Microsoft releases VML fix for Windows 98

Milkro$oft has made a fix available for the IE VML vulnerability. Now
they won't come out and tell you this, but the new VGX.DLL file for
Win-2k works just file on Win-98.

Details:

Secunia is showing a variety of MS links depending on your OS:

http://secunia.com/advisories/21989/

Naturally, there is no Win-98 link.

The Win-2k link takes you to he

http://www.microsoft.com/downloads/d...displaylang=en

Where you can download this file:

IE6.0sp1-KB925486-Windows2000-x86-ENU.exe

The direct link for that file is:

http://download.microsoft.com/downlo...00-x86-ENU.exe

After you download it, use winzip to unpack it. The self-unpacking
archive will not execute on Win-98 systems.

When you unpack it, you will see a file called "vgx.dll" with a size
of 2,233 kb and a date of 9/18/06.

Navigate to this directory:

C:\Program Files\Common Files\Microsoft Shared\VGX

and rename your existing vgx.dll. Call it vgx.dl_ or vgx.bak. If you
can't rename it, it's because it's currently in use, and you need to
close all IE windows and if that doesn't work, you need to re-start
your system and then try again.

Once you re-name your existing vgx.dll, copy the new vgx.dll into that
directory.

You will not have to restart your computer. Your Win-98 system is now
patched against the VML problem.

To verify this, open the following page:

http://www.isotf.org/zert/testvml.htm

98 Guy wrote:
Milkro$oft has made a fix available for the IE VML vulnerability. Now
they won't come out and tell you this, but the new VGX.DLL file for
Win-2k works just file on Win-98.

Details:

Secunia is showing a variety of MS links depending on your OS:

http://secunia.com/advisories/21989/

Naturally, there is no Win-98 link.

The Win-2k link takes you to he

http://www.microsoft.com/downloads/d...displaylang=en

Where you can download this file:

IE6.0sp1-KB925486-Windows2000-x86-ENU.exe

The direct link for that file is:

http://download.microsoft.com/downlo...00-x86-ENU.exe

After you download it, use winzip to unpack it. The self-unpacking
archive will not execute on Win-98 systems.

When you unpack it, you will see a file called "vgx.dll" with a size
of 2,233 kb and a date of 9/18/06.

Navigate to this directory:

C:\Program Files\Common Files\Microsoft Shared\VGX

and rename your existing vgx.dll. Call it vgx.dl_ or vgx.bak. If you
can't rename it, it's because it's currently in use, and you need to
close all IE windows and if that doesn't work, you need to re-start
your system and then try again.

Once you re-name your existing vgx.dll, copy the new vgx.dll into that
directory.

You will not have to restart your computer. Your Win-98 system is now
patched against the VML problem.

To verify this, open the following page:

http://www.isotf.org/zert/testvml.htm

Thanks for letting us know, 98 Guy. I am tempted to wait for a bit and
see how it does on your 98(SE) before trying it on my 98SE system.

Dan wrote:

98 Guy wrote:
the new VGX.DLL file for Win-2k works just file on Win-98.
IE6.0sp1-KB925486-Windows2000-x86-ENU.exe

The direct link for that file is:

http://download.microsoft.com/downlo...00-x86-ENU.exe

When you unpack it, you will see a file called "vgx.dll"
Once you re-name your existing vgx.dll, copy the new vgx.dll
into that directory.

You will not have to restart your computer. Your Win-98 system
is now patched against the VML problem.

To verify this, open the following page:

http://www.isotf.org/zert/testvml.htm

Thanks for letting us know, 98 Guy. I am tempted to wait for a
bit and see how it does on your 98(SE) before trying it on my
98SE system.

You're not likely to get future status reports about this from me.

The VGX.DLL file is normally not loaded by IE or Outlook/OE when they
start. VGX.DLL is only loaded or called when IE or Outlook encounters
VML code. Normally when surfing the net, you won't know if the page
you're looking at contains VML code. The fact is the Win-2K version
of VGX.DLL seems to work seemlessly with Win-98 - I can for example
load and view the above-mentioned test web page after replacing my
existing VGX.DLL with the Win-2K version.

