Updates 2012-11-13

Hi, Folks!

Microsoft released 6 updates today to address security issues in Windows, Internet Explorer, IIS, .NET (an update for each build) and Excel for all supported versions of Windows. A reboot is required.
http://update.microsoft.com/
Internet Explorer 10 is now available for Windows 7, but due to it’s infancy I do NOT recommend installing it for at least a month.
http://microsoft.com/ie

Apple released updates for OS X, Aperture, QuickTime, iPhoto, Logic Express, Logic Pro and various drivers. This includes security updates. Use the Apple Updater to get the most current versions. A reboot is required.

Adobe AIR 3.5.0.600 is a security update.
https://12pd.com/click?air

Adobe Flash Player 11.5.502.110 is a security update.
https://12pd.com/click?flash
https://12pd.com/click?flashie

Java 7u9 is a security update.
http://www.java.com/en/download/manual.jsp

QuickTime 7.7.3 is a security update. Use the Apple Updater to get the most current version.

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me anytime, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

AMD Catalyst 12.10 adds newer hardware support, improves performance, adds official Windows 8 support, TIR support, and several bugfixes. This is not a security update.
http://sites.amd.com/us/game/downloads/Pages/downloads.aspx

nVidia 306.97 adds newer hardware support, Windows 8 support, improves performance, TXAA, and updated CUDA. This is not a security update.
http://www.nvidia.com/Download/index.aspx?lang=en-us

WD SmartWare 1.6.4 corrects a stability bug. This is not a security update.
http://www.wdc.com/wdproducts/wdsmartwareupdate/Step1.asp?id=wdfMB_Essential&os=win

BullZip PDF Printer 9.2.0.1499 improves macro support, embedded files support and increased custom page size dramatically. This is not a security update.
http://www.bullzip.com/products/pdf/info.php#download

iOS 6.0.1 corrects wireless connectivity, cell data network connectivity and other bugs. This is a security update. Use iTunes or ‘Over The Air’ to install the update, or download the updated IPSW from:
http://iphoneroot.com/firmwares/

RedSn0w 0.9.15b3 adds iOS 6.0.1 support. This is not a security update.
http://iphoneroot.com/utilities/

Browser Updates

One or more of these are likely to be of interest to everyone.

Firefox 16.0.2 is a security update. Use Help, About to get the most current version.

Google Chrome 23.0.1271.64 is a security update. Use Menu (3 bars), About to get the most current version.

Opera 12.10 is a security update. Use Help, Check for Updates to get the most current version.

SeaMonkey 2.13.2 is a security update. Use Help, About to get the most current version.

Safari 6.0.2 is a security update. Use the Apple Updater to get teh most current version.

Email Updates

One or more of these are likely to be of interest to everyone.

OutlookAttachView 2.40 adds additional variables to the output filename format. This is not a security update.
http://www.nirsoft.net/utils/outlook_attachment.html

Internet Updates

One or more of these are likely to be of interest to everyone.

Adobe Shockwave 11.6.8.638 is a security update.
https://12pd.com/click?shockwave

Skype 6.0.0.120 adds Microsoft accounts, Live Messenger and Facebook integration. This version also adds Retina support, multiple chat windows, and an improved display. This is not a security update.
http://www.skype.com/intl/en/home

Trillian Astra for Windows 5.3.7 improves group chat, SSL, in-game overlay, and various other bugfixes and improvements.
http://www.trillian.im/windows/

BrowsingHistoryView 1.06 adds webpage titles. This is not a security update.
http://www.nirsoft.net/utils/browsing_history_view.html

Evernote 4.5.10.7472 improves flow, and corrects several bugs. This is not a security update.
http://www.evernote.com/

FileZilla 3.6.0 corrects two crash bugs. This is not a security update.
http://filezilla-project.org/

uTorrent 3.2.2 Build 28500 fixes a disconnect bug. This is not a security update.
http://www.utorrent.com/downloads

WinSCP 5.1.1 corrects a couple dozen bugs. This should be treated as a security update.
http://winscp.net/eng/index.php

Codec Updates

One or more of these are likely to be of interest to everyone.

Win7 Codec Package 3.8.6 improves Windows 8 support and updates included codecs. To install the update, you must uninstall and reinstall the application. This is not a security update.
http://shark007.net/win7codecs.html

Win x64 Codec Support 3.8.6 improves Windows 8 support and updates included codecs. This update applies only to 64-bit computers, and requires either the Win7 Codec Package or the Windows Vista Codec package. This is not a security update.
http://shark007.net/x64components.html

Vista Codec Package 6.4.0 updates included codecs. To install the update, you must uninstall and reinstall the application. This version works for both Windows XP and Windows Vista.
http://shark007.net/vistacodecpackage.html

Media Updates

These are unlikely to be of interest to most people.

