WinInfo Daily UPDATE, August 2, 2004

Windows Scripting Solutions

Sponsor: Windows Scripting Solutions

Try a Sample Issue of Windows Scripting Solutions
Windows Scripting Solutions is the monthly newsletter from Windows & .NET Magazine that shows you how to automate time-consuming, administrative tasks by using our simple downloadable code and scripting techniques. Sign up for a sample issue right now, and find out how you can save both time and money. Click here!


In the News

- Microsoft Finally Releases Comprehensive IE Security Fix, Updated Worm Removal Tool
- Microsoft Preps 64-bit Windows Server 2003 Beta Upgrade, OS Exchange Program

==== In the News ====

by Paul Thurrott, [email protected]

Microsoft Finally Releases Comprehensive IE Security Fix, Updated Worm Removal Tool

As first reported in WinInfo Daily UPDATE, on Friday Microsoft delivered an out-of-cycle critical security update for Microsoft Internet Explorer (IE). The update addresses three publicly disclosed IE vulnerabilities. In a bulletin that describes the update, Microsoft noted that it fixes the vulnerability that caused the Download.Ject virus and other problems.
"This bulletin addresses issues that could allow a malicious attacker to execute code on or take control of an affected computer user's system," a note I received from Microsoft said. "This could allow the attacker to install programs, view, change, or delete data, or create new accounts that have full privileges. Microsoft is committed to helping customers keep their information safe, and encourages all users to review, download and install this security update."
The comprehensive IE security fix is available now through Automatic Updates, Microsoft Windows Update, and the Microsoft Security Web site (see the first URL below). Microsoft said that this fix will also be included in the version of IE that ships with the final version of Windows XP Service Pack 2 (SP2), which is due later this month. In addition, the company says that XP SP2 will include new "underlying architectural changes" that will mitigate these types of attacks.
The fix, which comes more than a month after attackers launched the Donwload.Ject attack, falls outside the company's planned monthly security-patch schedule because of the severity of the vulnerabilities. Last month, Microsoft released an interim fix of sorts (which the company called a configuration change) to help users combat Download.Ject. However, security researchers quickly denounced the configuration change as ineffective.
In related news, Microsoft also released an updated version of its Mydoom, Zindos, and Doomjuice Worm Removal Tool, which detects and removes various versions of the MyDoom worm (including variants A, B, E, F, G, J, L, and O), Zindos.A, Doomjuice.A, and Doomjuice.B. You can download the tool from Microsoft's Web site (see the second URL below).

Microsoft Preps 64-Bit Windows Server 2003 Beta Upgrade, OS Exchange Program

A Microsoft representative told me that the company will issue an updated beta version of Windows Server 2003 for 64-Bit Extended Systems, which targets the 64-bit x64 AMD and Intel platforms. In addition, the company will offer users a free trade-in program so that they can exchange 32-bit Windows 2003 products for the final version of Windows 2003 for 64-Bit Extended Systems, which is now expected in early 2005.
"We've had a customer preview program for Windows Server 2003 for 64-Bit Extended Systems since January, and it's been extremely successful, with over 20,000 downloads," Dennis Oldroyd, a director in the Windows Server group, told me Friday. "We are on Monday revving that beta to a new version that will support both Intel EM64T Xeon and AMD Opteron chips." Oldroyd said that the January preview was officially available only for AMD because AMD had the only available x64 platform at the time. Since then, Intel has announced its intention at sell x64-based variants of its Pentium 4 and Xeon processors, which will be compatible with the 64-bit AMD Athlon 64 and AMD Opteron processors. Intel's first x64 chips could arrive as early as this week, sources tell me.
Oldroyd also discussed Microsoft's plans to let customers who purchase AMD64 or Intel EM64T systems now exchange their existing 32-bit Windows 2003 CD-ROMs for 64-bit versions when the OS becomes available. "We haven't figured out all the details yet," he said. "But we're going to have a technology exchange program. We're going to offer to customers who purchased an X64 system with a 32-bit version of Windows Server an exchange for an x64 version of Windows Server when that becomes available in 2005. The price to \[PC makers\] is the same, so it will be an even exchange." Customers can start ordering the x64 Windows 2003 beta from the Microsoft Web site today (see the URL below).
Oldroyd said that he sees the exchange program as a customer benefit because people who evaluate new 64-bit hardware today won't be locked into using the 32-bit version of Windows that now ships with those systems. "We see the \[64-bit\] market as being in the evaluative stage right now," he said. "A lot of people running 64-bit hardware will continue running 32-bit software by choice. But the appearance of 64-bit drivers and applications will drive people to make the decision to upgrade to 64-bit Windows over time."
Functionally, the 64-bit Windows 2003 will be identical to the 32-bit version of Windows 2003, Enterprise Edition. But as more hardware makers begin shipping x64 systems, Oldroyd and other Microsoft executives I've spoken with expect the 64-bit products to become mainstream. After that happens, applications developers will exploit the platform's unique features to deliver solutions that will further differentiate x64 systems from today's 32-bit platforms.

==== Announcement ====

(from Windows & .NET Magazine and its partners)

Get 2 Free Sample Issues of SQL Server Magazine!

If you're a SQL Server user, SQL Server Magazine is a must-read. Each issue offers a treasury of relevant articles, savvy tips, endless code listings, and expertise that will give you the answers you are looking for. Chose from a library of hot topic discussions relating to reporting services, security, high availability, and much more. Order now:


==== Events Central ====

(A complete Web and live events directory brought to you by Windows & .NET Magazine: )

Free Roadshow in Your City Soon--HP Wireless & Mobility Roadshow 2004

In this free Roadshow, you'll discover trends in the wireless and mobility industry, come away with a better understanding of wireless and mobility solutions, and talk firsthand about your wireless projects with leaders in the industry. See proven wireless and mobile solutions in action. Register now!

==== Sponsored Links ====


Comparison Paper: The Argent Guardian Easily Beats Out MOM;6480843;8214395;q?


Free Download--New--Launch NetOp Remote Control from a USB Drive;9571671;8214395;t?

==== CONTACT US ====

About the newsletter -- [email protected]
About technical questions --
About product news -- [email protected]
About your subscription -- [email protected]
About sponsoring UPDATE -- [email protected]

This email newsletter is brought to you by Windows & .NET Magazine, the leading publication for IT professionals deploying Windows and related technologies. Subscribe today.

Manage Your Account

You are subscribed as #EmailAddr#.
You received this email message because you requested to receive additional information about products and services from the Windows & .NET Magazine Network. To unsubscribe, send an email message to mailto:[email protected] Thank you!

View the Windows & .NET Magazine Privacy policy at

Windows & .NET Magazine a division of Penton Media Inc.
221 East 29th Street, Loveland, CO 80538
Attention: Customer Service Department

Copyright 2004, Penton Media, Inc. All Rights Reserved.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.