As far as I can tell, there's no harm in just locating your existing
VGX.DLL and renaming it so that Windows/IE/Outlook/OE can't find it
when they encounter VML code. If you do, then you will find a blank
object or place-holder on any page that contains VML code.

VML seems similar to DCOM in that it's another piece of technology
that Macro$haft thought was a good idea but was just more crap that
didn't catch on and that they didn't code properly from a security
standpoint.

Thank you for doing the leg work on that Guy, appreciate it.

The swap was an easy process and it works just fine..

Rick



98 Guy wrote:
Milkro$oft has made a fix available for the IE VML vulnerability. Now
they won't come out and tell you this, but the new VGX.DLL file for
Win-2k works just file on Win-98.

Details:

Secunia is showing a variety of MS links depending on your OS:

http://secunia.com/advisories/21989/

Naturally, there is no Win-98 link.

The Win-2k link takes you to he


http://www.microsoft.com/downloads/d...displaylang=en

Where you can download this file:

IE6.0sp1-KB925486-Windows2000-x86-ENU.exe

The direct link for that file is:


http://download.microsoft.com/downlo...00-x86-ENU.exe

After you download it, use winzip to unpack it. The self-unpacking
archive will not execute on Win-98 systems.

When you unpack it, you will see a file called "vgx.dll" with a size
of 2,233 kb and a date of 9/18/06.

Navigate to this directory:

C:\Program Files\Common Files\Microsoft Shared\VGX

and rename your existing vgx.dll. Call it vgx.dl_ or vgx.bak. If you
can't rename it, it's because it's currently in use, and you need to
close all IE windows and if that doesn't work, you need to re-start
your system and then try again.

Once you re-name your existing vgx.dll, copy the new vgx.dll into that
directory.

You will not have to restart your computer. Your Win-98 system is now
patched against the VML problem.

To verify this, open the following page:

http://www.isotf.org/zert/testvml.htm

Great. Does this mean you will FINALLY stop torturing everyone
here with your incessant prattling on this largely irrelevant
subject?

darkrats wrote:

Okay, I'm going to take the plunge and post a link to an
unofficial VML exploit patch for IE6SP1 under Windows 98/Me.
Microsoft can delete this post or complain to rapidshare
if they don't want us to have it, but I am hoping
they will just be happy for us poor abandoned 98/Me users:

How do you know that patch is for 98/ME ???

Where is that stated?

http://rapidshare.de/files/34643189/patch.zip.html

This patch has been tested on my Me machine and against a test
page designed to crash the browser. Worked perfectly.

The archive mentioned above contains an INF file as well as a couple
of other programs that seem designed to turn off some file protection
processes to perform a file substitution (ie replace the old VGX.DLL
with a new one).

The new one has the exact same file length as the last version that I
have for Win 98:

Last known good version for Win-98:

VGX.DLL March 10, 2004 Version 6.00.2800.1411 2,283,008 bytes

Version included with the above patch.zip archive:

VGX.DLL Sept 23, 2006 Version 6.0.2800.1489 2,283,008 bytes

The new Windows 2000 version of VGX.DLL released by MS:

VGX.DLL Sept 18, 2006 Version 6.00.2800.1580 2,286,080 bytes


I'm not going to try this Sept 23 version of VGX.DLL since I don't
really know it's source. I suspect that it is the result of a ZERT
patch (http://www.isotf.org/zert/) which at this time seems to have
been withdrawn given that MS has released the official patch.

thanatoid wrote:
Great. Does this mean you will FINALLY stop torturing everyone
here with your incessant prattling on this largely irrelevant
subject?

It is not irrelevant. It is important to keep 98(+98SE) machines up to
date especially since world-wide the usage is above Apple at around 3%
and above Windows ME as well which is about 1%.

http://news.softpedia.com/news/Micro...et-33363.shtml

copied below for those who do not go to potentially unsafe web sites

OneStat.com, a provider of real-time intelligence web analytics has
revealed via a press release that Microsoft's solutions are dominating
the OS global market. In this context, the analytics company
has centralized data from an estimated 50.000 subscribers in excess of
100 countries. The conclusions emitted are that Microsoft amassed a
global usage share of 96.97% with just three products.

