NT 4.0 sp6a and an antivirus

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Help! I can't find an anti virus for 2007 that will install on an old NT
machine. Can somebody point me in the right direction? Tks.
-Pete



Re: NT 4.0 sp6a and an antivirus


| Help! I can't find an anti virus for 2007 that will install on an old NT
| machine. Can somebody point me in the right direction? Tks.
| -Pete
|

Disconnet the NT4 box from the Internet.  It is a train wreck waiting to happen.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: NT 4.0 sp6a and an antivirus

Quoted text here. Click to load it

Run it as a virtual machine (VM) under a Real(tm) OS. If it's running
on dusty old iron you'll see a really nice performance improvement by
running it on modern hardware.

Actually, I have nothing against NT 4.x in it's day.

--
a d y k e s @ p a n i x . c o m
Harrison for Congress in NY 13CD   www.harrison06.com  
Don't blame me. I voted for Gore. A Proud signature since 2001

Re: NT 4.0 sp6a and an antivirus


Quoted text here. Click to load it
| Run it as a virtual machine (VM) under a Real(tm) OS. If it's running
| on dusty old iron you'll see a really nice performance improvement by
| running it on modern hardware.
|
| Actually, I have nothing against NT 4.x in it's day.
|

Yes... in its day.  However there are NO security updates for it and it is
vulnerable to a
wide range of active exploits that will remain unpatched.

If the system is capable of running NT4 in "virtual machine (VM) under a
Real(tm) OS", then
why run NT4 at all ?  :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: NT 4.0 sp6a and an antivirus


Quoted text here. Click to load it

Any specific exploits that you know of off hand?    I have an NT 4 box
laying around that might fun to launch them against.

--
Todd H.
http://www.toddh.net /

Re: NT 4.0 sp6a and an antivirus


|
Quoted text here. Click to load it
|
| Any specific exploits that you know of off hand?    I have an NT 4 box
| laying around that might fun to launch them against.
|

XML and VML in HTML renderings in IE are two.

The XML in HTML is unpatched in all Win32 platforms.
The VML in HTML was patched but NOT for Win9x/ME/NT4.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: NT 4.0 sp6a and an antivirus


Quoted text here. Click to load it

Cool.  I was thinking more along the lines of remotely exploitable
stuff against a server running NT Server though.  I had done some
hunting but didn't come up with anything.

--
Todd H.
http://www.toddh.net /

Re: NT 4.0 sp6a and an antivirus


|
|
| Cool.  I was thinking more along the lines of remotely exploitable
| stuff against a server running NT Server though.  I had done some
| hunting but didn't come up with anything.
|

Todd:

That is hard to determine since NT4 is no longer supported.  As such, it is no
longer tested
against such exploitations nor reported.  In the case of what I posted, it is
known that IE
can run on all those identified platforms and as such it is vulnerable across
those
platforms.  Since they are no longer supported, Microsoft won't even take the
time to put
out a fix specific to the unsupported OS.

In the case of the VML in HTML vulnerability, a patch was real simple and even I
came up
with an un-official patch.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: NT 4.0 sp6a and an antivirus


Quoted text here. Click to load it

Yeah, that's what I'm finding out.  It's tough though when you find an
nt4 box in an assessment situation konwing exactly what might still be
effective against it.  Totally understandable that MS won't fix it of
course, but the lack of info on what it'd be vulnerable to makes it
tough to be specific to a customer trying to be goaded into supported
land.  :-)


--
Todd H.
http://www.toddh.net /

Re: NT 4.0 sp6a and an antivirus

"David H. Lipman" wrote:
 
Quoted text here. Click to load it

We operate 2 NT4 servers (one handles SMTP, MS-Mail, SQL-2000, and
other stuff, the other pretty much only handles WWW via IIS4).  One is
a primary domain controller.  Both have been directly facing the
internet with their own dedicated IP's from 1998 until Dec. 2005 with
no firewall or NAT.  Both have been running NAV 2001/2002 until about
early 2005 when Symantec corporate (version 8 or 9) was put on them.
The only thing that has ever happened was back in 2001 when it seems
someone tried to use one of them as a private FTP server and hid some
test files in some obscure recycler directory.  

Neither is used as a workstation (they sit quietly in a basement
server room) so there's no issues as far as someone opening e-mail on
them or using them to surf the web.

