Re: Old updates being represented.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Is it possible that 3rd party software could have changed the file

Yes, it very well may have. But, the version of cscdll.dll shows as 5.1.2600.2180 on my system, too. So, it has been updated.

You can also check the file versions of KB885835 -
http://www.microsoft.com/technet/security/Bulletin/MS04-044.mspx

What is the version of Lsasrv.dll in WINDOWS\system32 ?
The version on my system shows as 5.1.2600.2976 and was updated by -

Microsoft Security Bulletin MS06-070
Vulnerability in Workstation Service Could Allow Remote Code Execution (924270)
http://www.microsoft.com/technet/security/Bulletin/MS06-070.mspx


MowGreen [MVP 2003-20007]
===============
*-343-* FDNY
Never Forgotten
===============


Stan Blazejewski wrote:
Thanks for your reply,

I checked into everything you mentioned & the only file that seems to be out of
order is cscdll.dll which has a version number of 5.1.260.2180.
Doing a complete search of my registry shows that the version I 'should' have is
5.1.260.1599.
Doing a search of Technet for cscdll.dll also only mentions the latter version
number.
A WU scan says that I only have a 'recommended' update of .NET framework.

Is it possible that 3rd party software could have changed the file (I've just
installed a new printer with all it's add on software)?

On Mon, 04 Dec 2006 11:54:19 -0800, "MowGreen [MVP]" <mowgreen@xxxxxxxxxxxxx>
wrote:


Stan,

You can confirm the 914389 is installed properly by going here -
http://www.microsoft.com/technet/security/bulletin/ms06-030.mspx

Scroll down to the General Information heading and click on
Security Update Information, then click on Windows XP (all Versions)
Scroll down to the File Information heading and compare the files listed to the ones on the system. The .dll files will be in WINDOWS\system32 and the .sys ones will be in WINDOWS\system32\drivers
Right click the ones on the system, choose Properties, then click the Version tab to compare them.
Also, check the registry setting at
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB914389\Filelist
The files will be listed under the Filelist folder and their locations.

Lsasrv.dll may be the key here as it was updated by KB914389 therefore supersedes the version of Lsasrv.dll in KB885835.
BUT, KB885835 must be installed as other files were updated - AND, Lsasrv.dll was subesquently replaced by KB924270.


YIKES ... just checking my system and Lsarsv.dll was NOT updated by
KB924270, the *latest* version of that file. The reg key shows it was updated but I had installed a Beta version of a Security Suite and that may have reverted Lsasrv.dll.
I'll have the system scanned at WU to see if it detects that KB924270 is needed.
Oy

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============



Stan Blazejewski wrote:


A couple of days ago I had WU pop up indicating a couple of updates needed to
be installed. The strange thing is they already have been!
914389 (MS06-030) dated Jun 2006
885835 (MS04-044) dated Dec 2004

The current Belarc advisor indicates they are installed & have the tick of
approval.

What should I do?

--

Australia isn't "down under", it's "off to one side"!

stanblaz@xxxxxxxxxxxxxxx
www.cobracat.com (home of the Australian Cobra Catamaran)
www.parkdaleyc.com (where most of them sail)
http://groups.yahoo.com/group/cobra-cat/

--

Australia isn't "down under", it's "off to one side"!

stanblaz@xxxxxxxxxxxxxxx
www.cobracat.com (home of the Australian Cobra Catamaran)
www.parkdaleyc.com (where most of them sail)
http://groups.yahoo.com/group/cobra-cat/
.

Relevant Pages

  • Re: Re: Old updates being represented.
    ... Security Update Information, then click on Windows XP ... Scroll down to the File Information heading and compare the files listed ... www.cobracat.com (home of the Australian Cobra Catamaran) ... www.parkdaleyc.com (where most of them sail) ...
    (microsoft.public.windowsupdate)
  • Re: Re: Old updates being represented.
    ... Scroll down to the File Information heading and compare the files listed ... Version tab to compare them. ... The reg key shows it was ... www.cobracat.com (home of the Australian Cobra Catamaran) ...
    (microsoft.public.windowsupdate)
  • Re: Old updates being represented.
    ... Security Update Information, then click on Windows XP ... Scroll down to the File Information heading and compare the files listed to the ones on the system. ... The reg key shows it was updated but I had installed a Beta version of a Security Suite and that may have reverted Lsasrv.dll. ...
    (microsoft.public.windowsupdate)
  • Re: Detecting Process Privileges
    ... (open the reg key for write access, ... is a member of the local admins group, ... >> Forgive the ignorance about security matters, ... >> registry key to make sure the font is properly installed. ...
    (microsoft.public.platformsdk.security)