While Windows 2000 is the second most popular operating system in the
world being found on 6.09% of machines, Windows XP is the incontestable
leader, amounting 86.80% of the OS market. Coming in third is another
Microsoft solution. Windows 98 was deemed obsolete by the Redmond
Company that has even stopped delivering support for the operating
system that still runs 2.68% of the world's computers.

Macintosh is fourth with 2.32%, but immediately followed by yet another
Microsoft title, Windows ME with 1.09%. Open source solutions have
scored a disappointing position, Linux accounting just for 0.36%, while
Windows NT came in seventh position with 0.24%. With a 0.15% Macintosh
Power PC closes the rank in last place.

21st of August 2006, 12:37 GMT | Copyright (c) 2006 Softpedia |

Dan wrote:
thanatoid wrote:
Great. Does this mean you will FINALLY stop torturing everyone
here with your incessant prattling on this largely irrelevant
subject?

It is not irrelevant.

Actually, it is.
Were you a victim?
Do you know anyone who was a victim?



--
Posted via a free Usenet account from http://www.teranews.com

98 Guy wrote:
Dan wrote:

98 Guy wrote:
the new VGX.DLL file for Win-2k works just file on Win-98.
IE6.0sp1-KB925486-Windows2000-x86-ENU.exe

The direct link for that file is:

http://download.microsoft.com/downlo...00-x86-ENU.exe

When you unpack it, you will see a file called "vgx.dll"
Once you re-name your existing vgx.dll, copy the new vgx.dll
into that directory.

You will not have to restart your computer. Your Win-98 system
is now patched against the VML problem.

To verify this, open the following page:

http://www.isotf.org/zert/testvml.htm
Thanks for letting us know, 98 Guy. I am tempted to wait for a
bit and see how it does on your 98(SE) before trying it on my
98SE system.

You're not likely to get future status reports about this from me.

The VGX.DLL file is normally not loaded by IE or Outlook/OE when they
start. VGX.DLL is only loaded or called when IE or Outlook encounters
VML code. Normally when surfing the net, you won't know if the page
you're looking at contains VML code. The fact is the Win-2K version
of VGX.DLL seems to work seemlessly with Win-98 - I can for example
load and view the above-mentioned test web page after replacing my
existing VGX.DLL with the Win-2K version.

As far as I can tell, there's no harm in just locating your existing
VGX.DLL and renaming it so that Windows/IE/Outlook/OE can't find it
when they encounter VML code. If you do, then you will find a blank
object or place-holder on any page that contains VML code.

VML seems similar to DCOM in that it's another piece of technology
that Macro$haft thought was a good idea but was just more crap that
didn't catch on and that they didn't code properly from a security
standpoint.

Fantastic, I followed your instructions and saw the two colored boxes
with Internet Explorer and it works fine. Good point about making the
original vgx.dll to a vgx.bak file just in case it is needed in the
future for some reason which I highly doubt. Thanks so much for going
to the trouble of keeping 98SE machines secure. I now have a bunch of
work in patching all the 98SE machines at school. grin P.S. I
wonder when 2000 goes into unsupported mode as well if the XP and then
Vista patches will be able to be deconstructed and broken down into
pieces and used like this patch has been by us.

|
| Actually, it is.
| Were you a victim?
| Do you know anyone who was a victim?
|

I know victims. It is NOT irrelevant. This is a IE problem, not an OS problem.
Microsoft has decided to cut-off support for Win9x/ME. However that does NOT make Win9x/ME
users less vulnerable. If one visits a VMFill Exploit based web site, they can be infected
in seconds and since many of the sites are using NEW malware, their respective AV software
may not detect tghe malware. As of my last test, the most commonly used freebies didn't
recognize an HTML file known to use the VMFill Exploit. Thus a Win98 user using AVG has a
strong possibility of being infected.

This thread is very rellevant !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm