Cable Forum - View Single Post - JPEG Virus

Aragorn · 02-10-2004, 21:26

Wayne,

All the patches for the GDI problem can be reached here -
http://www.microsoft.com/technet/sec.../MS04-028.mspx
Note - If you have your Office CD handy you only need the 'client' version of the patch, otherwise download the 'fullfile' version.
My other point was that you have two files -
C:\WINDOWS\I386\ASMS\1000\MSFT\WINDOWS\GDIPLUS\GDI PLUS.DLL
Version: 5.1.3097.0 <-- Vulnerable version
...
C:\WINDOWS\SoftwareDistribution\Download\9ded4ee34 a35fced0033d3e152a36e0e\asms\10\msft\windows\gdipl us\gdiplus.dll
Version: 5.1.3102.2180

One is the original file (5.1.3097.0), the other is the patched version of the same file (5.1.3102.2180). Normally the patch should have copied the patch over the original, but it hasn't.
I would suggest downloading the WinXP patch from the location above and manually installing. Then run the GDISCAN again.

HTH and is clearer!

02-10-2004, 21:26	#27
Aragorn Inactive Join Date: Apr 2004 Location: Minas Tirith, Gondor Age: 61 Posts: 3,458	Re: JPEG Virus - Are you Vulnerable? Wayne, All the patches for the GDI problem can be reached here - http://www.microsoft.com/technet/sec.../MS04-028.mspx Note - If you have your Office CD handy you only need the 'client' version of the patch, otherwise download the 'fullfile' version. My other point was that you have two files - C:\WINDOWS\I386\ASMS\1000\MSFT\WINDOWS\GDIPLUS\GDI PLUS.DLL Version: 5.1.3097.0 <-- Vulnerable version ... C:\WINDOWS\SoftwareDistribution\Download\9ded4ee34 a35fced0033d3e152a36e0e\asms\10\msft\windows\gdipl us\gdiplus.dll Version: 5.1.3102.2180 One is the original file (5.1.3097.0), the other is the patched version of the same file (5.1.3102.2180). Normally the patch should have copied the patch over the original, but it hasn't. I would suggest downloading the WinXP patch from the location above and manually installing. Then run the GDISCAN again. HTH and is clearer!