Re: Outlook Express Update Exp 6 SP! (KB837009)

[Crossposted to WinUp newsgroups]

Did you run Symantec's Removal Tool?
http://securityresponse.symantec.com...oval.tool.html

Try running NAV in Safe Mode per this post, Grant:
http://aumha.org/forum/viewtopic.php?t=5878

The fact that you got a Bagle/Bagel/Beagle infection tells me that either
NAV isn't kept fully up-to-date at all times, the system was already
infected by one or more pieces of hijackware, and/or the system is not kept
up-to-date at Windows Update at all times. It also indicates unsafe email
practices: Don't open any email or attachment you weren't expecting, even if
it appears to be "from" someone you know. When in doubt, ask the Sender (in
a new message, not a Reply To message).

Protect Your PC
http://www.microsoft.com/security/protect/default.asp
--
~PA Bear

Grant wrote:
> Reran the update for ninth time - checked history that
> indicates successful update each time. But, Update still
> indicates that this update needs to be run. Result
> of 'javascript:navigator.appMinorVersion'
> is ;SP1;Q867801;q313829; A few weeks ago, I got a version
> of the Bagle virus. Ran Norton to remove it
> successfully. Could this still be causing problems?
> Grant
>
> > -----Original Message-----
> > KB837009/MS04-013 (Apr-04) has been replaced by KB867801/MS04-025
> > (Jul-04) which you already have installed. Translation: You don't need
> > KB837009.
> >
> > To assure a clean install, your anti-virus application should be
> > disabled and all other running processes closed before installing
> > anything, including Windows Updates.
> >
> > Go to http://windowsupdate.microsoft.com and allow your system to be
> > scanned. Install *all* "critical updates", bar none. Then run
> > 'javascript:navigator.appMinorVersion' again and post back to this
> > thread with the results.
> > --
> > ~PA Bear
> >
> > wrote:
> > > ;SP1;Q867801;q313829;
> > > Window 98SE
> > >
> > > > -----Original Message-----
> > > > Copy/paste the following line into an IE Addressbar, click on GO,
> > > > then copy/paste the results into your reply:
> > > >
> > > > javascript:navigator.appMinorVersion
> > > >
> > > > Also state/reconfirm your Windows version.
> > > > --
> > > > Grant wrote:
> > > > > This update keeps reoccurring - wanting me to install it -
> > > > > after every reboot. What's happening and how can I fit it?

Run 'javascript:navigator.appMinorVersion' again, please and post the
results in your reply.

