MalekTips: 12-02-2004
 
Welcome to the latest issue of the MalekTips newsletter, providing computer and technology help and tips. We appreciate your subscription!
 
* Help remove spyware and adware by using the commercial PestPatrol and Spy Sweeper programs. Learn how to use PestPatrol to delete cookies, view a currently-running process list to help determine whether or not spyware has already infected your machine, and get information on what a particular 'pest' can do. Download an evaluation copy of Spy Sweeper, and then learn how to tweak its settings to better work on your system.
 
* Customize your Winamp 5 display when playing multimedia files. Have a lot of skins? Randomly switch between them when playing files. Skin the "Jump to File" dialog. Display shadows and smoother edges by enabling Desktop Alpha Blending. And more.
 
* Plus, this newsletter contains tips for Microsoft Excel 2003 including how to perform online research, Mozilla Firefox tips such as disabling Java support if you have security concerns, and Windows XP Start Menu tips including how to prevent accidentally moving icons between folders.
 
These tips and more, 30 in total, can be found below in the latest version of MalekTips. Enjoy! And remember - if you have a computer question, be sure to visit the MalekTips forums at http://www.malektips.com/forums
 
Andrew Malek MalekTips.Com
 
* Tell a Friend! *
 
Don't keep all these great tips to yourself - be sure to tell a friend about what's available, at no cost, on MalekTips.Com, and please pass this newsletter along! Let them know they can sign up to receive notifications regarding new tips added to the site.
 
Point them to the following web address to sign up and read past newsletters online: http://malektips.com/maillist
 
* Recent MalekTips Front Page Stories *
 
12-01-2004: Cumulative Security Update for Internet Explorer 6.
 
Microsoft has released a cumulative security update for Internet Explorer 6 running on Windows NT 4, Terminal Service SP6, Windows 98, Windows 98 SE, Windows ME, Windows XP 64-bit edition SP1, Windows 2000 SP3, Windows 2000 SP4, and Windows XP SP1. Windows XP SP2 users do not need this patch.
 
The update mainly targets the IFRAME vulnerability that allows malicious websites to execute code on a user's system.
 
This update is marked critical by Microsoft. Either check Windows Update (open Internet Explorer and choose "Tools" - "Windows Update") for this fix or visit the aforementioned website to download update number 889283.
 
Link (External Site): http://www.microsoft.com/security/bulletins/200412
_windows.mspx
 
Link (External Site): http://support.microsoft.com/kb/889293
 
11-29-2004: WINS Security Issue
 
Security firm Secunia has reported a vulnerability with WINS (Windows Internal Nams Service) that, when exploited, could allow the execution of arbitrary code. Workarounds are available on the aforementioned website and Microsoft KB article 890710.
 
Link (External Site): http://secunia.com/advisories/13328/
 
Link (External Site): http://support.microsoft.com/kb/890710
 
11-29-2004: Internet Explorer Image Download Spoofing
 
Security firm Secunia has reported a vulnerability with Internet Explorer 6, noted on a fully patched system running Windows XP SP2 (thus IE running on other operating systems is vulnerable). Websites can trick users into downloading malicious files by making them think they are downloading images with the "Save Picture As" command. No patch is available, but if you disable the option "hide extension for known file types" you may notice that when you save a malicious 'picture' that it has a non-picture file extension.
 
Link (External Site): http://secunia.com/advisories/13317/
 
11-23-2004: Software Provider Claims Internet Explorer Usage Under 90%
 
According to website analysis software provider OneStat, Internet Explorer usage is down to under 90%. This is due, in part, to the rising percentage of Internet users running a Mozilla-based browser such as Firefox. Though OneStat's numbers for Internet Explorer has dropped, it is still the most dominant web browser, with version 6.0 alone taking up almost an 81% market share. OneStat's research was taken from "a sample of 2 million visitors divided into 20,000 visitors of 100 countries each day."
 
