HelpWithWindows Newsletter

01. Microsoft Issues Windows Patch for "Zero-Day Exploit"

by Arie Slob

Hello Windows users,

On the 28th of December 2005, security firm Secunia issued a security advisory that labeled a Windows Metafile (".wmf") error as "extremely critical". The problem was that at that time, exploit code was already being used to target systems, so this constituted a so called "Zero-Day" exploit.

Usually there are several days between the discovery of vulnerability and the availability of exploit code (code that "uses" the vulnerability). Over the past years the time between discovery & exploit code being available has been going down steadily.

Microsoft had first announced its intentions to offer a patch on their "normal" patch day, which is the 2nd Tuesday of the month (in this case January 10), but after end-user pressure, Microsoft released the patch for this vulnerability on January 5th.

If you do not have your system set to get automatic updates, get this patch ASAP. Either go to WindowsUpdate or get it from the Microsoft TechNet Web site.

A final twist to this vulnerability is that Microsoft labels it "Not Critical" for Windows 98, 98SE and ME. These operating systems are currently on "extended" support, meaning that Microsoft will only release security updates for "critical" issues. According to Microsoft the fact that no "exploitable attack vector" has been identified on these operating systems means that the vulnerability is not critical.

Several security researchers disagree and think that it will only be a matter of time before someone figures out how to exploit these older Windows versions too.

02. Recent Support BBS Postings

Services and pagefile tweaking worthwhile? - Windows XP
Data transfer to another pc within lan causes cpu usage to go up to 100% - Networking
Computer monitoring software - Other Software
MS Backup scripting - Windows Server System
Freeware firewalls (endangered species) - General Security

03. 04. Recommended Web sites

Each month we will feature a few Web sites here, ones which sent us the most visitors to our Web site in the previous month. We would encourage you to visit these popular Web sites yourself!

Here are some sites in the Top 15 for December 2005:

Active Network Forums - Windows, Macintosh & Xbox forums.
SpyWare BeWare! - Anti-Spyware forums.
ExtremeTech - "Deep technology for enthusiasts and professionals".
Kellys Korner - Troubleshooting Windows XP pages by MVP Kelly Theriot.

The Top 15 sites are listed on our Web site.

05. Windows Vista December 2005 CTP Review

On Monday 19 December Microsoft released Build 5270 as the December 2005 CTP build. I proceeded to install this build on both a laptop & desktop computer, here are my first impressions.

Read Full Article

06. Recommend This Newsletter!

Do you enjoy reading this Newsletter? Why not tell your friend(s) about it?

Recommend this Newsletter!

07. Microsoft Publishes Various Windows XP Themes

This week, Microsoft published a number of Themes for Windows XP users. These themes include desktop background images, Windows event sounds, Icons, cursors and screen savers.

Supported OS: Windows XP

Read Full Article

08. IntelliPoint Mouse 5.5 Software for Windows

IntelliPoint software enables you to customize the unique features of your Microsoft mouse. You can reassign mouse buttons to perform commands, shortcuts, and application-specific functions.

More Info & Download

09. IntelliType Pro 5.5 Keyboard Software for Windows

IntelliType Pro software enables you to customize the unique features of your Microsoft keyboard. You can reassign keys to open a program, file, or Web page, or to perform commands and application-specific functions.

More Info & Download