navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
RxDdude 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 18th Sep, 2009 01:27
Ranking: 4
Posts: 33
User Since: 20th Aug, 2009
System Score: N/A
Location: US
Sec. PSI is telling me that I have an Insecure installation of Windows 2000 and need to install a patch. To quote -
"This installation of Microsoft Windows 2000 Professional is insecure and potentially exposes your system to security threats!
"Secunia strongly recommends that you update this program by installing the update that is provided by the vendor of this program." No path or file can be identified by PSI, however.

Please note -

1. Microsoft tells everyone, in the MS09-048 vulnerability announcement dated 9/10/2009, that this is a low priority threat for Win XP and that Microsoft will issue NO Patch for Win XP and none for Win 2000!

2. My OS is Win XP Professional 32-bit with Service Pack 3, and Windows 2000 never was installed on this HP Pavilion (purchased, new, with OEM Windows XP in mid-2005).

I do not like to be told that I have Windows 2000 as an unpatched vulnerability and I do not like to be instructed to install a vendor's patch that does not exist at the vendor.


May I express the hope that Secunia personnel do monitor this forum, and that Secunia will take heed of this annoying false positive and will cure this promptly? By tomorrow morning, would be nice.

Sincerely,

Falling Rock


--
R&DDude
========================================
All I really need to know in life, I learned from the
theory of relativity!
--------------------------------------------
“Everything should be completed as soon as possible.
And, not sooner.”
– attributed to Al Einstein
============================================
HP Pavilion a1020n / Win XP Pro SP3 (x86) / AMI BIOS 3.19
Intel P4 519J 3.06 GHz / 2 GB DDR2 PC-4200
140 GB free on System partition
Firefox 3.6.15 / NoScript 2.0.9.9 / M$ IE 8.0 (rarely used)
Comodo IS 2011 v5.3 / M$ Security Essentials v1.99.1103.0
============================================

Anthony Wells RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Expert Contributor 18th Sep, 2009 21:02
Score: 2454
Posts: 3,345
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 18th Sep, 2009 21:05


On CET , I would assume Secunia may well have now gone for the weekend . So I think you may have to be patient ; at least until Monday .

FWIW , Secunia seem pretty busy with Visual Studio & the ATL problem , so you may be low on their list . They only pop up here on rare occasions .

If you think it is vital , you could go direct to them at suppotrt@secunia.com . They have removed my Internet Security Suite from my scans , a few days ago , and have yet to return it ; I can live with that :) Mistakes happen , I'm sure they didn't mean to insult your XP by calling it 2000 (I've heard worse).

Take care.

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
This user no longer exists RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 22nd Sep, 2009 09:59
In the interest of correcting this issue, we need some bits of
information from you. Please launch Regedit, and send us the values of the
keys ProductName, CSDVersion, CurrentBuildNumber, BuildLab, CurrentType,
CurrentVersion, all found within the
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion registry. This information would help us adjust the rules in question.
Was this reply relevant?
+0
-0
RxDdude RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 25th Sep, 2009 00:36
Score: 4
Posts: 33
User Since: 20th Aug 2009
System Score: N/A
Location: US



Mr. Petersen,

This user appreciates the offer of assistance. The requested values are entered here by use of Copy-and-Paste, from the Registry Editor > Edit String dialog box:


BuildLab 2600.xpsp_sp3_gdr.090206-1234
CSDVersion Service Pack 3
CurrentBuildNumber 2600
CurrentType Uniprocessor Free
CurrentVersion 5.1
ProductName Microsoft Windows XP

I am appending additional information for your convenience, and will stand by for your analysis.

Falling Rock

OS: Windows XP Professional SP3
SYST: HP Pavilion a1040n
CPU: Intel P4 519J 3.065GHz
RAM: 2GB DDR 3200
HD: 148 GB free on system partition
AV: AVG Free v8.5
AS: Windows Defender 1.1.1593.0 with def'n's updated regularly every two to four days since Oct'08.
FRWL: Zone Alarm Free v8.0.298.000