VLC Media Player 2.0.4 is a security update.
http://www.videolan.org/vlc/

Game Updates

These are unlikely to be of interest to most people.

Minecraft and Minecraft Server 1.4.2 adds a beacon, flower pots, frames, anvils, cobblestone walls, pumpkin pies, carrots, potatoes, boss mob, new skeleton type, witches, bats, Zombies now infect villagers, but can also be cured and various other improvements. This is not a security update.
http://www.minecraft.net/

Office Updates

One or more of these are likely to be of interest to most people.

Notepad++ 6.2.1 fixes 2 crash issues, some UDL2 bugs and link style bugs. This is not a security update.
http://notepad-plus-plus.org/download/

Adobe Reader 11.0 is a major update, including a variety of changes. This version has a security issue, so it is best NOT to upgrade until 11.0.1 is released, probably within the next two weeks.
http://get.adobe.com/reader

IcoFX 2.3.1 adds XPM support and several fixes. This is not a security update.
http://icofx.ro/

IrfanView 4.35 is a security update.
http://www.irfanview.com/

Security Software Updates

One or more of these is likely to be of interest to most people.

Malwarebytes Anti-Malware 1.65.1.1000 corrects several startup and scan completion bugs. This should be treated as a security update.
https://12pd.com/click?mbam

Avast! Home Edition 7.0.1474 corrects several stability bugs. This is a security update.
http://www.avast.com/free-antivirus-download

SuperAntiSpyware 5.6.1014 provides several fixes and improvements. This should be treated as a security update.
http://www.superantispyware.com/download.html

Capture Updates

These are unlikely to be of interest to most people.

VideoCacheView 2.38 corrects an mp4 bug. This is not a security update.
http://www.nirsoft.net/utils/video_cache_view.html

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 8.2.1.8 adds burn-speed controls, corrects several crash bugs, and various other fixes. This is not a security update.
http://www.dvdfab.com/download.htm

Miro Video Converter 3.0 is a major update. This version includes batch processing, many more presets, better control over aspect ratio and output size, progressive MP4, improved WebM output, thumbnails, and more. This is not a security update.
http://www.mirovideoconverter.com/

Utility Updates

These are unlikely to be of interest to most people.

CCleaner 3.24.1850 adds support for Firefox plugins and extensions, optimizations for Windows 7 and Windows 8, AVG, DVDFab, Inkscape, improved update speed and various other bugfixes. This is not a security update.
http://www.piriform.com/ccleaner

Defraggler 2.11.560 adds support for Windows 8, exclusion improvements, proper handling of SSD’s,
http://www.piriform.com/defraggler

RoboForm 7.8.4 corrects several stability and performance bugs. This is not a security update.
https://12pd.com/click?rf

Goodsync 9.3.6.6 corrects several bugs. This is not a security update.
https://12pd.com/click?goodsync

CPU-Z Installer 1.62 adds newer hardware support. This is not a security update.
http://www.cpuid.com/softwares/cpu-z.html

GPU-Z 0.6.6 adds newer hardware support and provides several bug fixes. This is not a security update.
http://www.techpowerup.com/downloads/SysInfo/GPU-Z/

Daemon Tools Lite 4.46.1 adds Windows 8 support and various fixes. This is not a security update.
http://www.daemon-tools.cc/eng/products/dtLite

LogMeIn Win 4.1.2600 adds Windows 8 support, Anti-virus management, better multi-monitor support and various other fixes. This is not a security update.
http://help.logmein.com/SelfServiceDownloads

Hamachi 2.1.0.262 provides a variety of improvements and bug fixes. This version also updates the network address range used for your VPN. This is not a security update.
http://help.logmein.com/SelfServiceDownloads

Coreinfo 3.1 fixes a Numa calculation bug, and adds support for several more processor features. This is not a security update.
http://sysinternals.com/

Desktops 2.0 is now compatible with Windows 8, properly supporting Winkey hotkey sequences on alternate desktops and switching back to the primary desktop’s start screen when you hit Winkey. This is not a security update.
http://sysinternals.com/

Whois 1.11 includes bug fixes that could cause it to crash if provided with malformed domain name input strings. This is not a security update.
http://sysinternals.com/

Livekd 5.3 now support Windows 8. This is not a security update.
http://sysinternals.com/

PsPasswd 1.23 now includes support for changing domain account passwords. This is not a security update.
http://sysinternals.com/

Testlimit 5.22 fixes an output formatting bug that could have it report KB instead of MB. This is not a security update.
http://sysinternals.com/

FolderChangesView 1.20 adds a column to display the file owner. This is not a security update.
http://www.nirsoft.net/utils/folder_changes_view.html

NirCmd 2.71 adds runassystem command. This is not a security update.
http://www.nirsoft.net/utils/nircmd.html

USBDeview 2.17 corrects a stability bug when plugging in two devices with the same pid/vid. This is not a security update.
http://www.nirsoft.net/utils/usb_devices_view.html

WakeMeOnLan 1.41 adds the ability to wake up all computers in a netrange. This is not a security update.
http://www.nirsoft.net/utils/wake_on_lan.html

WifiInfoView 1.10 adds a new signal quality summary mode. This is not a security update.
http://www.nirsoft.net/utils/wifi_information_view.html

Hiren’s BootCD 15.2 updates a number of utilities. This should be treated as a security update.
http://www.hirensbootcd.org/download/

Developer Updates

These are unlikely to be of interest to most people.

