It's not GPOs. DEP is probably not enabled. Good guide: http://windowssecrets.com/2007/05/03/01-How-DEP-can-protect-your-PC
-----Original Message----- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Thursday, December 11, 2008 1:05 PM To: NT System Admin Issues Subject: RE: 0-day IE Exploit "in the wild" Then you have a group policy controlling it. > -----Original Message----- > From: HELP_PC [mailto:g...@enter.it] > Sent: Thursday, December 11, 2008 2:02 PM > To: NT System Admin Issues > Subject: R: 0-day IE Exploit "in the wild" > > Yes only in Vista but the option is dimmed ! > > > GuidoElia > HELPPC > > -----Messaggio originale----- > Da: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] > Inviato: giovedì 11 dicembre 2008 19.52 > A: NT System Admin Issues > Oggetto: RE: 0-day IE Exploit "in the wild" > > "Enable memory protection to help mitigate online attacks." Is the DEP > option. Near the bottom of the Advanced tab. Vista with IE 7 only I > believe, not available in XP. > > To answer the shadowserver question, it is safe it is a security > website. On the linked pages is a list of websites that have the > exploit that you could block yourself if you want. > > > > -----Original Message----- > > From: HELP_PC [mailto:g...@enter.it] > > Sent: Thursday, December 11, 2008 1:46 PM > > To: NT System Admin Issues > > Subject: R: 0-day IE Exploit "in the wild" > > > > And I cannot find DEP option in IE settings > > > > > > GuidoElia > > HELPPC > > > > -----Messaggio originale----- > > Da: Glen Johnson [mailto:gjohn...@vhcc.edu] > > Inviato: giovedì 11 dicembre 2008 19.43 > > A: NT System Admin Issues > > Oggetto: RE: 0-day IE Exploit "in the wild" > > > > I'm confused, nothing new there. > > Should I block the url listed below or something from that url. > > I thought I saw something in the write-up about shadowserver so I'm > > hesitant to click on the link to read. > > > > -----Original Message----- > > From: Ziots, Edward [mailto:ezi...@lifespan.org] > > Sent: Thursday, December 11, 2008 12:59 PM > > To: NT System Admin Issues > > Subject: RE: 0-day IE Exploit "in the wild" > > > > Also block the following. > > > > http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20081210 > > > > > > Z > > Edward E. Ziots > > Network Engineer > > Lifespan Organization > > Email: ezi...@lifespan.org > > Phone: 401-639-3505 > > MCSE, MCP+I, ME, CCA, Security +, Network + > > ________________________________________ > > From: Ziots, Edward [mailto:ezi...@lifespan.org] > > Sent: Thursday, December 11, 2008 12:55 PM > > To: NT System Admin Issues > > Subject: RE: 0-day IE Exploit "in the wild" > > > > They got exploit code out for IE 7.0 and I have "heard" that IE 6.0 > > isnt that far behind. I have switched to Firefox for browser for the > > time being. Don't be surprised if they go "out of Cycle" with this > one. > > Just what we all need at Christmas. > > > > Z > > > > Edward E. Ziots > > Network Engineer > > Lifespan Organization > > Email: ezi...@lifespan.org > > Phone: 401-639-3505 > > MCSE, MCP+I, ME, CCA, Security +, Network + > > ________________________________________ > > From: Miller Bonnie L. [mailto:mille...@mukilteo.wednet.edu] > > Sent: Thursday, December 11, 2008 12:12 PM > > To: NT System Admin Issues > > Subject: 0-day IE Exploit "in the wild" > > > > http://isc.sans.org/ > > > > http://www.microsoft.com/technet/security/advisory/961051.mspx > > > > -Bonnie > > > > > > > > > > > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~