrote in message
> news:u9eXXuLJFHA.4060@TK2MSFTNGP14.phx.gbl...
> | Anyone have some direct links to these patches?
> |
> |
> | "roman modic" <modicr@myrealbox.com> wrote in message
> | news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
> | > The decision to release patches for Windows 98 and ME users is
described
> | as
> | > a "bonus" because of the critical nature of the vulnerabilities being
> | > addressed, a Microsoft spokeswoman said. "Those products are out of
> | > lifecycle, but we made a commitment to provide critical updates, and
> | that's
> | > what you're seeing."
> | >
> | > http://www.eweek.com/article2/0,1759,1774106,00.asp
> | >
> | >
> | > Regards, Roman
> | >
> | >
> |
> |
>
March 9, 2005 2:04:04 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Mae I think these were the vulnerabilities that I wrote Bill Gates about in
my letter regarding the maintenance operating system. It was a discussion
between, me, Gary S. Terhune and Chris Cquirke. I also included information
from Vince from another discussion about how he was worried about two
critical security vulnerabilites in 98SE. Hopefully Microsoft will address
these vulnerabilities and I will research the exact words from Vince if you
want me to post that here. The letter came out to 9 pages and killed my 3820
HP printer. <smile>

"mae" <agrannie@notemail.msn.com> wrote in message
news:eBo86$LJFHA.2136@TK2MSFTNGP14.phx.gbl...
: Bulletin Summary:
: For March 2005 there are no new security bulletins being release so there
: will not be a summary bulletin.
:
: Revised Bulletins:
: Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code
: Execution (891711)
: http://www.microsoft.com/technet/security/Bulletin/ms05...
:
: Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution
: (888113)
: http://www.microsoft.com/technet/security/Bulletin/ms05...
:
: Obtained from Windows Update.
: --
: mae
:
:
: "darkrats" <darkrats@hotmail.com> wrote in message
: news:u9eXXuLJFHA.4060@TK2MSFTNGP14.phx.gbl...
: | Anyone have some direct links to these patches?
: |
: |
: | "roman modic" <modicr@myrealbox.com> wrote in message
: | news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
: | > The decision to release patches for Windows 98 and ME users is
described
: | as
: | > a "bonus" because of the critical nature of the vulnerabilities being
: | > addressed, a Microsoft spokeswoman said. "Those products are out of
: | > lifecycle, but we made a commitment to provide critical updates, and
: | that's
: | > what you're seeing."
: | >
: | > http://www.eweek.com/article2/0,1759,1774106,00.asp
: | >
: | >
: | > Regards, Roman
: | >
: | >
: |
: |
:
March 9, 2005 2:52:54 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

You are playing with fire, darkrats but I wish you luck in your quest
although it sounds like a foolish way to do things to me especially since
Microsoft says that you need to use Windows Update to get all patches for
your computer. Have you tried calling Microsoft, introducing yourself and
asking them for help. However, be prepared to set aside a few hours for wait
time and help. Have a great day!

"darkrats" <darkrats@hotmail.com> wrote in message
news:up7KJBNJFHA.1476@TK2MSFTNGP09.phx.gbl...
: I go through this every time there's a new patch.
: I don't use Windows Update. I'm looking for some direct links.
:
: Update: I found the patch KB891711 for both 98 and ME.
: Still looking for the other one.
:
:
: "mae" <agrannie@notemail.msn.com> wrote in message
: news:eBo86$LJFHA.2136@TK2MSFTNGP14.phx.gbl...
: > Bulletin Summary:
: > For March 2005 there are no new security bulletins being release so there
: > will not be a summary bulletin.
: >
: > Revised Bulletins:
: > Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code
: > Execution (891711)
: > http://www.microsoft.com/technet/security/Bulletin/ms05...
: >
: > Vulnerability in Hyperlink Object Library Could Allow Remote Code
: Execution
: > (888113)
: > http://www.microsoft.com/technet/security/Bulletin/ms05...
: >
: > Obtained from Windows Update.
: > --
: > mae
: >
: >
: > "darkrats" <darkrats@hotmail.com> wrote in message
: > news:u9eXXuLJFHA.4060@TK2MSFTNGP14.phx.gbl...
: > | Anyone have some direct links to these patches?
: > |
: > |
: > | "roman modic" <modicr@myrealbox.com> wrote in message
: > | news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
: > | > The decision to release patches for Windows 98 and ME users is
: described
: > | as
: > | > a "bonus" because of the critical nature of the vulnerabilities being
: > | > addressed, a Microsoft spokeswoman said. "Those products are out of
: > | > lifecycle, but we made a commitment to provide critical updates, and
: > | that's
: > | > what you're seeing."
: > | >
: > | > http://www.eweek.com/article2/0,1759,1774106,00.asp
: > | >
: > | >
: > | > Regards, Roman
: > | >
: > | >
: > |
: > |
: >
:
:
March 9, 2005 3:19:25 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

I just got three critical updates in my 98SE system when I went to Windows
Update. Thanks for the warning, Roman. I appreciate it and yes I did update
in February. Robear, if you are interesting in the numbers then please
e-mail me in the usual way. Thanks in advance, Dan.

"roman modic" <modicr@myrealbox.com> wrote in message
news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
: The decision to release patches for Windows 98 and ME users is described as
: a "bonus" because of the critical nature of the vulnerabilities being
: addressed, a Microsoft spokeswoman said. "Those products are out of
: lifecycle, but we made a commitment to provide critical updates, and that's
: what you're seeing."
:
: http://www.eweek.com/article2/0,1759,1774106,00.asp
:
:
: Regards, Roman
:
:
Anonymous
March 9, 2005 7:02:20 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

No, I am not concerned about any vulnerabilities.
Just posting the link after I got them.
--
mae

"Dan" <spamyou@user.nec> wrote in message
news:%23eZnhJNJFHA.2476@TK2MSFTNGP12.phx.gbl...
| Mae I think these were the vulnerabilities that I wrote Bill Gates about
in
| my letter regarding the maintenance operating system. It was a discussion
| between, me, Gary S. Terhune and Chris Cquirke. I also included
information
| from Vince from another discussion about how he was worried about two
| critical security vulnerabilites in 98SE. Hopefully Microsoft will
address
| these vulnerabilities and I will research the exact words from Vince if
you
| want me to post that here. The letter came out to 9 pages and killed my
3820
| HP printer. <smile>
|
| "mae" <agrannie@notemail.msn.com> wrote in message
| news:eBo86$LJFHA.2136@TK2MSFTNGP14.phx.gbl...
| : Bulletin Summary:
| : For March 2005 there are no new security bulletins being release so
there
| : will not be a summary bulletin.
| :
| : Revised Bulletins:
| : Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code
| : Execution (891711)
| : http://www.microsoft.com/technet/security/Bulletin/ms05...
| :
| : Vulnerability in Hyperlink Object Library Could Allow Remote Code
Execution
| : (888113)
| : http://www.microsoft.com/technet/security/Bulletin/ms05...
| :
| : Obtained from Windows Update.
| : --
| : mae
| :
| :
| : "darkrats" <darkrats@hotmail.com> wrote in message
| : news:u9eXXuLJFHA.4060@TK2MSFTNGP14.phx.gbl...
| : | Anyone have some direct links to these patches?
| : |
| : |
| : | "roman modic" <modicr@myrealbox.com> wrote in message
| : | news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
| : | > The decision to release patches for Windows 98 and ME users is
| described
| : | as
| : | > a "bonus" because of the critical nature of the vulnerabilities
being
| : | > addressed, a Microsoft spokeswoman said. "Those products are out of
| : | > lifecycle, but we made a commitment to provide critical updates, and
| : | that's
| : | > what you're seeing."
| : | >
| : | > http://www.eweek.com/article2/0,1759,1774106,00.asp
| : | >
| : | >
| : | > Regards, Roman
| : | >
| : | >
| : |
| : |
| :
|
|
Anonymous
March 9, 2005 7:59:33 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

"darkrats" <darkrats@hotmail.com> wrote in message
news:up7KJBNJFHA.1476@TK2MSFTNGP09.phx.gbl
> I go through this every time there's a new patch.
> I don't use Windows Update. I'm looking for some direct links.
>
> Update: I found the patch KB891711 for both 98 and ME.
> Still looking for the other one.

