Windows Shell Vulnerability Fix

Microsoft have now released a security update to fix the Windows Shell Vulnerability issue. 

If you are an Eitex Pro-Active IT Support customer then this update has now been installed on your machine. In order to display your icons correctly you must now reverse the workaround which was applied previously. The reversal tool is easy to run and can be found by clicking this link http://go.microsoft.com/?linkid=9738981. A system restart will be required.

If you are concerned that your machine is not receiving automatic updates from Microsoft the security fix can be found here http://www.microsoft.com/technet/security/bulletin/MS10-046.mspx

This fix must be applied before reversing the workaround.

As usual, you use any of the information here at your own risk. We are not responsible for any issues relating to this blog. Existing customers can of course contact us on the Helpdesk. If you are not a customer and require assistance on this matter it will be provided free of charge (Business users only). Please feel free to contact us about our IT Support packages.

Windows Shell Vulnerability

At the back end of last week a major security flaw was found in all currently supported versions of Windows whereby potential malware could be executed on your PC via Shortcut Files, Internet Favourites, USB Memory Sticks, Network Shares and WebDAV Folders.

Microsoft has confirmed the flaw does exist and is as serious as first reported:

http://www.microsoft.com/technet/security/advisory/2286198.mspx

There is currently no fix available and it is quite likely that Microsoft will release an out of cycle fix once one it is available, however they have release a “Fix it” that should workaround the problem for now:

http://support.microsoft.com/kb/2286198

The workaround does however disable icons on all affected files, so all shortcuts in your Start Menu, on your Desktop, in Favourites, etc will show as just a blank white icon.

 

 

Understandably this workaround could be quite annoying, so, the choice is yours, functionality or security, until a proper fix is released. It is also worth mentioning however that this workaround can be disabled again using another “Fix it” on the same page (above) if you find it too annoying.

On the flip side, the vulnerability is pretty serious and does not even need you to execute the shortcut file / internet favourite, just simply opening a folder with it in could be enough!

As usual, you use any of the information here at your own risk. We are not responsible for any issues relating to this blog. Existing customers can of course contact us on the Helpdesk. If you are not a customer and require any assistance though please feel free to contact us about our IT Support.

Acknowlegement to Steve Gibson and TWiT

Microsoft Support end of lifecycle for Windows XP SP2 and Windows Vista (without any SP)

Everybody should note that Windows XP with Service Pack 2 (and of course all previous version) and Windows Vista (without any Service Pack) is now no longer supported by Microsoft. This means that they will no longer be producing security updates.

Given the prevalence of malware we would strongly suggest that everyone use a version of Windows that is currently supported by Microsoft and have Automatic Updates enabled.

To check which version of Windows you are running right click on My Computer (or “Computer” as it is now labelled in Windows Vista and Windows 7) and go to Properties.

If you are running a version that is now unsupported you can check the following Web Site on how to update to a supported version.

http://windows.microsoft.com/en-us/windows/help/end-support-windows-xp-sp2-windows-vista-without-service-packs?os=xp

As usual, you use any of the information here at your own risk. We are not responsible for any issues relating to this blog. Existing customers can of course contact us on the Helpdesk. If you are not a customer and require any assistance though please feel free to contact us about our IT Support.