DLTTAPE.SYS AND SASSER

[nat2345]

Some articles state that if you have dlttape.sys installed then you might have issues with the ms04-011(835732) windows patch.

http://support.microsoft.com/default.aspx?kbid=841382

I did a search on my win2k server and the file came up twice: one in the i386 folder and one in the dllcache folder. So does that mean I shouldn't install this patch to avoid getting infected?

 

[karlisi]

i386 folder contains Windows installation files (it is a copy of i386 folder from your Windows CD), dllcache folder contains copies of system files for Windows File Protection service. If there are no more dlttape.sys files, actually this file is not installed and you can install this patch. But as always you should make backups before, because who knows...

===
Karlis
ECDL; MCP

 

[nat2345]

Thanks Karlis. For future reference what may have been an indication of dlttape.sys being installed, or any other driver for that matter?

 

[karlisi]

Typically system files are in winnt (or windows) and winnt\system32 folders.
dlttape.sys is SCSI Tape Driver from Microsoft and typically it is installed if you have DLT tape drive attached to your computer.

===
Karlis
ECDL; MCP