New Patch for Windows

Boon · 02-01-2006, 23:34

hi
whilst scanning the web, i came across this link to a new patch for windows, apparently we all need it.
Must admit, i have not downloaded myself yet, wanted more info from the IT bods in here first.
http://www.hexblog.com/2005/12/wmf_vuln.html
stevannie

GfK · 03-01-2006, 14:37

My advice? Don't download *any* 'windows updates' unless they come directly from the Microsoft site. That file could easily be a Trojan and I strongly recommend you don't touch it.

If there is any real need for a patch, Microsoft will release one themselves.

***Steve*** · 03-01-2006, 14:55

I would have to agree here, trusted sites and all that.
When it comes to Windows there is only one that you should download from

barrymoir · 03-01-2006, 15:06

me too agree, microsoft only for updates, and even then i still get greiff, service pack 2 was a nightmare.

daveyuk · 03-01-2006, 15:35

Mmmm hexblog.com all sounds very very dodgy to me, think I'll give this one a miss.

Only use updates from Microsoft or other known trusted sites just to be on the safe side.

Warspite · 03-01-2006, 15:39

As mentioned - if it aint an official Microsoft fix, from a Microsoft site dont touch it. It will not be fully tested and theres no guarantee it does, or only does what it claims.

Arkady · 03-01-2006, 17:07

Oooh No - that'll be a nasty one.
Only from Microsoft and even then check it - there was a spoof Microsoft update last month doing the rounds.

Matty · 03-01-2006, 18:16

i set windoze update automatically, nice and easy then!

03-01-2006, 18:34

Quote:

Originally Posted by Matty

i set windoze update automatically, nice and easy then!

Dear god, have you no shame?
First Internet Exploder, now you tell us you have Windows Update to automatically install everything it wants?

Next you'll be telling us you listen to the Microsoft Word 'Clippit''s suggestions.

GfK · 03-01-2006, 18:38

Quote:

Originally Posted by Marcel

Dear god, have you no shame?
First Internet Exploder, now you tell us you have Windows Update to automatically install everything it wants?

Um... you actually get to choose 'Express' or 'Custom' install. It doesn't install anything without asking you first.

MyPix · 03-01-2006, 18:41

Quote:

Originally Posted by GfK

Um... you actually get to choose 'Express' or 'Custom' install. It doesn't install anything without asking you first.

you dont get any of those features if you cant register your version of Xp Pro , lol

MyPix

GfK · 03-01-2006, 18:49

Quote:

Originally Posted by MyPix

you dont get any of those features if you cant register your version of Xp Pro , lol

MyPix

There's only one reason you wouldn't be able to register your version of WinXP, so I think we better stop that conversation right there.

AquilaEagle · 03-01-2006, 20:19

If you can't register your version of XP pro, you just need to look a bit harder for your serial number.

04-01-2006, 12:15

Original link has gone, but I was sure it linked to a Microsoft Patch anyway.

That said, there *is* a new vulnerability in windows.

http://www.microsoft.com/technet/sec...ry/912840.mspx
And I think that was what the original link was referring to.

GfK · 04-01-2006, 12:34

Quote:

Originally Posted by Marcel

Original link has gone, but I was sure it linked to a Microsoft Patch anyway.

That said, there *is* a new vulnerability in windows.

http://www.microsoft.com/technet/sec...ry/912840.mspx
And I think that was what the original link was referring to.

The original link did indeed point to that microsoft page. However, the patch itself was hosted on hexblog.com, not on microsoft.com.

Quote:

Microsoft has completed development of the security update for the vulnerability. The security update is now being localized and tested to ensure quality and application compatibility.... ...The update will be released worldwide simultaneously in 23 languages for all affected versions of Windows once it passes a series of rigorous testing procedures. It will be available on Microsoft’s Download Center, as well as through Microsoft Update and Windows Update. Customers who use Windows’ Automatic Updates feature will be delivered the fix automatically.

Nowhere does it say "get it from hexblog.com"

04-01-2006, 12:53

Ahh with me remembering the link to Microsoft, I thought the link was to the patch itself.

CriPPle · 04-01-2006, 13:04

It does all sound very fishy, especially considering hexblog account has now been suspended.

Unless info comes from a trusted source. i.e. Microsoft, NTBugtraq or something similar don't even bother, it's just a waste of time.

04-01-2006, 14:12

Quote:

Originally Posted by CriPPle

Unless info comes from a trusted source. i.e. Microsoft

Even then I wait until it's been thoroughly tested by scores of other users / guinea pigs before I let it even near my system.

It's amazing to think of the amount of Microsoft's work I 'undo' when I install windows on my machine.
By that I mean disabling services, tweaking here and there to make it a better OS.
And I've had a number of 'hotfixes' that have completely buggered up my machine