Andre 的个人资料Teching It Easy: Windows...照片日志列表 工具 帮助

日志


10月13日

First set of Security Updates available for Windows 7

Windows 7 users, make sure your automatic updates feature in Windows Update is turned on, Microsoft released its routine set of updates for Windows today which is done every second Tuesday of the month.

Overview

A security issue has been identified that could allow an unauthenticated remote attacker to cause the affected system to stop responding. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system.

Downloads:

Windows 7 32 Bit here
Windows 7 64 bit here
Windows Server 2008 R2 here
Windows Server 2008 R2 here

For other versions of Windows affected: Windows XP 32-bit (733KB), Windows XP 64-bit (1.1MB), Windows Server 2003 32-bit (684KB), Windows Server 2003 64-bit (1.1MB), Windows Server 2003 for Itanium (1.6MB), Windows Vista 32-bit (1.4MB), Windows Vista 64-bit (2.1MB), Windows Server 2008 32-bit (1.4MB), Windows Server 2008 64-bit (2.1MB), Windows Server 2008 for Itanium (2.4MB)

Another set of updates for Windows 7 are Cumulative Security Update of ActiveX Kill Bits (973525):

General Information

Executive Summary

This security update addresses a privately reported vulnerability that is common to multiple ActiveX controls and is currently being exploited. The vulnerability that affects ActiveX controls that were compiled using the vulnerable version of the Microsoft Active Template Library (ATL) could allow remote code execution if a user views a specially crafted Web page with Internet Explorer, instantiating the ActiveX control. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for all supported editions of Microsoft Windows 2000 and Windows XP, Important for all supported editions of Windows Vista and Windows 7, Moderate for all supported editions of Windows Server 2003, and Low for all supported editions of Windows Server 2008 and Windows Server 2008 R2. For more information, see the subsection, Affected and Non-Affected Software, in this section.

Learn more here

Windows 7 for 32-bit Systems
Windows 7 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems*
Windows Server 2008 R2 for Itanium-based Systems

6月17日

Update x2: Introducing 'Microsoft Security Essentials'

Has a nice ring to it, don't? Yesterday I blogged about an early leak of what appeared to be Microsoft's forthcoming AntiVirus and AntiSpyware technology, code named 'Morro'. That build has now been confirmed as rather old with the release (leak) of a new build carrying the said to be official brand name "Microsoft Security Essentials'. Arstechnica's One Microsoft Way blog provides a thorough gallery of screenshots detailing everything from setup to working in a much slicker UI than what we saw yesterday.

Microsoft Security Essentials.jpeg

Microsoft Security Essentials

Learn more here

What I find most surprising yet very welcoming about Security Essentials is the size of the installer, ranging from 3 to 7 MBs depending on which Windows platform you install it on. I honestly hope Microsoft provides a single 32 and 64 bit installer instead of the array of installers for XP, XP x64, Vista x64, Vista x86. The interface looks clean, easy to use and navigate. If it works as good as it looks, then I will gladly replace my Symantec EndPoint subscription.

It is not known whether Security Essentials will come bundled with Windows 7, but I personally wouldn't mind as I believe just like other functionality that has been consumed by operating system's over the years, security technology such as Antivirus and AntiSpyware should be a fundamental part of the OS. Did I mention how small in size the installer is too? I can't wait to test this utility! I hope the Windows Live Team includes this in the next version of Windows Live Essentials too since it would complete the suites focus on providing a end to end set of experiences for consumers.

Mary Jo Foley of ZDNET's All About Microsoft blog provides some further details about Microsoft Security Essentials and its availability, click here to learn more.

Meanwhile, Ed Bott of ZDNET's Microsoft Report has an early preview of the software here

PC Magazine also has an early review of Microsoft Security Essentials here

Update:

Elinor Mills of CNET's Security blog notes that the beta of Microsoft Security Essentials will be made available next week, June 23rd.

Related

Microsoft's Antivirus solution of to-'morro'

6月16日

Microsoft's Antivirus solution of to-'morro'

Neowin has a nice scoop on the next generation of Antivirus and Antispyware technology that Microsoft plans to make available to Windows XP, Vista and 7 customers in the near future for free. An anonymous tipster provided the folks at Neowin with some screenshots of 'Microsoft Morro' (which is most likely the code name), showing what looks like a hybrid version of Microsoft's current AntiSpyware utility 'Windows Defender'.

