Security Advisory 2953095 for Microsoft Word 2010

Microsoft released Security Advisory 2953095 which relates to a vulnerability in Microsoft Word. At this time, Microsoft is aware of limited, targeted attacks directed at Microsoft Word 2010.

With the vulnerability, an attacker could cause remote code execution if someone was convinced to open a specially crafted Rich Text Format (RTF) file or a specially crafted mail in Microsoft Outlook while using Microsoft Word as the email viewer.

Recommendations 

Users of Microsoft Word 2010 are encouraged to apply the Microsoft Fix it solution.  If you use Outlook, follow the Office help instructions to Read email messages in plain text.

 

Enable Fix it	Disable Fix it
Microsoft Fix it 51010	Microsoft Fix it 51011

Another option is to install the Enhanced Mitigation Experience Toolkit (EMET), with instructions provided in the Security Research and Defense Blog article referenced below.

References:

• CVE Reference:  CVE-2014-1761
• Microsoft KB Article 2953095: Microsoft security advisory: Vulnerability in Microsoft Word could allow remote code execution
• MSRC: Microsoft Releases Security Advisory 2953095
• Security Research & Defense: Security Advisory 2953095: recommendation to stay protected and for detections
• Tech Net Advisory:  Microsoft Security Advisory (2953095) Vulnerability in Microsoft Word Could Allow Remote Code Execution

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

MBAM - Malwarebytes Anti-Malware Version 2.0

The long-awaited Malwarebytes Anti-Malware Version 2.0 has been released!

Changes to MBAM Version 2.0

Highlights of the changes to MBAM Version 2.0 include the following:

• Redesigned Interface
• Improved Anti-Rootkit and Chameleon Self-protection Technologies
• Rewritten Malicious Website Blocking
• Improved 64-bit Support
• Detection and Removal Engine Improved
• Renamed Malwarebytes Anti-Malware Pro to Malwarebytes Anti-Malware Premium
• The scan types have had a name change.  Generally, all that is needed is a Threat Scan.
   -- Flash Scan is now called Hyper Scan
   -- Quick Scan is now called Threat Scan
   -- Full scan is now called Custom Scan

Subscription Licensing Model

The free version of MBAM continues to be available.  However, with the launch of Version 2.0, comes a move to a subscription licensing model, $24.95 per year for three (3) computers.  

This change is due to the high popularity of MBAM resulting in the need to cover costs in bandwidth, hosting fees, infrastructure, salaries of researchers, QA department and more, which have grown immensely.

Existing Lifetime Licenses Honored

It is important for those who already have a lifetime license purchased for version 1.x to know that those licenses will continue to have a lifetime license for 2.0.

It has also been announced that a few thousand more lifetime licenses will be available soon as a special offer. See Marcin's announcement at Malwarebytes Unpacked, Malwarebytes Anti-Malware 2.0!.

Malwarebytes Anti-Malware Version 2 supports Windows XP, Windows Vista, Windows 7 and Windows 8/8.1, 32- and 64-bit.

References

• Get the update here:  Malwarebytes Anti-Malware 2.0
• Malwarebytes Anti-Malware 2.0 FAQ's
• Malwarebytes Anti-Malware 2.0 Help Documentation
• Press Release

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

WinPatrol 2014 Updates

WinPatrol developer, Bill Pytlovany, has been busy updating WinPatrol this past week.

On March 16, WinPatrol was updated to version 30.5.2014.0.  Today, WinPatrol was updated to version 30.5.2014.1 to fix errors with Delayed Start programs on x64 version of Windows. Affected programs originally set to run from HKey Local Machine registry.

As outlined at WinPatrol/upgrade, the fixes and changes included in version 30.5.2014.0 are as follows:

Check for Safe Updates

This feature was added to the PLUS tab/page.  In addition to checking for new versions of WinPatrol, it has been expanded to include version checks for a number of popular software packages. 

Clicking the button your version of popular software packages will be compared against the newest safe version available. If updating is recommended you'll see a safe link to the official download page for the software. 

The WinPatrol PLUS Safe Update Engine will also warn you about these threats and show you sample screen shots of what you might expect.

   

This is the report I received when I clicked the Check for Safe Updates button:

Verify WinPatrol Version

You have WinPatrol version:	30.5.2014.1:30.5.2014.1
Newest version is :	30.5.2014.1:30.5.2014.1

You have the latest version of WinPatrol.

Thank you for your support by upgrading to WinPatrol PLUS.

WinPatrol PLUS Version Safe Update Engine

   WinPatrol reports you are using Windows 7
   This is based on its internal version of 6.1.7601.

You have a 64 bit version of Windows.
When downloading software choose the x64 or 64 bit version.

You appear to have the latest version of Internet Explorer: 11.00.9600.16428
No security updates are required for this version.

Internet Explorer provides a No Tracking feature that we recommend. If you'd like more information on tracking Click Here

 Nice confirmation that I haven't missed something!

Restore Deleted Files

This feature was added following feedback by radio host Kim Komando.  As Bill explained, "In a recent article Kim recommended WinPatrol but strongly warned her audience about the dangers of using WinPatrol to delete files that may be required."

Now, in addition to the long-time feature provided in History that provides the ability to restore Start Up programs, Hidden Files can be restored:

"Hidden files will now be stored in a WinPatrol vault. We will also include a command line script that can be used to restore any files that were hidden. The command-line scripts are created in a worse-case scenario when a file is deleted which is required for Windows to run by Windows. The script or .bat file can be run in safe mode or a command-line mode."

PLUS Upgrade Discount for Windows XP

The new Safe Update engine will also detect which version of Windows you're running. If WinPatrol detects you are still running Windows XP, you'll see a link to a special Windows XP sale page. The name of this page will routinely change but it will have a PayPal button that allows you to upgrade to WinPatrol PLUS for only $2.00 USD.

Dialog Format and Positioning

Improvements are continuing on positioning of components within a WinPatrol dialog screen.

WinPatrol runs on Windows XP, Vista, Windows 7 and Windows 8/8.1, including x64 versions. Download WinPatrol 30.1.2014 now!

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...