Did you notice after installing 891711 that you have a new live process
running (ctrl-alt-del) which of course shows up in msconfig too. bummer they
had to do it that way and is the first time this was done that I know of. I
don't see that was done in either 2K or XP for this update but they
accomplished it another way.

Interesting I'd noticed WU had a new Root Certificates Update I had never
seen before, installing it showed v6,0,2195,0 for 9x as well as 2K

What do you need? ..888113 for 9x ..is that a real email to use?

....did you ever get 867282? etc..

Rick
Anonymous
March 9, 2005 8:12:03 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Ivan Bútora wrote:
> > Did you notice after installing 891711 that you have a new live
process
> > running (ctrl-alt-del) which of course shows up in msconfig too.
bummer they
> > had to do it that way and is the first time this was done that I
know of. I
> > don't see that was done in either 2K or XP for this update but they
> > accomplished it another way.
>
> Hmm, I'll choose not to install that one. That *is* really weird that
they would do something this way - are you sure the new process is
there because of the update?

Yes, it *is* a completely lame-ass way of patching a security
problem in the OS. For example, the process can be easily killed; try
it yourself via (ctrl-alt-del). On the other hand, KB891711 is causing
many problems--starting Firefox for example [guess Microsoft doesn't
bother testing their patches with Firefox :-)]; so at least the user
can easily kill KB891711 in order to "correct" the problems, but then
leaving the user as vulnerable as before.
Anonymous
March 9, 2005 9:41:45 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

> Did you notice after installing 891711 that you have a new live process
> running (ctrl-alt-del) which of course shows up in msconfig too. bummer they
> had to do it that way and is the first time this was done that I know of. I
> don't see that was done in either 2K or XP for this update but they
> accomplished it another way.

Hmm, I'll choose not to install that one. That *is* really weird that they would do something this way - are you sure the new process is there because of the update?
Anonymous
March 9, 2005 9:43:17 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

If you want to download them, you can get them through the Windows Update Catalog. You still have to go through Windows Update, but you don't have to install through WU:

http://v4.windowsupdate.microsoft.com/catalog/en/defaul...


"darkrats" <darkrats@hotmail.com> wrote in message news:u9eXXuLJFHA.4060@TK2MSFTNGP14.phx.gbl...
> Anyone have some direct links to these patches?
>
>
> "roman modic" <modicr@myrealbox.com> wrote in message
> news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
> > The decision to release patches for Windows 98 and ME users is described
> as
> > a "bonus" because of the critical nature of the vulnerabilities being
> > addressed, a Microsoft spokeswoman said. "Those products are out of
> > lifecycle, but we made a commitment to provide critical updates, and
> that's
> > what you're seeing."
> >
> > http://www.eweek.com/article2/0,1759,1774106,00.asp
> >
> >
> > Regards, Roman
> >
> >
>
>
Anonymous
March 10, 2005 2:54:28 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Haven't found the second patch yet.

I also noticed 891711 was a live process, set to run at every boot.
My ZoneAlarm stopped working until I disabled 891711 under the startup tab.

Something weird about this.



"Rick Chauvin" <justask@nospamz.com> wrote in message
news:#Q5GlTPJFHA.3204@TK2MSFTNGP10.phx.gbl...
> "darkrats" <darkrats@hotmail.com> wrote in message
> news:up7KJBNJFHA.1476@TK2MSFTNGP09.phx.gbl
> > I go through this every time there's a new patch.
> > I don't use Windows Update. I'm looking for some direct links.
> >
> > Update: I found the patch KB891711 for both 98 and ME.
> > Still looking for the other one.
>
> Did you notice after installing 891711 that you have a new live process
> running (ctrl-alt-del) which of course shows up in msconfig too. bummer
they
> had to do it that way and is the first time this was done that I know of.
I
> don't see that was done in either 2K or XP for this update but they
> accomplished it another way.
>
> Interesting I'd noticed WU had a new Root Certificates Update I had never
> seen before, installing it showed v6,0,2195,0 for 9x as well as 2K
>
> What do you need? ..888113 for 9x ..is that a real email to use?
>
> ...did you ever get 867282? etc..
>
> Rick
>
>
>
March 10, 2005 4:06:33 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Well thanks for posting the information, mae. I appreciate it.

"mae" <agrannie@notemail.msn.com> wrote in message
news:o uf7TOPJFHA.2884@tk2msftngp13.phx.gbl...
: No, I am not concerned about any vulnerabilities.
: Just posting the link after I got them.
: --
: mae
:
: "Dan" <spamyou@user.nec> wrote in message
: news:%23eZnhJNJFHA.2476@TK2MSFTNGP12.phx.gbl...
: | Mae I think these were the vulnerabilities that I wrote Bill Gates about
: in
: | my letter regarding the maintenance operating system. It was a
discussion
: | between, me, Gary S. Terhune and Chris Cquirke. I also included
: information
: | from Vince from another discussion about how he was worried about two
: | critical security vulnerabilites in 98SE. Hopefully Microsoft will
: address
: | these vulnerabilities and I will research the exact words from Vince if
: you
: | want me to post that here. The letter came out to 9 pages and killed my
: 3820
: | HP printer. <smile>
: |
: | "mae" <agrannie@notemail.msn.com> wrote in message
: | news:eBo86$LJFHA.2136@TK2MSFTNGP14.phx.gbl...
: | : Bulletin Summary:
: | : For March 2005 there are no new security bulletins being release so
: there
: | : will not be a summary bulletin.
: | :
: | : Revised Bulletins:
: | : Vulnerability in Cursor and Icon Format Handling Could Allow Remote
Code
: | : Execution (891711)
: | : http://www.microsoft.com/technet/security/Bulletin/ms05...
: | :
: | : Vulnerability in Hyperlink Object Library Could Allow Remote Code
: Execution
: | : (888113)
: | : http://www.microsoft.com/technet/security/Bulletin/ms05...
: | :
: | : Obtained from Windows Update.
: | : --
: | : mae
: | :
: | :
: | : "darkrats" <darkrats@hotmail.com> wrote in message
: | : news:u9eXXuLJFHA.4060@TK2MSFTNGP14.phx.gbl...
: | : | Anyone have some direct links to these patches?
: | : |
: | : |
: | : | "roman modic" <modicr@myrealbox.com> wrote in message
: | : | news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
: | : | > The decision to release patches for Windows 98 and ME users is
: | described
: | : | as
: | : | > a "bonus" because of the critical nature of the vulnerabilities
: being
: | : | > addressed, a Microsoft spokeswoman said. "Those products are out of
: | : | > lifecycle, but we made a commitment to provide critical updates,
and
: | : | that's
: | : | > what you're seeing."
: | : | >
: | : | > http://www.eweek.com/article2/0,1759,1774106,00.asp
: | : | >
: | : | >
: | : | > Regards, Roman
: | : | >
: | : | >
: | : |
: | : |
: | :
: |
: |
:
March 10, 2005 4:07:58 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Why do you not want to use Windows Update, Darkrats. I am puzzled by your
reasoning. Can you please explain it to me? Thanks in advance.

