SOURCE: Shavlik Technologies

January 21, 2010 13:57 ET

Shavlik Comments on Emergency Out-of-Band Patch for Internet Explorer Attack Code Used to Hack Google

Shavlik NetChk Protect Leverages Single Agent to Both Detect and Block, as Well as Ensure All Systems Patched Against This Zero Day IE Flaw

ST. PAUL, MN--(Marketwire - January 21, 2010) - Shavlik Technologies, the market leader in simplifying and automating critical-to-perform and manage IT operations, today commented on the latest Microsoft out-of-band patch that repairs a zero-day flaw in Internet Explorer. Shavlik is also offering a webinar to demonstrate how its single agent solution can do double duty by both applying the out-of-band patch and protecting systems by detecting and blocking the exploit code.

"Today Microsoft released a new out-of-band patch designed to address the serious undiscovered flaw in Internet Explorer that was used to launch a zero-day attack against Google users in China," said Jason Miller, data and security team leader, Shavlik Technologies. "The exploit allowed hackers to trick users into installing malware on targeted machines which could then be used to steal data.

"The attack looks like a message that's sent from a trusted source via email or social media, so when the user clicks on a link or file, it triggers the hack. The exploit opens a back door which then compromises the machine of the target. This attack was designed to exploit PCs, netbooks and laptops using Internet Explorer version 6 running on Windows XP. By issuing this out-of-band patch now, Microsoft has cut the time hackers could use to exploit the vulnerability in advance of the February 9 Patch Tuesday bulletin releases."

Shavlik reports that users of Shavlik NetChk Protect and its Shavlik NetChk Agent are protected against this flaw. The Shavlik NetChk Agent, which integrates Sunbelt Software's award-winning VIPRE antivirus + antispyware engine, detects the exploit code and blocks it from executing. IT administrators can use the Shavlik NetChk console to quickly and easily determine that VIPRE threat signature files and engines are up-to-date. Once the out-of-band patch is released, the Shavlik NetChk Agent will deploy the patch. The Shavlik NetChk Agent reduces agent bloat by using a single agent to provide patch management and antivirus + antispyware.

Shavlik NetChk Protect is consistently ranked the best solution available for simplifying and automating critical IT operations for Microsoft Windows environments. Shavlik reports that corporate computing users running Windows Vista or Windows 7 would be challenged to exploit the flaw effectively due to advanced security protections already built into these newer versions of the Windows OS.

"However, just because it's more difficult to exploit this flaw doesn't mean that Windows Vista and Windows 7 users shouldn't apply this patch immediately," said Miller.

Live Webinar

Register Here to learn more about how to protect your network from this zero-day attack and how to simplify deployment of MS08-067 and minimize operational impact, register for a webinar held by Shavlik Technologies' security experts on Monday, January 25th at 11:00am CT.

About Shavlik NetChk Protect

To simplify and automate critical to perform and manage tasks, IT managers choose Shavlik NetChk Protect, the industry's top solution for lowering operational costs and increasing visibility and control. NetChk Protect simplifies and automates identifying and fixing gaps in 'must do' tasks such as asset discovery, patch management, configuration management, and antivirus + antispyware, resulting in an enterprise that is ready to spend less -- time, budget, and IT staff -- on these critical to perform and manage tasks across physical systems and virtual machines.

About Shavlik Technologies

Shavlik Technologies, LLC is the market leader for simplifying and automating critical-to-perform and manage IT operations including patch management, antivirus + antispyware, configuration management, asset management, and policy and compliance auditing. Shavlik's innovative approach to simplifying and automating enterprise wide system management frees up IT staff for initiatives that grow your business without sacrificing the visibility and control needed to ensure system availability and security.

With thousands of customers worldwide, Shavlik is trusted to provide solutions that can be relied upon to identify gaps and automatically and reliably fix systems that are missing patches or don't conform with the corporate-defined configuration baseline. More information can be found at

Shavlik Technologies is a registered trademark in the United States and certain other countries, of Shavlik Technologies. Additional Shavlik product names are either registered trademarks or trademarks of Shavlik Technologies. All other trademarks mentioned in this document are the property of their respective owners.

Contact Information

  • Media Contacts:
    Dan Chmielewski
    Madison Alexander PR
    (714) 832-8716
    Email Contact

    Jill Teut
    Shavlik Technologies, LLC
    (651) 255-5432
    Email Contact