TortoiseSVN 1.7.10 corrects several bugs. This is not a security update.
http://tortoisesvn.net/downloads

Virtual Machine Updates

These are unlikely to be of interest to most people.

VirtualBox 4.2.4-81684 corrects several stability and compatibility bugs. This is not a security update.
http://www.virtualbox.org/wiki/Downloads

VMware Player 5.0.1 corrects several bugs and improves performance. This is not a security update.
http://www.vmware.com/products/player/

Web Package Updates

These are likely to be of interest only to web developers.

Drupal 7.17 is a bugfix release. This is not a security update.
http://drupal.org/download

Contact Form 7 3.3.1 provides several performance improvements and automation hooks. This is not a security update.
http://wordpress.org/extend/plugins/contact-form-7/

InstantWP 4.3 updates WordPress, Apache, PHP and MySQL. This is a security update.
http://www.instantwp.com/download/

ModSecurity 2.7.0 adds internationalization support, caching Lua VMs, exceptions, per-rule performance auditing and more. This is a security update.
http://sourceforge.net/projects/mod-security/

MailEnable 6.65 provides several bug fixes. This is not a security update.
http://www.mailenable.com/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

 

Updates 2012-09-11

Hi, Folks!

Adobe wins the “most security updates in a week” award for the first time this week, and Microsoft, Apple, Adobe, Oracle, Mozilla, Google, and others have released updates as well. It’s Patch Tuesday: time to get your updates on.

Microsoft released 5 updates (2 updates for XP) this month for System Center and Visual Studio. This includes security updates. A reboot may be required.
http://update.microsoft.com/

Apple released updates for Java, Remote Desktop, iMovie, and OS X. This includes security updates. A reboot is required. Use the Apple Updater to get the most current versions.

Adobe AIR 3.4 is a security update. However, Adobe has decided to disable the automatic security update to AIR 3.4. This update MUST be done manually.
https://12pd.com/click?air

Adobe Flash Player 11.4.402.265 is a security update
https://12pd.com/click?flash
https://12pd.com/click?flashie

Java 7u7 is a security update.
http://www.java.com/en/download/manual.jsp

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me anytime, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

AMD Catalyst x86 12.8 corrects a number of stability issues, and improves Windows 8 support.
http://sites.amd.com/us/game/downloads/Pages/downloads.aspx

Bullzip PDF Printer 8.4.0.1425 improved font embedding, and allows print of encrypted documents.
http://www.bullzip.com/products/pdf/download.php

Browser Updates

One or more of these are likely to be of interest to everyone.

Firefox 15.0.1 adds background update support, adds SPDYv3, WebGL improvements, memory optimization for add-ons, and over 2,000 other bugfixes. This is a security update. Use Help, About to get the most current version.

Google Chrome 21.0.1180.89 is a security update. Use Tool, About to get the most current version.

Opera 12.02 is a security update. Use Opera, Help, Check for Updates to get the most current version.

SeaMonkey 2.12.1 is a security update. Use Help, About to get the most current version.

Email Updates

One or more of these are likely to be of interest to everyone.

OutlookAttachView 2.37 corrects a monitor affinity bug. This is not a security update.
http://www.nirsoft.net/utils/outlook_attachment.html

Thunderbird 15.0.1 is a security update. Use Help, About to get the most current version.

Internet Updates

One or more of these are likely to be of interest to everyone.

BrowsingHistoryView 1.01 improves Firefox support. This is not a security update.
http://www.nirsoft.net/utils/browsing_history_view.html

DNSDataView 1.41 corrects several bugs. This is not a security update.
http://www.nirsoft.net/utils/dns_records_viewer.html

IPNetInfo 1.40 corrects a GUI bug. This is not a security update.
http://www.nirsoft.net/utils/ipnetinfo.html

Evernote 4.5.8.7356 corrects several bugs and adds support for account switching. This is not a security update.
http://www.evernote.com/

Codec Updates

One or more of these are likely to be of interest to everyone.

