Clark Computer Consulting Port Jervis, NY » Warning http://rootaid.com Your Local Computer Guy Thu, 09 Sep 2010 00:05:50 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 Microsoft Out of Band update for .LNK exploit released today. http://rootaid.com/2010/08/02/microsoft-out-of-band-update-for-lnk-exploit-released-today/ http://rootaid.com/2010/08/02/microsoft-out-of-band-update-for-lnk-exploit-released-today/#comments Mon, 02 Aug 2010 14:12:39 +0000 Scott http://rootaid.com/?p=2871 Continue reading →]]> Microsoft is releasing another “Out of Band” update this afternoon. The update fixes the .LNK security flaw that is currently being exploited in the wild. This is a “must do” update and should be applied ASAP once it released this afternoon at 1PM EST.

The following links provide info on the latest updates and also explain how to install those updates.

If you have never done Windows updates the following link will help you along the way. http://www.microsoft.com/windows/downloads/windowsupdate/overview.mspx

Microsoft Security Response Center  Out of Band Release to address Microsoft Security Advisory 2286198

Microsoft Malware Protection Center .LNK info Microsoft Malware Protection Center

Don’t be an update slacker…do your updates and have a nice day :-)

Before you go, check out some of our other links.

Free Stuff and Great Deals http://rootaid.com/deals/

Follow Me on Twitter http://twitter.com/scccpj

Follow me on Facebook http://www.facebook.com/home.php?ref=home#/pages/Port-Jervis-NY/Clark-Computer-Consulting/133104913979?ref=ts

Use the following link to get an extra 250MB of storage when you sign up for Dropbox.https://www.getdropbox.com/referrals/NTEyODQxMjE5

VIPRE Antivirus Premium

VIPRE Antivirus Premium is high-performance antivirus + antispyware software with an integrated firewall. It doesn’t slow down your PC like other security products. The press loves it, and it’s antivirus certified. Protect your PC from ‘being owned’ by bad guys with our free (registered) full-function 30-day trial!

]]> http://rootaid.com/2010/08/02/microsoft-out-of-band-update-for-lnk-exploit-released-today/feed/ 0 Microsoft Out of Band again. http://rootaid.com/2010/08/01/microsoft-out-of-band-again-2/ http://rootaid.com/2010/08/01/microsoft-out-of-band-again-2/#comments Mon, 02 Aug 2010 00:14:43 +0000 Scott http://rootaid.com/?p=2865 Continue reading →]]> The latest .LNK “Microsoft insecurity” affects all currently supported versions of Windows and is actively being exploited. Monday at 1PM EST Microsoft will release an “out of band” patch to fix the problem. Current unprotected systems can be infected by simply viewing a .LNK file. More information can be found at the links below. This is a high priority update, make sure you do the update when its released tomorrow afternoon.

Microsoft Preps Monday Patch for Critical Windows Shortcut Exploit

Stuxnet, malicious .LNKs, …and then there was Sality

]]> http://rootaid.com/2010/08/01/microsoft-out-of-band-again-2/feed/ 0 Microsoft Announces an Out-of-Band IE-Patch http://rootaid.com/2010/01/21/microsoft-announces-an-out-of-band-ie-patch/ http://rootaid.com/2010/01/21/microsoft-announces-an-out-of-band-ie-patch/#comments Thu, 21 Jan 2010 17:02:06 +0000 Scott http://rootaid.com/?p=1822 Continue reading →]]> Microsoft plans to release an “out of band” IE patch today to address the Aurora vulnerability.

Microsoft announces Out-of-Band IE-Patch

http://techblog.avira.com/2010/01/21/microsoft-announces-out-of-band-ie-patch/en/

Old MacDonald Bought the Farm IE IE 0-day

http://www.eset.com/threat-center/blog/2010/01/20/old-macdonald-bought-the-farm-ie-ie-0-day

Microsoft Security Bulletin Advance Notification for January 2010

http://www.microsoft.com/technet/security/bulletin/ms10-jan.mspx

Microsoft will patch Internet Explorer today

http://sunbeltblog.blogspot.com/2010/01/microsoft-will-patch-internet-explorer.html

Operation Aurora: Microsoft knew about Internet Explorer flaw for four months

http://www.sophos.com/blogs/gc/g/2010/01/22/operation-aurora-microsoft-knew-internet-explorer-flaw-months/

Make sure you you check your Windows updates later on this afternoon by using Internet Explorer to access the following link http://windowsupdate.microsoft.com/ or by going to Start-All Programs-Windows Update

Don’t be an update slacker…do your updates and have a nice day :-)

Check out our Amazon Mac Store Amazon Mac Store

Free Stuff and Great Deals http://rootaid.com/deals/

Follow Me on Twitter http://twitter.com/scccpj

Follow me on Facebook http://www.facebook.com/home.php?ref=home#/pages/Port-Jervis-NY/Clark-Computer-Consulting/133104913979?ref=ts

]]> http://rootaid.com/2010/01/21/microsoft-announces-an-out-of-band-ie-patch/feed/ 0 Patch Tuesday 2 weeks early http://rootaid.com/2009/07/28/patch-tuesday-2-weeks-early/ http://rootaid.com/2009/07/28/patch-tuesday-2-weeks-early/#comments Tue, 28 Jul 2009 17:14:47 +0000 Scott http://rootaid.com/?p=1018 Continue reading →]]> windows-updateDon’t forget to head on over to  the Windows Update page at http://windowsupdate.microsoft.com/ and download the latest batch of security updates from Microsoft.

