Tag Archive for IE7

Emergency IE Patch Released Today


Microsoft typically releases its updates on Tuesday evenings, but today they will be issuing a special patch specifically for Internet Explorer. The patch will be released at 1:00 PM EST. Windows XP users can get the patch downloaded and installed by going to http://windowsupdate.microsoft.com/. Windows Vista users can get the patch by either by going to http://windowsupdate.microsoft.com/ or by clicking “Windows Update” on their Start menu.

What’s the patch for?

The patch fixes a flaw which allows thieves to remotely take over a computer and steal passwords and — potentially — financial information.  The scam works by secretly planting malicious code on hacked Web sites.  The code causes Explorer to crash briefly, then allows thieves to take over the infected computer. Microsoft said one in every 500 computers that use Internet Explorer — up to 2 million computers worldwide — may be infected.

Initially the problem was though to be unique to the current IE7 browser, but it has since been discovered to exist in versions as old as IE5, and even in the upcoming IE8 browser.

Is this a virus?

No, this isn’t a virus. This is an “exploit”.  There is a flaw in the programming of a specific area of the Internet Explorer’s code. It is connected with a HTML web site programming tag called “span”.   The flawed code mishandles the span code, and there are programmers out there exploiting this flaw. The patch fixes the flawed code.

Also, Symantec, the makers of Norton Internet Security and Norton AntiVirus released antivirus signature “Bloodhound.Exploit.219″ and “IPS signature 23241 – HTTP MSIE Malformed XML BO” to protect users against this exploit. These updates were released on Decmber 10, 2008. Yet another reason to keep your anti-virus software and subscription up-to-date.

How Do I Update My AntiVirus?

Norton updates can be found here.
McAfee users can use the Virtual Technician here.

Be aware, if you renew your antivirus subscriptions every year, then your computer is likely to be protected already. Modern antivirus programs update automatically at least 4 times per day so long as your computer is connected to the Internet.

My AntiVirus Is Fine, Do I Need The Patch?

I strongly encourage you to download the patch. Multiple layers of protection work better that single layers.


Post Comments or Questions with the link below. Keep up-to-date with Skylarking: By Email or RSS Newsfeed or on Twitter. You can also send questions with my email form.

Share

Is Google sending you to foreign countries?

Update (12/3/08): The “let us know” link in this article has been repaired.

In my earlier post, “Why is Google sending me to France?”, I discussed a problem many people are experiencing at Google: Being redirected to another country domain. In my case, France or www.google.fr. Skylarking reader, Lulu, has also been experiencing this problem, as well as a few readers over at Martin Brinkman’s Google Hacks blog.

Though many people have suspected spyware or viral activity, I had suggested a misread or misdirected IP address. Yes, spyware could cause such a problem, but Google’s computers read your IP (Internet Protocol) address, and attempt to detect your geographic location based upon that numeric address.

Today, I found to some people over at Google Groups who were commenting on this same problem. The “Google Guide” responded by directing them to the Google Web Search Help article “Connecting to Google: Redirecting to another country domain”.  Here’s what the article had to say:

General information

We normally redirect users in countries other than the United States from http://www.google.com to one of our country-specific sites (e.g. http://www.google.co.uk for Google UK) to provide easy access to country-specific search features. We use your computer’s IP address, which is frequently the Internet address of your Internet Service Provider (ISP), to determine your location and the corresponding Google domain.

If you’d prefer to visit Google.com instead, click the Google.com link on the bottom right-hand side of the Google homepage.

If you have cookies enabled, your browser will connect directly to Google.com on all subsequent visits. For more information on cookies, please visit http://www.google.com/cookies.html and http://www.google.com/privacy.html

Tips to prevent the redirect

If cookies are disabled, you’ll experience the same redirect each time you visit Google. Try these methods to prevent the redirect:

Report incorrect IP detection

Finally, if you feel that we’re detecting your IP address incorrectly, please let us know and we’ll investigate.

Using the “let us know” link will take you to a form where you can report a misdirected IP address to Google. The form asks for your Name, email address, your geographic location (City, State, Country), your IP address, and the Google domain you are being redirected to. I filled in the form this afternoon. I’ll see what happens. It will take time, of course.

If you don’t know your IP address, you can find it by going to http://whatsmyip.org/.

Now I just have to find a way to keep my PC here in New York now that it’s seen France. Oh, Google?


Post Comments or Questions with the link below. Keep up-to-date with Skylarking: By Email or RSS Newsfeed or on Twitter. You can also send questions with my email form.

Share

Question for Verizon Internet Users

Update (2/25/09): Some potential solutions for the Google redirect problem can be found here in a post from 12/02/08.

Dear Skylarking Readers: If you use Verizon for your Internet access, I’d like you to go to www.google.com and search for anything, and see if your search results are redirected to www.google.fr.

Here’s why:

In my earlier post, “Why is Google sending me to France?”, I discussed how my Google searches were being redirected to www.google.fr, Google’s French subsidiary. I, not as clearly as I had hoped, suggested that the problem appears to be related to Google’s computers misreading my IP (Internet Protocol) address as originating in France.

To clarify, my ISP (Internet Service Provider) is Verizon FIOS. So Verizon assigns my computers an IP address whenever I connect to the Internet.

Prior to my Google.fr woes, I had received a phone call from my bank stating they believed someone in France had tried to access my bank account. As I worked with their security expert, he looked further and saw it was a Verizon IP address, and further investigation revealed that the IP address originated in New York, and not in France. The bank computers had misread my New York USA IP address as being a French IP address.

It is my opinion that Google is also misreading the IP addresses. It is my opinion that this problem is specific to Verizon users. Perhaps just FIOS users. Perhaps just users in the metro NY area.

So go to google.com and conduct a search. Let me know if the address bar shows you’ve been redirected to google.fr.

If you have a Google account, make sure you aren’t logged in. If your Google account includes your zip code. That information may be used by Google to track you correctly. Those of you who are being redirected from google.com to google.fr might try signing up for a Google account (www.google.com/accounts). You can edit your personal information to include your zip code.

I’d like to point out that I have checked my computer thoroughly for spyware and viruses. I used both Lavasoft’s Ad-aware and PC Spyware Doctor to scan my system.

Update (2/25/09): Some potential solutions for the Google redirect problem can be found here in a post from 12/02/08.




Post Comments or Questions with the link below. Keep up-to-date with Skylarking: By Email or RSS Newsfeed or on Twitter. You can also send questions with my email form.

Share