Nellie2

Personal Ramblings on a Security Theme

Entries Comments



Category: Microsoft


Windows Vista SP1 Pre-requisite

24 February, 2008 (18:38) | Microsoft, Vista | By: Nellie2

I hope you are keeping an eye on the Windows Vista Team Blog, there were a few problems with the SP1 pre-requisite and Microsoft have released further KB article in case you are one of the unlucky ones.

Another thing to be aware of is that Microsoft have released KB935796, a list of programs that are known to have a few problems when they are run on a Windows Vista SP1 PC.  This list isn’t exhaustive.

If you run one of these programs then please make sure you check for updates, as far as I know the developers of these programs have managed to develop work arounds for the Vista SP1 problem.  You should be updating your security software regularly anyway… so you have no excuse.

Microsoft Updates (Not)

22 January, 2008 (18:42) | Microsoft, Security, Trojans/Virus's & Nasties, Updates, windows | By: Nellie2

Just a word of warning… Microsoft does NOT send out updates by email.  Windows will tell you if there is an update pending.  If you aren’t sure how to configure your settings to your preferences then here are some links for you.

Manage Your Security Settings In One Place (Windows XP)

Windows Vista Security Centre

Check out the Sunbelt Blog for information (and screenshot) on the latest fake MS Update spam that was first seen yesterday.   As you will see…you won’t get updates to help keep your computer safe but an IRC.Backdoor Trojan!

Microsoft Security At Home

10 January, 2008 (19:02) | Microsoft, Security | By: Nellie2

I subscribe to a number of newsletters and lists.  All of them provide me with up to date information that I am interested in.  If you use a Windows based operating system then one of the news letters I would recommend is Microsoft Security At Home, you can subscribe to the Security Tips newsletter here, or if you prefer, just visit the website on a regular basis to check out the updates.

Microsoft Advance Security Bulletin for January 2008

5 January, 2008 (22:43) | Microsoft, Updates | By: Nellie2

Microsoft have released an advance notification for the normal monthly updates that are due to be released next Tuesday. Don’t forget to prepare for the updates as I’ve outlined in an earlier entry - How To Prepare for Patch Tuesday.

On 8th January 2008 Microsoft is planning to release:

Security Updates

One Critical Bulletin.

  • One Microsoft Security Bulletin affecting Microsoft Windows with a Maximum Severity rating of Critical. This update will require a restart and will be detectable using the Microsoft Baseline Security Analyzer.

One Important Bulletin.

  • One Microsoft Security Bulletin affecting Windows with a Maximum Severity rating of Important. This update will require a restart and will be detectable using the Microsoft Baseline Security Analyzer.

Microsoft Windows Malicious Software Removal Tool

  • Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Centre.

Non-security High Priority updates on MU, WU,WSUS and SUS

  • Microsoft will release two NON-SECURITY High-Priority Updates for Windows on Windows Update (WU)
  • Microsoft will release five NON-SECURITY High-Priority Updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

Microsoft Security Bulletin Advance Notification

Obtaining Other Security Updates

Updates for other security issues are available from the following locations:

  • Security updates are available from Microsoft Download Center. You can find them most easily by doing a keyword search for “security update”.
  • Updates for consumer platforms are available from Microsoft Update.
  • You can obtain the security updates offered this month on Windows Update, from Download Center on Security and Critical Releases ISO CD Image files. For more information, see Microsoft Knowledge Base Article 913086.

Microsoft will host a webcast to address customer questions on these bulletins on January 9, 2008, at 11:00 AM Pacific Time (US & Canada). Register now for the January Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Remember The Ultimate Steal?

28 December, 2007 (22:19) | Microsoft, Software | By: Nellie2

I was talking about this to a colleague in work today.. and thought it would be a good time to remind you about it, remember the offer is only valid until April 2008.  Here is a copy and paste jobbie from my post in September

Thanks to Corrine for bringing this to my attention.