Win7 Codec Package 3.7.7 updates included codecs. To install the update, you must uninstall and reinstall the application. This is not a security update.
http://shark007.net/win7codecs.html

Vista Codec Package 6.3.5 updates included codecs. To install the update, you must uninstall and reinstall the application. This version works for both Windows XP and Windows Vista. This is not a security update.
http://shark007.net/vistacodecpackage.html

Win x64 Codec Support 3.7.7 updates included codecs. This update applies only to 64-bit computers, and requires either the Win7 Codec Package or the Windows Vista Codec package. This is not a security update.
http://shark007.net/x64components.html

Media Updates

These are unlikely to be of interest to most people.

MusicBrainz Picard 1.1 corrects several minor bugs and improves the interface behavior. This is not a security update.
http://musicbrainz.org/doc/MusicBrainz_Picard

Unreal Media Server 9.5 does not provide a changelog, so this should be treated as a security update.
http://www.umediaserver.net/umediaserver/download.html

VideoStream Server 1.4 corrects several bugs, improves scrolling and adds facebook integration. This is not a security update.
http://collect3.com.au/videostream/

Game Updates

These are unlikely to be of interest to most people.

Minecraft 1.3.2 added sideways logs in trees and fixes two bugs that might make you fall out of the world or randomly drown.
http://www.minecraft.net/

Office Updates

One or more of these are likely to be of interest to most people.

Adobe Photoshop CS6 (13.0.1) is a security update and applies to both Windows and Macintosh versions.
http://blogs.adobe.com/photoshopdotcom/2012/08/photoshop-cs6-13-0-1-update-now-available.html

Adobe Illustrator 16.0.1 corrects a number of bugs, including correcting crashes and stability problems. This is not a security update.
http://www.adobe.com/downloads/updates/

Adobe Premiere Pro CS6 6.0.2 is a stability and bugfix release. This is not a security update.
http://www.adobe.com/downloads/updates/

Adobe Prelude CS6 1.0.2 is a bugfix release. This is not a security update.
http://www.adobe.com/downloads/updates/

Adobe Media Encoder CS6.0.2 fixes a few dozen bugs. This is not a security update.
http://www.adobe.com/downloads/updates/

Adobe SpeedGrade CS6 6.0.3 fixes several bugs. This is not a security update.
http://www.adobe.com/downloads/updates/

Adobe Drive 4.0.1 improves product integration. This is not a security update. http://www.adobe.com/downloads/updates/

Gimp 2.8.2 corrects dozens of bugs, including performance and stability. This is not a security update.
http://www.gimp.org/

Notepad++ 6.1.7 corrects crash bugs and several other issues. This is a security update.
http://notepad-plus-plus.org/

OpenOffice 3.4.1 is a maintenance release. This version corrects several stability issues, bugs, adds languages and improves Windows 8 compatibility. This is not a security update.
http://www.openoffice.org/download/

Security Software Updates

One or more of these is likely to be of interest to most people.

Avast! Home Edition 7.0.1466 corrects a number of bugs and stability issues. This is a security update.
http://www.avast.com/free-antivirus-download

AVG Anti-Virus Free 2013.2667 is a major update to AVG. This is a security update.
http://free.avg.com/us-en/download-free-antivirus

KeePass 1.24 improves defaults and GUI behaviors. This is a security update.
http://keepass.sourceforge.net/

MalwareBytes’ Anti-Malware 1.65 provides significantly improved detection engine as well as other features. This is a security update.
https://12pd.com/click?mbam

SuperAntiSpyware 5.5.1016 improves engine, performance and updater. This is a security update.
http://www.superantispyware.com/download.html

Wireshark 1.8.2 corrects a number of bugs, improved protocol support and adds additional capture file formats. This is a security update.
http://www.wireshark.org/

Capture Updates

These are unlikely to be of interest to most people.

Fraps 3.5.9 corrects quality and crash bugs. This is not a security update.
http://www.fraps.com/

VideoCacheView 2.36 improves automation in file naming. This is not a security update.
http://www.nirsoft.net/utils/video_cache_view.html

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 8.2.1.0 fixes several crash & freeze bugs. This is not a security update.
http://www.dvdfab.com/download.htm

Utility Updates

These are unlikely to be of interest to most people.

RoboForm 7.8.2 corrects several bugs with the auto-save bar, and others. This is a security update.
https://12pd.com/click?rf

Hamachi for Windows 2.1.0.215, Mac 2.1.0.346, and Linux 2.1.0.76 corrects issues with DNS, VPN over P2P, and corrects an issue with the automatic updater. This should be treated as a security update.
http://help.logmein.com/SelfServiceDownloads

Autoruns 11.34 fixes a bug that caused it to not show some Internet Explorer extensions. This is a security update.
http://sysinternals.com/

ProcDump 5.0 is a major upgrade that adds exception filters, Windows 8 modern applications support, and integrates with Process Monitor’s debug output logging. This is not a security update.
http://sysinternals.com/

Sigcheck 1.8 shows detailed certificate information, validity dates, thumbprints, and counter-signing chain. This is not a security update.
http://sysinternals.com/

