WinPatrol v28.1.2013 was released to add several enhancements as well as to include several fixes to version 28.
Enhancements:
Allows WinPatrol to start for current user or all users.
Reduced monitoring during all sleep states to save battery usage.
Improved handling of repeating changes made by partner programs.
Speeds up real-time detection.
Fixes:
Fixed Reset function to remove duplicate Scotty icons.
Fixed Reset function to remove duplicate Uninstall entries.
Fixed bug in system tray icon behavior that could have produce unknown results.
Fixed "Automatically Run WinPatrol..." option so it doesn't always launch on boot
WinPatrol runs on Windows XP, Windows Vista, Windows 7 and Windows 8, including x64 versions, and can be installed directly over your current WinPatrol.
There is no need to remove your previous version or reactivate WinPatrol PLUS.
Today Microsoft released KB2840149 to replace KB2823324.
Microsoft stopped pushing KB2823324 via Windows Update and removed it from the download center after issues were reported on Windows 7 and Windows Server 2008 with certain third-party software.
If you uninstalled KB2823324, the replacement is now available for MS13-036.
What can you do when you need to quickly create several new slides for a PowerPoint presentation and Microsoft Office is installed on your computer at home, not the computer you are using now? Microsoft Office Web Apps to the rescue!
Other examples of occasions ideally suited for Microsoft Web Apps include team projects such as managing a Little League team or planning the
neighborhood street party that involve multiple people needing the ability to
work from the same file. Microsoft Office Web Apps are also a perfect solution for people who seldom need to create a Word, Excel or other Office document.
Microsoft Office Web Apps are a simple way to
create a Word document, Excel spreadsheet, PowerPoint presentation or
OneNote notebook while on the go, save the file to SkyDrive and then email the
file with Outlook.com or do additional editing later with Microsoft Office.
Creating Microsoft Office Web Apps
These simple steps illustrate how easy it is to create Microsoft Office Web Apps. All you need to get started is a free Microsoft Account, an Internet connection and you are ready to go.
There are two ways to access Microsoft Office Web Apps.
1. If you are already logged on to Outlook.com, merely click the arrow to the right of then click the SkyDrive icon.
After SkyDrive opens, click Create and select the type the type of file you need to create.
2. The second method is to go to Office.com click the "My Office" link and sign on with your Microsoft Account.
Scroll past your SkyDrive files and click the appropriate icon located under the Create New heading, depending upon the type of file you need to create.
Whether you access Microsoft Office Apps directly from SkyDrive or from the Office.com portal, the rest of the steps are the same.
Using Word as an example, a blank document will open with all of the standard formatting tools you are accustomed to finding in the ribbon readily available, including spell check!
Split between the two screen captures below is a copy of some of the formatting features available in the Microsoft Word Office App.
When you have finished creating your document, merely click the save icon or File > Save.
Share the File
After you have finished creating/editing your document, it is just as easy to share the file with team members, co-workers, family, etc., as appropriate as it was to create the document.
If you are ready to share the document, you can do it right from SkyDrive. Merely click "Share" and you can type in an email address or use one already in your Outlook.com address book.
Select whether the recipient(s) need the ability to Edit the document. If it is a business file, check the requirement that recipients need to sign in.
You can also attach the document to an email from Outlook.com. Merely create your email and click the paperclip. Click your SkyDrive app and select the document. At this point, you can elect to send the file using SkyDrive or attach the file, in which case the recipient can download the document.
Are You Ready Now?
You can see how easy it is to use Microsoft Web Apps. Give it a try and if you have questions, leave a comment. I'd also love to hear from you if you use Microsoft Office Web Apps for a group or team project.
Update: This short video by MSFTOutlookillustrates the simplicity of combining Outlook.com, SkyDrive and Microsoft Office apps in your everyday life:
Update 2: Consumer Camp is an excellent resource for, you guessed it, consumers! The purpose of Consumer Camp is to "showcase Microsoft’s consumer-facing technologies, through education and engagement."
To learn even more about Microsoft Web Apps, set aside 15 minutes and visit the link below to watch the Office Team's video shared by my friend and fellow Microsoft MVP, Marques Lyons: Getting things done with Office Web Apps.
~ ~ ~ ~ ~ ~
Note: I am a SkyDrive and Outlook.com Insider. If you have a question about this article, please leave a
comment and I'll do my best to assist.
Learn more about the SkyDrive Insiders program here.
Learn more about the Outlook.com Insiders program here.
The recent rumor about the addition of two-step verification being added to the Microsoft Account was true. The announcement about this and other changes to Outlook.com made in The Official Microsoft Blog and the Outlook Blog are both welcome as well as exciting.
The most exciting from a security viewpoint is the addition of an optional two-step authentication added to Microsoft Account.
