Windows Secrets logo

 

 

   
       
   
Windows Secrets Newsletter • Issue 199 • 2009-05-28 • Circulation: over 400,000

   
   
AD

RegCure

   Free download — speed up your computer
RegCure will automatically and instantly fix all of your Windows errors. This will result in a fully optimized PC that runs fast and error-free. RegCure was developed by a talented team of over 100 professionals with an end goal of creating an application that is user-friendly and accomplishes the very crucial task of keeping your running smoothly. Download RegCure now and optimize your entire PC in under 2 minutes!
RegCure


   
   
Table of contents
TOP STORY: Shavlik, Secunia top Windows Update alternatives
KNOWN ISSUES: Free program from Microsoft stops WGA
WACKY WEB WEEK: Thanks to Amazon, reading is fun again
LANGALIST PLUS: Undo accidental reformats of external drives
PERIMETER SCAN: Three free programs improve your PC's security
PATCH WATCH: Microsoft calls IE 8 an important security patch

   
       
   
ADS

Free PC performance & security scan   Free PC performance & security scan
Take a few minutes to find out why your PC is so slow. Run the free PC Pitstop Optimize 2.0 scan and receive a free custom report detailing common issues that might be keeping your PC from running at full speed. Over 100 million scans run. Scan now!
PC Pitstop

Never reinstall your XP again   Never reinstall your XP again
The ultimate professional repair tool. New technology: no set-up, no loss of data or applications. Free PC booster with every scan, get it now!
Reimage

See your ad here

   
   
TOP STORY

Shavlik, Secunia top Windows Update alternatives

Susan Bradley By Susan Bradley

If you followed the instructions in my May 21 Top Story to build new systems without installing the trouble-prone Windows Genuine Advantage app, you may want to patch your PC using something other than Windows Update, which offers again and again to install WGA.

My favorite third-party software update service is currently the Shavlik Patch Google Gadget, although Secunia's Personal Software Inspector is a worthwhile alternative.

In today's article, I compare several third-party patching tools that act as replacements for Windows Update and Microsoft Update. (Windows Update patches only Windows itself, whereas the more-thorough Microsoft Update finds patches for Microsoft applications in addition to Windows.)

My conclusion: You need to pick one tool you like best and stick with it. An update service may work well for one person and not so well for another, depending on your specific needs and preferences. One good patch checker should be all you need.

The following are the best and worst features of what I consider the four most-significant updaters for home users and small businesses:
  • Shavlik Patch Google Gadget. The biggest factor in this service's favor is that I've come to trust Shavlik. I use the company's business-class patch platform at my office. That tool has correctly identified many programs that Microsoft's own updaters got wrong.

    The Patch Gadget's biggest drawback is its reliance on the Google Desktop program. In 2006, several reports questioned Google Desktop's ability to keep your search activities private. One such report is available as a downloadable PDF from the University of Michigan. The school's Information Technology Security Services went so far as to recommend against deploying Google Desktop.

    I'm also concerned about Google Desktop's use of your PC's resources as well as its annoying news pop-ups. I wouldn't blame you one bit if you uninstalled Google Desktop each time you finished using the Shavlik update tool and reinstalled it only when the time came to check for patches again.

    To get Shavlik's program, visit the company's download page.

  • Secunia Online Software Inspector (OSI). The online version of Secunia's software-update service lets you scan your system for security patches without your having to install anything. Unfortunately, the service requires Java to run and doesn't work well within the new Internet Explorer 8, although you could try running the service in IE 8's compatibility mode.

    More importantly, OSI sometimes generates inconsistent results, requiring that you scan your system repeatedly. For example, the service properly noted that I had two versions of the Java Runtime Environment on a test XP system: the outdated version 6.7 and the most-recent version 6.13. However, OSI didn't instruct me to uninstall Java 6.7.

    To run OSI, visit Secunia's vulnerability scanning page.

  • Secunia Personal Software Inspector (PSI). Secunia's standalone updater is more robust than the firm's online scanner. In addition, the installed updater constantly checks your PC to determine whether your software is fully patched. However, when I've used PSI to update machines, on rare occasions the scan has failed and I've had to reinstall PSI to get it to scan properly.

    Even worse, many of the scanner's results are inconsistent. If you use PSI, I recommend that you run Secunia's OSI online scan in addition to PSI, just to double-check the standalone scanner's results.

    For more information on the Personal Software Inspector, visit Secunia's site.

  • Belarc Advisor. This venerable and free system-maintenance utility has an interface only a geek could love. The program provides information on all the software on your PC, including serial numbers and key codes. It also lists all hardware installed and other information about your system.

    Unfortunately, Belarc reports only on missing Microsoft patches. If you're looking for a tool that updates only Windows and Microsoft apps, this program may be the only updater you need. However, anyone looking for a tool that identifies out-of-date third-party software should use one of the updaters described above.

