Security → IE-SPYAD Interim Update - 28 Dec. 2005

Hi All:

Attached to this post is an interim update to IE-SPYAD designed to address new domains related to the Windows MetaFiles (WMF) exploit discussed in these postings:

»Windows MetaFiles still vulnerable
»sunbeltblog.blogspot.com ··· hed.html
»sunbeltblog.blogspot.com ··· ild.html
»sunbeltblog.blogspot.com ··· oit.html
»sunbeltblog.blogspot.com ··· oit.html

Most of the domains related to this new exploit are already included in the latest full version of IE-SPYAD (released Dec. 27):

»netfiles.uiuc.edu/ehowes ··· #IESPYAD
»netfiles.uiuc.edu/ehowes ··· SPYAD_ZO

Users who have not installed the Dec. 27th version of IE-SPYAD should do so ASAP. This interim update is designed to supplement the Dec. 27th update, not replace it.

Please note that not all of the domains included in this interim update are related to the WMF exploit. Non-related domains are included in order to offer additional protection against unwanted installations of unwanted software at potentially malicious web sites. All of the domains included in this interim update will be included in the next full update to IE-SPYAD.

**Instructions**

Before installing this interim update, please ensure that you have installed the last full version of IE-SPYAD, dated Dec. 27:

»netfiles.uiuc.edu/ehowes ··· #IESPYAD
»netfiles.uiuc.edu/ehowes ··· SPYAD_ZO

As this interim update is designed to be installed on top of an existing IE-SPYAD installation, do NOT uninstall your current version of IE-SPYAD before installing this interim update.

Users of IE-SPYAD for ZonedOut should also use this interim update -- there will be no separate update file for IE-SPYAD for ZonedOut.

To install:

1. Close any open sessions of Internet Explorer.

2. Double-click on the file IESPYAD_051228.REG.

3. When Windows asks you whether you want to add the information contained in the file to the Windows Registry, click "Yes."

Windows will then merge the additions into your Registry.

There is no separate uninstaller for this update. Individual domains can be removed through the "Sites" box for the Restricted sites zone -- see the Security tab in Internet Explorer's "Internet Options" configuration box. All the domains included in this interim update will be rolled into the next full update for IE-SPYAD, which should be forthcoming in the next 3-5 days.

Please feel free to spread word of this interim update to other forums.

Best,

Eric L. Howes

Thanks so much!

Thanks Eric!!

Thanks for getting on this so fast Eric.

Sincerely, Libra

Thank you so very much Eric !!!

Have safe, prosperous and Happy New Year !!!

-amy-

Thanks Eric

Thanks Eric

Awesome stuff. Thanks so much Eric.

Huge thanks Eric.

Anyone have the dec 27th file.............Eric's site is down!

It's backkkkk..:)

Thank you, Eric.

eburger78--Forgive me. I am confused. The URL
»netfiles.uiuc.edu/ehowes ··· #IESPYAD
takes me to a page labelled Interim Update. How do I get the Dec. 27 update which you say I should install first?
I now have the Dec. 16 update installed.

Or is the download at the site the Dec. 27 update?

Scroll down the page until you see what is visible in my screenshot, Welshjim.

I'm trying to get a text version ,so I can use the sites listed in another application!

I can't copy them from the restricted sites zone......any ideas!

I know I can just delete the reg keys from in front of the sites from the reg file but that would take too long!

Scroll down to the bottom of the page to the Agnis sites list....

Use "Replace" in your text editor. If it takes "too long" imagine what the author has to go through to create IE-SPYAD in the first place.

Thx Eric.........my condolences on the funeral!

Thank you! Winning the war on malware one computer at a time!

As always, your MVM is well deserved. Thanks for all the hard work you put into keeping IE-Spyad updated. I have installed it on many people's machines to keep them malware free.

Hi All:

As announced in the Updates thread for today (Jan. 1), IE-SPYAD and AGNIS have been updated. This is a full update, which includes all the domains from the Interim Update of Dec. 28.

Even if you have installed the Interim Update of Dec. 28 for IE-SPYAD, there is no need to deviate from the standard update procedure for IE-SPYAD:

1. Unpack files from download package (& delete previous IE-SPYAD files on your disk if they exist).

2. Uninstall old version of the list using the uninstaller included in the latest IE-SPYAD package that you downloaded.

3. Install new version.

Best,

Eric L. Howes

thanx Eric, much appreciated