Two-Step Authentication added to Microsoft Account
By far, this is the most welcome change being made. Among the most popular articles here at Security Garden relate to Hotmail security, particularly the two-year old article relating to a hacked Hotmail account.
With two-step verification, often referred to as two-factor authentication, 2FA or TFA, two pieces of information
are need to access your Microsoft Account. Both your password plus a code
sent to a phone or email address on file as security information are needed. Thus, if your device is lost or stolen or your Microsoft Account password compromised, access to your important information is not possible without that second piece of information.
The two-step verification will work on any device where you use your Microsoft
account, including Windows 8, any Web browser, as well as Microsoft apps and
services on iOS and Android devices.
Important: It is on your shoulders to keep the security information in your Microsoft Account updated. It is necessary to update your Microsoft Account before you cancel the alternate email address or phone.
If you lose access to your secondary security proof, customer support cannot update it for you and it will be necessary to go through a recovery process that enforces a 30-day wait before you
are able to regain access to your account. This is done to ensure someone malicious has not used
this as a way to take over your account.
In addition, if you lose access to your
password AND all your security information, you will not be able to regain
access to your account.
Because the servers are grouped into hundreds of clusters, and
only one cluster is upgraded at a time, when the server your account is
on has been updated, you will find the option to add two-step
verification at https://account.live.com/proofs/Manage.
A welcome addition with the update to Outlook.com is the ability to sign in with any alias that you have connected to your account. The process of adding and managing aliases has been simplified, including better advice on when it is better suited to add an alias or rename your primary alias.
The last bit of news is the addition of 32 new @Outlook email address domains. This will provide the ability to have an @Outlook address unique to your country.
Detailed information about this addition is available in the below-referenced articles.
~ ~ ~ ~ ~ ~
I am an Outlook.com Insider. If you have a question about this post or Outlook.com, please leave a
comment and I'll do my best to assist. Learn more about the Outlook.com Insiders program here.
The release of WinPatrol 28 includes additions requested by users of WinPatrol. Of particular interest are the WinPatrol Maintenance and Reset Tools, accessible from the "Reset" link on the Plus tab. The tool to solve the issue of more than one Scotty icon in the System Tray is likely to be very popular.
My favorite addition is the Plus Info search box added to the Plus tab. There have been occasions when helping others that I would have found this very useful.
The addition of Automatic (Delayed Start) for Windows Services will serve to speed start-up time for automatic services that can be delayed during the boot up operation.
From the Services tab, sort by Company name. Any Microsoft services that can be delayed, will have the new option available in WinPatrol. Merely click the service to select it and then click Info.
WinPatrol runs on Windows XP, Windows Vista, Windows 7 and Windows 8, including x64 versions, and can be installed directly over your current WinPatrol.
There is no need to remove your previous version or reactivate WinPatrol PLUS.
Oracle released the schedules critical security updates for its Java SE Runtime Environment software.
Application authors and vendors have been encouraged to sign code with a
certificate from a trusted Certificate Authority. Thus, as part of this update to Java SE 7u21, a change to the Java browser plug-in behavior has been introduced.
Java users will be presented with a dialog(s) that will provide additional
information regarding the certificate, providing the opportunity to continue or terminate
execution.
If Java is still installed on your computer, it is recommended that this update be applied as soon as possible due to the threat posed by a successful attack.
Java Security Recommendations
1) In the Java Control Panel, set the security to high.
2) Keep Java disabled until needed. Uncheck the box "Enable Java content in the browser" in the Java Control Panel.
Note: UNcheck any pre-checked toolbar and/or software
options presented with the update. They are not part of the software
update and are completely optional.
Critical Patch Updates
For Oracle Java SE Critical Patch Updates, the next scheduled dates are as follows:
A problem has been reported with security update 2823324 on Windows 7 and Windows Server 2008, part of the update in security bulletin MS13-036. As a result, Microsoft has pulled that update from the download center.
Mozilla sent Firefox Version 20.0.1 to the release channel. The primary reason for the update is to fix the problem many users experienced with the search bar being unusable.
FIXED -- 20.0.1 - Windows-only update to handle issues around handling UNC paths (see bug 846848)
Update
To get the update now, select "Help" from the Firefox menu at the upper left of the browser window, then pick "About Firefox." Mac users need to select "About Firefox" from the Firefox menu.
If you do not use the English language version, Fully Localized Versions are available for download.
Adobe Flash Player was updated today. The scheduled release includes new features, security fixes and bug fixes.
With today's Windows Update, Internet Explorer 10 in Windows 8 and Windows RT is being updated to enable Flash content
to run by default. On Windows 8, all Flash content continues to be
enabled for IE on the desktop. Additional information is available in the IE Blog post, Flash in Windows 8.
Update Information
The newest versions are as follows:
Windows and Macintosh: 11.7.700.169
Linux: 11.2.202.280
Adobe AIR
3.7
Release date: April 9, 2013 Vulnerability identifier: APSB13-11 Platform: All Platforms
Flash Player Update Instructions
Flash Player for Windows, Macintosh and Linux
Although Adobe suggests downloading the update from the Adobe Flash Player Download Center or by using the auto-update mechanism within the product when prompted, if you prefer, direct download links are available.
If you use the Adobe Flash Player Download Center, be careful to uncheck any optional downloads that you do not want. Any pre-checked option is not needed for the Flash Player update.
Uncheck any toolbar offered with Adobe products if not wanted.
If you use alternate browsers, it is necessary to install the update for both Internet Explorer as well as the update for alternate browsers.
The separate 32-bit and 64-bit uninstallers have been replaced with a single uninstaller.
Adobe Flash Player for Android
The latest version for Adobe Flash Player for Android is available by downloading it from the Android Marketplace by browsing to it on a mobile phone.
Verify Installation
To verify the Adobe Flash Player version number installed on your computer, go to the About Flash Player page, or right-click on content running in Flash Player and select "About Adobe Flash Player" from the menu.
Do this for each browser installed on your computer.
To verify the version of Adobe Flash Player for Android, go to Settings > Applications > Manage Applications > Adobe Flash Player x.x.
Adobe Shockwave Player
Adobe has released a security update for Adobe Shockwave Player
12.0.0.112 and earlier versions on the Windows and Macintosh operating
systems.
This update addresses vulnerabilities that could allow an
attacker, who successfully exploits these vulnerabilities, to run
malicious code on the affected system.
Although I have yet to need Shockwave Player on this computer, there are
still many people who use it. If you have Shockwave Player installed,
please update to the latest version.
Release date: April 9, 2013 Vulnerability identifier: APSB13-12 CVE number: CVE-2013-1383, CVE-2013-1384, CVE-2013-1385, CVE-2013-1386 Platform: Windows and Macintosh
The newest version 12.0.2.122 is available here: http://get.adobe.com/shockwave/. As usual, watch for any pre-checked add-ons not needed for the update.
Microsoft released nine (9) bulletins. Two bulletins are identified as Critical with seven bulletins rated Important.
The critical bulletins address 20 vulnerabilities in Microsoft Windows and Internet Explorer.
The bulletins rated Important address issues in Microsoft Windows, Office, Antimalware Software*, and Server Software.
*It is important to note that MS13-034 only applies to Windows Defender for Windows 8 and Windows RT. No other security products are affected.
Support
The following additional information is provided in the Security Bulletin:
The affected software listed have been tested to determine which versions are affected. Other versions are past their support life cycle. To determine the support life cycle for your software version, visit Microsoft Support Lifecycle.
The products listed in the table below are major products reaching end of support in the next six months. Of significance is Windows 7 operating systems without Service Pack 1 (SP1) installed. If you have not updated or are not sure if you have SP1 installed, see Windows 7 Service Pack 1 (SP1) Added to Automatic Update which includes instructions on how to check if it has been installed.
As a reminder, end of support is just a year away for Windows XP SP3 and Office 2003. Support for Windows XP SP3 and Office 2003 ends on April 8th, 2014.
What does it mean when support ends?
The most significant change is that the end of support means that there will be no new security updates. There will also not be any
non-security hotfixes, free or paid assisted support options, or online
technical content updates.
From the Microsoft Support Lifecycle Policy Newsletter:
The following list represents some of the products reaching
end of support in the next 6 months. For a comprehensive list of
Microsoft products and their lifecycle policy timelines, please search
the Support Lifecycle Product Database.
Product
End Date
SQL Server 2000 SP4
April 9, 2013
Windows Server Amp
Web Server 2008 R2
April 9, 2013
Windows 7 SP0*
April 9, 2013
Visual FoxPro 8.0 Professional Edition
April 9, 2013
Commerce Server 2002
July 9, 2013
Dynamics SL7 SP3
July 9, 2013
SharePoint Services 2.0
July 9, 2013
Visual J# .NET 1.1 Redistribution Package
July 9, 2013
Windows Automotive 4.2
July 9, 2013
Windows CE .NET 4.2
July 9, 2013
* After
April 9, 2013, no Security Updates will be issued for Windows 7 RTM. To
remain secure, and continue getting Security Updates, customers are
encouraged to upgrade to Windows 7 SP1.
On Tuesday, April 9, 2013, Microsoft is planning to release nine (9) bulletins. Two bulletins are identified as Critical with seven bulletins rated Important.
The critical bulletins will address vulnerabilities in Microsoft Windows and Internet Explorer. The bulletins rated Important and will address issues in Microsoft Windows, Office, Antimalware Software, and Server Software.
