change – Page 3 – Paul's Tech Talk

Microsoft Fixes some Performance issues with Vista a Month early!

PaulOctober 29, 2008

Update for Windows Vista (KB957200)

This is a reliability update. This update resolves some performance and reliability issues in Windows Vista. By applying this update, you can achieve better performance and responsiveness in various scenarios. After you install this item, you may have to restart your computer. This update is provided to you and licensed under the Windows Vista License Terms.

[ad]

Now if I know Microsoft, this update actually helps with some versions of programs that is currently out. I am just curious as to why they sent this updates out early. Has Microsoft changed there tactics with updates? Have they decided to send them out as soon as they are done?

Microsoft Releases MS08-062 to the Public a Month Early!

PaulOctober 29, 2008

Vulnerability in Windows Internet Printing Service Could Allow Remote Code Execution (KB953155)

This update resolves a privately reported vulnerability in the Windows Internet Printing Service that could allow remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts.

[ad]

This update is rated Important for all supported editions of Microsoft Windows 2000, Windows XP, Windows Server 2003, and Windows Server 2008. For more information, see the subsection, Affected and Non-Affected Software, in this section.

The security update addresses this vulnerability by changing the way that memory is allocated within the Internet Printing Protocol (IPP) service. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under the next section, Vulnerability Information.

[via Microsoft Bulletin]

Now from what I understand, if you have a Network attached printer on your system this would make you more vulnerable to someone taking control over your system. So this patch is supposed to fix that. I am recommending to all to update this and fix this update ASAP. I do not know if you don’t have one what that would do so just install this update, because you will undoubtedly still be runing the Internet Printer Protocol even if you don’t have a printer.

AVG detected trojan ; Generic11.BEOG

PaulOctober 17, 2008

I had a Friend tell me his system detected this Trojan GENERIC11.BEOG. I did my research and right now. It looking like Adobe added something to there recent updates *see updates below*. I’ll Have to check with some other sources but it looking like AVG over did it again and found something that might just be an AVG issue. (correction)

[ad]

I usually wait before updating something like adobe. It is sure to be some minor change to adobe but if your are worried here’s the link to watch and see what people are asking or talking about this false positive:

Malwarebytes Security Forums

It seems that AVG is calling this possible virus but yet it looks like it is a false positive. So don’t you worry. If it was a true virus you’d probably would never know!! 😉

[ad]

*UPDATE*

I installed Adobe 9.0 and updated the virus scan database for AVG. It hasn’t found any thing yet but I am still scanning my system. I’ll let you know if it finds this false positive on my Vista machine!! I’m doing this to test it out!!! Come back later to find out the results of the test. (if you like this website by all means google this website so it too can be on google trends. I want to see it be up on google trends for a day or two.)

*UPDATE #2*

Just did a whole system scan. It did not find anything. So I will be doing a reboot and scanning again. It might be something that is attached to a PDF, if you went to a malicious website. So I will do another scan.

*Update #3*

I just rebooted and almost finished scanning with AVG. I still haven’t found anything wrong. I have did some more digging into what might cause it. I just did a look registry look up on {AC76BA86-7AD7-1033-7B44-A90000000001} and I found out something really interesting. It’s a PDFFile_8.ico File. This is tells me this is an Icon for the desktop. I’m using one of the examples from Malwarebytes Security Forums to try to figure out what might be infected.

Here’s what AVG said after it finished scanning my system:

So I must assume that it is neither Adobe or AVG who have anything to do with this. I will have to say that it must be a real infection as to not having any viruses after an install of Adobe. How do you get this type of virus. Check out my article on : Some Important programs to prevent yourself from having viruses and Malware!!

There you will find some useful tips on how not to get infected and other useful tools to help restore you system to it’s glory days.

So I will tell my friend to do a full virus scan and double check the results. I can’t replicate the so called virus but I am sure there is something going on with the HASH files of the AVG Database and something might be coming back from the adobe install that has the same HASH files. That also might be making AVG flag it as an Virus or Trojan. I might never know though.