"darkrats" <darkrats@hotmail.com> wrote in message
news:o ABKC4TJFHA.1208@TK2MSFTNGP10.phx.gbl...
: Haven't found the second patch yet.
:
: I also noticed 891711 was a live process, set to run at every boot.
: My ZoneAlarm stopped working until I disabled 891711 under the startup tab.
:
: Something weird about this.
:
:
:
: "Rick Chauvin" <justask@nospamz.com> wrote in message
: news:#Q5GlTPJFHA.3204@TK2MSFTNGP10.phx.gbl...
: > "darkrats" <darkrats@hotmail.com> wrote in message
: > news:up7KJBNJFHA.1476@TK2MSFTNGP09.phx.gbl
: > > I go through this every time there's a new patch.
: > > I don't use Windows Update. I'm looking for some direct links.
: > >
: > > Update: I found the patch KB891711 for both 98 and ME.
: > > Still looking for the other one.
: >
: > Did you notice after installing 891711 that you have a new live process
: > running (ctrl-alt-del) which of course shows up in msconfig too. bummer
: they
: > had to do it that way and is the first time this was done that I know of.
: I
: > don't see that was done in either 2K or XP for this update but they
: > accomplished it another way.
: >
: > Interesting I'd noticed WU had a new Root Certificates Update I had never
: > seen before, installing it showed v6,0,2195,0 for 9x as well as 2K
: >
: > What do you need? ..888113 for 9x ..is that a real email to use?
: >
: > ...did you ever get 867282? etc..
: >
: > Rick
: >
: >
: >
:
:
March 10, 2005 6:05:32 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

KB891711 -- in my machine -- I have a clean machine and yes it is a new
process shown when I try to end tasks with
ctrl-alt-delete

"Ivan Bútora" <xxx@xxx.xxx> wrote in message
news:eST1WGQJFHA.3788@tk2msftngp13.phx.gbl...
: > Did you notice after installing 891711 that you have a new live process
: > running (ctrl-alt-del) which of course shows up in msconfig too. bummer
they
: > had to do it that way and is the first time this was done that I know of.
I
: > don't see that was done in either 2K or XP for this update but they
: > accomplished it another way.
:
: Hmm, I'll choose not to install that one. That *is* really weird that they
would do something this way - are you sure the new process is there because
of the update?
March 10, 2005 6:07:47 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

My Mozilla Firefox is working great on my 98SE machine and so freeworld you
must have other problems on your machine such as conflicts with that update
or spyware or viruses. I would run a full SpySweeper scan, antivirus scan,
and other associated scans as well as checking your device manager for
conflicting drivers.

<freeworld60@hotmail.com> wrote in message
news:1110417123.400939.278760@l41g2000cwc.googlegroups.com...

Ivan Bútora wrote:
> > Did you notice after installing 891711 that you have a new live
process
> > running (ctrl-alt-del) which of course shows up in msconfig too.
bummer they
> > had to do it that way and is the first time this was done that I
know of. I
> > don't see that was done in either 2K or XP for this update but they
> > accomplished it another way.
>
> Hmm, I'll choose not to install that one. That *is* really weird that
they would do something this way - are you sure the new process is
there because of the update?

Yes, it *is* a completely lame-ass way of patching a security
problem in the OS. For example, the process can be easily killed; try
it yourself via (ctrl-alt-del). On the other hand, KB891711 is causing
many problems--starting Firefox for example [guess Microsoft doesn't
bother testing their patches with Firefox :-)]; so at least the user
can easily kill KB891711 in order to "correct" the problems, but then
leaving the user as vulnerable as before.
Anonymous
March 10, 2005 10:31:03 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

All. I installed these updates the other day, and now my machine is HOSED.
It boots up and starts Windows, then fails with several blue screens until it
finally runs out of memory. I can run in Safe Mode and DOS, but that's it.
Anyone know how to back these out from either of those modes?

Thanks,

T.

"roman modic" wrote:

> The decision to release patches for Windows 98 and ME users is described as
> a "bonus" because of the critical nature of the vulnerabilities being
> addressed, a Microsoft spokeswoman said. "Those products are out of
> lifecycle, but we made a commitment to provide critical updates, and that's
> what you're seeing."
>
> http://www.eweek.com/article2/0,1759,1774106,00.asp
>
>
> Regards, Roman
>
>
>
Anonymous
March 10, 2005 11:30:57 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

"darkrats" wrote in message
news:o ABKC4TJFHA.1208@TK2MSFTNGP10.phx.gbl
> Haven't found the second patch yet.

...and you never answered the ?'s either..
March 10, 2005 11:46:20 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

On Wed, 9 Mar 2005 16:59:33 -0500, "Rick Chauvin"
<justask@nospamz.com> wrote:

>Did you notice after installing 891711 that you have a new live process
>running (ctrl-alt-del) which of course shows up in msconfig too.

Yeah, I saw that and there's more that I don't understand.

If you open a DOSbox and issue the command "netstat -an", the output
indicates there's a new process and it's listening on port 9999.
TCP 127.0.0.1:9999 0.0.0.0:0 LISTENING
What's this all about? Is Win98(SE) now running "services/daemons"?
March 10, 2005 11:52:16 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

On Wed, 9 Mar 2005 11:04:04 -0700, "Dan" <spamyou@user.nec> wrote:

> I also included information
>from Vince from another discussion about how he was worried about two
>critical security vulnerabilites in 98SE.

These two updates address the two "critical" vulnerabilites I was
concerned about. I must say you got awfully fast reaction to your
letter, as far as the vulnerabilities were concerned. Sweet!
March 10, 2005 1:30:45 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

You are most welcome. Vince, please let me know about other critical
security vulnerabilities that have not been addressed by Microsoft in 98
Second Edition and I will send the information to the right channels. It
helps to have the right connections. I am purposely being vague. <smile>

"Vince" <nobody@home.invalid> wrote in message
news:9kn031t39rn6v5p50q73921n1ut7ji6qi4@4ax.com...
: On Wed, 9 Mar 2005 11:04:04 -0700, "Dan" <spamyou@user.nec> wrote:
:
: > I also included information
: >from Vince from another discussion about how he was worried about two
: >critical security vulnerabilites in 98SE.
:
: These two updates address the two "critical" vulnerabilites I was
: concerned about. I must say you got awfully fast reaction to your
: letter, as far as the vulnerabilities were concerned. Sweet!
Anonymous
March 10, 2005 1:42:03 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

"Dan" <spamyou@user.nec> wrote in message
news:ug30zkNJFHA.1860@TK2MSFTNGP15.phx.gbl...
> You are playing with fire, darkrats but I wish you luck in your quest
> although it sounds like a foolish way to do things to me especially since
> Microsoft says that you need to use Windows Update to get all patches for
> your computer. Have you tried calling Microsoft, introducing yourself and
> asking them for help. However, be prepared to set aside a few hours for
> wait
> time and help. Have a great day!
>

BTW, "Windows Update" does not work in Slovenian, Slovakian and Thai
version of Windows (I'm using Slovenian one). I must use direct links.