90_full_msmoro3.jpeg

Microsoft 'Morro'

Read the entire article here

Back in 2005 Microsoft launched its Windows Live OneCare security service (once codenamed 'A1') which included a variety of utilities such as Antivirus, AntiSpyware (Windows Defender), Backup capabilities and PC maintenance tools such as Defragger and Disk Cleanup. Version 1 was released in May 2006, version 1.5 October 2006, version 2 November 2007 and the latest version 2.5 in July of 2008. Most of these technologies have since been consumed by the Windows operating system or integrated into the Windows Live Essentials suite. Microsoft announced that Windows Live OneCare would be discontinued in June 2009.

3月11日

Security Update for Windows 7 BETA - (KB958690)

Quote:

Overview

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system. This update is provided to you and licensed under the Windows 7 Prerelease License Terms.

Learn more here

Download for Windows 7 32-bit here

Download for Windows 7 64-bit here

This security update also applies to previous releases of Windows including: Windows 2000, XP, Vista, Server 2003, and Server 2008. Learn more here

Previously:

Windows 7 and Server 2008 R2 Application Compatibility updates
IE8 Reliability Update for Windows 7 Beta Now Available
Microsoft Hardware Support for Windows 7 BETA

3月3日

New Antivirus Support for Windows 7: Panda Antivirus Pro 2009

For those of you running Windows 7, you might notice you are limited to what has been recommended by the OS so far. A number of well known brands such as Kaspersky (which I am using), AVG, McAfee and Symantec all have supported utilities for Windows 7, now you can add another to the list:

“GLENDALE, Calif., March 3 /PRNewswire/ -- Panda Security, a leading provider of IT security, today unveiled a beta version of Panda Antivirus Pro 2009 compatible with Windows 7. Now all users of the beta version of Microsoft's new operating system will be able to install the best protection against malware at no cost and with minimal resource consumption. This beta version can be downloaded here: http://www.pandasecurity.com/windows7/

Learn more here

Resources:

Windows 7 security software providers

10月23日

Critical Security Update for Windows 2000, XP, Server 2003/2008, Vista and Windows 7 Pre-BETA

Microsoft released an update to that fixes a vulnerability in current and future versions of Windows. The vulnerability can be remotely exploited by malware.

Microsoft advises every Windows user / Administrator to update their machines, every currently supported Windows version is affected, so: Windows 2000, Windows XP, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008 & Windows Server 2008 Core Installation.

An interesting note I found out is that this vulnerability also affects the Windows 7 Pre-Beta build Microsoft is expected to hand out to PDC 2008 Attendees next week.

Quote: This vulnerability was reported after the release of Windows 7 Pre-Beta. Customers running Windows 7 Pre-Beta are encouraged to download and apply the update to their systems. On Windows 7 Pre-Beta systems, the vulnerable code path is only accessible to authenticated users. This vulnerability is not liable to be triggered if the attacker is not authenticated, and therefore would be rated Important.

So get patching!

More information: Microsoft Security Bulletin Advance Notification for October 2008

6月28日

Security Updates for Windows Vista

Microsoft released nine important security updates for Vista yesterday. Here is a list of whats included:

 

Update for Windows Vista (KB931836)
February 2007 cumulative time zone update for Microsoft Windows operating systems
>> Download: x86, x64


Update for Windows Vista (KB932406)
The Windows desktop may stop updating correctly after a Windows Vista-based computer has been running for an extended period of time
>> Download: x86, x64

Update for Windows Vista (KB935652)
June 2007 Cumulative Update for Media Center for Windows Vista
>> Download: x86, x64

Update for Windows Vista (KB937077)
A high definition audio device may no longer work after you resume Windows Vista from hibernation or from sleep
>> Download: x86, x64

Update for Windows Vista (KB937123)
When running Windows Vista, the 802.1X network authentication times out, fails and network connectivity can not be established.
>> Download: x86, x64

Update for Windows Vista (KB938637)
In Internet Explorer 7 on a Windows Vista-based computer, you cannot enter user-defined words that are added to the Microsoft IME user dictionary
>> Download: x86, x64

Update for Windows Vista (KB929824)
Windows Vista cannot connect to any off-link addresses when the default gateway is configured to be the same as the client IP address
>> Download: x86, x64

Update for Windows Vista (KB930627)
The private data of the DEVMODE data structure may be corrupted when you use raw mode to print a document in a 32-bit application on a computer that is running a 64-bit version of Windows
>> Download: x64

Update for Windows Vista (KB935855)
Error message when you try to start Internet Explorer 7 in Windows Vista: "You must be an administrator to open Internet Explorer on this desktop"
>> Download: x86, x64

 

6月13日

Security Tips for June 2007

These security tips and solutions are adapted from this months Microsoft Newsletter: Security for home computer users.