Link (External Site): http://www.onestat.com/html/aboutus_pressbox34.htm
l
 
11-23-2004: Sun Java Vulnerability
 
iDefense is reporting a vulnerability with the Sun Java Plug-in. According to the vulnerability, Java to JavaScript data exchange could bypass the Java sandbox technology, allowing for malicious users to execute arbitrary code. It is recommended to upgrade to the latest version of the 1.4.2 Java Plug-in. Note that you should do a full upgrade; I tried doing an ugprade via the Java Plug-in Control Panel and it did NOT recognize a newer version was available. Read the aforementioned websites for more information about this vulnerability.
 
Link (External Site): http://www.idefense.com/application/poi/display?id
=158
 
Link (External Site): http://java.sun.com/j2se/1.4.2/download.html
 
11-23-2004: Winamp 5 Buffer Overflow Vulnerability
 
Security firm Secunia is reporting a buffer overflow vulnerability with Winamp 5. Malicious websites could contain playlist (.M3U) files that, when accessed, will trigger this vulnerability, allowing for the execution of arbitrary code. According to the advisory, Winamp 5.06 fixes this vulnerability.
 
Link (External Site): http://secunia.com/advisories/13269/
 
Link (External Site): http://www.winamp.com/
 
11-19-2004: W32.Sober.I@mm
 
Symantec is reporting a new worm, W32.Sober.I@mm, is in the wild, and is labeled a level 3 warning (out of 5). Distributed as a file attachment of .PIF, .ZIP, .SCR, .BAT, or .COM inside e-mail messages, this worm will download and execute a remote file. Multiple e-mail froms, subjects, bodies, and attachment names are used, both in German and English. Be sure to keep your antivirus definitions up-to-date, and always, ALWAYS, be careful when receiving e-mail file attachments, even from those you trust!
 
Link (External Site): http://www.sarc.com/avcenter/venc/data/w32.sober.i
@mm.html
 
11-17-2004: Internet Explorer Vulnerabilities
 
Security firm Secunia is reporting a few more vulnerabilities in Internet Explorer. A "moderately critical" set of exploits states that malicious websites could trick users into downloading executables where they think they are downloading web or other documents. This bypasses the Windows XP SP2 security warning when downloading executables. Another, less critical exploit involves cookies, whereby malicious websites could perform session fixation attacks in certain situations. No patches are available but workarounds are listed.
 
Link (External Site): http://secunia.com/advisories/13203/
 
Link (External Site): http://secunia.com/advisories/13208/
 
11-17-2004: MalekTips 2,000 News Release On the Web
 
Our 2,000 computer tips press release is making its way around the web. Check us out on Yahoo!, Google, KVOA Channel 4 in Tucson, Forbes, and elsewhere.
 
Link (External Site): http://malektips.com/pr11172004.html
 
Link (External Site): http://biz.yahoo.com/prnews/041117/sfw048_1.html
 
Link (External Site): http://news.google.com/news?q=malektips
 
Link (External Site): http://kvoa.com/Global/story.asp?S=2577052
 
Link (External Site): http://forbes.com/feeds/prnewswire/2004/11/17/prne
wswire200411170701PR_NEWS_B_NWT_SF_SFW048.html
 
* Tips! *
 
These tips are NOT available to the general public yet! You can find them here first in the MalekTips newsletter! Thanks for subscribing.
 
Microsoft Excel 2003 - Show Negative Dollar Values in Parenthesis
Many businesses want negative dollar amounts shown in parenthesis, not prefixed by minus signs. Perform this tweak with Excel 2003.
 
Microsoft Excel 2003 - Display Text Vertically
Make text in your Excel 2003 really stand out - vertically.
 
Microsoft Excel 2003 - Look up Words or Perform Research Online
Research stock quotes, word definitions and synonyms, encyclopedia entries, and more from within Excel 2003.
 
Microsoft Excel 2003 - Prevent Dynamic Data Exchange
Prevent Excel 2003 from communicating with other programs, possibly revealing private or sensitive data.
 
Microsoft Excel 2003 - Ignore Spellchecking Uppercase Acronyms
Prevent acronyms from triggering the ire of your Excel 2003 spellchecker.
 
Mozilla Firefox - Send Link to Current Page in Email
Send a friend or coworker a link to a great web page you found in Mozilla Firefox.
 
Mozilla Firefox - Increase or Decrease Text Size, or Reset to Default
Make text on Mozilla Firefox webpages easier to read.
 
