January 2006
“Critical” Microsoft Update |
Microsoft recently gave out a new security patch with the rating of “critical” in this month’s new update - it is recommended that all XP users perform this update immediately. |
|
It seems that the Microsoft Security Bulletin MS05-054 focuses on the fixing of four different vulnerabilities that both Internet Explorer 6 and 5.5 suffer from. Two of these exploits allow an attacker to run remote code on the affected system.
There is another IE vulnerability that allows specially crafted websites using Java Script to write arbitrary code to your system. If your system does become infiltrated by an attack then your system will yield full system access with administrators’ rights to the attacker. This vulnerability was the reason December’s security update received a “critical” severity rating.
This month Microsoft also included an update in light of the entire Sony DRM software issue. If you remember, the Root kit that Sony was installing with some of its music titles, created by digital rights protection company first4net, left your system vulnerable. An uninstall fix was provided, however, the uninstall procedure was worse then the root kit and left your system even more vulnerable than before. Well, not to worry because the December Security update MS provides, makes this a thing of the past because once this new patch is installed it is impossible to run the DRM uninstaller.
For those who have XP at home, make it a habit of checking Windows updates every second Tuesday of the month, which tends to be when Microsoft comes out with new security patches. |
|
Laptop Users |
 Laptop users who plug in a patch cable to their computer in order to connect to the internet and find that it still does not connect may want to check to see if the AC adapter is connected to their computer. The reason it may not be connecting to the internet is probably because the AC adapter is not connected to the computer.
According to Dell, your Ethernet Broadcom adapter becomes inactive the moment your computer is running solely on battery power. At this point, you will only have the ability to connect wirelessly if there are available wireless networks. Dell has stated that it does this in order to conserve battery power and this feature may be altered to connect even when it is running on battery power, but that it is not recommended, as it will drain your battery. If you are going to connect to the internet via a patch cable, make sure your adapter is connected and you are not using battery power. |
|
MSN Messenger 8 Working BETA Virus |
According to latest studies by IMlogic and Akonix Systems, Microsoft's instant-messenger infrastructure is the most popular medium for attacks. There are increasing numbers of malicious software using instant messenger programs to spread themselves. A virus called Virkel.F is a new addition to this malicious software which is in circulation. It poses itself as a new beta version of Microsoft's MSN Messenger 8 which is an unreleased version of MSN Messenger. It is targeting people who are anticipating the launch of the new Windows Live Messenger 8, which is being officially auctioned on eBay by Microsoft for developers.
|
|
The platform that this virus is using revolves around giving people links to bogus sites that are supposedly offering a leaked version of the program. From these websites it is downloaded as a file called BETA8WEBINSTALL.EXE. Running the program does not install a new MSN Messenger beta, but rather makes the machine part of botnet network. The machine is then used to send viruses. The first victims of these transmissions are the people in the users contact list on MSN messenger. It starts sending them links to download MSN Messenger 8 Working BETA which facilitates further spread of the virus.
|
|
Microsoft and MCI to Launch Service
Microsoft Corporation and MCI Inc. are now introducing a service that will allow its customers the ability to place calls to regular phones from their computers. They have just begun a test run and plan to offer their initial version to a limited number of users and then increase the number over time. A finished version will be released some time in 2006.
The new service, which the two companies have named, “MCI Web Calling for Windows Live Call,” will allow users of MSN Messenger, Microsoft’s instant messaging service, to call land lines or cell phones. They are currently working on adding extra capabilities such as inbound calls.
The rates for this service during the test period will start at 2.3 cents a minute. Pricing for the final version will be announced early in the month of Jan. 2006.
|
|
