Re: Windows 2000/FrontPage Server files....? Update !!!

From: Jeff Allen (jba_15@hotmail.com)
Date: 06/29/02 

From: "Jeff Allen" <jba_15@hotmail.com>
Date: Sat, 29 Jun 2002 13:34:44 -0400

This is possible as we have installed updates to IE as part of Security
Patches and maintenance. Several things that I have discovered in my
research on this issue. The files are confirmed to be installed from
Windows 2000 Reskit, Windows 2000 compatibility update, and Windows 2000
SP1. We did find out some good news in that the files fp98sadm.exe and
fp98win.exe do not work with Windows 2000. We were able to delete these
guys and also prove that there were no active process using these files.
The bad news is that we found out that fpsrvadm.exe and fpsrwin.exe are
compatible with 2000 and are spawn by Winlogon.exe. When we try to delete
the files we get a share violation. We stopped the Winlogon service and
deleted the entire C:\Program Files\Microsoft FrontPage\Version3.0\bin
structure. Upon restarting the Winlogon.exe service the C:\Program
Files\Microsoft Frontpage\Version3.0\bin re-created itself. Anything else
that yourself or anyone else can advise would be more than appreciated.

Thanks in advance -

Jeff

"Joshua Heslinga" <jheslinga@attbi.com> wrote in message
news:uzrcXg3HCHA.2512@tkmsftngp09...
> Possibly FrontPage Express (that you'd have gotten with an IE
installation)?
>
> Joshua Heslinga
> MCSE
>
>
> "Jeff" <jallen@dotsconnect.com> wrote in message
> news:114a001c21edb$8bec1050$a5e62ecf@tkmsftngxa07...
> > We just went through an internal security scan. The
> > scanners picked up that FrontPage was running on our Win2K
> > boxes. We thought this was a false-positive, however when
> > we went the machines we found the following:
> >
> > C:\Program Files\Microsoft Frontpage\Version3.0\bin
> > fp98sadm.exe
> > fp98swin.exe
> > fpsrvadm.exe
> > fpsrvwin.exe
> >
> > Can anyone advise as to how these files could have been
> > installed? We have no entries in Add/Remove programs and
> > we have not enabled FrontPage 2000 Extentions nor is IIS
> > even on these boxes.
>
>

Relevant Pages

  • Re: sassar
    ... authoritative in all matters concerning Microsoft Security Alerts! ... downloaded from the microsoft.com download center or Windows Update. ... Instructions for patching and cleaning vulnerable Windows 2000 and Windows ... installation of the patch as well as removal of the worm. ...
    (microsoft.public.security.virus)
  • Sasser patching & removal instructions
    ... authoritative in all matters concerning Microsoft Security Alerts! ... downloaded from the microsoft.com download center or Windows Update. ... Instructions for patching and cleaning vulnerable Windows 2000 and Windows ... installation of the patch as well as removal of the worm. ...
    (microsoft.public.windowsxp.general)
  • Re: New IE flaw and exploit sites/migration to non-MS browser
    ... installation for workstations that has been floating around ever since ... Microsoft on their network security team at the time and followed much ... Windows 9x had no concept of admin/user. ... their computers aren't working when the power is off. ...
    (Focus-Microsoft)
  • Questions Regarding Workable SOHO Windows Installation / Configuration, Diagnostics, & Security
    ... Questions Regarding Workable SOHO Windows Installation / ... Configuration, Diagnostics, & Security Options ver. ... even an additional 5 to 8: additional antivirus and scanning software. ...
    (comp.security.misc)
  • Questions Regarding Workable SOHO Windows Installation / Configuration, Diagnostics, & Security
    ... Questions Regarding Workable SOHO Windows Installation / ... Configuration, Diagnostics, & Security Options ver. ... even an additional 5 to 8: additional antivirus and scanning software. ...
    (comp.security.misc)