Volume 4, Number 6 - June 12, 2007.

 

How to recognize "spoofed" Web sites

How to recognize "spoofed" Web sites

According to the May 29 issue of Computerworld, the number of spoofed Web sites--fake Web sites that look like legitimate sites but are designed to steal your personal information--nearly tripled between March and April. The best way to help protect yourself? Verify that the site you're visiting is secure and authentic using these techniques.

 

 


 

Security updates

Security updates

Security updates for June 12, 2007
The bulletin for June includes six updates: four critical updates for the Windows operating system and Internet Explorer, one important update for Microsoft Office and Microsoft Visio, and one moderate update for Windows.


For people with personal computers:
Get updates automatically from Microsoft Update
See a summary of the June updates
Frequently asked questions about security updates

For technical details or for IT professionals:
Go to the Security Bulletin Summary on TechNet

For all others: If you work in a connected office environment, your IT department will keep your computer up to date.


Protect your computer

Signs of spyware: Are you being watched?

Are you seeing pop-up ads, strange settings, or unfamiliar downloads on your computer? Know the symptoms of spyware and make sure that you're not being watched.

Does your operating system have protection built in?

Many fundamental computer security features are integrated in the latest versions of Windows. Here's how to find out if your operating system has protection built in.


Protect yourself

Protect yourself

Help! A spammer has hijacked my e-mail address

Have you received spam that appears to come from your own e-mail address? Here's how to prevent spammers from hijacking your e-mail address, starting by using the built-in spam filtering tools in all Microsoft e-mail programs.

How to prevent Trojans from taking over your computer

With new malicious Trojan-horse programs appearing on the Internet all the time, it's important to follow these best practices to help keep your computer safe.


Protect your family

Protect your family

Help protect yourself when downloading music

A recent study found that online music sites pose the biggest security threat to computers. If you or your kids visit such sites, take these steps before you download anything.

Set time limits on your kids' computer use

Learn how Parental Controls in the Windows Vista operating system help you control how long your kids can use the computer.


Security resources

Security At Home site

Security Tips & Talk blog

RSS feed: Get new security information delivered to you

Security video tutorials

Support for your home computer security issues

Worldwide computer security information

 

 

3月28日

Updates for Windows Vista

From ActiveWin

Quote:

Install this update to resolve an issue where an error message is received when placing a Windows Vista system into a sleep state while a PPP connection is active. After you install this item, you may have to restart your computer.

This update is provided to you and licensed under the Windows Vista License Terms.

Also available:

Thanks to Jonathan Tigner

 

3月8日

How to Ease Your Daylight Savings Time Transition

From Microsoft TechNET

Quote

What time will your organization's computers think it is on Sunday? Or, more important, will everyone's Outlook calendars be in sync on Monday morning? The United States Energy Policy Act of 2005 goes into effect on March 11 and unless certain updates are applied, the time zone settings for your computers' and handheld devices' system clocks may be incorrect during the four-week period affected by the change. To get the updates and learn how to apply them, the Microsoft Daylight Saving Time Help and Support Center is the place to start. There you can find a rundown of all products affected by DST. You can also participate in webcasts and technical chats geared to help you apply the updates. These updates have been released through a combination of channels including Microsoft Customer Support Services (CSS), hot fixes incorporated in Knowledge Base articles, Windows Update, Microsoft Update, Windows Server Update Services (WSUS), and the Microsoft Download Center. Also check out Microsoft IT Deployment Guidance to learn about the Microsoft internal best practices on easing the DST transition.

Available DST updates for Windows:

Support and Troubleshooting

Support News

Daylight Saving Time Help and Support Center

How-to Articles

How to address daylight saving time by using the Exchange Calendar Update Tool

How to prepare SQL Server 2005 and SQL Server 2000 for changes to daylight saving time in 2007

Knowledge Base Articles

Update for daylight saving time changes in 2007 for Exchange 2003 Service Pack 1

February 2007 cumulative time zone update for Microsoft Windows operating systems

Preparing for Daylight Saving Time changes in 2007

Update your Windows Mobile powered device now

You can't deny it-spring is on the way! And this year, along with the sunshine and warmer weather, comes Daylight Saving Time. Due to Congress's Energy Policy Act, you'll need to remind your Windows Mobile® powered device that clocks will be set forward sooner than usual this year. Make sure your device doesn't fall behind by updating its software now.
To ensure your device is on time, visit http://www.windowsmobile.com/daylightsaving/ and download the necessary updates.

