RPC Patches and Service Pack 4

[Brian]

Hello

We are deploying service pack 4 to Windows 2000 desktops
that were previously patched with both the MS03-026 and
Ms03-039 RPC vulnerability patches. Is it necessary to
reapply those 2 patches after service pack 4 is installed?

It had been brought to our attention that a machine that
was patched had SP4 installed and the welchia worm tried
to reinfect it. (The anti-virus software caught it).

But we ran the the Microsoft RPC scan tool against some
machines that recently had SP4 installed and they still
showed as being patched.

Thanks

Brian

 

[Karl Levinson [x y] mvp]

There have been a number of problems that can prevent the RPC patches from
installing correctly. Recently downloaded copies of the patch should
hopefully not have problems, but with the RPC patches in general it is a
good idea to scan using an RPC scanner tool of some sort [
www.foundstone.com/knowledge, www.eeye.com, www.iss.net, etc.] to scan the
computer after patch installation and reboot to confirm the patch is
installed.

Do be sure not to install both patches and Windows service packs without a
reboot in between, and run the free Microsoft QCHAIN utility on Windows 2000
if installing multiple patches without rebooting in between each patch
installation.