Attachments:

http://www.dslreports.com/r0/download/9446...pyad_051228.zip 1960 bytes

Hi All:

Attached to this post is an interim update to IE-SPYAD designed to address new domains related to the Windows MetaFiles (WMF) exploit discussed in these postings:

http://www.dslreports.com/forum/remark,15115819
http://sunbeltblog.blogspot.com/2005/12/ne...ly-patched.html
http://sunbeltblog.blogspot.com/2005/12/mo...ts-in-wild.html
http://sunbeltblog.blogspot.com/2005/12/mo...mf-exploit.html
http://sunbeltblog.blogspot.com/2005/12/wo...mf-exploit.html

Most of the domains related to this new exploit are already included in the latest full version of IE-SPYAD (released Dec. 27):

https://netfiles.uiuc.edu/ehowes/www/resource.htm#IESPYAD
https://netfiles.uiuc.edu/ehowes/www/resource.htm#IESPYAD_ZO

Users who have not installed the Dec. 27th version of IE-SPYAD should do so ASAP. This interim update is designed to supplement the Dec. 27th update, not replace it.

Please note that not all of the domains included in this interim update are related to the WMF exploit. Non-related domains are included in order to offer additional protection against unwanted installations of unwanted software at potentially malicious web sites. All of the domains included in this interim update will be included in the next full update to IE-SPYAD.

**Instructions**

Before installing this interim update, please ensure that you have installed the last full version of IE-SPYAD, dated Dec. 27:
https://netfiles.uiuc.edu/ehowes/www/resource.htm#IESPYAD
https://netfiles.uiuc.edu/ehowes/www/resource.htm#IESPYAD_ZO

As this interim update is designed to be installed on top of an existing IE-SPYAD installation, do NOT uninstall your current version of IE-SPYAD before installing this interim update.

Users of IE-SPYAD for ZonedOut should also use this interim update -- there will be no separate update file for IE-SPYAD for ZonedOut.

To install:

1. Close any open sessions of Internet Explorer.

2. Double-click on the file IESPYAD_051228.REG.

3. When Windows asks you whether you want to add the information contained in the file to the Windows Registry, click "Yes."

Windows will then merge the additions into your Registry.

There is no separate uninstaller for this update. Individual domains can be removed through the "Sites" box for the Restricted sites zone -- see the Security tab in Internet Explorer's "Internet Options" configuration box. All the domains included in this interim update will be rolled into the next full update for IE-SPYAD, which should be forthcoming in the next 3-5 days.

Please feel free to spread word of this interim update to other forums.

Best,
Eric L. Howes
Microsoft MVP
Sunbelt Software Consultant
Spyware Warrior