    You can download Belarc Advisor from the vendor's site.
Shavlik Patch Google Gadget Figure 1. In one case, the Shavlik Patch Google Gadget identified on a test machine an out-of-date version of the Adobe Flash Player 6, a fact that Secunia's Personal Software Inspector had missed.
__________


Although I'm not thrilled with Shavlik's use of Google Desktop as its platform, I do like its thoroughness.

Secunia's tool recently missed the fact that a test machine I was scanning was running an unpatched build of Adobe Flash Player 6. Shavlik correctly pointed me to an Adobe alert indicating that the version of the player on my test PC was seriously out-of-date. (See Figure 1.)

Interestingly, the Shavlik updater also proactively recommended that I install the patch described in Microsoft Knowledge Base article 953155 for the Internet Printing service.

While this printing service isn't installed on most Windows XP systems, it could be used on some — which explains why you want to patch proactively. Neither Secunia's PSI nor Microsoft's own updater indicated that the new patch was missing on my XP SP3 machine.

Once you've installed the Shavlik Patch Google Gadget, click Begin Scan. When the scan is done, choose View details, accept the product's EULA (the first time you use it), and install any of the patches the program offers you — except WGA.

Whichever third-party updater you choose, be sure to run it on all your PCs within a few days of each Patch Tuesday — the second Tuesday of the month — when Microsoft releases new patches.

If you prefer, you can run Redmond's own Microsoft Update and then follow that scan with a Shavlik or Secunia scan to catch patches needed for non-Microsoft applications.

But today, third-party scanning programs have progressed to the point where they can keep all your Microsoft software and all your major non-Microsoft software safely patched. That's a claim Microsoft Update can't make.

Susan Bradley recently received an MVP (Most Valuable Professional) award from Microsoft for her knowledge in the areas of Small Business Server and network security. She's also a partner in a California CPA firm.

Table of contents

   
   
ADS

Are your computer's drivers up-to-date?   Are your computer's drivers up-to-date?
Driver Detective provides the most up-to-date drivers specific to your computer! With more than 1 million drivers, Driver Detective saves you endless hours of work and aggravation normally associated with updating drivers.
Driver Detective

Get your message seen by 400,000 readers   Get your message seen by 400,000 readers
Does your company offer a product or service? Now you can place an ad in the Windows Secrets Newsletter and be seen by more than 400,000 active buyers of PC hardware and software. Bid as much or as little as you like to get the ideal ad placement.
Windows Secrets Newsletter

See your ad here

   
   
KNOWN ISSUES

Free program from Microsoft stops WGA

Brian Livingston By Brian Livingston

False readings from the Windows Genuine Advantage (WGA) applet were described in a May 21 Top Story by contributing editor Susan Bradley, who described a way to install Windows XP without ever downloading or running WGA.

If you've already installed WGA on XP, however, a program known as Autoruns — which is downloadable from Microsoft.com — lets you easily deactivate the applet.

In addition to Susan's articles on the subject, Dennis O'Reilly's Known Issues column on May 21 featured comments by readers who'd been seriously affected by erroneous "nongenuine" readings from WGA.

Susan linked to WGA removal instructions provided by Microsoft (see Knowledge Base article 921914), but she reported that the steps work only on early, "pilot" versions of WGA, not later versions.

WS reader Eric Levy suggests a simple way for legitimate Windows users who are suffering from false positives to disable WGA: Autoruns. This is a free program developed by SysInternals, a company started by developers Mark Russinovich and Bryce Cogswell and acquired in 2006 by Microsoft:
  • "In Susan Bradley's article, 'Get all security patches without WGA nightmares,' she mentions having to deal with the WGA tool at boot if Automatic Updates automatically installed it. She states that you either have to let it run or click Cancel every time you boot.

    "Unhappily, I've already had to deal with this very issue and have found a beautiful way out of it. The first time it comes up, click Cancel to stop the WGA tool from setting itself up. Once the desktop is loaded and stabilized, execute autoruns.exe from SysInternals (Microsoft).

    "Select the Scheduled Tasks tab and remove the check mark next to the line that contains the Windows Genuine Advantage tool....

    "That's it! Problem solved. Mark Russinovich comes through again!"
SysInternals' Autoruns Scheduled Tasks tab
Figure 1. Uncheck the WGA entry (not shown in this figure) under the Scheduled Tasks tab of Autoruns to stop the validator from running.

There are other ways to edit entries in Scheduled Tasks, but Autoruns is a great utility that all Windows users should have at hand. You can download Autoruns from the utility's page on Microsoft's TechNet site. The download page also includes instructions for using the program.

For more details on how to detect and configure WGA in XP and Vista, see WS contributor Scott Dunn's Nov. 29, 2007, article.

WGA morphs into Windows Activation Technologies

Susan's article also elicited a response from Microsoft spokeswoman Jill Lovato. Susan had mentioned that WGA will be renamed Windows Activation Technologies (WAT) in the forthcoming Windows 7. Jill pointed to a blog post by Alex Kochis, director of Microsoft's Genuine Windows program, who says:
  • "As many of you know, our online validation program, known as Windows Genuine Advantage, is a program designed for use with Windows XP.... As a result of the success of WGA, we built validation technology into Windows Vista from the beginning. These components were new and were built for use in Windows Vista. The same components, though tuned up a bit, form the basis of our activation and validation technology in Windows 7. To better reflect this latest generation of technology, we will refer to the activation and validation components in Windows Vista and Windows 7 by a new name, Windows Activation Technologies."
Microsoft posts statements about how WGA works in XP and Vista on its MS Genuine Advantage Program information page. Windows Secrets will cover the behavior of WAT in future stories.