OTOH, "In the future, automatic e-mail notifications will be provided
when these security updates are released. To receive these notifications,
subscribe to the http://go.microsoft.com/fwlink/?LinkId=21163 "

Best regards, Roman


> "darkrats" <darkrats@hotmail.com> wrote in message
> news:up7KJBNJFHA.1476@TK2MSFTNGP09.phx.gbl...
> : I go through this every time there's a new patch.
> : I don't use Windows Update. I'm looking for some direct links.
> :
> : Update: I found the patch KB891711 for both 98 and ME.
> : Still looking for the other one.
> :
> :
> : "mae" <agrannie@notemail.msn.com> wrote in message
> : news:eBo86$LJFHA.2136@TK2MSFTNGP14.phx.gbl...
> : > Bulletin Summary:
> : > For March 2005 there are no new security bulletins being release so
> there
> : > will not be a summary bulletin.
> : >
> : > Revised Bulletins:
> : > Vulnerability in Cursor and Icon Format Handling Could Allow Remote
> Code
> : > Execution (891711)
> : > http://www.microsoft.com/technet/security/Bulletin/ms05...
> : >
> : > Vulnerability in Hyperlink Object Library Could Allow Remote Code
> : Execution
> : > (888113)
> : > http://www.microsoft.com/technet/security/Bulletin/ms05...
> : >
> : > Obtained from Windows Update.
> : > --
> : > mae
> : >
> : >
> : > "darkrats" <darkrats@hotmail.com> wrote in message
> : > news:u9eXXuLJFHA.4060@TK2MSFTNGP14.phx.gbl...
> : > | Anyone have some direct links to these patches?
> : > |
> : > |
> : > | "roman modic" <modicr@myrealbox.com> wrote in message
> : > | news:eFGoE1IJFHA.4028@tk2msftngp13.phx.gbl...
> : > | > The decision to release patches for Windows 98 and ME users is
> : described
> : > | as
> : > | > a "bonus" because of the critical nature of the vulnerabilities
> being
> : > | > addressed, a Microsoft spokeswoman said. "Those products are out
> of
> : > | > lifecycle, but we made a commitment to provide critical updates,
> and
> : > | that's
> : > | > what you're seeing."
> : > | >
> : > | > http://www.eweek.com/article2/0,1759,1774106,00.asp
> : > | >
> : > | >
> : > | > Regards, Roman
> : > | >
> : > | >
> : > |
> : > |
> : >
> :
> :
>
>
Anonymous
March 10, 2005 2:32:58 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

It would be good to know which one of these updates did it to you?
Or, did you do other things at WU too? Anywhere/Anything else?

Both of these Updates are available in Control Panel in Add/Remove (scroll to
W's) to uninstall them so try that. but First just uncheck it in msconfig

I tracked each of the installs and specifically can tell you all the exact
changes that were made, which wasn't very much - it's just the 891711 was
unique with what they did with adding a new running process. You can search
google for 891711 and see lot's of people are having various issues with it.
It's easy to reverse the installs of either though if one wants.

Rick

"TerryG" <TerryG@discussions.microsoft.com> wrote in message
news:8D3CA9EF-0D3A-4FB8-B144-5CA3A7C273C7@microsoft.com
> All. I installed these updates the other day, and now my machine is HOSED.
> It boots up and starts Windows, then fails with several blue screens until
> it finally runs out of memory. I can run in Safe Mode and DOS, but that's
> it. Anyone know how to back these out from either of those modes?
>
> Thanks,
>
> T.
>
> "roman modic" wrote:
>
>> The decision to release patches for Windows 98 and ME users is described
>> as a "bonus" because of the critical nature of the vulnerabilities being
>> addressed, a Microsoft spokeswoman said. "Those products are out of
>> lifecycle, but we made a commitment to provide critical updates, and
>> that's what you're seeing."
>>
>> http://www.eweek.com/article2/0,1759,1774106,00.asp
>>
>>
>> Regards, Roman
Anonymous
March 10, 2005 2:32:59 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

891711 was the culprit.
I'm still looking for a direct link to the other patch.


"Rick Chauvin" <justask@nospamz.com> wrote in message
news:uEg16$YJFHA.2356@TK2MSFTNGP12.phx.gbl...
> It would be good to know which one of these updates did it to you?
> Or, did you do other things at WU too? Anywhere/Anything else?
>
> Both of these Updates are available in Control Panel in Add/Remove (scroll
to
> W's) to uninstall them so try that. but First just uncheck it in msconfig
>
> I tracked each of the installs and specifically can tell you all the exact
> changes that were made, which wasn't very much - it's just the 891711 was
> unique with what they did with adding a new running process. You can
search
> google for 891711 and see lot's of people are having various issues with
it.
> It's easy to reverse the installs of either though if one wants.
>
> Rick
>
> "TerryG" <TerryG@discussions.microsoft.com> wrote in message
> news:8D3CA9EF-0D3A-4FB8-B144-5CA3A7C273C7@microsoft.com
> > All. I installed these updates the other day, and now my machine is
HOSED.
> > It boots up and starts Windows, then fails with several blue screens
until
> > it finally runs out of memory. I can run in Safe Mode and DOS, but
that's
> > it. Anyone know how to back these out from either of those modes?
> >
> > Thanks,
> >
> > T.
> >
> > "roman modic" wrote:
> >
> >> The decision to release patches for Windows 98 and ME users is
described
> >> as a "bonus" because of the critical nature of the vulnerabilities
being
> >> addressed, a Microsoft spokeswoman said. "Those products are out of
> >> lifecycle, but we made a commitment to provide critical updates, and
> >> that's what you're seeing."
> >>
> >> http://www.eweek.com/article2/0,1759,1774106,00.asp
> >>
> >>
> >> Regards, Roman
>
>
>
>
>
March 10, 2005 2:32:59 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

I agree Rick and hopefully Microsoft can tighten up the routine so that
891711 does not have to be a running process. Take Heart, however because I
think this running process will be a temporary solution until a permenant fix
is found. Have a nice day and I do hope users do not become too frustrated
with computers because although some users are having lots of problems -- the
way I see it was that Microsoft was kind enough to fix these critical
vulnerabilities for the old-school (Class of 1999 LOL!!) operating system
users who like myself just have to have 98SE up and running for work and
testing purposes. <smile>

