Posted by: secureitfoundation on: January 4, 2012
Update – 04/01/2012
Microsoft release a proper patch in the December monthly update release, so if you ran the FixIt then ideally you need to run the remove FixIt tool before updating Windows.
We did test applying the update over the FixIt and it does appear to work successfully but this is not the Microsoft recommended approach…
When you run Windows Update you may notice a new .Net update. This is a new emergency patch issued by Microsoft for another .net security flaw.
SecurityBrad
—————————————–
You may have heard of a new security problem with all version of Windows, originally identified as a virus called Duqu. What made this virus count is that it uses a previously unknown bug in Windows to install itself.
The Duqu file may come from any source, not just what appears to be a word document as was stated from the initial reports. To protect yourself until there is a proper fix for Windows, Microsoft has made a FixIt, a temporary software plaster, available.
Our advice is to run the FixIt as soon as possible (Do choose the ‘Enable’ FixIt!) and also check that your Anti Virus software is up to date and updated. Eventually a proper fix will be released but that may be too late for some people…
SecurityBrad
