Re: Windows 2000/FrontPage Server files....? Update !!!

From: Jeff Allen (jba_15@hotmail.com)
Date: 06/29/02 

From: "Jeff Allen" <jba_15@hotmail.com>
Date: Sat, 29 Jun 2002 13:34:44 -0400

This is possible as we have installed updates to IE as part of Security
Patches and maintenance. Several things that I have discovered in my
research on this issue. The files are confirmed to be installed from
Windows 2000 Reskit, Windows 2000 compatibility update, and Windows 2000
SP1. We did find out some good news in that the files fp98sadm.exe and
fp98win.exe do not work with Windows 2000. We were able to delete these
guys and also prove that there were no active process using these files.
The bad news is that we found out that fpsrvadm.exe and fpsrwin.exe are
compatible with 2000 and are spawn by Winlogon.exe. When we try to delete
the files we get a share violation. We stopped the Winlogon service and
deleted the entire C:\Program Files\Microsoft FrontPage\Version3.0\bin
structure. Upon restarting the Winlogon.exe service the C:\Program
Files\Microsoft Frontpage\Version3.0\bin re-created itself. Anything else
that yourself or anyone else can advise would be more than appreciated.

Thanks in advance -

Jeff

"Joshua Heslinga" <jheslinga@attbi.com> wrote in message
news:uzrcXg3HCHA.2512@tkmsftngp09...
> Possibly FrontPage Express (that you'd have gotten with an IE
installation)?
>
> Joshua Heslinga
> MCSE
>
>
> "Jeff" <jallen@dotsconnect.com> wrote in message
> news:114a001c21edb$8bec1050$a5e62ecf@tkmsftngxa07...
> > We just went through an internal security scan. The
> > scanners picked up that FrontPage was running on our Win2K
> > boxes. We thought this was a false-positive, however when
> > we went the machines we found the following:
> >
> > C:\Program Files\Microsoft Frontpage\Version3.0\bin
> > fp98sadm.exe
> > fp98swin.exe
> > fpsrvadm.exe
> > fpsrvwin.exe
> >
> > Can anyone advise as to how these files could have been
> > installed? We have no entries in Add/Remove programs and
> > we have not enabled FrontPage 2000 Extentions nor is IIS
> > even on these boxes.
>
>

Relevant Pages

  • Re: sassar
    ... authoritative in all matters concerning Microsoft Security Alerts! ... downloaded from the microsoft.com download center or Windows Update. ... Instructions for patching and cleaning vulnerable Windows 2000 and Windows ... installation of the patch as well as removal of the worm. ...
    (microsoft.public.security.virus)
  • Sasser patching & removal instructions
    ... authoritative in all matters concerning Microsoft Security Alerts! ... downloaded from the microsoft.com download center or Windows Update. ... Instructions for patching and cleaning vulnerable Windows 2000 and Windows ... installation of the patch as well as removal of the worm. ...
    (microsoft.public.windowsxp.general)
  • Re: New IE flaw and exploit sites/migration to non-MS browser
    ... installation for workstations that has been floating around ever since ... Microsoft on their network security team at the time and followed much ... Windows 9x had no concept of admin/user. ... their computers aren't working when the power is off. ...
    (Focus-Microsoft)
  • Re: Windows Update Error on XP 64bit: update is redirected from v6
    ... Antivir *usually* does not interfere with the installation of core system updating components. ... Microsoft Windows 2000 Operating System Group Policy Result tool ... The user is a member of the following security groups: ... Open the AULOGS subfolder located in the root drive [the drive where WINDOWS is installed to, usually C:\] Extract the contents of the data.cab as you would a .zip file. ...
    (microsoft.public.windowsupdate)
  • Questions Regarding Workable SOHO Windows Installation / Configuration, Diagnostics, & Security
    ... Questions Regarding Workable SOHO Windows Installation / ... Configuration, Diagnostics, & Security Options ver. ... even an additional 5 to 8: additional antivirus and scanning software. ...
    (comp.security.misc)