"Rick Chauvin" <justask@nospamz.com> wrote in message
news:uEg16$YJFHA.2356@TK2MSFTNGP12.phx.gbl...
: It would be good to know which one of these updates did it to you?
: Or, did you do other things at WU too? Anywhere/Anything else?
:
: Both of these Updates are available in Control Panel in Add/Remove (scroll
to
: W's) to uninstall them so try that. but First just uncheck it in msconfig
:
: I tracked each of the installs and specifically can tell you all the exact
: changes that were made, which wasn't very much - it's just the 891711 was
: unique with what they did with adding a new running process. You can
search
: google for 891711 and see lot's of people are having various issues with
it.
: It's easy to reverse the installs of either though if one wants.
:
: Rick
:
: "TerryG" <TerryG@discussions.microsoft.com> wrote in message
: news:8D3CA9EF-0D3A-4FB8-B144-5CA3A7C273C7@microsoft.com
: > All. I installed these updates the other day, and now my machine is
HOSED.
: > It boots up and starts Windows, then fails with several blue screens
until
: > it finally runs out of memory. I can run in Safe Mode and DOS, but
that's
: > it. Anyone know how to back these out from either of those modes?
: >
: > Thanks,
: >
: > T.
: >
: > "roman modic" wrote:
: >
: >> The decision to release patches for Windows 98 and ME users is described
: >> as a "bonus" because of the critical nature of the vulnerabilities being
: >> addressed, a Microsoft spokeswoman said. "Those products are out of
: >> lifecycle, but we made a commitment to provide critical updates, and
: >> that's what you're seeing."
: >>
: >> http://www.eweek.com/article2/0,1759,1774106,00.asp
: >>
: >>
: >> Regards, Roman
:
:
:
:
:
Anonymous
March 10, 2005 2:33:00 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Thanks guys! So I should be able to identify these in Add/remove programs as
what, "MS05-02" or "MS05-15" or as "891711". Sorry, not sitting at the
machine in question right now.

Ummm, "msconfig"??? What is it?


"darkrats" wrote:

> 891711 was the culprit.
> I'm still looking for a direct link to the other patch.
>
>
> "Rick Chauvin" <justask@nospamz.com> wrote in message
> news:uEg16$YJFHA.2356@TK2MSFTNGP12.phx.gbl...
> > It would be good to know which one of these updates did it to you?
> > Or, did you do other things at WU too? Anywhere/Anything else?
> >
> > Both of these Updates are available in Control Panel in Add/Remove (scroll
> to
> > W's) to uninstall them so try that. but First just uncheck it in msconfig
> >
> > I tracked each of the installs and specifically can tell you all the exact
> > changes that were made, which wasn't very much - it's just the 891711 was
> > unique with what they did with adding a new running process. You can
> search
> > google for 891711 and see lot's of people are having various issues with
> it.
> > It's easy to reverse the installs of either though if one wants.
> >
> > Rick
> >
> > "TerryG" <TerryG@discussions.microsoft.com> wrote in message
> > news:8D3CA9EF-0D3A-4FB8-B144-5CA3A7C273C7@microsoft.com
> > > All. I installed these updates the other day, and now my machine is
> HOSED.
> > > It boots up and starts Windows, then fails with several blue screens
> until
> > > it finally runs out of memory. I can run in Safe Mode and DOS, but
> that's
> > > it. Anyone know how to back these out from either of those modes?
> > >
> > > Thanks,
> > >
> > > T.
> > >
> > > "roman modic" wrote:
> > >
> > >> The decision to release patches for Windows 98 and ME users is
> described
> > >> as a "bonus" because of the critical nature of the vulnerabilities
> being
> > >> addressed, a Microsoft spokeswoman said. "Those products are out of
> > >> lifecycle, but we made a commitment to provide critical updates, and
> > >> that's what you're seeing."
> > >>
> > >> http://www.eweek.com/article2/0,1759,1774106,00.asp
> > >>
> > >>
> > >> Regards, Roman
> >
> >
> >
> >
> >
>
>
>
Anonymous
March 10, 2005 2:33:01 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

It does not appear in my Add/Remove Programs.

msconfig

Go to Start
Go to Run
Type - msconfig



"TerryG" <TerryG@discussions.microsoft.com> wrote in message
news:4EB4E2F3-BE55-496C-A70B-628892E20CE2@microsoft.com...
> Thanks guys! So I should be able to identify these in Add/remove programs
as
> what, "MS05-02" or "MS05-15" or as "891711". Sorry, not sitting at the
> machine in question right now.
>
> Ummm, "msconfig"??? What is it?
>
>
> "darkrats" wrote:
>
> > 891711 was the culprit.
> > I'm still looking for a direct link to the other patch.
> >
> >
> > "Rick Chauvin" <justask@nospamz.com> wrote in message
> > news:uEg16$YJFHA.2356@TK2MSFTNGP12.phx.gbl...
> > > It would be good to know which one of these updates did it to you?
> > > Or, did you do other things at WU too? Anywhere/Anything else?
> > >
> > > Both of these Updates are available in Control Panel in Add/Remove
(scroll
> > to
> > > W's) to uninstall them so try that. but First just uncheck it in
msconfig
> > >
> > > I tracked each of the installs and specifically can tell you all the
exact
> > > changes that were made, which wasn't very much - it's just the 891711
was
> > > unique with what they did with adding a new running process. You can
> > search
> > > google for 891711 and see lot's of people are having various issues
with
> > it.
> > > It's easy to reverse the installs of either though if one wants.
> > >
> > > Rick
> > >
> > > "TerryG" <TerryG@discussions.microsoft.com> wrote in message
> > > news:8D3CA9EF-0D3A-4FB8-B144-5CA3A7C273C7@microsoft.com
> > > > All. I installed these updates the other day, and now my machine is
> > HOSED.
> > > > It boots up and starts Windows, then fails with several blue screens
> > until
> > > > it finally runs out of memory. I can run in Safe Mode and DOS, but
> > that's
> > > > it. Anyone know how to back these out from either of those modes?
> > > >
> > > > Thanks,
> > > >
> > > > T.
> > > >
> > > > "roman modic" wrote:
> > > >
> > > >> The decision to release patches for Windows 98 and ME users is
> > described
> > > >> as a "bonus" because of the critical nature of the vulnerabilities
> > being
> > > >> addressed, a Microsoft spokeswoman said. "Those products are out of
> > > >> lifecycle, but we made a commitment to provide critical updates,
and
> > > >> that's what you're seeing."
> > > >>
> > > >> http://www.eweek.com/article2/0,1759,1774106,00.asp
> > > >>
> > > >>
> > > >> Regards, Roman
> > >
> > >
> > >
> > >
> > >
> >
> >
> >
Anonymous
March 10, 2005 2:35:10 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

I see absolutely no changes whatsoever with before/after these updates with
what's listed in netstat -an



"Vince" <nobody@home.invalid> wrote in message
news:k5n031hv9vkcgk2kcb7t1mpki7hn699a7k@4ax.com
> On Wed, 9 Mar 2005 16:59:33 -0500, "Rick Chauvin"
> <justask@nospamz.com> wrote:
>
>>Did you notice after installing 891711 that you have a new live process
>>running (ctrl-alt-del) which of course shows up in msconfig too.
>
> Yeah, I saw that and there's more that I don't understand.
>
> If you open a DOSbox and issue the command "netstat -an", the output
> indicates there's a new process and it's listening on port 9999.
> TCP 127.0.0.1:9999 0.0.0.0:0 LISTENING
> What's this all about? Is Win98(SE) now running "services/daemons"?
March 10, 2005 2:59:44 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

Ruh-roh!! Looks like I've got something running I don't recognize.
This is not good.