The Ultimate Steal gives students easier access to our premium productivity suite Office Ultimate 2007, which includes tools they’ll be able to put to good use in their studies such as Office Groove 2007 and Office OneNote 2007.

Beginning Sept. 12, Microsoft will launch a special Web-based promotion exclusively for students called The Ultimate Steal. Students who are actively enrolled at eligible educational institutions will be able to acquire Office Ultimate 2007 via the Web at the low student price of US$59.95. Calling this promotion “The Ultimate Steal” is spot on when you consider that this is a savings of over 90 percent of the retail price of Office Ultimate 2007. The retail price is what students might think they would have to pay, when much lower pricing such as this has been available to students for many years.

Outside of the US, a one-year subscription license will also be offered for £12.95/€ 18.00/C$22.00 in addition to the perpetual license. The Ultimate Steal promotion will expire on April 30, 2008.

In British Pounds that is £38.95 for a program that normally retails at about £600 (although you can get it for just under £400 at Amazon right now!!) Now that is an offer worth taking up!

To get it you must hold a valid email address at a U.K. educational institution ending in .ac.uk and you must be actively enrolled with at least 0.5 course load. You must also be able to provide proof of enrolment status on request by Microsoft.

Press Pass - Student Promotion Provides Steal of a Deal for Office Ultimate 2007

The Ultimate Steal - Get It Here

Microsoft Security Bulletin Advance Notification for November 2007

8 November, 2007 (20:14) | Microsoft, Security, Updates | By: Nellie2

Microsoft have released an advance notification for the normal monthly updates that are due to be released next Tuesday. Don’t forget to prepare for the updates as I’ve outlined in an earlier entry - How To Prepare for Patch Tuesday.

On 13 November 2007 Microsoft is planning to release:

Security Updates

One Critical Bulletin.

  • One Microsoft Security Bulletin affecting Microsoft Windows with a Maximum Severity rating of Critical. This update will require a restart and will be detectable using the Microsoft Baseline Security Analyzer.

One Important Bulletin.

  • One Microsoft Security Bulletin affecting Windows with a Maximum Severity rating of Important. This update may require a restart and will be detectable using the Microsoft Baseline Security Analyzer.

Microsoft Windows Malicious Software Removal Tool

  • Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Centre.

Non-security High Priority updates on MU, WU,WSUS and SUS

  • Microsoft will release zero NON-SECURITY High-Priority Updates for Windows on Windows Update (WU)
  • Microsoft will release three NON-SECURITY High-Priority Updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

Microsoft Security Bulletin Advance Notification

Obtaining Other Security Updates

Updates for other security issues are available from the following locations:

  • Security updates are available from Microsoft Download Center. You can find them most easily by doing a keyword search for “security update”.
  • Updates for consumer platforms are available from Microsoft Update.
  • You can obtain the security updates offered this month on Windows Update, from Download Center on Security and Critical Releases ISO CD Image files. For more information, see Microsoft Knowledge Base Article 913086

Email from Microsoft

8 November, 2007 (19:59) | Internet, Microsoft, Security | By: Nellie2

Here is an email I got from Microsoft that I would like to share with you.

Recognize and avoid fraudulent e-mail to Microsoft customers:

If you receive an e-mail message that claims to be distributing a Microsoft security update, it is a hoax that may contain malware or pointers to malicious Web sites. Microsoft does not distribute security updates via e-mail.

The Microsoft Security Response Center (MSRC) uses PGP to digitally sign all security notifications. However, it is not required to read security notifications, security bulletins, security advisories, or install security updates. You can obtain the MSRC public PGP key at https://www.microsoft.com/technet/security/bulletin/pgp.mspx.

To receive automatic notifications whenever Microsoft Security Bulletins and Microsoft Security Advisories are issued or revised, subscribe to Microsoft Technical Security Notifications on http://www.microsoft.com/technet/security/bulletin/notify.mspx.