Oh - I should say that we configured our network for NetBEIU for file
sharing and didn't bind TCP to the filesharing (on those NT machines
nor any other machine on our network) so that pretty much secured us.

I'd say that NT4 is really not bad if you keep it behind a NAT router
and don't use it to surf the web or as a desktop workstation.  We have
Symantec Corporate edition (maybe version 8 or 9, I forget) on those
NT boxes as well as a few Win-98 machines.  I don't know what version
is current - or if it's still compatible with NT or 98, but the one
we're using performs it's own auto-updates on all machines and has no
expiry date as far as I know (unlike NAV).

But Nav 2001 or 2002 also works fine on NT4 - don't be fooled by the
age of that product as it will update itself to the current scan
engine and virus def'n file once you install it.

Tangent:  Does WindowsUpdate still function for NT4?

Re: NT 4.0 sp6a and an antivirus


| "David H. Lipman" wrote:
|
Quoted text here. Click to load it
|>> Help! I can't find an anti virus for 2007 that will install on
|>> an old NT machine. Can somebody point me in the right direction?
Quoted text here. Click to load it
|
| We operate 2 NT4 servers (one handles SMTP, MS-Mail, SQL-2000, and
| other stuff, the other pretty much only handles WWW via IIS4).  One is
| a primary domain controller.  Both have been directly facing the
| internet with their own dedicated IP's from 1998 until Dec. 2005 with
| no firewall or NAT.  Both have been running NAV 2001/2002 until about
| early 2005 when Symantec corporate (version 8 or 9) was put on them.
| The only thing that has ever happened was back in 2001 when it seems
| someone tried to use one of them as a private FTP server and hid some
| test files in some obscure recycler directory.
|
| Neither is used as a workstation (they sit quietly in a basement
| server room) so there's no issues as far as someone opening e-mail on
| them or using them to surf the web.
|
| Oh - I should say that we configured our network for NetBEIU for file
| sharing and didn't bind TCP to the filesharing (on those NT machines
| nor any other machine on our network) so that pretty much secured us.
|
| I'd say that NT4 is really not bad if you keep it behind a NAT router
| and don't use it to surf the web or as a desktop workstation.  We have
| Symantec Corporate edition (maybe version 8 or 9, I forget) on those
| NT boxes as well as a few Win-98 machines.  I don't know what version
| is current - or if it's still compatible with NT or 98, but the one
| we're using performs it's own auto-updates on all machines and has no
| expiry date as far as I know (unlike NAV).
|
| But Nav 2001 or 2002 also works fine on NT4 - don't be fooled by the
| age of that product as it will update itself to the current scan
| engine and virus def'n file once you install it.
|
| Tangent:  Does WindowsUpdate still function for NT4?

No.  Win9x/ME and NT4 no longer receive updates via Windows Updates.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: NT 4.0 sp6a and an antivirus

Well, thanks, but none of this answered my question.
-Pete



Re: NT 4.0 sp6a and an antivirus


Quoted text here. Click to load it

F-Prot for Windows may still work with NT4. Their web site states that
support for NT4 ended 30 June 2005 but also:

"Please note that version 3.x of F-Prot Antivirus for Windows will be
fully functional on Windows 95 operating systems after 31 December 2003
and on Windows NT Workstation 4 after 30 June 2005. Compatible virus
signature updates will be released at least for one year after the
official end of support date."

The have a free 30 day trial, you might give it a try to see if it will
install.

As one poster noted, NAV 2000 will still install and update on NT4.

BTW, I still have NT4 installed on 3 multiboot systems but I don't use
them anymore. It is still the fasted version of Windows as far a program
launching and number crunching is concerned. I used to use NT4 with CAD
programs and very large Excel and Access files. It was a little fragile
until SP6 came out which fixed a lot of glitches.

Chas.



Re: NT 4.0 sp6a and an antivirus


Quoted text here. Click to load it
Thanks for all the great leads. I've researched this and asked a lot of
people. Turns out NOD32 works with XP! I bought a two year liscence and
couldn't be happier about this.
Thanks all.
-Pete



Re: NT 4.0 sp6a and an antivirus


Quoted text here. Click to load it

Tough shit.  

Welcome to usenet where you get what you pay for, and sometimes if
you're lucky, patient, and not entitlement minded nor pushy, more.

Best Regards,
--
Todd H.
http://www.toddh.net /

Site Timeline