On Thu, 10 Mar 2005 11:35:10 -0500, "Rick Chauvin"
<justask@nospamz.com> wrote:

>I see absolutely no changes whatsoever with before/after these updates with
>what's listed in netstat -an
>
>
>
>"Vince" <nobody@home.invalid> wrote in message
>news:k5n031hv9vkcgk2kcb7t1mpki7hn699a7k@4ax.com
>> On Wed, 9 Mar 2005 16:59:33 -0500, "Rick Chauvin"
>> <justask@nospamz.com> wrote:
>>
>>>Did you notice after installing 891711 that you have a new live process
>>>running (ctrl-alt-del) which of course shows up in msconfig too.
>>
>> Yeah, I saw that and there's more that I don't understand.
>>
>> If you open a DOSbox and issue the command "netstat -an", the output
>> indicates there's a new process and it's listening on port 9999.
>> TCP 127.0.0.1:9999 0.0.0.0:0 LISTENING
>> What's this all about? Is Win98(SE) now running "services/daemons"?
>
Anonymous
March 10, 2005 4:31:01 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

"darkrats" <darkrats@hotmail.com> wrote in message
news:o 7C3UlZJFHA.572@tk2msftngp13.phx.gbl
> It does not appear in my Add/Remove Programs.

...because you don't have 891711 installed ! ...yet (;

...you've got Q888113 listed though, if, as your post said
that you installed 888113.
Anonymous
March 10, 2005 4:34:47 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

"TerryG" <TerryG@discussions.microsoft.com> wrote in message
news:4EB4E2F3-BE55-496C-A70B-628892E20CE2@microsoft.com
> Thanks guys! So I should be able to identify these in Add/remove programs
> as what, "MS05-02" or "MS05-15" or as "891711". Sorry, not sitting at the
> machine in question right now.
>
> Ummm, "msconfig"??? What is it?

In the Add/Remove list, you will see "Windows 98 KB 891711 Update" listed in
there if that's the one you are talking about, and the other one is in the
same area but listed as ....Q888113

What I meant by msconfig was Start> Run> type: msconfig ..under the StartUp
tab you will see listed KB891711 and so what I was saying for just this
instance, instead of uninstalling it maybe first try un-checking it's listing
and then click Apply and reboot; or you can just uninstall them if you want.
Choose to boot up normally now instead of Save Mode, if, it will let you, if,
you solved whatever you did before that is causing your problem.

Please understand I'm not saying they were causing your problem, but you
didn't answer the other questions to help isolate and detail what the things
you did were.

Rick
Anonymous
March 10, 2005 4:48:15 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

> Please understand I'm not saying they were causing your problem, but you
> didn't answer the other questions to help isolate and detail what the
> things you did were.

....or maybe it is after reading this post:

----- Original Message -----
From: "TerryG"
Newsgroups: microsoft.public.win98.gen_discussion
Sent: Thursday, March 10, 2005 10:23 AM
Subject: Windows Update causes startup failure
March 10, 2005 8:23:32 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

What problem do you have Vince?

"Vince" <nobody@home.invalid> wrote in message
news:9m2131559d95j1ul0avjtnsq085l4ric7o@4ax.com...
: Ruh-roh!! Looks like I've got something running I don't recognize.
: This is not good.
:
: On Thu, 10 Mar 2005 11:35:10 -0500, "Rick Chauvin"
: <justask@nospamz.com> wrote:
:
: >I see absolutely no changes whatsoever with before/after these updates
with
: >what's listed in netstat -an
: >
: >
: >
: >"Vince" <nobody@home.invalid> wrote in message
: >news:k5n031hv9vkcgk2kcb7t1mpki7hn699a7k@4ax.com
: >> On Wed, 9 Mar 2005 16:59:33 -0500, "Rick Chauvin"
: >> <justask@nospamz.com> wrote:
: >>
: >>>Did you notice after installing 891711 that you have a new live process
: >>>running (ctrl-alt-del) which of course shows up in msconfig too.
: >>
: >> Yeah, I saw that and there's more that I don't understand.
: >>
: >> If you open a DOSbox and issue the command "netstat -an", the output
: >> indicates there's a new process and it's listening on port 9999.
: >> TCP 127.0.0.1:9999 0.0.0.0:0 LISTENING
: >> What's this all about? Is Win98(SE) now running "services/daemons"?
: >
:
March 14, 2005 11:48:40 AM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

On Thu, 10 Mar 2005 11:35:10 -0500, "Rick Chauvin"
<justask@nospamz.com> wrote:

>I see absolutely no changes whatsoever with before/after these updates with
>what's listed in netstat -an

Finally!!
Figured out what app was listening on port 9999 - a Bayesian spam
filter/proxy - K9 <http://keir.net/k9.html&gt;

Not sure where to add to the confusion of KB891711, so I'll just throw
it out here, for what it's worth.

Using Win98SE with all critical updates applied and running. Use
dialup with a Winmodem. Typically no firewall. F-Prot for Windows is
the anti-virus.

Here's a recent list of running processes (from the AdAware log -
captured while not connected to dialup, although the usual dialup
stuff is running).
Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
#:1 [KERNEL32.DLL]
#:2 [MSGSRV32.EXE]
#:3 [MPREXE.EXE]
#:4 [mmtask.tsk]
#:5 [KB891711.EXE]
#:6 [EXPLORER.EXE]
#:7 [TASKMON.EXE]
#:8 [SYSTRAY.EXE]
#:9 [FBDIRECT.EXE]
#:10 [STIMON.EXE]
#:11 [F-STOPW.EXE]
#:12 [TPPALDR.EXE]
#:13 [FPAVUPDM.EXE]
#:14 [RunDLL.exe]
#:15 [RSRCMTR.EXE]
#:16 [K9.EXE]
#:17 [SPOOL32.EXE]
#:18 [123FREESOLITAIRE.EXE]
#:19 [RNAAPP.EXE]
#:20 [TAPISRV.EXE]
#:21 [PSTORES.EXE]
#:22 [AD-AWARE.EXE]

No problems with slow performance, no BSOD. Wish somebody had some
flash of brilliance what's going wrong with KB891711, 'cause I feel
like I'm walking under a ladder and a black cat just ran out in front
of me.
Anonymous
March 14, 2005 6:04:23 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

| #:19 [RNAAPP.EXE]
| #:20 [TAPISRV.EXE]

It's really fruitless to start guessing this early, as I am sure MS is
diligently at work with a fix of their fix. However, I think it might be
one of those two, as they spring to life during a NET connection for
those of us with Dial-Up. (But someone has said she doesn't even get
TAPISRV.EXE.) I think you will discover IE works fine OFFLINE, reading
URLs out of TIFs (Temporary Internet Files), before these two are
started. Naturally, other processes, such as IE itself, may want to do
more, after the NET connection is established. So, really, it could be
anything still.