Reader Eric Levy will receive a gift certificate for a book, CD, or DVD of his choice for sending a tip we printed. Send us your tips via the Windows Secrets contact page.

The Known Issues column brings you readers' comments on our recent articles. Brian Livingston is editorial director of WindowsSecrets.com.

Table of contents

   
   
WACKY WEB WEEK

Thanks to Amazon, reading is fun again

Kindle 3 By Katy Abby

If you're like me, you've got a stack of books you've been meaning to read that just doesn't seem to get any smaller. Somehow, the idiosyncrasies of everyday life always manage to trump any reading time I've set aside ... but what do you expect me to do? Ignore the season finale of "The Biggest Loser"?!? Come on!

Finally, the folks at Amazon.com have it all figured out with the Kindle 3, their newest release. Check out this commercial parody of the company's, ahem, novel approach to reading that will make a bookworm out of even the most-determined ignoramus. I can't wait to read that new Ben Stiller book! Play the video

Table of contents

   
   
PERMALINKS

Use these permalinks to share info with friends

We love it when you include the links shown below in e-mails to your friends. This is better than forwarding your copy of our e-mail newsletter. (When our newsletter is forwarded, some recipients click "report as spam," and corporate filters start blocking our e-mails.)

The following link includes all articles this week: http://WindowsSecrets.com/comp/090528

Free content posted on May 28, 2009:

 
You get all of the following in our paid content:

Get our paid content by making any contribution

12 months of paid content

There's no fixed fee! Contribute whatever it's worth to you
Readers who make a financial contribution of any amount by June 3, 2009, will immediately receive the latest issue of our full, paid newsletter and 12 months of new paid content. Pay as much or as little as you like — we want as many people as possible to have this information.
 
John Lester E. in the Philippines

A portion of your support helps children in developing countries
Each month, we send a full year of sponsorship to a different child. Your contributions in May are helping us to sponsor John Lester E., an 8-year-old boy from the Philippines who has three siblings and likes playing basketball. Children International channels development aid from donors to John Lester and his community. We also sponsor kids through Plan USA, Save the Children, and other respected agencies. More info

Use the link below to learn more about the benefits of becoming a paid subscriber!

More info on how to upgrade

Thanks in advance for your support!

   
   

Table of contents

   
   
YOUR SUBSCRIPTION

The Windows Secrets Newsletter is published weekly on the 1st through 4th Thursdays of each month, plus occasional news updates. We skip an issue on the 5th Thursday of any month, the week of Thanksgiving, and the last two weeks of August and December. Windows Secrets resulted from the merger of several publications: Brian's Buzz on Windows and Woody's Windows Watch in 2004, the LangaList in 2006, and the Support Alert Newsletter in 2008.

Publisher: WindowsSecrets.com LLC, Attn: #120 Editor, 1700 7th Ave., Suite 116, Seattle, WA 98101-1323 USA. Vendors, please send no unsolicited packages to this address (readers' letters are fine).

Editorial Director: Brian Livingston. Senior Editor: Ian Richards. Editor-at-Large: Fred Langa. Technical Editor: Dennis O'Reilly. Program Director: Tony Johnston. Program Manager: Ryan Biesemeyer. Web Developer: Damian Wadley. Research Director: Katy Abby. Copyeditor: Roberta Scholz. Contributing Editors: Susan Bradley, Scott Dunn, Mark Joseph Edwards, Michael Lasky, Woody Leonhard, Ryan Russell, Becky Waring.

Trademarks: Microsoft and Windows are registered trademarks of Microsoft Corporation. The Windows Secrets series of books is published by Wiley Publishing Inc. The Windows Secrets Newsletter, WindowsSecrets.com, Support Alert, LangaList, LangaList Plus, WinFind, Security Baseline, Patch Watch, Perimeter Scan, Wacky Web Week, the Logo Design (W, S or road, and Star), and the slogan Everything Microsoft Forgot to Mention all are trademarks and service marks of WindowsSecrets.com LLC. All other marks are the trademarks or service marks of their respective owners.

HOW TO SUBSCRIBE: Anyone may subscribe to this newsletter by visiting our free signup page.

WE GUARANTEE YOUR PRIVACY:

1. We will never sell, rent, or give away your address to any outside party, ever.
2. We will never send you any unrequested e-mail, besides newsletter updates.
3. All unsubscribe requests are honored immediately, period.  Privacy policy

HOW TO UNSUBSCRIBE: To unsubscribe from the Windows Secrets Newsletter,
Copyright © 2009 by WindowsSecrets.com LLC. All rights reserved.

Table of contents