Happy Xmas all -- but please read this and install

jimbo45 · 25 Dec 2010

Hi all
Happy Xmas everyone

Read this and I'd install the tool if applicable to your system.
BBC News - Microsoft warns on IE browser bug

Threats ARE becoming more sophisticated but so are the defences.

The Enhanced Mitigation Experience Toolkit 2.0 is Now Available - Security Research & Defense - Site Home - TechNet Blogs

Cheers all

Enjoy your Xmas Dinner etc etc and don't drink too much champagne.

Good luck all for 2011

jimbo

n0th1n9 · 25 Dec 2010

Thanks Jimbo.

Let's say that IE does get exploited, wouldn't UAC put a stop to it? Granted that you didn't give the OK. IE doesn't run as an admin so I don't see how this exploit could take control of your computer as long you said no when the UAC prompt comes up.

Several months ago while not using an antivirus, when I was surfing the net UAC would pop up every ten seconds after denying the install. I suspected that this was a breach within IE but was stoped via UAC.
With UAC inplace you can stop 100% percent of all auto installs (my perception) but this does not negate the need for antivirus; because of the fact the we will install programs that are seemingly safe while not knowing that there maybe be hiden functionality built into the software.

Hopalong X · 26 Dec 2010

Microsoft direct download.

Download details: Enhanced Mitigation Experience Toolkit v2.0

Flik · 27 Dec 2010

I've installed the tool mentioned above, do I have to conifgure it in any way or is it ok to leave it with the defaults?

Ivan the SoSo · 27 Dec 2010

n0th1n9 said:

Thanks Jimbo.

Let's say that IE does get exploited, wouldn't UAC put a stop to it? Granted that you didn't give the OK. IE doesn't run as an admin so I don't see how this exploit could take control of your computer as long you said no when the UAC prompt comes up.

Several months ago while not using an antivirus, when I was surfing the net UAC would pop up every ten seconds after denying the install. I suspected that this was a breach within IE but was stoped via UAC.
With UAC inplace you can stop 100% percent of all auto installs (my perception) but this does not negate the need for antivirus; because of the fact the we will install programs that are seemingly safe while not knowing that there maybe be hiden functionality built into the software.

Some viruses can grant themselves admin permissions...even if you not running a admin account

logicearth · 28 Dec 2010

Ivan the SoSo said:

Some viruses can grant themselves admin permissions...even if you not running a admin account

However to do so with IE would require attacker to poke a hole though the sandbox. This sandbox runs with super low privileges and I do mean super low. Of course if you have Flash installed that may be easy...but then that is a hole in Flash and not IE...*shrugs*