Woody Leonhard’s no-bull news, tips and help for Windows and Office
RSS icon Email icon Home icon
  • MS-DEFCON 2: Where we stand

    Posted on April 2nd, 2009 at 06:55 woody 4 comments

    Sanda posted this:

    What about KB960715 which was on hold awhile back. It is still being “offered” to me. Do we “do it” or let it still stay on hold? (I may have missed a post about it.)

    I still say hold off. KB 960715 – the killbit patch – breaks many programs. It isn’t worth installing. Microsoft’s next gigantic IE patch should eliminate the need for setting the killbits.

    Bottom line: If you’ve been following along here, and you applied the February patches, hold off on everything available, except the Windows Defender update, the Junk Mail Filter update(s), and the Malicious Software Removal Tool.

    Reader JS writes:

    Woody, I have been slow to move on SP3. Now with this new virus, I wondering whether I should go ahead with the update? I’ve also held off certain updates in the past based on your “stop-light system” and your update listings. I’m not a major computer user….just email, web searches, word processing…the basic stuff. What you think? Love your tech books !!!

    If you haven’t been following along here, and you haven’t applied patches (such as Windows XP Service Pack 3) for a long time, get patched up. Apply every patch out there. And do it now. It’s better to get completely patched than to have one of the “low hanging fruit” security holes present on your system.

    I’m still ambivalent about Windows XP Service Pack 3, in particular: if you’ve been keeping your system patched, it has very little to offer. But if you haven’t patched in many months, you should apply SP3 and everything else you can get your hands on. (Except for hardware driver patches, which are a different can of worms entirely.)

    Once you’ve gotten your system patched, keep an eye out here for the latest updates. It could save you a lot of headache.

     

    4 responses to “MS-DEFCON 2: Where we stand”

    1. MS should offer an end-user version of MS08-070 because that will fix many of the broken applications, because as I said before, kill bits delibrately break ActiveX controls because they contain security vulnerablities. Unfortunately, the current MS recommendation means that vendors have to repackage broken applications with the new ActiveX controls.
      Considering how many apps use the broken ActiveX controls, that is nowhere near feasible.

    2. Woody – please, when writing items for this process (AskWoody.com), turn off your Dummies mind set. Cutsy text doesn’t cut it for me. I need to see the King’s English, in all its glories. In this item, you tell (on 04-02-09) JS to apply any and all patches existing on his/her PC. Hello, am I to do the same? I am holding off on 958690, 959772, and 960225.
      Your items need to address the current situation for your entire audience. We read all your items, daily.

    3. RK -

      My advice to JS is “If you haven’t been following along here, and you haven’t applied patches (such as Windows XP Service Pack 3) for a long time, get patched up.”

      That’s true in general: anybody who hasn’t been applying patches for months or years should take the plunge, apply all available patches, and do it now. The chances of getting bitten by a bad patch are far outweighed by the chances of getting infected, particularly for patches that have been hanging around for a long time.

      As for the writing style… I’m proud to be a dummy. I try to make my writing clear – and NOT boring. Sorry, but that’s how I’ve always been.

    4. Update KB969898 will kill the MSCOMM32.ocx control in Excell VBA applications

    Leave a reply