--
R&DDude
========================================
All I really need to know in life, I learned from the
theory of relativity!
--------------------------------------------
“Everything should be completed as soon as possible.
And, not sooner.”
– attributed to Al Einstein
============================================
HP Pavilion a1020n / Win XP Pro SP3 (x86) / AMI BIOS 3.19
Intel P4 519J 3.06 GHz / 2 GB DDR2 PC-4200
140 GB free on System partition
Firefox 3.6.15 / NoScript 2.0.9.9 / M$ IE 8.0 (rarely used)
Comodo IS 2011 v5.3 / M$ Security Essentials v1.99.1103.0
============================================
Was this reply relevant?
+0
-0
This user no longer exists RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 25th Sep, 2009 09:10
Hello,
Please run a full system scan, and email us a screenshot of the tab
where your OS is listed, at support@secunia.com
Thank you for your cooperation.
Was this reply relevant?
+0
-0
RxDdude RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 25th Sep, 2009 19:17
Score: 4
Posts: 33
User Since: 20th Aug 2009
System Score: N/A
Location: US
Last edited on 25th Sep, 2009 19:31
Mr. Petersen,
I understand that you wish me to run a full system scan with Secunia PSI and email a screenshot of the Windows 2000 portion, expanded, from the tab titled Insecure (I believe it was). Please correct me if otherwise.

Will do. Have a meeting to support before then; will hope to catch up with this later this afternoon.

By the way, and For Your Information - - After I Submitted the text above, when I reviewed this post as the newest message in this thread, I saw that there was appended below the text above, something that I did not expect. That is, the lengthy text from my older message of 25 Sept. 2009 00:36 was appended within this new posting (I am now using the Edit function on this my message, to enter this paragraph, after I had posted the text above), and I do not know why that old text is there. The said text from 25 Sept. 2009 00:36 is also seen appended within the 1st message that I posted to start this thread. There may be some glitch that has occurred, in the Forum server software ...


--
R&DDude
========================================
All I really need to know in life, I learned from the
theory of relativity!
--------------------------------------------
“Everything should be completed as soon as possible.
And, not sooner.”
– attributed to Al Einstein
============================================
HP Pavilion a1020n / Win XP Pro SP3 (x86) / AMI BIOS 3.19
Intel P4 519J 3.06 GHz / 2 GB DDR2 PC-4200
140 GB free on System partition
Firefox 3.6.15 / NoScript 2.0.9.9 / M$ IE 8.0 (rarely used)
Comodo IS 2011 v5.3 / M$ Security Essentials v1.99.1103.0
============================================
Was this reply relevant?
+0
-0
Slamgeden RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 28th Sep, 2009 08:54
Score: 0
Posts: 181
User Since: 17th Jul 2009
System Score: N/A
Location: N/A
on 25th Sep, 2009 19:17, RxDdude wrote:
Mr. Petersen,
By the way, and For Your Information - - After I Submitted the text above, when I reviewed this post as the newest message in this thread, I saw that there was appended below the text above, something that I did not expect. That is, the lengthy text from my older message of 25 Sept. 2009 00:36 was appended within this new posting (I am now using the Edit function on this my message, to enter this paragraph, after I had posted the text above), and I do not know why that old text is there. The said text from 25 Sept. 2009 00:36 is also seen appended within the 1st message that I posted to start this thread. There may be some glitch that has occurred, in the Forum server software ...


It looks more like you somehow put it in your signature. Since it's still there. You can change this under "secunia profile".

--
Assorted Fnords.
Was this reply relevant?
+0
-0
RxDdude RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 28th Sep, 2009 19:00
Score: 4
Posts: 33
User Since: 20th Aug 2009
System Score: N/A
Location: US
Thanks, I think I fixed that signature now.


--
R&DDude
========================================
All I really need to know in life, I learned from the
theory of relativity!
--------------------------------------------
“Everything should be completed as soon as possible.
And, not sooner.”
– attributed to Al Einstein
============================================
HP Pavilion a1020n / Win XP Pro SP3 (x86) / AMI BIOS 3.19
Intel P4 519J 3.06 GHz / 2 GB DDR2 PC-4200
140 GB free on System partition
Firefox 3.6.15 / NoScript 2.0.9.9 / M$ IE 8.0 (rarely used)
Comodo IS 2011 v5.3 / M$ Security Essentials v1.99.1103.0
============================================
Was this reply relevant?
+0
-0
RxDdude RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 28th Sep, 2009 19:46
Score: 4
Posts: 33
User Since: 20th Aug 2009
System Score: N/A
Location: US
Last edited on 15th Oct, 2009 06:47
Mr. Petersen,

After the PSI Scan was run on (date lost, probably Sept. 20) the 20th, that Windows 2000 problem did not appear again. This is the reason that I have not provided the requested information.

After I ran that I have been puzzling over the loss of the windows 2000 report, and more recently, as I ran a scan on the 24th and then again on the 26th, I have been puzzled by noticing that the Last Full System Scan date did not change, and kept showing "September 24, 2009, 09:09". This date persisted after I ran the scan again this morning!

On running a second scan this afternoon, it did at last change, and it now shows September 28, 2009, 12:29.

The Windows 2000 insecurity has not been identified again, since Sept. 24 or prior, so, I suppose that the regular updating of Secunia PSI File Signatures has "fixed" the issue.

I suggest that this closes this thread. NOT NOW! Problem recurred 14th October!

Thank you, for your courteous and expert assistance.





--
R&DDude
========================================
All I really need to know in life, I learned from the
theory of relativity!
--------------------------------------------
“Everything should be completed as soon as possible.
And, not sooner.”
– attributed to Al Einstein
============================================
HP Pavilion a1020n / Win XP Pro SP3 (x86) / AMI BIOS 3.19
Intel P4 519J 3.06 GHz / 2 GB DDR2 PC-4200
140 GB free on System partition
Firefox 3.6.15 / NoScript 2.0.9.9 / M$ IE 8.0 (rarely used)
Comodo IS 2011 v5.3 / M$ Security Essentials v1.99.1103.0
============================================
Was this reply relevant?
+0
-0
RxDdude RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 15th Oct, 2009 06:55
Score: 4
Posts: 33
User Since: 20th Aug 2009
System Score: N/A
Location: US
Last edited on 15th Oct, 2009 06:57
Mr. Petersen:

Windows 2000 false-ID re-occurred this night, 14th October 2009. I have taken the requested screenshot, and shall email it to support@secunia.com.



--
R&DDude
========================================
All I really need to know in life, I learned from the
theory of relativity!
--------------------------------------------
“Everything should be completed as soon as possible.
And, not sooner.”
– attributed to Al Einstein
============================================
HP Pavilion a1020n / Win XP Pro SP3 (x86) / AMI BIOS 3.19
Intel P4 519J 3.06 GHz / 2 GB DDR2 PC-4200
140 GB free on System partition
Firefox 3.6.15 / NoScript 2.0.9.9 / M$ IE 8.0 (rarely used)
Comodo IS 2011 v5.3 / M$ Security Essentials v1.99.1103.0
============================================
Was this reply relevant?
+0
-0
RxDdude RE: 2nd Possible False Positive on WinXP Pro SP3 - Alerting on Win2000!
Member 14th Jan, 2010 08:00
Score: 4
Posts: 33
User Since: 20th Aug 2009
System Score: N/A
Location: US
Last edited on 14th Jan, 2010 08:33
Mr. Petersen, or ANYone with expertise to contribute,

I don't think I have received a response to my email with screenshot of the false ID of Windows 2000 on my XP system. Nor is there any response here.

Tonight, the false ID has repeated, as it has intermittently since my last post.

This is prior to my installing two (2) M$ patches, i.e., Security Update for Windows XP (KB972270), and Update for Windows XP (KB955759). But I should add that there are two (2) other, older, patches that have consistently failed of installation. These are Microsoft .NET Framework 2.0 Service Pack 2 Security Update for Windows 2000, Windows Server 2003, and Windows XP (KB974417), AND Microsoft .NET Framework 1.1 Service Pack 1 Security Update for Windows 2000, Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 (KB953297). However, I do not find that Secunia PSI is alerting on any of those four (4) items. Please advise next steps.

As this forum does not accept JPEGs, either as pastes from Microsoft® Windows Clipboard or as attachments, I shall post the screenshot to the email address you so kindly provided. I will include as well, a shot of the result of trying the "Technical details" button in PSI, a singlarly unproductive option. I shall send this from my AOL account, basketx.

FYI, Windows 2000 has never been installed on this machine. This PC was bought, new, in 2005 with Windows XP Home installed in the H-P OEM version, and this has been wiped and reloaded three times by professional PC repair shops; and the last time, it was reloaded with XP Professional after I purchased a licensed Upgrade package. t also was upgraded with Service Packs 1, 2, and SP3; numerous newer Microsoft® patches and updates have been installed, but not the four patches previously identified. (I am puzzled as to why the .NET Framework patches rrepeatedly refuse to complete installation.)

Please advise next steps. Please also, consider whether any of the four missing patches contributes to this issue.

Your consideration will be appreciated.

Falling Rock (basketx@aol.com)




--
R&DDude
========================================
All I really need to know in life, I learned from the
theory of relativity!
--------------------------------------------
“Everything should be completed as soon as possible.
And, not sooner.”
– attributed to Al Einstein
============================================
HP Pavilion a1020n / Win XP Pro SP3 (x86) / AMI BIOS 3.19
Intel P4 519J 3.06 GHz / 2 GB DDR2 PC-4200
140 GB free on System partition
Firefox 3.6.15 / NoScript 2.0.9.9 / M$ IE 8.0 (rarely used)
Comodo IS 2011 v5.3 / M$ Security Essentials v1.99.1103.0
============================================
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+