 

2月6日

Windows Live OneCare Not Living up to its name

From News.com

Quote:

"Microsoft's own antivirus software, Live OneCare, is unable to fully protect Vista users against viruses, and one of security firm McAfee's antivirus software packages also fails to protect users, according to independent research released Friday.

Security news Web site Virus Bulletin, backed by a team of security researchers based in Oxfordshire, U.K., tested 15 antivirus software packages used by businesses and designed specifically for Vista, Microsoft's newest operating system. The packages were released to businesses two months ago."

Read the rest here

I am afraid I have to agree, OneCare is just not ready for prime time. In fact, I had to uninstall OneCare just to save my XP computer from certain damnation. So I installed the latest Norton 360 beta on Vista x86 and scanned my XP partition, which removed numerous Viruses and Spyware programs from the system. Malicous software which Live OneCare failed to find, regardless it's a suite of AV, AntiSpyware and backup, it just did not offer the level of security I was anticipating. I would preferrably stick with well known and well tested solutions from third party vendors such as Symantec and McAfee.

1月3日

Norton 360 Beta with Windows Vista RTM Support


Overview

Norton 360 is a comprehensive consumer security solution that offers a full circle of protection and eliminates the need to purchase and manage multiple products.

  • Defends your PC against a broad range of threats
  • Safeguards against online identity theft
  • Protects important files from loss
  • Keeps your PC tuned up for peak performance
  • Provides a hassle-free user experience
  • Protects against the latest online threats

Norton 360 System Requirements

  • Operating System: Windows® XP Home/XP Pro/XP Media 2005 +, Vista Home Basic/Home Premium/Business/Ultimate Build 6000 and later (Not compatible with Vista RC1/RC2)
  • Phishing Protection feature requires Microsoft® Internet Explorer v6.0 or higher
  • Online backup feature requires high-speed Internet connection
  • Email scanning supported for POP3-compatible email clients

Minimum Hardware Requirements

  • 300MHz or higher processor
  • 256MB of RAM minimum
  • 300MB of free hard disk space

REQUIRED FOR ALL INSTALLATIONS

  • Standard Web browser
  • Internet connection (high-speed connection required for Online Backup)

Important: Norton Ghost and Norton Save and Restore can coexist with Norton 360. However, if you have any other existing Norton products running, such as Norton Internet Security or Norton AntiVirus, you'll need to uninstall those products to participate in the beta. After the beta test period, be sure to reinstall your Norton products so you'll continue to have Norton's award-winning protection.

Learn more at: http://www.symantec.com/norton360beta

Resources:
Day 2 - A Look at Security in the Windows Vista world
Testing Symantec's Norton Antivirus 2007 on Vista at MSTechToday

2月14日

Gates sees end to passwords in sight

 
Quote:
"SAN JOSE, Calif.--For years, Microsoft Chairman Bill Gates has had his sights set on the password as the weak link in the computer security chain.

Now, with Windows Vista, Gates feels he finally has the right weapons to supplant the password as a means of verifying who is who on computers and over the Internet.

The new operating system, due later this year, introduces a concept called InfoCards that gives users a better way to manage the plethora of Internet login names and passwords as well as lets third parties help in the verification process. Vista will also make it easier to log on to PCs using something stronger than a password alone, such as a smart card."

Read the rest here 

1月15日

Security Update for Windows Vista December CTP (KB912919)

 
Quote:
Brief Description
A remote code execution security issue has been identified in the Graphics Rendering Engine that could allow an attacker to remotely compromise your Windows-based system and gain control over it.

Overview
A remote code execution security issue has been identified in the Graphics Rendering Engine that could allow an attacker to remotely compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.
 
Please download the patch here
1月5日

WMF: Microsoft Security Bulletin Advance Notification

 
Qoute:

Important Information for Thursday 5 January 2006

Microsoft announced that it would release a security update to help protect customers from exploitations of a vulnerability in the Windows Meta File (WMF) area of code in the Windows operating system on Tuesday, January 2, 2006, in response to malicious and criminal attacks on computer users that were discovered last week.

Microsoft will release the update today on Thursday, January 5, 2006, earlier than planned.

Microsoft originally planned to release the update on Tuesday, January 10, 2006 as part of its regular monthly release of security bulletins, once testing for quality and application compatibility was complete. However, testing has been completed earlier than anticipated and the update is ready for release.

