• Skip Navigation

Itchy Hands

Search for:

• Home
• About

Archive for the ‘Windows’ Category

Test Internet Explorer 7 without installing it

I’ve heard lots about Internet Explorer 7 but never really bothered to check it out. So what if Microsoft makes another browser right? Plus, installing the IE7 beta would override my old IE6, which I still needed for browser testing.

But recently I had to test a site I’ve been developing in IE7, just to make sure that the site design doesn’t get messed up when IE7 eventually gets released. Plus, yesterday’s In-Tech article got me a little more curious. Luckily I found a way to run both IE7 and IE6 at the same time.

This article on the Google OS blog shows you how to do that. It explains a hack of how to copy the necessary IE7 beta files to the hard drive and create some files to patch IE7 so that it can run together with IE6. The results works as advertised and I’m able to open both versions of the browser at the same time.

First looks

IE7 looks shinier than its predecessor. It’s also been updated a lot in the CSS department. It’s also got tabs, support for RSS, built-in search, improved security (Thank God) and improved printing (wow).

It’s got one nice feature that I like called Quicktabs. Quicktabs allows you to see a thumbnail of all the tabs you have open at a go. (Firefox users can use Foxpose to get the same functionality.) Here’s a screenshot:

Quicktabs in Internet Explorer 7

Unfortunately it looks like the RSS features don’t work in this hacked install. Either that or they still don’t work in the beta at all.

So boys and girls, have fun playing around with IE7! Web developers, go test your sites out in IE7 because it’s not going to support lots of the hacks we’re used to applying. What I’d like to see is an Internet Explorer Web Developer toolbar to help in making sure websites work with it. 

Protect your computer from Windows WMF exploit

Right after yesterday’s article on removing malware from your computer, I heard about a Windows vulnerability that allows hackers to attack your computer just by tricking you into viewing a picture. Lots of the news on the web has been geek-speek, so let me attempt to translate.

The problem results from a flaw in the Windows metafile format (WMF), an image format common in all versions of Windows. Microsoft Word Clipart, Windows Explorer thumbnails, system images are made up of WMF files. The flaw can allow a WMF image to execute some code or a small programme on your computer when you view it. This can then prompt infected machines to download all sorts of junk that attempt to blast you with unwanted advertising or even trojans that turns PCs into zombie machines for hackers.

To date, hackers have tried to take advantage of it through email viruses, MSN Messenger worms, and spam that lures users to visit a malicious website. So remember the cardinal rule of staying safe on the net: don’t open files from email or instant messenger unless you have been expecting it. This flaw affects all versions of Windows from Windows 98, including the latest versions of Windows XP.

Protecting yourself

Fortunately Microsoft is working on a patch which they schedule to release next ‘Patch Tuesday’ (10 January). However if you’re worried that you’ll be infected between now and then here are some steps you can take.

Ilfak Guilfanov, a Russian security engineer, has come up with an unofficial patch which you can download from his website. He’s not affiliated with Microsoft, but security experts have checked out his patch and gave it the ok. Also, this patch won’t work on Windows 98 and earlier.

Otherwise if you’d rather wait for the official patch, be sure to update your antivirus and antispyware virus definitions in the meantime. Unfortunately newer trojans taking advantage of the flaw can dodge virus scanners, and you may already be receiving lots of emails prompting you to open a file with the exploit, so be sure to follow the cardinal rule above.

Until next Tuesday, that’s about it. What a way for Microsoft to start the new year eh?

If you want the technical details and news, check them out here:

• Microsoft Security Advisory


• Microsoft Windows Metafile handler SETABORTPROC GDI Escape vulnerability


• BBC News | Sites exploit Windows image flaw


• Security Now! podcast episode #20 show notes

Update 6 Jan

In the fastest turnaround ever for the company, Microsoft has released its patch for the flaw. Usually patches only come out months after a bug is detected. Anyway, if you have set your Windows PC to automatically check for updates, chances are that it would have downloaded the patch by the time you are reading this. Otherwise, open up Internet Explorer (you can’t use other browsers for this) and go to http://update.microsoft.com and grab Security Update for Windows XP (KB912919).

Unfortunately, from the accompanying bulletin it appears that Windows 98 and Windows ME users are not protected. Steve Gibson to the rescue! He’s promised that his company, GRC, will be coming up with a repair for users of the older operating systems. Check his site for updates.