14 DAY TRIAL // One aspect that contributed to the latest widespread infection affecting the Windows platform was the fact that customers were running unsupported copies of the operating system. Microsoft is currently fighting the Conficker worm, a piece of malicious code that can compromise a variety of Windows platforms including Windows 7, Windows Vista SP1 and Windows XP SP3. According to Roger Halbheer, chief security advisor of Microsoft EMEA (Europe Middle East and Africa), the Conficker worm was synonymous with the realization that “a lot of customers” continue to use unsupported copies of Windows in their environments, catalyzing the spreading of the malware.
“There is a webpage called Microsoft Support Lifecycle where you find all the information on the lifecycle of our products. Let me just quote two things. Through the policy, Microsoft will offer a minimum of 10 years of support (5 years Mainstream Support and 5 years Extended Support) at the supported service pack level for Business and Developer products. When a new service pack is released, Microsoft will provide either 12 or 24 months of support for the previous service pack (Remark: It is 24 months for Windows),” Halbheer stated.
The Conficker was spreading initially in combination with exploits targeting a critical vulnerability impacting Windows Server Service. Microsoft did issue the MS08-067 security bulletin in October 2008, however, the security update covers exclusively operating systems still supported by Microsoft. Customers running older versions of Windows received no patch for the Windows Server Service flaw, and continue to be at risk of exploits. The next Windows release to fatten up the ranks of unsupported operating systems is Windows Server 2003 Service Pack 1 (SP1).
“Windows Server 2003 Service Pack 1 will be retired on 14. April 2009. This means that this is the last time you will get Security Updates for SP1! If you did not already, please start to roll-out SP2 immediately,” Halbheer added.