Mozilla Firefox - Stop Remembering Passwords
Increase your privacy by preventing Mozilla Firefox from remembering website passwords.
 
Mozilla Firefox - View Bookmarks Outside of the Menu in a Sidebar
View an easier-to-navigate listing of your Mozilla Firefox bookmarks.
 
Mozilla Firefox - Toggle Java Support
Disable Java support in Firefox if you are concerned about applet security.
 
PestPatrol - Get Information on a Particular Pest
Find out how a particular piece of spyware or adware operates with PestPatrol
 
PestPatrol - Show Running Process List
PestPatrol can help determine if spyware or adware is already on your system.
 
PestPatrol - Scan and Manually Delete Cookies
Use PestPatrol to scan for and delete browser cookies.
 
PestPatrol - Disable Sound When Cookie is Removed
Tired of that annoying sound you hear when PestPatrol removes a cookie? Disable it!
 
PestPatrol - Download Updates Without Launching PestPatrol
Upgrade PestPatrol without having to load the full main module.
 
Spy Sweeper - Where to Download to Remove Spyware
Download an evaluation copy of Spy Sweeper to help remove adware and spyware from your system.
 
Spy Sweeper - Scan More Than Just Your C: Drive for Spyware
Have Spy Sweeper scan other hard drives or removable devices for spyware and adware
 
Spy Sweeper - Scan For Spyware at Windows Startup
Check for spyware and adware every time your computer boots with Spy Sweeper.
 
Spy Sweeper - Change the Protected Internet Explorer Home Page
After installing Spy Sweeper, you'll need to perform this tweak to change your Internet Explorer home page.
 
Spy Sweeper - Remove Explorer Context Menu Extension
Remove the "Sweep for Spyware" option Spy Sweeper adds to Windows Explorer.
 
Winamp 5 - Choose a Skin Randomly
Cycle through your Winamp 5 skin collection whenever you play different multimedia files.
 
Winamp 5 - Skin the 'Jump to File' Dialog
Now you can even skin Winamp 5's dialog when searching for files in your multimedia playlist.
 
Winamp 5 - Turn off Media Library Options for Radio, TV, Music, Video
Hide steaming media options in Winamp 5's Media Library.
 
Winamp 5 - Enable Desktop Alpha Blending for Shadows and Smoothed Edges
Smooth your Modern skins in Winamp 5 and add special visual effects.
 
Winamp 5 - Disable Title Space Reformatting Before Transferring Files
Keep Winamp 5 from surprising you when viewing titles of multimedia files transferred to a digital audio player.
 
Windows XP Taskbar - Toolbar - Start Menu - Keep the Taskbar Hidden Until Needed
Auto-hide your Windows XP Taskbar until you need it.
 
Windows XP Taskbar - Toolbar - Start Menu - Change the Size of your Start Menu Icons
Shrink the size of your Windows XP Start Menu to display more programs.
 
Windows XP Taskbar - Toolbar - Start Menu - Toggle Grouping Taskbar Buttons
Toggle Windows XP's group of related software on the Taskbar.
 
Windows XP Taskbar - Toolbar - Start Menu - Stop Highlighting New Programs
Keep Windows XP from featuring newly installed programs on the Start Menu.
 
Windows XP Taskbar - Toolbar - Start Menu - Stop Accidentally Moving Programs in the Start Menu
Stop dragging and dropping programs into incorrect Start Menu folders.
 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 
* Copyright Notice *
 
This newsletter can be redistributed, in electronic or print, provided that no changes are made to this document and this notice is left intact. If you wish to redistribute just pieces of this newsletter, such as certain articles, contact Andrew Malek for information.
 
MalekTips is published by Envision Programming:
 
Envision Programming attn: MalekTips PO Box 11592 Knoxville, TN 37939-1592
 
This issue of MalekTips is Copyright 2004 Andrew Malek of Envision Programming. All other copyrights and trademarks are properties of their respective companies.

Note that due to tip recategorization, some of the URLs mentioned in the newsletter may have changed. If you have any problems finding a particular tip, use the MalekTips "Search" feature to conveniently find what you are looking for.

New in MalekTips: