THE WELCH COMPANY
440 Davis Court #1602
San Francisco, CA 94111-2496
415 781 5700
rodwelch@pacbell.net


S U M M A R Y


DIARY: June 18, 2003 08:50 PM Wednesday; Rod Welch

Windows 2000 update downloaded from Microsoft, report of virus.

1...Summary/Objective


..............
Click here to comment!

CONTACTS 

SUBJECTS
Virus Reported by McAfee on W2K Update Downloaded from Microsoft bssx
Virus Reported by McAfee After Downloaded W2K Updated from Microsoft
C13 Update W2K Primarily for IE 6 Which has Been Moved to Concord
Virus Reported by McAfee on C13 Update W2K Primarily for IE 6 Which h
Virus Bssx.exe Reported by McAfee After Downloading Update for W2k fr
Virus Detection Recovery Protection Firewall Hardware Software
Virus Reported by McAfee on W2K Update Downloaded from Microsoft bssx

1009 -
1009 -    ..
1010 - Summary/Objective
1011 -
101101 - Follow up ref SDS 2 0000.
101102 -
101103 - This evening logged onto Windows 2000 Update....
101104 -
101105 -     http://v4.windowsupdate.microsoft.com/en/default.asp
101107 -  ..
101108 - Ran "Scan for updates."
101110 -  ..
101111 - Installed the 4 or 5 listings that totaled about 6 MB.
101113 -  ..
101114 - The operation ran normally.
101116 -  ..
101117 - After download and installation, there was a message asking about
101118 - booting the computer to complete installation.
101120 -  ..
101121 - Clicked yes to this option.
101123 -  ..
101124 - The computer booted.
101126 -  ..
101127 - When the computer came up, after logging in with user ID and
101128 - password, the normal desktop appeared, but then McAfee reported a
101129 - virus.
101130 -
101131 -      This is similar to the problem on 920803 when a Lotus 123 program
101132 -      disk purchased from Egghead had a virus. ref SDS 1 0001
101133 -
101135 -  ..
101136 - Believe the infected file was something like....
101137 -
101138 -                   bssx.exe
101139 -
101140 - ...in a w2k directory somewhere.
101142 -  ..
101143 - Sent an email to Microsoft notifying of the problem.
101144 -
101145 -         wrhelp@microsoft.com
101146 -
101147 -      [On 030619 Microsoft denied the integrity of its systems have
101148 -      been compromised. ref SDS 3 0001
101149 -
101150 -
101151 -
101152 -
101153 -
101154 -
101155 -
101156 -
101157 -
101158 -
1012 -