Bug gives attackers complete control of Windows PCs

the register ^

[Gomez]

ping

[al baby]

I never get online so I think I am ok

[isom35]

thank goodness I’m still using windows 3.1 on my 386 here.

[zot]

Ping

[Inyo-Mono]

The most useful mitigation is to turn off the remote assistance tool, but the advisory provides several other temporary fixes for those who rely on the feature.

Where is the "remote assistance tool?"

[Gomez]

Control Panel => System => Remote tab

[mlocher]

Sometimes I think that windows is akin to my attempts to do plumbing in my home. I fix one leak, only to find that I have caused two more.

[NoCmpromiz]

Where is the "remote assistance tool?"

From Windows Help....

Requesting help using Remote Assistance
Sometimes the best way to fix a problem is to have someone show you how. Remote Assistance is a convenient way for a distant friend to connect to your computer from another computer running a compatible operating system, such as Windows XP, and walk you through your solution.

By following the easy steps in Remote Assistance, you can use Windows Messenger Service or an e-mail message to invite a friend to connect to your computer. After he or she is connected, your friend will be able to view your computer screen and chat with you in real time about what you both see. With your permission, your assistant can even use his or her mouse and keyboard to work with you on your computer.

To start Remote Assistance
Click Start, and then click Help and Support.
Click Invite a friend to connect to your computer with Remote Assistance.

Notes

Both you and your helper must be using either Windows Messenger Service or a MAPI-compliant e-mail account such as Microsoft Outlook or Outlook Express.
You and your helper need to be connected to the Internet while using Remote Assistance.
If you are working on a local area network, firewalls might stop you from using Remote Assistance. In this case, check with your network administrator before using Remote Assistance.
If for some reason you are unable to send an invitation by using e-mail or Windows Messenger Service, you can create and save an invitation. On the first page of Remote Assistance, click Invite someone to help you. On the next page, click Save invitation as a file (Advanced), and follow the instructions to save the file. You can then send the saved invitation file to your helper in the manner you choose, such as copying it onto a floppy disk or a shared network location, sending it over another e-mail service or an FTP connection, and so on.

Another fine "feature" from our friends in Redmond that lets someone else muck around in the guts of your computer..

[Inyo-Mono]

Thanks. That was easy. Just wanted to make sure it was shut off.

[Inyo-Mono]

Thanks, but I wanted to shut it off, not turn it on.

[tflabo]

There should be stiff criminal penalties on hackers and creators of vicious software purposely attacking other PC’s.

[GreyFriar]

H’mmm, a real threat or disinformation to get everyone to buy Windows 7 or Mac’s?

[zot]

Looks like a real threat to me. I normally use a Mac online, but I’m going to turn off the remote assistance tool in my XP computer if I can figure out how to do that.

[GreyFriar]

I didn’t even know there was remote assistance tool on my XP.

[Hillarys Gate Cult]

Control Panel - System - Remote Tab - Uncheck Box

[zot]

Likewise. I’ll have to hunt for it.

[Cold Heat]

Remote assistance has been disable on my computers since they first came out with it. You disable it, and make sure it is not allowed as a exception on your firewall just to be sure.

[ThunderSleeps]

Yet another reason why I use Linux as my OS of choice...

[Ron C.]

For XP - do the following:

start > settings > control panel > system > remote tab > remote assistance > click advanced > uncheck 'Allow this computer to be controlled remotedly > click OK > uncheck 'Allow Remote Assistance invitations to be sent from this computer > click apply at the bottom > last, click OK