eburger68
Premium,MVM
join:2001-04-28
edit:
December 28th, @11:35PM
| IE-SPYAD Interim Update - 28 Dec. 2005
Hi All:
Attached to this post is an interim update to IE-SPYAD designed to address new domains related to the Windows MetaFiles (WMF) exploit discussed in these postings:
»Windows MetaFiles still vulnerable
»sunbeltblog.blogspot.com/2005/12···hed.html
»sunbeltblog.blogspot.com/2005/12···ild.html
»sunbeltblog.blogspot.com/2005/12···oit.html
»sunbeltblog.blogspot.com/2005/12···oit.html
Most of the domains related to this new exploit are already included in the latest full version of IE-SPYAD (released Dec. 27):
»https://netfiles.uiuc.edu/ehowes/www/res···#IESPYAD
»https://netfiles.uiuc.edu/ehowes/www/res···SPYAD_ZO
Users who have not installed the Dec. 27th version of IE-SPYAD should do so ASAP. This interim update is designed to supplement the Dec. 27th update, not replace it.
Please note that not all of the domains included in this interim update are related to the WMF exploit. Non-related domains are included in order to offer additional protection against unwanted installations of unwanted software at potentially malicious web sites. All of the domains included in this interim update will be included in the next full update to IE-SPYAD.
**Instructions**
Before installing this interim update, please ensure that you have installed the last full version of IE-SPYAD, dated Dec. 27:
»https://netfiles.uiuc.edu/ehowes/www/res···#IESPYAD
»https://netfiles.uiuc.edu/ehowes/www/res···SPYAD_ZO
As this interim update is designed to be installed on top of an existing IE-SPYAD installation, do NOT uninstall your current version of IE-SPYAD before installing this interim update.
Users of IE-SPYAD for ZonedOut should also use this interim update -- there will be no separate update file for IE-SPYAD for ZonedOut.
To install:
1. Close any open sessions of Internet Explorer.
2. Double-click on the file IESPYAD_051228.REG.
3. When Windows asks you whether you want to add the information contained in the file to the Windows Registry, click "Yes."
Windows will then merge the additions into your Registry.
There is no separate uninstaller for this update. Individual domains can be removed through the "Sites" box for the Restricted sites zone -- see the Security tab in Internet Explorer's "Internet Options" configuration box. All the domains included in this interim update will be rolled into the next full update for IE-SPYAD, which should be forthcoming in the next 3-5 days.
Please feel free to spread word of this interim update to other forums.
Best,
Eric L. Howes
--
Microsoft MVP
Sunbelt Software Consultant
Spyware Warrior |
|
Dustyn
Premium
join:2003-02-26
Ontario, CAN |  Thanks so much!  |
|
hayc59
Voodoo Child
Premium
join:2001-02-26
In A Dream | reply to eburger68
Thanks Eric!! |
|
Libra
Premium
join:2003-08-06
USA | reply to eburger68
Thanks for getting on this so fast Eric.
Sincerely, Libra |
|
amysheehan
Premium,VIP,MVM
join:1999-12-21
Huntington Beach, CA | reply to eburger68
Thank you so very much Eric !!!
Have safe, prosperous and Happy New Year !!!
-amy-
|
|
roddy32
join:2005-12-10
Augusta, KS | reply to eburger68
Thanks Eric |
|
madirish
Premium
join:2003-08-04
Cleveland, OH | reply to eburger68
Thanks Eric |
|
Trooper
Premium
join:2005-05-18
USA | reply to eburger68
Awesome stuff. Thanks so much Eric. |
|
fcukdat
join:2005-02-20 | reply to eburger68
Huge thanks Eric. |
|
ZZZZZZZ
Premium
join:2001-05-27
PARADISE |  reply to eburger68
Anyone have the dec 27th file.............Eric's site is down!
--
Anybody but Harper....a homophobic,bush clone!:) |
|
amysheehan
Premium,VIP,MVM
join:1999-12-21
Huntington Beach, CA
 ·RoadRunner Cable
| said by ZZZZZZZ  :Anyone have the dec 27th file.............Eric's site is down! It's backkkkk..:) |
|
T Bell
You Can Fly
Premium
join:2003-10-23
Terra Firma | reply to eburger68
Thank you, Eric. |
|
Welshjim
join:2002-01-31
Albuquerque, NM
| reply to eburger68
eburger78--Forgive me. I am confused. The URL
»https://netfiles.uiuc.edu/ehowes/www/res···#IESPYAD
takes me to a page labelled Interim Update. How do I get the Dec. 27 update which you say I should install first?
I now have the Dec. 16 update installed. |
|
Welshjim
join:2002-01-31
Albuquerque, NM | reply to eburger68
Or is the download at the site the Dec. 27 update? |
|
T Bell
You Can Fly
Premium
join:2003-10-23
Terra Firma
| reply to Welshjim
Scroll down the page until you see what is visible in my screenshot, Welshjim. |
|
ZZZZZZZ
Premium
join:2001-05-27
PARADISE
| reply to eburger68
I'm trying to get a text version ,so I can use the sites listed in another application!
I can't copy them from the restricted sites zone......any ideas!
I know I can just delete the reg keys from in front of the sites from the reg file but that would take too long!
--
Anybody but Harper....a homophobic,bush clone!:) |
|
amysheehan
Premium,VIP,MVM
join:1999-12-21
Huntington Beach, CA
·RoadRunner Cable
| 
Try this !! |
|
|
T Bell
You Can Fly
Premium
join:2003-10-23
Terra Firma | reply to ZZZZZZZ
Use "Replace" in your text editor. If it takes "too long" imagine what the author has to go through to create IE-SPYAD in the first place. |
|
eburger68
Premium,MVM
join:2001-04-28
edit:
December 30th, @09:13PM
| reply to eburger68
Hi All:
Sorry I wasn't able to respond sooner -- I was out of town for a funeral and just made it back into Champaign-Urbana (after driving through a blizzard).
The Dec. 27th update is the last full update available and is downloadable from this page:
»https://netfiles.uiuc.edu/ehowes/www/res···#IESPYAD
The above page does contain a note about the Interim Update, which points back here. The download files for the Dec. 27 update are lower down on the same page.
Plain text version of the update:
quote:
64.62.243.62
64.124.84.191
72.36.244.185
beigesearch.net
burgostar.info
cleanchain.net
cpa4.org
envisionsearch.com
fullchain.net
herkotikster.info
intimatephotoalbum.net
joywebsurfer.com
linkschain.net
ok-pay.com
ownusa.info
resultplacement.com
searchice.info
tfcco.com
vcodecpull.com
wannaberichtoo.com
xxxteen.tv
zenotecnico2.com
zloyamer.z8.ru
Best,
Eric L. Howes
--
Microsoft MVP
Sunbelt Software Consultant
Spyware Warrior |
|
ZZZZZZZ
Premium
join:2001-05-27
PARADISE |  reply to eburger68
Thx Eric.........my condolences on the funeral! |
|