--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR
pcrrcp@netzero.net
"Vince" <nobody@home.invalid> wrote in message
news:f88b31p6f8uf59u1un0s5014d5ma7oflt5@4ax.com...
| On Thu, 10 Mar 2005 11:35:10 -0500, "Rick Chauvin"
| <justask@nospamz.com> wrote:
|
| >I see absolutely no changes whatsoever with before/after these
updates with
| >what's listed in netstat -an
|
| Finally!!
| Figured out what app was listening on port 9999 - a Bayesian spam
| filter/proxy - K9 <http://keir.net/k9.html&gt;
|
| Not sure where to add to the confusion of KB891711, so I'll just throw
| it out here, for what it's worth.
|
| Using Win98SE with all critical updates applied and running. Use
| dialup with a Winmodem. Typically no firewall. F-Prot for Windows is
| the anti-virus.
|
| Here's a recent list of running processes (from the AdAware log -
| captured while not connected to dialup, although the usual dialup
| stuff is running).
| Listing running processes
| »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
| #:1 [KERNEL32.DLL]
| #:2 [MSGSRV32.EXE]
| #:3 [MPREXE.EXE]
| #:4 [mmtask.tsk]
| #:5 [KB891711.EXE]
| #:6 [EXPLORER.EXE]
| #:7 [TASKMON.EXE]
| #:8 [SYSTRAY.EXE]
| #:9 [FBDIRECT.EXE]
| #:10 [STIMON.EXE]
| #:11 [F-STOPW.EXE]
| #:12 [TPPALDR.EXE]
| #:13 [FPAVUPDM.EXE]
| #:14 [RunDLL.exe]
| #:15 [RSRCMTR.EXE]
| #:16 [K9.EXE]
| #:17 [SPOOL32.EXE]
| #:18 [123FREESOLITAIRE.EXE]
| #:19 [RNAAPP.EXE]
| #:20 [TAPISRV.EXE]
| #:21 [PSTORES.EXE]
| #:22 [AD-AWARE.EXE]
|
| No problems with slow performance, no BSOD. Wish somebody had some
| flash of brilliance what's going wrong with KB891711, 'cause I feel
| like I'm walking under a ladder and a black cat just ran out in front
| of me.
Anonymous
March 14, 2005 6:17:32 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

> Figured out what app was listening on port 9999 - a Bayesian spam
> filter/proxy - K9 <http://keir.net/k9.html&gt;

cf. http://keir.net/k9.html
--
~Robear Dyer (PA Bear)
MS MVP-Windows (Shell, IE/OE) & Security

In Memoriam, MVP Alex Nichol (1935-2005)
http://www.microsoft.com/windowsxp/expertzone/meetexper...


Vince wrote:
> On Thu, 10 Mar 2005 11:35:10 -0500, "Rick Chauvin"
> <justask@nospamz.com> wrote:
>
> > I see absolutely no changes whatsoever with before/after these updates
> > with what's listed in netstat -an
>
> Finally!!
> Figured out what app was listening on port 9999 - a Bayesian spam
> filter/proxy - K9 <http://keir.net/k9.html&gt;
>
> Not sure where to add to the confusion of KB891711, so I'll just throw
> it out here, for what it's worth.
>
> Using Win98SE with all critical updates applied and running. Use
> dialup with a Winmodem. Typically no firewall. F-Prot for Windows is
> the anti-virus.
>
> Here's a recent list of running processes (from the AdAware log -
> captured while not connected to dialup, although the usual dialup
> stuff is running).
> Listing running processes
> »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
> #:1 [KERNEL32.DLL]
> #:2 [MSGSRV32.EXE]
> #:3 [MPREXE.EXE]
> #:4 [mmtask.tsk]
> #:5 [KB891711.EXE]
> #:6 [EXPLORER.EXE]
> #:7 [TASKMON.EXE]
> #:8 [SYSTRAY.EXE]
> #:9 [FBDIRECT.EXE]
> #:10 [STIMON.EXE]
> #:11 [F-STOPW.EXE]
> #:12 [TPPALDR.EXE]
> #:13 [FPAVUPDM.EXE]
> #:14 [RunDLL.exe]
> #:15 [RSRCMTR.EXE]
> #:16 [K9.EXE]
> #:17 [SPOOL32.EXE]
> #:18 [123FREESOLITAIRE.EXE]
> #:19 [RNAAPP.EXE]
> #:20 [TAPISRV.EXE]
> #:21 [PSTORES.EXE]
> #:22 [AD-AWARE.EXE]
>
> No problems with slow performance, no BSOD. Wish somebody had some
> flash of brilliance what's going wrong with KB891711, 'cause I feel
> like I'm walking under a ladder and a black cat just ran out in front
> of me.
Anonymous
March 25, 2005 3:19:37 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

I've received a request from the team that's working on the
KB891711 issue. They would like everyone in the USA who has had problems
with KB891711 to call 1-866-PCSafety (1-866-727-2338). If you can help
them with some info, they say they're close to reproducing the
problem--first step toward solving it. I have asked for, though not yet
received, assurances that callers will be taken more seriously than has
been reported thus far.

(According to at least a couple of people, when they called PSS they
were told that KB891711 wasn't a critical problem on Win98 and to just
uninstall it. KB891711 deals with a very *serious* vulnerability,
affecting pretty much all Windows systems, and anyone who can't get
patched decently should don at *least* a dozen condoms before journeying
out onto the internet.)

--
Gary S. Terhune
MS MVP Shell/User
http://www.grystmill.com/articles/cleanboot.htm
http://www.grystmill.com/articles/security.htm


--
Jack E. Martinelli 2002-05 MS MVP for Shell/User / DTS
Help us help you: http://www.dts-L.org/goodpost.htm

http://www.microsoft.com/athome/security/protect/defaul...
In Memorium: Alex Nichol
http://www.microsoft.com/windowsxp/expertzone/meetexper...
Your cooperation is very appreciated.
------
"darkrats" <darkrats@hotmail.com> wrote in message
news:o ABKC4TJFHA.1208@TK2MSFTNGP10.phx.gbl...
> Haven't found the second patch yet.
>
> I also noticed 891711 was a live process, set to run at every boot.
> My ZoneAlarm stopped working until I disabled 891711 under the startup
tab.
>
> Something weird about this.
>
>
>
> "Rick Chauvin" <justask@nospamz.com> wrote in message
> news:#Q5GlTPJFHA.3204@TK2MSFTNGP10.phx.gbl...
> > "darkrats" <darkrats@hotmail.com> wrote in message
> > news:up7KJBNJFHA.1476@TK2MSFTNGP09.phx.gbl
> > > I go through this every time there's a new patch.
> > > I don't use Windows Update. I'm looking for some direct links.
> > >
> > > Update: I found the patch KB891711 for both 98 and ME.
> > > Still looking for the other one.
> >
> > Did you notice after installing 891711 that you have a new live process
> > running (ctrl-alt-del) which of course shows up in msconfig too. bummer
> they
> > had to do it that way and is the first time this was done that I know
of.
> I
> > don't see that was done in either 2K or XP for this update but they
> > accomplished it another way.
> >
> > Interesting I'd noticed WU had a new Root Certificates Update I had
never
> > seen before, installing it showed v6,0,2195,0 for 9x as well as 2K
> >
> > What do you need? ..888113 for 9x ..is that a real email to use?
> >
> > ...did you ever get 867282? etc..
> >
> > Rick
> >
> >
> >
>
>
Anonymous
March 25, 2005 3:19:38 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

See Don Kirkpatrick's reply to me on this issue. As I suspected, the
right hand still doesn't know what the left hand is doing at Microsoft.
I'd hold off on directly calling MS on this issue until this gets
straightened out.