In addition, Microsoft is releasing the update early in response to strong customer sentiment that the release should be made available as soon as possible.

Microsoft’s monitoring of attack data continues to indicate that the attacks are limited and are being mitigated both by Microsoft’s efforts to shut down malicious Web sites and with up-to-date signatures form anti-virus companies.

The security update will be available at 2:00 pm PT as MS06-001.

More information here

11月9日

Security Updates for Windows Vista and Internet Explorer 7

 
Microsoft Internet Explorer 7 BETA 1
 
Microsoft Windows Vista BETA 1
 
I am not sure, but you might not be able to access these updates unless you are a Windows Vista BETA Technical Tester or MSDN Subscriber.
 
Update: These security updates apply only to the official Internet Explorer 7 Beta 1 and Windows Vista Beta 1 builds (build version 5112 for each). You do not need to install this update if you have already installed one of the more recent Windows Vista builds that are available from the Windows Vista/IE 7 beta downloads page on the Connect site (the latest is build 5231). More specific details on the issue and fix, as well as detailed installation instructions, can be found in the release notes that are included in the downloads for these security updates.

From Neowin

New name flap for Microsoft -- but this time its legal right is clear

 
Qoute:
"Microsoft Corp. has a new name for its anti-spyware program, and unlike some of its choices for other products, there's no question this time about whether it has the right to use the moniker.

But the software developer who signed over that right isn't happy about the way Microsoft secured it.

Late last week, the company announced that it would begin using the name "Windows Defender" for the anti-spyware program that it plans to offer as part of its flagship PC operating system.

That was a surprise to Adam Lyttle, a 22-year-old developer from Adelaide, Australia, who developed a program of the same name for preventing online sites from making unwanted changes in a computer's settings.

Read the rest here

I guess this is the part where you say "all your bases belong to me!"

10月7日

FAQ: Inside Microsoft's Client Protection

From CNET
 
Qoute:

Thursday's announcement of Microsoft's Client Protection software marks the company's long-anticipated entry into the market for desktop security products for businesses.

Microsoft faces a tough battle as it competes with established players, including Symantec, McAfee and Trend Micro.

Analysts have criticized Microsoft for being vague about its security product plans. The software maker said Thursday that over the past couple years, it has focused on securing its existing products and improving patching for customers. "Now the effort is shifting to deliver a new generation of security products," said Debby Fry Wilson, director of security engineering and communications.

So what is Client Protection? We'll try to tackle that question below.

What is Microsoft's new security software?
Microsoft Client Protection is software for business PCs and file servers that's designed to offer, in one application, protection against spyware, viruses and root kits. The company says its software will offer IT administrators central management capabilities and that it'll work with the company's Active Directory and Windows Server Updates Services patch management tool.

Read the other questions and answers here

10月6日

Microsoft Enterprise Anti-Spyware Plans Take Shape

From eWeek
 
Qoute:
"Microsoft moved a step closer to becoming a key player in the Internet security business with the announcement Thursday of a new enterprise-class anti-spyware product featuring technology to thwart viruses, worms and kernel rootkits.
 

The new offering, dubbed Microsoft Client Protection, will go into limited beta before year-end with a full rollout expected in 2006.

Details on pricing and licensing are being kept under wraps.

The announcement, which came during a meeting between chief executive Steve Ballmer and business partners in Munich, Germany, is the culmination of a year-long push by the world's largest software maker to take on entrenched security vendors in the anti-virus/anti-spyware business.

Check out the Microsoft Presspass interview with Mike Nash about Client Protection here

7月21日

Microsoft Launches OneCare Beta


Quote

"This week, Microsoft began sending out beta invites for its upcoming Windows OneCare Live product, an MSN service that will provide Windows XP users with managed antivirus, antispyware, a two-way firewall, data backup and restore capabilities, and other services. According to Microsoft representatives I spoke with last week, Windows OneCare is an extension of Windows that breaks beyond the boundaries of today's PC security products.

"Windows OneCare is a subscription service that guarantees that customers will stay protected online," Dennis Bonsall, the Group Product Manager of the Microsoft Technology Care and Safety Group told me recently. "It automatically fixes the things that most often detract from user satisfaction when using Windows: Security, data protection, and PC performance."

Read the rest here

This is one beta I would have loved to test, too bad its currently for US Residents only. I'm currently running the Window AntiSpyware public beta and its going very well. Maybe Microsoft will change their minds and up this up to the rest of world sooner, rather than later. Well, it won't be finalized until Q1 of 2006, so there is still plenty of time.