This “out of band” set of updates fixes 2 bugs with active exploits available in the wild.

Microsoft Security Bulletin Summary for July 2009

http://www.microsoft.com/technet/security/bulletin/ms09-jul-ans.mspx

Security Bulletin Webcast Questions and Answers – Out-Of-Band July 2009

http://blogs.technet.com/msrc/archive/2009/07/29/security-bulletin-webcast-questions-and-answers-out-of-band-july-2009.aspx

Don’t be an update slacker…do your updates and have a nice day :-)


]]> http://rootaid.com/2009/07/28/patch-tuesday-2-weeks-early/feed/ 0 Firefox 3.5 JavaScript exploit workaround http://rootaid.com/2009/07/15/firefox-3-5-javascript-exploit-workaround/ http://rootaid.com/2009/07/15/firefox-3-5-javascript-exploit-workaround/#comments Wed, 15 Jul 2009 19:16:53 +0000 Scott http://rootaid.com/?p=924 Continue reading →]]> 400px-circle-style-warningsvg1-150x1501Firefox 3.5 has a vulnerability in the JavaScript compiler that can be exploited by an attacker to allow execution of arbitrary code. The vulnerability can be exploited by an attacker who tricks a victim into viewing a malicious Web page containing the exploit code.

To disable the vulnerable component, open up a new Firefox window and type “about:config” (without the quotes) in the browser’s address bar. In the “filter” box, type “jit” and you should see a setting called “javascript.options.jit.content”. You should notice that beside that setting it reads “true,” meaning the setting is enabled. If you just double-click on that setting, it should disable it, changing the option to “false.”

Alternatively, users can disable the JIT by running Firefox in Safe Mode.  Windows users can do so by selecting Mozilla Firefox (Safe Mode) from the Mozilla Firefox folder.

http://www.kb.cert.org/vuls/id/443060 US-CERT  Mozilla Firefox 3.5 TraceMonkey JavaScript engine uninitialized memory vulnerability

http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/ Critical JavaScript vulnerability in Firefox 3.5

]]> http://rootaid.com/2009/07/15/firefox-3-5-javascript-exploit-workaround/feed/ 0 Another Patch Tuesday passes without plugging all the holes. http://rootaid.com/2009/07/15/another-patch-tuesday-passes-without-plugging-all-the-holes/ http://rootaid.com/2009/07/15/another-patch-tuesday-passes-without-plugging-all-the-holes/#comments Wed, 15 Jul 2009 15:25:51 +0000 Scott http://rootaid.com/?p=893 Continue reading →]]> windows-updateDon’t forget to head on over to  http://windowsupdate.microsoft.com/ and download the latest batch of security updates from Microsoft.

The updates still leave at least one  unpatched bug as described at the Sunbelt Security site http://www.sunbeltsecurity.com/ThreatLevel.aspx

Microsoft security updates for July 2009

http://www.microsoft.com/security/updates/bulletins/200907.aspx

Microsoft Security Bulletin Summary for July 2009

http://www.microsoft.com/technet/security/bulletin/ms09-jul.mspx

AudioParasitics Podcast: Dave and Jim discuss the security implications of the July bulletins. MS09-028, MS09-032, and MS09-029 are highlighted.

http://podcasts.mcafee.com/audioparasitics/AudioParasitics-Episode68-7-2009.mp3


OK so now you are fully informed about the latest updates. Don’t be an update slacker and complain about not having time to update. It takes far longer to clean an infected computer than it does to do your updates. So go already…and have a nice day :-)

]]> http://rootaid.com/2009/07/15/another-patch-tuesday-passes-without-plugging-all-the-holes/feed/ 0 What in the world is Phishing? http://rootaid.com/2009/05/30/what-in-the-world-is-phishing/ http://rootaid.com/2009/05/30/what-in-the-world-is-phishing/#comments Sat, 30 May 2009 19:00:47 +0000 Scott http://rootaid.com/?p=659 Continue reading →]]> phishing-1You have probably heard the term Phishing and wondered what in the world it was? With the recent Phishing  scams running on Twitter and Facebook it really pays to have a good understanding of exactly what Phishing is all about.

This is part of  the definition from Wikipedia

Phishing is  the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.

Insert cricket chirp here…

OK if you didn’t like that definition check out this video from the good folks at Common Craft

http://www.youtube.com/watch?v=sqRZGhiHGxg Phishing Scams in Plain English

You can also click the image above which will bring you to the How Phishing Works article at the HowStuffWorks site.

Links to other Phishing related stories and sites

Computerworld story about the new Twitter Phishing attack http://blogs.computerworld.com/phishing_site_spams_contacts_of_twitter_users

US Government page to report Phishing sites http://www.us-cert.gov/nav/report_phishing.html

Anti-Phishing Working Group  http://www.antiphishing.org/

Check out our Amazon Mac Store Amazon Mac Store

Free Stuff and Great Deals http://rootaid.com/deals/

Follow Me on Twitter http://twitter.com/scccpj

Follow me on Facebook http://www.facebook.com/home.php?ref=home#/pages/Port-Jervis-NY/Clark-Computer-Consulting/133104913979?ref=ts

Use the following link to get an extra 250MB of storage when you sign up for Dropbox. https://www.getdropbox.com/referrals/NTEyODQxMjE5

]]> http://rootaid.com/2009/05/30/what-in-the-world-is-phishing/feed/ 0