VMMap 3.11 reports commit usage instead of working set in its timeline view and fixes a bug that enables export of captures of 32-bit processes. This is not a security update.
http://sysinternals.com/

CCleaner 3.22.1800 adds full support for Windows 8, various startup and other improvements. This is not a security update.
http://www.piriform.com/ccleaner

FolderChangesView 1.15 adds a tray icon option. This is not a security update.
http://www.nirsoft.net/utils/folder_changes_view.html

USBDeview 2.15 corrects a monitor positioning error. This is not a security update.
http://www.nirsoft.net/utils/usb_devices_view.html

WakeMeOnLan 1.40 corrects a name-detection bug and adds a column for Workgroup. This is not a security update.
http://www.nirsoft.net/utils/wake_on_lan.html

Wireless Network Watcher 1.55 adds a scan interval option. This is not a security update.
http://www.nirsoft.net/utils/wireless_network_watcher.html

Developer Updates

These are unlikely to be of interest to most people.

Redemption 5.4.0.2922 significantly increases Exchange access, provides control of the autocomplete cache, data store access, external automation, and includes a number of bugfixes. This is not a security update.
http://www.dimastr.com/redemption/

TortoiseSVN 1.7.9 corrects several crash bugs and other issues. This is not a security update.
http://tortoisesvn.net/downloads

Virtual Machine Updates

These are unlikely to be of interest to most people.

VirtualBox 4.1.22-80657 is a security update.
http://www.virtualbox.org/wiki/Downloads

VMware Player 5.0.0 is a major update with a completely new interface and improved design. This is not a security update.
http://www.vmware.com/products/player/

Web Package Updates

These are likely to be of interest only to web developers.

ColdFusion 10.0.1, 9.0.2 and 8.0.2 are security updates.
http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix-apsb12-21.html

Dada Mail 5.2.1 is a security update.
http://dadamailproject.com/download/

YOURLS 1.5.1 adds optional www mapping, corrects a number of bugs, adds jsonp support and encrypted password support. This is a security update.
http://yourls.org/

MailEnable 6.60 corrects Autodiscovery, fixes a memory leak, and improves upgrade process. This is a security update.
http://www.mailenable.com/

Skipfish 2.09b is a security update.
http://code.google.com/p/skipfish/

WordPress 3.4.2 is a security update. Use the WP Updater to get the current version.
http://wordpress.org/news/2012/09/wordpress-3-4-2/

Atahualpa 3.7.8 corrects compatibility issues with various SEO plugins, print styles, sticky posts, and adds auto-resize to videos within posts. This is not a security update.
http://wordpress.org/extend/themes/atahualpa/

Simple Facebook Connect 1.5 corrects a Facebook compatibility issue. This is not a security update.
http://wordpress.org/extend/plugins/simple-facebook-connect/

WPtouch 1.9.5.2 improves default behaviors. This is not a security update.
http://wordpress.org/extend/plugins/wptouch/

Zemanta 1.2.1 corrects an authentication bug. This should be treated as a security update.
http://wordpress.org/extend/plugins/zemanta/

That’s all for now folks.

Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

 

Updates 2012-07-12

Hi, Folks!

Microsoft released nine updates addressing vulnerabilities in Microsoft Windows, Microsoft Office, Internet Explorer, and Visual Basic for Applications. This includes security updates. A reboot is required.
http://update.microsoft.com/

Apple released a number of updates to printer drivers and other hardware, as well as iPhoto 9.3.1, Aperture 3.3.1 and a RAW update. This does not include security updates. Use the Apple Updater to get the most current versions.

Adobe AIR 3.3.300.3670 is a stability, compatibility and audio/video update. This is not a security update.
https://12pd.com/click?air

Adobe Flash Player 11.3.300.265 is a stability, compatibility and audio/video update. This is not a security update.
https://12pd.com/click?flashie
https://12pd.com/click?flash

Yahoo! Hacked!

Today brings other news, as well. One of Yahoo’s user databases was hacked recently and the attacker was able to gain access to half a million account details. Take this opportunity to change your Yahoo passwords now.
https://edit.yahoo.com/config/change_pw

Important Notes

Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.

Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.

It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need.

Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available to you.

Finally, if you’re sick of doing this all yourself, let me! Call or email me anytime, and we can set you up with subscription SaferPC updates which will be installed each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com

Driver Updates

If you’re using this hardware – these updates are for you.

AMD Catalyst 12.6 corrects several security, stability and reliability bugs, as well as adding new and updated application profiles, and newer hardware support. This is a security update.
http://sites.amd.com/us/game/downloads/Pages/downloads.aspx

GMail Drive FS 1.0.19 corrects a login issue. This is not a security update.
http://www.viksoe.dk/code/gmail.htm

HP Universal Print Driver (PCL6) 5.5.0.12834 provides over 30 bugfixes, addressing mostly specific hardware and print features. This is not a security update.
http://www.hp.com/go/upd

Browser Updates

One or more of these are likely to be of interest to everyone.