--
Gary S. Terhune
MS MVP Shell/User
http://www.grystmill.com/articles/cleanboot.htm
http://www.grystmill.com/articles/security.htm

"Jack E Martinelli" <jemartin_DELETE@NO_SPAM_gis.net> wrote in message
news:eIHuS7VMFHA.4092@tk2msftngp13.phx.gbl...
> I've received a request from the team that's working on the
> KB891711 issue. They would like everyone in the USA who has had
problems
> with KB891711 to call 1-866-PCSafety (1-866-727-2338). If you can help
> them with some info, they say they're close to reproducing the
> problem--first step toward solving it. I have asked for, though not
yet
> received, assurances that callers will be taken more seriously than
has
> been reported thus far.
>
> (According to at least a couple of people, when they called PSS they
> were told that KB891711 wasn't a critical problem on Win98 and to just
> uninstall it. KB891711 deals with a very *serious* vulnerability,
> affecting pretty much all Windows systems, and anyone who can't get
> patched decently should don at *least* a dozen condoms before
journeying
> out onto the internet.)
>
> --
> Gary S. Terhune
> MS MVP Shell/User
> http://www.grystmill.com/articles/cleanboot.htm
> http://www.grystmill.com/articles/security.htm
>
>
> --
> Jack E. Martinelli 2002-05 MS MVP for Shell/User / DTS
> Help us help you: http://www.dts-L.org/goodpost.htm
>
> http://www.microsoft.com/athome/security/protect/defaul...
> In Memorium: Alex Nichol
> http://www.microsoft.com/windowsxp/expertzone/meetexper...
> Your cooperation is very appreciated.
> ------
> "darkrats" <darkrats@hotmail.com> wrote in message
> news:o ABKC4TJFHA.1208@TK2MSFTNGP10.phx.gbl...
> > Haven't found the second patch yet.
> >
> > I also noticed 891711 was a live process, set to run at every boot.
> > My ZoneAlarm stopped working until I disabled 891711 under the
startup
> tab.
> >
> > Something weird about this.
> >
> >
> >
> > "Rick Chauvin" <justask@nospamz.com> wrote in message
> > news:#Q5GlTPJFHA.3204@TK2MSFTNGP10.phx.gbl...
> > > "darkrats" <darkrats@hotmail.com> wrote in message
> > > news:up7KJBNJFHA.1476@TK2MSFTNGP09.phx.gbl
> > > > I go through this every time there's a new patch.
> > > > I don't use Windows Update. I'm looking for some direct links.
> > > >
> > > > Update: I found the patch KB891711 for both 98 and ME.
> > > > Still looking for the other one.
> > >
> > > Did you notice after installing 891711 that you have a new live
process
> > > running (ctrl-alt-del) which of course shows up in msconfig too.
bummer
> > they
> > > had to do it that way and is the first time this was done that I
know
> of.
> > I
> > > don't see that was done in either 2K or XP for this update but
they
> > > accomplished it another way.
> > >
> > > Interesting I'd noticed WU had a new Root Certificates Update I
had
> never
> > > seen before, installing it showed v6,0,2195,0 for 9x as well as 2K
> > >
> > > What do you need? ..888113 for 9x ..is that a real email to use?
> > >
> > > ...did you ever get 867282? etc..
> > >
> > > Rick
> > >
> > >
> > >
> >
> >
>
>
Anonymous
March 25, 2005 9:26:34 PM

Archived from groups: microsoft.public.win98.gen_discussion (More info?)

The latest from MS:

"Microsoft has received reports about issues with KB891711 on Windows
98,
Windows 98 SE and Windows ME. At this point, we have been able to
confirm these reports and are currently working on a resolution.

"Please note that by uninstalling the current update, the machine will
return to a vulnerable state. At this point, we are currently not aware
of customer's being exploited by way of the vulnerability fixed in
MS05-002 on Windows 98, Windows 98 SE and Windows ME. If you need
additional assistance regarding this update, please contact +1 (866)
PCSAFETY."

I'm now assured, and fairly confident, that anyone who answers your call
will be updated on the issue.
--
Gary S. Terhune
MS MVP Shell/User
http://www.grystmill.com/articles/cleanboot.htm
http://www.grystmill.com/articles/security.htm

"Gary S. Terhune" <grystnews@mvps.org> wrote in message
news:%23VAACHWMFHA.3988@tk2msftngp13.phx.gbl...
> See Don Kirkpatrick's reply to me on this issue. As I suspected, the
> right hand still doesn't know what the left hand is doing at
Microsoft.
> I'd hold off on directly calling MS on this issue until this gets
> straightened out.
>
> --
> Gary S. Terhune
> MS MVP Shell/User
> http://www.grystmill.com/articles/cleanboot.htm
> http://www.grystmill.com/articles/security.htm
>
> "Jack E Martinelli" <jemartin_DELETE@NO_SPAM_gis.net> wrote in message
> news:eIHuS7VMFHA.4092@tk2msftngp13.phx.gbl...
> > I've received a request from the team that's working on the
> > KB891711 issue. They would like everyone in the USA who has had
> problems
> > with KB891711 to call 1-866-PCSafety (1-866-727-2338). If you can
help
> > them with some info, they say they're close to reproducing the
> > problem--first step toward solving it. I have asked for, though not
> yet
> > received, assurances that callers will be taken more seriously than
> has
> > been reported thus far.
> >
> > (According to at least a couple of people, when they called PSS they
> > were told that KB891711 wasn't a critical problem on Win98 and to
just
> > uninstall it. KB891711 deals with a very *serious* vulnerability,
> > affecting pretty much all Windows systems, and anyone who can't get
> > patched decently should don at *least* a dozen condoms before
> journeying
> > out onto the internet.)
> >
> > --
> > Gary S. Terhune
> > MS MVP Shell/User
> > http://www.grystmill.com/articles/cleanboot.htm
> > http://www.grystmill.com/articles/security.htm
> >
> >
> > --
> > Jack E. Martinelli 2002-05 MS MVP for Shell/User / DTS
> > Help us help you: http://www.dts-L.org/goodpost.htm
> >
> > http://www.microsoft.com/athome/security/protect/defaul...
> > In Memorium: Alex Nichol
> >
http://www.microsoft.com/windowsxp/expertzone/meetexper...
> > Your cooperation is very appreciated.
> > ------
> > "darkrats" <darkrats@hotmail.com> wrote in message
> > news:o ABKC4TJFHA.1208@TK2MSFTNGP10.phx.gbl...
> > > Haven't found the second patch yet.
> > >
> > > I also noticed 891711 was a live process, set to run at every
boot.
> > > My ZoneAlarm stopped working until I disabled 891711 under the
> startup
> > tab.
> > >
> > > Something weird about this.
> > >
> > >
> > >
> > > "Rick Chauvin" <justask@nospamz.com> wrote in message
> > > news:#Q5GlTPJFHA.3204@TK2MSFTNGP10.phx.gbl...
> > > > "darkrats" <darkrats@hotmail.com> wrote in message
> > > > news:up7KJBNJFHA.1476@TK2MSFTNGP09.phx.gbl
> > > > > I go through this every time there's a new patch.
> > > > > I don't use Windows Update. I'm looking for some direct links.
> > > > >
> > > > > Update: I found the patch KB891711 for both 98 and ME.
> > > > > Still looking for the other one.
> > > >
> > > > Did you notice after installing 891711 that you have a new live
> process
> > > > running (ctrl-alt-del) which of course shows up in msconfig too.
> bummer
> > > they
> > > > had to do it that way and is the first time this was done that I
> know
> > of.
> > > I
> > > > don't see that was done in either 2K or XP for this update but
> they
> > > > accomplished it another way.
> > > >
> > > > Interesting I'd noticed WU had a new Root Certificates Update I
> had
> > never
> > > > seen before, installing it showed v6,0,2195,0 for 9x as well as
2K
> > > >
> > > > What do you need? ..888113 for 9x ..is that a real email to
use?
> > > >
> > > > ...did you ever get 867282? etc..
> > > >
> > > > Rick
> > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
!