Microsoft advisory: Internet Explorer zero day exploit affects most Windows versions

Microsoft pushed out a security advisory on Monday that revealed the vulnerability affects most supported versions of Internet Explorer and Windows.

The company urged users of Internet Explorer 9 and earlier to take steps to protect their computers from public attacks on the newly discovered security hole.

Microsoft released Security Advisory 2757760 late on Monday in response to reports of public attacks on Windows systems running the Internet Explorer web browser.

Sophos products detect malware using the Internet Explorer exploit as Troj/SWFDL-G, Troj/SWFDL-H and Troj/SWFDL-I.

Internet Explorer versions 6, 7, 8 and 9 were found to be vulnerable running on fully patched installations of Windows XP, Windows Vista, Windows 7 and Windows Server 2003 and 2008, Microsoft revealed. Only some versions of Windows Server 2008 for 32- and 64-bit systems and the yet-to-be released Windows 8 and Windows Server 2012 were not affected.

At the moment Microsoft are working on a fix. Providing you are using Sophos, it will be detected and stopped. Other Anti-Virus and Malware providers will also detect an attack and prevent it.

Once Microsoft release a fix, please ensure that you install it as soon as possible.

If you are unsure or have any questions, please complete for form below asking for assistance.

Comments or questions are welcome.

* (denotes required field)
Please enter your E-mail Address a second time.

Virus Guide and Definition

There are many types of virus, some of which are not actually a virus. This virus guide explains the differences. We also take a look at “Flame” that is currently grabbing all the headlines.

Virus guide and definition

Virus

A computer virus piggybacks on the top of other programs or documents infecting the computer. Some aim to cause damage to the information on the computer. Others attempt to install other software – see below.

Worm

Worms spread by sending copies of themselves across a network or the internet, exploiting vulnerabilities in programs. This is why you must apply all patches and updates to your computers as they become available. Once your computer is infected, it is massively more difficult to clean it. Prevention is better than cure.

Trojan Horse

A program that appears useful but contains something harmful. Usually used to deliver spyware or a virus.

Spyware

Software that obtains information from a user’s computer without thier knowledge. Keyloggers are a good example where they capture the keys you press on your keyboard.

Adware

Programs that secretly gather personal information through the internet and then use it to bombarde you with adverts and spam email.

Malware

Malicious software, is software used or created by hackers to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

Spam

Is in not a virus, however it is just as frustrating. A lot of Anti-virus companies now produce Anti-spam software as well.

Flame

Flame is a particularly nasty and extremely sophisticated piece of malware capable of stealing large volumes of information. It then sends it to a server somewhere in the world. It can record keystrokes, collect passwords, take screenshots, control your webcam, and get information about discoverable Bluetooth devices.

Currently it is suspected to have infected some 600 computers worldwide, mainly in Iran, Israel, Egypt etc. It works by exploiting a flaw in Windows, tricking the computer to believe it is a legitimate Windows software update.

Flame’s creators can supposedly send a “self-destruct” command to the sofware forcing it to wipe itself before it is detected. It is easily the most complex and functionally capable virus to date. At the moment it appears to be used to target governments, and is reported as being used to disrupt the Iranian nuclear programme. If it makes it into the wider community, we should all be very afraid.

If you need help with any of these, please complete the form below:

Comments or questions are welcome.

* (denotes required field)
Please enter your E-mail Address a second time.