Spy Journal 3.0 Filtering the web for you

Microsoft released an extraordinary security patch yesterday.

Microsoft Security Bulletin MS08-067 – Critical

Vulnerability in Server Service Could Allow Remote Code Execution (958644)

Published: October 23, 2008

Seeing as Microsoft only release patches once a month, this is totally unexpected, and indicates the critical nature of the flaw. One surmises that there are already hackers and other criminals already exploiting this flaw.

There are lots of details in the MS08-067 bulletin and there is starting to be a fair bit of chatter on the tubes about it – see this from Nick MacKechnie for example where he points to the Security Vulnerability Research and Defense blog.

We emailed all our clients and suggested they patch immediately, or invite us to remotely connect to them and manage that for them.

It was announced today that there was a major DNS security flaw that could allow attackers easily to compromise any name server; it also affects clients.

Here are some specific news articles about this (for techies only)

• Slashdot
• Internet Systems Consortium
• Internet Storm Centre
• Microsoft Security bulletin

What does this mean for you?

Patch your Windows XP PC using Microsoft Update or Windows Update. If you have a MAC use Software Update to patch it. I am not sure if they have released patches yet for MAC but will update this when I find out.

I have full instructions and screenshots for Windows XP and Vista below – also a couple of screenshots for Server 2003 / SBS 2003, though server owners SHOULD know how and when to patch their servers.

So far I have installed XP Service pack 3 as follows:

Brand New XP installation P4 1GB Ram - Went really fast and no errors

Virtual Machine - went real slow but no errors

Existing machine P4 1GB Ram - extremely slow - no errors

Existing machine P3 512MB Ram - extremely slow - 1 error - couldn't copy atapi.sys from c:\windows\system32\drivers. After a bit of research I simply deleted the atapi.sys file and closed daemon tools.

You've got a legal copy, installed and activated. Then your machine goes and blows up on you and you have to install it again. Where's the product key? If your anything like me it probably went out in the rubbish some time ago.
The Magical Jelly Bean Keyfinder is a freeware utility that retrieves your Product Key (cd key) used to install windows from your registry. It has the options to copy the key to clipboard, save it to a text file, or print it for safekeeping. It works on Windows 95, 98, ME, 2000, XP, Server 2003, Windows Vista, Office XP, Office 2003, and Office 2007.

Source, Doug Klippert