Firefox 13.0.1 corrects several stability and security issues. This is a security update. Use Help, About to install the latest version.

Google Chrome 20.0.1132.57 corrects several bugs, including security issues. This is a security update. Use Tool, About to get the most current version.

Opera 12.00 is a major update, adding native 64-bit support, separate-process plugin operation, theme support, imprved HTML5 support and various other improvements. This is not a security update. Use Opera, Help, Check for Updates to get the most current version.

SeaMonkey 2.10.1 corrects several stability and security issues. This is a security update. Use Help, About to install the latest version.

HTTrack 3.46.1 adds Unicode support and corrects several bugs. This is not a security update.
http://www.httrack.com/page/2/en/index.html

Email Updates

One or more of these are likely to be of interest to everyone.

Thunderbird 13.0.1 corrects several stability issues. This is not a security update. Use Help, About to install the latest version.

OutlookAttachView 2.35 adds domain filename export option, and a column to identify specific messages by internal ID. This is not a security update.
http://www.nirsoft.net/utils/outlook_attachment.html

Internet Updates

One or more of these are likely to be of interest to everyone.

Skype 5.10.0.115 is a stability update. This is not a security update.
http://www.skype.com/intl/en/home

Connectify 3.5.1.24187 adds power management options, improved firewall controls, better anti-virus compatibility and corrects bugs with sharing 3G/4G/VPN from the previous version. This is not a security update.
http://www.connectify.me/

Evernote 4.5.7.7146 adds several new cosmetic and usability features. This is not a security update.
http://www.evernote.com/

Codec Updates

One or more of these are likely to be of interest to everyone.

Win7 Codec Package 3.7.1 updates included codecs and improves suggested settings and removes all toolbars and advertising. To install the update, you must uninstall and reinstall the application. This is not a security update.
http://shark007.net/win7codecs.html

Win x64 Codec Support 3.7.1 updates included codecs and improves suggested settings. This update applies only to 64-bit computers, and requires either the Win7 Codec Package or the Windows Vista Codec package. This is not a security update.
http://shark007.net/x64components.html

Media Updates

These are unlikely to be of interest to most people.

CDBurnerXP 4.4.1.3243 corrects a couple minor bugs. This is not a security update.
http://cdburnerxp.se/

VLC Media Player 2.0.2 corrects a couple hundred bugs, and improves playback on older hardware, adds Retina support, split-file improvements and various other fixes. This is not a security update.
http://www.videolan.org/vlc/

Winamp 5.63 is a security update.
http://www.winamp.com/media-player/en

Office Updates

One or more of these are likely to be of interest to most people.

Notepad++ 6.1.5 corrects several stability bugs and improves Windows 8 compatibility. This is not a security update.
http://notepad-plus-plus.org/

Kindle for PC 1.10.1 Build 40262 does not provide a changelog, so it should be treated as a security update.
https://12pd.com/click?kindle4pc

Security Software Updates

One or more of these is likely to be of interest to most people.

MalwareBytes’ Anti-Malware 1.62 improves update performance, heuristics, scheduler, and installer. This is not a security update.
https://12pd.com/click?mbam

Avast! Home Edition 7.0.1456 corrects several stability and security issues. This is a security update.
http://www.avast.com/free-antivirus-download

SuperAntiSpyware 5.5.1006 improves heuristic detection and other scanning improvements. This is a security update.
http://www.superantispyware.com/download.html

Wireshark 1.8.0 adds a number of new protocols, GeoIP IPv6 database support, and standardizes output to pcap-ng format. This is not a security update.
http://www.wireshark.org/

Nmap 6.01 adds a number of new scripts. This is not a security update.
http://nmap.org/

Capture Updates

These are unlikely to be of interest to most people.

VideoCacheView 2.32 adds 64-bit browser support, improves stability, and adds a Title column to help identify videos. This is not a security update.
http://www.nirsoft.net/utils/video_cache_view.html

WebCamImageSave 1.11 adds an option to specify the label position within the cfg file. This is not a security update.
http://www.nirsoft.net/utils/web_cam_image_capture.html

Converter Updates

These are unlikely to be of interest to most people.

DVDFab 8.1.9.0 updates decryption keys, additional conversion options and bugfixes. This is not a security update.
http://www.dvdfab.com/download.htm

Utility Updates

These are unlikely to be of interest to most people.

RoboForm 7.7.9 corrects dozens of bugs including crashes and browser compatibility issues. This should be treated as a security update.
https://12pd.com/click?rf

Goodsync 9.2.4.4 adds parallelism for performance, multi-part uploads to Google Docs/Drive, and various other fixes. This is not a security update.
https://12pd.com/click?goodsync

LogMeIn Win 4.1.2504 adds managed Anti-Virus controls. Right-click on the LogMeIn icon in your tray and select “Open LogMeIn”, click “About”, then “Check for Updates”. After a few minutes of downloading, the updater will start. You’ll be prompted to click “Update”, approve installation and finally “close” the installer when done.

Hamachi 2.1.0.210 adds automatic reconnect, automatic updates, multicast and several other fixes. This is not a security update.
http://help.logmein.com/SelfServiceDownloads

Autoruns 11.32 fixes a bug that prevented Autoruns from correctly elevating when the Run as Administrator option is selected. This is a security update.
http://sysinternals.com/

Process Explorer 15.21 fixes a bug related to the autostart and several other bugs. This is a security update.
http://sysinternals.com/

Process Monitor 3.02 fixes an external logging issue and a bug in the save logic. This is a security update.
http://sysinternals.com/

PsKill 1.15 fixes a bug in the remote kill functionality. This is a security update.
http://sysinternals.com/

CCleaner 3.20.1750 adds Windows 8 compatibility, context menu management, Opera 12 support, improved UAC bypass, and other fixes. This is not a security update.
http://www.piriform.com/ccleaner

Recuva 1.43.623 adds Alternate Data Stream support, improves large file support, filters, NTFS permissions, and other improvements. This is not a security update.
http://www.piriform.com/recuva

Speccy 1.17.340 adds computer type (pc/notebook), improves CPU detection, printer and sharing detection, newer hardware support and various other fixes. This is not a security update.
http://www.piriform.com/speccy

CPU-Z Installer 1.61 adds newer hardware support and fixes a bug under Windows 8. This is not a security update.
http://www.cpuid.com/softwares/cpu-z.html

FolderChangesView 1.05 adds Open Folder and Clear All options, and fixes a bug. This is not a security update.
http://www.nirsoft.net/utils/folder_changes_view.html

WakeMeOnLan 1.37 corrects a crash bug. This is not a security update.
http://www.nirsoft.net/utils/wake_on_lan.html

Wireless Network Watcher 1.47 corrects a crash bug. This is not a security update.
http://www.nirsoft.net/utils/wireless_network_watcher.html

Developer Updates

These are unlikely to be of interest to most people.

Inno Setup & QuickStart 5.5.1 corrects a bug with file replacement queueing, updates translations, and other minor tweaks. This is not a security update.
http://www.jrsoftware.org/isdl.php

Maraura 3.9.2 corrects a stability bug. This is not a security update.
http://arianne.sourceforge.net/engine/marauroa.html

Virtual Machine Updates

These are unlikely to be of interest to most people.

VirtualBox 4.1.18-78361 corrects several stability and reliability bugs. This is not a security update.
http://www.virtualbox.org/wiki/Downloads

VMware Player 4.0.4 is a security update.
http://www.vmware.com/products/player/

Web Package Updates

These are likely to be of interest only to web developers.

phpMyAdmin 3.5.2 is a bugfix release. This is not a security update.
http://www.phpmyadmin.net/home_page/news.php

Adminer 3.4.0 adds several new features, bugfixes and translations. This is not a security update.
http://www.adminer.org/en/

BuddyPress 1.5.6 is a WP 3.4 compatibility update. This is not a security update.
http://wordpress.org/extend/plugins/buddypress/

bbPress 2.1 adds WP 3.4 compatibility, various bugfixes and improvements. This is not a security update.
http://wordpress.org/extend/plugins/bbpress/

BuddyStream 2.6 provides a number of fixes and improvements, including crashes, typos, Soundcloud, Facebook Wall, Pages and Albums.
http://wordpress.org/extend/plugins/buddystream/

Email Log 0.8 improves MySQL compatibility, PHP errors, and adds bulk delete. This is not a security update.
http://wordpress.org/extend/plugins/email-log/

Front-end Editor 2.3 corrects several bugs, updates components. This is a security update.
http://wordpress.org/extend/plugins/front-end-editor/

Theme Authenticity Checker 1.5 adds WP 3.4 compatibility. This is not a security update.
http://wordpress.org/extend/plugins/tac/

Theme My Login 6.2.1 corrects several bugs. This is not a security update.
http://wordpress.org/extend/plugins/theme-my-login/

MailEnable 6.55 corrects several bugs, improves POP retrieval logging, improves user spam management. This is not a security update.
http://www.mailenable.com/

That’s all for now folks. Keep it clean out there. 😉

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

The DNSChanger Scare – or Is the FBI Really Going to Turn Off the Internet?

Unless you live in a cell at Guantanamo Bay, chances are you’ve heard the horror stories of how the FBI is going to beturning off the Internetfor millions of Americans in less than 48 hours. Let’s dispel a few myths:

Will I Lose Internet Access?

No.