I don't recall previously seeing a security bulletin for Antimalware Software. The Advance Notice indicates that the Important update is for Windows Defender for Windows 8 and Windows RT.
As happens each month, Microsoft will also release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.
In the event you missed the announcement, Windows Live Messenger was retired on March 15, 2013. In its various iterations from 1999 to 2013 the Messenger client has had a long life but now is on the way out, replaced by Skype.
April 8, 2013, marks the beginning of the upgrade to English-language clients, reportedly ending somewhere around the end of the month with Brazilian Portuguese-language clients, although it may take longer than reported.
In addition to this change not affecting China, it is important to understand that it is not the Messenger service that is integrated in Windows Phone and Xbox and used by third-party programs that is ending, rather it is the desktop client.
Updating to Skype
The first step in updating Messenger to Skype is, as expected, downloading the latest version of Skype. As with any software installation, it is important to watch the screens during the installation process rather than blindly clicking through the process.
Things You May See During Skype Installation:
Skype at Start-Up: Along with the usual agreement of terms of use and privacy policy, the initial installation screen may include the pre-checked option to have Skype launch when the computer starts. If you would rather not have Skype launch at start-up, uncheck that box.
Bing: There may also be an option to make Bing your default search engine. If you do not wish to make Bing your default search engine, uncheck that option.
When presented with the screen to sign in with your Microsoft Account, this is the same username and password that you used for Messenger and will include all of your Messenger contacts.
To view the series of screens I saved when updating Windows Live Messenger to Skype several months ago, you can see the uploaded collection at Updating from Messenger to Skype.
Categories and Groups
For users of categories and groups in Messenger, note that they do not
migrate to Skype. If you have set up multiple categories and/or groups,
you may want to either make a list or a screen copy of the members.
Then, after updating to Skype, do the following:
Right-click on the contacts tab.
Select "Create new list" and name the list.
Right-click your contacts name to add to the newly created list.
Reminder: No emergency calls with Skype
For users of Skype calling, please remember that Skype is not a replacement for your telephone and cannot be used for emergency calling.
The long-awaited Outlook.com calendar refresh has been released and is in the process of being rolled out.
Because the servers are grouped into hundreds of clusters, and
only one cluster is upgraded at a time, if you do not see the refreshed calendar yet, please be
patient it is on the way!
Improved Updating
In addition to a design refresh, improvements have been made to both navigating and accessing your calendar faster, including the following:
add or or edit events with a single click
enter an event by
dragging your mouse across the time or date range
add
tasks without opening a new page
jump to a particular day simply by
clicking the date
Easy Access
Accessing your Outlook.com calendar is easy. From any address bar, just go to https://calendar.live.com/ and log on to your Microsoft account. If you are already logged on and checking your e-mail, contacts or files in SkyDrive, access to your calendar is click on the arrow to the right of the icon
then click the Calendar icon to see your calendar.
Connecting to your Outlook.com mail or calendar is also easy from your various mobile devices, including Windows Phone, iPhone, iPad, or iPod Touch or Android! Simple instructions are available at Mobile - Microsoft Windows.
Update: I am now an Outlook.com Insider. If you have a question about this post or Outlook.com, please leave a
comment and I'll do my best to assist. Learn more about the Outlook.com Insiders program here.
Mozilla sent Firefox Version 20 to the release channel. Included in the update are eleven (11) critical security updates.
Fixed in Firefox 20
MFSA 2013-40
Out-of-bounds array read in CERT_DecodeCertPackage MFSA 2013-39
Memory corruption while rendering grayscale PNG images MFSA 2013-38
Cross-site scripting (XSS) using timed history navigations MFSA 2013-37
Bypass of tab-modal dialog origin disclosure MFSA 2013-36
Bypass of SOW protections allows cloning of protected nodes MFSA 2013-35
WebGL crash with Mesa graphics driver on Linux MFSA 2013-34
Privilege escalation through Mozilla Updater MFSA 2013-33
World read and write access to app_tmp directory MFSA 2013-32
Privilege escalation through Mozilla Maintenance Service MFSA 2013-31
Out-of-bounds write in Cairo library MFSA 2013-30
Miscellaneous memory safety hazards (rv:20.0 / rv:17.0.5)
NEW -- Ability to close hanging plugins, without the browser hanging
CHANGED -- Continued performance improvements around common browser tasks (page loads, downloads, shutdown, etc.)
Additional changes are included in the Release Notes, linked below.
Update
To get the update now, select "Help" from the Firefox menu at the upper left of the browser window, then pick "About Firefox." Mac users need to select "About Firefox" from the Firefox menu.
If you do not use the English language version, Fully Localized Versions are available for download.
