Microsoft Security Tips & Talk Blog

A relative recent addition to Microsoft activities is blogging on the various software programs and systems. I subscribe to quite a few of the MSDN blogs. Now there is a blog specifically created for the home computer user.

Security Tips & Talk provides guidance on how to protect your computer, laptop, PDA, etc. from spyware, viruses, etc. Learn about identity theft and protection from spam and phishing. Should you miss it here at Security Garden, you will also be able to keep track of Microsoft security updates. The blog is hosted by the Microsoft team that publishes the Security at Home site.

Stolen Microsoft XBox 360's & Video Marketplace Difficulties

Unless the thieves are caught, there will be quite a supply of Microsoft XBox 360's on the black market in England for Holiday shopping! From Express and Star:

"More than one million pounds worth of Xbox consoles have been stolen from a Lichfield depot over the last four days, it was revealed today. Police believe thieves are stealing the games machines to sell ahead of Christmas when they are in high demand. Thieves hijacked a lorry load of £750,000 worth of Xbox consoles on the A38 after it left a distribution depot in Fradley yesterday.
Police revealed today that another theft took place at the Hellmann Worldwide Logistics depot on Thursday morning when a £40,000 trailer containing £260,000 of Xbox consoles was taken.
Staffordshire Police spokesman Peter Stevens said: “They are in high demand and cost between £200 and £300."

This follows the technical difficulties experienced with the new Microsoft Video Marketplace for the favorite game machine. If you have run into similar problems, keep tabs on the official XBox Forums:

"As you know, we have been experiencing technical difficulties associated with the extremely high number of downloads from the Video Marketplace service over the past 24 hours. We understand these technical issues have resulted in a very unpleasant experience for our members, including extremely slow downloads or not receiving the content they purchased.
We’ve made progress over the past 24–hours, and the team is dedicated to fixing the issues and continues to work as fast as they can around the clock to get the service running as seamlessly as you have come to expect.
We strongly encourage all folks who have experienced an error message or did not receive a download they purchased to call customer support at 1-800-4MYXBOX."

Adobe Flash Player Update

Adobe has released updates for Adobe Flash Player for Windows, Macintosh and Linux. 

The "Release Notes", indicate that there are no impacted deliverables in the update. Both Flash Player and AIR updates include new functionality and important bug fixes. 

With today's Windows Update, Internet Explorer 10 and 11 in Windows 8 and Windows 8.1 Preview are also updated.  Windows RT must obtain the update from Windows Update.

Update Information

The newest versions are as follows:

Windows and Macintosh:  11.9.900.117
Linux: 11.2.202.310

Adobe AIR:  3.9.0.1030

Flash Player Update Instructions

Warning:  Although Adobe suggests downloading the update from the Adobe Flash Player Download Center, that link includes a pre-checked option to install Google Drive.

It is recommended that you either use the auto-update mechanism within the product when prompted, or my preference, the direct download links.

• Non-IE (Opera, Firefox, Etc.):  http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_11_plugin.exe
   
• Windows XP, Vista and 7:
  Flash Player For Internet Explorer 7, 8, 9, 10:  http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_11_active_x.exe
  
  Windows 8 and 8.1:
  Flash Player for Internet Explorer 10 and 11: Microsoft updated Security Advisory 2755801.  If you do not have Automatic Updates enabled, the Flash Player update can be downloaded from Microsoft Security Advisory: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10: July 9, 2013.
  
  
• Flash Player Uninstaller:  http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe

Notes:

• If you use the Adobe Flash Player Download Center, be careful to uncheck any optional downloads that you do not want.  Any pre-checked option is not needed for the Flash Player update.
• Uncheck any toolbar offered with Adobe products if not wanted.
• If you use alternate browsers, it is necessary to install the update for both Internet Explorer as well as the update for alternate browsers.
• The separate 32-bit and 64-bit uninstallers have been replaced with a single uninstaller.

Adobe Flash Player for Android

The latest version for Adobe Flash Player for Android is available by downloading it from the Android Marketplace by browsing to it on a mobile phone.   

