JPEG Virus alert

[RickM]

This has been predicted for a while.
Seems the loophole is now being exploited and has permeated from Porn Newsgroups to AOL Messenger..... Be careful out there.


http://news.bbc.co.uk/1/hi/technology/3701640.stm

BTW, Is the latest XP Security update considered stable now? I understand there are additional patches as well.

[mikester]

The latest security update IS stable (as compared to the rest of Windows) it's just that the things that it does in the name of security might adversely effect programs that weren't designed with security in mind. I've been using it since it was released and haven had a single issue with any of my programs (your basic office suite with system admin tools).

Still - the XP's SP2 doesn't have the fix for this it's a standalone fix and suggest everyone download both.

http://www.microsoft.com/security/bulletins/200409_jpeg_tool.mspx

[jrdavid68]

XP SP2 is stable. The problem a lot of people have had updating results from adware/spyware etc. that is already on the machine prior to the update. The programs that don't work will affect more business type programs, not the typical home user.

Users need to make sure their systems are "clean" before updating to SP2.

XP SP2 is not vulnerable to this JPG/GDI issue. Mikester's link above has a note about that.

If your virus protection and security updates are current, you will be fine

[RickM]

Thanks for the info Mike....any particular (or popular) applications that suffer from the update?

[928ram]

For those of you (like me) who are still using dial-up and don't want to wait hours for SP2 to download, MS will send out a disk free of charge so you can install that way.

[mikester]

What is this D-I-A-L-U-P you speak of?

[VaSteve]

Couldn't they please post the offending photos so I will know if I have seen them?

[RickM]

Originally posted by jrdavid68


XP SP2 is not vulnerable to this JPG/GDI issue. Mikester's link above has a note about that.

So this is incorrect--> "Users who have updated their Windows XP machines with the SP2 update could still be at risk from this bug if they are running unpatched programs, such as Microsoft Office, that are vulnerable."

Or all other programs should be patced as well....

[Moses]

Vulnerable systems:

Windows XP
Windows XP Service Pack 1
Windows Server 2003
Internet Explorer 6 SP1
Office XP SP3
Office 2003
Digital Image Pro 7.0
Digital Image Pro 9
Digital Image Suite 9
Greetings 2002
Picture It! 2002
Picture It! 7.0
Picture It! 9
Producer for PowerPoint
Project 2002 SP1
Project 2003
Visio 2002 SP2
Visio 2003
Visual Studio .NET 2002
Visual Studio .NET 2003

I feel left out.

[Z-man]

Originally posted by RickM
Thanks for the info Mike....any particular (or popular) applications that suffer from the update?

My wireless network went to pot when I installed SP2. Linksys 'g' network.

-Z.

[jrdavid68]

Originally posted by RickM
So this is incorrect--> "Users who have updated their Windows XP machines with the SP2 update could still be at risk from this bug if they are running unpatched programs, such as Microsoft Office, that are vulnerable."

Or all other programs should be patced as well....

RickM - when you check your system for updates on the the Microsoft site, it will let you know. For instance, on the last machine I updated, the process notified me that the machine did not have any applications that required the GDI update.

So, if you are current on both Microsoft updates and virus protection, you will be fine.

Moses has the list posted above with the affected software - do you have any of those?

[RickM]

I have XP on one PC at home. Not sure of patch update level. I wanted the smoke to clear on the latest service pack because of initial reaction.

I also have Explorer but now use Mozilla instead.

I wonder if my Dlink access point is affected.

[id10t]

RickM - your access point is fine... it is a flaw in the way the information in a jpeg is handled. it is possible to introduce executable code into an image, so that the code is run (format c: or whatever) when an infected image is viewed wiht one of the vulnerable applications.

[mikester]

Originally posted by Z-man
My wireless network went to pot when I installed SP2. Linksys 'g' network.

-Z.

Your network is fine - the linksys software is what isnt' working anymore (grin). I imagine reinstallation of that software or revisiting the configuration is all that is needed.

I know that SP2 added a lot of wireless functionality into the operating system. So you may simply not need the linksys software anylonger.

[RickM]

Gotcha. Thanks all.....onto safer computing....for the moment.

[Z-man]

Originally posted by mikester
Your network is fine - the linksys software is what isnt' working anymore (grin). I imagine reinstallation of that software or revisiting the configuration is all that is needed.

Been there, done that x5! But I didn't check Linksys for updated drivers - maybe that's the ticket!

mikester
I know that SP2 added a lot of wireless functionality into the operating system. So you may simply not need the linksys software anylonger.

I guess you can call it functionality! How I hate it when a computer thinks for me! (No: I don't want YOU to assign me a gateway / IP. No, I don't need your software firewall. Now leave me the HECK ALONE! :grr: )

-Z.

[928ram]

What is this D-I-A-L-U-P you speak of?

I guess in PC-speak that would be a "legacy" means of accessing the 'net?
It's reserved for us cheap bastages who won't spend the extra $20/mo on broadband because we know we'd waste just as much time here; only twice as fast.

[jrdavid68]

Originally posted by 928ram
I guess in PC-speak that would be a "legacy" means of accessing the 'net?
It's reserved for us cheap bastages who won't spend the extra $20/mo on broadband because we know we'd waste just as much time here; only twice as fast.

Do you pay for a second phone line for the D-I-A-L-U-P?

[id10t]

Z-man - also, be sure to either let the vendor software control it completely, and disable XP's control, or vice versa. If the above re: improved wireless is true, then it would probably be best to let XP manage it completely.

[928ram]

Do you pay for a second phone line for the D-I-A-L-U-P?

Not a chance; I'm on the natl. do not call list so they can't call, got caller ID so I can screen the calls, and (a bonus of dialup w/1 line) can leave the PC online for hours at a time. I like to think of my phone service as mine alone to use.