March 2008 Archives

Microsoft has updated how they are using update packages in Office 2007 System:

With the 2007 Office system, each update rollup package is cumulative regarding the whole Office program. Therefore, if you apply an update rollup package to a 2007 Office product, you apply all the fixes that are contained in that update rollup package. This includes all the fixes that are contained in each earlier Office program update rollup package.

For example, you apply an update rollup package that was released May 22, 2007, to Microsoft Office Word 2007. In this situation, you receive all the fixes that are contained in that rollup package as expected. However, you also receive all the fixes that are contained in the previously released rollup packages for Word 2007.

From this MS KB
http://support.microsoft.com/kb/949370

See the MS KB for more info.

When you attempt to connect to Windows Update or Microsoft Update, you receive an error

"Information - Files required to use Windows Update are no longer registered or installed on your computer. To continue: (checked) Register or reinstall the files for me now (Recommended)"

You then get "Checking the latest version of Windows Updating sofware" followed by "Downloading and installing the latest software - 100%" followed by "registering - 100%". Then I am taken back to the "Welcome to Windows Update" paged and again when selecting either "Express" or "Custom" the whole process repeats.

Create a text file called FixUpdate.bat.

Then righ click and choose Edit

Paste in the following text. Save. Close. Then double click on FixUpdate.bat. Restart and try again.

net stop wuauserv

regsvr32 wuapi.dll /s
regsvr32 wups.dll /s
regsvr32 wuaueng.dll /s
regsvr32 wucltui.dll /s
regsvr32 wuweb.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 msxml3.dll /s
regsvr32 urlmon.dll /s

net start wuauserv

regsvr32 softpub.dll /s
regsvr32 mssip32.dll /s
regsvr32 wintrust.dll /s
regsvr32 dssenh.dll /s
regsvr32 rsaenh.dll /s
regsvr32 gpkcsp.dll /s
regsvr32 sccbase.dll /s
regsvr32 slbcsp.dll /s
regsvr32 cryptdlg.dll /s
regsvr32 jscript.dll /s

Google has released Calendar Sync, an app that transfers appointments between Google Calendar and Outlook. You can choose between full 2-way syncing, 1-way: Google Calendar to Microsoft Outlook calendar, or  "1-way: Microsoft Outlook calendar to Google Calendar".

http://www.google.com/support/calendar/bin/answer.py?answer=89960

Google has more information here:

http://googleblog.blogspot.com/2008/03/google-calendar-sync.html

Since I have a Google account, I was able to test this. I downloaded and installed Google Calendar Sync (needed to close Outlook first)

http://www.google.com/support/calendar/bin/answer.py?answer=89955

I chose the "1-way: Microsoft Outlook calendar to Google Calendar". The sync ran in about 5 minutes. As I look at the Google calendar, looks like all the events are there. The default sync time was every 120 minutes. I know have the "Google Calendar Sync 0.9.3.0" running in my notification area. Will let this go to see if it causes any issues.

Now, if I had an iPhone, I'd be able to see my "Outlook calendar" via the web and Google Calendar. If I had chosen "2-way" syncing, I guess I could keep my calendar in sync.

I've seen a number of Phishing attempts in my time, never one that had an attached 'invite.ics' file from Google Calendar. Since it came through as an Invitation, there were no full Internet Headers to trace the path.

I did save the 'invite.ics' file and opened it in Notepad. Here is that text.

BEGIN:VCALENDAR
PRODID:-//Google Inc//Google Calendar 70.9054//EN
VERSION:2.0
CALSCALE:GREGORIAN
METHOD:REQUEST
BEGIN:VEVENT
DTSTART:20080305T050000Z
DTEND:20080305T060000Z
DTSTAMP:20080304T174202Z
ORGANIZER;CN=patrick moore:MAILTO:patrickmoor2004 @ [removed].com
UID:ik2fh7vpcee0t4p13o347oho1c@google.com
ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=
 TRUE;X-NUM-GUESTS=0:MAILTO:keeper@psu.edu (this is my email)
CLASS:PRIVATE
CREATED:20080304T174158Z
DESCRIPTION:[removed]
LAST-MODIFIED:20080304T174158Z
LOCATION:
SEQUENCE:0
STATUS:CONFIRMED
SUMMARY:Attn: Beneficiary
TRANSP:OPAQUE
END:VEVENT
END:VCALENDAR

There were links that asked

Will you attend?

Yes |No |Maybe

In breaking down the links, they all went to the same address. Here they are in four parts.

aWsyZmg3dnBjZWUwdDRwMTNvMzQ3b2hvMWMga2VlcGVyQHBzdS5lZHU

aWsyZmg3dnBjZWUwdDRwMTNvMzQ3b2hvMWMga2VlcGVyQHBzdS5lZHU

aWsyZmg3dnBjZWUwdDRwMTNvMzQ3b2hvMWMga2VlcGVyQHBzdS5lZHU

&rst=1&tok=MjUjcGF0cmlja21vb3IyMDA0QGdtYWlsLmNvbTRlOGM0ZWM1MTZlYT

&rst=2&tok=MjUjcGF0cmlja21vb3IyMDA0QGdtYWlsLmNvbTRlOGM0ZWM1MTZlYT

&rst=3&tok=MjUjcGF0cmlja21vb3IyMDA0QGdtYWlsLmNvbTRlOGM0ZWM1MTZlYT

g2YTRlOGZkZGEwYzZhMjY2OGRkZDQyNWExODA&ctz

g2YTRlOGZkZGEwYzZhMjY2OGRkZDQyNWExODA&ctz

g2YTRlOGZkZGEwYzZhMjY2OGRkZDQyNWExODA&ctz

=Pacific%2FHonolulu&hl=en

=Pacific%2FHonolulu&hl=en

=Pacific%2FHonolulu&hl=en

So in the classic shell game, any answer would have confirmed my email address as being "live" and could have been used for more Spam.

As further indication of human engineering, the Phisher is on Honolulu time. Lucky them.

Never seen one of these attempts. Interesting.  

When you start your Camera for a Breeze meeting, are you prompted to allow "Camera and Microphone Access" for 'psu.edu"?

These steps will show you how to allow access within the Adobe Flash Player so you're never prompted again.

1.  Click this link to open the Flash Player Settings Manager.

Website Privacy Settings Panel (http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager06.html)

Tip: You can also do a search for "Flash Player Settings Manager" in Google.

2.  Click the Website Privacy Settings Panel link.

Note: This is your list of visited sites. We're assuming that you'll find psu.edu in this list. If it doesn't appear on the list, you need to login to Breeze before you continue.

3.  From the list of Visited Websites, locate and select psu.edu.
4.  Click the Always allow radio button.
5.  Close all Internet Explorer windows to save the change.

When you login to a Breeze meeting and start the Camera and Voice, you should not be prompted to allow access.

To watch this as a video; click here: Allow 'Camera and Phone Access' for 'psu.edu'

http://www.utipu.com/app/invited/id/5e80bf0b74df42908cca7c85c1fe957c