EmailEmail
PrintPrint
Worry Watch: Three critical Microsoft Updates
Saturday, August 13, 2005

Microsoft has released six new security updates, including three "critical" updates. If exploited, there is a high risk of a hacker taking over your system.

 
 

WEEKLY REPORTS

Microsoft's Latest Security Releases

Top 10 Threats

   
 

Among the critical updates is a security fix for the program in your computer that finds your printer and schedules jobs to it.

Another critical update fixes a problem in Internet Explorer, to which your Windows system is subject -- even if you use a different browser to access the web.

The third and final critical patch fixes a flaw in a program that allows you to automatically run new hardware once you plug it into your computer. Flaws similar to this have been exploited by the Blaster and Sasser worms in recent years.

All three of these critical flaws could give hackers remote access to modifying files, installing programs, and creating new user accounts on your system or network.


Worry Watch Plus Online only:

Information, Protection and Prevention -- Microsoft Updates
Microsoft Security


Microsoft's Latest Security Releases:

Name

Number (click to access)

For Users of

Priority

Vulnerability in Print Spooler Service

KB896423

Windows 2000 (SP4), XP (SP1 and SP2)*

Critical

Cumulative Security Update for Internet Explorer

KB896727

Internet Explorer; Windows 98, 2000 (SP4), ME, XP (SP1 and SP2), XP Professional*

Critical

Vulnerability in Plug and Play

KB899588

Windows 2000 (SP4), XP (SP1 and SP2), XP Professional*

Critical

Vulnerability in Telephony Service

KB893756

Windows 98, 2000 (SP4), ME, XP (SP1 and SP2), XP Professional*

Important

Vulnerabilities in Kerberos

KB899587

Windows 2000 (SP4), XP (SP1 and SP2), XP Professional*

Moderate

Vulnerability in Remote Desktop Protocol

KB899591

Windows 2000 (SP4), XP (SP1 and SP2), XP Professional*

Moderate

Windows Malicious Software Removal Tool

KB890830

Windows 2000, XP*

Go back

* Reading: Solutions, Prevention & Remedies
Additional summary information related to a specific type of solution or prevention that you should be considering. Depending upon the week, this section may have:
• Recent Windows security releases from Microsoft
• Recent updates to widely used anti-spyware programs
• Recent updates to widely used anti-virus programs
• Recent updates to other security programs & devices (ex: Firewalls, routers)
• Recent updates to various applications in wide use


Top 10 Threats:

Name

Type

Affects

Alert Level

Sdbot.ftp

More

Worm

Windows 95, 98, 2000, ME, NT, XP

Medium

Netsky.P

More

Worm

Windows 95, 98, 2000, ME, NT, XP*

Severe

Mhtredir.gen

More

Trojan

Windows 95, 98, 2000, ME, NT, XP*

Medium

Gaobot.gen

Moer

Worm

Windows 2000, NT, XP*

High

Gaobot.JKK

More

Worm

Windows 95, 98, 2000, ME, NT, XP*

High

Mitglieder.DQ

More

Trojan

Windows 95, 98, 2000, ME, NT, XP*

Medium

Smitfraud.E

More

Virus

Windows 95, 98, 2000, ME, NT, XP*

Low

Qhost.gen

More

Trojan

Windows 2000, NT, XP*

Low

Nailpol.A

More

Trojan

Windows 95, 98, 2000, ME, NT, XP*

Low

Psyme.C

More

Trojan

Windows 95, 98, 2000, ME, NT, XP*

Low

Go back

Read: Top Threats
These are viruses that are currently on the watch lists of major anti-virus software companies.

Name
What the threat is called. We use the name given each virus by Panda Software. Sometimes other anti-virus companies give the same threat a different name. Usually they use similar names.

Type
There are different characteristics associated with different types of threats.
• Virus - has the ability to replicate or infect computers or other programs
• Trojan Horse (or Trojan) - appear to be harmless programs when you get them. They unleash their payload when you double-click, open, or execute them.
• Phishing - a Web site or e-maill message posing as another company - usually one you know to fool you into giving the sender personal information.
• Worm - self replicates onto additional disks, computers or networks
• Spyware - installs on your system to collect information about your activity, preferences or interests
• Hoax - false messages sent by e-maill to mislead the recipient
• Backdoors - opens a security hole that allows outsiders to take control of your computer
• Dialer - uses your telephone to dial an outside number - sometimes a number that costs you money when dialed

Affects
Not all viruses affect all types of systems. Some, for example may affect only Windows 98 and 95, but not Windows XP or NT. Others affect all Windows systems, but not Macintosh. In this column, we show you the consumer systems that the threat is known to affect. We don't always include the servers that operate in your company's backroom.

Alert level
The level of awareness that anti-virus vendors suggest you need to have for each threat listed.
For each threat listed, we'll post a corresponding link here, so you can get more information to help you recognize, diagnose, prevent, and repair the problem.

First published on August 13, 2005 at 12:00 am
Worry Watch is compiled by David Radin & Jes Scherder using data and reports from Microsoft, CERT, Panda, and other sources. To contact the compilers of Worry Watch, go to http://www.megabyteminute.com/contactdavid.html.