SECURITY ALERT: Critical Microsoft Security Update for Windows Users
(U.S. Eastern Time) DAY: Monday DATE: October 19, 2009
Personal computers running Microsoft Windows may be vulnerable an exploit which may allow an unauthorized attacker to take complete control of an affected system that is connected to a network without any end-user action.
If you suspect your computer has already been compromised, STOP! Immediately take the following steps:
Disconnect from the network - turn off wireless or unplug the wired network cable.
Discontinue use of the machine but DO NOT power off.
If your computer is managed by a Carnegie Mellon departmental computing administrator, please consult that person before making any system changes.
What You Need To Do:
Upgrade Microsoft Update NOTE: Skip this step if you have previously upgraded to Microsoft Update or are using Windows Vista. Repeating this step is harmless if you are unsure whether you have already upgraded to Microsoft Update.
Upgrading to Microsoft Update allows updates to Microsoft Office and other Microsoft products to be delivered all from one web site as well as installed automatically if you have Automatic Updates enabled.
Run Microsoft Update. NOTE1:If your computer is configured for Automatic Updates (highly recommended), it may have already applied the update and you will see zero High Priority updates when running Microsoft Update. NOTE2: Once you install Microsoft Update, all links to Windows Update will forward to Microsoft Update automatically.
Ensure You Reboot Your Computer If Prompted by Windows
The update will require a reboot and will periodically prompt you to reboot until you do so. Please reboot AS SOON AS POSSIBLE when prompted. This is especially important for laptop users who normally hibernate/standby their machines rather than rebooting.
Secure Your Computer
As always, following guidelines for secure computing generally reduces your risk of impact from this and other vulnerabilities. Windows Vista instructions Windows XP instructions
Contact:
Please direct any questions or comments to the Computing Services Help Center (412-268-HELP or advisor@andrew.cmu.edu) or to your departmental administrator or DSP consultant.