Verify Installation

To verify the Adobe Flash Player version number installed on your computer, go to the About Flash Player page, or right-click on content running in Flash Player and select "About Adobe Flash Player" from the menu. 

Do this for each browser installed on your computer.

To verify the version of Adobe Flash Player for Android, go to Settings > Applications > Manage Applications > Adobe Flash Player x.x.

Advance Notice - Microsoft Updates for May 2007

On Tuesday, 8 May 2007, Microsoft is planning to release updates affecting Microsoft Windows, Office, Exchange, CAPICOM and BizTalk.

Of important note, there has been no change since the update provided recently with regard to Security Advisory 935964. (See Update on Microsoft Security Advisory 925964, including consolidated list of update links.)

Security Updates

• Two Microsoft Security Bulletins affecting Microsoft Windows. The highest Maximum Severity rating for these is Critical. These updates will require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer.

• Three Microsoft Security Bulletins affecting Microsoft Office. The highest Maximum Severity rating for these is Critical. These updates may require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer.

• One Microsoft Security Bulletin affecting Microsoft Exchange. The highest Maximum Severity rating for these is Critical. These updates will not require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer.

• One Microsoft Security Bulletin affecting CAPICOM and BizTalk. The highest Maximum Severity rating for these is Critical. These updates will not require a restart. These updates will be detectable using the Microsoft Baseline Security Analyzer and the Enterprise Scan Tool.

Microsoft Windows Malicious Software Removal Tool

• Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center.
  
  Note that this tool will NOT be distributed using Software Update Services (SUS).

Non-security High Priority updates on MU, WU, WSUS and SUS

• Microsoft will release 1 NON-SECURITY High-Priority Update for Windows on Windows Update (WU) and Software Update Services (SUS).

• Microsoft will release 6 NON-SECURITY High-Priority Updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

No Charge for Windows Genuine Advantage

I learned from fellow MVP, Donna Buenaventura, that Symantec has identified as Trojan.Kardphisher. The Trojan is installed when the PC is restarted. A window appears that has been designed to look like the Windows Genuine Advantage (WGA) Activation Form.

There are two options presented on the form -- activate now or later. According to Symantec, it isn't possible to run Task Manager or any other applications. Choosing no results in immediate shutdown of the computer. Selecting yes presents an activation window, but not quite what is provided by Microsoft.

The trojan window requests credit card information. Microsoft does NOT request credit card information for WGA Activation. Do not be tricked into providing credit card information. Instead, update your antivirus software and run a full system scan. If you need assistance, visit one of the ASAP Member Sites.

Security Tips To Keep You Safe While Traveling

Do you travel for business or have a family holiday approaching?
Do you plan on taking your laptop with you to complete a project?
Will you be logging in on a public computer to check your personal email?
Will you need access to your company's network?

As "The Gonz" indicates in his article, Security Tips To Keep You Safe While Traveling,

"It is easy to be complacent when traveling. And, unfortunately, there are plenty of people out there willing to take advantage of this fact. By taking a few extra moments to think about what needs to be protected, take inventory of your technology rich possessions, and take the extra time to protect your data, you will ensure a more worry-free travel experience."

See the complete article, chock full of suggestions to protect both personal and business data, at Gonzo's Garage - Computers and One-Liners: Security Tips To Keep You Safe While Traveling.

Vista, Windows Calendar and UAC Tutorials

I delayed adding the three-part "Windows Calendar" tutorial preapred by Vista4Beginners because I had not decided on the bookmark category to place the links. Now that I have created the new Windows Mail page, it occurred to me that calendar would be a nice accompanyment.

As a result, the new bookmark page has been renamed "Windows Mail and Calendar" where you can find The complete guide to the Windows Calendar by Vista4Beginners bookmarked. I also added several other Vista Windows Calendar bookmarks that you may find useful.

Today, Vista4Beginners added another helpful tutorial, "Manager User Accounts". The tutorial illustrates how simple it is to create a new user account, change the account type, password, and more. This tutorial, along with several others on UAC and other security features of Windows Vista, can be found bookmarked at Vista Security Features.