We’re not talking about some sort of doomsday event. Even if you’ve been infected with the DNSChanger malware, your Internet service will not go down. DNS would not resolve, which would mean that while you probably won’t be able to visit any websites until you fix it, the hardware, software and networks will remain in place to ensure your Internet service is operating fine.

And if you do lose access, it’s important to understand that “it’s not them, it’s you.”

The only way that you could be affected by this issue is if you’re one of the approximately 4 million (worldwide) people that were infected with one of the DNSChanger malware variants (such as Zlob) over the last six years and have not disinfected your computer yet. If you’ve been running, well, any antivirus software over the last year or so, you would have been disinfected and had your DNS settings reset. No big deal.

What’s DNS and Why Should I Care?

DNS, or the Domain Name System, is one of the core functions of the Internet. This service is usually provided by your ISP to translate domain names like example.com to their IP addresses. DNS also provides other capabilities, such as the ability to have redundant networks should a server fail, provides the very basis for email relay capabilities (MX), anti-spam measures (DNSRBL), and ensuring that the site you’re connecting to is the “real” site (DNSSEC).

If your DNS doesn’t work, you won’t be able to visit any domain-name based websites (such as google.com, bing.comfacebook.com or yahoo.com). You will still be able to visit IP-based websites such as http://208.69.38.205/ or http://74.125.45.99/.

Windows Sucks!

A common myth about DNSChanger is that this malware only infected Windows computers. That’s not true. Not only did it not only affect Windows-based computers, but it may have infected your Mac OS X (RSPlug & Puper), changed the settings on your Router/Modem or even your phones (via Flush.*).

While Windows was surely the most popular target, it was most definitely not the only one.

How Can I Tell If I’m Infected?

You can test whether you will be effected by the DNS changes simply by visiting dns-ok.us or even Google or Facebook – if you see a message indicating that you’re infected or need to correct your DNS, then you’ve got problems.

If you’ve been infected, you should first disinfect your computer. Changing your DNS settings alone will not remove the malware from your computer! You can get the free version of MBAMAVG, Avast!, or use the McAfee DNS Checker tool to remove the malware from your computer.

Infected or Not, What Should I Do?

Run a virus scan. There are literally dozens of free anti-virus programs out there. Pick one. Run it. Do this once in a while even when the MSM isn’t in Chicken Little mode. If you’re infected, it means you haven’t run a scan since at least November. Think about that for a minute.

Then immediately setup OpenDNS on your computers and networks. OpenDNS (208.67.222.222 & 208.67.220.220) is a free DNS service that provides additional protection by filtering out phishing and malware sites automatically – with the option of filtering another 58 categories of content from porn to p2p to web spam or even politics (free account required).

If you’re insane and would prefer to avoid the added security of the phishing and malware filters provided free by OpenDNS, you can opt instead to use Google’s Public DNS (8.8.8.8 & 8.8.4.4). Or contact your ISP to find out what their DNS servers are usually set to.

How Did I Get Infected?

If you were infected by this malware you were most likely visiting porn or warez sites on your computer, or used an Internet connection that was already infected by someone else that had. The sad truth of computer security is that even “being good” won’t prevent you from being infected when someone else on your network is bad.

Again, the best way to ensure that your computer/phone/tablet isn’t infected through this DNS poisoning method is to setup OpenDNS directly on your device so that it always uses a “safe” DNS source.

Why is the FBI Turning Off This Service?

A better question would be, why did they turn it on in the first place? All they’ve done by replacing the malware DNS servers with their own is spend $10,000/month and preserve hundreds of thousands of infected computers. What they should have done is replace it with a locked DNS that relayed all requests directly to dns-ok.us or the DCWG so people that were infected could immediately correct it. Instead, they’ve prevented the malware from propagating, but they’ve enabled as many as half a million computers to stay infected. As an IT guy myself, I see this similarly as if they had sold untrackable guns to drug cartels so they could see what they did with them.

The bottom line…

This is not really the problem it’s been made out to be. The DNS Changer Working Group (DCWG) spokesman Barry Greene is quoted as saying:

“Think about it: Various estimates place the number of PCs worldwide at between 1 billion and 2 billion. That means the 250,000 or so still-infected computers represent fewer than 2-100ths of a percent (0.02 percent) of all PCs in the world. That’s about the number of PCs a botnet hunter commandeers in a single day,” Greene says, adding: “It’s no big deal.”

Really, my only serious concern is that for some reason the FBI will change their mind and postpone shutting down the servers again, effectively keeping these users infected even longer.

That’s all for now folks. Keep it clean out there. ;)

Regards,

Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/

Updates 2012-02-14

Happy Valentine’s Day, Folks!

Patch Tuesday is here again.

This month Microsoft released nine updates addressing 21 vulnerabilities in Microsoft Windows, Office, Internet Explorer, .NET/Silverlight, Visio, Indeo codec, SharePoint, as well as an update to MSRT. Continue reading