When did you install IE6-SP1?
--
~PA Bear

wrote:
> The plot thickens! Outlook Express Q823353 is loaded.
> 837009 does not appear in the iuhist.xml file, and no
> errors are in that file. I downloaded the file in
> http://www.microsoft.com/downloads/details.aspx?
> FamilyId=925628BD-1B5F-4B21-8DB6-EDE1C73F97B5. It would
> not run, giving the message the Outlook Express 6.0 SP1
> was not installed. So, I downloaded and executed IE6.0sp1-
> KB823353-x86-ENU.exe. The above file still give the same
> message. Now what?
> Grant
>
> > -----Original Message-----
> > Does 'Outlook Express 837009' appear in Add/Remove Programs? How about
> > in iuhist.xml? ...any errors listed there?
> >
> > Try installing it manually via
> > http://www.microsoft.com/downloads/details.aspx?
> FamilyId=925628BD-1B5F-4B21-8DB6-EDE1C73F97B5.
> > Close all running programs including Outlook Express, Internet
> > Explorer, and disable your anti-virus before installing.
> >
> > Then do the 'javascript:navigator.appMinorVersion' thing again and post
> > the results.
> > --
> > ~PA Bear
> >
> > Grant wrote:
> > > Performed all tasks below, without detecting any viruses.
> > > Problems with periodic rebooting still persist. I make
> > > heavy use of the My Documents folder. Clicking on folders
> > > within My Documents causing the system to take long pauses
> > > before responding, sometimes as long as one minute.
> > > Finally, the Uninstaller within the Control Panel -
> > > Add/Remove Programs - periodically locks up the system,
> > > requiring a cold boot Thanks for the help so far.
> > >
> > > > Check your system for "hijackware":
> > > >
> > > > Help with Hijackware
> > > > http://aumha.org/a/parasite.htm
> > > > http://aumha.org/a/quickfix.htm
> > > > http://mvps.org/winhelp2002/unwanted.htm
> > > > http://inetexplorer.mvps.org/Darnit.htm
> > > >
> > > > CoolWebSearch Chronicles
> > > > http://www.spywareinfo.com/~merijn/cwschronicles.html
> > > >
> > > > Run these tools in the following order with nothing else running in
> > > > background:
> > > >
> > > > 1. CWShredder (fix all found)
> > > >
> > > > 2. Ad-Aware (fix all found)
> > > >
> > > > 3. Spybot (RTFM but generally fix everything in red)
> > > >
> > > > Important: You *must* seek updates for Ad-Aware, Spybot, etc.,
> > > > before each and every use, even "right out of the box". But even
> > > > they can't catch everything, 24/7. When all else fails, HijackThis
> > > >
> (http://www.spywareinfo.com/~merijn/files/HijackThis.exe)
> is the
> > > > preferred tool to use. It will help you to both identify and
> > > > remove any hijackware/spyware. **Post your files to
> > > http://forums.spywareinfo.com/ or
> > > > http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
> > > > here.**
> > > >
> > > > [Alternate download pages for many of the above tools may be found
> > > > at http://aumha.org/a/parasite.htm.]
> > > >
> > > > Also:
> > > >
> > > > 1. Download and run Stinger
> > > (http://vil.nai.com/vil/stinger/); then...
> > > >
> > > > 2. Update your virus definitions, enable Show Hidden Files
> > > >
> > >
> (http://service1.symantec.com/SUPPORT...fo.nsf/docid/2
> > > 002092715262339)
> > > > and then run a full system scan in Safe Mode
> > > >
> > >
> (http://service1.symantec.com/SUPPORT...fo.nsf/docid/2
> > > 001052409420406)
> > > > with nothing else running in background. Note the files identified
> > > > and removed then find the corresponding page for the file at your
> > > > AV maker's online support pages (e.g.,
> > > >
> http://securityresponse.symantec.com...r/venc/data/ad
> > > > ware.winfavorites.html) and follow all Removal steps.
> > > >
> > > > WinXP Only (WinME similar): If this scan finds anything, create a
> > > > new Restore Point then Disk Cleanup > More options > Delete all but
> > > > the most recent Restore Point.
> > > >
> > > > 3. Check in at Windows Update.
> > > >
> > > > So How Did I Get Infected Anyway?
> > > > http://boards.cexx.org/viewtopic.php?t=957
> > > >
> > > > Grant wrote:
> > > > > Have done all things below and am still getting the same
> > > > > request for the update - there were no viruses detected.
> > > > > Another symptom might be that the system is very
> > > > > infrequently rebooting itself when I first run IE 6.0 the
> > > > > first time after a reboot. Not sure that this is related.
> > > > > I have removed and reloaded IE 6.0 without fixing the
> > > > > problem. Have any further ideas?
> > > > >
> > > > > > -----Original Message-----
> > > > > > [Crossposted to WinUp newsgroups]
> > > > > >
> > > > > > Did you run Symantec's Removal Tool?
> > > > > >
> > >
> http://securityresponse.symantec.com...r/venc/data/w3
> > > > > >
> > > > > >
> > > > > > Try running NAV in Safe Mode per this post, Grant:
> > > > > > http://aumha.org/forum/viewtopic.php?t=5878
> > > > > >
> > > > > > The fact that you got a Bagle/Bagel/Beagle infection tells me
> > > > > > that either NAV isn't kept fully up-to-date at all times, the
> > > > > > system was already infected by one or more pieces of
> > > > > > hijackware, and/or the system is not kept up-to-date at Windows
> > > > > > Update
> at all times. It
> > > > > > also indicates unsafe email practices: Don't open any email or
> > > > > > attachment you weren't expecting, even if it appears to be
> > > > > > "from" someone you know. When in doubt, ask the Sender (in a
> > > > > > new message, not a Reply To message).
> > > > > >
> > > > > > Protect Your PC
> > > > > >
> http://www.microsoft.com/security/protect/default.asp
> > > > > > --
> > > > > > ~PA Bear
> > > > > >
> > > > > > Grant wrote:
> > > > > > > Reran the update for ninth time - checked history that
> > > > > > > indicates successful update each time. But, Update still
> > > > > > > indicates that this update needs to be run. Result
> > > > > > > of 'javascript:navigator.appMinorVersion'
> > > > > > > is ;SP1;Q867801;q313829; A few weeks ago, I
> got a version
> > > > > > > of the Bagle virus. Ran Norton to remove it
> > > > > > > successfully. Could this still be causing problems?
> > > > > > > Grant
> > > > > > >
> > > > > > > > -----Original Message-----
> > > > > > > > KB837009/MS04-013 (Apr-04) has been replaced by
> > > > > > > > KB867801/MS04-025 (Jul-04) which you already have installed.
> > > > > > > > Translation: You don't need KB837009.
> > > > > > > >
> > > > > > > > To assure a clean install, your anti-virus application
> > > > > > > > should be disabled and all other running processes closed
> > > > > > > > before installing anything, including Windows Updates.
> > > > > > > >
> > > > > > > > Go to http://windowsupdate.microsoft.com and allow your
> > > > > > > > system to be scanned. Install *all* "critical updates",
> > > > > > > > bar none. Then
> run 'javascript:navigator.appMinorVersion' again and post
> > > > > > > > back to this thread with the results.
> > > > > > > > --
> > > > > > > > ~PA Bear
> > > > > > > >
> > > > > > > > wrote:
> > > > > > > > > ;SP1;Q867801;q313829;
> > > > > > > > > Window 98SE
> > > > > > > > >
> > > > > > > > > > -----Original Message-----
> > > > > > > > > > Copy/paste the following line into an IE Addressbar,
> > > > > > > > > > click on GO, then copy/paste the results into your
> > > > > > > > > > reply:
> > > > > > > > > >
> > > > > > > > > > javascript:navigator.appMinorVersion
> > > > > > > > > >
> > > > > > > > > > Also state/reconfirm your Windows version.
> > > > > > > > > > --
> > > > > > > > > > Grant wrote:
> > > > > > > > > > > This update keeps reoccurring - wanting me to install
> > > > > > > > > > > it - after every reboot. What's happening and how
> > > > > > > > > > > can I fit it?
> >
> > .