Windows-Help.NET Newsletter 19 April 2003, Vol 6 No. 13

In this issue:

w   Microsoft to Enhance Windows Security Defenses
w   Microsoft Security Bulletin
w   Featured Software: Tweaking Toolbox
w   Recent Support BBS Postings
w   Web Site Updates
w   Administrivia

 
Get a FREE Issue of Smart Computing!
 

Microsoft to Enhance Windows Security Defenses

by Arie Slob

Hello Windows users,

This week, at the annual RSA Conference, Microsoft announced three new technology enhancements designed to help antivirus vendors provide customers with deeper levels of protection against viruses and worms as well as improve the performance of virus-scanning engines. These technologies, developed in close collaboration with the antivirus vendor community, include new antivirus APIs for Microsoft® Exchange Server 2003, enhanced virus scanning capabilities for Microsoft Office Word 2003 and a new Windows® File System Filter Manager Architecture designed to simplify the antivirus software development process and improve overall system reliability.

"Customers told us they needed more comprehensive antivirus protection at all levels of their computing infrastructure," said Mike Nash, corporate vice president of the Security Business Unit at Microsoft. "I'm excited that our work with industry partners will help customers have a safer, more trustworthy computing experience."

The new Windows File System Filter Manager Architecture simplifies the antivirus software development process and improves overall system reliability by providing a core engine into which antivirus software providers can plug a variety of "mini" file system filter drivers. A key advantage of this new architecture is that it allows users to freely mix and match antivirus scanners more reliably, enhancing performance and providing greater resiliency to attacks. In addition, it offers simplification of the antivirus code and enables antivirus companies to more easily extend their products to deeper levels in the operating system. Microsoft has involved a wide range of antivirus software vendors in the design process for the new Windows File System Filter Manager Architecture and has been able to incorporate a great deal of industry feedback into it.

"Microsoft's close involvement in the creation of new APIs at the operating system level will help us continue building more comprehensive antivirus solutions that ensure greater protection for customers, both now and in the future," said Ryan McGee, director of product marketing for McAfee Security at Network Associates Technology Inc.

Microsoft Office Word 2003, set to be released later this year, will include technology enhancements that allow virus scanners to quickly and effectively scan the W3C-compliant native Word XML file format. Microsoft worked with antivirus researchers to add three flags to the header of documents saved in the native Word XML file format that will allow virus scanning software to more quickly determine if a document contains potentially dangerous embedded objects or macros and remove them if necessary.

Microsoft Exchange Server 2003, due for release in midyear, will feature Virus Scan API (VSAPI) 2.5, an enhanced antivirus API that scans incoming and outgoing messages for malicious or unwanted content.

Microsoft believes that together, these technologies will make it easier to stay one step ahead of viruses, worms, and spam by enhancing antivirus software protection.

Microsoft Security

Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges

Microsoft has posted a patch for Microsoft Windows NT 4.0, Windows 2000 and Windows XP. A flaw exists in the Windows kernel, the core of the operating system. There is a flaw in the way the kernel passes error messages to a debugger. An attacker could exploit this flaw to take any action on the system including deleting data, adding accounts with administrative access, or reconfiguring the system.

Severity Rating: Important

Affected Software Versions

  • Microsoft Windows NT 4.0 and Windows NT 4.0 Server, Terminal Server Edition
  • Microsoft Windows 2000
  • Microsoft Windows XP

    More...

    Rose City Software

    Tweaking Toolbox

    Make your Windows computers faster, more efficient and more secure with hundreds of powerful tweaks and hidden registry settings. Easily customize the appearance, speed and security of your computer with just a few mouse clicks.

    More Info
    Download Trial: For 9x / Me / 2000
    [830 KB] - For XP [805 KB]

    Note: Windows-Help.NET Newsletter readers can get a 15% discount on the regular registration fee for the above programs! To qualify, you have to follow this link when you want to order your registration.

    Recent Support BBS Postings

    Post-SP1 hotfixes guide - bat install - Windows XP
    Switching Identities--SLOW! - Internet Explorer
    What is a router, a gateway, and a access point? - Networking
    DMA versus PIO ... Help Please - Hardware
    Outlook Express fails to send - Internet Explorer

    Web Site Updates

    These pages were added/updated in the past week. Information on previously updated/added pages is available on the What's New? page for 1 month.

    InfiniSource.com

    Added: Mobile Wi-Fi hits the streets


    Windows-Help.NET

    Added: Microsoft Posts Windows Server 2003 Administration Tools Pack Download
    Added: Microsoft Security: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges
    Added: Microsoft to Enhance Future Windows Security Defenses Against Viruses and Worms


    Windows XP

    Added: Windows XP File System: NTFS
    Added: Windows Messenger 4.7 for Windows XP

  •   Highlights

    Mobile Wi-Fi hits the streets

    Poking a stick at the Centrino.

    Read Full Article
    Microsoft Posts Windows Server 2003 Administration Tools Pack Download

    This week, Microsoft released the final version (build 3790) of its Windows Server 2003 Administration Tools Pack (adminpak.msi). The adminpak allows administrators to install the Windows Server 2003 management tools onto a Windows XP Professional or Windows Server 2003 family machines to perform remote server management functions.

    Read Full Article
    Windows XP File System: NTFS

    One of the first choices you have to make when you install (or upgrade to) Windows XP is the file system. FAT(32) or NTFS.

    This is really an easy choice. There's only one reason not to choose NTFS; if you need to have an operating system which can't read NTFS (Win9x, MS-DOS etc.) to be able to access the partition. This limitation only applies to the local machine. If you want to access an NTFS drive across a network, any OS can access the NTFS partition.

    Read Full Article
    The Correct File Is Not Installed When You Chain Multiple Hotfixes

    When you install multiple hotfixes without restarting your computer between each install (chaining), the correct binary may not be installed on your computer.

    This problem may occur with hotfixes for Windows XP or Windows 2000 that were created before December, 2002 (even if you use the QChain.exe file or the QChain functionality included in Windows XP and Windows 2000 hotfixes released since May 18, 2001) or hotfixes for Windows NT 4.0 (regardless of when they were created).

    Microsoft Knowledge Base
    Tell a friend about this Newsletter!

    Need Help with Windows? Ask questions here!

    FREE Software!

      Our Web Sites

    Windows-Help.NET
    WindowsBBS.com
    InfiniSource.com
    Rose City Software

      Subscribe Free

    IT Professionals
    Windows XP
    Windows XP Software
    Windows XP Security
    Windows XP Networking
    Windows XP Systems Management
    Windows 2000
    Windows Networking
    Firewalls
    LAN
    Network Management
    Systems Administrators
    Microsoft
    Training & Certification

    Lots More Great Mailing Lists!

    Enter E-mail address HTML E-mail?
    Yes No
    Zip Code:



    Subscribers to these free lists will receive occasional e-mail announcements of special offers relating to each topic of interest indicated above!

    Back Issues, unsubscribing etc.