Microsoft Security Advisory (2639658)

That is a nasty bug (to allow such potential for damage). Sooner it is fixed the better

 

Thanks for this, Ron

 

Any thoughts on the odds of actually encountering this? I hate having to go around and run these fix-its on a dozen machines when a patch will be coming... sometime.

 

Most AV Vendors are now offering full protection from all known variants.

An out-of-band patch from Microsoft will not be forthcoming on Patch Tuesday, November 8 !!

It has become known in the security community the MS Fix It 50792 Live Link re-enables the following two MS KB's to be offered via Windows Update that date to late last year, as follows: http://support.microsoft.com/?kbid=982132 & http://support.microsoft.com/?kbid=972270

The general consensus is to disable the MS Fix It Live Link Reboot your PC, proceed with Windows Update as you normally would and re-implement the Fix It if you so choose to do so after you have successfully completed updating your operating system.

 

I wouldn't bother, as stated it's pretty widely detected. MS have pushed out important individual updates in the past during the last week of the month, it's possible they will do so in november.

 

I read that most security vendors already detect and block the main Duqu files. Has ESET addressed these files?

 

Microsoft sloppy on Duqu workaround

 

ESET currently offers fulls protection from all known variants of Duqu You may also run this query

 

Thread bump.

Microsoft PC Safety are available 24 hours for US and Canadian users at 1-866-727-2338

 

Thanks for the Fixit link, Ron.
I'm a little late to the party, but I did just apply the fix.
Now I gotta remember to disable the fix before the next MS Updates.

 

FWIW, I had to disable the Fixit in order to stop MS from continually offering two updates to me (KB982132 & KB972270).
Prior to running the disabling fixit (50793), MS would continuously say,

MS reportedly has already noted this...

All well and good, but I have read one blogger who states,

Sigh.
From what I gather, the Fixit is best either left in place (with the continual offering of the two Updates taking place), or removed to allow the updates to install, and then enabled once again.